Wireless transaction and information system

• US 6,442,532 B1
• Filed: 08/17/1998
• Issued: 08/27/2002
• Est. Priority Date: 11/13/1995
• Status: Expired due to Term

• Current Assignee: Citicorp Credit Services Incorporated (Citigroup Incorporated)
• Original Assignee: Transaction Technologies Incorporated (Citigroup Incorporated)
• Inventors: Kawan, Joseph C.
• Primary Examiner(s): Stamber, Eric W.
• Assistant Examiner(s): Retta, Yehdega
• Application Number:
  US09/134,813
• Time in Patent Office: 1,471 Days
• Field of Search: 705/35-37, 705/1, 705/412, 380/24, 455/558, 455/466, 375/200, 702/61, 702/62
• US Class Current: 705/36.00R
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 40/06 Asset management; Financial planning or analysis
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/204 Loading of a stored value token using an ATM
• CPC Class Codes: G07F 19/211 Software architecture within ATMs or in relation to the ATM network
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

A financial information and transaction system utilizes wireless communication in connection with portable terminals. In this system, a terminal is connected to the financial institution via a wireless or cellular telephone hook-up. Smart cards are utilized to verify authorization for transactions, thereby minimizing potential security problems which could otherwise result from use of a mobile terminal. Alternately, a smart card is advantageously utilized not only for authorization, but also to maintain a secure record of available funds. The system not only provides the functionality of an ATM network, but also provides non-financial services, thereby forming an integrated system.

Claims

1. A method for performing transactions, comprising:

receiving, at a host computer system, encrypted user identification information wirelessly transmitted from a mobile server terminal, the encrypted identification information transmitted by a user to the mobile server terminal from one of a plurality of user terminals over a corresponding one of a plurality of networks, each of the plurality of user terminals having a smart card interface device, each of the plurality of user terminals and each of the plurality of networks compatible for communication with the mobile server terminal, the plurality of user terminals including at least one of personal computer, a mobile terminal, a battery-powered mobile terminal, an automatic teller machine, and a building access terminal, the plurality of networks including at least one of standard switch network, a direct wireless service network, the Internet, a financial network, a commercial network, a private network, a wide area network, a local area network, an ATM network and a spread spectrum network, the encrypted user identification information encrypted via a smart card having an encryption algorithm, the host system having records of user account information, including reference identification information, and the host system having a decryption algorithm capable of decrypting data encrypted by the encryption algorithm of the smart card;

decrypting the encrypted identification information using the decryption algorithm of the host system and validating the identification information sent from the smart card with the reference identification information;

if the identification information is validated, providing the user with wireless access to the information and functionality of the host system through the mobile server terminal to exchange information, the information exchange comprising;

receiving at the host computer system an encrypted selected function from a group of transaction functions and encrypted function data corresponding to the selected function both wirelessly transmitted from the mobile server terminal, the group of transaction functions including at least a financial transaction function and an entry into a secure physical location function, both the encrypted selected function and the encrypted data encrypted via the smart card;

decrypting the encrypted selected function and the encrypted function data for the selected function at the host system, performing the selected function in response to the transmitted function data for the selected function to provide data for the performed function, and encrypting the data for the performed function; and

wirelessly transmitting the encrypted data for the performed function to the mobile server terminal for use by the user.

2. The method of claim 1 wherein the group of transaction functions further includes at least one function selected from the group consisting of an account information gathering function, a credit authorization function, a banking card debit function, an electronic prepaid function, and an electronic purse function.

3. The method of claim 1, wherein the host system comprises a security system for controlling access to a secure physical location, wherein the identification information comprises security information stored on the smart card, the security system having security records and providing access to the secure physical location by matching the security information to the corresponding security record.

5. The method of claim 1 wherein the battery-powered mobile terminal comprises a cellular phone.

6. The method of claim 1, further comprising encrypting authorization information using an encryption algorithm within the host system, where the authorization information represents whether or not the identification information is validated, wirelessly transmitting the encrypted authorization information to the mobile server terminal for notifying the user whether or not access to the host system is allowed.

7. The method of claim 1, wherein the information exchange further comprises adding electronic value to the smart card and debiting value from a user account in the host system.

8. The method of claim 7, further comprising appending an encrypted bank signature to the value added to the smart card, wherein the bank signature certifies the authenticity of the value.

