Abstract: An improved interactive network system is provided that allows the Network Operator to control the transfer of information to and from the network end users, the system preferably using triggers or markers embedded within the programming broadcast to users via the network. As a consequence of this system, the Network Operator is able to efficiently garner revenues from third parties transacting business over the network and to control the look and feel of programming offered to network users. Additionally the system can be used as a means of limiting network access, filtering programming, providing on-screen graphics or audible signals for particular programming types or providers, bookmarking programming, profiling network users, targeting advertising, and simplifying network transactions.

Abstract: A system and method for facilitating electronic transactions using an intelligent instrument is disclosed. An authorization server enables users to obtain authorization credentials through the use of the intelligent instrument by issuing a challenge to an intelligent token of the intelligent instrument. The intelligent token generates a challenge response and transmits the challenge response to the authorization server, which assembles credentials including a key for the electronic transaction upon validating the response. The authorization server sends the assembled credentials to the intelligent instrument and the intelligent instrument transmits the assembled credentials to the authorization server during a subsequent transaction. The authorization server validates the assembled credentials and provides authorization for the transaction in response to the validating the assembled credentials.

Abstract: In accordance with one embodiment, a method and apparatus for linking businesses to customers through a trusted source network includes creating and providing an authenticated rating and review/referral database. The authenticated rating and review/referral database is then used as a central hub to distribute authenticated ratings and reviews to various interested parties in one or more trusted source networks and/or through one or more portals linked to existing trusted source networks.

Abstract: The present invention relates to a method for a cell phone based dating service. The method uses telecommunication in the form of phones, cell phones or email. The invention proposes a method or way to exchange the information of two people in a fast way by the Internet or telephone or cell phones, making it possible divide peoples personal information in small portions and to give out these portions step by step. In the invention proposes a system-administrator, the system, will coordinate the exchange of information between the meeting people. The invention uses a computer based partner service system in which a participant can order the system to give out its personalized information in defined modifications.

Abstract: A method and apparatus for performing secure online transactions provides a user interface that is intuitive and easily to understand. The invention integrates an online wallet service with credit card issuers that provide online credit card authentication services. The method provides a keypad interface for PIN entry, or an interface that resembles an offline transaction receipt. The apparatus that stores personal information and credit card information uses a level-two authentication password to protect the user's credit card information. The invention integrates with the credit card issuer when a personal identification number is required for the user to perform online transactions by the credit card issuer. The embodiments include integrations when the level-two authentication password is equivalent to the personal identification number and that when they or not equivalent.

Abstract: The systems and methods of the invention provide a technique for authenticating a finance related transaction. The method may include providing a token which contains a token counter, the token counter periodically advancing to generate a changing token value, the token counter being synchronized to a base counter that generates an authenticating value; transforming the token value into a token output sequence using logic; and outputting at least part of the token output sequence to an authenticating authority, the authenticating authority having access to the authenticating value.

Abstract: For transmitting transmission data generated by a transmission data generator of a communication terminal device, a packet unit determining unit determines a packet unit for a lowest data communication rate for the transmission of the transmission data, among packet units (packet sizes) that can be recognized by a destination communication terminal device and that can be transmitted from the communication terminal device. A packet generator packetizes the transmission data according to the packet unit determined by the packet unit determining unit, and transmits the packetized transmission data to the destination communication terminal device.

Abstract: A system and method for buying goods and billing agency using short message service are disclosed. If a purchaser transmits goods information to a mobile communication service system using short message service of a mobile phone, the mobile communication service system generates a certification code corresponding to the goods information and transmits it to a shopping mall server and the mobile phone. Then, the shopping mall server and the mobile phone exchange messages and run mutual authentication. Thereby, system construction expense for selling goods and service is decreased, purchasing procedure is simple, and the safe purchase can be done by mutual authentication using the certification code.

Abstract: An eVault system securely stores personal data and documents for citizens and allows controlled access by citizens and optionally by service providers. The eVault may be adapted to allow processes involving the documents to be carried out in a secure and paperless fashion. Documents are certified, and biometric matching is used for security. On effecting a match with a biometric identifier presented by a user, the user is allowed access to his personal eVault and to access a personal cryptographic key stored therein. One or more of these personal keys may be securely applied within the eVault to generate an electronic signature, amongst other functions.

