Abstract: A system and method for facilitating electronic transactions using an intelligent instrument is disclosed. An authorization server enables users to obtain authorization credentials through the use of the intelligent instrument by issuing a challenge to an intelligent token of the intelligent instrument. The intelligent token generates a challenge response and transmits the challenge response to the authorization server, which assembles credentials including a key for the electronic transaction upon validating the response. The authorization server sends the assembled credentials to the intelligent instrument and the intelligent instrument transmits the assembled credentials to the authorization server during a subsequent transaction. The authorization server validates the assembled credentials and provides authorization for the transaction in response to the validating the assembled credentials.

Abstract: A computer-based process for product selection optimization by displaying various security features available for a security document, for evaluating the impact that the selection of one security feature has upon the selection of other features, and for optimizing the selection of each security feature or a combination of features in meeting a protection goal for the security document.

Abstract: Systems and methods that manage financial market data with hidden information. The systems and methods may receive market data about a plurality of financial instruments. The plurality of financial instruments comprises at least two different kinds of financial instruments. Hidden information is generated, based on the market data. The hidden information is viewable only after scrolling a cursor over a graphical element. The systems and methods also generate, based on the market data, a first graphical element that is embedded with hidden information. The first graphical element is displayed on a display. An indication is received indicating that the cursor has scrolled over the first graphical element. In response to the indication, the hidden information that is embedded in the first graphical element is displayed on the display.

Abstract: The method of secure communication between the endpoints is used for the secret communication between endpoints locating in different gatekeeper management area, and the method includes: in the process of the caller endpoint calling the callee endpoint, the home gatekeeper of the callee endpoint generates the share secret key between the caller endpoint and the callee endpoint; the secure communication process is performed between the caller endpoint and the callee endpoint according to the share secret key. According to the secure communication method between the endpoints, the invention makes that secret communication mechanism between the endpoints locating the different gatekeeper management area has better expansibility and higher efficiency.

Abstract: A method for transferring funds from a sender to a recipient includes receiving a request to transfer the funds from a sender; creating a transaction record having a transaction identifier; providing the transaction identifier to the sender; receiving the transaction identifier from a recipient; obtaining a first biometric sample from the recipient; using the biometric sample to select a MTCN (Money Transfer Control Number) from a pool of predetermined MTCNs; associating the MTCN with the first biometric sample and the transaction record; providing the MTCN to the recipient; thereafter, receiving a request from the recipient to receive the funds; obtaining the MTCN from the recipient; obtaining a second biometric sample from the recipient; using the MTCN and/or the second biometric sample to locate the transaction record; comparing the second biometric sample to the first biometric sample; and determining whether to provide the funds based on the comparison.

Abstract: A method for processing financial transactions includes transmitting an authorization request to a payment processing gateway server. The authorization request includes a supplemental header having a contract identification field that stores an identification of a contract between a merchant and a payment provider. A transaction response transmission is received from the payment processing gateway server in response to the authorization request. The transaction response transmission includes a transaction response header and a response data component. The transaction response header includes identification of a particular transaction to which the transaction response transmission is applicable. The response data component includes an indication that the contract is invalid. The indication that the contract is invalid is responded to by facilitating a rejection of the financial transaction.

Abstract: A method for capturing data packets sent on a network for evaluating response time performance, the network including a financial institution and a partner bank. The method includes associating a captured data packet sent to the partner bank with a captured data packet received from the partner bank, by comparing at least one coded field of a data portion of the captured data packet sent to the partner bank with at least one coded field of a captured data portion of the data packet received from the partner bank. The method also includes measuring a response time of the associated data packet received from the partner bank, relative to a transmission time of the captured data packet sent to the partner bank. The method further includes transmitting an alert message upon determining that the response time is not within an adjustable predetermined threshold, wherein the alert message includes data from a data portion of the associated data packets.

Abstract: The present invention relates to a method for a cell phone based dating service. The method uses telecommunication in the form of phones, cell phones or email. The invention proposes a method or way to exchange the information of two people in a fast way by the Internet or telephone or cell phones, making it possible divide peoples personal information in small portions and to give out these portions step by step. In the invention proposes a system-administrator, the system, will coordinate the exchange of information between the meeting people. The invention uses a computer based partner service system in which a participant can order the system to give out its personalized information in defined modifications.