14. The method of claim 1, where the selected function further comprises an electronic prepaid function, where the smart card includes an electronic prepaid account having an electronic prepaid value, where the information exchange includes a transaction comprising adjusting an amount of the electronic prepaid value in the electronic prepaid account, and where the identification information does not include a personal identification number.

15. The method of claim 1, where the selected function further comprises an electronic purse function, where the smart card includes an electronic purse account having an electronic monetary value, where the information exchange includes a transaction comprising adjusting an amount of the electronic monetary value in the electronic purse account, and where the identification information includes a personal identification number.

16. The method of claim 1, where the encrypted user identification received at the host computer system is transmitted by the automatic teller machine further comprising a cashless automatic teller machine such that the information exchange comprises exchanging financial information or electronic value.

17. The method of claim 16, where the cashless automatic teller machine is located in a vehicle.

32. The method of claim 1, further comprising providing physical access to a secure physical location associated with the one of the plurality of user terminals if the identification information is validated by the user terminal.

33. The method of claim 1, further comprising, prior to the transmission of the encrypted user identification information to the mobile server terminal, validating via the smart card the identification information, providing access to local files associated with the smart card or the user terminal or a local network connected to the user terminal, and providing access to the one of the plurality of networks.

34. The method of claim 33, further comprising receiving a personal identification number input into the user terminal by the user, where the user identification information validated by the smart card includes the personal identification number.

35. The method of claim 33, further comprising receiving a biometric parameter input into the user terminal by the user, where the user identification information validated by the smart card includes the biometric parameter.

36. The method of claim 1, further comprising, prior to the transmission of the encrypted user identification information to the mobile server terminal and where the one of the plurality of user terminals comprises a personal computer connected to a local network, validating the identification information via the smart card, providing access to local files associated with the personal computer or the smart card or the local network, and providing access to the one of the plurality of networks associated with the mobile server terminal.

4. A system for a user to obtain information and perform transactions on a network, comprising:

a plurality of user terminals each having a smart card interface device for communicating with a smart card, each of the plurality of user terminals having an input device associated with the user terminal and in combination with the smart card interface device for receiving identification information and data from the user, wherein the identification information is encrypted by a smart card in communication with the smart card interface device and the smart card having a first encryption algorithm, the plurality of user terminals including at least one of a personal computer, a mobile terminal, a battery-powered mobile terminal, an automated teller machine, and a building access terminal;

a plurality of networks including at least one of a standard switch network, a direct wireless service network, the Internet, a financial network, a commercial network, a private network, a wide area network, a local area network, an ATM network and a spread spectrum network;

a mobile server terminal compatible for communication with all of the plurality of user terminals through any of the plurality of networks, the mobile server terminal further comprising a first wireless device for wirelessly transmitting and receiving data;

a host computer system having an associated second wireless device and at least a second encryption algorithm corresponding to the first encryption algorithm, wherein the second wireless device receives the encrypted identification information and wherein the second encryption algorithm decrypts the encrypted identification information, wherein the host system maintains records of user account information including identification information and compares the identification information encrypted by the smart card to the user account information to verify the identification information, and wherein the host system wirelessly transmits authorization information through the second wireless device to the mobile server terminal to allow the user access to the host computer system; and

a transaction application for providing the user with transactions to be performed through the server terminal if the identification information is validated by the user account information, the transaction application including financial transaction functions and an entry into a secure physical location function.

9. The system of claim 4, wherein the transaction application further includes at least one transaction selected from the group consisting of an account information gathering transaction, a credit authorization transaction, a banking card debit transaction, an electronic prepaid transaction, and an electronic purse transaction.

22. The system of claim 4, wherein the mobile server terminal comprises a cellular phone or an automatic teller machine.

23. The system of claim 4, wherein the user terminal further comprises a cashless automatic teller machine such that the transaction application comprises a function of exchanging financial information or exchanging electronic value.

24. The system of claim 23, wherein the cashless automatic teller machine is located in a vehicle.

25. The system of claim 4, wherein the transaction application comprises an electronic prepaid function, wherein the smart card includes an electronic prepaid account having an electronic prepaid value, wherein the electronic prepaid function includes a transaction comprising adjusting an amount of the electronic prepaid value in the electronic prepaid account, and wherein the identification information does not include a personal identification number.

