US 2014/0237573 A1 · METHOD AND SYSTEM USING A CYBER ID TO PROVIDE SECURE TRANSACTIONS

Abstract

A method and system for securing a user transaction involving a subscriber unit (“SU”) (having a processor, memory, and a display configured to accept user input), a credential information manager (“CIM”) (having a processor and memory), and a transaction service provider (“TSP”) (having a processor and memory). A cyber identifier (“CyberID”), a subscriber identifier (“SubscriberID”), and subscriber information, each associated with the user, is stored in the CIM. A transaction request is sent from the SU to the TSP, which creates a transaction identifier (“TID”), stores it in the TSP memory and transmits it to the SU. The SU transmits an authentication request, the TID, and SubscriberID to the CIM, which authenticates the SubscriberID and verifies the TID to the TSP. The TSP verifies the TID and reports it to the CIM, which transmits the CyberID and subscriber information to the TSP, and transmits a transaction authorization to the SU.

Claims58

Dependent claims

1-68. (canceled)

A method for securing a transaction among a user, a transaction service provider having a processor and a memory, and a credential information manager having a memory and a processor, the credential information manager configured to store a cyber identifier associated with the user, store and authenticate a subscriber identifier associated with the user, store subscriber information associated with the user, transmit a request for verification to the transaction service provider, transmit a transaction identifier to the transaction service provider for verification, receive a verification request result message from the transaction service provider, and transmit the cyber identifier, the subscriber information, and the transaction authorization to the transaction service provider, the method comprising:

providing a subscriber unit having a processor, a memory, and a display, wherein said subscriber unit is configured to accept user input,
transmitting a request for a transaction from said subscriber unit to the transaction service provider;
receiving, by said subscriber unit, a transaction identifier transmitted from the transaction service provider;
transmitting a request for authentication from said subscriber unit to the credential information manager;
transmitting said transaction identifier from said subscriber unit to the credential information manager;
transmitting a subscriber identifier and a cyber identifier associated with the user from said subscriber unit to the credential information manager, wherein said cyber identifier comprises a username and subscriber information;
and
transmitting a password from said subscriber unit to the transaction service provider;
wherein said password is never transmitted to the credential information manager and wherein said cyber identifier is never transmitted to said subscriber unit;
and
wherein said subscriber information is never transmitted to the transaction service provider by said subscriber unit.

8 more elements

A method for securing a transaction among a user, a subscriber unit having a memory and a processor and configured to accept a user input, and a transaction service provider having a memory and a processor, the transaction service provider configured to receive a request for a transaction from the subscriber unit, transmit a transaction identifier created based on the transaction request to the subscriber unit, store the transaction identifier, verify the transaction identifier, and receive a password transmitted from the subscriber unit, the method comprising:

providing a credential information manager having a processor and a memory,
storing a cyber identifier associated with the user in said credential information manager memory, wherein said cyber identifier comprises a username and subscriber information;
storing a subscriber identifier associated with the user in said credential information manager memory;
storing said subscriber information associated with the user in said credential information manager memory;
receiving, by said credential information manager, a request for authentication from the subscriber unit;
receiving, by said credential information manager, said transaction identifier from the subscriber unit;
receiving, by said credential information manager, a subscriber identifier from the subscriber unit;
authenticating, by said credential information manager, said subscriber identifier received by said credential information manager from the subscriber unit with said subscriber identifier stored in said credential information manager memory;
transmitting, from said credential information manager to the transaction service provider, a request for verification;
transmitting, from said credential information manager to the transaction service provider, said transaction identifier received from the subscriber unit;
receiving, by said credential information manager, a verification request result message from the transaction service provider;
transmitting, from said credential information manager to the transaction service provider, said cyber identifier stored in said credential information manager memory;
transmitting, from said credential information manager to the transaction service provider, said subscriber information stored in said credential information manager memory;
and
transmitting, from said credential information manager to the transaction service provider, a transaction authorization;
wherein the password is never transmitted to said credential information manager and wherein said cyber identifier is never transmitted to the subscriber unit;
and
wherein said subscriber information is never transmitted to the transaction service provider by the subscriber unit.

15 more elements

A method for securing a transaction among a user, a subscriber unit having a memory and a processor and configured to accept a user input, and a credential information manager having a memory and a processor, the credential information manager configured to store a cyber identifier associated with the user, store and authenticate a subscriber identifier associated with the user, store subscriber information associated with the user, receive a request for authentication, a transaction identifier, and a subscriber identifier from the subscriber unit, and authenticate the subscriber identifier, the method comprising:

providing a transaction service provider having a processor and a memory,
receiving by said transaction service provider a request for a transaction from the subscriber unit;
transmitting a transaction identifier, created by said transaction service provider based on said transaction request, from said transaction service provider to the subscriber unit;
storing said transaction identifier in said transaction service provider memory;
receiving, by said transaction service provider, a request for verification from the credential information manager;
receiving a transaction identifier, by the transaction service provider, from the credential information manager;
verifying, by said transaction service provider, said transaction identifier received by said transaction service provider from the credential information manager with said transaction identifier stored in said transaction service provider memory;
transmitting, from said transaction service provider to the credential information manager, a verification request result message;
receiving, by said transaction service provider from the credential information manager, a cyber identifier, wherein said cyber identifier comprises a username and subscriber information;
receiving, by said transaction service provider from the credential information manager, said subscriber information associated with the user;
receiving, by said transaction service provider from the credential information manager, a transaction authorization;
and
receiving, by said transaction service provider from the subscriber unit, a password;
wherein said password is never transmitted to the credential information manager and wherein said cyber identifier is never transmitted to the subscriber unit;
and
wherein said subscriber information is never transmitted to said transaction service provider by the subscriber unit.

