Abstract: A method and system for secure communications in a mobile commerce system having a pre-defined communications protocol. The method and system are backward compatible, providing reader configured to distinguish between a first type of transponder using an unencrypted protocol and a second type of transponder using an encrypted protocol. The reader determines the type of transponder and alters its communications protocol accordingly. The encrypted protocol provides for encrypted communications within the constraints of the existing pre-defined communications protocol.

Abstract: A system and method for facilitating electronic transactions using a biometric are disclosed. The system for facilitating electronic transactions using a biometric comprises a smartcard-reader transaction system. The method comprises determining if a transaction violates an established rule, such as a preset spending limit. The method also comprises notifying a user to proffer a biometric sample in order to verify the identity of said user, and detecting a proffered biometric at a sensor to obtain a proffered biometric sample. The method additionally comprises verifying the proffered biometric sample and authorizing a transaction to continue upon verification of the proffered biometric sample.

Abstract: The present invention relates to a method for verifying an anonymous payment by a defined party in a communication system providing a public key infrastructure. The method comprising the steps of (a) receiving a validation message from a merchant party, the validation message comprising a proof signature produced by a customer party and an encrypted payment message, the proof signature being derived from a customer secret key, a customer certificate, at least one customer attribute, and the encrypted payment message; (b) verifying the validity of the proof signature based on an issuing public key, a verification public key, and the encrypted payment message; (c) decrypting at least part of the encrypted payment message based on a verification secret key corresponding to the verification public key, thereby obtaining a customer information related to the at least one customer attribute.

Abstract: Controlling access to secure data and services by versatile computers outside a secure environment, which communicates with limited dedicated devices such as game consoles, over a secure network such as a virtual private network. The versatile computing devices obtain access over an insecure network, such as the Internet, through a trusted partner Web site that authenticates users of the site and relays requests to the secure environment. The Web site uses a certificate for a predefined level of secure access to the secure environment. A link is established between a user's Web ID authenticated by the Web site and a gamer tag used within the secure environment. Access is limited as a function of the Web ID, gamer tag, and a Web site partner ID. A Web cache stores and provides some secure data, minimizing disruption to the secure environment's primary function to service the dedicated devices.

Abstract: For end-to-end securing of transactions between a mobile terminal and an Internet server on the application layer, cryptographic transaction identification records, which are directed by the Internet server application to transaction partner applications in the mobile terminal, are stored, assigned to the mobile terminal, in a proxy server. In each case a record identification is transmitted to the mobile terminal for a stored transaction identification record as well as a proxy record, which is calculated by the proxy server from the respective stored transaction identification record. In each case a record identification and a proxy record are taken by the proxy server from the messages directed by the mobile terminal to the Internet server application.

Abstract: Order data is transmitted from a computer that has been installed at a travel agency to a center server. The order data is transmitted from the server to a photo lab. An order form is printed by an order-form printer located in the photo lab. Film having an image that complies with the order is found in a film library in accordance with the specifics written on the order form. The film that has been found is duplicated by a developing apparatus. The duplicated film and the order form are sealed in an envelope and mailed to the travel agency.

Abstract: Methods, systems, and machine-readable media are disclosed for handling payment transactions in a mobile commerce system. According to one embodiment, a method of processing a payment transaction in a mobile commerce system can comprise receiving at a first acquirer system a communication from a point-of-sale (POS) device. The communication can be related to the payment transaction and can include information identifying a financial account from which a payment is requested. A second acquirer for authorizing the payment can be identified based on the information identifying the financial account. The communication can be sent to the second acquirer system for authorization of the transaction based on the information related to the financial account. An indication of whether the transaction is authorized can be received from the second acquirer system.

Abstract: A user, in requesting a service provider to provide predetermined service, sends to a service provider data and signature data created based upon the data. The service provider calculates a fee based upon this data and requests a bank to collect the fee from the user. The bank informs the user of the fee requested from the service provider. When the user protests the amount of the fee, the service provider discloses the data and signature data received from the user to the bank and when the bank judges based upon this signature data that this data is valid, it calculates a proper fee based upon this data and collects it from the user. As described above, it is enabled to collect a proper fee for service.