Abstract: A virtual payment system for ordering and paying for goods, services and content over an internetwork is disclosed. The virtual payment system comprises a commerce gateway component (52) and a credit processing server component (53). The virtual payment system is a secure, closed system comprising registered sellers and buyers. A buyer becomes a registered participant by applying for a virtual payment account. Likewise, a seller becomes registered by applying for a seller account. A buyer can instantly open an account on-line. That is, the credit processing component (53) immediately evaluates the buyer's virtual payment card application and assigns a credit limit to the account. Once an account is established, a digital certificate is stored on the registered participant's computer. The buyer can then order a product, i.e., goods, services or content from a seller and charge it to the virtual payment account.

Abstract: A method and apparatus for performing secure online transactions provides a user interface that is intuitive and easily to understand. The invention integrates an online wallet service with credit card issuers that provide online credit card authentication services. The method provides a keypad interface for PIN entry, or an interface that resembles an offline transaction receipt. The apparatus that stores personal information and credit card information uses a level-two authentication password to protect the user's credit card information. The invention integrates with the credit card issuer when a personal identification number is required for the user to perform online transactions by the credit card issuer. The embodiments include integrations when the level-two authentication password is equivalent to the personal identification number and that when they or not equivalent.

Abstract: A system and method are provided for managing financial market information. According to certain embodiments, the system includes a computer having a memory, processor, and display. The processor is capable of generating a graphical depiction of the financial market information on the display. The graphical depiction includes a multidimensional representation of a broad range of market information for at least two financial instruments. The graphical depiction resides in a single window on the display. The financial instruments may include multiple different classes of financial instruments, such as treasuries and futures. Different instruments may be selected and information, including basis information, relevant to the selected instruments may be displayed in a second window.

Abstract: A system and method for buying goods and billing agency using short message service are disclosed. If a purchaser transmits goods information to a mobile communication service system using short message service of a mobile phone, the mobile communication service system generates a certification code corresponding to the goods information and transmits it to a shopping mall server and the mobile phone. Then, the shopping mall server and the mobile phone exchange messages and run mutual authentication. Thereby, system construction expense for selling goods and service is decreased, purchasing procedure is simple, and the safe purchase can be done by mutual authentication using the certification code.

Abstract: Example embodiments herein include a license manager process that receives a license query from a server device. The license query requests usage data associated with a permanent license on a client device. In response to receiving the license query, the license manager procures the usage data associated with the permanent license on the client device. The license manager then transmits the usage data associated with the permanent license to the server device. Furthermore, the license manager receives a revocation request from the server device. In this manner, the revocation request is received in response to transmitting the usage data associated with the permanent license to the server device. In turn, the license manager revokes the permanent license that was indicated in the revocation request to disable use of the respective application on the client device.

Abstract: An eVault system securely stores personal data and documents for citizens and allows controlled access by citizens and optionally by service providers. The eVault may be adapted to allow processes involving the documents to be carried out in a secure and paperless fashion. Documents are certified, and biometric matching is used for security. On effecting a match with a biometric identifier presented by a user, the user is allowed access to his personal eVault and to access a personal cryptographic key stored therein. One or more of these personal keys may be securely applied within the eVault to generate an electronic signature, amongst other functions.

Abstract: A system and method for managing accounts payable that allocates at least a portion of an invoiced dollar amount to a virtual account associated with a vendor, allows the vendor to request that a dispersal dollar amount be transferred from the virtual account to a real account associated with the vendor, and initiates an electronic transfer of the dispersal dollar amount from a real account to the real account associated with the vendor.

Abstract: An electronic payment transaction involves operating a gateway device in an electronic payment system to receive first encrypted transaction data from a merchant device, wherein the first encrypted transaction data is encrypted by means of a merchant device-specific encrypting key. Decrypted transaction data is produced by using a merchant device-specific decrypting key to decrypt the first encrypted transaction data. Second encrypted transaction data is derived from the decrypted transaction data, wherein the second encrypted transaction data is encrypted by means of a gateway device-specific encrypting key. The gateway device communicates the second encrypted transaction data to another electronic payment system server. A key transmission block received from the merchant device includes information that enables the gateway device to derive the merchant device-specific decryption key.