Abstract: A system and method for managing accounts payable that allocates at least a portion of an invoiced dollar amount to a virtual account associated with a vendor, allows the vendor to request that a dispersal dollar amount be transferred from the virtual account to a real account associated with the vendor, and initiates an electronic transfer of the dispersal dollar amount from a real account to the real account associated with the vendor.

Abstract: An authentication-authorization system for a mobile communication terminal and a method therefore are provided. When a mobile communication terminal is in a connect state, code data randomly generated by a remote encoding terminal is continuously provided to the terminal and data management terminal. When an application service program on the mobile communication terminal or an application service terminal connected to the mobile communication terminal need to execute an authentication-authorization, identification data of the mobile communication terminal and its card and code data can be offered to the data management terminal to carry out a bidirectional dynamic authentication-authorization, to determine whether allow the application service program or the application service terminal to keep providing an application service or not.

Abstract: In a secure intermediary system, an intermediary is positioned along a communications path between a client and a server. The client sends a request to enter into a secure session, such as a secure socket layer (SSL) session. The intermediary receives the session request and establishes a first secure session between the client and the intermediary and/or a second secure session between the intermediary and the server. After the first and second secure sessions have been established, the intermediary provides intermediation services between the server and the client in an intermediated secure session. The intermediation service may be, for example, detecting whether a message sent by the client includes a credit card number. To prevent the credit card number from being sent over a network, credit card number may be replaced with a one-time use payment number.

Abstract: Methods and systems perform authentication based at least in part of the context of the transaction. In one embodiment, the context can be determined and trigger different rules with regard to access to the information or ability to immediately execute the transaction. In another embodiment, a method can include registering a device as a trusted device. The device can include a biometric input module. Biometric data can be used to authenticate a user, and the user may be requested to resubmit biometric data during the same session. In a further embodiment, a hacker may obtain unauthorized access to a victim's account information. The hacker may not be authenticated because he would not have access to a currently valid credential.

Abstract: A computer network is used to improve the profitability of one or more business entities. The network receives business-related data from at least two business entities and stores at least some of the data from each of the business entities in a common database. Then, in accordance with the terms of an agreement among the business entities, the network allows at least one of the business entities to receive information gathered from the common database.

Abstract: Micro-payments for electronic sales transactions are securely and anonymously enabled by a central payment agent maintaining declining balance accounts for users and separately authenticating and authorizing customer and vendor transaction requests and payment upon confirmation of delivery. No personal billing information for the customer need be provided to the vendor, maintaining anonymity of the vendor. The vendor may electively set a pricing and terms policy allowing the price of the goods or services to dynamically vary across a series of transactions or transaction portions based on events such as quantity, bandwidth, or aggregate amount paid. A transaction may involve goods or services from multiple vendors in an apparent single transaction, with payment resolved among all participating vendors.

Abstract: A system and method for the payment of petty cash disbursements is disclosed wherein a tree structure of linked purchasing cards is constructed according to a real-life organizational structure of persons able to authorized the expenditures of the petty cash. A central computer facility is used to maintain the structure and to facilitate the modification of the expenditure limits for the purchasing cards and the movement of cash between a master account and the accounts of each of the purchasing cards to cover purchased made thereby.

Abstract: Various methods and systems for providing a reliable verification of a player at a remote gaming terminal are disclosed. This is done by providing gaming events remotely via a first mode of communication, establishing criteria for verifying the identity of a player, receiving a player request to participate in a gaming event remotely, obtaining personal information for that player via a second mode of communication, verifying that the obtained personal information is adequate, and permitting the requested gaming event to commence. Additional features can include a subsequent repetition of the steps of obtaining and verifying personal information, and permitting the gaming event to commence or continue. Personal information can include pictures and/or the geographic location of the player. A cellular telephone can be used to take pictures and determine the geographic location of the player, and both of these items can be transmitted via a cellular telephone call.

Abstract: Systems and methods for performing secure value-added network services in a network using one or more operating systems. The system runs on a distribution agent Web server accessible from one or more types of network Operating Systems (“OS”) via a Secure Socket Layer (“SSL”) channel. The system includes one or more subsystems, including a receiving system that receives one or more document service requests over a secure communications medium, an authentication system that authenticates each received document service request, a processing system that processes the one or more authenticated document service requests, and a request fulfillment system that fulfills each processed document service request.