Abstract: A payment system for facilitating a payment transaction between a payer and a payee is disclosed. The payment system includes a payer access device, a payee access device, and a services hub. The services hub is configured to communicate with the payer device and the payee device; maintain information relating to a payer account and access device information associated with the payer account, the payer account being linked to the access device; generate a tracer ticket in response to a request issued by the payer using either the payer device or the payee device, the tracer ticket containing information relating to the payment transaction; validate the access devices; and authorize the payment transaction against the payer account through conventional payment processing systems. Upon receiving the request from the payee device for the tracer ticket, the services hub generates the tracer ticket and forwards a copy thereof to the payer via the payee device.

Abstract: A method and system to dynamically present a payment gateway to a content requestor commences when a content distributor receives a request for access to a content item provided by a content provider. The content distributor determines whether a first payment gateway of a first plurality of payment gateways is a preferred payment gateway. If the content distributor has recorded the first payment gateway as a first preferred payment gateway then the content distributor presents the first payment gateway to a content requestor as an actual preferred payment gateway. If the content distributor has not recorded the first payment gateway as the first preferred payment gateway, then it presents a second preferred payment gateway, recorded by the content provider of the content item, as the actual preferred payment gateway to the content requestor.

Abstract: A system and method provides secure access over public communication lines using encrypted information on a removable, portable storage medium. Information relating to a customer's financial account is encrypted and stored to a disk. When a customer desires to purchase goods and/or services on-line or access his financial account, he inserts the CD into a disk drive of a personal computer. The encrypted information is retrieved from the disk and transmitted, via public communications lines, to a computer maintaining a Web site for providing the requested goods and/or services. The computer then forwards the encrypted information to a secure network. A processor on the secure network processes the customer's request, and denies or approves the transaction based on the received information. The results of such processing are returned to the computer maintaining the Web site for completing or aborting the transaction.

Abstract: A method for conducting a transaction is disclosed. The method includes using a first portable electronic device, and directly transmitting a request for payment to a second portable electronic device through a wireless link. Then, the second portable electronic device transmits an approval of the request for payment to the first portable electronic device. One of the first and the second portable electronic devices then sends the request for payment to a payment hub service. The payment hub service then facilitates the transfer of funds from a payer institution to a payee institution to complete the transaction.

Abstract: Methods and apparatus for transparently managing outbound traffic from an internal user of a private network destined for a public network are disclosed. Embodiments include a firewall device operable between an internal user of a private network and an IP-compliant network. The firewall device being configured to assign a proxy agent to process a request by the internal user to form a connection with a public network element through the IP-compliant network. Disclosed embodiments include the proxy agent forming a connection only if the internal user is authorized to access the public requested network element.

Abstract: A firewall for authenticating a user access request is disclosed. The firewall device may include a proxy process for processing incoming connection requests. The proxy is configured to receive an access request from a user over a first communication medium and prompt the user for a username over the first communication medium. The firewall may then send a password to the user over a communication medium other than said first communication medium responsive to receiving a valid username from the user. The firewall may then verify the access request responsive to receiving the password from the user through the first communication medium. The firewall may send passwords to a mobile device for verification.

Abstract: A transaction system for performing secure transactions over a communication network includes (i) a merchant server system including a computer processor and associated memory, the merchant server system offering items for sale; (ii) a buyer system including a computer processor and associated memory, the buyer system being selectively couplable to the merchant server system over the communication network to initiate a transaction, wherein, during the transaction, the buyer system selects one or more of the items for purchase; (iii) a security server system including a computer processor and associated memory and an encryption device, the security server system receiving buyer information from the buyer system, encrypting the buyer information in an encryption key that prevents the merchant server system from decrypting the buyer information, and transferring the encrypted buyer information to the merchant server system; and (iv) a third server system including a computer processor and associated memory, the

Abstract: A firewall for authenticating a user access request is disclosed. The firewall device may include a proxy process for processing incoming connection requests. The proxy is configured to receive an access request from a user over a first communication medium and prompt the user for a username and a first password portion over the first communication medium. The firewall may then send a second password portion to the user over a communication medium other than said first communication medium responsive to receiving a valid user name and first password portion pair from the user. The firewall may then verify the access request responsive to receiving the second password portion from the user through the first communication medium. The firewall may send passwords to a mobile device for verification.