26. The system of claim 4, wherein the transaction application comprises an electronic purse function, wherein the smart card includes an electronic purse account having an electronic monetary value, wherein the electronic purse function includes a transaction comprising adjusting an amount of the electronic monetary value in the electronic purse account, and wherein the identification information includes a personal identification number.

10. A method for performing transactions, comprising:

receiving a smart card in a smart card reader in communication with a user terminal, wherein the smart card comprises at least a first encryption algorithm and validation information, wherein the user terminal comprises at least one terminal selected from a plurality of user terminals consisting of a personal computer, a mobile terminal, a battery-powered mobile terminal, an automated teller machine, and a building access terminal;

receiving at least an encrypted portion of the validation information at the user terminal, the encrypted portion encrypted using the first encryption algorithm of the smart card;

wirelessly transmitting the encrypted portion of the validation information via a mobile server terminal having a first transmitter/receiver in communication with the user terminal through a network, wherein the network is at least one network selected from a plurality of networks consisting of a standard switch network, a direct wireless service network, the Internet, a financial network, a commercial network, a private network, a wide area network, a local area network, an ATM network and a spread spectrum network, wherein the mobile server terminal is compatible with any of the plurality of user terminals and a corresponding one of the plurality of networks;

wirelessly receiving the encrypted portion of the validation information at a second transmitter/receiver and transmitting the encrypted portion of the validation information to a host system, wherein the host system comprises user account information including reference validation information, a second encryption algorithm and financial transaction capabilities, wherein the user account information corresponds to the validation information on the smart card, and wherein the second encryption algorithm corresponds to the first encryption algorithm on the smart card such that data encrypted by the first encryption algorithm is decryptable by the second encryption algorithm and vice versa;

decrypting the encrypted portion of the validation information and comparing the validation information to the user account information to determine an authorization code for further accessing the host system; and

wirelessly transmitting the authorization code via the second transmitter/receiver; and

if the authorization code represents verification between the validation information and the user account information, providing the user with access to the host system to perform transactions including at least one financial function and an access to a secure physical location function, wherein communications between the host system and the user terminal are encrypted by the host system and the smart card, respectively.

11. The method of claim 10, further comprising:

wirelessly receiving at the host system encrypted identification information along with the encrypted validation information, where the encrypted identification information comprises a personal identification number input by the user into the user terminal and encrypted via the smart card; and

decrypting and comparing the identification information and the validation information to the user account information to determine the authorization code.

18. The method of claim 10, further comprising receiving from the mobile server terminal a selected function from a plurality of functions, where the selected function comprises an electronic prepaid function, where the smart card includes an electronic prepaid account having an electronic prepaid value, where the information exchange includes a transaction comprising adjusting an amount of the electronic prepaid value in the electronic prepaid account, and where the identification information does not include a personal identification number.

19. The method of claim 10, further comprising receiving from the mobile server terminal a selected function from a plurality of functions, where the selected function comprises an electronic purse function, where the smart card includes an electronic purse account having an electronic monetary value, where the information exchange includes a transaction comprising adjusting an amount of the electronic monetary value in the electronic purse account, and where the identification information includes a personal identification number.

20. The method of claim 10, where the encrypted portion of the validation information received at the host computer system is transmitted by the automatic teller machine further comprising a cashless automatic teller machine such that the transactions comprise exchanging financial information or exchanging electronic value.

21. The method of claim 10, where the cashless automatic teller machine is located in a vehicle.

12. A system for performing transactions, comprising:

a plurality of smart card readers capable of communication with a smart card having at least a first encryption algorithm and a plurality of stored data, wherein the plurality of stored data includes validation information;

a plurality of user terminals each corresponding to and in communication with one of the plurality of smart card readers, wherein each of the plurality of terminals have a first input device for generating user input data, the plurality of user terminals consisting of at least one of a personal computer, a mobile terminal, a battery-powered mobile terminal, an automated teller machine, and a building access terminal;

a server terminal compatible for communication with each of the plurality of user terminals, wherein the server terminal comprises a second input device, a first wireless transmit/receive device and a display, wherein the second input device includes a keypad for generating user input data and the display is adapted for displaying images to the user, wherein the first wireless transmit/receive device receives and transmits a first encrypted message comprising validation information and user input data, wherein the first encrypted message is encrypted by the encryption algorithm of the smart card;