Abstract: A payment authentication service authenticates the identity of a payer during online transactions. The authentication service of the present invention allows a card issuer to verify a cardholder's identity using a variety of authentication methods, such as the use of passwords. Also, the only system participant requiring a certificate is the issuing financial institution. One embodiment of the invention for authenticating the identity of a cardholder during an online transaction involves querying an access control server to determine if a cardholder is enrolled in the payment authentication service, requests a password from the cardholder, verifies the password, and notifies a merchant whether the cardholder's authenticity has been verified. In another aspect of the invention, a chip card and the authentication service independently generate cryptograms that must match in order for the service to verify that the correct chip card is being used by the cardholder.

Abstract: A title management apparatus resident on a first computer including a memory for storing a control program and data, and a processor for executing the control program and for managing the data. The apparatus includes a title object resident in the memory including a title structure, the title structure further comprising a content element, a set of attributes, and a set of title object security indicia. The apparatus further includes an authorization structure configured to selectively redeem the content element based at least in part on the user security indicia, and further configured to use a set of protocols. The apparatus also includes a title management structure configured to associate a user with the title object based at least in part on the user data and the title attributes.

Abstract: At each of a plurality of transit readers of a transit system, for each of a plurality of riders, where each rider seeks to conduct an access transaction with the transit system for access into the transit facility by using a payment device issued by an issuer in a payment system, data is read from the payment device. The data includes an encryption code that uniquely corresponds to the payment device and was created by the issuer using one or more encryption keys and a predetermined algorithm. A check will be performed, remotely and/or locally, of one or more lists of other encryption codes to determine if the encryption code is on the list. On the basis of whether the encryption code is on the list, the rider is permitted access to the facility of the transit system. The payment device need not be changed for the rider's fare. Decryption of the encryption code read from the payment device is not required to complete the access transaction.

Abstract: A system rewards users who offer to share the memory, storage, or bandwidth of their computing resource to third parties within a distributed network. Users share processing, storage, bandwidth or memory resources with third parties by permitting such third parties to access files stored in the memory of the users' computing devices. Users that offer files for upload are encouraged to register with a central authority, and receive value each time a third party accesses a resource from their computing devices. The value awarded to each such user is tracked by the central authority and is weighted.

Abstract: A transaction device system is associated with a transaction device proxy account identifier, which may be stored in a database on the transaction device system and may be associated with a transaction account identifier for use in completing a transaction. The proxy transaction device identifier may include at least a first portion which corresponds to a portion of the transaction device identifier. The first portion of the proxy transaction device identifier may be segmented into proxy fields where a first segment includes a portion of a transaction account data set, and a second segment has encoded therein an account provider desired information. The proxy account identifier segments are undetectable by receiving systems such that the proxy account identifier emulates a merchant recognizable data transfer format. The account provider system uses the first portion of the transaction device identifier to reassemble the transaction device identifier for use in transaction completion.

Abstract: A system for conducting an agreement between two parties relying on a trusted a third party includes a first party generating a first view of the agreement and transmitting the first view of the agreement to the third party, a second party independently generating a second view of the agreement and transmitting the second view of the agreement to the third party, a wireless network connecting the first party and the second party, and a wired or wireless network connecting the second party to the third party. The trusted third party, receives the first view of the agreement and the second view of the agreement, verifies conditions including that the identities of the parties that transmitted the agreements and that the independent views of the agreement are consistent with each other, and takes action to execute the agreement if the conditions are satisfied.

Abstract: A method and apparatus for obtaining access to services of service providers. In one embodiment, the method comprises requesting a desired service through a foreign service provider, generating a hash tree and generating a digital signature on a root value of the hash tree, sending the digital signature and the root value to the foreign service provider, providing one or more tokens to the foreign service provider with the next packet if the foreign service provider accepts the signature and continuing to use the service while the foreign service provider accepts tokens.

Abstract: A buyer (110) wishes to use a payment instrument as part of an online commerce transaction with a seller (120) and it is desired to authenticate that the buyer (110) has authority to use the payment instrument. A separate authentication service (130) determines whether the buyer (110) has access to certain secret information without revealing the secret information to the seller (120). Access to the secret information would verify that the buyer (110) has authority to use the payment instrument. The authentication service (130) informs the seller (120) whether the buyer (110) is authorized to use the payment instrument.