Abstract: An authentication-authorization system for a mobile communication terminal and a method therefore are provided. When a mobile communication terminal is in a connect state, code data randomly generated by a remote encoding terminal is continuously provided to the terminal and data management terminal. When an application service program on the mobile communication terminal or an application service terminal connected to the mobile communication terminal need to execute an authentication-authorization, identification data of the mobile communication terminal and its card and code data can be offered to the data management terminal to carry out a bidirectional dynamic authentication-authorization, to determine whether allow the application service program or the application service terminal to keep providing an application service or not.

Abstract: In a secure intermediary system, an intermediary is positioned along a communications path between a client and a server. The client sends a request to enter into a secure session, such as a secure socket layer (SSL) session. The intermediary receives the session request and establishes a first secure session between the client and the intermediary and/or a second secure session between the intermediary and the server. After the first and second secure sessions have been established, the intermediary provides intermediation services between the server and the client in an intermediated secure session. The intermediation service may be, for example, detecting whether a message sent by the client includes a credit card number. To prevent the credit card number from being sent over a network, credit card number may be replaced with a one-time use payment number.

Abstract: A system and method for the payment of petty cash disbursements is disclosed wherein a tree structure of linked purchasing cards is constructed according to a real-life organizational structure of persons able to authorized the expenditures of the petty cash. A central computer facility is used to maintain the structure and to facilitate the modification of the expenditure limits for the purchasing cards and the movement of cash between a master account and the accounts of each of the purchasing cards to cover purchased made thereby.

Abstract: In a mailing system for franking a postage indicium serving as a proof of postage, postal data including the postage needs to be communicated through such an indicium. Illustratively, the postal data is categorized into (a) invariable postal data, e.g, a device ID identifying the mailing system, which is unaffected by a franking transaction, and (b) variable postal data, e.g., the postage, which may change from one franking transaction to another. To avoid latency of the franking operation, the invariable postal data is preset for initial printing of the postage indicium, and the variable postal data is determined and set for printing in real time. In printing the postage indicium, the invariable postal data and the variable postal data are presented in that order in one or more symbols.

Abstract: A title management apparatus resident on a first computer including a memory for storing a control program and data, and a processor for executing the control program and for managing the data. The apparatus includes a title object resident in the memory including a title structure, the title structure further comprising a content element, a set of attributes, and a set of title object security indicia. The apparatus further includes an authorization structure configured to selectively redeem the content element based at least in part on the user security indicia, and further configured to use a set of protocols. The apparatus also includes a title management structure configured to associate a user with the title object based at least in part on the user data and the title attributes.

Abstract: At each of a plurality of transit readers of a transit system, for each of a plurality of riders, where each rider seeks to conduct an access transaction with the transit system for access into the transit facility by using a payment device issued by an issuer in a payment system, data is read from the payment device. The data includes an encryption code that uniquely corresponds to the payment device and was created by the issuer using one or more encryption keys and a predetermined algorithm. A check will be performed, remotely and/or locally, of one or more lists of other encryption codes to determine if the encryption code is on the list. On the basis of whether the encryption code is on the list, the rider is permitted access to the facility of the transit system. The payment device need not be changed for the rider's fare. Decryption of the encryption code read from the payment device is not required to complete the access transaction.

Abstract: Transferring metadata is disclosed. Information about a network interaction is processed to generate metadata describing the network interaction. Based on the metadata it is determined whether the metadata is to be transferred to an aggregator. In the event that the metadata is to be transferred, one or more aggregators are determined to which the metadata is to be transferred. The metadata is transferred to the one or more aggregators.

Abstract: A system and method are provided for managing financial market information. According to certain embodiments, the system includes a computer having a memory, processor, and display. The processor is capable of generating a graphical depiction of the financial market information on the display. The graphical depiction includes a multidimensional representation of a broad range of market information for at least two financial instruments. The graphical depiction resides in a single window on the display.