13 more elements

A system for securing a transaction among a user, a transaction service provider having a processor and a memory, and a credential information manager having a memory and a processor, the credential information manager configured to store a cyber identifier associated with the user, store and authenticate a subscriber identifier associated with the user, store subscriber information associated with the user, transmit a request for verification to the transaction service provider, transmit a transaction identifier to the transaction service provider for verification, receive a verification request result message from the transaction service provider, and transmit the cyber identifier, the subscriber information, and the transaction authorization to the transaction service provider, the system comprising:

a subscriber unit having a processor, a memory, and a display;
wherein said subscriber unit is configured to accept user input;
a transaction request configured to be transmitted by a communication path from said subscriber unit to the transaction service provider;
a computer program stored in said memory of said transaction service provider for creating, based on said transaction request, a transaction identifier;
said transaction identifier configured to be transmitted by a communication path from said transaction service provider to said subscriber unit;
said transaction identifier stored in said transaction service provider memory;
a request for authentication configured to be transmitted by a communication path from said subscriber unit to said credential information manager;
said transaction identifier configured to be transmitted by a communication path from said subscriber unit to said credential information manager;
a subscriber identifier configured to be transmitted by a communication path from said subscriber unit to said credential information manager;
a password configured to be transmitted by a communication path from said subscriber unit to said transaction service provider;
wherein said password is never transmitted to said credential information manager and wherein said cyber identifier is never transmitted to said subscriber unit;
and
wherein said subscriber information is never transmitted to said transaction service provider by said subscriber unit.

10 more elements

A system for securing a transaction among a user, a subscriber unit having a memory and a processor and configured to accept a user input, and a transaction service provider having a memory and a processor, the transaction service provider configured to receive a request for a transaction from the subscriber unit, transmit a transaction identifier created based on the transaction request to the subscriber unit, store the transaction identifier, verify the transaction identifier, and receive a password transmitted from the subscriber unit, the system comprising:

a credential information manager having a processor and a memory,
a cyber identifier associated with the user stored in said credential information manager memory, wherein said cyber identifier comprises a username and subscriber information;
a subscriber identifier associated with the user stored in said credential information manager memory;
said subscriber information associated with the user stored in said credential information manager memory;
a request for authentication configured to be transmitted by a communication path from said subscriber unit to said credential information manager;
said transaction identifier configured to be transmitted by a communication path from said subscriber unit to said credential information manager;
a subscriber identifier configured to be transmitted by a communication path from said subscriber unit to said credential information manager;
a computer program stored in said memory of said credential information manager for authenticating, by said credential information manager, said subscriber identifier received by said credential information manager from said subscriber unit with said subscriber identifier stored in said credential information manager memory;
a request for verification configured to be transmitted by a communication path from said credential information manager to said transaction service provider;
said transaction identifier, received from said subscriber unit, configured to be transmitted by a communication path from said credential information manager to said transaction service provider;
a verification request result message configured to be transmitted by a communication path from said transaction service provider to said credential information manager;
said cyber identifier, stored in said credential information manager memory, configured to be transmitted by a communication path from said credential information manager to said transaction service provider;
said subscriber information, stored in said credential information manager memory, configured to be transmitted by a communication path from said credential information manager to said transaction service provider;
a transaction authorization configured to be transmitted by a communication path from said credential information manager to said transaction service provider;
and
wherein said password is never transmitted to said credential information manager and wherein said cyber identifier is never transmitted to said subscriber unit;
and
wherein said subscriber information is never transmitted to said transaction service provider by said subscriber unit.

15 more elements

A system for securing a transaction among a user, a subscriber unit having a memory and a processor and configured to accept a user input, and a credential information manager having a memory and a processor, the credential information manager configured to store a cyber identifier associated with the user, store and authenticate a subscriber identifier associated with the user, store subscriber information associated with the user, receive a request for authentication, a transaction identifier, and a subscriber identifier from the subscriber unit, and authenticate the subscriber identifier, the system comprising:

a transaction service provider having a processor and a memory,
a transaction request configured to be transmitted by a communication path from said subscriber unit to said transaction service provider;
a computer program stored in said memory of said transaction service provider for creating, based on said transaction request, a transaction identifier;
said transaction identifier configured to be transmitted by a communication path from said transaction service provider to said subscriber unit;
said transaction identifier stored in said transaction service provider memory;
a request for verification configured to be transmitted by a communication path from said credential information manager to said transaction service provider;
said transaction identifier, received from said subscriber unit, configured to be transmitted by a communication path from said credential information manager to said transaction service provider;
a computer program stored in said memory of said transaction service provider for verifying, by transaction service provider, said transaction identifier received by transaction service provider from said credential information manager with said transaction identifier stored in said transaction service provider memory;
a verification request result message configured to be transmitted by a communication path from said transaction service provider to said credential information manager;
said cyber identifier, stored in said credential information manager memory, configured to be transmitted by a communication path from said credential information manager to said transaction service provider;
said subscriber information, stored in said credential information manager memory, configured to be transmitted by a communication path from said credential information manager to said transaction service provider;
a transaction authorization configured to be transmitted by a communication path from said credential information manager to said transaction service provider;
and
a password configured to be transmitted by a communication path from said subscriber unit to said transaction service provider;
wherein said password is never transmitted to said credential information manager and wherein said cyber identifier is never transmitted to said subscriber unit;
and
wherein said subscriber information is never transmitted to said transaction service provider by said subscriber unit.

14 more elements

Dependencies are inferred from the claim text.

Method and system using a cyber id to provide secure transactions

Life of this patent

Method and system using a cyber id to provide secure transactions

Life of this patent

Abstract

Claims58