Device for conducting secure transactions over a network

TECHNICAL FIELD

[0002] The present invention relates generally to electronic commerce and more particularly to a technique for conducting secure transactions over a network such as the Internet.

BACKGROUND ART

[0003] Over the past several years an international network of networks known as the Internet has become increasingly popular. The Internet allows millions of users throughout the world to communicate with each other. To provide users with easier access to information available on Internet, a World Wide Web has been established. The World Wide Web allows information to be organized, searched and presented on the Internet using hypertext. Thus, using the World Wide Web a user can submit a query for information and be linked electronically to information of interest which has been stored at web locations on the Internet. Because of the use of hypertext, the information which can be queried and retrieved via the Internet includes not only textual information but also information in graphic, audio and video form. Web search engines and browsers have been developed to make searching and retrieval of information of interest on the Web relatively easy for virtually anyone having access to a personal computer or other device interconnected to the Internet.

[0004] Recently, merchants have began to exploit the Internet's capabilities in their marketing of goods and services, i.e. products. Numerous merchants have now established virtual storefronts using a hypertext document, commonly referred to as a Web “homepage”, which users can access over the Internet. The merchant's “homepage” will typically provide information regarding products, and will often provide the prospective customer with the option to purchase a desired product by making the necessary selections and providing the necessary information to the merchant via the Internet. Hence, the Web offers a new and exciting channel for marketing goods and services over the Internet, providing merchants with direct access to millions of potential buyers throughout the world in a manner which has never before been possible.

[0005] In order to ensure payment for products and services ordered over the Internet, merchants have typically offered the purchaser the ability to pay using credit or debit cards. Such cards are now widely used throughout the world to make purchases without cash. Credit cards basically extend a payment credit to the credit card holder. Debit cards, on the other hand, basically provide a means for debiting the cardholder's deposit account funds held by an issuing financial institute. However, because the Internet is an open communication network with virtually no built-in security, many cardholders are reluctant to transmit their credit and debit card numbers over the Internet to the merchant's Web site.

[0006] Various techniques have been proposed for overcoming the reluctance on the part of potential purchasers to transmit their card numbers over the Internet. Many of the proposed techniques rely on cryptography. Using these techniques, credit and debit card account numbers are encrypted prior to transmission over the Internet to the merchant and decrypted prior to storage at the merchant's Web site. These techniques may well alleviate concerns regarding the vulnerability of sensitive account information during transmission over the Internet. However, there remains a concern that, because the decrypted credit or debit card account numbers are stored on merchant computers, e.g. Web servers, connected to the Internet, this information will continue to be susceptible to attack by hackers and others who may attempt to gain unauthorized access to the information from virtually anywhere in the world. Although firewalls and other security measures can be taken to protect the stored information from unauthorized intruders, many merchants have neither the resources nor the expertise to implement such measures. Hence, encrypted transmission alone does not eliminate the security concern of many cardholders.

[0007] Others have proposed establishing what might be termed “virtual cash” which can be transferred from a purchaser's computer to a merchant's computer to pay for a product ordered via the Internet. The merchant can then go to the “virtual cash” sponsor and exchange the “virtual cash” for actual cash. However, these techniques require the establishment of a new electronic monetary system and are reliant, upon the financial worthiness of the “virtual cash” sponsor.

[0008] Still other proposed techniques utilize a type of “virtual cash”, which is associated with a purchaser's deposit account at a financial institute. Using such a system the purchaser transfers the “virtual cash” along with its deposit account number to the merchant as payment for the purchased products. The merchant then transfers the “virtual cash” to the financial institute, at which the purchaser maintains the deposit account. The financial institute then debits the purchasers deposit account by the amount represented by the “virtual cash” transferred to the merchant and pays the merchant using the funds withdrawn from the purchaser's deposit account. These latter techniques have many of the same problems associated with the use of credit and debit cards. That is, the deposit account number must be transmitted over the Internet and stored at the merchants Web site, and accordingly may be susceptible to unauthorized access.

[0009] Potential purchasers' of products over the Internet have also raised concerns regarding the transfer of credit card, debit card and deposit account numbers, as well as the transfer of “virtual cash” payments to merchant Web sites which have little history or trade presence. In this regard, potential purchasers may have a valid concern that the Web merchant is nothing more than a front for fraudulently obtaining credit card account numbers, debit card account numbers, deposit account numbers and/or virtual cash from unsuspecting purchasers.

[0010] Techniques have additionally been proposed to provide a separate private network for transmission of sensitive account related information. These techniques do provide an extra measure of security but are disadvantageous in that an auxiliary communication network is required and the potential purchaser is forced to first divert his/her attention from the merchants Web site and to then go back to the merchants Web site to conclude the transaction.

[0011] Accordingly it would be desirable to be able to conduct cashless transactions without jeopardizing the security of credit card, debit card and deposit account numbers, and without having to establish a “virtual cash” system or separate communications network.

OBJECTIVES OF THE INVENTION

[0012] Accordingly, it is an objective of the present invention to provide a technique for conducting cashless transactions, for example over the Internet.

[0013] It is another objective of the present invention to provide a technique for conducting cashless transactions which does not require disclosure of sensitive account related information.

[0014] It is still another objective of the present invention to provide a technique for conducting cashless transactions without the use of “virtual cash” or a separate private network to place an order.

