WO2002050743A1 - Procede et systeme d'utilisation de cartes optiques comme plates-formes unifiees, securisees, portatives, pour effectuer une pluralite de transactions en ligne securisees - Google Patents

Procede et systeme d'utilisation de cartes optiques comme plates-formes unifiees, securisees, portatives, pour effectuer une pluralite de transactions en ligne securisees Download PDF

Info

Publication number
WO2002050743A1
WO2002050743A1 PCT/US2001/003764 US0103764W WO0250743A1 WO 2002050743 A1 WO2002050743 A1 WO 2002050743A1 US 0103764 W US0103764 W US 0103764W WO 0250743 A1 WO0250743 A1 WO 0250743A1
Authority
WO
WIPO (PCT)
Prior art keywords
optical data
line
secure
pki
users
Prior art date
Application number
PCT/US2001/003764
Other languages
English (en)
Inventor
Jakob Peled
Bezalel Livne
Ayelet Eshel
Original Assignee
Cd Card Ltd.
Friedman, Mark, M.
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Cd Card Ltd., Friedman, Mark, M. filed Critical Cd Card Ltd.
Priority to AU2001238037A priority Critical patent/AU2001238037A1/en
Publication of WO2002050743A1 publication Critical patent/WO2002050743A1/fr

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0853—Network architectures or network communication protocols for network security for authentication of entities using an additional device, e.g. smartcard, SIM or a different communication terminal
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/34—User authentication involving the use of external additional devices, e.g. dongles or smart cards
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K19/00—Record carriers for use with machines and with at least a part designed to carry digital markings
    • G06K19/04—Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the shape
    • G06K19/041—Constructional details
    • G06K19/042—Constructional details the record carrier having a form factor of a credit card and including a small sized disc, e.g. a CD or DVD
    • G06K19/044—Constructional details the record carrier having a form factor of a credit card and including a small sized disc, e.g. a CD or DVD comprising galvanic contacts for contacting an integrated circuit chip thereon
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/02—Payment architectures, schemes or protocols involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/341—Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/346—Cards serving only as information carrier of service
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/357—Cards having a plurality of specified features
    • G06Q20/3576—Multiple memory zones on card
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3829—Payment protocols; Details thereof insuring higher security of transaction involving key management
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
    • G07F7/1008—Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
    • H04L2463/102—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying security measure for e-commerce

