Secure universal transaction system

• US 7,886,156 B2
• Filed: 09/18/2006
• Issued: 02/08/2011
• Est. Priority Date: 09/18/2006
• Status: Expired due to Fees

• Current Assignee: John Franco Franchi
• Original Assignee: John Franco Franchi
• Inventors: Franchi, John Franco
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Hailu; Teshome
• Application Number:
  US11/532,580
• Publication Number:
  US 20080072064A1
• Time in Patent Office: 1,604 Days
• Field of Search: 713/186
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 30/0641 Shopping interfaces

Abstract

A secure universal transaction system includes an operations and resource component, at least one communication device for enabling user interaction with the operations and resource component, and a secure token associated with each user of the system. The operations and resource component includes a first biometric security component, a second security component, and a communication component for enabling secure communication between the operations and resource component and at least one network. Each communication device includes a wired or wireless token interface, a biometric reader for enabling a user to input a biometric reading, a wired or wireless communication component for enabling communication between the communication device and the operations and resource component, a user input device, and an output device. Each secure token includes a token security component for generating a security code and a data storage component for storing user data. User access to the operations and resource component is permitted only when the secure token is interfaced with the token interface of the communication device, the biometric reading entered by the user matches a biometric reading associated with the secure token in the biometric security component of the operations and resource component, and the security code generated by the token security component matches a corresponding security code associated with the secure token in the second security component of the operations and resource component.

Claims

1. A secure universal transaction system, comprising:

an operations and resource component, including

a first biometric security component,

a second security component,

a communication component for enabling communication between the operations and resource component and at least one network,

a processor, and

a storage component for storing user function information including a plurality of software applications and data required to enable user access to a plurality of networks and user services;

a communication device for enabling user interaction with the operations and resource component, the communication device including

a token interface,

a biometric reader for enabling a user to input a biometric reading,

a communication component for enabling communication between the communication device and the operations and resource component,

a user input component for inputting user commands and information into the communication device,

an output component for providing information to the user,

a processor, and

a data storage component,

wherein the communication device downloads a customized subset of the stored user function information from the operations and resource component, thereby enabling customized user access to software applications, networks and user services via the communication device, wherein the customized user access includes at least one of download of software requested by the user and access to software programs stored and running on at least one network via the user'"'"'s communication device; and

a secure token adapted to interface with the token interface of the communication device, including

a token security component for generating a security code, and

a readable and writable data storage component for storing user data including customized system function access data associated with an owner of the token,

wherein user access to the operations and resource component is permitted only when the secure token is interfaced with the token interface of the communication device, the biometric reading entered by the user matches a biometric reading stored in the data storage component of the secure token, and the security code generated by the token security component matches a corresponding security code associated with the secure token in the second security component of the operations and resource component,

wherein the customized subset of the stored user function information downloaded from the operations and resource component to the communication device is based upon the customized system function access data stored in the secure token, and

wherein the user data stored on the secure token may be modified by the user or the operations and resource component via the communication device.

2. A secure universal transaction system according to claim 1, wherein the operations and resource component is implemented as a centralized computer system.

3. A secure universal transaction system according to claim 1, wherein the operations and resource component is implemented as a network of distributed computer systems.

4. A secure universal transaction system according to claim 1, wherein the biometric reader is a device for obtaining a retinal image and the first biometric security component stores a retinal image associated with the user of the secure token.

5. A secure universal transaction system according to claim 1, wherein the biometric reader is a device for obtaining a digital fingerprint image and the first biometric security component stores a digital fingerprint image associated with the user of the secure token.

6. A secure universal transaction system according to claim 1, wherein the biometric reader is a device for obtaining a vein pattern image and the first biometric security component stores a vein pattern image associated with the user of the secure token.

7. A secure universal transaction system according to claim 1, wherein the biometric reader is a device for obtaining a voice input and the first biometric security component stores voice recognition data associated with the user of the secure token.

8. A secure universal transaction system according to claim 1, wherein all communications between the operations and resource component, the secure token, and the communication device are encrypted.

9. A secure universal transaction system according to claim 1, wherein the second security component of the operations and resource component communicates with the token security component to generate an access code using an evolving encryption or other security algorithm.