[0015] Additional objects, advantages, novel features of the present invention will become apparent to those skilled in the art from this disclosure, including the following detailed description, as well as by practice of the invention. While the invention is described below with reference to preferred embodiment(s), it should be understood that the invention is not limited thereto. Those of ordinary skill in the art having access to the teachings herein will recognize additional implementations, modifications, and embodiments, as well as other fields of use, which are within the scope of the invention as disclosed and claimed herein and with respect to which the invention could be of significant utility.

SUMMARY DISCLOSURE OF THE INVENTION

[0016] In accordance with the invention, a system is provided for conducting cashless transactions in which products, i.e. goods and/or services, purchased via a network interchange are paid for from funds deposited in a purchaser's deposit or credit, e.g. home equity loan, account. Using the system, the purchaser is not required to identify the account to the seller, e.g. is not required to disclose the account number. Although the seller is not privy to the identity of the account, the seller is provided with a high level of security that the purchase price will be paid. Hence, both the purchaser's account and the seller's compensation are secure. It will be understood that, although discussed in terms of purchase and sale transactions, the invention can be easily adapted to other types of transactions such as rentals, loans and bailments.

[0017] The system includes a communications network interconnecting a network device associated with a seller, e.g. a merchant, and a network device associated with a financial institute, e.g. a bank, credit union or other holder of purchaser funds in a deposit or credit account. The network could be of virtually any type, but is preferably a wide area public network such as the Internet. The seller network device could, for example, be a network server which is used to offer products to purchasers via a virtual storefront on the network. The financial institute network device may, for example, be a network server controlled by the financial institute itself or by a representative of the financial institute. If the financial institute network device is controlled by a representative, the representative could beneficially represent multiple financial institutes. The seller and financial institute network devices are preferably mainframe computers or high power mini computers, but could, under some circumstances, be workstations or personal computers or other less powerful network devices.

[0018] In operation, the seller network device receives information identifying a product intended to be purchased at a purchase price by a purchaser. The seller network device also typically receives information identifying the intended purchaser. This latter information could, for example, include the purchaser's name and residential or business address. If the seller allows alternative methods of payment to its customers, the seller network device may also receive information indicative of the purchaser's intention to pay the purchase price through the transfer of deposit or credit account funds. All such information is typically transmitted to the seller network device via the network, by a network device associated with the purchaser. However, if desired, this information could alternatively be provided by the purchaser as direct input to the seller network device using a keyboard, mouse, voice digitizer or other user input device. The purchaser network device could be of any various types, but is most commonly a personal computer.

[0019] As discussed above, the payment of the purchase price will be made by a transfer to the seller of funds of the purchaser on deposit in a deposit account or credited to a credit account. To avoid jeopardizing the security of the deposit or credit account, which could occur if, for example, the identity of the account were transmitted over the network without being first encrypted, or were stored in an unencrypted form on the seller network device, or were simply disclosed to a seller intent on fraudulently withdrawing funds from the account, the identity of the account is not communicated to and remains unknown to the seller.

[0020] To facilitate payment, the financial institute network device receives, via the network either directly from the purchaser or through the seller, the authorization of the purchaser to pay the purchase price for the identified product through the transfer to the seller of funds in the deposit or credit amount. Preferably, the financial institute network device also determines if the deposited or credited funds are sufficient with respect to the purchase price. Generally this will require that the funds equal or exceed the purchase price; however, in certain implementations, the financial institute or its representative may provide some overdraft protection and hence deposited or credited funds equaling less than the purchase price could, in such implementations, be determined sufficient. If sufficient funds are available in the account, the financial institute network device transmits, via the network, an authorization for the seller to proceed with delivery of the identified product.

[0021] In a preferred implementation, the purchaser network device beneficially includes search engine and browser software which can be used to locate the seller's network address, and to access information stored at the address and download it to the purchaser network device. More particularly, the purchaser network device searches the network using the search engine to locate the network address of a seller having products of interest. The purchaser network device then uses Web browser to access the seller's “homepage” and other information available at the seller's network address. Responsive to commands entered at the purchaser network device, for example using a keyboard, mouse or other user input device, information relating to the purchase of products available from the seller is transmitted by the seller network device to the purchaser network device via the network. Such downloaded information will typically identify the products available for purchase, the purchase price associated with each of the respective products, and the available payment options. For example, the payment options may include the transfer to the seller of the deposited or credited funds, credit card payment and/or a debit card payment.

[0022] Using a user input device, the inputs can then be entered, at the purchaser network device to select a product from the available products for purchase. Inputs can also be entered to select payment of the purchase price through the transfer of the deposited or credited funds, from the available payment options. This information is transmitted by the purchaser network device to the financial institute network device. Typically, this information is also sent to the seller network device via the network. The information transmitted will also identify the purchaser and seller to the financial institute network device. If the purchaser has not been previously identified to the seller network device, the information transmitted to the seller network device will also include information identifying the purchaser. The transmitted information may also identify the financial institute to the seller.

[0023] The purchaser network device beneficially transmits this information to the seller and financial institute network devices automatically in response to the selecting payment by the transfer of deposited or credited funds. The transmission to the financial institute network device is preferably implemented using a hyperlink which automatically establishes a link from the purchaser network device to the financial institute network device upon selection of the applicable payment option.