Definitions

  • the present invention relates to the general field of performing on-line transactions and, more particularly, to a method and system for using optical data cards as portable secure unified platfonns for performing a variety of secure on-line transactions.
  • each optical data card is formatted, prepared, and used, with at least one of a plurality of different types of on-line user/transaction authentication protocols, and, with at least one of a plurality of different types of secure on-line transaction protocols, for performing the variety of secure on-line transactions.
  • the term 'on-line' generally refers to the type or kind of transactions which are performed in a wired and/or wireless computerized electronic environment including variable amounts or combinations of necessary wired and/or wireless computerized electronic hardware, software, systems, networks, devices, equipment, mechanisms, components, and elements, and, 'human' users and operators.
  • On-line particularly refers to the type or kind of transactions which are performed in a wired and/or wireless computerized electronic interactive communication environment such as an intranet and/or an extranet wired and/or wireless computerized electronic interactive communication environment, where the intranet and/or extranet is of a private or public entity or body of variable size featuring variable numbers of users and operators.
  • the standard example of the extranet is the Internet.
  • the term 'transaction' generally refers to something transacted, done, carried out, performed, managed, or conducted, typically, but not exclusively, relating to a piece of business.
  • things or items transacted can also be an action or an activity, for example, a transaction of a user, locally or remotely, logging onto a computer, or, accessing an e-mail server, a file server, or a database.
  • the phrase 'user/transaction' refers to 'user and/or transaction'.
  • an 'on-line user/transaction authentication protocol' refers to an on-line authentication protocol which is used for on-line authenticating only a user, or, for on-line authenticating only a transaction, or, for on-line authenticating both a user and a transaction.
  • the term 'protocol' refers, in general, to digitized data and information in the form of computer software for representing and/or for implementing at least part of a particular flow of information, security procedures, sequences, and various interactions among different entities, associated with performing secure on-line transactions.
  • a protocol refers to digitized data and information in the form of computer software for representing and/or for implementing at least part of a particular flow of information, security procedures, sequences, and various interactions among different entities, associated with on-line authenticating at least one user and/or on-line authenticating at least one on-line transaction, and/or, refers to digitized data and information, in the form of computer software, associated with performing at least one on-line transaction.
  • a protocol is at least one set, group, sequence, and/or series, of digitized data and information in the form of computer software for representing and/or for implementing at least part of a particular flow of information, security procedures, sequences, and various interactions among different entities, such as in the form of at least one data file, at least one text file, at least one program file, and/or, at least one combination file featuring some combination of data, text, and/or, a program, associated with on-line authenticating users and/or transactions, and/or associated with performing on-line transactions.
  • 3DSSL Three Domain Secure Sockets Layer
  • 3DSET Tine Domain Secure Electronic Transaction
  • an on-line authentication technique is the use of a computer chip in a device commonly known as the 'smart card', that without doubt is one of the most secure on-line authentication devices currently available.
  • a significant limitation of implementing this on-line authentication technique is the need for using chip or smart card readers to enable such a technique.
  • most deployed computers lack this piece of hardware, and as experienced by at least one leading international credit card company, even when such hardware is distributed for free, it is virtually impossible to achieve the necessary widespread deployment.
  • PKI Public Key Infrastructure
  • Most PKI systems today are built in such a way that users connect to, by way of the Internet or other computerized interactive communication networks, and request a digital certificate (featuring a combination of a PKI public key, a unique user identification (UID) number or code, a user name, optional extensions, and a certificate authority (CA) digital signature on these items) from a service provider having a certificate authority (CA) system deployed.
  • a certificate authority CA
  • CA certificate authority
  • each user needs to send the user's public key to the server of the CA enabled service provider, which usually involves a complex manual, sometimes automated, process.
  • a reply usually by way of an e-mail letter, is sent from the server of the CA service provider, either attaching a digital certificate or requesting the user to wait until notified to reconnect to the CA enabled service provider.
  • each user eventually receives the e-mail with the attached digital certificate file.
  • each user needs to save the digital certificate file to hard drive, followed by opening a browser, or a different software application, and go through a menu in order to upload the digital certificate to the proper location in the computer of the user.
  • a realistic scenario is, for example, when a user needs to use a PAN (Pseudo Account Number) secure on-line transaction protocol in order to purchase goods at store 'A, and needs a 3DSET secure on-line transaction protocol in order to shop at store 'B', and, in order to transfer funds from one bank account to another bank account, the user needs a home banking type of secure on-line transaction protocol serviced by yet another service provider.
  • PAN Pseudo Account Number
  • optical data cards are formatted, prepared, and used, with different types of on-line user/transaction authentication protocols and with different types of secure on-line transaction protocols, for performing the variety of secure on-line transactions.
  • the present invention relates to a method and system for using optical data cards as portable secure unified platforms for perfonning a variety of secure on-line transactions.
  • the optical data cards are fonnatted, prepared, issued, and used, as portable secure 'unified' platforms including at least one of a plurality of different types of on-line user/transaction authentication protocols, such as (i) PKI (Public Key Infrastructure), (ii) challenge response, (iii) Kerberos, (iv) symmetric key, (v) user name password, (vi) one-time-password, and (vii) additional device, types of on-line user/transaction authentication protocols, and, with at least one of a plurality of different types of secure on-line transaction protocols, such as (i) SSL (Secure Sockets Layer), (ii) 3DSSL (Three Domain Secure Sockets Layer, also known as 3DSecure), (iii) SET (Secure Electronic Transaction, also known as SET Wallet
  • the optical data cards are formatted, prepared, issued, and used, as portable secure 'authentication' platforms including at least one of the above listed plurality of different types of on-line user/transaction authentication protocols, without including any on-line transaction protocol, for performing the variety of secure on-line transactions.
  • the secure on-line transactions are perfonned in a variety of areas featuring particular secure on-line applications, such as in the area of (1) electronic commerce, for example, featuring secure on-line payment applications, secure on-line banking applications, secure on-line stock, bond, and commodity trading applications, secure on-line insurance applications, and secure on-line health related (medical, dental, pharmaceutical) applications, in the area of (2) PC security, for example, featuring secure on-line PC log-on applications, and secure on-line PC data encryption applications, and, in the area of (3) roaming accessibility, for example, featuring secure on-line local or remote network log-on applications such as accessing an e-mail server, a file server, or a database.
  • electronic commerce for example, featuring secure on-line payment applications, secure on-line banking applications, secure on-line stock, bond, and commodity trading applications, secure on-line insurance applications, and secure on-line health related (medical, dental, pharmaceutical) applications
  • PC security for example, featuring secure on-line PC log-on applications, and secure on-line PC data encryption
  • a method for using optical data cards as portable secure unified platforms for performing a variety of secure on-line transactions comprising the steps of: (a) providing a plurality of formatted optical data cards each formatted for digitally recording and storing optically readable data; (b) preparing the plurality of formatted optical data cards for forming a plurality of prepared optical data cards as the portable secure unified platforms, whereby each prepared optical data card has a set of digitally recorded optically readable data including at least one of a plurality of different types of on-line user/transaction authentication protocols and at least one of a plurality of different types of secure on-line transaction protocols; and (c) performing at least one of the variety of secure on-line transactions by a plurality of users using the plurality of the prepared optical data cards.
  • a method for using optical data cards as portable secure authentication platforms for performing a variety of secure on-line transactions comprising the steps of: (a) providing a plurality of formatted optical data cards each formatted for digitally recording and storing optically readable data; (b) preparing the plurality of formatted optical data cards for forming a plurality of prepared optical data cards as the portable secure unifiedjplatforms, whereby each prepared optical data card has a set of digitally recorded optically readable data including at least one of a plurality of different types of on-line user/transaction authentication protocols; and (c) performing at least one of the variety of secure on-line transactions by a plurality of users using the plurality of the prepared optical data cards.
  • a system for using optical data cards as portable secure unified platforms for performing a variety of secure on-line transactions comprising: (a) a plurality of formatted and prepared optical data cards each formatted for digitally recording and storing optically readable data and prepared as the portable secure unified platform having a set of the digitally recorded optically readable data including at least one of a plurality of different types of on-line user/transaction authentication protocols and including at least one of a plurality of different types of secure on-line transaction protocols; (b) a plurality of computerized processing devices for optically reading data from and/or optically writing data onto the plurality of prepared optical data cards and for interactively communicating on-line; (c) a plurality of users performing the variety of secure on-line transactions by using the plurality of prepared optical data cards and the plurality of computerized processing devices; (d) a plurality of third parties directly involved with the plurality of users performing the variety of secure on-line transactions by interactively communicating on-line with the pluralit
  • a system for using optical data cards as portable secure authentication platforms for performing a variety of secure on-line transactions comprising: (a) a plurality of formatted and prepared optical data cards each formatted for digitally recording and storing optically readable data and prepared as the portable secure authentication platform having a set of the digitally recorded optically readable data including at least one of a plurality of different types of on-line user/transaction authentication protocols; (b) a plurality of computerized processing devices for optically reading data from and/or optically writing data onto the plurality of prepared optical data cards and for interactively communicating on-line; (c) a plurality of users performing the variety of secure on-line transactions by using the plurality of prepared optical data cards and the plurality of computerized processing devices; (d) a plurality of third parties directly involved with the plurality of users performing the variety of secure on-line transactions by interactively communicating on-line with the plurality of users using the plurality of prepared optical data cards with the plurality of computerized processing devices;
  • the present invention features the following commercially applicable benefits and advantages over prior art techniques for performing secure on-line transactions. These are listed with respect to a user, an issuer or service provider, and a third party or merchant, of the method and system of the present invention.
  • Rapid and Easy Implementation - optical data card issuers or service providers can achieve swift and full method and system implementation since all steps of the method and components of the system for performing the variety of secure on-line transactions can conform to existing transaction clearing mechanisms, existing infrastructures, and prevalent consumer behavior. There is also the benefit of short 'time to market' attributed to the fact that ordinarily no user hardware or software on-line installations are required, hence consumer acceptance can be easily achieved.
  • the available digital storage space can be utilized by a service provider to generate additional income by selling or renting it to sponsors and advertisers, and at the same time benefit a large number of users through promotions and discounts,
  • (ix) Direct Hyperlinks - the wealth of Internet web sites is a growing concern for many companies struggling to attract online audience and potential user attention. With the optical data card including direct web site hyperlinks, the web site of an issuer or service provider is only a click away from each user.
  • FIG. 1 is a schematic diagram illustrating an exemplary prefened embodiment of the system for using optical data cards as portable secure unified platforms, and, alternatively, as portable secure authentication platforms, for perfonning a variety of secure on-line transactions, in accordance with the present invention.
  • the present invention relates to a method and system for using optical data cards as portable secure unified platfonns for performing a variety of secure on-line transactions.
  • the term 'on-line' generally refers to the type or kind of transactions which are performed in a wired and/or wireless computerized electronic environment including variable amounts or combinations of necessary wired and/or wireless computerized electronic hardware, software, systems, networks, devices, equipment, mechanisms, components, and elements, and, 'human' users and operators.
  • On-line particularly refers to the type or kind of transactions which are performed in a wired and/or wireless computerized electronic interactive communication environment such as an intranet and/or an extranet wired and/or wireless computerized electronic interactive communication environment, where the intranet and/or extranet is of a private or public entity or body of variable size featuring variable numbers of users and operators.
  • the standard example of the extranet is the Internet.
  • 'transaction' generally refers to something transacted, done, carried out, performed, managed, or conducted, typically, but not exclusively, relating to a piece of business.
  • a transaction can also be an action or an activity, for example, a transaction of a user, locally or remotely, logging onto a computer, or, accessing an e-mail server, a file server, or a database.
  • the phrase 'user/transaction' refers to 'user and/or transaction'.
  • an 'on-line user/transaction authentication protocol' refers to an on-line authentication protocol which is used for on-line authenticating only a user, or, for on-line authenticating only a transaction, or, for on-line authenticating both a user and a transaction.
  • 'protocol' refers, in general, to digitized data and information in the form of computer software for representing and/or for implementing at least part of a particular flow of information, security procedures, sequences, and various interactions among different entities, associated with performing secure on-line transactions.
  • a protocol refers to digitized data and information in the form of computer software for representing and/or for implementing at least part of a particular flow of information, security procedures, sequences, and various interactions among different entities, associated with on-line authenticating at least one user and/or on-line authenticating at least one on-line transaction, and/or, refers to digitized data and information, in the form of computer software, associated with performing at least one on-line transaction.
  • a protocol is at least one set, group, sequence, or series, of digitized data and information in the form of computer software for representing and/or for implementing at least part of a particular flow of information, security procedures, sequences, and various interactions among different entities, such as in the form of at least one data file, at least one text file, at least one program file, and/or, at least one combination file featuring some combination of data, text, and/or a program, associated with on-line authenticating users and/or transactions, and/or associated with performing on-line transactions.
  • the optical data cards are formatted, prepared, and used, as portable secure 'unified' platforms including at least one of a plurality of different types of on-line user/transaction authentication protocols, such as (i) PKI (Public Key Infrastructure), (ii) challenge response, (iii) Kerberos, (iv) symmetric key, (v) user name password, (vi) one-time-password, and (vii) peripheral device, types of on-line user/transaction authentication protocols, and, including at least one of a plurality of different types of secure on-line transaction protocols, such as (i) SSL (Secure Sockets Layer), (ii) 3DSSL (Three Domain Secure Sockets Layer, also known as 3DSecure), (iii) SET (Secure Electronic Transaction), (iv) 3DSET (Three Domain Secure Electronic Transaction), (v) EMV (Europay MasterCard Visa), (vi) PAN (Pseudo Account Number, also known as Sunogate Number
  • PKI Public Key Infrastructure
  • the optical data cards are formatted, prepared, and used, as portable secure 'authentication' platforms including at least one of the above listed plurality of different types of on-line user/transaction authentication protocols, without including any on-line transaction protocol, for performing the variety of secure on-line transactions.
  • the secure on-line transactions are performed in a variety of areas featuring particular secure on-line applications, such as in the area of (1) electronic commerce, for example, featuring secure on-line payment applications, secure on-line banking applications, secure on-line stock, bond, and commodity trading applications, secure on-line insurance applications, and secure on-line health related (medical, dental, pharmaceutical) applications, in the area of (2) PC security, for example, featuring secure on-line PC log-on applications, and secure on-line PC data encryption applications, and, in the area of (3) roaming accessibility, for example, featuring secure on-line local or remote network log-on applications such as accessing an e-mail server, a file server, or a database.
  • the main general aspect of novelty of the present invention is efficiently enabling a plurality of users to use optical data cards as portable secure unified or authentication platforms for performing a variety of secure on-line transactions.
  • a first particular aspect of novelty of the present invention is where the optical data cards as either portable secure unified platforms, or, as portable secure authentication platforms, are formatted, prepared, and used, preferably, with a plurality of different types of on-line user/transaction authentication protocols, particularly including PKI types of on-line user/transaction authentication protocols.
  • This aspect results in relatively simple centralized creation, and, convenient and efficient large scale distribution, of digitally recorded personal or private PKI keys, digital signatures, and digital certificates, to a large number of users for performing a variety of secure on-line transactions, thereby eliminating current limitations and problems associated with off-line and/or on-line creation and distribution of personal or private PKI keys, digital signatures, and digital certificates, as exemplified in the above description of the prior art.
