Secure internet transaction system
OwnerPatrick Delefevreinventor
Life of this patent
Estimating the term…
Abstract
A secure Internet authorization system is based on matching of randomly generated number strings, generated at a module carried by an individual seeking authorization and uploaded to an offline vault during a setup procedure. During authorization the module generates one portion of the string, with the vault generating a quickly disappearing second portion of the string. Upon arrival of both portions at an Authorization Requesting Protocol and match at the vault the action to be authorized is authorized.
Claims25
A method for providing a secure transaction using the Internet, comprising the steps of:
- at a module, randomly generating a large number of number strings, each number string characterized by a Secret Number portion and a Missing Link Key portion;
- physically uploading the randomly generated number strings into a vault that is off-line;
- transmitting a request for authorization of a transaction to the vault over the Internet to invoke an Authorization Requesting Protocol for authorizing the transaction;
- upon initial validation of the authorization request by the vault, transmitting the Missing Link Key portion of the corresponding randomly generated number string stored in the vault to the Authorization Requesting Protocol;
- automatically deleting the transmitted Missing Link Key portion immediately after transmission;
- transmitting from the module the Secret Number portion of the randomly generated number string to the Authorization Requesting Protocol;
- transmitting from the Authorization Requesting Protocol to the vault an encrypted number corresponding to the randomly generated number string, including the Secret Number portion and the Missing Link Key portion;
- decrypting the encrypted number string at the vault;
- matching the decrypted number string with both Secret Number and Missing Link Key portions of the corresponding number string stored in the vault;
- and,
- issuing an authorization command to the Authorization Requesting Protocol responsive to a match.
A method for establishing Internet security for an authorization process, comprising the steps of:
- generating a number of random number strings in sequence at a module, each number string having a Secret Number portion and a Missing Link Key portion;
- installing the number strings in an offline vault;
- accessing the vault to transmit the Missing Link Key portion of a predetermined randomly generated number string to an Authorization Requesting Protocol at a first time, the Missing Link Key portion being automatically generated and instantly removed after generation so as not to be visible on the Internet for more than a very small period of time not readily detectable by one viewing the Internet;
- causing the module to transmit a Secret Number portion of the randomly generated number string to the Authorization Requesting Protocol at a second time;
- causing the Authorization Requesting Protocol to transmit to the vault the received Secret Number portion and the received Missing Link Key portion of the randomly generated number string;
- matching the transmitted Secret Number portion and Missing Link Key portion to the associated Secret Number portion and Missing Link Key portion stored in the vault;
- and,
- issuing an authorization command upon a match.
Apparatus for establishing a secure Internet authorization, comprising:
- a module having a random number generator for generating a large number of randomly generated number strings, each of said strings having a Secret Number portion and a Missing Link Key portion;
- a vault for storing said randomly generated number strings upon physically uploading of said randomly generated number strings from said module;
- an Authorization Requesting Protocol for ascertaining the coincidence of a Missing Link Key portion and a Secret Number portion, the Secret Number portion coming from said module, and the Missing Link Key portion coming from said vault;
- means for transmitting the Secret Number portion and Missing Link Key portion to the vault for matching of the associated Secret Number portion and Missing Link Key portion;
- and,
- an authorization signal transmitted from the vault upon said match.
A method for securely establishing authorization over the Internet, comprising the step of:
- authorizing an action based on a randomly generated number string generated by a module carried by an individual seeking authorization for the action.
Dependencies are inferred from the claim text.