[0024] With a network link established between the financial institute and purchaser network devices, the financial institute network device can transmit a request to the purchaser network device for authorization to transfer deposited or credited funds to the seller in payment of the purchase price of the identified products. Responsive to the request, the purchaser enters an authorization at the purchaser network device which is transmitted to the financial institute network device via the network. If desired, the seller network device may be required to transmit a notice of delivery of the product to the financial institute network device via the network, before any transfer of the deposited or credited funds to the seller occurs. In such a case, the financial institute network device transmits, via the network, a directive to transfer the funds from the deposit or credit account to the seller responsive to receipt of the notice of delivery. Typically, after the funds have been transferred, the financial institute network device will transmit to the purchaser network device, via the network, an account statement indicating the deposited or credited funds have been transferred from the account to the seller in payment of the purchase price of the identified products.

[0025] In accordance with other aspects of the invention, the system operates in real time. Each of the network devices is located at a separate network site or station and has a separate network address. The invention can be implemented using computer software instructions stored on a computer readable storage medium which, when read from the medium by a computer, causes the computer to perform one or more of the functions which have been described above. It will be recognized by those skilled in the art that the medium can be optical, electrical, electro-magnetic or of some other type, and may be in the form of a hard or floppy disk, semiconductor chip or some other form. The medium could, for example, be what is commonly referred to as random access memory (RAM), main memory or some other type of memory. It should also be understood that the network communication links between the seller network device and the financial institute and purchaser network devices can and will generally be relatively less secure than the link between the financial institute network device and the purchaser network device.

BRIEF DESCRIPTION OF DRAWINGS

[0026]
FIG. 1 depicts exemplary networked the present invention.

[0027]
FIG. 2 depicts communication links which are established between various parties via the networks shown in FIG. 1 in accordance with the present invention.

[0028]
FIG. 3 depicts exemplary product information downloaded from a seller to a purchaser in accordance with the present invention.

[0029]
FIG. 4 depicts exemplary ordering information downloaded from a seller to a purchaser in accordance with the present invention.

[0030]
FIG. 5 depicts exemplary log-on information required by a financial institute in order for a purchaser to authorization a transfer of funds from the purchaser's deposit account in accordance with the present invention.

[0031]
FIG. 6 depicts exemplary information downloaded from a financial institute to a purchaser to obtain the purchaser's authorization to transfer funds from the purchaser's deposit account in accordance with the present invention.

[0032]
FIG. 7 depicts an exemplary account statement downloaded from a financial institute to a purchaser after the transfer of funds from the purchaser's deposit account in accordance with the present invention.

[0033]
FIG. 8 is a flow chart of a process for conducting cashless transactions in accordance with the present invention.

[0034]
FIG. 9 depicts a computer suitable for use by the purchaser to access the Internet in accordance with the invention.

[0035]
FIG. 10 is an exemplary block diagram of components of the computer depicted in FIG. 9.

[0036]
FIG. 11 depicts an Internet server suitable for use by a seller in accordance with the invention.

[0037]
FIG. 12 is an exemplary block diagram of components of the server depicted in FIG. 11.

[0038]
FIG. 13 depicts an Internet server suitable for use by a financial institute or its representative in accordance with the invention.

[0039]
FIG. 14 is an exemplary block diagram of components of the server depicted in FIG. 13.

BEST MODE FOR CARRYING OUT THE INVENTION

[0040] As shown in FIG. 1, network 100 interconnects multiple sellers 110a-110n, multiple purchasers 120a-120n, and a purchaser financial institute or representative of one or more purchaser financial institutes 130. The network 100 is shown to be the Internet, but could be virtually any type of network which is not considered particularly secured. Also shown is a network 150 interconnecting the purchaser financial institute/representative 130 and multiple seller financial institutes 140a-140n. The network 150 is shown to be a private financial institute network, such as the currently existing bank network over which it is quite common to electronically transfer funds between banks. Here again, the network 150 could be another type of network interconnecting the purchaser financial institute/representative 130 to financial institutes 140a-140n used by the sellers 110a-110n, so long as the network is considered relatively secured.

[0041] Each of the purchasers 120a-120n is preferably represented on the network 100 by a personal computer of the type depicted in FIGS. 9 and 10 which will be described further below. However it should be recognized that virtually any network device could be utilized so long as the device has sufficient processing and communication capabilities to function in the described manner. Each of the sellers 110a-110n and the purchaser financial institute/representative 130 is preferably represented on the Internet 100 by an Internet server of the applicable type shown in FIGS. 11-14 and as will be described further below. However, here again, any network compatible device which is capable of functioning in the described manner could be substituted for the servers shown in FIGS. 11-14 to represent any or all of the sellers 110a-110n and/or the purchaser financial institute/representative 130. It should be noted that all or some of the purchasers 120a-120n, sellers 110a-110n and purchaser financial institute/representative 130 could interconnect to the Internet 100 through an Internet service provider. As previously indicated, the purchaser financial institute/representative 130 could, if desired, represent multiple purchaser financial institutes. Furthermore, multiple financial institutes or representatives of financial institutes could be interconnected to the Internet with each functioning as will be described below with reference to the purchaser financial institute/representative 130.

[0042] The interrelationship between one of the sellers 110, one of the purchasers 120, the purchaser financial institute/representative 130, and one of the seller financial institutes 140 will now be described. Referring first to FIGS. 2 and 8, a purchaser 120 establishes, in step 805, a connection to the Internet using the purchaser personal computer (PC) depicted in FIGS. 9 and 10. Using a search engine stored on the RAM of the purchaser PC, the purchaser 120, in step 810, searches the Web for sellers on the Web offering products of interests. In step 815, an Internet Web site address of the seller 110 is returned to the purchaser 120 via the Internet in response to the search query. In step 820, the purchaser 120 establishes an Internet link 210 with the seller 110 as shown in FIG. 2.

