Internet transaction authentication apparatus, method, and system for improving security of internet transactions

A method for securely processing and responding to a website-initiated transaction authentication request, comprising the steps of:

• (1) receiving in a customer authentication apparatus said website-initiated transaction authentication message for cryptographically confirming the web site's identity and for requesting said apparatus provide a corroborating response including a biometric authentication of an enrolled customer and further including a cryptographic encapsulation of said response in order to prove that said response originates from a legitimate customer;
• (2) biometrically authenticating said customer by said customer authentication apparatus prior to transmitting said response to said request;
• (3) performing said cryptographic encapsulation of said response by said customer authentication apparatus only after successful completion of said biometric authentication of said customer using fingerprint biometrics;
• (4) transmitting said response to said request;
• and
• (5) verifying by at least one of said website and at least one external system that said response satisfactorily authenticates said customer.

A method for generating a customer-initiated transaction request from an authorized customer initiating said request, comprising the steps of:

• (1) biometrically authenticating said customer using a customer authentication apparatus prior to transmission of said customer-initiated transaction request;
• (2) processing, assembling, and cryptographically encapsulating an assertion of a successful biometric authentication of said customer and a provision of a time-varying parameter to prevent replay attacks encapsulated therewithin prior to transmission thereof;
• (3) transmitting by said customer authentication apparatus said cryptographically encapsulated request to at least one external system further comprising at least one of a website and an authentication service provider;
• (4) receiving by said at least one external system said request and verifying that said request originated from an authenticated customer;
• (5) responding to said request using a secure data message comprising a cryptographic transaction authentication response and transmitting said response to said customer authentication apparatus;
• (6) receiving and verifying by said customer authentication apparatus that said response to said request represents a response from a legitimate website;
• and
• (7) actuating at least one of a visual indicator cue and an audible indicator cue and a displayed indicator cue on said transaction authentication apparatus indicating that said response has been received from a legitimate website.

A method for improving online transaction security, the steps comprising:

• (1) enrolling a person into a customer authentication apparatus;
• (2) deploying said person and said customer authentication apparatus together at an external system where at least one transaction can be generated;
• (3) communicating between said customer authentication apparatus and said external system;
• (4) authenticating said person by said customer authentication apparatus while said apparatus is communicating with said external system;
• (5) initiating and generating of said at least one request by said person after said apparatus has authenticated said person;
• (6) transmitting a request message indicating that said person was authenticated by said apparatus and that said transaction was initiated by an authenticated person;
• and
• (7) receiving in said host system said authenticated-person-initiated-transaction message.

A system for initiating, authenticating and completing transactions by at least one customer using a biometric customer authentication apparatus, comprising:

• said at least one customer enrolled into said customer authentication apparatus;
• said customer authentication apparatus including (i) a fingerprint sensor coupled to a processor,(ii) an external communications interface adapted for communicating with at least one external system, and (iii) transaction security software resident within and executing on said processor and further comprising biometric fingerprint authentication software for authenticating authorized customers and also comprising cryptographic transaction authentication software for authenticating transactions;
• said at least one external system adapted for communicating with said customer authentication apparatus and having at least one of a physical external communications interface port and a wireless communications interface for receiving secure data messages;
• and
• at least one transaction processing application residing within said at least one external system including at least one part of a web application accessed by said at least one external system adapted for transmitting and receiving requests and responses to and from said customer authentication apparatus.