a plurality of networks, wherein at least one of the plurality of networks connects at least one of the plurality of user terminals to the server terminal, the plurality of networks consisting of at least one of a standard switch network, a direct wireless service network, the Internet, a financial network, a commercial network, a private network, a wide area network, a local area network, an ATM network and a spread spectrum network;

a host financial system in communication with the server terminal, wherein the host system comprises user account information, an authentication program, a plurality of transaction applications, and at least a second encryption algorithm, wherein the second encryption algorithm corresponds to the first encryption algorithm on the smart card such that data encrypted by the first encryption algorithm is decryptable by the second encryption algorithm and vice versa, wherein the authentication program compares the validation information to the user account information to verify the authenticity of the validation information and thereby to determine user access to the host system, the plurality of transaction applications including at least a financial transaction function and an entry to a secure physical location function, and wherein the host system provides a second encrypted message comprising data relating to at least one of the plurality of transaction applications if the authentication program authenticates the validation information and;

a second transmit/receive device associated with the host system for wirelessly transmitting and receiving the first and second encrypted messages, wherein the second transmit/receive device is in communication with the first transmit/receive device and the host system.

13. The system of claim 12, wherein the financial transaction function is selected from the group consisting of an account information gathering function, a credit authorization function, a banking card debit function, an electronic prepaid function, and an electronic purse function.

28. The system of claim 12, wherein the user terminal further comprises a cashless automatic teller machine such that the financial transaction application comprises a function of exchanging financial information or exchanging electronic value.

29. The system of claim 28, wherein the cashless automatic teller machine is located in a vehicle.

30. The system of claim 12, wherein the financial transaction function comprises an electronic prepaid function, wherein the smart card includes an electronic prepaid account having an electronic prepaid value, wherein the electronic prepaid function includes a transaction comprising adjusting an amount of the electronic prepaid value in the electronic prepaid account, and wherein the identification information does not include a personal identification number.

31. The system of claim 12, wherein the financial transaction function comprises an electronic purse function, wherein the smart card includes an electronic purse account having an electronic monetary value, wherein the electronic purse function includes a transaction comprising adjusting an amount of the electronic monetary value in the electronic purse account, and wherein the identification information includes a personal identification number.

27. A system for performing transactions, comprising:

a plurality of smart card readers capable of communication with a smart card having at least a first encryption algorithm and a plurality of stored data, wherein the plurality of stored data includes validation information;

a plurality of user terminals each corresponding to and in communication with one of the plurality of smart card readers, wherein each of the plurality of terminals have a first input device for generating user input data, the plurality of user terminals consisting of at least one of a personal computer, a mobile terminal, a battery-powered mobile terminal, an automated teller machine, and a building access terminal;

a server terminal compatible for communication with each of the plurality of user terminals, wherein the server terminal is a mobile server terminal that comprises a second input device, a first wireless transmit/receive device and a display, wherein the second input device includes a keypad for generating user input data and the display is adapted for displaying images to the user, wherein the first wireless transmit/receive device receives and transmits a first encrypted message comprising validation information and user input data, wherein the first encrypted message is encrypted by the encryption algorithm of the smart card, and where the mobile server terminal comprises a cellular phone or an automatic teller machine;

a plurality of networks, wherein at least one of the plurality of networks connects at least one of the plurality of user terminals to the server terminal, the plurality of networks consisting of at least one of a standard switch network, a direct wireless service network, the Internet, a financial network, a commercial network, a private network, a wide area network, a local area network, an ATM network and a spread spectrum network;

a host financial system in communication with the server terminal, wherein the host system comprises user account information, an authentication program, a plurality of transaction applications, and at least a second encryption algorithm, wherein the second encryption algorithm corresponds to the first encryption algorithm on the smart card such that data encrypted by the first encryption algorithm is decryptable by the second encryption algorithm and vice versa, wherein the authentication program compares the validation information to the user account information to verify the authenticity of the validation information and thereby to determine user access to the host system, the plurality of transaction applications including at least a financial transaction function and an entry to a secure physical location function, and wherein the host system provides a second encrypted message comprising data relating to at least one of the plurality of transaction applications if the authentication program authenticates the validation information; and

a second transmit/receive device associated with the host system for wirelessly transmitting and receiving the first and second encrypted messages, wherein the second transmit/receive device is in communication with the first transmit/receive device and the host system.