[0043] Referring now to FIGS. 2, 3 and 8, utilizing the Internet link 210 the seller 110, using the seller server depicted in FIGS. 11 and 12, downloads product information to the purchaser 120, as indicated in step 825, which is displayed on the purchaser PC. As shown in FIG. 3, the seller product information 300 includes multiple product offerings 310a-310n. For each product, a product description 312a-312n and a product price 314a-314n are provided. Associated with each product is an icon 316a-316n which can be clicked on to select a product which the purchaser 120 wishes to order. Accordingly, in step 830 of FIG. 8, the purchaser selects a product for ordering by clicking on the appropriate icon 316a-316n. By clicking on a particular icon, other information downloaded with the product information, as shown in FIG. 4, is presented to the purchaser 120 on the purchaser PC. Alternatively, by clicking on the icon, a message could be transmitted to the seller 110 indicating the selected product and, responsive to receipt of this transmission, the information shown in FIG. 4 could be downloaded by the seller 110 via the Internet link 210 to the purchaser 120.

[0044] In any event, as is shown in FIG. 4, the ordering information 400 includes a product description summary 312′ which corresponds to the product description 312 of the selected product. Also provided is the product price 314 which is identical to the product price 314 shown in FIG. 3 for the selected product. The pricing information 410 also includes the sales tax 412, shipping costs 414 and a summation of all costs as a total price 416.

[0045] In step 835 a determination is made as to whether or not purchaser specific data has been previously entered by the purchaser 120. The determination is made by the purchaser PC or by the seller-server depending on whether the FIG. 4 information is downloaded in step 825 or after a product has been selected in step 830. If purchaser specific data has not been previously entered, in step 840 the purchaser is required to enter name information 420 and address information 430. In the exemplary presentation shown in FIG. 4, the purchaser 120 enters a last name 422, first name 424 and middle initial 426, along with a street address 432, city 434, state 436 and country 438. If this data has been previously entered by the purchaser, the name information 420 and address information 430 will automatically appear in the appropriate areas of FIG. 4.

[0046] As shown in FIG. 4 various payment options 440 are provided to the purchaser 120. The seller 110 is willing to accept payment by credit card including Visa 442, MasterCard 444 and Discover 446. The seller will also accept a bank debit card 448. Additionally provided is the option to pay using “WebCC” 450. To select the desired payment option, the purchaser 120 clicks on the appropriate one of icons 442a-450a.

[0047] In step 845 of FIG. 8, the purchaser 120 clicks on the icon 450a to select “WebCC” as the desired manner of payment. In step 850, a determination is made by the purchaser PC as to whether or not “WebCC” is the selected manner of payment. If not, in step 855 the order can be conventionally processed.

[0048] If, in step 850 of FIG. 8, it is determined that “WebCC” has been selected, in step 860 an Internet link 220 to the purchaser financial institute/representative 130 is established. The Internet link is established automatically by a hyperlink 450b shown in FIG. 4, which is activated upon determining that “WebCC” is the selected manner of payment. It will be recognized that, if desired, this link could alternatively be established via the browser through the seller.

[0049] Once the link 220 has been established, a log-on request is transmitted by the purchaser financial institute/representative 130 to the purchaser 120. In step 865, purchaser 120 logs onto the network server representing the purchaser financial institute/representative 130 by providing name information 420 and a password 510. The requested name information includes a last name 422, first name 424 and middle initial 426. The purchaser is required to enter this information to log-on to the financial institute/representative server. In the preferred implementation, communications over the Internet link 220 of FIG. 2, which is established in step 860 of FIG. 8, are encrypted prior to transmission and decrypted upon receipt. Accordingly Internet link 220 which interconnects the purchaser 120 with the purchaser financial institute/representative 130 is relatively secure as compared to the Internet link 210 which interconnects the purchaser 120 and the seller 110.

[0050] In step 870, with the log-on successfully completed, the product description summary 312′ and pricing information 410 are downloaded to the financial institute/representative 130 over the Internet link 220. If desired, the name 420 and address 430 of the purchaser as indicated in FIG. 4 may also be downloaded. It may be desirable, in certain implementations, to also download this information to the seller 110 via the Internet link 210, although this is not necessarily required. The product and pricing information downloaded to the purchaser financial institute/representative 130 may include, as part of the product description summary, some indicator which identifies the seller 110. Alternatively the hyperlink 450b could include information which identifies the seller. If so desired, the seller 110 could be separately identified in the information 400 represented in FIG. 4.

[0051] In step 875, the financial institute/representative 130 makes a determination as to whether or not the funds deposited in the purchasers account with the applicable purchaser financial institute are sufficient in view of the total purchase price 416. As noted above, credited funds, from, for example, a home equity or other type loan could alternatively or conjunctively be associated with the account. This determination may be a simple determination that the deposited funds equal or exceed the total price 416. However, in certain implementations the financial institute may provide some overdraft protection, in which case the financial institute/representative 130 may be willing to approve the transaction even if the deposited funds will only partially cover the total purchase price 416.