Abstract: An intelligent method of e-commerce order completion automatically completes an order using either stored billing information, or information supplied at purchase if none is stored. User sends an order to a merchant. On receipt, user's authentication level is checked. If user is authenticated and billing information has been stored, it is retrieved and order completed without further user action. When none has been stored, flow redirects to a digital form for entering billing information, whereupon order is completed. In this case, after order completion, the user may save billing information to create a new digital wallet. To create the wallet, if the user isn't authenticated, or is insufficiently authenticated, they are first prompted to authenticate. Upon wallet creation, the user is fully authenticated and can complete purchases quickly without providing billing information with every purchase.

Abstract: An effective electronic settlement system in which the number of checks is small. The electronic settlement system includes a data storage device such as an IC card in which value information is stored, a client device provided with an information input/output function to the data storage device, a store device for providing commodities or services, a settlement management device for managing settlement between the data storage device and the store device, and a communication system for connecting the client device, the store device, and the settlement management device so as to enable bidirectional communication.

Abstract: Methods and systems are provided for processing a stored-value instrument. An unrestricted value associated with the stored-value instrument is authenticated at an instrument-authority system in response to an authentication request received from a merchant point-of-sale terminal. An allocation request is received at the instrument-authority system for a restricted allocation of at least a portion of the authenticated value associated with the stored-value instrument. The authenticated value is allocated in accordance with the allocation request.

Abstract: The present invention relates to Card Payment Systems for use in a multi-currency environment. In particular, the present invention provides a system and method for identifying an appropriate currency for individual transactions conducted using a card payment system, using the steps of identifying (50) an identifier code (60(1-n)) from a payment card, and determining (52) from the identifier code (60(1-n)) a suitable currency (61(1-n)) for association with said payment card transaction. The identifier code is preferably a portion of the card number of the payment card. The transaction may be processed (54) in the suitable currency or the transaction amounts may be displayed in the suitable currency for information purposes.

Abstract: The invention is a method and system for obtaining connection to a packet data network (14). The invention includes inputting a user request to a first network (10) which requests that the user (12) be authorized for connection to the packet data network through a second network; transmitting from the first network to the second network the user request and an authorization of payment to the second network by the first network for the user's use of the packet data network; transmitting from the second network to the first network authentication information granting the user authentication through the second network to the packet data network; and transmitting the authentication information from the first network to the user which informs the user that authentication to obtain connection to the packet data network has been granted.

Abstract: Provided are a method and apparatus for issuing a rights object required to use digital content. The method includes receiving the digital content and the rights object; and encrypting the received rights object using a public key of a secure multimedia card (SMC) and storing the encrypted rights object in the SMC.

Abstract: Methods and apparatus in a partitionable computing system. A processor communicates with a packet former. The packet former can be configured to construct a data packet that can include security status information related to a partition or processor.

Abstract: A payment system for facilitating a payment transaction between a payer and a payee is disclosed. The payment system includes a payer access device, a payee access device, and a services hub. The services hub is configured to communicate with the payer device and the payee device; maintain information relating to a payer account and access device information associated with the payer account, the payer account being linked to the access device; generate a tracer ticket in response to a request issued by the payer using either the payer device or the payee device, the tracer ticket containing information relating to the payment transaction; validate the access devices; and authorize the payment transaction against the payer account through conventional payment processing systems. Upon receiving the request from the payee device for the tracer ticket, the services hub generates the tracer ticket and forwards a copy thereof to the payer via the payee device.

Abstract: A remote configurator for a gateway device is disclosed. The remote configurator module is operatively disposed in a gateway device for providing network connectivity between a source and destination of IP-compliant traffic. Embodiments of the remote configurator module are disclosed providing an HTML-based configuration interface for allowing remote management of gateway configuration files over an IP-compliant connection.

Abstract: An automated banking machine (12) is operative to conduct transactions in response to HTML documents and TCP/IP messages exchanged with a local computer system (14) through an intranet (16), as well as in response to messages exchanged with foreign servers (20, 22, 24, 26, 28, 96) in a wide area network (18). The banking machine includes a computer (34) having a document handling portion (76, 80, 82) including one or more browsers. The document handling portion is operative to communicate through a proxy server (88), with a home HTTP server (90) in the intranet or the foreign servers in the wide area network. The computer further includes a device application portion (84) which interfaces with the document handling portion and dispatches messages to operate devices (36) in the automated banking machine. The devices include a sheet dispenser mechanism (42) which dispenses currency as well as other transaction function devices.