Abstract: A formatted data structure is provided for conveying the results of ecommerce authentication programs that are used to authenticate a cardholder's on-line transactions. The data structure, which has at most a 20-byte length, is designed to be compatible with 3-D Secure message protocols used in e-commerce. The data structure includes designated fields that include a hash of the merchant's name, identify an authentication service provider, identify the authentication method used, and include a merchant authentication code which ties cardholder information to the transaction. Secure payment algorithms are provided for use by the e-commerce authentication programs to generate authentication results in the desired format. In one secure payment algorithm, a secret key is used to encrypt a concatenation of a cardholder account number with information from designated fields of the data structure.

Abstract: The computer of a relay agency holds the money which a buyer pays for a commodity in a relay account. Then, the computer of the relay agency makes a payment transfer card and a notification card, and sends the notification card together with the request of purchase of the commodity to a seller. The relay agency sends the payment transfer card to the buyer. The buyer, after receiving the commodity, inserts the payment transfer card and the notification card into an automated teller machine of a bank, and gives instructions on the payment transaction to the computer of the relay agency. The computer of the relay agency transfers the money for the commodity from the relay account to the seller's account.

Abstract: A secure gateway is disclosed which facilitates communication between a first network and a second network through an intermediate network. The secure gateway, when operated in conjunction with at least one other secure gateway, supports secure peer to peer connectivity with integral security features such as mutual authentication, authorization specific access, and end to end auditing. An authorized service can be served securely through this gateway, across the open network, to a known requester, without fear of compromising the security or privacy of the server's or requesters networks.

Abstract: A virtual payment system for ordering and paying for goods, services and content over an internetwork is disclosed. The virtual payment system comprises a commerce gateway component (52) and a credit processing server component (53). The virtual payment system is a secure, closed system comprising registered sellers and buyers. A buyer becomes a registered participant by applying for a virtual payment account. Likewise, a seller becomes registered by applying for a seller account. A buyer can instantly open an account on-line. That is, the credit processing component (53) immediately evaluates the buyer's virtual payment card application and assigns a credit limit to the account. Once an account is established, a digital certificate is stored on the registered participant's computer. The buyer can then order a product, i.e., goods, services or content from a seller and charge it to the virtual payment account.

Abstract: An example embodiment for using a Partner Web Site within a Web Hosting Community starts with a Hosting Provider creating the Partner Web Site, a Community Web Site, and operating one or more Hosting Servers. A Partner, from the Partner Web Site, may make an application available for purchase and use to a plurality of Hosting Customers. At least one of the Hosting Customers, from the Community Web Site, may purchase and utilize the application with their Hosted Web Site.

Abstract: System and methods for transaction processing using a rewards account are described. The method may include: receiving a transaction containing a transaction type, formatting a message based on the transaction type and sending the message. The method may alternately include, receiving a transaction message and processing a transaction based on a transaction type contained within the transaction message. The system may include one or more software modules performing the following functions: receiving module to receive transactions, transaction processing module to parse the transaction and determine a transaction type, message processing module to format a transaction message based on the transaction type, and a user interface module to provide a user interface to a customer.

Abstract: A title management apparatus resident on a first computer including a memory for storing a control program and data, and a processor for executing the control program and for managing the data. The apparatus includes user data resident in the memory including a set of user security indicia. The apparatus also includes a first title object resident in the memory including a title structure, the title structure further comprising a content element, a set of attributes, and a set of title object security indicia. The apparatus further includes a set of stub objects coupled to the title object, wherein the set of stub objects can further optimize the title structure; an authorization structure configured to selectively redeem the content element based at least in part of the user security indicia; and, a title management structure configured to associate a user with the first title object based at least in part of the user data and the title attributes.

Abstract: A protocol management system is capable of detecting certain message protocols and applying policy rules to the detected message protocols that prevent intrusion, or abuse, of a network's resources. In one aspect, a protocol message gateway is configured to apply policy rules to high level message protocols, such as those that reside at layer 7 of the ISO protocol stack.

Abstract: An eVault system securely stores personal data and documents for citizens and allows controlled access by citizens and optionally by service providers. The eVault may be adapted to allow processes involving the documents to be carried out in a secure and paperless fashion. Documents are certified, and biometric matching is used for security. On effecting a match with a biometric identifier presented by a user, the user is allowed access to his personal eVault and to access a personal cryptographic key stored therein. One or more of these personal keys may be securely applied within the eVault to generate an electronic signature, amongst other functions.