[0052] In any event, if the deposited funds are determined to be insufficient, in step 880 the financial institute/representative 130 transmits a notification of insufficient funds via the Internet link 220 to the purchaser 120 and, unless the purchaser wishes to continue communications with the purchaser financial institute/representative 130 regarding other matters, the purchaser 120 logs-off the financial institute/representative server and may return to step 830 and proceed with the ordering of a different, perhaps less expensive, product.

[0053] If the deposited funds are determined to be sufficient in step 875, in step 885 the financial institute/representative 130 transmits an authorization request 600 to the purchaser 120, via link 220. As shown in FIG. 6, an exemplary authorization request 600 which can be presented to the purchaser 120 on the purchaser PC includes the product description summary 312′ and the price information 410. The seller is also explicitly identified by name 610 and address 620, including the seller's street address 622, city 624, state 626 and country 628. A current deposit account balance 630 is also presented to the purchaser 120 along with an icon 640 for canceling the transaction and an icon 650 for authorizing the withdrawal and transfer of funds in the deposit account to pay the total price indicated for the described products. By clicking on icon 640 the purchaser 120 can indicate his/her decision not to authorize the transfer of deposit account funds in payment of the purchase price and thereby cancel the transaction. By clicking on icon 650 authorization to transfer deposit account funds in payment for the described product is indicated by the purchaser 130.

[0054] In step 890, the financial institute/representative 130 determines whether or not the transfer of the deposit account funds has been authorized by the purchaser. If not, a confirmatory notice is sent back to the purchaser 120 via the Internet link 220, The purchaser, unless he/she wishes to communicate with the financial institute/representative 130 regarding other matters, logs-off the financial institute/representative server and can continue by selecting another product for ordering in step 830. If the authorization to transfer deposit account funds is given in step 890, a hyperlink 660, as shown in FIG. 6, establishes an Internet link 230, as shown in FIG. 2, from the financial institute/representative 130 to the seller 110. As indicated in step 900.

[0055] In step 905, the financial institute/representative 130 transmits, via the Internet link 230, and authorization to proceed with the transaction to the seller 110. This authorization serves as a representation by the purchaser's financial institute to the seller that the total price will be paid to the seller 110. Because the purchaser's financial institute/representative 130 and seller 110 have previously established a relationship in connection with the offering of the “WebCC” payment option, required information, such as the identity of the sellers financial institute and the deposit account to which the purchaser's funds are to be transferred is already known to the purchaser's financial institute/representative 130. However, if desired, seller related information necessary for the electronic fund transfer could be otherwise provided by the seller to the purchaser financial institute/representative 130 so that the transfer of the purchaser's deposit account funds could be completed at the appropriate time. At this point, the seller will typically issue an order acceptance to the purchaser.

[0056] In step 910, the seller server transmits a delivery notice via the Internet link 230, or a subsequently established Internet link 230′ between the seller 110 and purchaser's financial institutes/representative 130. This provides confirmation of delivery of the ordered product by the seller 110 to the purchaser 120. In the preferred implementation, after notification of delivery from the seller 110, in step 915 the financial institutes/representative server initiates a transfer of the funds from the deposit account of the purchaser 120 maintained with the purchasers financial institute to the deposit account of the seller 110 maintained with the seller financial institute 140. This transfer is made by electronic fund transfer via the secure network link 240, as shown in FIG. 2, over the private financial institute network 150 of FIG. 1. Payment of course could be made based upon other than delivery. For example, payment could be required prior to delivery in which case step 910 could, if desired, be eliminated. Payment could also be made by check or draft rather than electronic fund transfer.

[0057] Thereafter an account statement 700, as shown in FIG. 7, is provided in step 920 by the financial institute/representative 130 to the purchaser 120. This transmission, depending upon the implementation and circumstances, may be transmitted via Internet link 220 or a subsequently established relatively secure Internet link 220′ between the purchaser's financial institute/representative 130 and purchaser 120.

[0058]
FIGS. 9 and 10 depict an exemplary personal computer suitable for use by purchasers to access the Internet in the above-described embodiment of the invention. The computer is preferably a commercially available personal computer. The computer processor could, for example, be a Pentium™ processor. It will be recognized that the computer configuration is exemplary in that other components (not shown) could be added or substituted for those depicted and certain of the depicted components could be eliminated if desired.

[0059] The computer functions as described above with reference to FIGS. 1-8, in accordance with stored programming instructions which drive its operation. Preferably the computer stores its unique programming instructions on an EPROM, or hard disk. It will be recognized that only routine programming is required to implement the instructions required to drive the computer to operate in accordance with the invention, as described above. Further, since the computer components and configuration are conventional, routine operations performed by depicted components will generally not be described, such operations being well understood in the art.

[0060] Referring to FIG. 9, the computer 1000 includes a main unit 1010 with slots 1011, 1012 and 1013, respectively provided for loading programming or data from a floppy disk and/or compact disk (CD) onto the computer 1000. The computer 1000 also includes a keyboard 1030 and mouse 1040 which serve as user input devices. A display monitor 1020 is also provided to visually communicate information to the user.