  • optical data card reading device such as a standard CD drive
  • optical data card reading device such as a standard CD drive
  • second and third particular aspects of novelty of the present invention are where the optical data cards as portable secure unified platforms, are formatted, prepared, and used, with at least one of a plurality of different types of on-line user/transaction authentication protocols, additionally featuring centralized and portable storage of various plug-ins associated with each of a variety of secure on-line transaction protocols. Centralized and portable storage of the plug-ins result in providing each user with centralized and portable control of the relevant processes needed for performing each of the variety of secure on-line transactions.
  • the invention is implemented by users using standard PCs or laptops featuring a standard optical data card or CD reader, or any other computerized processing device equipped with a CD reader and communication capabilities, without the need for additional hardware by the users, and either eliminating, or at least minimizing, the need for users to install off-line and/or on-line additional software for performing the variety of secure on-line transactions.
  • a fourth particular aspect of novelty of the present invention is where the optical data cards as either portable secure unified platforms, or, as portable secure authentication platforms, are formatted, prepared, and used, preferably, with a plurality of different types of on-line user/transaction authentication protocols, particularly including PKI types of on-line user/transaction authentication protocols, and, preferably, with a plurality of different types of secure on-line transaction protocols.
  • This aspect results in a plurality of users performing any number of the variety of secure on-line transactions according to a single generalized method and system for secure on-line authentication, thereby providing a relatively simple and efficient generalized migration path to performing future secure on-line transactions with minimal need for making changes to service provider authentication methods and systems.
  • the invention is not limited in its application to the details of construction, arrangement, composition, and quantities, of the components, and order or sequence of steps of operation or implementation, set forth in the following description, drawing, or examples.
  • the invention is capable of other embodiments or of being practiced or carried out in various ways.
  • it is to be clearly understood from the following description of the method and system, that the present invention is applicable to a single user using one or more of identical and/or individualized or personalized formatted and prepared optical data cards, or, to a large number of identical and/or different users using a conespondingly large number of identical and/or individualized or personalized formatted and prepared optical data cards.
  • FIG. 1 is a schematic diagram illustrating an exemplary prefened embodiment of the system, hereinafter, refened to as system 10, for using optical data cards as portable secure unified platforms, or, alternatively, as portable secure authentication platforms, for performing a variety of secure on-line transactions, in accordance with the present invention.
  • System 10 features the following primary components:
  • optical data card 12A a plurality of optical data cards, represented in FIG. 1 as a single optical data card, for example, optical data card 12A, optical data card 12B, or, optical data card 12C, hereinafter, generally refened to as optical data card 12, or, as optical data cards 12, each formatted for digitally recording and storing optically readable data and prepared as a portable secure unified platform, having a set of digitally recorded optically readable data including at least one of a plurality of different types of on-line user/transaction authentication protocols, and, including at least one of a plurality of different types of secure on-line transaction protocols, or, alternatively, prepared as a portable secure authentication platform, having a set of digitally recorded optically readable data including at least one of a plurality of different types of on-line user/transaction authentication protocols,
  • FIG. 1 a plurality of computerized processing devices, represented in FIG. 1 as a single computerized processing device 14, for optically reading data from and/or optically writing data onto the plurality of prepared optical data cards 12, and, for interactively communicating on-line
  • a plurality of users represented in FIG. 1 as a single user 16, hereinafter, generally refened to as user 16, or, as users 16, performing the variety of secure on-line transactions by using the plurality of prepared optical data cards 12 and the plurality of computerized processing devices 14,
  • At least one service provider 20 for preparing and issuing the plurality of formatted optical data cards 12 for the plurality of users 16, and, usually, on-line authenticating the plurality of users 16 performing the variety of secure on-line transactions, by interactively communicating on-line with the plurality of users 16 using the plurality of prepared optical data cards 12 with the plurality of computerized processing devices 14, and
  • Optical data cards 12 are fully described in detail below in Step (a), and in the other steps, of the method of the present invention.
  • An optical data card 12 is prepared by service provider 20 as either a 'generalized' optical data card 12, or, is prepared as an 'individualized' or 'personalized' optical data card 12, as further described in Step (b) and in alternative Step (b) below, for preparing the plurality of formatted optical data cards 12.
  • a generalized optical data card 12 is typically used by a non-specific generalized user 16 and an individualized or personalized optical data card 12 is typically used by a specific individualized or personalized user 16, as further described in Step (c) below, for performing the variety of secure on-line transactions.
  • Computerized processing devices 14 are preferably personal computers (PCs) or laptop computers each including a compact disc (CD) drive and reader, but, in general, are computerized processing devices which optically read data from and/or optically write data onto formatted and prepared optical data cards 12, and, for plurality of users 16 to interactively communicate on-line by way of on-line interactive communication network 22.
  • Computerized processing devices 14 either include or are associated with variable amounts or combinations of necessary wired and/or wireless computerized electronic hardware, software, systems, networks, devices, equipment, mechanisms, components, and elements, for operating on-line in a wired and/or wireless computerized electronic interactive communication environment, such as on-line interactive communication network 22.
  • Users 16 are clients, consumers, or customers, issued and using optical data cards 12, and involved with the plurality of third parties 18, and usually, on-line authenticated by the at least one service provider 20, for performing the variety of secure on-line transactions in the above described exemplary areas featuring particular secure on-line applications, that is, in the areas of electronic commerce, PC security, and, roaming accessibility.
  • Each user 16 is either a 'generalized' user 16 or an 'individualized' user 16, where a generalized user 16 uses a prepared generalized optical data card 12 and an individualized user 16 uses a prepared individualized or personalized optical data card 12, as further described in Step (b) and in alternative Step (b) below, for performing the variety of secure on-line transactions.
  • Third parties 18 are in general, private or public entities, bodies, or facilities, of variable sizes, directly involved with the plurality of users 16 performing the variety of secure on-line transactions, and sometimes, involved with the at least one service provider 20 on-line authenticating the plurality of users 16, by way of the plurality of prepared optical data cards 12.
  • third parties 18 are selected from the group consisting of private businesses, vendors, merchants, institutions, organizations, and authorities, and, public businesses, vendors, merchants, institutions, organizations, and authorities, which are involved with the plurality of users 16, and sometimes, involved with the at least one service provider 20 on-line authenticating the plurality of users 16 by way of the plurality of prepared optical data cards 12, for performing the variety of secure on-line transactions by way of on-line interactive communication network 22 such as an intranet and/or an extranet such as the Internet.
  • on-line interactive communication network 22 such as an intranet and/or an extranet such as the Internet.
  • a prefened category of third parties 18 includes Internet web sites of on-line retail and/or wholesale merchants selling products and/or services, such as household goods, furniture, electronic products, clothing, paper goods, books, hardware supplies, building supplies, auto supplies, medical supplies, pharmaceuticals, chemicals, and raw materials, to the plurality of users 16.
  • Another prefened category of third parties 18 includes Internet web sites and/or extranets of on-line private or public entities, bodies, or facilities, such as corporations, companies, institutions, organizations, and authorities, hosting one or more on-line private and/or public databases of information, for example, corporate financial information, sales and/or marketing information, personal financial information, personal insurance information, personal health related (medical, dental, pharmaceutical) information, academic information, utilities billing information, to be securely on-line accessed by the plurality of users 16.
  • on-line private or public entities bodies, or facilities, such as corporations, companies, institutions, organizations, and authorities, hosting one or more on-line private and/or public databases of information, for example, corporate financial information, sales and/or marketing information, personal financial information, personal insurance information, personal health related (medical, dental, pharmaceutical) information, academic information, utilities billing information, to be securely on-line accessed by the plurality of users 16.
  • Service provider 20 is, in general, a private or public entity, body, or facility, of variable size, which prepares and issues the plurality of formatted optical data cards 12 for the plurality of users 16, and, usually, on-line authenticates the plurality of users 16 performing the variety of secure on-line transactions with above described third parties 18, by interactively communicating on-line with the plurality of users 16, and, optionally, by interactively communicating on-line with third parties 18, by way of the plurality of prepared optical data cards 12.
  • each service provider 20 has either a direct or indirect authorizing, authenticating, and/or billing relationship (shown in FIG. 1 by dashed line 24 connecting users 16 to service provider 20) with the plurality of users 16, for example, by way of an established secure database of the plurality of users 16, preferably, maintained by service provider 20.
  • Each service provider 20 obtains and manages generalized or non-personalized, and, individualized or personalized, data and information about users 16 and about that service provider 20 which are required for preparing formatted optical data cards 12, and required by the plurality of users 16, and, optionally, required by third parties 18, for using prepared optical data cards 12 for performing the variety of secure on-line transactions.
  • Each service provider 20 is associated, either directly or indirectly, with an optical data card preparing station 26 (further described in Step (b) below) that preferably does the actual hands-on preparing of the plurality of formatted optical data cards 12 as portable secure unified platforms and/or as portable secure authentication platforms.
  • Each service provider 20 issues and/or distributes, either directly or indirectly, prepared optical data cards 12 to generalized users 16 and/or to individualized users 16.
  • Each service provider 20 either includes or is associated with variable amounts or combinations of necessary wired and/or wireless computerized electronic hardware, software, systems, networks, devices, equipment, mechanisms, components, and elements, for operating on-line in a wired and/or wireless computerized electronic interactive communication environment, such as on-line interactive communication network 22.
  • service provider 20 is selected from the group consisting of private businesses, vendors, merchants, institutions, organizations, and authorities, and, public businesses, vendors, merchants, institutions, organizations, and authorities, which are involved in authorizing, authenticating, and/or billing, the plurality of users 16, for example, by way of an established secure database of the plurality of users 16, preferably, maintained by service provider 20.
  • a service provider 20 is an issuer of credit and/or debit notes or cards, a bank, an insurance company, a stock brokerage company, an Internet service provider, a utilities (electricity, gas) company, a telephone company, a cable company, a cellular or mobile phone operator company, a government post office, an academic institute, an on-line authentication certificate authority (CA), a chain of retail and/or wholesale stores, and a health related facility such as a medical or dental clinic, a hospital, or a pharmacy.
  • a utility electric, gas
  • CA on-line authentication certificate authority
  • Service provider 20 is either separate from, or, part of, one or more of above described third parties 18 involved with the plurality of users 16 performing the variety of secure on-line transactions. Specifically, for the case where a service provider 20 is separate from above described third parties 18, then, that service provider 20 prepares and issues the plurality of formatted optical data cards 12 for the plurality of users 16, and, usually, on-line authenticates the plurality of users 16 performing the variety of secure on-line transactions by interactively communicating on-line with the plurality of users 16, and, optionally, by interactively communicating on-line with third parties 18, by way of the plurality of prepared optical data cards 12.
  • a service provider 20 is part of an above described third party 18, then, functions and operations of that service provider 20 are merged, combined, or added, to functions and operations of that third party 18.
  • that third party 18 is directly involved with the plurality of users 16 performing the variety of secure on-line transactions, in addition to preparing and issuing the plurality of formatted optical data cards 12 for the plurality of users 16, and, on-line authenticating the plurality of users 16, by way of the plurality of prepared optical data cards 12, for performing the variety of secure on-line transactions by way of on-line interactive communication network 22 such as an intranet and/or an extranet such as the Internet.
  • a third party 18 is part of an above described service provider 20
  • functions and operations of that third party 18 are merged, combined, or added, to functions and operations of that service provider 20.
  • that service provider 20 prepares and issues the plurality of formatted optical data cards 12 for the plurality of users 16, and, usually, on-line authenticates the plurality of users 16, in addition to being directly involved with the plurality of users 16 performing the variety of secure on-line transactions, by way of the plurality of prepared optical data cards 12, by way of on-line interactive communication network 22 such as an intranet and/or an extranet such as the Internet.
  • On-line interactive communication network 22 is, in general, a wired and/or wireless computerized electronic interactive communication environment including variable amounts or combinations of necessary wired and/or wireless computerized electronic hardware, software, systems, networks, devices, equipment, mechanisms, components, and elements, and, 'human' users and operators, such as a wired and/or wireless intranet and/or extranet, where the intranet or extranet is of a private or public entity, body, or facility, of variable size featuring variable numbers of users and operators.
  • on-line interactive communication network 22 is selected from the group consisting of wired and/or wireless closed communication networks, such as an intranet of a business, institution, or organization, and, wired and/or wireless open communication networks, such as an extranet, for example, the world wide web Internet.
  • the prefened embodiment of the general method for operating and implementing system 10 features the following primary steps: (a) providing a plurality of formatted optical data cards each formatted for digitally recording and storing optically readable data, (b) preparing the plurality of formatted optical data cards for forming a plurality of prepared optical data cards as the portable secure 'unified' platforms each having a set of digitally recorded optically readable data including at least one of a plurality of different types of on-line user/transaction authentication protocols, and, including at least one of a plurality of different types of secure on-line transaction protocols, or, alternatively, (b) preparing the plurality of formatted optical data cards for forming a plurality of prepared optical data cards as the portable secure 'authentication' platforms each having a set of digitally recorded optically readable data including at least one of a plurality of different types of on-line user/transaction authentication protocols, without including any on-line transaction protocol, and (c) performing at least one of the variety of secure on-line transactions by a pluralit
  • each of the plurality of optical data cards 12, for example, optical data card 12 A, or, optical data card 12B, or, optical data card 12C, shown in FIG. 1, refers, in general, to a physical card made from one type of material, or, from a variety of types of materials, having variable geometrical configuration and dimensions, featuring an optical data storage area or region Al designated for digitally recording and storing optically readable data, whereby optical data card 12 fits into and is operable by a device capable of optically reading data from and/or optically writing data onto optical data card 12.
  • Optical data storage area or region Al of optical data card 12 is formatted according to at least one of a variety of different formats selected from the group consisting of a CD-ROM (Read Only Memory) format, a CD-R (Recordable) format, a CD-RW (Read Write) format, a hybrid format of a CD-ROM format and a CD-R format, a hybrid format of a CD-ROM format and a CD-RW format, and, a DVD format, for digitally recording and storing optically readable data, which is required for each optical data card 12 to function as the portable secure unified platform for performing the variety of secure on-line transactions.
  • optical data storage area or region Al has a total capacity for storing at least on the order of twenty megabytes of optically readable data on optical data card 12.
  • Types of materials used for making optical data card 12 are selected from the group consisting of polymeric materials, metallic materials, and composite materials.
  • a prefened polymeric material used for making optical data card 12 is a plastic selected from the group consisting of polyvinylchloride (PVC) plastics, polycarbonate plastics, and a combination of polyvinylchloride plastics and polycarbonate plastics.
  • PVC polyvinylchloride
  • a prefened polymeric material used for making optical data storage area or region Al designated for digitally recording optically readable data is a polycarbonate plastic, in accordance with currently known standards for manufacturing compact discs.
  • each optical data card 12 further features at least one non-optical data storage area or region A2 designated for printing human and/or machine readable graphics data and information, and/or, for the attachment of physical features or mechanisms such as a computer chip and/or a magnetic stripe.
  • the at least one non-optical data storage area or region A2 designated for printing human and/or machine readable graphics data and information is located on the side of optical data card 12 opposite the side of optical data storage area or region Al, indicated by dashed arrows pointing from A2 in optical data card 12A, optical data card 12B, and optical data card 12C, and/or is located on the same side of optical data card 12 as optical data storage area or region Al, as indicated by solid anows pointing from A2 in optical data card 12 A, optical data card 12B, and optical data card 12C.
