System and method for electronic check verification over a network

• US 20060136332A1
• Filed: 10/01/2005
• Published: 06/22/2006
• Est. Priority Date: 10/01/2004
• Status: Abandoned Application

• Current Assignee: Accullink Incorporated
• Original Assignee: Accullink Incorporated
• Inventors: Ziegler, Robert
• Application Number:
  US11/241,862
• Publication Number:
  US 20060136332A1
• Time in Patent Office: Days
• US Class Current: 705/39
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/0425 the cheque being electronic only
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions

Abstract

A method is disclosed of authenticating a consumer and authorizing a transaction over a network. The method includes first requesting, by a user, performance of a transaction between said user and a merchant, the user and the merchant performing the transaction over a non-secure web page. The user then enters transaction request information into a non-secure general purpose computer, and then enters a PIN into a graphic interface of the non-secure web page on the non-secure general purpose computer. providing, by the non-secure general purpose computer, the transaction request information and a PIN data package, the PIN data package being a digital representation of an impression of the users selection of at least one graphic image representing their PIN to a secure transaction manager via an internet system. The transaction manager then combines at least one of dynamic and corollary data with the PIN data package and securely provides the combination to a hardware security module (HSM). The HSM then distills the PIN data package into a PIN and encrypting the PIN into a PIN Block. Thereafter; the remainder of the transaction is performed.

Claims

1. Method of authenticating a consumer and authorizing a transaction over a network, the method comprising:

requesting, by a user, performance of a transaction between said user and a merchant, said user and the merchant performing the transaction over a non-secure web page;

entering, by said user, transaction request information into a non-secure general purpose computer;

entering a user credential, by said user, into a user interface of the non-secure web page on the non-secure general purpose computer;

providing, by said non-secure general purpose computer, said transaction request information and a user credential data package, said user credential data package being a digital representation of an impression or imprint of said user'"'"'s selection of at least one graphic image representing a user'"'"'s bonafide user credential to a secure transaction manager via an Internet system;

combining, by said transaction manager, at least one of dynamic and corollary data with said user credential data package and securely providing the combination to a hardware security module (HSM);

distilling, by said HSM, said user credential data package into the user'"'"' bonafide credential and encrypting said user'"'"'s bonafide credential into a PIN Block; and

performing the remainder of said transaction.

2. The method of claim 1, wherein said user credential comprises data from a debit card or an ATM card.

3. The method of claim 1, wherein said user credential comprises data from a biometric device or process.

4. The method of claim 1, wherein the remainder of said transaction comprises:

authentication, by an ATM network, a biometric network, or a financial institution, of said user credential.

5. The method of claim 2, wherein said transaction information comprises an account number for said debit card or said ATM card.

6. The method of claim 5, wherein said transaction information further comprises at least one of said account number'"'"'s available funds, funds held on reserve.

7. The method of claim 3, wherein said transaction information further comprises a wallet, said wallet includes at least one of payor information, said consumer'"'"'s identity information, medical information, financial information.

8. The method of claim 7, wherein said consumer'"'"'s identity information comprises at least one of a driver'"'"'s license number, social security number, a passport number, and a date of birth.

9. The method of claim 1, wherein said user credential comprises at least one of (a) a PIN, (b) a Debit Card and said PIN, (c) a biometric, (d) said biometric and said PIN, (e) said biometric, said Debit Card, and said PIN, (f) said PIN and a search code, (g) said search code, and (h) said biometric and said search code.

10. The method of claim 7, wherein said financial information comprises at least one of a DDA, a debit card, a credit card, a gift card, SWIFT information, a Fed-wire information, a wire information, a trading account, a brokerage account.

11. The method of claim 7, wherein said medical information comprises at least one of a health provider information, medical history information, and a medical record release authorization.

12. The method of claim 1, wherein the remainder of the transaction comprises authentication and authorization by an ACH for the transfer of a user'"'"'s funds from a DDA to anther party.

13. Method of authenticating a consumer and authorizing a transaction over a network, the method comprising:

requesting, by a user, performance of a transaction between said user and a merchant, said user and the merchant performing the transaction over a non-secure web page;

entering, by said user, transaction request information into a non-secure general purpose computer;

entering a user credential, by said user, into a user interface of the non-secure web page on the non-secure general purpose computer;

providing, by said non-secure general purpose computer, said transaction request information and a user credential data package, said user credential data package being a digital representation of an impression or imprint of said user'"'"'s selection of at least one graphic image representing a user'"'"'s bonafide user credential to a secure transaction manager via an Internet system;

combining, by said transaction manager, at least one of dynamic and corollary data with said user credential data package and securely providing the combination to a hardware security module (HSM);

extracting, by said transaction manager, said user credential data package into the user'"'"' bonafide credential; and

performing the remainder of said transaction.

14. The method of claim 13, wherein said step of extracting is further preformed by said HSM.