Apparatus and method for conducting secure financial transactions

• US 8,055,545 B2
• Filed: 08/29/2008
• Issued: 11/08/2011
• Est. Priority Date: 08/31/2007
• Status: Active Grant

• Current Assignee: 4361423 Canada Incorporated
• Original Assignee: 4361423 Canada Incorporated
• Inventors: Lo, Chi Wah, Tang, Tai Kwan, Mages, Kenneth G., Mages, Kent H.
• Primary Examiner(s): Poinvil; Frantzy
• Application Number:
  US12/230,540
• Publication Number:
  US 20090119184A1
• Time in Patent Office: 1,166 Days
• Field of Search: 705 10- 44
• US Class Current: 705/26
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 40/12 Accounting

Abstract

A system and method are disclosed for conducting secure electronic transactions using dual-authentications. A secure server stores security information for a plurality of users and authorizes transactions being conducted by these users. A user computer system having a trusted platform module is used for storing security information relating to at least one user account. Protected environments are created to facilitate secure connections based on at least the security information stored in the trusted platform module. Transactions between the user/electronic merchants and between the user/secure server are conducted within protected environments. When a user conducts an electronic transaction with an electronic merchant, the transaction is authenticated by the secure server before can be completed.

Claims

1. A system for effecting a secure financial transaction with trusted computing technology, comprising:

a commercial computer system for creating and maintaining accounts for a plurality of users; and

a user computer system including;

a data storage device for storing a computer program code thereon;

a processor that executes said stored computer program code to implement the following components;

a trusted platform module embedded in said user computer system for storing security information relating to the user and at least one account associated with the commercial computer system, and

a virtual appliance module for creating at least one protected environment for establishing a secure connection with an external computer system based on at least the security information stored in the trusted platform module;

wherein the commercial computer system creates at least a portion of the security information stored in or sealed by the trusted platform module; and

wherein the protected environment is inaccessible to applications running outside of the protected environment.

2. The system of claim 1 comprising a secure server that includes a data storage device for storing security information for a plurality of users, a processor for authorizing transactions initiated by the plurality of users, for communicating with said commercial computer system and said user computer system and for establishing a trusted communication path between with said user computer system.

3. The system of claim 2 in which said secure server includes a trusted platform module.

4. The system of claim 2 in which said processor of said secure server determines whether transaction information from said user computer system can be verified, based on information stored in the secure server, and, if said transaction information is verified by the secure server, transmitting approval for the transaction to both said commercial computer system and said user computer system.

5. The system of claim 4 in which said commercial computer system is a computer system of a merchant.

6. The system of claim 1 in which said commercial computer system includes a trusted platform module.

7. The system of claim 1 in which said virtual appliance module includes an encryption engine for encrypting information that has been retrieved or stored.

8. The system of claim 1 in which said virtual appliance module includes a key management system that manages at least one key to perform said secure financial transaction.

9. The system of claim 1 in which said trusted platform module includes non-volatile storage for storing information for conducting secure transactions.

10. The system of claim 1 in which said trusted platform module includes storage for storing information pertaining to a financial card of said user.

11. The system of claim 1 in which said virtual appliance module is protected from access by unauthorized software.

12. A system for conducting secure financial transactions with trusted computing technology, comprising:

a secure server for storing security information for a plurality of users and authorizing transactions initiated by the plurality of users;

an electronic merchant providing a plurality of products and/or services for purchase; and

a user computer system including;

a data storage storing a computer program code thereon;

a processor that executes said computer program to implement the following components;

a trusted platform module embedded in said user computer system for storing security information relating to the user and at least one user account, wherein the security information stored in the trusted platform module is the same security information stored in the secure server, and

a virtual appliance module for creating at least one protected environment for establishing a secure connection based on at least the security information stored in the trusted platform module, wherein the protected environment is inaccessible to applications running outside of the protected environment;

wherein transactions between the user computer system and the electronic merchant are authenticated by the secure server.

13. The system of claim 12 which includes a commercial computer system for creating and maintaining accounts for a plurality of users.

14. The system of claim 12 in which said virtual appliance module is part of said trusted platform module.

15. A method of effecting a secure financial transaction between a buyer and a seller via a communication network coupled to a buyer computer and a seller computer using trusted computing technology, said method comprising

establishing a trusted network connection between the computers of the buyer and seller,

determining whether the buyer is authorized to perform secure transactions, based on information obtained by the seller computer from the buyer computer,

if the buyer is determined to be authorized, establishing a trusted communication path between a secure server and both the seller computer and the buyer computer,

transmitting transaction information to the secure server, wherein said transaction information includes secure buyer authentication information stored on a virtual appliance module in the buyer computer,

determining, in the secure server, whether the transaction information can be verified, based on information stored in the secure server, and

if the transaction information is verified in the secure server, transmitting approval for the transaction to both the seller computer and the buyer computer.

16. The method of claim 15 in which a financial institution verifies said secure buyer authentication information.

17. The method of claim 15 in which said buyer establishes a secure connection to a financial institution and supplies a password, and said financial institution determines whether said password is valid and, if it is, authenticates said secure connection.

18. The method of claim 15 in which said buyer authentication information includes biometric information identifying said buyer.