  • Graphics data and information of each non-optical data storage area or region A2 are preferably human readable graphics data and information, but, in general, are selected from the group consisting of human readable data and information, machine readable data and information, and, a combination of human readable and machine readable data and information.
  • optical data card 12 is the well known standard compact disc, also refened to as CD, such as optical data card 12A, being a card made substantially of a polycarbonate plastic and of other materials known in the art of manufacturing compact discs, having a disc configuration, substantially featuring optical data storage area or region Al designated for digitally recording and storing optically readable data, and, featuring one non-optical data storage area or region A2 on the side of optical data card 12A opposite the side of optical data storage area or region Al, designated for printing human and/or machine readable graphics data and information, whereby optical data card 12A fits into and is operable by any of a variety of standard compact disc operating devices such as a compact disc reader device, or, a compact disc reader/writer device.
  • standard compact disc operating devices such as a compact disc reader device, or, a compact disc reader/writer device.
  • the standard compact disc operating device is typically included as an accessory device part of a personal computer, a laptop computer, and other types of computers and processing units operated by a user, a client, a consumer, or a customer, for example, user 16 of a service provider, for example, service provider 20.
  • optical data card 12 is a plastic card having a symmetrical or asymmetrical circular or polygonal configuration, such as optical data card 12B, or optical data card 12C, respectively, which includes in the configuration a smaller diameter version of the previously described basic example of the standard compact disc (CD), optical data card 12A, featuring an optical data storage area or region Al designated for digitally recording and storing optically readable data, and, featuring at least one non-optical data storage area or region A2 designated for printing human and/or machine readable graphics data and information, whereby optical data card 12 fits into and is operable by any of a variety of standard or customized compact disc operating devices such as a compact disc reader device, or, a compact disc reader/writer device.
  • CD compact disc
  • optical data card 12A featuring an optical data storage area or region Al designated for digitally recording and storing optically readable data
  • non-optical data storage area or region A2 designated for printing human and/or machine readable graphics data and information
  • optical data card 12 features a centering mechanism (not shown) preferably located on the underside of optical data card 12 for holding optical data card 12 in a standard CD drive tray centering piece approximately 80 mm in diameter, assuring that optical data card 12 is conectly centered and spins without wobbling, thereby enabling proper optical reading of optical data storage area or region Al of optical data card 12.
  • optical data card 12 without featuring a centering mechanism as part of optical data card 12, is operable by a customized compact disc operating device, featuring, for example, a customized CD drive tray configured with a specially built-in slot or drive tray centering piece for properly holding optical data card 12 while spinning, thereby enabling proper optical reading of optical data storage area or region Al of optical data card 12.
  • a customized compact disc operating device featuring, for example, a customized CD drive tray configured with a specially built-in slot or drive tray centering piece for properly holding optical data card 12 while spinning, thereby enabling proper optical reading of optical data storage area or region Al of optical data card 12.
  • optical data card 12 of the present invention is a plastic rectangular card, such as optical data card 12C, which includes in the rectangular configuration a smaller diameter version of the previously described basic example of the standard compact disc (CD), optical data card 12A, featuring an optical data storage area or region Al designated for digitally recording and storing optically readable data, and, featuring at least one non-optical data storage area or region A2 designated for printing human and/or machine readable graphics data and information, whereby optical data card 12 fits into and is operable by any of a variety of standard or customized compact disc operating devices such as a compact disc reader device, or, a compact disc reader/writer device.
  • CD compact disc
  • optical data card 12A featuring an optical data storage area or region Al designated for digitally recording and storing optically readable data
  • non-optical data storage area or region A2 designated for printing human and/or machine readable graphics data and information
  • optical data card 12 of the present invention is a plastic rectangular card, such as optical data card 12C, having dimensions similar to those of a standard credit or debit card, for example, approximately 80 - 90 mm in length, approximately 50 - 60 mm in width, and approximately 0.5 - 1.5 mm in thickness, which includes in the standard credit or debit card configuration and dimensions a smaller diameter version of the previously described basic example of the standard compact disc (CD), optical data card 12A, featuring an optical data storage area or region Al designated for digitally recording and storing optically readable data, and, featuring at least one non-optical data storage area or region A2 designated for printing human and/or machine readable graphics data and information, whereby optical data card 12 fits into and is operable by any of a variety of standard or customized compact disc operating devices such as a compact disc reader device, or, a compact disc reader/writer device.
  • standard or customized compact disc operating devices such as a compact disc reader device, or, a compact disc reader/writer device.
  • optical data card 12 of the present invention such as optical data card 12C, featuring standard credit or debit card configuration and dimensions is prefened for the following reasons.
  • optical data card 12 is ultimately to be used by a large number of all types of users for performing the variety of secure on-line transactions in the areas of electronic commerce, PC security, and, roaming accessibility.
  • the use of credit and debit cards currently accounts for more than about 90 percent of Internet on-line E-commerce financial transactions, and is the most prevalent traditional or non-Internet method used, other than using cash and checks, for paying for services rendered by a service provider. Accordingly, users are well accustomed to using credit and debit cards, and therefore, using optical data card 12 having a credit or debit card form for performing the variety of secure on-line transactions enhances user adaptability and acceptance with respect to successfully implementing the method and system of the present invention.
  • portable optical data card 12 having a credit or debit card configuration and dimensions enables device portability, by conveniently fitting into the wallet of user 16, and therefore, immediate accessibility to essentially any personal computer, laptop computer, or other type of computerized processing device 14, featuring a device capable of optically reading data from optical data card 12, operable by user 16 of service provider 20.
  • portable optical data card 12 having a credit or debit card configuration and dimensions includes at least one non-optical data storage area or region A2 featuring human and/or machine readable graphics data and information external to, or surrounding, optical data storage area or region Al.
  • This feature of optical data card 12 is useful and advantageous with respect to individualizing or personalizing plurality of optical data cards 12, and with respect to individualizing or personalizing the use of plurality of optical data cards 12 by plurality of users 16.
  • optical data card 12 of the present invention is the immediately preceding described plastic rectangular card, such as optical data card 12C, having dimensions similar to those of a standard credit or debit card, approximately 80 - 90 mm in length, approximately 50 - 60 mm in width, and approximately 0.5 - 1.5 mm in thickness, which includes in the standard credit or debit card configuration and dimensions a smaller diameter version of the previously described basic example of the standard compact disc (CD), optical data card 12A, whereby optical data card 12 fits into and is operable by computerized processing device 14 including any of a variety of standard compact disc operating devices such as a compact disc reader device, or, a compact disc reader/writer device, and, where the material sunounding the inner compact disc (CD) section, is made of a plastic used for manufacturing standard credit or debit cards, for example, a polyvinylchloride plastic.
  • a plastic used for manufacturing standard credit or debit cards for example, a polyvinylchloride plastic.
  • a prefened optical data card 12 applicable for implementing Step (a) of the present invention are (1) the "Calling Card” disclosed in U.S. Patent No. 6,016,298, issued to Fischer, (2) the "Trading Card Optical Compact Disc” disclosed in U.S. Patent Nos. 6,078,557 and 5,982,736, both issued to Pierson, and (3) the "Digital Data Canier” disclosed in PCT International Publication No. WO 99/62029, by Otterstein et al., all three of which are incorporated by reference for all purposes as if fully set forth herein.
  • the optical data card is a plastic rectangular card having dimensions similar to a standard credit or debit card, which includes in the disclosed configuration and dimensions a smaller diameter version of the previously described basic example of the standard compact disc (CD), whereby the optical data card fits into and is operable by any of a variety of standard compact disc operating devices such as a compact disc reader device, or, a compact disc reader/writer device.
  • Each disclosed optical data card includes a centering mechanism, located on the underside of the optical data card for holding the optical data card in a standard CD drive tray centering piece approximately 80 mm in diameter, assuring that the optical data card is conectly centered and spins without wobbling, thereby enabling proper optical reading of the optical disc region of the optical data card.
  • the centering mechanism of the calling card disclosed in U.S. Patent No. 6,016,298 is based on four pins each positioned in another corner of a virtual rectangle, located on the underside of the calling card for holding the calling card in the inner ring of the standard CD drive tray.
  • the centering mechanism of the trading card optical compact disc disclosed in U.S. Patent Nos. 6,078,557 and 5,982,736 is based on a second layer shaped with two semi-circular wings molded into the underside of the trading card for holding the trading card in the standard CD drive tray.
  • WO 99/62029 is based on two oppositely positioned ring pieces located on the underside of the digital data canier for holding the digital data canier in the inner ring of the standard CD drive tray.
  • Another example of optical data card 12 applicable for implementing Step (a) of the present invention is the "data storage card" disclosed in PCT International Publication No. WO 99/22340, by Weldon, wherein the data storage card is a plastic rectangular card having dimensions of a standard credit or debit card including on one side a standard credit card type of magnetic stripe for perfonning credit card type electronic transactions, and including on the other side of the disclosed configuration and dimensions a smaller diameter version of the previously described basic example of the standard compact disc (CD).
  • the data storage card features none of the above described centering mechanisms, and is not configured for fitting into and spinning by a standard compact disc operating device such as a compact disc reader device, or, a compact disc reader/writer device. Accordingly, for optical data card 12 being that of the data storage card disclosed by Weldon, optical data card 12 is used with a customized compact disc operating device, featuring, for example, a customized CD drive tray configured with a specially built-in slot or drive tray centering piece for properly holding optical data card 12 while spinning, thereby enabling proper optical reading of optical disc area or region Al of optical data card 12.
  • Optical data storage area or region Al of any of the above described examples of optical data card 12 for implementing the present invention is formatted according to at least one of a variety of different formats selected from the group consisting of a CD-ROM format, a CD-R format, a CD-RW format, a hybrid format of a CD-ROM format and a CD-R format, a hybrid format of a CD-ROM format and a CD-RW format, and, a DVD format, for digitally recording and storing optically readable data, which is required for each optical data card 12 to function as the portable secure unified platform for performing the variety of secure on-line transactions.
  • a variety of different formats selected from the group consisting of a CD-ROM format, a CD-R format, a CD-RW format, a hybrid format of a CD-ROM format and a CD-R format, a hybrid format of a CD-ROM format and a CD-RW format, and, a DVD format, for digitally recording and storing optically readable data
  • optical data storage area or region Al has a total capacity for storing at least on the order of twenty megabytes of optically readable data on optical data card 12, where, in case optical data storage area or region Al features more than one type of format, the total capacity can be selectively distributed or allotted among the different types of formats, according to specifications of service provider 20.
  • optical data storage area or region Al is preferably distributed such that the CD-ROM format portion occupies a substantial majority of total optical storage area or region Al, for example, about twenty to thirty megabytes, and, the CD-R format portion occupies a minority of total optical storage area or region Al, for example, about two megabytes.
  • the description of the present invention disclosed herein includes, but is not limited to, a prefened embodiment, and, an alternative prefened embodiment, as indicated above.
  • the prefened embodiment features preparing, according to below described Step (b), the plurality of formatted optical data cards 12 of Step (a), for forming the plurality of prepared optical data cards 12 as the portable secure 'unified' platforms each including at least one of a plurality of different types of on-line user/transaction authentication protocols, and, including at least one of a plurality of different types of secure on-line transaction protocols, whereby user 16 can perform, according to below described Step (c), the variety of secure on-line transactions.
  • the alternative prefened embodiment features preparing, according to below described 'alternative' Step (b), the plurality of formatted optical data cards 12 of Step (a), for forming the plurality of prepared optical data cards 12 as the portable secure 'authentication' platforms each including at least one of a plurality of different types of on-line user/transaction authentication protocols, without including any on-line transaction protocol, whereby user 16 can perform, according to below described Step (c), the variety of secure on-line transactions.
  • Step (b) of preparing the plurality of formatted optical data cards 12 as portable secure unified platforms and alternative Step (b) of preparing the plurality of formatted optical data cards 12 as portable secure authentication platforms, are each performed by, preferably, including the use of an optical data card preparing station 26, and/or, by the process of manufacturing optical data cards 12, according to specifications of service provider 20.
  • optical data card preparing station 26 features (i) at least one optically readable data writing device 28, for example, a CD writer, for writing optically readable data onto previously described optical data storage area or region Al of each formatted optical data card 12, (ii) at least one graphics printing device 30, for printing human and/or machine readable graphics data and information onto previously described at least one non-optical data storage area or region A2 of each optical data card 12, and (iii) a computerized processing unit (CPU) 32 for overseeing and managing the automated flow of work involved in preparing the plurality of formatted optical data cards 12 as the portable secure unified platforms, or, alternatively, as the portable secure authentication platforms.
  • optically readable data writing device 28 for example, a CD writer, for writing optically readable data onto previously described optical data storage area or region Al of each formatted optical data card 12
  • at least one graphics printing device 30 for printing human and/or machine readable graphics data and information onto previously described at least one non-optical data storage area or region A2 of each optical data card 12
  • CPU
  • Optical data card preparing station 26 is physically located either on-site or off-site of the facility where Step (a) is performed for manufacturing and providing formatted optical data cards 12. Furthermore, optical data card preparing station 26 is associated, either directly or indirectly, with service provider 20 which prepares and issues the plurality of formatted optical data cards 12 for the plurality of users 16, and, which has either a direct or indirect authorizing, authenticating, and/or billing relationship, with the plurality of users 16.
  • Optical data card preparing station 26 operates according to established standards, procedures, and techniques, known in the art of writing optically readable data onto an optical data storage area, such as optical data storage area or region Al, of formatted optical data cards 12, and known in the art of printing human and/or machine readable graphics data and information onto a non-optical data storage area or region, such as non-optical data storage area or region A2, of optical data cards 12.
  • optical data card preparing station 26 performs procedures relating to heavy-duty CD burning of optically readable data onto optical data storage area or region Al of each of the plurality of formatted optical data cards 12, and procedures relating to overlay printing of human and/or machine readable graphics data and information onto non-optical data storage area or region A2 of each of the plurality of optical data cards 12.
  • Step (b) of the prefened embodiment of the present invention is described herein.
  • Alternative Step (b) of the alternative prefened embodiment of the present invention is described thereafter.
  • Step (b) of the prefened embodiment of the present invention there is preparing the plurality of formatted optical data cards of Step (a), for forming a plurality of prepared optical data cards as the portable secure unified platforms each including at least one of a plurality of different types of on-line user/transaction authentication protocols, and, including at least one of a plurality of different types of secure on-line transaction protocols.
  • formatted optical data cards 12 are prepared as either generalized portable secure unified platforms, hereinafter, refened to as case (1), or, as individualized or personalized portable secure unified platforms, hereinafter, refened to as case (2), according to the particular type of format of each formatted optical data card 12, as formatted according to Step (a).
  • each formatted optical data card 12 is prepared by including at least one of a plurality of different types of known on-line user/transaction authentication protocols, and, including at least one of a plurality of different types of known secure on-line transaction protocols, for users 16 to perform the variety of secure on-line transactions.
  • Step (b) part of preparing the plurality of formatted optical data cards 12 as either generalized- portable secure unified platforms, above case (1), or, as individualized or personalized portable secure unified platforms, above case (2), includes digitally recording a pre-determined generalized set, and/or, a pre-determined individualized or personalized set, of optically readable data onto optical data storage area or region Al of each of the plurality of formatted optical data cards 12, preferably, by optically readable data writing device 28 of optical data card preparing station 26, and/or, by the process of manufacturing optical data cards 12, according to specifications of service provider 20.
  • Each pre-determined set of optically readable data includes at least one of a plurality of different types of on-line user/transaction authentication protocols.
