Abstract: A method and system for implementing on-line financial institution services via a single physical and logical platform deploys global online banking applications in an environment in which the applications are built from a single source base and adapted to various business rules and languages associated with different regions, countries and businesses. Separate web apps are created for each individual business according to contextual attributes, and application servers running the context dependent web apps provide the interface between customers and banking functionality. The platform relies in part on reuse of appropriate components to achieve integration, as well as sharing of core services. As a result of the independent nature of business specific components, each business may require different versions of application software and may update or implement new components without affecting existing business components.

Abstract: A financial institution can provide financial services to a plurality of remote devices, such as personal computers, personal data assistants, screen phones, automatic teller machines, external service providers, and internally to staff terminals and individual branches. By separating the components of the system into independent components, the system and method can be developed and tested on a component level rather than the entire system level, thereby reducing the development and maintenance cycle time. The system and method operate in sessions and can employ a dialog component for gathering information from a customer, a rule broker component for providing answers to the various legal and regulatory rules in a particular country, a language man component for selecting appropriate language, a transaction executor component for performing transactions, and a presentation manager component for formatting outputs to the customer.

Abstract: A method and system for securely logging onto a banking system authentication server so that a user credential never appears in the clear during interaction with the system in which a user's credential is DES encrypted, and the DES key is PKI encrypted with the public key of an application server by an encryption applet before being transmitted to the application server. Within the HSM of the application server, the HSM decrypts and re-encrypts the credential under a new DES key known to the authentication server, the re-encrypted credential is forwarded to the authentication server, decrypted with the new DES key known to the authentication server, and verified by the authentication server.

Abstract: A financial institution can provide financial services to a plurality of remote devices, such as personal computers, personal data assistants, screen phones, automatic teller machines, external service providers, and internally to staff terminals and individual branches. By separating the components of the system into independent components, the system and method can be developed and tested on a component level rather than the entire system level, thereby reducing the development and maintenance cycle time. The system and method operate in sessions and can employ a dialog component for gathering information from a customer, a rule broker component for providing answers to the various legal and regulatory rules in a particular country, a language man component for selecting appropriate language, a transaction executor component for performing transactions, and a presentation manager component for formatting outputs to the customer.

Abstract: A method and system for securely logging onto a banking system authentication server so that a user credential never appears in the clear during interaction with the system in which a user's credential is DES encrypted, and the DES key is PKI encrypted with the public key of an application server by an encryption applet before being transmitted to the application server. Within the HSM of the application server, the HSM decrypts and re-encrypts the credential under a new DES key known to the authentication server, the re-encrypted credential is forwarded to the authentication server, decrypted with the new DES key known to the authentication server, and verified by the authentication server.

Abstract: A computer-implemented method and system for secure user authentication in electronic commerce involves maintaining electronic information having a first aspect that is accessible over a first electronic communication channel in response to entry of a first credential known to the user and a second aspect that is accessible by the user over the first electronic communication channel in response to entry of a second credential provided to the user at a pre-registered delivery address on a second electronic communication channel.

Abstract: A method and system for securely logging onto a banking system authentication server so that a user credential never appears in the clear during interaction with the system in which during a log on process, an encryption applet and the public key of a public/private key pair of a banking application server, the private key for which is known by a hardware security module (HSM) of the banking application, are downloaded by a user's browser. The applet contains code for generating a DES key and performing DES and PKI encryption. A user's credential is DES encrypted, and the DES key is PKI encrypted with the public key of the application server by the applet before being transmitted to the application server.

Abstract: A method and system for securely logging onto a banking system authentication server so that a user credential never appears in the clear during interaction with the system in which a user's credential is DES encrypted, and the DES key is PKI encrypted with the public key of an application server by an encryption applet before being transmitted to the application server. Within the HSM of the application server, the HSM decrypts and re-encrypts the credential under a new DES key known to the authentication server, the re-encrypted credential is forwarded to the authentication server, decrypted with the new DES key known to the authentication server, and verified by the authentication server.