10. A secure universal transaction system according to claim 1, wherein each data element stored in the operations and resource component is protected from access via the at least one network by an electronic tag associated with the data element that restricts access to authorized users.

11. A secure universal transaction system according to claim 1, wherein the operations and resource component enables user access to the Internet, at least one public network, or at least one private network via the communication device.

12. A secure universal transaction system according to claim 11, wherein the communication device enables wireless access to the Internet, the public network, or the private network.

13. A secure universal transaction system according to claim 1, wherein the operations and resource component communicates with the communication device using wireless communication technology.

14. A secure universal transaction system according to claim 1, wherein the operations and resource component communicates with the communication device using wired communication technology.

15. A secure universal transaction system according to claim 1, wherein the data storage component of the operations and resource component stores software, data, access links, personal preferences, financial data, or other user data.

16. A secure universal transaction system according to claim 1, wherein the token interface provides an electrical contact through which the secure token provides and receives data from the communication device.

17. A secure universal transaction system according to claim 1, wherein the token interface provides a wireless data interface through which the secure token provides and receives data from the communication device.

18. A secure universal transaction system according to claim 1, wherein the user input component includes a keypad.

19. A secure universal transaction system according to claim 1, wherein the user input component includes a touch screen.

20. A secure universal transaction system according to claim 1, wherein the user input component includes a microphone.

21. A secure universal transaction system according to claim 1, wherein the output component includes a display screen.

22. A secure universal transaction system according to claim 1, wherein the output component includes a printer.

23. A secure universal transaction system according to claim 1, wherein the output component includes an audio speaker.

24. A secure universal transaction system according to claim 1, wherein the secure token is round in shape and includes at least one contact electrode.

25. A secure universal transaction system according to claim 1, wherein the secure token is polygonal in shape.

26. A secure universal transaction system according to claim 1, wherein there are a plurality of communication devices used by a plurality of users to access the operations and resource component.

27. A secure universal transaction system according to claim 26, wherein at least one of the plurality of users is permitted a different level of access to the operations and resource component than the others of the plurality of users.

28. A secure universal transaction system according to claim 1, wherein the communication device includes a locator for identifying the geographical location of the communication device.

29. A secure universal transaction system according to claim 1, wherein the secure token includes a locator for identifying the geographical location of the secure token.

30. A secure universal transaction system according to claim 1, wherein the operations and resource component provides postal functions for users of the system.

31. A secure universal transaction system according to claim 30, wherein the each user is assigned a unique postal routing code, each user provides delivery information that is associated with the user'"'"'s unique postal routing code, and the operations and resource component accesses the delivery information associated with the user'"'"'s unique postal routing code to direct mail to the user.

32. A secure universal transaction system according to claim 31, further comprising a document delivery system in which a document to be delivered to a recipient is electronically transmitted to a postal or other outlet servicing the recipient location and printed at the postal or other outlet servicing the recipient location by a secure printing system for delivery to the recipient.

33. A secure universal transaction system according to claim 1, wherein the operations and resource component provides user access to educational software and facilitates user participation in educational courses.

34. A secure universal transaction system according to claim 1, wherein the operations and resource component enables the user to conduct electronic transactions using the communication device.

35. A secure universal transaction system according to claim 34, wherein the operations and resource component enables the user to perform real-time pricing comparisons and obtain retail outlet location information using the communication device.

36. A secure universal transaction system according to claim 34, wherein an item to be purchased via the system has an associated authentication certification created by the communication device of a seller of the item.

37. A secure universal transaction system according to claim 34, wherein a sale amount associated with sale of an item performed via the system by a seller to a buyer is credited to the seller only upon verification of delivery of the item to the buyer.

38. A secure universal transaction system according to claim 1, wherein the operations and resource component enables the user to participate in voting and other governmental functions.

39. A secure universal transaction system according to claim 1, wherein the operations and resource component enables the user to conduct electronic financial transactions using the communication device.

40. A secure universal transaction system according to claim 1, wherein the operations and resource component enables the user to access entertainment activities and products using the communication device.