[0061] As depicted in FIG. 10, the computer 1000 has a main processor 1100 which is interconnected via bus 1110 with various storage devices including EPROM 1122, RAM 1123, hard drive 1124, which has an associated hard disk 1125, CD drive 1126, which has an associated CD 1127, and floppy drive 1128, which has an associated floppy disk 1129. The memories, disks and CD all serve as storage media on which computer programming or data can be stored for access by the processor 1100. A drive controller 1150 controls the hard drive 1124, CD drive 1126 and floppy drive 1128. Also depicted in FIG. 10 is a display controller 1120 interconnected to display interface 1121, a keyboard controller 1130 interconnected to keyboard interface 1131, a mouse controller 1140 interconnected to mouse interface 1141 and a modem 1160 interconnected to I/O port 1165, all of which are connected to the bus 1110. The modem 1160 and interconnected I/O port 1165 are used to transmit and receive signals via the Internet as described above. It will be understood that other components may be connected if desired to the bus 1110. By accessing the stored computer programming, the processor 1100 is driven to operate in accordance with the present invention.

[0062] The inter-operation of the various components of the computer depicted in FIGS. 9 and 10 in implementing the invention as described above will now be discussed. Transmitted signals corresponding to those issued from the seller and purchaser financial institute/representative servers are received via I/O port 1165 and modem 1160 and directed over the bus 1110 to processor 1100. The processor in accordance with programming instructions stored on EPROM 1122 processes the information to perform the functions required of the purchaser PC to accomplish cashless transactions in the above described manner. The programming instructions may be downloaded onto the RAM after activation of the computer 1000 and accessed by the processor 1100 directly from the RAM 1120 during system operation.

[0063] In particular, in accordance with its programmed instructions, the processor 1100 generates a signal which is transmitted via the modem 1160 and port 1165 to establish a link with the Internet 100 of FIG. 1, as indicated by step 805 of FIG. 8. As is discussed above, this link may be established through an Internet service provider.

[0064] Processor 1100 operates a Web search engine to locate sellers on the Internet 100 offering products of interest, as indicated in step 810 of FIG. 8. An Internet Web site address of the seller 110 is returned via the port 1165 and modem 1160 to the processor 1100, as indicated in step 815. This information will typically be displayed by the display controller 1120 and interface 1121 on the monitor 1020 of FIG. 9.

[0065] By operating a Web browser, the processor 1100 can establish an Internet link to the sellers “homepage” via modem 1160 and port 1165, as indicated in step 820. Once the link has been established to the seller's Internet server, product and ordering information can be received via the port 1165 and modem 1160 by the processor 1100. This information can be displayed on the monitor 1020 for perusal by the purchaser 120. The information may be presented as shown in FIG. 3.

[0066] Using the mouse 1040, the purchaser 120 clicks on the appropriate icon 316 to select the product for ordering, as indicated in step 830. The processor 1100 then determines whether or not data identifying the purchaser has been previously entered as indicated in step 835. The processor 1100 directs the display controller 1120 to transmit signals via the display interface 1121 so that a screen, such as that shown in FIG. 4, is displayed on the monitor 1020.

[0067] Depending upon the determination by the processor 1100 in step 835, either name information 420 and address information 430 previously stored in the RAM 1123 is automatically provided on the screen 400 shown in FIG. 4, or, the purchaser 120, using the keyboard 1030, enters this information as indicated in step 840.

[0068] Using the mouse 1040 the purchaser selects the manner of payment by clicking on the icon 442 as indicated in step 845. The entered information is transmitted to the processor 1100 mouse controller 1140 and interface 1141. The processor 1100 then determines, as indicated in step 850, if the selected method of payment is “WebCC”.

[0069] If so, a signal is generated by the processor 1100 implementing the hyperlink 450b to establish an Internet link 220 between the financial institute/representative server and the PC 1000, as indicated by step 860. The customer log-on request is received via the port 1165 and modem 1160. The processor 1100 directs the display controller 1120 to issue signals via the display interface 1121 to display a screen such as that shown in FIG. 5 on the monitor 1020. The purchaser can now enter the necessary information using the keyboard 1030 to log on to the financial institute/representative server, as indicated in step 865. The information is received by the processor via the keyboard controller 1130 and interface 1131, responsive to which the processor 1100 generates signals which are transmitted via the modem 1160 and port 1165 to the purchaser financial institute/representative server over link 220.

[0070] After successful completion of the log-on procedure, the processor 1100 automatically generates signals transmitting the product and pricing information shown in FIG. 4 via the modem 1160 and port 1165 to the purchaser financial institute/representative server, as indicated in step 870. Assuming that the deposit funds are sufficient, information is received via the port 1165 and modem 1160 by the processor 1100 requesting the purchasers authorization to transfer deposited funds, as indicated in step 885. The processor 1100 directs the display controller 1120 to display this request on the monitor 1020, for example in the form shown in FIG. 6. If the funds are insufficient notice, as indicated in step 880 is received.

[0071] Using the mouse 1040, the purchaser can now authorize the transfer or cancel the transaction. In either case, a signal is transmitted via the mouse interface 1141 and mouse controller 1140 to the processor 1100. Processor 1100 generates a signal reflecting the cancellation or authorization and directs the signal to be transmitted to the financial institute/representative server via the modem 1160 and port 1165. The processor 1100 next receives either a confirmatory notification that no authorization has been given, as indicated in step 880, or an account statement such as that shown in FIG. 7, as indicated in step 920; if authorization has been given by the purchaser and the funds transferred. The notification or statement are received via the port 1165 and modem 1160 by the processor 1100. Responsive to the receipt of this information processor 1100 directs the display controller 1120 to control the display of the notification or statement on the monitor 1020 for presentation to the purchaser.