Abstract: A holder (35) includes a base (33), an orientation block (36), a located block (37) and two magnets (38, 39). The base includes a mounting portion (40) and a securing portion (50). The orientation block is fixed in the mounting portion. The located block is slidably engaged in the securing portion. One of the magnets is disposed adjacent to the securing portion, the other of the magnets is disposed in the located block. The magnets are attracted to each other and configured for adjusting a distance between the orientation block and the located block.

Abstract: Electronic transaction networks are described that are operable to find a pathway to complete an electronic data exchange for a prepaid transaction account. The networks may include an intermediary node, in electronic communication with a transaction point node where transaction information is input, and a plurality of processing nodes that can communicate with an account provider node that administers the prepaid transaction account. The intermediary node receives transaction data that may include an account identifier from the transaction point node, and identify one or more of the processing nodes that can form part of the pathway. The pathway may include the transaction point node, the intermediary node, at least one of the processing nodes, and the account provider node. In addition, the intermediary node may find the processing node that forms the pathway for the highest transaction commission when more than one of the processor nodes can form part of the pathway.

Abstract: Systems and methods for generating revenue from banking transactions use a kiosk to perform financial services. The kiosk determines a stored-value account related to a stored-value card for a user of the kiosk. The kiosk performs a banking transaction using the stored-value account. The kiosk then determines a service fee for the banking transaction. The kiosk deducts the service fee from the stored-value account or a value of the banking transaction.

Abstract: A system, method, and computer program product for maintaining the anonymity of a consumer in a transaction with a retailer. The consumer provides payment method information and ship-to address information to a trusted third party. The consumer purchases products from a retailer by providing the trusted third party anonymous identifiers (e.g., nicknames, unique codes, or one time use codes either supplied by the consumer or by the trusted third party) corresponding to the selected payment methods and ship-to addresses. The retailer requests payment approval from the trusted third party. The trusted third party receives payment approval from a payment partner using the payment method information determined from the anonymous identifier received from the consumer. The trusted third party provides payment approval to the retailer along a transaction unique shipment identifier to place on the parcel.

Abstract: Apparatus and method for purchasing an item via a self-service checkout at a merchant store. The item is associated with a bar code and an anti-theft device. A customer uses their phone to establish communication with the store's transaction host. The phone includes a camera and a programmable memory. The memory includes customer account data. The camera is used to capture and transmit an image of the bar code to the host. The host determines the item's cost from the received bar code image. The customer can wirelessly transmit their account data from the phone to an in-store terminal. The terminal can transmit the account data to the host. The host can accept and use the account data in payment for the item. After customer payment for the item, the host causes the anti-theft device to be neutralized.

Abstract: Systems and methods for transmitting data across a firewall are described. A representative method includes: receiving a request to transmit data to a destination; searching for a firewall associated with the destination, the firewall being configured to prohibit communication to the destination via a primary communication protocol and allow communication to the destination via a secondary communication protocol. If the firewall is detected, automatically configuring the data for communication with the secondary communication protocol; and transmitting the data to the destination by utilizing the secondary communication protocol. Other devices and programs are disclosed.

Abstract: A method is disclosed for asymmetric security in data communications between two or more nodes. Asymmetric security within data communications refers to sending and receiving messages at different security levels. The method includes a receiving module, a transmission module, and a communication module. The receiving module receives a first message at a first security level from a first node. A security level may be defined by implementation of one or more security features, including encryption, digital signatures, and/or other security features. The transmission module transmits a second message at a second security level to the first node in response to receiving the first message. The first and second messages may be communicated during a single communication session. The communication module communicates the second security level to the first node. The communication may be directly between two nodes or may occur via a broker or other intermediate node.

Abstract: An automated banking machine (12) is operative to conduct transactions in response to mark up language documents and TCP/IP messages exchanged with a local computer system (14) through an intranet (16), as well as in response to messages exchanged with foreign servers (20, 22, 24, 26, 28, 96) in a wide area network (18). The banking machine includes a computer (34) having one or more browsers (76, 198, 200, 202). The machine can receive instructions in mark up language documents accessed at an HTTP address to cause operation of transaction function devices, such as a currency dispenser (42) and a display device (196).