Abstract: A method for validating an electronic payment by a credit/debit card in a transaction system. The method includes registering a purchase of an article by a buyer using a credit/debit card associated with at least one PIN code, checking that the at least one PIN code is associated with the number of said credit/debit card provided by said buyer to said seller terminal, checking, by said electronic payment center, whether or not said at least one PIN code is valid, and one of: after the at least one PIN code is found to be valid, checking, by said electronic payment center, whether the electronic payment center has received a pre-validation from a third party; after the at least one PIN code is found to be valid, contacting a third party via a communication network and requesting that the third party validate the purchase; and after the at least one PIN code is found to be valid, contacting a third party via a communication network and requesting said at least one PIN code from the third party.

Abstract: The invention provides improved security for stored-value instruments. For example, a point-of-sale device may receive a request to process a transaction (such as an activation, redemption, funds recharge, etc.) with a presentation instrument. The point-of-sale device may receive a first identifier associated with the instrument. Merely by way of example, the first identifier may be encoded on a magnetic stripe disposed on the instrument, and receiving the first identifier may comprise swiping the magnetic stripe through a reader in communication with the point-of-sale device. The point-of-sale device may also receive a second identifier associated with the instrument. In some embodiments, the first and second identifiers may be correlated, e.g., to determine whether they are consistent.

Abstract: A method for verifying, to a third party, information in a testimonial from a user provided via a network. The method includes, first, providing a means for transmitting website information from a website owner to an administrator. Next, a means is provided for enabling the administrator to verify the website information. A means for transmitting testimonial information to the administrator is also provided. Next, the method provides a means for enabling the administrator to verify the testimonial information. The method also provides a means for displaying predetermined data related to the testimonial information in a preselected manner so that the third party has access to at least a portion of the testimonial information. Finally, the portion is identified as being verified by the administrator, for example using a web seal.

Abstract: The invention is a method for using a payment and inspection service to purchase merchandise on an online sale website. A buyer or seller can select using a payment and inspection service. The buyer pays the payment and inspection service, which holds the payment. The seller ships the item to a store where the payment and inspection service is located. The buyer goes to the store and while being monitored by an agent or employee of the service, the buyer inspects the merchandise. If the buyer accepts the item, he leaves the store with the item and the service releases the payment to the seller. If the buyer does not want to accept the item, he rejects the item, which is then repacked and returned to the seller, and the service returns the payment, less cost of shipping the item back to the seller, to the buyer.

Abstract: The present invention is directed toward methods and systems for monitoring resource usage in an architecture where neither the resource buyer nor the resource seller can be trusted, and for rewarding benefits, compensation, or rewards based upon such monitored resource usage data. The system rewards users who offer to share the memory, storage, or bandwidth of their computing resource to third parties within a distributed network. In an exemplary embodiment, users share processing, storage, bandwidth or memory resources with third parties by permitting such third parties to access files stored in the memory of the users' computing devices. Users that offer files for upload are encouraged to register with a central authority, and receive value each time a third party accesses a resource from their computing devices. The value awarded to each such user is tracked by the central authority. They can use the value in exchange for products or services.

Abstract: Methods and systems for performing electronic commerce using mutating identifiers. One method can include encrypting buyer transaction data with a first mutating identifier, transmitting the buyer transaction data to an authenticator device, decrypting the buyer transaction data, generating a payment request, encrypting the payment request with a third mutating identifier, and transmitting the payment request to a payment authenticator device.

Abstract: A system and method for verifying a digital signature on a certificate, which may be used in the processing of encoded messages. In one embodiment, when a digital signature is successfully verified in a signature verification operation, the public key used to verify that digital signature is cached. When a subsequent attempt to verify the digital signature is made, the public key to be used to verify the digital signature is compared to the cached key. If the keys match, the digital signature can be successfully verified without requiring that a signature verification operation in which some data is decoded using the public key be performed.

Abstract: A payment authentication service authenticates the identity of a payer during online transactions. The authentication service allows a card issuer to verify a cardholder's identity using a variety of authentication methods, such as with the use of tokens. Authenticating the identity of a cardholder during an online transaction involves querying an access control server to determine if a cardholder is enrolled in the payment authentication service, requesting a password from the cardholder, verifying the password, and notifying a merchant whether the cardholder's authenticity has been verified. Systems for implementing the authentication service in which a cardholder uses a mobile device capable of transmitting messages via the Internet are described. Systems for implementing the authentication service in which a cardholder uses a mobile device capable of transmitting messages through voice and messaging channels is also described.