Abstract: A network system for key management, including a server, a key management system providing process logic for key management system management located on the server, a key management system storage providing a secure data storage for the key management system, an application using the key management system to manage an application key, and an interface providing a means for managing the key management system.

Abstract: A transponder-reader payment system includes a RFID reader for interrogating a transponder, and a fob including a transponder which is associated with fob data file funded by one or more funding sources. In exemplary operation, the fob identifying information may be presented to the RFID reader for completion of a transaction request. The transaction request may be provided to a fob issuer system which may process the transaction request in accordance with a funding protocol wherein the transaction request is satisfied according to a fob issuer predefined funding criteria relative to the multiple funding sources.

Abstract: A virtual payment system for ordering and paying for goods, services and content over an internetwork is disclosed. The virtual payment system comprises a commerce gateway component (52) and a credit processing server component (53). The virtual payment system is a secure, closed system comprising registered sellers and buyers. A buyer becomes a registered participant by applying for a virtual payment account. Likewise, a seller becomes registered by applying for a seller account. A buyer can instantly open an account on-line. That is, the credit processing component (53) immediately evaluates the buyer's virtual payment card application and assigns a credit limit to the account. Once an account is established, a digital certificate is stored on the registered participant's computer. The buyer can then order a product, i.e., goods, services or content from a seller and charge it to the virtual payment account.

Abstract: Method for distribution of value codes configured to be cashed in to obtain credit for services subject to charges. The value codes are generated and stored in a database of a value code issuer. A value code is ordered by a customer through transmission of order data, containing at least one monetary amount value, via an order channel, to the value code issuer. A delivery number, linked in the database with the value code, is transmitted via a delivery channel to the customer, and the receipt of the transmitted delivery number is confirmed by the customer through transmission of at least one part of the delivery number via a confirmation channel to the value code issuer. A value, linked in the database to the monetary amount value, is transmitted via a delivery channel to the customer, and a monetary amount value corresponding to at least the monetary amount value linked to the confirmed value code is charged to the customer.

Abstract: A system of securing communications, comprising a plurality of computer peripheral resources, a beacon in signal communication with and located proximate each computer peripheral resource and configured to communicate using RF signals and ultrasound signals, and a portable device configured to request a listing of the computer peripheral resources using wireless network communication and to guide a user to a selected one of the computer peripheral resources using the RF and the ultrasound signals by way of the corresponding beacon, the portable device and the selected computer peripheral resource being configured to exchange encryption keys validated using signals from the beacon and to communicate with each other using encrypted network communication. Also provided is a communication system, comprising first and second portable devices respectively configured to use RF signals and ultrasound signals and to exchange encryption keys and to communicate with each other using encrypted network communication.

Abstract: A system, method and computer program product are provided for summarizing firewall activity. Initially, a plurality of types of events associated with a firewall of a local computer is organized. Further, a number of occurrences of each type of event is tracked utilizing the firewall. Further, a graphical representation is displayed indicating a severity of the number of the events utilizing the firewall.

Abstract: A method and system to dynamically present a payment gateway to a content requester commences when a content distributor receives a request for access to a content item provided by a content provider. The content distributor determines whether a first payment gateway of a first plurality of payment gateways is a preferred payment gateway. If the content distributor has recorded the first payment gateway as a first preferred payment gateway then the content distributor presents the first payment gateway to a content requestor as an actual preferred payment gateway. If the content distributor has not recorded the first payment gateway as the first preferred payment gateway, then it presents a second preferred payment gateway, recorded by the content provider of the content item, as the actual preferred payment gateway to the content requester.

Abstract: A customer inserts a security device (D) into the USB port of his computer (C). When a transaction request confirmation (1) is transmitted to a merchant server (M), the merchant server (M) instructs an account server (AS). The account server (AS) performs customer verification, and payment (either with a local account or remote financial institute server). The account server (AS) communicates directly (3, 5) with the customer computer (C) with an encryption mechanism utilising security data read from the security device (D) and a time stamp. A security key for the security device is updated after each transaction and an embedded hardware key is also used.

