Data consolidation expert system for facilitating user control over information use

• US 9,811,820 B2
• Filed: 11/09/2011
• Issued: 11/07/2017
• Est. Priority Date: 01/19/2001
• Status: Active Grant

• Current Assignee: Mastercard Mobile Transactions Solutions, Inc. (MasterCard Incorporated)
• Original Assignee: Mastercard Mobile Transactions Solutions, Inc. (MasterCard Incorporated)
• Inventors: Pitroda, Satyan G., Desai, Mehul
• Primary Examiner(s): Coppola, Jacob C.
• Application Number:
  US13/292,781
• Publication Number:
  US 20120109669A1
• Time in Patent Office: 2,190 Days
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/045 using payment protocols involving tickets
• CPC Class Codes: G06Q 20/047 using payment protocols involving electronic receipts
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/145 Payments according to the detected use or quantity
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 : Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 : Identity check for transactions
• CPC Class Codes: G06Q 20/42 : Confirmation, e.g. check or permission by the legal debtor of payment
• CPC Class Codes: G06Q 2220/00 : Business processing using cryptography
• CPC Class Codes: G06Q 30/06 : Buying, selling or leasing transactions
• CPC Class Codes: G16H 10/60 : for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16Z 99/00 : Subject matter not provided for in other main groups of this subclass
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 : for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0838 : using one-time-passwords

Abstract

Methods and systems are provided for supporting electronic transactions, including transactions that are provided with per-user, per-device and per-domain security across domains of multiple service providers.

Claims

1. A method, comprising:

receiving, with an ecommerce server of a transaction service provider disposed on a first side of a first firewall isolating the transaction service provider from a plurality of banking servers connected to a banking network, unique indicia identifying an electronic transaction device, the indicia traversing an electronic communication path from the electronic transaction device through a first communication interface of a personal computing device, over a second network interface of the personal computing device, through a second firewall that isolates the personal computing device from the ecommerce server to the transaction service provider ecommerce server, the banking network isolated from the electronic transaction device by a third network firewall, the transaction service provider acting as an intermediary between the banking network and the personal computing device;

matching the unique indicia identifying the electronic transaction device with a data item that uniquely identifies a user of the electronic transaction device;

receiving at the ecommerce server information from the electronic transaction device via the personal computer, the information comprising client personal information, account information corresponding to a plurality of accounts associated with the client, and transactional information corresponding to a plurality of transactions conducted by the client;

creating a database of the received client information, wherein a first portion of the database of client information is designated as confidential;

accessing the client personal, account, and transactional information in the client database with a backend server of the transaction service provider, wherein the backend server and the ecommerce server are isolated by a fourth firewall;

providing access to the database of client information as follows;

allowing the client to access the first confidential portion and a non-confidential second portion of the client database via a secure interface;

allowing a plurality of vendors to access the second portion of the client database, wherein the confidential first portion is maintained as secure with respect to the plurality of vendors; and

allowing the client to designate a portion of the confidential first portion of the client database to be shared with one of the plurality of vendors; and

allowing the one vendor of the plurality of vendors to access the information from the first portion of the database of client information designated by the client.

2. The method of claim 1, wherein the personal computing device is a personal computer.