Abstract: A title management apparatus resident on a first computer including a memory for storing a control program and data, and a processor for executing the control program and for managing the data. The apparatus includes user data resident in the memory including a set of user security indicia. The apparatus also includes a first title object resident in the memory including a title structure, the title structure further comprising a content element, a set of attributes, and a set of title object security indicia. The apparatus further includes a set of stub objects coupled to the title object, wherein the set of stub objects can further optimize the title structure; an authorization structure configured to selectively redeem the content element based at least in part of the user security indicia; and, a title management structure configured to associate a user with the first title object based at least in part of the user data and the title attributes.

Abstract: A method, apparatus, and computer instructions for transferring a unique digital item between a first party and a destination party in a network data processing system. A request to transfer a unique digital item in an account of the first party is received. Responsive to receiving the request, a retrieval tag is associated with the unique digital item. The retrieval tag is generated by a server process, such as one on which the unique digital item is located. The unique digital item is transferred from the source account to a temporary storage account in association with the retrieval tag. The unique digital item is listed on a trusted third-party server. A second party may inspect the unique digital item and agree to exchange something in return for the first party's listed unique digital item. The transfer occurs after all parties have committed to the transaction.

Abstract: The present invention relates to methods, processes, apparatus, algorithms, etc., for secure identification of secret answers that satisfy secret questions. The methods, etc., can be used for the negotiated exchange of information, goods, or services when the Seeker and the Provider conceal their negotiating positions.

Abstract: An eVault system securely stores personal data and documents for citizens and allows controlled access by citizens and optionally by service providers. The eVault may be adapted to allow processes involving the documents to be carried out in a secure and paperless fashion. Documents are certified, and biometric matching is used for security. On effecting a match with a biometric identifier presented by a user, the user is allowed access to his personal eVault and to access a personal cryptographic key stored therein. One or more of these personal keys may be securely applied within the eVault to generate an electronic signature, amongst other functions.

Abstract: A method. The method includes a) sending a first transaction notification message comprising an original payee identifier to a user. The original payee identifier may be part of original transaction information associated with a first transaction. At some point, the user sees this transaction information and wants to correct one or more items in the transaction information. For example, the user may not recognize that the original payee identifier is wrong or is otherwise unrecognizable. The user may then contact a central server (e.g., via a Web site) and may provide updated transaction information such as an updated merchant identifier to the central server computer. This updated transaction information may be stored so that subsequent transactions can be accurately conducted and reported to the user, and other uses.

Abstract: A change management system coordinates information of a transaction tool managed by a transaction tool management system. The system includes a receiver that receives, over a communications network, activity information and/or lifecycle event information for the transaction tool. The system also includes a storage that stores the received information. Additionally, the system includes a processor that manages a change in a status of the transaction tool based on the received information.

Abstract: A central transaction server in electronic commerce card authorization system enables the electronic commerce card association to manage and monitor the authentication system. The central transaction server acts as an intermediary for all communications between the access control server used for authentication. If any portion of the authentication system fails, the central transaction server compensates by providing appropriate responses to other portions of the system. The centralized transaction server translates all incoming traffic into a format compatible with the intended recipient, enabling portions of the system to be upgraded without breaking compatibility with the non-upgraded portions. The centralized transaction server also enables the integration of formally separate portions of the authentication system into a single unit.

Abstract: Electronic transaction networks are described that are operable to find a pathway to complete an electronic data exchange for a prepaid transaction account. The networks may include an intermediary node, in electronic communication with a transaction point node where transaction information is input, and a plurality of processing nodes that can communicate with an account provider node that administers the prepaid transaction account. The intermediary node receives transaction data that may include an account identifier from the transaction point node, and identify one or more of the processing nodes that can form part of the pathway. The pathway may include the transaction point node, the intermediary node, at least one of the processing nodes, and the account provider node. In addition, the intermediary node may find the processing node that forms the pathway for the highest transaction commission when more than one of the processor nodes can form part of the pathway.

