Abstract: A financial institution can provide financial services to a plurality of remote devices, such as personal computers, personal data assistants, screen phones, automatic teller machines, external service providers, and internally to staff terminals and individual branches. By separating the components of the system into independent components, the system and method can be developed and tested on a component level rather than the entire system level, thereby reducing the development and maintenance cycle time. The system and method operate in sessions and can employ a dialog component for gathering information from a customer, a rule broker component for providing answers to the various legal and regulatory rules in a particular country, a language man component for selecting appropriate language, a transaction executor component for performing transactions, and a presentation manager component for formatting outputs to the customer.

Abstract: A method and system automatically harmonizes access to a given software application program via different access devices. Through use of the method and system, a financial institution can provide access to a given application (such as, for example, automatic bill payment services) to customers using different access devices such web browsers, screen phones and personal computers. A single application program is all that needs to be written and maintained by the financial institution. Also, the method and system enables financial institutions to “leverage” existing programs because now the institution can automatically “project” its existing stock of program services unto new access devices—devices which may not have even existed at the time the program was created. By receiving information from the user via the user's access device, including information identifying the type of device being used and the application program the user wishes to access, the present invention solves these problems.

Abstract: A system, in which information is the primary asset and in which investments may be made in information, includes multiple data stores for storing different types of a user's information. The safe, secure and properly authorized transfer of information while preserving individual privacy is provided. The system also provides for secure backup and storage, as well as for ubiquitous and nomadic access to information while maintaining the privacy of such information. A first data store includes static identification data about a user. A second data store includes moderately dynamic personal data about the user. A third data store includes dynamic demographic information data about the user. An electronic wallet can be used with the system to download selected portions of the data for use by the user. A method of use of the data includes using the data for billing out forms, providing services to the user and allowing merchants to selectively target users for sales while maintaining user anonymity.

Abstract: A method and system is provided for making a database stored upon a computer readable medium for use as a computerized multilingual phrase database in a runtime application environment. A database of all application phrases is created in one language with variable place holders reserved in the application phrases for each variable in the phrases. Translations of the created application phrases are created and stored in at least a second phrase database. The first and second phrase databases are exported in a form that can be used in a runtime environment by an application for which the first database and the second database were created.

Abstract: Methods and systems for single sign-on user access to multiple web servers are provided. A user is authenticated at a first web server (e.g., by user name and password). The first web server provides a web page to the user having a service selector (e.g., a hyperlink comprising the URL of a second web server offering the service indicated by the selector). When the user activates the service selector, the first web server constructs and transmits an encrypted authentication token (e.g., a cookie) from the first web server to a second web server via the user client. The first and second web servers share a sub-domain. The authentication token comprises an expiration time and is digitally signed by the first web server and is authenticated at the second web server. Upon authentication, the second web server allows the user to conduct a session at the second web server.

Abstract: A method and system for providing global self-service transaction terminals or automatic teller machines (ATMs) affords worldwide web content to ATM customers, centralized management for ATM operators, and supports local and remote administration for ATM field service personnel. The system includes multiple ATMs coupled over a network to a host, and the ATMs are provided with a touch screen interface and an interface for visually impaired persons. The ATMs enable both local and remote administration of ATM operations by bank personnel and an integrated network control. The ATMs are web-enabled, and ATM communications are performed over a communications network.

Abstract: A method and system for authenticating the identity of a user by an authority makes use of presenting biometric data for the user in a predetermined shared secret sequence. The method and system can be augmented by requesting an additional shared secret, such as a PIN or additional credentials, to establish multiple layers of authentication. Varying the layers of authentication results in greater or lesser security, and the accuracy for any given layer can be relaxed without compromising the integrity of the entire method.

Abstract: A system and method for performing and settling an electronic scrip transaction between a merchant and a member includes a database storing accounts for one or more participating merchants, scrip distributors, sponsoring organizations, and members. The system also includes merchant terminals, scrip distributor terminals, sponsoring organization terminals, and a system manager terminal, which are interconnected to one another, as well as to the database, over a network, and a member scrip card, such as a magnetic stripe card or a smart card. Transaction information, including the transaction amount, is entered at a merchant terminal and sent over the network to a scrip distributor terminal or system manager terminal, and the member's account is automatically debited by the transaction amount. Additionally, merchant loyalty point credit or tuition credit can be awarded and stored for the member in connection with the transaction amount.

Abstract: A system and method for securely storing data provides for storing, managing, and updating an owner's secret data and for accessing the stored data by a trusted third party upon the occurrence of an event, such as the death of the owner. The system and method makes use of application software, such as a virtual wallet running at least in part on the server of a trusted third party and with a virtual executor function and a virtual archivist function. The virtual executor function automatically escrows a trusted third party's access aspect of the owner's secret device for accessing the stored data. Upon verification of the occurrence of the event, the virtual executor provides access to the stored data using the trusted third party's access aspect. The virtual archivist function automatically updates technologies related to the stored data.

Abstract: A method and system for remote operator interface with a self-service transaction terminal, such as an ATM makes use of a set of web based applications for operator functions to enable the remote operator to access the operator functions over a standard browser from a remote operator interface client PC. Each ATM with which the remote operator interface is used has a set of web based applications that supports the operator functions. The operator accesses the ATM from the client PC by bringing up the browser and entering a URL to point to a specific ATM. The remote operator interface supports a plurality of supervisory type functions and enables the user to administer a plurality of ATMs for which it is configured to allow the particular functions to be performed. Communication via the remote operator interface is secure over a private network or virtual private network (VPN) over the Internet. The remote operator must be authenticated to gain access, and the operator's entitlements may limit access.