  • the at least one of a plurality of different types of on-line user/transaction authentication protocols is selected from the group consisting of (i) PKI (Public Key Infrastructure), for example, IPSEC / IKE (Secure Internet Protocol / Internet Key Exchange ), (ii) challenge response, (iii) Kerberos, (iv) symmetric key, (v) user name password, for example, Radius (Remote Authentication Dial-In User Service), Tackas (similar to Radius), CHAP (Challenge-Handshake Authentication Protocol), and PAP (Password Authentication Protocol, also known as Packet Authentication Protocol), (vi) one-time-password, and (vii) peripheral device, types of on-line user/transaction authentication protocols.
  • PKI Public Key Infrastructure
  • IKE Secure Digital Key Infrastructure
  • Kerberos Kerberos
  • each of these types of on-line user/transaction authentication protocols is well known to a person having ordinary skill in the arts of cryptography, encryption, electronic data and information security, in general, and having ordinary skill in the arts of designing and/or performing secure on-line transactions and on-line user/transaction authentication, in particular. Moreover, each of these types of on-line user/transaction authentication protocols is currently widely in use for performing secure on-line transactions, and for on-line authenticating users and transactions.
  • Step (b) there is digitally recording, onto each of the plurality of formatted optical data cards 12, at least one of a plurality of different types of on-line user/transaction authentication protocols generally featuring digitized data and information in the form of computer software for representing and/or for implementing at least part of a particular flow of information, security procedures, sequences, and various interactions among different entities, associated with on-line authenticating at least one user and/or on-line authenticating at least one on-line transaction.
  • each of the plurality of different types of on-line user/transaction authentication protocols particularly features at least one set, group, sequence, or series, of digitized data and information, in the form of computer software for representing and/or for implementing at least part of a particular flow of infonnation, security procedures, sequences, and various interactions among different entities, such as in the form of at least one data file, at least one text file, at least one program file, and/or, at least one combination file featuring a combination of data, text, and/or, a program, associated with on-line authenticating users and/or transactions.
  • PKI Public Key Infrastructure
  • PKI Public Key Infrastructure
  • CA certificate authority
  • Digital certificates the electronic equivalent of an identity tag
  • TTPs trusted third parties
  • a digital certificate refers to a copy of a public key of a user 16, which has been digitally signed by a certificate authority.
  • certificate authorities also provide their customers, in the present invention, typically, service providers 20, with public and private PKI keys.
  • PKI offers authentication or proof of identity, non-repudiation of the occurrence and details of on-line transactions, encryption of data and information associated with performing secure on-line transactions, and digital signatures for authorizing on-line transactions and electronically signing documents. Further details describing PKI and other on-line user/transaction authentication protocols, as well as secure on-line transaction protocols, are readily available in the prior art, for example, in "E-Payments Security - Challenges and Opportunities for Banks in the B2C Market", by R. Arnfield, Lafferty Publications Ltd., Dublin, Ireland, 2000.
  • PKI types of on-line user/transaction authentication protocols which are digitally recorded onto optical data cards 12 are selected from the group consisting of PKI data files, PKI text files, PKI program files, and PKI combination files, where a PKI combination file is a combination of PKI files selected from the group consisting of PKI data files, PKI text files, and PKI program files.
  • PKI types of on-line user/transaction authentication protocols are selected from the group consisting of PKI private keys, PKI public keys, PKI symmetric keys, PKI serial authentication numbers, PKI digital signatures, PKI digital certificates, PKI encryption and decryption program files, and combinations of these, that are uniquely issued to individualized users 16 and service providers 20, and are used for on-line authenticating users and/or on-line transactions.
  • a well known example of a PKI type of on-line user/transaction authentication protocol is a PKI digital certificate featuring a combination of: (a) a PKI public key, (b) a unique user ID number or code, (c) a user name, (d) optional extensions, and (e) a certificate authority (CA) digital signature on items (a) - (c).
  • PKI types of on-line user/transaction authentication protocols are digitally recorded onto optical data storage area or region Al of formatted optical data cards 12, by optically readable data writing device 28 of optical data card preparing station 26, using, for example, the x-509 format or any other industry standard format for digitally recording PKI keys onto media which can store optically readable data.
  • Challenge response types of on-line user/transaction authentication protocols are based on the general authentication method of challenging a response, whereby a first party, for example, service provider 20, challenges the response of a second party, for example, user 16, to a request sent by the first party, service provider 20, to the second party, user 16, for specific data and/or information.
  • Kerberos types of on-line user/transaction authentication protocols were developed at the Massachusetts Institute of Technology, Mass., USA, and are based on the general authentication method of using identification and issuing time limited session keys for allowing users, for example, users 16, to log-on securely to computers which belong to a network, such as interactive communication network 22, for example, wired and/or wireless closed communication networks, such as an intranet of a business, institution, or organization, and, wired and/or wireless open communication networks, such as an extranet, for example, the world wide web Internet.
  • This protocol assumes a network of computers, with one trusted computer or several verifying the identity of users to the computers to which they wish to log-on, and supplying time limited session keys so that the communications between the user and that computer can be encrypted.
  • Symmetric key types of on-line user/transaction authentication protocols are based on the general authentication method of 'sharing a secret', whereby both a first party, for example, service provider 20, and a second party, for example, a user 16, share a secret, usually in the form of a secret or private key stored on both the server of the first party, service provider 20, and on the workstation of the second party, user 16.
  • a first party for example, service provider 20, and a second party, for example, a user 16
  • Symmetric key types of on-line user/transaction authentication protocols can be used as part of the PKI network trust model, in general, and as part of PKI types of on-line user/transaction authentication protocols, in particular.
  • User name password types of on-line user/transaction authentication protocols for example, Radius (Remote Authentication Dial-In User Service), Tackas (similar to Radius), CHAP (Challenge-Handshake Authentication Protocol), and PAP (Password Authentication Protocol, also known as Packet Authentication Protocol), are based on the general authentication method of using a user name and password, whereby a first party, for example, service provider 20, authenticates a second party, for example, user 16, once the second party, user 16, sends to the first party, service provider 20, a user name and password previously issued by the first party, service provider 20, to the second party, user 16.
  • Radius Remote Authentication Dial-In User Service
  • Tackas similar to Radius
  • CHAP Challenge-Handshake Authentication Protocol
  • PAP Password Authentication Protocol, also known as Packet Authentication Protocol
  • One-time-password types of on-line user/transaction authentication protocols are based on the general authentication method of using a calculating mechanism, whereby a first party, for example, service provider 20, authenticates a second party, for example, user 16, once the second party, user 16, sends to the first party, service provider 20, a conect specific number, password, or code, calculated by using the same calculating mechanism known by the first party, service provider 20, where the calculating mechanism was previously issued by the first party, service provider 20, to the second party, user 16.
  • Peripheral device types of on-line user/transaction authentication protocols are based on the general method of on-line authenticating users 16 and/or transactions by users 16 using in combination with, or, in addition to, the plurality of prepared optical data cards 12, at least one peripheral device, hereinafter, refened to as peripheral device 34 in FIG. 1.
  • peripheral device 34 such as a computer chip, a cellular or mobile telephone, and/or a biometric device featuring, for example, a user voice recognition mechanism and/or a user fingerprint recognition mechanism, either separate from, and/or, associated with computerized processing device 14 of user 16, according to specifications of a service provider 20.
  • each pre-determined set of optically readable data includes at least one of a plurality of different types of secure on-line transaction protocols according to specifications of service provider 20.
  • the at least one of a plurality of different types of secure on-line transaction protocols is selected from the group consisting of (i) SSL (Secure Sockets Layer), (ii) 3DSSL (Three Domain Secure Sockets Layer), (iii) SET (Secure Electronic Transaction, also known as SET Wallet), (iv) 3DSET (Three Domain Secure Electronic Transaction), (v) EMV (Europay MasterCard Visa), (vi) PAN (Pseudo Account Number, also known as Surrogate Number), (vii) virtual credit or debit card, (viii) electronic wallet, (ix) prepaid, (x) micropayment, (xi) home and corporate banking, (xii) stocks, bonds, and commodities trading, (xiii) insurance, (xiv) health
  • Each of these types of secure on-line transaction protocols is well known to a person having ordinary skill in the arts of electronic data and information security, in general, and having ordinary skill in the arts of designing and/or performing secure on-line transactions and on-line user/transaction authentication, in particular. Moreover, each of these types of secure on-line transaction protocols is currently in use for performing secure on-line transactions.
  • Step (b) there is digitally recording, onto each of the plurality of formatted optical data cards 12, at least one of a plurality of different types of secure on-line transaction protocols generally featuring digitized data and information, in the form of computer software, associated with performing the variety of secure on-line transactions.
  • each of the plurality of different types of secure on-line transaction protocols particularly features at least one set, group, sequence, or series, of digitized data and information, in the form of computer software, such as in the form of at least one data file, at least one text file, at least one program file, or, at least one combination file featuring a combination of data, text, and a program, associated with performing the variety of secure on-line transactions.
  • SSL secure sockets layer
  • SSL secure sockets layer
  • an on-line communication takes place between an SSL compliant web browser of user 16 and an SSL compliant server of an on-line communicated entity such as third party 18 or service provider 20
  • the browser of user 16 traces the public key of the server of the communicated entity such as third party 18 or service provider 20 to create a unique-per-session secret key that is used by both the web browser of user 16 and the server of the communicated entity such as third party 18 or service provider 20, for encrypting and decrypting all communications between user 16 and the communicated entity such as third party 18 or service provider 20, throughout a secure on-line transaction session.
  • 3DSSL Three Domain Secure Sockets Layer
  • SSL Secure Sockets Layer
  • SET Secure Electronic Transaction
  • 3DSET types of secure on-line transaction protocols are based on the general 'open standard' method developed by Visa and MasterCard for facilitating secure on-line credit and debit card transactions over the standard public interactive communication network 22 of the Internet.
  • 3DSET types of secure on-line transaction protocols are based on a revised model of the SET secure on-line transactions protocol model.
  • Implementing 3DSET types of secure on-line transaction protocols requires activating a special plug-in previously downloaded onto computerized processing device 14 of user 16.
  • the 3DSET model uses a SET Wallet Server (SWS) based solution rather then holding individual SET wallets on computerized processing device 14 of user 16, or, on prepared optical data card 12 of user 16.
  • SWS SET Wallet Server
  • EMV Europay MasterCard Visa
  • 3DSET types of secure on-line transaction protocols
  • CEC Chip Electronic Commerce
  • EMV is a global standard, which aims to ensure the interoperability of chip-based payment cards and point-of-sale (POS) terminals regardless of location, manufacturer, and financial institution.
  • the CEC model uses an EMV authentication technology in combination with SET encryption technology. Implementing EMV compliant types of secure on-line transaction protocols requires activating a special plug-in previously downloaded onto computerized processing device 14 of user 16.
  • the model uses a SET Wallet Server (SWS) based solution rather then holding individual SET wallets on computerized processing devices 14 of users 16, or, on prepared optical data cards 12 of users 16.
  • SWS SET Wallet Server
  • PAN Pseudo Account Number, also known as Surrogate Number
  • PAN types of secure on-line transaction protocols are based on the general method for facilitating on-line credit and debit card transactions over the standard public interactive communication network 22 of the Internet.
  • Implementing PAN types of secure on-line transaction protocols requires activating a special plug-in previously downloaded onto computerized processing device 14 of user 16.
  • PAN types of secure on-line transaction protocols enable users 16 of credit and debit cards to make credit and debit card on-line transactions with third parties 18 over the Internet using a non-genuine unique-per-transaction credit card number for each secure on-line transaction.
  • Virtual credit or debit card types of secure on-line transaction protocols are based on a relatively simple credit card payment system allowing users 16 to access, by typing a password or identification number, their credit card payment information which is kept in a central secure server, for example, a secure server of a third party 18, or, a secure server of a service provider 20.
  • Electronic wallet types of secure on-line transaction protocols are based on the general method for users 16 storing a monetary value on prepared optical data cards 12.
  • users 16 connect to a centralized electronic wallet server, for example, of service provider 20, which manages their electronic wallets instead of users 16 locally managing their electronic wallets, for example, where users 16 hold their individual electronic wallets on computerized processing devices 14 or on prepared optical data cards 12 of users 16.
  • Prepaid types of secure on-line transaction protocols are based on the general method for allowing users 16 to charge on-line transactions to accounts that were paid in advance. Users 16 purchase, for example, directly from service provider 20 or from a vendor of prepared optical data cards 12, prepared optical data cards 12 each with an allocated account number representing a monetary value, and with every on-line transaction with a third party 18 a deduction is registered in a remote server, usually, a server of service provider 20, where account management takes place.
  • Micropayment types of secure on-line transaction protocols are based on the general method for enabling users 16 to make on-line payment transactions of low-value goods, usually software based goods such as digital music tracks, software sharing, etc.. Similar to prepaid types of secure on-line transaction protocols, purchase rights of users 16 are pre-determined in a server, usually, of service provider 20, according to a prepaid type of account management.
  • Home and corporate banking types of secure on-line transaction protocols are based on the general method for enabling users 16 to access their bank accounts on-line and to execute numerous secure on-line transactions in their bank accounts, for example, by way of a third party server such as a server of their corporate bank. For example, transfening funds from one bank account to another, and viewing their bank account information.
  • Stocks, bonds, and commodities trading types of secure on-line transaction protocols are based on the general method for enabling users 16 to access their stock, bond, and commodity trading accounts on-line and to execute numerous secure on-line transactions in their stock, bond, and commodity trading accounts, for example, by way of a third party server such as a server of their stock, bond, and commodity brokerage company service provider 20. For example, purchasing and/or selling stocks, bonds, and commodities, manipulating available trading funds, and viewing their stock, bond, and commodity trading account information.
  • Insurance types of secure on-line transaction protocols are based on the general method for enabling users 16 to access their insurance accounts on-line and to execute numerous secure on-line transactions in their insurance accounts, for example, by way of a third party server such as a server of their insurance company service provider 20. For example, increasing and/or decreasing levels of insurance coverage, changing insurance premiums, modifying beneficiary data and information, and viewing their insurance account information.
  • Health related (medical, dental, pharmaceutical) types of secure on-line transaction protocols are based on the general method for enabling users 16 to access their personal health related (medical, dental, pharmaceutical) accounts on-line and to execute numerous secure on-line transactions in their personal health related accounts, for example, by way of third party server such as a server of their health related (medical, dental, pharmaceutical) facility or company service provider 20.
  • third party server such as a server of their health related (medical, dental, pharmaceutical) facility or company service provider 20.
  • approving medical or dental records or history releases receiving results of medical or dental examinations, modifying personal health data and information used by their medical, dental, or pharmaceutical facility or company, and viewing their health related account information.
  • corporate networking types of secure on-line transaction protocols are based on the general method for enabling users 16 to, remotely and/or locally, access their corporate, intranet and/or extranet, network, and to execute numerous secure on-line transactions, for example, by way of third party server such as a server of the corporate network. For example, receiving their e-mails and corporate documents, distributing their memos and other corporate communications, and modifying personal and/or shared work calendars.
  • Peripheral device types of secure on-line transaction protocols are based on the general method for enabling users 16 to perform secure on-line transactions by users 16 using in combination with, or, in addition to, the plurality of prepared optical data cards 12, at least one peripheral device, hereinafter, refened to as peripheral device 34 in FIG. 1.
  • Step (b) further includes digitally recording a user guidance software program onto recordable storage space of each of the plurality of formatted optical data cards, for guiding users 16 through the on-line user/transaction authentication procedures and through the secure on-line transaction procedures, for performing the variety of secure on-line transactions.
  • optically readable data writing device 28 of optical data card preparing station 26 there is digitally recording a user guidance program onto optical data storage area or region Al of each of the plurality of optical data cards 12, preferably, by optically readable data writing device 28 of optical data card preparing station 26, and/or, by the process of manufacturing optical data cards 12, according to specifications of service provider 20.