41. A secure universal transaction system according to claim 1, wherein the operations and resource component provides user access via the communication device to a global trading system, wherein transactions in the global trading system are conducted using an international value unit that has a geographically variable value index based upon valuation of unequalized goods in geographic regions in which the global trading system operates, wherein the operations and resource component generates the geographically variable value index and calculates a regional value of the international value unit in each geographic region in which the global trading system operates, and wherein the international value unit equalizes a value of goods, services, and resources worldwide.

42. A communication device for enabling a user to access a secure universal transaction system, comprising:

a token interface,

a biometric reader for enabling the user to input a biometric reading,

a communication component for enabling communication between the communication device and an operations and resource component, wherein the operations and resource component stores user function information including a plurality of software applications and data required to enable user access to a plurality of networks and user services,

a user input component to enable the user to input commands and information into the communication device,

an output component for providing information to the user,

a processor, and

a data storage component,

wherein the token interface is adapted to interface with a secure token provided by the user such that user access to the operations and resource component via the communication device is permitted only when the secure token is interfaced with the token interface of the communication device, the biometric reading entered by the user matches a biometric reading stored on the secure token, and a security code generated by the secure token matches a corresponding security code associated with the secure token in the operations and resource component,

wherein the secure token stores customized system function access data associated with an owner of the token, and

wherein the communication device downloads a customized subset of the stored user function information from the operations and resource component based upon the customized system function access data stored on the secure token, thereby enabling customized user access to software applications, networks and user services via the communication device, wherein the customized user access includes at least one of download of software requested by the user and access to software programs stored and running on at least one network via the user'"'"'s communication device.

43. A communication device according to claim 42, wherein the biometric reader is a device for obtaining a retinal image and the biometric reading associated with the secure token is a retinal image.

44. A communication device according to claim 42, wherein the biometric reader is a device for obtaining a digital fingerprint image and the biometric reading associated with the secure token is a digital fingerprint image.

45. A communication device according to claim 42, wherein the biometric reader is a device for obtaining a vein pattern image and the biometric reading associated with the secure token is a vein pattern image.

46. A communication device according to claim 42, wherein the biometric reader is a device for obtaining a voice input and the biometric reading associated with the secure token is stored voice recognition data.

47. A communication device according to claim 42, wherein the operations and resource component enables user access to the Internet, at least one public network, or at least one private network via the communication device.

48. A communication device according to claim 42, wherein the communication device enables wireless access to the Internet, the public network, or the private network.

49. A communication device according to claim 42, wherein the operations and resource component communicates with the communication device using wireless communication technology.

50. A communication device according to claim 42, wherein the operations and resource component communicates with the communication device using wired communication technology.

51. A communication device according to claim 42, wherein the token interface provides an electrical contact through which the secure token provides and receives data from the communication device.

52. A communication device according to claim 42, wherein the token interface provides a wireless data interface through which the secure token provides and receives data from the communication device.

53. A communication device according to claim 42, wherein the user input component includes a keypad.

54. A communication device according to claim 42, wherein the user input component includes a touch screen.

55. A communication device according to claim 42, wherein the user input component includes a microphone.

56. A communication device according to claim 42, wherein the output component includes a display screen.

57. A communication device according to claim 42, wherein the output component includes a printer.

58. A communication device according to claim 42, wherein the output component includes an audio speaker.

59. A communication device according to claim 42, wherein the communication device enables user access to postal functions via the operations and resource component.

60. A communication device according to claim 59, wherein the each user is assigned a unique postal routing code, each user provides delivery information that is associated with the user'"'"'s unique postal routing code, and the operations and resource component accesses the delivery information associated with the user'"'"'s unique postal routing code to direct mail to the user.

61. A communication device according to claim 60, wherein the communication device provides access to a document delivery system in which a document to be delivered to a postal or other outlet servicing the recipient is electronically transmitted to a recipient location and printed at the postal or other outlet servicing the recipient location for delivery by a secure printing system to the recipient.

62. A communication device according to claim 42, wherein the communication device enables user access to educational software and facilitates user participation in educational courses via the operations and resource component.

63. A communication device according to claim 42, wherein the communication device enables the user to conduct electronic transactions via the operations and resource component.

