Abstract: The method includes the steps of receiving at the PEAD first digital data representing the transaction request. The PEAD provides information to the user regarding an ability to approve the transaction request. When the transaction request is approved by the user, the PEAD receives second digital data representing the electronic service authorization token. A remote agent server may provide a bridge between the electronic transaction system and the PEAD. In another embodiment, the private key is stored on the portable device, encrypted. The decryption key is stored outside of the device, at a trusted 3rd party location. When the user attempts to make a signature the software sends a request for the decryption key, along with the user's password or pass phrase keyed in at the keyboard of the PDA, smart phone, or cell phone, to a server belonging to the trusted 3rd party.
Type:
Grant
Filed:
December 4, 2006
Date of Patent:
December 22, 2009
Assignee:
Esignx Corporation
Inventors:
Ynjiun P. Wang, Joshua C. Ding, James A. Grizzard
Abstract: The invention enables a registered PEAD user to exchange a secure message with another registered PEAD user by using the user ID and the user public key information in the server. The sender can retrieve the public key information from the server 1201 using the receiver's user ID as an index; then the sender can derive the shared secret using the receiver's public key. The sender then can encrypt the message with the shared secret and send it over to a server with the other PEAD user's (receiver's) ID appended with the sender's user ID over the wireless network and/or Internet. The server then stores the message and forwards the message to the receiver once the receiver's PEAD is polling for messages. (It is understood in the art that the server can push the messages to the receiver's PEAD). The receiving PEAD user can use the sender's PEAD user ID and sender's public key information to derive the shared secret to decrypt a received secure message.
Abstract: A method permits a user to conduct a charged transaction utilizing a charge terminal of an electronic transaction system, the charge card terminal being configured to interface with a charge card for the purpose of conducting the charge card transaction. A merchant card is provided to a merchant where the charge card transaction is to be conducted. A charge card terminal at the merchant accepts the merchant card and a pin number or cellular phone number from the user conducting the charge card transaction. The phone number or pin number of the customer causes a call to be placed to a cellular phone of a person required to authorize the charge card transaction.
Abstract: A portable transaction arrangement for permitting a user to conduct a charge card transaction vis-à-vis a charge card terminal of an electronic transaction system. The charge card terminal is configured to communicate with a charge card for the purpose of conducting the charge card transaction. The charge card is one of a magnetic stripe card and an electronic smart card. The portable transaction arrangement includes an emulation card having an emulation card interface. The emulation card interface emulates an interface of the charge card. The interface of the charge card facilitates communication between the charge card and the charge card terminal. There is also included a portable emulation card configuring device arranged to be used in conjunction with the emulation card, which in turn includes a memory configured to store first charge card data pertaining to a first charge card of the user, and an authentication mechanism.
Abstract: A computer configured to authenticate a user to an electronic transaction system is disclosed. The computer includes a central processing unit and electronic authorization firmware disposed within the computer and in electronic communication with the central processing unit. The electronic authorization firmware includes a non-volatile memory circuit configured to store at least one of a user private key and user identification data and a firmware identification data. The electronic authorization firmware further includes decryption logic circuitry disposed between the non-volatile memory circuit and the electronic transaction system. The decryption logic circuitry is configured to prevent unauthorized access to at least one of the user private key and the user identification data in the non-volatile memory circuit.