System for secure online selling, buying and bill pay in an electronic commerce setting

• US 7,949,609 B2
• Filed: 12/27/2006
• Issued: 05/24/2011
• Est. Priority Date: 01/06/2006
• Status: Active Grant

• Current Assignee: Brian Colella
• Original Assignee: Brian Colella
• Inventors: Colella, Brian
• Primary Examiner(s): Hewitt, II; Calvin L
• Assistant Examiner(s): Qayyum; Zeshan
• Application Number:
  US11/646,121
• Publication Number:
  US 20070174206A1
• Time in Patent Office: 1,609 Days
• Field of Search: 705 50- 69
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions

Abstract

A method and system for biometric-secure online selling, buying and bill paying in electronic commerce and retail point-of-sale settings that also simplifies the checkout process and eliminates fraudulent transactions. The system relies on an exchange service provider (ESP) that hosts multiple servers: one implementing a web portal for secure online banking, auctions and other exchange opportunities, another being a biometric fingerprint device authenticating database, and yet another being a transaction traffic manager. Participating banks and supporting institutions distribute and activate Secure Individual Identity Devices (SIIDs) to registered users, each SIID being a portable biometric activated identification device that locally stores a fraction of the enrolled users fingerprint (minutia) along with an encrypted code that is used to verify and authenticate the user, eliminating the use of personal or financial information for this purpose. The SiiD becomes the user'"'"'s own personal key for completing secure online transactions. The user simply plugs their SiiD into any USB-equipped device and scans their own fingerprint for each transaction. The encrypted codes are authenticated in the ESP database and the transaction is processed to the appropriate financial institutions.

Claims

1. For authentication and enhanced security during online credit or debit transactions by a sponsor application service provider (ASP) hosting at least one network computer server, said sponsor ASP distributing a Secure Individual Identity Device to each of a plurality of users at banks or financial institutions, each said Secure Individual Identity Device comprising a portable biometric fingerprint scanner having internal memory and a USB port, an improved method comprising the steps of:

registering each of said plurality of users at one of said banks or financial institutions by the following substeps;

receiving bibliographic information and designated financial account information from each user to be used for user transactions, including designated routing data;

activating each Secure Individual Identity Device by scanning the fingerprints of the one of said plurality of users on said each Secure Individual Identity Device, digitizing said fingerprint minutia scan, and storing a portion of the digitized fingerprint scan locally in the memory of said each Secure Individual Identity Device,

encrypting by said each Secure Individual Identity Device the stored portion of the digitized fingerprint scan into an encrypted alphanumeric passcode, and storing said passcode locally in the memory of said each Secure Individual Identity Device along with a time stamp,

transmitting by said each Secure Individual Identity Device a encrypted passkey code to a remote biometric registrar database, said encrypted passkey code comprising a portion of said encrypted alphanumeric passcode,

transmitting by said each Secure Individual Identity Device said encrypted passkey code to a remote traffic controller database cross-referencing each user passkey to a designated account routing data of the one of said plurality of users for each designated account;

one of said registered users consummating an electronic transaction by the following substeps,

receiving a Secure Individual Identity Device of said one of said registered users into any computer USB port or supported card reader,

receiving said registered user'"'"'s finger on said Secure Individual Identity Device and automatically receiving a scan of the registered user'"'"'s fingerprint,

digitizing by said Secure Individual Identity Device a portion of the scanned fingerprint and translating said portion into a time-stamped encrypted passcode,

storing said time-stamped encrypted passcode in said Secure Individual Identity Device.