64. A communication device according to claim 63, wherein the communication device enables the user to perform real-time pricing comparisons and obtain retail outlet location information via the operations and resource component.

65. A communication device according to claim 63, wherein an item to be purchased via the secure universal transaction system has an associated authentication certification created by the communication device of a seller of the item.

66. A communication device according to claim 63, wherein a sale amount associated with sale of an item performed via the secure universal transaction system by a seller to a buyer is debited from the buyer and confirmed to the seller immediately upon completion of the sale and credited to the seller only upon verification of delivery of the item to the buyer.

67. A communication device according to claim 42, wherein the communication device enables the user to participate in voting and other governmental functions via the operations and resource component.

68. A communication device according to claim 42, wherein the communication device enables the user to conduct electronic financial transactions via the operations and resource component.

69. A communication device according to claim 42, wherein the communication device enables the user to access entertainment activities and products.

70. A communication device according to claim 42, wherein the communication device enables the user to access a global trading system, wherein transactions in the global trading system are conducted using an international value unit that has a geographically variable value index based upon valuation of unequalized goods in geographic regions in which the global trading system operates, and wherein the operations and resource component generates the geographically variable value index and calculates a regional value of the international value unit in each geographic region in which the global trading system operates.

71. A communication device according to claim 42, wherein the communication device includes a locator for identifying the geographical location of the communication device.

78. A secure token for use in the communication device of claim 42, the secure token comprising:

a token security component including a security code,

a data storage component for storing user data, and

a display for displaying a current user balance or past transaction data.

72. A secure token for use in a secure universal transaction system having an operations and resource component accessed by at least one communication device, the secure token comprising:

a token security component for generating a security code, and

a readable and writable data storage component for storing user data including customized system function access data associated with an owner of the token,

wherein user access to the operations and resource component is permitted only when the secure token is interfaced with a token interface of the communication device, a biometric reading entered by the user matches a biometric reading stored in the data storage component of the secure token, and a security code generated by the token security component matches a corresponding security code associated with the secure token in the operations and resource component,

wherein the operations and resource component stores user function information including a plurality of software applications and data required to enable user access to a plurality of networks and user services, and

wherein the communication device downloads a customized subset of the stored user function information from the operations and resource component based upon the customized system function access data stored on the secure token, thereby enabling customized user access to software applications, networks and user services via the communication device, wherein the customized user access includes at least one of download of software requested by the user and access to software programs stored and running on at least one network via the user'"'"'s communication device.

73. A secure token according to claim 72, wherein the secure token is round in shape and includes at least one contact electrode.

74. A secure token according to claim 72, wherein the secure token provides and receives data from the communication device through a wireless interface.

75. A secure token according to claim 72, wherein the secure token is polygonal in shape.

76. A secure token according to claim 72, wherein the secure token includes a locator for identifying the geographical location of the secure token.

77. A secure token according to claim 72, further including a display for displaying a current user balance or past transaction data.

79. A method for accessing a communication system having an operations and resource component accessed by at least one communication device, the method comprising:

storing at the operations and resource component user function information including a plurality of software applications and data required to enable user access to a plurality of networks and user services;

storing at the operations and resource component security data associated with one or more secure tokens, the security data for each secure token including an access code;

interfacing a secure token with a communication device, wherein the secure token stores customized system function access data associated with an owner of the secure token;

entering a biometric reading into the communication device;

comparing the entered biometric reading with a biometric reading stored on the secure token;

when a match is detected between the entered biometric reading and the biometric reading stored on the secure token, transmitting an access code from the secure token to the operations and resource component via the communication device;

permitting user access to the communication system via the communication device when the access code from the secure token matches a corresponding security code associated with the secure token in the operations and resource component; and

downloading to the communication device a customized subset of the stored user function information from the operations and resource component based upon the customized system function access data stored on the secure token, thereby enabling customized user access to software applications, networks and user services via the communication device, wherein the customized user access includes at least one of download of software requested by the user and access to software programs stored and running on at least one network via the user'"'"'s communication device.