Abstract: Systems and methods for personal identification, preferably based on iris identification, include a camera for acquiring a presented image of a presented individual and a computer device for converting the presented image into a presented image metric. The computer device also compares the presented image metric to a predetermined arrangement of a plurality of reference image metrics of known individuals to identify the presented individual as one of the known individuals. The presented image metric and the plurality of reference metrics are both formatted to represent detailed physical characteristics of the individuals, including iris characteristics and other physical characteristics. Further, the plurality of reference image metrics may also be formatted to represent user-defined characteristics, which include non-image-related characteristics. The predetermined arrangement of the plurality of reference image metrics are ordered to provide a fast match with the presented image metric.

Abstract: A method and system for tracking and providing an audit trail for off-line smart card transactions includes storing information representing a monetary transaction in a permanent memo on an smart card microprocessor and holding the transaction amount in escrow until the stored information is transmitted from the smart card, for example, at an on-line terminal, to a host on-line system for logging to a tracking system. The monetary transaction includes a transaction with an off-line device, such as another smart card. The escrowed transaction amount represents, for example, a load transaction to one of the smart cards and an unload transaction to other smart card. Once the memo is deleted from the respective smart cards, the load values of the respective smart cards are incremented or decremented by the transaction amount. Alternatively, the smart cards may be provided with a card-to-card key, in which case, a permanent memo is stored only on the receiving smart card.

Abstract: A method and system for tracking and redeeming smart card loyalty points includes storing loyalty program information related to transactions with at least one merchant in a loyalty register residing on a smart card microcomputer for the customer. Transaction information about transactions with the merchant is stored in a purchase log likewise residing on the smart card microcomputer for the customer. The stored transaction information is compared with the stored loyalty program information, and transaction information about one or more transactions with the merchant which is stored in the purchase log, but which is omitted from the loyalty register, is automatically identified. The stored loyalty program information is then automatically updated with the omitted transaction information.

Abstract: The present invention allows a customer to use any of a number of a plurality of devices to access data and make transactions using an institution's computers and databases from many different locations throughout the world. As an example, a banking customer may use either a telephone, a palm computer or a television to determine his checking account balance while vacationing in a foreign country. The present invention operates by connecting the customer to the desired computer and database using universal protocol so that location becomes irrelevant. Another feature of the present invention is the efficient use of different networks with varying transmission speeds.

Abstract: A system and method for verifying the identification of a user and securely establishing an encryption key for a communication between the user and a verifying entity, such as a bank, which makes use of the numeric value of the user's personal identification number (PIN) known only to the user and the bank and resolves the man-in-the-middle problem. The system and method replaces a public parameter with the customer's PIN to provide an encryption mechanism that is less complex than existing protocols. Use of the protocol enables new products and improvement of existing products using a service access device and service access device interface, including, for example, self-service terminals.

Abstract: A method, system, and apparatus for reading from and writing to a multi-memory card, such as a bankcard, credit card, or smart card. The apparatus of the system includes reading devices, writing devices, and controllers for reading from and writing to the magnetic, optical, and electronic memory portions of a multi-memory card. The method of the present invention includes a method for controlling the reading from and writing to such cards via software applications that integrate control of a magnetic read/write component, an optical read/write component, an electronic read/write component and their respective transport mechanisms. The software applications integrate the multiple read/write components to allow such functions as for example bank and medical transactions to be performed utilizing a single multi-memory card.

Abstract: A method and system for providing status indication to a control panel displayed on a user's computer screen at all times which allows the user to sign on and off independently of any specific secure function, and utilizes both graphics and text to clearly indicate the current status of a secure connection. Additionally, entitlements or privileges associated with the secure connection and a count down of the remaining period of time during which the status of the secure connection will be in effect, are also displayed. A user may extend the effective time of the secure connection, or cancel the secure session and unequivocally sign off from all related services with a single click of the button.

Abstract: The present invention relates to a digital graphic signature system and methods for use in electronic commerce. The system comprises a document portion, including information relating to the document being executed, and a signature portion. The document portion and the signature portion may be encrypted and merged into a single object readily identifiable to an individual. The terminology “digital graphic signature” or “digigraphic signature” is utilized herein to describe the merged object. The digital graphic signature system of the present invention may be advantageously utilized in electronic transactions, including transactions over the internet and network systems. The digital graphic signature system of the present invention may also be advantageously utilized in conjunction with information banking and virtual wallets. Also disclosed is a digital graphic signet for transmitting a private communication.

Abstract: The present invention permits ISO-7816 smart cards and their non-smart card supporting devices to be connected and to interact over networks, such as networks based on Internet Protocol (IP), broadband, and wide area networks (WAN) using the T=1 protocol, similarly to if these devices were connected locally. Broadly, the invention takes a node address in a small T=1 embedded terminal and maps each address into a network address or a Universal Resource Locator (URL), such that different components of the terminal that are T=1 addressable are able to exist throughout for example, an IP network. The advantages offered by the invention include security and speed, resulting in increased ease of use and application development and increased autonomy for the smart card itself.

Abstract: A method and system for managing transaction card data provides distributed services for use of a transaction card, such as a smart card, on board a ship when shipboard communication with a centralized host system is unavailable. Aspects of the centralized land-based system, such as card issuance, card management, and issuer host authentication are migrated to the shipboard environment, and an on board issuance system, a distributed card management system, and a local monitoring and administration system are introduced to the shipboard environment. When the ship leaves port, an instance of the central system database data for the on board ship personnel is hosted on board the ship and stored in the distributed card management system database.