[0072]
FIGS. 11 and 12 depict an exemplary network server suitable for use by sellers to access the Internet in the above-described embodiment of the invention. The server is preferably a commercially available high power, mini-computer or mainframe computer. The server processor could, for example, be an Alpha™ processor. Here again, it will be recognized that the server configuration is exemplary in that other components (not shown) could be added or substituted for those depicted and certain of the depicted components could be eliminated if desired.

[0073] The server functions as described above with reference to FIGS. 1-8, in accordance with stored programming instructions which drive its operation. As in the case of the purchaser computer, preferably the server stores its unique programming instructions on an EPROM or hard disk. It will be recognized that only routine programming is required to implement the instructions required to drive the server to operate in accordance with the invention, as described above. Further, since the server components and configuration are conventional, routine operations performed by depicted components will generally not be described, such operations being well understood in the art.

[0074] Referring to FIG. 11, the server 1000′ includes a main unit 1010′ with slots 1011′, 1012′, 1013′ and 1014′, respectively provided for loading programming or data from a floppy disk, CD and/or hard disk onto the server 1000′. The server 1000′ also includes a keyboard 1030′ and mouse 1040′, which serve as user input devices. A display monitor 1020′ is also provided to visually communicate information to the user.

[0075] As depicted in FIG. 12, the server 1000′ has a main processor 1100′ which is interconnected via bus 1110′ with various storage devices including EPROM 1122′, RAM 1123′, hard drive 1124′, which has an associated hard disk 1125′, CD drive 1126′, which has an associated CD 1127′, and floppy drive 1128′, which has an associated floppy disk 1129′. The memories, disks and CD all serve as storage media on which computer programming or data can be stored for access by the processor 1100′. A drive controller 1150′ controls the hard drive 1124′, CD drive 1126′ and floppy drive 1128′. Also depicted in FIG. 12 is a display controller 1120′ interconnected to display interface 1121′, a keyboard controller 1130′ interconnected to keyboard interface 1131′, a mouse controller 1140′ interconnected to mouse interface 1141′ and a modem 1160′ interconnected to I/O port 1165′, all of which are connected to the bus 1110′. The modem 1160′ and interconnected I/O port 1165′ are used to transmit and receive signals via the Internet as described above. It will be understood that other components may be connected if desired to the bus 1110′. By accessing the stored computer programming, the processor 1100′ is driven to operate in accordance with the present invention.

[0076] The inter-operation of the various components of the seller server depicted in FIGS. 11 and 12 in implementing the invention as described above will now be discussed. Transmitted signals corresponding to those issued from the purchaser financial institute/representative server and the purchaser personal computer are received via I/O port 1165′ and modem 1160′ and directed over the bus 1110′ to processor 1100′. The processor in accordance with programming instructions processes the information to perform the functions required of the seller's to accomplish cashless transactions in the above described manner. The programming instructions may be downloaded onto the RAM after activation of the seller server 1000′ and accessed by the processor 1100′ directly from the RAM 1120′ during system operation.

[0077] The processor 1100′ of the seller server 1000′ receives signals via port 1165′ and modem 1160′ from the purchaser PC, over Internet link 210, responsive to which the processor 1100′ generates signals transmitted via the modem 1160′ and port 1165′ downloading product and ordering information stored, for example, on the hard disk 1125′, as indicated in step 825. The processor 1100′ may, in certain implementations, also receive the purchaser information and payment selection entered by the purchaser in step 845. The processor 1100′ will also received, via the port 1165′ and modem 1160′, the financial institute authorization which is transmitted over the internet link 230 by the financial institute/representative server in step 905. Once delivery occurs, information may be input to processor 1100′ via the keyboard 1030′, or otherwise as is well understood in the art, responsive to which the processor 1100′ generates the signal representing a delivery notification which is transmitted via the modem 1160′ and port 1165′ to the financial institute/representative server, as indicated in step 910.

[0078]
FIGS. 13 and 14 depict an exemplary network server suitable for use by the financial institute/representative 130 to access the Internet in the above-described embodiment of the invention. The server is preferably a commercially available high power, mini-computer or mainframe computer. The server processor could, for example, be an Alpha™ processor. Here again, it will be recognized that the server configuration is exemplary in that other components (not shown) could be added or substituted for those depicted and certain of the depicted components could be eliminated if desired.

[0079] The server functions as described above with reference to FIGS. 1-8, in accordance with stored programming instructions which drive its operation. As in the case of the seller server, preferably the purchaser financial institute/representative server stores its unique programming instructions on an EPROM or hard disk. It will be recognized that only routine programming is required to implement the instructions required to drive the server to operate in accordance with the invention, as described above. Further, since the server components and configuration are conventional, routine operations performed by depicted components will generally not be described, such operations being well understood in the art.

[0080] Referring to FIG. 13, the server 1000″ includes a main unit 1010″ with slots 1011″, 1012″, 1013″ and 1014″; respectively, provided for loading programming or data from a floppy disk, CD and/or hard disk onto the server 1000″. The server 1000″ also includes a keyboard 1030″ and mouse 1040″ which serve as user input devices. A display monitor 1020″ is also provided to visually communicate information to the user.