Abstract: By establishing a correspondence account in each Financial Service Provider (FSP) of a group of FSPs and a secure inter-FSP messaging mechanism, transfers of funds entirely within member FSPs (FSP 1, FSP 2, FSP 3, FSP 4) may be combined with secure messaging to effectively transfer funds between buyers in one FSP (FSP 2) and sellers in another FSP (FSP 1) without actual transfer of funds between FSP's.

Abstract: A card terminal having means for entering transaction value information indicative of a first amount, means for entering data indicative of an additional amount, means for storing the transaction value information and the data indicative of the additional amount, and means for creating a message for electronic transmission, the message including data indicative of the first amount in association with data indicative of a first recipient, and data indicative of the additional amount in association with data indicative of a second recipient.

Abstract: A system, method, and computer program product for maintaining the anonymity of a consumer in a transaction with a retailer. The consumer provides payment method information and ship-to address information to a trusted third party. The consumer purchases products from a retailer by providing the trusted third party anonymous identifiers (e.g., nicknames, unique codes, or one time use codes either supplied by the consumer or by the trusted third party) corresponding to the selected payment methods and ship-to addresses. The retailer requests payment approval from the trusted third party. The trusted third party receives payment approval from a payment partner using the payment method information determined from the anonymous identifier received from the consumer. The trusted third party provides payment approval to the retailer along a transaction unique shipment identifier to place on the parcel.

Abstract: The invention is a method for using a payment and inspection service to purchase merchandise on an online sale website. A buyer or seller can select using a payment and inspection service. The buyer pays the payment and inspection service, which holds the payment. The seller ships the item to a store where the payment and inspection service is located. The buyer goes to the store and while being monitored by an agent or employee of the service, the buyer inspects the merchandise. If the buyer accepts the item, he leaves the store with the item and the service releases the payment to the seller. If the buyer does not want to accept the item, he rejects the item, which is then repacked and returned to the seller, and the service returns the payment, less cost of shipping the item back to the seller, to the buyer.

Abstract: The invention is a method for using a payment and inspection service to purchase merchandise on an online sale website. A buyer or seller can select using a payment and inspection service. The buyer pays the payment and inspection service, which holds the payment. The seller ships the item to a store where the payment and inspection service is located. The buyer goes to the store and while being monitored by an agent or employee of the service, the buyer inspects the merchandise. If the buyer accepts the item, he leaves the store with the item and the service releases the payment to the seller. If the buyer does not want to accept the item, he rejects the item, which is then repacked and returned to the seller, and the service returns the payment, less cost of shipping the item back to the seller, to the buyer.

Abstract: The invention is a method for using a payment and inspection service to purchase merchandise on an online sale website. A buyer or seller can select using a payment and inspection service. The buyer pays the payment and inspection service, which holds the payment. The seller ships the item to a store where the payment and inspection service is located. The buyer goes to the store and while being monitored by an agent or employee of the service, the buyer inspects the merchandise. If the buyer accepts the item, he leaves the store with the item and the service releases the payment to the seller. If the buyer does not want to accept the item, he rejects the item, which is then repacked and returned to the seller, and the service returns the payment, less cost of shipping the item back to the seller, to the buyer.

Abstract: A method and apparatus for conducting a commercial transaction over the Internet or other network connection are provided. The method includes the use of random numbers which are unique for each user session. These random numbers are pre-loaded onto a handheld, portable device, token, at the time of the device's manufacture or programming. These numbers are generated by external systems. The external systems then deliver the number sets to the token for storage in the token's internal memory and also to another random number database that is accessible by an authentication system. The random numbers are dispensed by the token to a user by pressing a button on the token or otherwise signaling the token. A simple polynomial equation may be employed in order to increase the number of codes. A dispensed number is cross referenced, by the authentication system, to the random number database that was created when the token was programmed. In this way the user or transaction can be authenticated.

Abstract: A billing and collection system comprising an access management computer for enabling payment for a service provided over a data network to be made for a telephone connection to a shared revenue billing network where the telephone connection to the billing network regulates access to the service provided over the data network, the data network including at least one information provider presenting at least one service for on-line access by a user with a user computer through the data network, the billing network and access management computer adapted for controlling access to the information provider and billing the user for access to the information provider, the access management computer communicating with the data network to enable and terminate access to the information provider through the user computer with the billing network sharing revenues for the telephone connection with the information provider.