Abstract: A method and apparatus for a trusted intermediary server to assist with the secure exchange of data across a communications network, and in particular a packet-based network, such as the public Internet or an intranet. Communications are routed between private ports of the clients through the trusted intermediary server, with the private key transfer supported by a second type of communication medium. Although the trusted intermediary server negotiates the connection and is involved in the process, the communicants can perform their own key agreement and authentication for protecting data routed through the system.

Abstract: The present invention provides a method and apparatus for a trusted service provider (TSP) which assists with the secure exchange of data across the public switched telephone network. Communications are routed via a TSP, which uses cryptographic techniques to conceal the identities (e.g., telephone numbers) of the call initiator and call recipient, thereby preventing traffic analysis attacks. The TSP also performs cryptographic handshakes with the call initiator and call recipient to authenticate callers. The TSP further provides cryptographic keying material which communicants may use to help protect communications and to directly authenticate and identify each other. Although the TSP is trusted to negotiate the connection and is involved in the process, the communicants can perform their own key agreement and authentication for protecting data routed via the TSP.

Abstract: The present invention provides a method and apparatus for a trusted service provider (TSP) which assists with the secure exchange of data across the public switched telephone network. Communications are routed via a TSP, which uses cryptographic techniques to conceal the identities (e.g., telephone numbers) of the call initiator and call recipient, thereby preventing traffic analysis attacks. The TSP also performs cryptographic handshakes with the call initiator and call recipient to authenticate callers. The TSP further provides cryptographic keying material which communicants may use to help protect communications and to directly authenticate and identify each other. Although the TSP is trusted to negotiate the connection and is involved in the process, the communicants can perform their own key agreement and authentication for protecting data routed via the TSP.

Abstract: The present invention provides a method and apparatus for a trusted service provider (TSP) which assists with the secure exchange of data across the public switched telephone network. Communications are routed via a TSP, which uses cryptographic techniques to conceal the identities (e.g., telephone numbers) of the call initiator and call recipient, thereby preventing traffic analysis attacks. The TSP also performs cryptographic handshakes with the call initiator and call recipient to authenticate callers. The TSP further provides cryptographic keying material which communicants may use to help protect communications and to directly authenticate and identify each other. Although the TSP is trusted to negotiate the connection and is involved in the process, the communicants can perform their own key agreement and authentication for protecting data routed via the TSP.

Abstract: A process for facilitating payment card transactions from an underlying virtual account that exists as a data entity within a trust account, wherein cardholders are able to purchase goods and services from a merchant. The cardholder may execute a transaction at any venue which presently accepts a debit card for payment. The funds of the trust account need not be linked to a checking account or credit account, wherein the liability of the cardholder, card issuer, and merchant can be reduced. Preferably, the virtual account is initially established when the card is issued and activated, and can be depleted through one or more transactions for which the card is used as the means of payment, or monetary transfer, and may be recharged from time-to-time by depositing additional funds into the virtual cardholder account or crediting the balance of the virtual account as the result of a merchant refund, adjustment, or transfer from another cardholder.

Abstract: A process for facilitating payment card transactions from an underlying virtual account that exists as a data entity within a trust account, wherein cardholders are able to purchase goods and services from a merchant. The cardholder may execute a transaction at any venue which presently accepts a debit card for payment. The funds of the trust account need not be linked to a checking account or credit account, wherein the liability of the cardholder, card issuer, and merchant can be reduced. Preferably, the virtual account is initially established when the card is issued and activated, and can be depleted through one or more transactions for which the card is used as the means of payment, or monetary transfer, and may be recharged from time-to-time by depositing additional funds into the virtual cardholder account or crediting the balance of the virtual account as the result of a merchant refund, adjustment, or transfer from another cardholder.