Abstract: A system for facilitating payment to a party not having an account that can be used to hold a monetary value equivalent, including: a payments facilitator; and at least one account established by the payments facilitator operable to hold a monetary value equivalent on trust for its customers. When a payer sends a communication message to the payments facilitator to make a payment to the party, the payments facilitator allocates one of the at least one accounts to the party and links the allocated account with a unique identifier assigned to the party. Payment is thereafter made by the payer to the allocated account. Preferably, the payment is an electronic payment and the account is established with at least one financial institution.

Abstract: A method, in different embodiments, is provided to construct on-line, off-line, or hybrid internet payment systems that allow a vendor to sell physical or digital products or services to a user. The embodiments reduce transaction costs, facilitate implementation, help prevent fraud and solve privacy, trust, accountability and liability issues, in ways that may be specially suited to on-line micropayment systems. In one embodiment a vendor makes available some payment information to a user (100) and provides a ways to secure the payment information (500). A payment transaction is initiated (102) and payment is performed with the participation of a broker. The vendor may grant access to content to the user (109).

Abstract: A payment system for facilitating a payment transaction between a payer and a payee is disclosed. The payment system includes a payer access device, a payee access device, and a services hub. The services hub is configured to communicate with the payer device and the payee device; maintain information relating to a payer account and access device information associated with the payer account, the payer account being linked to the access device; generate a tracer ticket in response to a request issued by the payer using either the payer device or the payee device, the tracer ticket containing information relating to the payment transaction; validate the access devices; and authorize the payment transaction against the payer account through conventional payment processing systems. Upon receiving the request from the payee device for the tracer ticket, the services hub generates the tracer ticket and forwards a copy thereof to the payer via the payee device.

Abstract: Systems and methods are disclosed for verifying customer identifications. In one embodiment, the method comprises receiving, at a transaction gateway, a communication associated with a transaction initiated by a customer; determining the communication includes an identity verification request to verify encoded data obtained from an identification presented by the customer; routing the identity verification request to an identity verification service; receiving, from the identity verification service, a result including one or more identification values obtained from the encoded data; and transmitting the result to a requester associated with the communication.

Abstract: Disclosed is a method and system for providing secure processing of electronic transactions for customers. Each customer maintains at least one payment account for use in the electronic transactions. The method includes processing a first electronic transaction. The first electronic transaction is processed using a payment account of the at least one payment account. Further, the method includes generating a transaction code for the first electronic transaction that is capable of identifying the payment account used for processing the first electronic transaction. Furthermore, the method includes processing a second electronic transaction for the customer using the transaction code on selection of the payment account. A transaction code is generated for each electronic transaction subsequent to the first electronic transaction.

Abstract: A process and system for seeking authorization for present receipt of legal tender in a requested amount, including: receiving an input entered through a user interface, the input comprising a value for the requested amount (encoded information from an identification item may also be read); transmitting the input over a data transfer pathway to a remote processor; automatically determining whether authorization of the requested amount, or a lesser amount, is granted; and if authorization is so granted, reading indicia information on a post-dated draft item for a sum total equal to at least an authorized amount plus a fee (if a draft item is being used for the present receipt of tender), and automatically providing an article for use to effectuate the present receipt of the legal tender in this authorized amount. The indicia information is also preferably transmitted over the data transfer pathway. An intermediary may be employed in the process.

Abstract: A method of providing a security website and verifying, by the security website, that a device of a user is authorized to access another website when the user attempts to access the another website via the security website.

Abstract: A method and system for encouraging users of computer readable content to register. The method involves embedding in the computer readable content, instruction codes operable to direct a processor circuit to automatically establish a connection to a server, when the content is in use by the processor circuit, to transmit registration information to the server and operable to control further use of the content by the processor circuit in response to a key received from the server.

Abstract: A method and system for secure communications in a mobile commerce system having a pre-defined communications protocol. The method and system are backward compatible, providing reader configured to distinguish between a first type of transponder using an unencrypted protocol and a second type of transponder using an encrypted protocol. The reader determines the type of transponder and alters its communications protocol accordingly. The encrypted protocol provides for encrypted communications within the constraints of the existing pre-defined communications protocol.