Abstract: A high-speed dubbing unit 10 for dubbing digital data from an optical disk 15 to a hard disk 16 at a high speed is connected via a public telephone line to a payment imposing unit 20. A control unit 13 is provided for generating in its basic data generator 13B basic data for imposing the payment from at least data indicative of the user identification and data indicative of the speed for recording the data read out from the optical disk 15 into the hard disk 16 and transmitting the basic data to the payment imposing unit 20. The payment imposing unit 20 performs the imposing of the payment according to the basic data received from the control unit 13 and transmits data indicative of the completion of imposing the payment to the control unit 13. In response to the data indicative of the completion of the payment, the control unit 13 directs the high-speed dubbing unit 10 to start recording the data read out from the optical disk 15 into the hard disk 16.

Abstract: A transaction network contains a networked certificate authority, by which one or more virtual certificates may be remotely defined and stored, such as by an issuer user through a issuer web portal interface. An acquirer user, through an acquirer web portal interface, may acquire one or more virtual certificates, which contain a public key portion, as well as a corresponding private key, which is established at the time of acquisition, and is stored at the certificate authority. At a redemption location associated with an acquired certificate, the acquirer (or an alternate recipient of an acquired certificate to whom the acquirer has communicated the established private key), submits the certificate information, along with the established private key, to redeem the certificate.

Abstract: A method for accessing content through multiple devices, e.g. Telephone (1) and/or a data device (4) such as a Personal Digital Assistant (PDA) or Web Enabled Mobile Phone, is discussed where a user can initiate interaction with data through any device (mode), and then switch to another mode of interaction without starting over. The discussed method also allows a user to return to the same point in an application where a call session was lost or intentionally disengaged before completion. The user can regain access to the original call session via any telecommunications (voice or non-voice) device. Access can be accomplished whether the device is the same or different from that used for the original session.

Abstract: A process and system for seeking authorization for present receipt of legal tender in a requested amount, including: receiving an input entered through a user interface, the input comprising a value for the requested amount (encoded information from an identification item may also be read); transmitting the input over a data transfer pathway to a remote processor; automatically determining whether authorization of the requested amount, or a lesser amount, is granted; and if authorization is so granted, reading indicia information on a post-dated draft item for a sum total equal to at least an authorized amount plus a fee (if a draft item is being used for the present receipt of tender), and automatically providing an article for use to effectuate the present receipt of the legal tender in this authorized amount. The indicia information is also preferably transmitted over the data transfer pathway. An intermediary may be employed in the process.

Abstract: A method is provided for conducting an electronic transaction with a payment account number having a certain amount of available funds, using a payment network and a “check site”. The method comprises the following steps: (a) generating a secret key associated with the payment account number; (b) using the secret key to generate a message authentication code (“MAC”) specific to the transaction; (c) generating an authorization request message including the message authentication code; (d) forwarding the authorization request message over the payment network to the check site for verifying the authenticity of the MAC; (e) verifying the message authentication code by the check site using the secret key; (f) responding to the authorization request message over the payment network based on the available funds and the transaction amount.

Abstract: A method for enabling two individual consumers to complete a transaction that includes payment from one consumer (the payor, or buyer) to another consumer (the payee, or seller). An intermediary typically operates the service over a computer network of nodes, such as the Internet. The buyer has the convenience of paying through a variety of different payment instruments. Likewise, the seller has the convenience of receiving payment through a variety of different disbursement instruments. For a fee, the intermediary collects the payment from the buyer and pays the seller. Although the intermediary may receive payment from the buyer before the intermediary transfers the payment to the seller, the intermediary may choose to pay the seller before receiving payment from the buyer. In this case, the intermediary assumes the risk of nonpayment by the buyer.

Abstract: A method and system of payment of goods and services in an electronic commerce system reduces the transfer and processing costs for each purchase made by a customer from a merchant. A customer agent, a merchant agent, and account manager associated with the agents administer customer accounts and merchant accounts. A mediating trusted agent associated with one of the account managers and merchant agent transactions during a trading session. The customer agent and merchant agent, the account manager, and the mediating trusted agent are interconnected by an electronic communication network.