Abstract: A method and system automatically harmonizes access to a given software application program via different access devices. Through use of the method and system, a financial institution can provide access to a given application (such as, for example, automatic bill payment services) to customers using different access devices such web browsers, screen phones and personal computers. A single application program is all that needs to be written and maintained by the financial institution. Also, the method and system enables financial institutions to “leverage” existing programs because now the institution can automatically “project” its existing stock of program services unto new access devices—devices which may not have even existed at the time the program was created. By receiving information from the user via the user's access device, including information identifying the type of device being used and the application program the user wishes to access, the present invention solves these problems.

Abstract: A financial institution can provide financial services to a plurality of remote devices, such as personal computers, personal data assistants, screen phones, automatic teller machines, external service providers, and internally to staff terminals and individual branches. By separating the components of the system into independent components, the system and method can be developed and tested on a component level rather than the entire system level, thereby reducing the development and maintenance cycle time. The system and method operate in sessions and can employ a dialog component for gathering information from a customer, a rule broker component for providing answers to the various legal and regulatory rules in a particular country, a language man component for selecting appropriate language, a transaction executor component for performing transactions, and a presentation manager component for formatting outputs to the customer.

Abstract: A financial institution can provide financial services to a plurality of remote devices, such as personal computers, personal data assistants, screen phones, automatic teller machines, external service providers, and internally to staff terminals and individual branches. By separating the components of the system into independent components, the system and method can be developed and tested on a component level rather than the entire system level, thereby reducing the development and maintenance cycle time. The system and method operate in sessions and can employ a dialog component for gathering information from a customer, a rule broker component for providing answers to the various legal and regulatory rules in a particular country, a language man component for selecting appropriate language, a transaction executor component for performing transactions, and a presentation manager component for formatting outputs to the customer.

Abstract: A computer-implemented method and system for secure user authentication in electronic commerce involves maintaining electronic information having a first aspect that is accessible over a first electronic communication channel in response to entry of a first credential known to the user and a second aspect that is accessible by the user over the first electronic communication channel in response to entry of a second credential provided to the user at a pre-registered delivery address on a second electronic communication channel.

Abstract: A method and system for implementing on-line financial institution services via a single physical and logical platform deploys global online banking applications in an environment in which the applications are built from a single source base and adapted to various business rules and languages associated with different regions, countries and businesses. Separate web apps are created for each individual business according to contextual attributes, and application servers running the context dependent web apps provide the interface between customers and banking functionality. The platform relies in part on reuse of appropriate components to achieve integration, as well as sharing of core services. As a result of the independent nature of business specific components, each business may require different versions of application software and may update or implement new components without affecting existing business components.

Abstract: The present invention allows a customer to use any of a number of a plurality of devices to access data and make transactions using an institution's computers and databases from many different locations throughout the world. As an example, a banking customer may use either a telephone, a palm computer or a television to determine his checking account balance while vacationing in a foreign country. The present invention operates by connecting the customer to the desired computer and database using universal protocol so that location becomes irrelevant. Another feature of the present invention is the efficient use of different networks with varying transmission speeds.

Abstract: The present invention allows a customer to use any of a number of a plurality of devices to access data and make transactions using an institution's computers and databases from many different locations throughout the world. As an example, a banking customer may use either a telephone, a palm computer or a television to determine his checking account balance while vacationing in a foreign country. The present invention operates by connecting the customer to the desired computer and database using universal protocol so that location becomes irrelevant. Another feature of the present invention is the efficient use of different networks with varying transmission speeds.

Abstract: A delivery system and method allow a financial institution to provide financial services to a plurality of remote devices, such as personal computers, personal data assistants, and screen phones. In addition to providing services to these remote devices, the system and method provide services to automatic teller machines (ATMs), external service providers, and internally within the financial institution to staff terminals and to the individual branches of the financial institution. The delivery of financial services is not limited to any particular network but rather may be provided through dial-in access, Internet access, on-line service provider access, or other types of delivery networks. The system is comprised of a set of reusable global components which are modular and are organized into services sets.

Abstract: A method and system for entering numerical information in a manner that can be easily used by visually impaired individuals are disclosed. Using a touch screen display, for each digit of a multidigit number a first location on the screen is touched a number of times equal to the digit followed by touching a second location. Once all the digits have been entered, a third location is touched. This method allows for dividing the touch screen display into a small number of large area touch active regions, such as quadrants, thus reducing the accuracy required to enter a value since the large area quadrants are easily referenced to the screen boundaries. Further, audible cues are used to prompt the user as well as provide feedback.