  • the user guidance program is a 'user-friendly' software program which is automatically prompted, preferably, by way of an auto-run mechanism, for opening of a software window displaying general guidance content such as instructions, assistance, and options, for using optical data card 12, following user 16 inserting optical data card 12 into the optical data card reader device, such as a compact disc reader device, of computerized processing device 14 of user 16. While optical data card 12 operates in the background, the user guidance program communicates with user 16, and guides user 16 through running of the digitally recorded on-line user/transaction authentication protocols and the secure on-line transaction protocols, step by step, parallel to and through completion of the sequence of each secure on-line transaction.
  • the user guidance program guides user 16, if such guidance is requested by user 16, to optionally stored audio, video, multi-media, advertising, promotional, and/or web site hyperlink, data and information, according to specifications of service provider 20.
  • the user guidance program automatically prompts a user/transaction authentication and transaction completion process.
  • Step (b) further includes digitally recording an integration software program onto recordable storage space of each of the plurality of formatted optical data cards, for integrating the above described at least one of a plurality of different types of on-line user/transaction authentication protocols, and, at least one of a plurality of different types of secure on-line transaction protocols, included on optical data card 12. Accordingly, there is digitally recording an integration program onto optical data storage area or region Al of each of the plurality of optical data cards 12, preferably, by optically readable data writing device 28 of optical data card preparing station 26, and/or, by the process of manufacturing optical data cards 12, according to specifications of service provider 20.
  • the integration program integrates and enables automated co-existence and management of the above described at least one of a plurality of different types of on-line user/transaction authentication protocols, and, at least one of a plurality of different types of secure on-line transaction protocols, included on optical data card 12.
  • the integration program automatically recognizes the particular protocol with which cornmunication is established between each user 16 and service provider 20, and in response automatically prompts, for example, by an auto-run mechanism, the relevant protocol to be used in that communication session for user 16 performing a secure on-line transaction.
  • optical data card 12 For example, if user 16 using optical data card 12 communicates with a third party 18 which is compliant to a 3DSET secure on-line transaction protocol, the integration program of optical data card 12 automatically recognizes the 3D SET compliance, and commences a 3DSET secure on-line transaction with user 16 and other relevant parties, such as a service provider 20, required for perfonning the secure on-line transaction.
  • a user 16 uses a prepared optical data card 12 including at least one peripheral device type of on-line user/transaction authentication protocol and at least one conesponding peripheral device type of secure on-line transaction protocol, for interactively communicating on-line in combination with at least one peripheral device, for example, peripheral device 34, such as a computer chip, a biometric device, or a cellular phone, associated with computerized processing device 14 of user 16, for performing secure on-line transactions.
  • peripheral device 34 such as a computer chip, a biometric device, or a cellular phone
  • the integration program integrates and enables all necessary complementary operations between optical data card 12 with the at least one peripheral device such as a computer chip, a biometric device, or a cellular phone, associated with computerized processing device 14 of user 16, for performing secure on-line transactions.
  • Step (b) there is further including digitally recording audio, video, multi-media, promotional, advertising, and/or web site hyperlink, data and information onto recordable storage space of each of a pre-determined number of the plurality of formatted optical data cards.
  • Step (b) optionally, there is additionally digitally recording audio, video, multi-media, promotional, advertising, and/or web site hyperlink, data and information onto optical data storage area or region Al of each of a pre-determined number of the plurality of formatted optical data cards 12, preferably, by optically readable data writing device 28 of optical data card preparing station 26, and/or, by the process of manufacturing optical data cards 12, according to specifications of service provider 20.
  • Step (b) there is further including digitally recording wireless communication software, such as at least one wireless communication protocol, for example, a cunently employed wireless application protocol (WAP), onto recordable storage space of each of a pre-determined number of the plurality of formatted optical data cards, for enabling use and operation of each of the pre-determined number of the plurality of formatted optical data cards in a wireless mode of above described on-line interactive communication network 22.
  • wireless communication software such as at least one wireless communication protocol, for example, a cunently employed wireless application protocol (WAP)
  • WAP wireless application protocol
  • Step (b) there is additionally digitally recording at least one wireless communication protocol onto optical data storage area or region Al of each of a pre-determined number of the plurality of formatted optical data cards 12, preferably, by optically readable data writing device 28 of optical data card preparing station 26, and/or, by the process of manufacturing optical data cards 12, according to specifications of service provider 20.
  • Step (b) as part of preparing formatted optical data cards 12 as either generalized portable secure unified platforms, above case (1), or, as individualized or personalized portable secure unified platforms, above case (2), optionally, there is further including printing a generalized, and/or, individualized or personalized set of human and/or machine readable graphics data and information onto each of a pre-determined number of the plurality of formatted optical data cards.
  • Step (b) there is printing a generalized, and/or, individualized or personalized set of human and/or machine readable graphics data and information onto non-optical data storage areas or regions A2 of each of a pre-determined number of the plurality of formatted optical data cards 12, preferably, by graphics printing device 30 of optical data card preparing station 26, and/or, by the process of manufacturing optical data cards 12, according to specifications of service provider 20.
  • At least one non-optical data storage area or region A2 designated for printing human and/or machine readable graphics data and information is located on the side of optical data card 12 opposite the side of optical data storage area or region Al of optical data card 12, and/or is located on the same side of optical data card 12 as optical data storage area or region Al of optical data card 12.
  • a set of graphics data and information of each non-optical data storage area or region A2 of an optical data card 12 features graphics data and information selected from the group consisting of human readable data and information, machine readable data and information, and, a combination of human readable and machine readable data and information.
  • Graphics data and information printed onto each non-optical data storage area or region A2 relates to either a general user 16 or to an individualized user 16, and, to service provider 20 issuing either generalized, or, individualized or personalized, optical data cards 12 to a plurality of generalized users 16, or, to a plurality of individualized users 16, respectively.
  • graphics data and information relating to a generalized user 16 and relating to service provider 20 are preferably general, non-personal, identification data and information, such as name(s), address(es), telephone number(s), fax number(s), e-mail address(es), colored logo(s), colored symbol(s), account number(s), and serial number(s), of service provider 20 only, with no reference or connection to any one individualized user 16.
  • Graphics data and information relating to an individualized user 16 are preferably individual or personal identification data and information, such as name(s), address(es), telephone number(s), fax number(s), e-mail address(es), colored logo(s), colored symbol(s), account number(s), and serial number(s), of an individualized user 16.
  • service provider 20 as a credit card and/or debit card issuer may specify any combination of the above human and/or machine readable graphics data and information to be located on the side of optical data card 12 opposite the side of optical data storage area or region Al of optical data card 12, whereby each optical data card 12 appears and looks very similar to a standard credit and/or debit card.
  • Step (b) there is further including copy prevention of each of a pre-determined number of the plurality of formatted and/or prepared optical data cards. Accordingly, in Step (b), optionally, there is additionally including at least one copy prevention mechanism with each of a pre-determined number of the plurality of generalized optical data cards 12 and/or individualized or personalized optical data cards 12, according to specifications of service provider 20.
  • the objective here is for providing an additional higher level of optical data card security by preventing unauthorized copying, especially by an unauthorized person using standard copy commands of a CD reader/writer device, of the pre-determined generalized set, and/or, the pre-determined individualized or personalized set, of optically readable data digitally recorded onto optical data storage areas or regions Al of formatted optical data cards 12, thereby preventing a cracking attack and/or password high jacking. More specifically, the objective is for preventing unauthorized copying of the individualized or personalized optically readable data digitally recorded on formatted optical data cards 12, especially, with respect to above described digitally recorded PKI types of on-line user/transaction authentication protocols, such as PKI data files, PKI text files, PKI program files, and PKI combination files.
  • PKI types of on-line user/transaction authentication protocols such as PKI data files, PKI text files, PKI program files, and PKI combination files.
  • At least one copy prevention mechanism is integrated into the manufacturing process of Step (a), thereby resulting in the manufacturing and providing a pre-determined number of the plurality of formatted optical data cards 12 each including at least one copy prevention mechanism.
  • at least one copy prevention mechanism is included in Step (b) of preparing the plurality of formatted optical data cards 12, thereby resulting in a pre-determined number of the plurality of prepared optical data cards 12 each including at least one copy prevention mechanism.
  • Each of these procedures for including at least one copy prevention mechanism is applicable to optical data cards 12 featuring any of the previously described formats selected from the group consisting of a CD-ROM format, a CD-R format, a CD-RW format, a hybrid format of a CD-ROM format and a CD-R format, a hybrid format of a CD-ROM format and a CD-RW format, and, a DVD format.
  • At least one copy prevention mechanism is integrated into the manufacturing process of Step (a), for example, by intentionally including a manufacturing defect in, or physically altering, at least one selected portion or zone of optical data storage area or region Al of optical data card 12.
  • Step (b) of the preferred embodiment of the present invention is described above.
  • Alternative Step (b) of the alternative prefened embodiment of the present invention is described as follows.
  • the alternative preferred embodiment of the present invention features preparing, according to below described 'alternative' Step (b), the plurality of formatted optical data cards 12 of Step (a), for forming a plurality of prepared optical data cards 12 as portable secure authentication platforms each including at least one of the above described plurality of different types of on-line user/transaction authentication protocols, without including any on-line transaction protocol, whereby user 16 can perform, according to below described 'alternative' Step (c), the variety of secure on-line transactions.
  • formatted optical data cards 12 are prepared as either generalized portable secure authentication platforms, hereinafter, refened to as alternative case (1), or, as individualized or personalized portable secure authentication platforms, hereinafter, refened to as alternative case (2), according to the particular type of format of each formatted optical data card 12, as formatted according to Step (a).
  • each fonnatted optical data card 12 is prepared by including at least one of the above described plurality of different types of known on-line user/transaction authentication protocols, for users 16 to perform the variety of secure on-line transactions.
  • part of preparing the plurality of formatted optical data cards 12 as either generalized portable secure authentication platforms, above alternative case (1), or, as individualized or personalized portable secure authentication platforms, above alternative case (2) includes digitally recording a pre-determined generalized set, and/or, a pre-determined individualized or personalized set, of optically readable data onto optical data storage area or region Al of each of the plurality of formatted optical data cards 12, preferably, by optically readable data writing device 28 of optical data card preparing station 26, and/or, by the process of manufacturing optical data cards 12, according to specifications of service provider 20.
  • Each pre-detennined set of optically readable data includes at least one of the above described plurality of different types of on-line user/transaction authentication protocols.
  • the at least one of a plurality of different types of on-line user/transaction authentication protocols is selected from the group consisting of (i) PKI (Public Key Infrastructure), for example, IPSEC / IKE (Secure Internet Protocol / Internet Key Exchange ), (ii) challenge response, (iii) Kerberos, (iv) symmetric key, (v) user name password, for example, Radius (Remote Authentication Dial-In User Service), Tackas (similar to Radius), CHAP (Challenge-Handshake Authentication Protocol), and PAP (Password Authentication Protocol, also known as Packet Authentication Protocol), (vi) one-time-password, and (vii) peripheral device, types of on-line user/transaction authentication protocols.
  • PKI Public Key Infrastructure
  • IKE Secure Digital Key Infrastructure
  • Kerberos Kerbe
  • Step (b) there is digitally recording, onto each of the plurality of formatted optical data cards 12, at least one of the above described plurality of different types of on-line user/transaction authentication protocols generally featuring digitized data and information in the form of computer software for representing and/or for implementing at least part of a particular flow of information, security procedures, sequences, and various interactions among different entities, associated with on-line authenticating at least one user and/or on-line authenticating at least one on-line transaction.
  • each of the plurality of different types of on-line user/transaction authentication protocols particularly features at least one set, group, sequence, and/or series, of digitized data and information, in the form of computer software for representing and/or for implementing at least part of a particular flow of information, security procedures, sequences, and various interactions among different entities, such as in the form of at least one data file, at least one text file, at least one program file, and/or, at least one combination file featuring a combination of data, text, and/or, a program, associated with on-line authenticating users and/or transactions.
  • PKI types of on-line user/transaction authentication protocols which are digitally recorded onto optical data cards 12 are selected from the group consisting of PKI data files, PKI text files, PKI program files, and PKI combination files, where a PKI combination file is a combination of PKI files selected from the group consisting of PKI data files, PKI text files, and PKI program files.
  • PKI types of on-line user/transaction authentication protocols are selected from the group consisting of PKI private keys, PKI public keys, PKI symmetric keys, PKI serial authentication numbers, PKI digital signatures, PKI digital certificates, PKI encryption and decryption program files, and combinations of these, that are uniquely issued to individualized users 16 and service providers 20, and are used for on-line authenticating users and/or on-line transactions.
  • PKI types of on-line user/transaction authentication protocols are digitally recorded onto optical data storage area or region Al of fonnatted optical data cards 12, preferably, by optically readable data writing device 28 of optical data card preparing station 26, and/or, by the process of manufacturing optical data cards 12, using, for example, the x-509 format or any other industry standard format for digitally recording PKI keys onto media which can store optically readable data.
  • Alternative Step (b) further includes digitally recording a user guidance software program onto recordable storage space of each of the plurality of formatted optical data cards, for guiding users 16 through the on-line user/transaction authentication procedures and through the secure on-line transaction procedures, for performing the variety of secure on-line transactions.
  • digitally recording a user guidance program similar to the previously described user guidance program, onto optical data storage area or region Al of each of the plurality of fonnatted optical data cards 12, preferably, by optically readable data writing device 28 of optical data card preparing station 26, and/or, by the process of manufacturing optical data cards 12, according to specifications of service provider 20.
  • Step (b) there is further including digitally recording an integration program, similar to the previously described integration program, onto recordable storage space of formatted optical data cards 12, for enabling automated co-existence and management of different types of on-line user/transaction authentication protocols, and, other optionally recorded software on optical data cards 12.
  • digitally recording of previously described audio, video, multi-media, promotional, advertising, and/or web site hyperlink, data and information and/or optionally, digitally recording of previously described wireless communication software, such as at least one wireless communication protocol, onto recordable storage space of each of a pre-determined number of the plurality of formatted optical data cards 12.
  • alternative Step (b) as part of preparing formatted optical data cards 12 as either generalized portable secure authentication platforms, alternative case (1), or, as individualized or personalized portable secure authentication platforms, alternative case (2), optionally, there is further including printing a generalized, and/or, individualized or personalized set of human and/or machine readable graphics data and information onto each of a pre-determined number of the plurality of formatted optical data cards 12. Additionally, in alternative Step (b), optionally, there is further including above described copy prevention with each of a pre-determined number of the plurality of formatted and/or prepared optical data cards 12.
  • formatted optical data cards 12 are prepared as either generalized portable secure unified platforms, case (1), and/or, as individualized or personalized portable secure unified platforms, case (2), and, in alternative Step (b), formatted optical data cards 12 are prepared as either generalized portable secure authentication platforms, alternative case (1), and/or, as individualized or personalized portable secure authentication platforms, alternative case (2), according to the particular type of format of each formatted optical data card 12, as formatted according to Step (a). Further details for preparing formatted optical data cards 12, according to case (1), alternative case (1), case (2), and alternative case (2), are provided herein.
  • optical data cards 12 are identically prepared as the same generalized portable secure unified platform, or, as the same generalized portable secure authentication platform, respectively, there is using optical data cards 12 formatted according to the CD-ROM format.
