Data processing: financial – business practice – management – or co – Automated electrical financial or business practice or... – Electronic shopping
Reexamination Certificate
2000-02-23
2002-09-17
Cosimano, Edward R. (Department: 2161)
Data processing: financial, business practice, management, or co
Automated electrical financial or business practice or...
Electronic shopping
C705S017000, C705S018000, C705S050000, C705S065000, C705S075000
Reexamination Certificate
active
06453301
ABSTRACT:
BACKGROUND OF THE INVENTION
1. Field of the Invention
The present invention relates to a method and system for authorizing a transaction between two parties over a network and, more particularly, to authorizing a transaction over the network when an authorization code has been received by an authorizing entity, the authorization code being produced by a fingerprint identification device in response to comparing a fingerprint of one of the parties to a stored fingerprint in the device.
2. Related Art
As the use of networks, for example the Internet, become more prevalent, an ever expanding quantum of electronic commerce will be conducted between users over these networks. Typically, a consumer of goods and/or services electronically connects to a provider of goods and/or services over a network, for example, by way of a website. Using known website browser software, the consumer may review and select goods or services and request that such goods or services be delivered to a specified address.
The provider of goods or services, of course, expects to be paid for any goods or services requested by the consumer. Typically, this is accomplished by asking the consumer to enter his or her credit card number and expiration date. Sometime thereafter, and most likely after the consumer has disconnected from the provider's website, the provider telephones an authorizing entity (e.g., the originator or managing entity) of the credit card and requests authorization to complete the transaction. In particular, the provider of goods and/or services transmits the credit card number, expiration date, consumer name, and purchase amount to the authorizing entity and awaits authorization. The authorizing entity accesses the consumer's credit card account and verifies that the consumer is in good standing and that the purchase amount will not cause the consumer's credit balance to exceed his or her credit limit. If the authorizing entity's review of the consumer's credit account is favorable, then authorization is transmitted to the provider of goods and/or services to complete the transaction with the consumer.
As the provider of goods and/or services never actually sees the consumer and cannot assess the consumer in terms of whether or not the consumer is attempting to fraudulently utilize the credit card, both the provider of goods and/or services and the authorizing entity (originator of the credit card) must assume that the consumer is the authorized user of the credit card. It is only when the authorized user of a lost or stolen credit card calls the authorizing entity (or its representative) to report the lost and/or stolen card, that fraudulent uses of the credit card may be avoided.
Similar problems occur when goods and/or services are requested and confirmed by a user of the network simply by connecting with the provider's website. For example, when a provider of goods and/or services requires an initial registration with a particular consumer that authorizes billing the consumer for use of the website, accidental (or fraudulent) use of the website is likely by non-authorized users. More particularly, a parent (authorized user) may contract with a provider of goods and/or services to permit the authorized consumer to utilize the website. The terms of the contract (or registration) may be that the consumer's credit card will be charged for an amount representing use of the website by the authorized consumer (e.g., obtaining information from the website or purchasing goods). Unfortunately, the only way that the provider of goods and/or services knows that a user of the website is an authorized consumer is by way of an identification number (e.g., password etc.) given by the authorized consumer or automatically transmitted by the authorized consumer's personal computer. Thus, any user of the authorized consumer's personal computer who obtains the password (if employed) may access the website and incur charges without the knowledge of the authorized consumer.
Accordingly, there is a need in the art for a new method and system for facilitating and authorizing transactions between parties over a network which provides all parties to the transaction with confidence that the initiator of the transaction is authorized to enter into the transaction.
SUMMARY OF THE INVENTION
In order to overcome the disadvantages of the prior art, the present invention provides a method of conducting a commercial transaction between a customer and a provider of goods or services over a network. The method includes the steps of:
providing the customer with a fingerprint identification device which produces an authentication code when a fingerprint of the customer matches a stored fingerprint within the fingerprint identification device;
maintaining an electronic site on the network over which the customer may request goods or services from the provider of goods or services;
requesting that the customer provide authentication by activating the fingerprint identification device;
receiving at least the authentication code and a account number of the customer at the provider of goods or services over the network from the fingerprint identification device;
transmitting the authentication code and the account number from the provider of goods or services to a managing entity of the account over the network in encrypted form, and requesting authorization to complete the transaction; and
completing the transaction if the managing entity of the account provides the authorization.
Preferably, the stored fingerprint is in an encrypted format and at least one of the authentication code and account number are received over the network in an encrypted form.
The method of the present invention also contemplates permitting the customer to access the account. The steps according to this aspect of the invention include: establishing an electronic connection over the network between the customer and a managing entity of the account; requesting that the user provide authentication to the managing entity of the account by activating the fingerprint identification device; receiving at least the authentication code and the account number of the customer at the managing entity of the account over the network from the fingerprint identification device; and permitting access to the account if the authentication code is valid.
The customer is permitted to at least one of (i) transfer funds from the account; and (ii) deposit funds into the account, when the managing entity of the account has permitted access thereto.
According to another aspect of the invention, the customer is permitted access to an electronic safety deposit box. The steps according to this aspect of the invention further include establishing an electronic connection over the network between the customer and a managing entity of the electronic safety deposit box; requesting that the customer provide authentication to the managing entity of the electronic safety deposit box by activating the fingerprint identification device; receiving at least the authentication code at the managing entity of the electronic safety deposit box over the network from the fingerprint identification device; and permitting access to the electronic safety deposit box if at least the authentication code is valid.
According to yet another aspect of the invention, the customer is permitted to conduct an investment transaction over the network. The steps according to this aspect of the invention include: establishing an electronic connection over the network between the customer and a settlement bank over which the investor may provide investment instructions; requesting that the customer provide authentication to the settlement bank by activating the fingerprint identification device; receiving at least the authentication code at the settlement bank over the network from the fingerprint identification device; receiving investment instructions at the settlement bank over the network from the customer; and transmitting the investment instructions to a third pa
Cosimano Edward R.
Lerner David Littenberg Krumholz & Mentlik LLP
LandOfFree
Method of using personal device with internal biometric in... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Method of using personal device with internal biometric in..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method of using personal device with internal biometric in... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-2870469