80. A secure universal transaction system for enabling entry, storage, editing, transmission of and access to user medical data, comprising:

an operations and resource component, including

a first biometric security component,

a second security component,

a communication component for enabling communication of medical data between the operations and resource component and at least one network,

a processor, and

a medical data storage component for storing medical data associated with one or more users;

a communication device for enabling a user to access and edit stored medical data associated with the user and to enter new user medical data via interaction with the operations and resource component, the communication device including

a token interface,

a biometric reader for enabling a user to input a biometric reading,

a communication component for enabling communication of the medical data associated with the user between the communication device and the operations and resource component,

a user input component for inputting user commands and information into the communication device and for enabling access to and editing of the stored medical data associated with the user and entry of the new user medical data associated with the user, wherein any new or edited user medical data input by the user is transmitted to the operations and resource component by the communication component of the communication device,

an output component for displaying the user medical data accessed, edited or entered by the user,

a processor, and

a data storage component; and

a secure token adapted to interface with the token interface of the communication device, including

a token security component for generating a security code, and

a data storage component for storing user identification data,

wherein user access to the medical data associated with the user that is stored in the operations and resource component is permitted only when the secure token is interfaced with the token interface of the communication device, the biometric reading entered by the user matches a biometric reading associated with the secure token in the biometric security component of the operations and resource component, and the security code generated by the token security component matches a corresponding security code associated with the secure token in the second security component of the operations and resource component,

wherein the user is provided with customized user access to medical data associated with the user via access to software applications, networks and user services via the communication device, wherein the customized user access includes access to data and software programs stored and running on at least one network via the user'"'"'s communication device.

81. The system of claim 80, further comprising a medical provider communication device for enabling a provider of medical services to access and edit stored medical data associated with the user and enter new user medical data via secure interaction with the operations and resource component.

82. The system of claim 81, wherein different levels of access to the user medical data stored in the operations and resource component may be provided to different types of medical providers, and wherein a level of access granted to a selected medical provider may be defined by the user or by a system administrator.

83. A secure universal transaction system for enabling participation in gambling activities, including lotteries, comprising:

an operations and resource component, including

a first biometric security component,

a second security component,

a communication component for enabling user access to and participation in one or more gambling activities,

a processor, and

a data storage component;

a first communication device for enabling a user to participate in the one or more gambling activities via the operations and resource component, the first communication device including

a token interface,

a biometric reader for enabling a user to input a biometric reading,

a communication component for enabling communication between the first communication device and the operations and resource component,

a user input component for inputting user commands and information into the first communication device, including gambling betting commands and lottery selections,

an output component for providing information to the user, including data relating to the gambling activities,

a processor, and

a data storage component; and

a secure token adapted to interface with the token interface of the first communication device, including

a token security component for generating a security code, and

a data storage component for storing user data,

wherein user access to the gambling activities via the operations and resource component is permitted only when the secure token is interfaced with the token interface of the first communication device, the biometric reading entered by the user matches a biometric reading associated with the secure token in the biometric security component of the operations and resource component, and the security code generated by the token security component matches a corresponding security code associated with the secure token in the second security component of the operations and resource component,

wherein the user is provided with customized user access to gambling activity data associated with the user via access to software applications, networks and user services via the communication device, wherein the customized user access includes access to data and software programs stored and running on at least one network via the user'"'"'s communication device.

84. The system of claim 83, wherein each user'"'"'s eligibility for access to the gambling activities is defined by a system administrator or by an administrator of the gambling activities.

85. The system of claim 83, further comprising:

a second communication device for enabling user access to the at least one network to participate in the one or more gambling activities via the operations and resource component, the second communication device including

a token interface,

a biometric reader for enabling a user to input a biometric reading,

a communication component for enabling communication between the second communication device and the operations and resource component,

a user input component for inputting user commands and information into the second communication device, including gambling betting commands and lottery selections,

an output component for providing information to the user, including data relating to the gambling activities,

a processor, and

a data storage component;

wherein the first and second communication devices are configured to provide different user access levels to the gambling activities, and each access level has a defined fee structure payable by the user for participating in the gambling activities.

86. The system of claim 83, wherein winnings, other payouts, fees, losses, or other monetary amounts associated with the user'"'"'s participation in the gambling activities are automatically deposited or withdrawn from one or more of the user'"'"'s financial accounts.