Abstract: A system and method for authorizing certain aspects of network based transactions between a customer and a merchant is disclosed. At a credit card authorization system, merchant information, transaction information, and a credit card number of a customer is received from an e-commerce merchant. An authorization form at the credit card authorization system that contains the transaction information is created. An internet browser associated with the customer is caused to display the authorization form. A signature phrase is received from the customer via the authorization form. The received signature phrase is verified that it corresponds to a signature phrase stored in a credit card account associated with the credit card number. The internet browser associated with the customer is caused to be transferred to a web site associated with the e-commerce merchant.

Abstract: A software development system. An inventory of software modules is maintained. When a given system is to be assembled, modules from the inventory are selected for that system. In addition, modules not contained in the inventory are developed specifically for that system, and included in the system.

Abstract: A software system efficiently procures operating resources within an enterprise. A requisition record generating module generates a requisition record for a requisition. The requisition record indicates at least an operating resource that a requestor desires to purchase. The requisition record generating module generates the requisition record responsive to a combination of input by a requestor and operating resource information in an operating resource information database. An approval path determining module. responsive to the requisition record and to approval rules in an approval rules database, determines an approval path for the requisition record, among various ones of a plurality of possible approvers, required to approve the requisition record. An approval path handling module guides the requisition record along the determined approval path, and the approval path handling module generates a global approval indication in response to the requisition record successfully traversing the approval path.

Abstract: A method for enhancing data security when chip cards are used for payment transactions and input data are loaded into an algorithm when performing an authentication. The security of the debit and credit data is enhanced by subdividing the data blocks and by switching an additional feedback on and off following the downstream counters at preselected clock pulse times. The method is applicable to all authentication processes in conjunction with chip cards.

Abstract: An object of the invention is to provide a transmitting system of which data is difficult to be tapped and which is suitable for flexibly determining a watching and listening fee. In order to achieve the object, there is provided a combination of a transmitting method comprising steps of, transmitting encoded data which has been encoded, to a receiving side, changing the encoding in a predetermined unit, and performing recording according to requirement, from the receiving side of information concerning decoding of the encoded data, and a receiving method comprising steps of, receiving the encoded data which has been encoded, from a transmitting side, requiring the information concerning the decoding of the encoded data, to the transmitting side, and decoding the encoded data by using the obtained information concerning the decoding.

Abstract: A system and method for distributed function discovery with third party responses in a peer-to-peer network to facilitate efficient use of bandwidth and resources are disclosed. The method for secure automatic selection of a designated service provider in a peer-to-peer network generally comprises broadcasting a digitally signed election initiating packet containing a value for at least one criteria by a sending node, awaiting response time-out period expiry or receipt of a response election packet, broadcasting a digitally signed election result packet indicating the sending node is the designated service provider if response time-out period expiry occurs prior to receipt of a response election packet, and awaiting for, verifying, and storing election result in an election result broadcast if receipt of a response election packet occurs prior to expiry of response time-out period.

Abstract: An effective electronic settlement system in which the number of checks is small. The electronic settlement system includes a data storage device such as an IC card in which value information is stored, a client device provided with an information input/output function to the data storage device, a store device for providing commodities or services, a settlement management device for managing settlement between the data storage device and the store device, and a communication system for connecting the client device, the store device, and the settlement management device so as to enable bidirectional communication.

Abstract: Using a preset, temporary ID, a user accesses an on-line shop where he is not registered. When the user buys a commodity, the on-line shop sends order data to a money gate. In response to a request from the money gate, a mall-operating company where the user is registered sends the money gate information necessary for settlement such as a credit number. The money gate generates final order data by combining the order data and the information necessary for settlement. Settlement processing with a card company is performed by using the final order data.

Abstract: The process consists of carrying out the first phase of generating the transaction signature (9), with prior authentication by the cardholder, in the issuing centre (3) through its authentication server (5), a second phase of decimalising (10) the signature (9) to obtain a valid permutation number and a third phase of permuting (11) the intermediary positions or digits of the card, the processor fixing a BIN and maintaining the check digit. In this way, the digits forming the expiry date are permuted. The card and expiry date are sent in the data flow (12) of the transaction to the acquiring server (7), from where they are sent back to the issuing centre (3), to its processing centre (6) to be specific, where three other operative phases are carried out: the new generation of the signature (13), its decimalisation (14) and lastly the inverse process (15) to reestablish the card's real data and expiry date.