[0081] As depicted in FIG. 14, the server 1000″ has a main processor 1100″ which is interconnected via bus 1110″ with various storage devices including EPROM 1122″, RAM 1123″, hard drive 1124″, which has an associated hard disk 1125″, CD drive 1126″ which has an associated CD 1127″, and floppy drive 1128″, which has an associated floppy disk 1129″. The memories, disks and CD all serve as storage media on which computer programming or data can be stored for access by the processor 1100″. A drive controller 1150″ controls the hard drive 1124″, CD drive 1126″ and floppy drive 1128″. Also depicted in FIG. 14 is a display controller 1120″ interconnected to display interface 1121″, a keyboard controller 1130″ interconnected to keyboard interface 1131″, a mouse controller 1140″ interconnected to mouse interface 1141″ and a modem 1160″ interconnected to I/O port 1165″, all of which are connected to the bus 1110″. The modem 1160″ and interconnected I/O port 1165″ are used to receive signals from and transmit signals over the Internet as described above. It will be understood that other components may be connected if desired to the bus 1110″. By accessing the stored computer programming, the processor 1100″ is driven to operate in accordance with the present invention.

[0082] The inter-operation of the various components of the financial institute/representative server depicted in FIGS. 13 and 14 in implementing the invention as described above will now be discussed. Transmitted signals corresponding to those issued from the seller server and the purchaser personal computer are received via I/O port 1165″ and modem 1160″ and directed over the bus 1110″ to processor 1100″. The processor in accordance with programming instructions processes the information to perform the functions required of the financial institute/representative's server to accomplish cashless transactions in the above described manner. The programming instructions may be downloaded onto the RAM after activation of the financial institute/representative server 1000″ and accessed by the processor 1100″ directly from the RAM 1120″ during system operation.

[0083] More particularly, the processor 1100″, after establishment of the Internet link 220 generates a signal which downloads to the purchaser PC, via the modem 1160″ and port 1165″ the log-on request shown in FIG. 5, as indicated in step 865. The processor 1100″ receives, via the port 1165″ and modem 1160″, the log-on information, and the product and pricing information from the purchaser PC, as indicated in step 870. Responsive to the receipt of this information, the processor 1100″ determines if the deposited funds in the purchasers account with the applicable purchaser financial institute are sufficient, as indicated in step 875.

[0084] The processor 1100″ then generates a signal, which is transmitted via the modem 1160″ and port 1165″ to the purchaser computer, either notifying the purchaser that, the deposited funds are insufficient, as indicated in step 880, or transmitting a purchaser authorization request, for example in the form of FIG. 6, to the purchaser PC as indicated in step 885. The purchasers response is received by the processor 1100″ via the port 1165″ and modem 1160″. The processor 1100″ determines, in step 890, whether the purchaser has authorized the payment of the total purchase price from the deposited funds.

[0085] If not, the processor 1100″ generates a notification to the purchaser, in step 880, which is transmitted via the modem 1160″ and port 1165″ confirming non-authorization. If the processor 1100″ determines that the authorization has been given, it proceeds to establish Internet link 230 to the seller server, as indicated in step 900. After the Internet link 230 has been established, the processor 1100″ generates a further signal which is transmitted via the modem 1160″ and port 1165″ to the seller server which indicates that the transaction has been authorized, as indicated in step 905.

[0086] The processor then receives via the port 1165″ and model 1160″ the delivery notification from the seller server. Responsive to this notification the processor 1100″ generates a signal directing the transfer of the deposited funds from the purchaser's deposit account to the seller's deposit account via the private network 150, as indicated in step 915. The processor 1100″ further generates a signal which is transmitted via modem 1160″ and port 1165″ providing an account statement, as for example shown in FIG. 7, to the purchaser PC indicating the debiting of the total purchase price from the deposit account funds, as indicated in step 920.

[0087] As indicated above, if desired the purchaser 120 could interact directly with the seller server 1000′ via the keyboard 1030′ and mouse 1040′ thereby eliminating PC 1000 and any need to establish the links 210, 220 and 2201. In such an implementation, two separate Internet links would be established between the seller server 1000′ and financial institute/representative server 1000″, one of which would be the relatively insecure Internet link 230 and the other of which would be a relatively secure Internet link substituting for Internet link 220 shown in FIG. 2. Using such an implementation, the process starting at step 825 of FIG. 8 would generally be followed with the seller server 1000′ performing the functions which would otherwise have been performed by the purchaser PC 1000 in the process.

[0088] As described above, the present invention provides a technique for conducting cashless transactions, for example over the Internet, which does not require disclosure of sensitive account related information and without the use of virtual cash or a private network to place an order.

[0089] It will also be recognized by those skilled in the art that, while the invention has been described above in terms of one or more preferred embodiments, it is not limited thereto. Various features and aspects of the above described invention may be used individually or jointly. Further, although the invention has been described in the context of its implementation in a particular environment and for particular purposes, e.g. electronic commerce, those skilled in the art will recognize that its usefulness is not limited thereto and that the present invention can be beneficially utilized in any number of environments and implementations. Accordingly, the claims set forth below should be construed in view of the full breath and spirit of the invention as disclosed herein.

	Number	Date	Country
Parent	09208998	Dec 1998	US
Child	10831022	Apr 2004	US

Device for conducting secure transactions over a network

Information

Publication Number

Date Filed

Date Published

Inventors

Original Assignees

CPC

US Classifications

International Classifications

Abstract

Description

Claims

CROSS-REFERENCE TO RELATED APPLICATIONS

Continuations (1)