  • a single pre-detennined generalized set of all necessary optically readable data as described above, relating to both a generalized user 16, or equivalently, relating to a plurality of generalized users 16, and to service provider 20 issuing identically prepared optical data cards 12 to the plurality of generalized users 16, for performing the variety of secure on-line transactions, is integrated into the manufacturing process of Step (a), thereby resulting in the manufacturing and providing a plurality of semi-prepared identical generalized optical data cards 12.
  • the plurality of semi-prepared generalized optical data cards 12 are produced by using a unified-per-batch replicating procedure according to techniques known in the art, for example, by using a glassmaster which is pre-recorded with a single pre-determined generalized set of optically readable data described above.
  • a particular example of preparing generalized optical data cards 12 according to above described case (1) is where the digitally recording is generalized, but the printing is personalized with respect to service provider 20 only, such as for preparing generalized optical data cards 12 featuring prepaid and/or micropayment types of secure on-line transaction protocols.
  • Prepaid and micropayment types of optical data cards 12 are usually identical in content, since the users 16 are unknown at the time of manufacturing and preparing the formatted optical data cards 12.
  • an identifying number such as a serial number, is printed onto each prepared optical data card 12 in order to allow specific recognition at a later stage following ownership by users 16.
  • a server of a service provider 20 which identifies such an optical data card 12 by way of the user 16 providing the correct serial number in order to be connected to an account having a number that is issued on-line together with the name and a password of that user 16.
  • formatted optical data cards 12 are prepared as individualized or personalized portable secure unified platforms, or, as individualized or personalized portable secure authentication platforms, respectively, there is using optical data cards 12 formatted according to the CD-R format, or, according to the CD-RW format.
  • formatted optical data cards 12 are positioned in optical data card preparing station 26 for digitally recording optically readable data onto optical data storage area or region Al, by optically readable data writing device 28 of optical data card preparing station 26, and, optionally, for printing human and/or machine readable graphics data and information onto non-optical data storage areas or regions A2, by graphics printing device 30 of optical data card preparing station 26, of each of the plurality of generalized optical data cards 12.
  • each of the plurality of semi-prepared generalized optical data cards 12 is repositioned in optical data card preparing station 26, and a pre-determined individualized or personalized set of optically readable data, and, optionally, human and/or machine readable graphics data and information, as described above, relating to an individualized user 16, are digitally recorded and printed, respectively, onto each semi-prepared generalized optical data card 12, by optical data card preparing station 26, for each individualized user 16, according to individualized or personalized data, information, and requirements, of each individualized user 16, for producing a plurality of fully prepared individualized or personalized optical data cards 12 as the individualized or personalized portable secure unified platforms, or, as the individualized or personalized portable secure authentication platforms, respectively.
  • case (2) or, in alternative case (2), where formatted optical data cards 12 are prepared as individualized or personalized portable secure unified platforms, or, as the same individualized or personalized portable secure authentication platforms, respectively, there is alternatively using optical data cards 12 formatted according to either the hybrid format of a CD-ROM format and a CD-R format, or, according to the hybrid format of a CD-ROM and a CD-RW format.
  • case (2) or, in alternative case (2), first, there is producing a plurality of semi-prepared identical generalized optical data cards 12 according to above described procedure of case (1) or alternative case (1), by utilizing the CD-ROM section of each formatted optical data card 12, in the process, Step (a), of manufacturing and providing a plurality of semi-prepared identical generalized optical data cards 12.
  • each of the plurality of semi-prepared identical generalized optical data cards 12 is positioned in optical data card preparing station 26, and a pre-determined individualized or personalized set of optically readable data, and, optionally, human and/or machine readable graphics data and information, as described above, relating to an individualized user 16, are digitally recorded and printed, respectively, onto each semi-prepared generalized optical data card 12, where the digitally recording involves the CD-R section, or, the CD-RW section, of each formatted and semi-prepared identical generalized optical data card 12, by optical data card preparing station 26, for each individualized user 16, according to individualized or personalized data, information, and requirements, of each individualized user 16, for producing a plurality of fully prepared individualized or personalized optical data cards 12 as the individualized or personalized portable secure unified platforms, or, as the individualized or personalized portable secure authentication platforms, respectively.
  • Step (c) there is performing at least one of the variety of secure on-line transactions by a plurality of users using the plurality of prepared optical data cards.
  • the secure on-line transactions are performed in a variety of areas featuring particular secure on-line applications, such as in the area of (1) electronic commerce, for example, featuring secure on-line payment applications, secure on-line banking applications, secure on-line stock, bond, and commodity trading applications, secure on-line insurance applications, and secure on-line health related (medical, dental, pharmaceutical) applications, in the area of (2) PC security, for example, featuring secure on-line PC log-on applications, and secure on-line PC data encryption applications, and, in the area of (3) roaming accessibility, for example, featuring secure on-line local or remote network log-on applications such as accessing an e-mail server, a file server, or a database.
  • electronic commerce for example, featuring secure on-line payment applications, secure on-line banking applications, secure on-line stock, bond, and commodity trading applications, secure on-line insurance applications, and secure on-line health related (medical, dental, pharmaceutical) applications
  • PC security for example, featuring secure on-line PC log-on applications, and secure on-line PC data encryption applications
  • Step (c) is performed by non-specific generalized users 16 using generalized optical data cards 12 as generalized portable secure unified platfonns, or, by specific individualized or personalized users 16 using individualized or personalized optical data cards 12 as individualized or personalized portable secure unified platforms, where optical data cards 12 are prepared according to above Step (b), that is, according to the prefened embodiment of the present invention.
  • Step (c) is performed by non-specific generalized users 16 using generalized optical data cards 12 as generalized portable secure authentication platforms, or, by specific individualized or personalized users 16 using individualized or personalized optical data cards 12 as individualized or personalized portable secure authentication platforms, where optical data cards 12 are prepared according to above alternative Step (b), that is, according to the alternative prefened embodiment of the present invention.
  • Step (c) there is activating the prepared optical data card by each user.
  • each user 16 activates optical data card 12 by inserting optical data card 12 into the optical data card reader device, such as a compact disc reader device, of computerized processing device 14 of user 16.
  • optical data card 12 is automatically prompted to run in the background of the computer operating system of computerized processing device 14 of user 16.
  • the digitally recorded user guidance program is prompted by user 16 inserting optical data card 12 into computerized processing device 14, with opening of a software window displaying general guidance content such as instructions, assistance, and options, for using optical data card 12.
  • optical data card 12 While optical data card 12 operates in the background, the user guidance program communicates with user 16, and guides user 16 through running of the digitally recorded on-line user/transaction authentication protocols, and if applicable, also through running of the digitally recorded secure on-line transaction protocols, step by step, parallel to and through completion of the sequence of each secure on-line transaction.
  • Each user 16 performing a secure on-line transaction by way of on-line interactive communication network 22 such as an intranet and/or an extranet such as the Internet, selects to activate optical data card 12 on one of two occasions, that is, (i) before initiating communication, and therefore, before initiating the secure on-line transaction, with a third party 18 or with a service provider 20, or, (ii) after initiating communication, and therefore, part way through, such as in the middle of or towards completion of, performing the secure on-line transaction, with a third party 18 or with a service provider 20.
  • user 16 For user 16 activating optical data card 12 before initiating communication with third party 18 or with service provider 20, then user 16 is guided through the secure on-line transaction process from start to finish until the secure on-line transaction is completed, including accessing and communicating with third party 18 or with service provider 20, initiating the secure on-line transaction, participating in an on-line user/transaction authentication process, and completing the secure on-line transaction.
  • the user guidance program guides user 16, if such guidance is requested by user 16, to optionally stored audio, video, multi-media, advertising, promotional, and or web site hyperlink, data and information, according to specifications of service provider 20.
  • Step (c) there is authenticating each user by using the prepared optical data card.
  • Performing any of the variety of secure on-line transaction requires on-line authenticating each user 16, usually, by service provider 20.
  • Authenticating each user 16 involves user 16 using prepared optical data card 12 with computerized processing device 14 for on-line interactively communicating, by way of on-line interactive communication network 22 such as an intranet and/or an extranet such as the Internet, with service provider 20.
  • service provider 20 encompasses components that enable the operation of user authentication, overall management, and logon to the variety of secure on-line transactions.
  • service provider 20 authenticates each user 16 by implementing at least one of the above described different types of on-line user/transaction authentication protocols included on the prepared optical data card 12.
  • service provider 20 For authenticating each user 16 service provider 20 performs basic tasks dedicated to securing and managing the on-line interactive communication with each user 16, including, for example, full PKI based authentication with private credentials, authorization, and encryption, as may be required using SSL2+3 or other secure on-line transaction protocols, and digital signatures, digitally recorded onto optical data cards 12 of users 16 as described above in Step (b) and in alternative Step (b).
  • the identification and authentication process involves two parts of activities conducted at two locations. The first part is locally conducted through a communication between the loaded software of prepared optical data card 12 and guided input of user 16, for example, password of user 16. The second part is remotely conducted through a communication between loaded software of prepared optical data card 12 and guided input of user 16 with a remote server, for example, password plus user identification (ID) of user 16.
  • ID user identification
  • a digital certificate issued by a prefened certificate authority (CA) of service provider 20 which is included on prepared optical data card 12 is used for authenticating user 16.
  • CA prefened certificate authority
  • user 16 When user 16 performs one of the variety of secure on-line transactions, for example, purchasing a book from the web site of third party 18 such as an on-line merchant selling books, with a credit card, the relevant secure on-line transaction protocol plug-in included on prepared optical data card 12 and relating to the prefened method of payment, for example, PAN or 3DSET, initiates a connection attempt by on-line interactively communicating with the server of service provider 20. During this connection attempt, the server of service provider 20 prompts user 16 to authenticate by opening a password entry window.
  • service provider 20 prompts an authentication mechanism requiring user 16 to present secret data and/or information involving an above described peripheral device type of on-line user/transaction authentication protocol.
  • user 16 is authenticated by operation of at least one peripheral device 34 such as a computer chip, a cellular or mobile telephone, and/or a biometric device featuring, for example, a user voice recognition mechanism and/or a user fingerprint recognition mechanism, either separate from, and/or, associated with computerized processing device 14 of user 16, according to specifications of a service provider 20.
  • peripheral device 34 such as a computer chip, a cellular or mobile telephone, and/or a biometric device featuring, for example, a user voice recognition mechanism and/or a user fingerprint recognition mechanism, either separate from, and/or, associated with computerized processing device 14 of user 16, according to specifications of a service provider 20.
  • the encrypted key media on optical data card 12 which stores the private key of user 16 is unlocked and the authentication process takes place using, for example, a challenge response on-line user/transaction authentication protocol, or, some other similar type of on-line user/transaction authentication protocol.
  • the authentication process is partly canied out at the computerized processing device 14 of user 16, the authentication process is an integral part of the logon process to the server of service provider 20. Then, user 16 is granted access, sometimes without knowing that the authentication process takes place, to the relevant secure on-line transaction protocol in order to complete the secure on-line transaction.
  • a one time unique-per-transaction credit card number is created by the server of service provider 20 and is resent to user 16 by way of the PAN secure on-line transaction protocol plug-in stored on optical data card 12 of user 16. Then, unique-per-transaction credit card number of user 16 is automatically or manually, depending upon the plug-in features, inserted by user 16 into the payment page of the web site of third party 18, in this example, an on-line merchant selling books. In some instances the particular type of secure on-line transaction protocol being implemented requires that the authentication approval be sent directly to third party 18 instead of being directed back to user 16.
  • Step (c) there is completing the secure on-line transaction of the user.
  • Completing the secure on-line transaction of user 16 is performed by user 16 either using the prepared optical data card 12 prepared as the portable secure 'unified' platform, or, alternatively, is performed by user 16 without using the prepared optical data card 12 prepared as the portable secure 'authentication' platform.
  • the integration program included on optical data card 12 automatically prompts the relevant secure on-line transaction protocol, or, alternatively, guides each user 16 to indicate which secure on-line transaction protocol to use for interactively communicating with third parties 18, in order to complete each secure on-line transaction.
  • the integration program of optical data card 12 automatically recognizes and prompts each appropriate secure on-line transaction protocol. Accordingly, each secure on-line transaction is brought to completion by sequential operation of each conesponding secure on-line transaction protocol, as previously described above in Step (b).
  • service provider 20 authenticates user 16 and checks the balance of user 16 indicated by prepaid optical data card 12 against the previously established prepaid account of user 16 with service provider 20. Following verification by service provider 20 that sufficient balance of user 16 indicated by prepaid optical data card 12 is available for user 16 to perform the prepaid type of secure on-line transaction with third party 18, service provider 20 completes the prepaid type of secure on-line transaction on behalf of user 16 by directly on-line interactively communicating with third party 18.
  • Step (c) Following successful completion of authentication of user 16 according to above described sub-step (ii) of Step (c), for example, involving a PKI type of on-line user/transaction authentication protocol included on prepared optical data card 12 of user 16, user 16, without further using the prepared optical data card 12, initiates and completes the secure on-line transaction by using computerized processing device 14, of user 16, having existing features and/or peripheral devices for performing secure on-line transactions with a third party 18 or with a service provider 20.
  • user 16 using the prepared optical data card 12 as the portable secure authentication platform is authenticated by a service provider 20, followed by user 16 running an e-mail software program hosted and executed by computerized processing device 14 of user 16 for sending an e-mail communication, such as an e-mail message with or without attached documents, associated with a digital certificate, for example, a PKI type of digital certificate, which was provided to user 16 as part of the previously successfully completed authentication process.
  • a service provider 20 for example, user 16 using the prepared optical data card 12 as the portable secure authentication platform is authenticated by a service provider 20, followed by user 16 running an e-mail software program hosted and executed by computerized processing device 14 of user 16 for sending an e-mail communication, such as an e-mail message with or without attached documents, associated with a digital certificate, for example, a PKI type of digital certificate, which was provided to user 16 as part of the previously successfully completed authentication process.
  • a digital certificate for example, a PKI type of digital certificate
  • Step (c) Following successful completion of authentication of user 16 according to above described sub-step (ii) of Step (c), for example, involving a PKI type of on-line user/transaction authentication protocol included on prepared optical data card 12 of user 16, user 16, without further using the prepared optical data card 12, initiates and completes the secure on-line transaction entirely hosted and/or sponsored by third party 18 or service provider 20 having and implementing appropriate secure on-line transaction protocols which are compatible for using with the on-line user/transaction authentication protocols included on prepared optical data card 12 of user 16, separate from and without requiring inclusion and/or operation of any secure on-line transaction protocol on prepared optical data card 12 of user 16, for performing and completing the secure on-line transaction.
  • third party 18 or service provider 20 having and implementing appropriate secure on-line transaction protocols which are compatible for using with the on-line user/transaction authentication protocols included on prepared optical data card 12 of user 16, separate from and without requiring inclusion and/or operation of any secure on-line transaction protocol on prepared optical data card 12 of user 16, for performing and completing the secure on-
  • This third way is especially applicable for user 16 performing secure on-line transactions in a variety of areas, such as in the area of PC security, for example, featuring secure on-line PC log-on applications, and, in the area of roaming accessibility, for example, featuring secure on-line local or remote network log-on applications such as on-line accessing, viewing, and/or interactively communicating with a file server or a database of a third party 18 or of a service provider 20.

Landscapes

  • Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Accounting & Taxation (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Computer Security & Cryptography (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Finance (AREA)
  • Software Systems (AREA)
  • Computing Systems (AREA)
  • Signal Processing (AREA)
  • Optical Recording Or Reproduction (AREA)

Abstract

L'invention concerne un procédé et un système d'utilisation de cartes optiques (12) comme plates-formes unifiées, sécurisées, portatives ou comme plates-formes d'authentification sécurisées, portatives, pour effectuer une pluralité de transactions en ligne sécurisées. Ces cartes optiques (12) sont formatées, préparées, fournies et utilisées avec au moins un protocole d'authentification d'utilisateur et/ou de transaction en ligne de type ICP, challenge/response, Kerberos, à clé symétrique, à mot de passe d'utilisateur, à mot de passe à utilisation unique, et par périphérique, et, de préférence au moins un des protocoles de transaction en ligne sécurisée de type SSL,3DSSL, SET, 3DSET, EMV, PAN, pour des applications de carte de débit ou de crédit virtuelle, de porte-monnaie électronique, de micropaiement prépayé, de banque à domicile ou de services financiers privés, d'opérations sur les actions, les obligations et les marchandises, d'assurances, de santé, de constitution de réseaux parallèles, et de périphérique (34), pour effectuer une pluralité de transactions en ligne. Ces transactions en ligne sécurisées sont effectuées dans le domaine du commerce électronique, y compris pour des paiements, des opérations bancaires, des opérations sur les actions, les obligations et les marchandises, des assurances et des applications associées à la santé, dans le domaine de la sécurité informatique, y compris dans des applications d'ouverture de session et de codage de données, et, dans le domaine de l'accessibilité d'itinérance, y compris dans les applications d'ouverture de session de réseau à distance, tel que pour accéder à un serveur de courrier électronique, un serveur de fichiers ou une base de données
PCT/US2001/003764 2000-12-20 2001-02-06 Procede et systeme d'utilisation de cartes optiques comme plates-formes unifiees, securisees, portatives, pour effectuer une pluralite de transactions en ligne securisees WO2002050743A1 (fr)

Priority Applications (1)

Application Number Priority Date Filing Date Title
AU2001238037A AU2001238037A1 (en) 2000-12-20 2001-02-06 Method and system for using optical data cards as portable secure unified platforms for performing a variety of secure on-line transactions

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US25656900P 2000-12-20 2000-12-20
US60/256,569 2000-12-20

Publications (1)

Publication Number Publication Date
WO2002050743A1 true WO2002050743A1 (fr) 2002-06-27

Family

ID=22972731

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2001/003764 WO2002050743A1 (fr) 2000-12-20 2001-02-06 Procede et systeme d'utilisation de cartes optiques comme plates-formes unifiees, securisees, portatives, pour effectuer une pluralite de transactions en ligne securisees

Country Status (2)

Country Link
AU (1) AU2001238037A1 (fr)
WO (1) WO2002050743A1 (fr)

Cited By (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2005041482A1 (fr) 2003-10-29 2005-05-06 Hui Lin Procede d'authentification en matiere d'application de stockage d'informations et materiel d'authentification de carte ci
EP1684460A1 (fr) * 2003-10-29 2006-07-26 Hui Lin Procede de certification de securite d'habilitation d'internet et de materiel de certification de carte a circuit integre
WO2011019978A1 (fr) * 2009-08-14 2011-02-17 Sensis Corporation Système et procédé pour la détermination d'une position authentifiée intra-bande gnss
US8521650B2 (en) 2007-02-26 2013-08-27 Zepfrog Corp. Method and service for providing access to premium content and dispersing payment therefore
US20140129438A1 (en) * 2005-10-06 2014-05-08 C-Sam, Inc. Shareable widget interface to mobile wallet functions
US9070127B2 (en) 2001-01-19 2015-06-30 Mastercard Mobile Transactions Solutions, Inc. Administering a plurality of accounts for a client
US9886691B2 (en) 2005-10-06 2018-02-06 Mastercard Mobile Transactions Solutions, Inc. Deploying an issuer-specific widget to a secure wallet container on a client device
US10510055B2 (en) 2007-10-31 2019-12-17 Mastercard Mobile Transactions Solutions, Inc. Ensuring secure access by a service provider to one of a plurality of mobile electronic wallets
US20200160337A1 (en) * 2018-11-21 2020-05-21 Synchrony Bank Single entry combined functionality

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5729594A (en) * 1996-06-07 1998-03-17 Klingman; Edwin E. On-line secured financial transaction system through electronic media
US6052785A (en) * 1997-11-21 2000-04-18 International Business Machines Corporation Multiple remote data access security mechanism for multitiered internet computer networks

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5729594A (en) * 1996-06-07 1998-03-17 Klingman; Edwin E. On-line secured financial transaction system through electronic media
US6052785A (en) * 1997-11-21 2000-04-18 International Business Machines Corporation Multiple remote data access security mechanism for multitiered internet computer networks

Cited By (36)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9330390B2 (en) 2001-01-19 2016-05-03 Mastercard Mobile Transactions Solutions, Inc. Securing a driver license service electronic transaction via a three-dimensional electronic transaction authentication protocol
US9697512B2 (en) 2001-01-19 2017-07-04 Mastercard Mobile Transactions Solutions, Inc. Facilitating a secure transaction over a direct secure transaction portal
US9400980B2 (en) 2001-01-19 2016-07-26 Mastercard Mobile Transactions Solutions, Inc. Transferring account information or cash value between an electronic transaction device and a service provider based on establishing trust with a transaction service provider
US9330389B2 (en) 2001-01-19 2016-05-03 Mastercard Mobile Transactions Solutions, Inc. Facilitating establishing trust for conducting direct secure electronic transactions between users and service providers via a mobile wallet
US9070127B2 (en) 2001-01-19 2015-06-30 Mastercard Mobile Transactions Solutions, Inc. Administering a plurality of accounts for a client
US10217102B2 (en) 2001-01-19 2019-02-26 Mastercard Mobile Transactions Solutions, Inc. Issuing an account to an electronic transaction device
US9330388B2 (en) 2001-01-19 2016-05-03 Mastercard Mobile Transactions Solutions, Inc. Facilitating establishing trust for conducting direct secure electronic transactions between a user and airtime service providers
US9471914B2 (en) 2001-01-19 2016-10-18 Mastercard Mobile Transactions Solutions, Inc. Facilitating a secure transaction over a direct secure transaction channel
US9317849B2 (en) 2001-01-19 2016-04-19 Mastercard Mobile Transactions Solutions, Inc. Using confidential information to prepare a request and to suggest offers without revealing confidential information
US9811820B2 (en) 2001-01-19 2017-11-07 Mastercard Mobile Transactions Solutions, Inc. Data consolidation expert system for facilitating user control over information use
US9870559B2 (en) 2001-01-19 2018-01-16 Mastercard Mobile Transactions Solutions, Inc. Establishing direct, secure transaction channels between a device and a plurality of service providers via personalized tokens
EP1684460A4 (fr) * 2003-10-29 2009-02-11 Hui Lin Procede de certification de securite d'habilitation d'internet et de materiel de certification de carte a circuit integre
WO2005041482A1 (fr) 2003-10-29 2005-05-06 Hui Lin Procede d'authentification en matiere d'application de stockage d'informations et materiel d'authentification de carte ci
EP1684460A1 (fr) * 2003-10-29 2006-07-26 Hui Lin Procede de certification de securite d'habilitation d'internet et de materiel de certification de carte a circuit integre
EP1689120A4 (fr) * 2003-10-29 2009-01-28 Hui Lin Procede d'authentification en matiere d'application de stockage d'informations et materiel d'authentification de carte ci
EP1689120A1 (fr) * 2003-10-29 2006-08-09 Hui Lin Procede d'authentification en matiere d'application de stockage d'informations et materiel d'authentification de carte ci
US10176476B2 (en) 2005-10-06 2019-01-08 Mastercard Mobile Transactions Solutions, Inc. Secure ecosystem infrastructure enabling multiple types of electronic wallets in an ecosystem of issuers, service providers, and acquires of instruments
US10269011B2 (en) 2005-10-06 2019-04-23 Mastercard Mobile Transactions Solutions, Inc. Configuring a plurality of security isolated wallet containers on a single mobile device
US9508073B2 (en) * 2005-10-06 2016-11-29 Mastercard Mobile Transactions Solutions, Inc. Shareable widget interface to mobile wallet functions
US9626675B2 (en) 2005-10-06 2017-04-18 Mastercard Mobile Transaction Solutions, Inc. Updating a widget that was deployed to a secure wallet container on a mobile device
US9454758B2 (en) 2005-10-06 2016-09-27 Mastercard Mobile Transactions Solutions, Inc. Configuring a plurality of security isolated wallet containers on a single mobile device
US10096025B2 (en) 2005-10-06 2018-10-09 Mastercard Mobile Transactions Solutions, Inc. Expert engine tier for adapting transaction-specific user requirements and transaction record handling
US20140129438A1 (en) * 2005-10-06 2014-05-08 C-Sam, Inc. Shareable widget interface to mobile wallet functions
US9886691B2 (en) 2005-10-06 2018-02-06 Mastercard Mobile Transactions Solutions, Inc. Deploying an issuer-specific widget to a secure wallet container on a client device
US10026079B2 (en) 2005-10-06 2018-07-17 Mastercard Mobile Transactions Solutions, Inc. Selecting ecosystem features for inclusion in operational tiers of a multi-domain ecosystem platform for secure personalized transactions
US10032160B2 (en) 2005-10-06 2018-07-24 Mastercard Mobile Transactions Solutions, Inc. Isolating distinct service provider widgets within a wallet container
US9076174B2 (en) 2007-02-26 2015-07-07 Zepfrog Corp. Method and service for providing access to premium content and dispersing payment therefore
US8521650B2 (en) 2007-02-26 2013-08-27 Zepfrog Corp. Method and service for providing access to premium content and dispersing payment therefore
US10510055B2 (en) 2007-10-31 2019-12-17 Mastercard Mobile Transactions Solutions, Inc. Ensuring secure access by a service provider to one of a plurality of mobile electronic wallets
US10546284B2 (en) 2007-10-31 2020-01-28 Mastercard Mobile Transactions Solutions, Inc. Mobile wallet as provider of services consumed by service provider applications
US10546283B2 (en) 2007-10-31 2020-01-28 Mastercard Mobile Transactions Solutions, Inc. Mobile wallet as a consumer of services from a service provider
US10558963B2 (en) 2007-10-31 2020-02-11 Mastercard Mobile Transactions Solutions, Inc. Shareable widget interface to mobile wallet functions
WO2011019978A1 (fr) * 2009-08-14 2011-02-17 Sensis Corporation Système et procédé pour la détermination d'une position authentifiée intra-bande gnss
US9217792B2 (en) 2009-08-14 2015-12-22 Saab-Sensis Corporation System and method for GNSS in-band authenticated position determination
US20200160337A1 (en) * 2018-11-21 2020-05-21 Synchrony Bank Single entry combined functionality
US11449872B2 (en) * 2018-11-21 2022-09-20 Synchrony Bank Single entry combined functionality

Also Published As

Publication number Publication date
AU2001238037A1 (en) 2002-07-01

Similar Documents

Publication Publication Date Title
TWI391863B (zh) 電腦可讀通用授權卡系統及其使用方法
US7680736B2 (en) Payment system
Hansmann et al. Smart card application development using Java
KR101015341B1 (ko) 온라인 지불인 인증 서비스
RU2645593C2 (ru) Верификация портативных потребительских устройств
US7386516B2 (en) System and method for providing secure services over public and private networks using a removable portable computer-readable storage
US7299980B2 (en) Computer readable universal authorization card system and method for using same
US8162208B2 (en) Systems and methods for user identification string generation for selection of a function
US20030154376A1 (en) Optical storage medium for storing, a public key infrastructure (pki)-based private key and certificate, a method and system for issuing the same and a method for using
US7979894B2 (en) Electronic verification service systems and methods
US20060190412A1 (en) Method and system for preventing fraudulent use of credit cards and credit card information, and for preventing unauthorized access to restricted physical and virtual sites
US20060178994A1 (en) Method and system for private shipping to anonymous users of a computer network
US20080243702A1 (en) Tokens Usable in Value-Based Transactions
EP1687725B1 (fr) Système de paiement securisé
MX2008013116A (es) Autentificacion para una transaccion comercial utilizando un modulo movil.
JP2002247029A (ja) 認証装置、認証システムおよびその方法、処理装置、通信装置、通信制御装置、通信システムおよびその方法、情報記録方法およびその装置、情報復元方法およびその装置、その記録媒体
JP2004531827A (ja) 安全な払戻のためのシステム及び方法
EP1246104A1 (fr) Disque optique de crédit ou débit protégé contre la copie
AU2008200083B2 (en) Method and System for Identification Verification Between at Least a Pair of Entities
WO2002050743A1 (fr) Procede et systeme d'utilisation de cartes optiques comme plates-formes unifiees, securisees, portatives, pour effectuer une pluralite de transactions en ligne securisees
JP2005512225A (ja) 埋込コンテンツの自動化された権利管理及び支払いシステム
WO2002014975A2 (fr) Systeme et procede permettant d'autoriser le commerce electronique
JP2000339366A (ja) Ｃｄを利用した認証システム及びその方法
JP2003507824A (ja) 電子商取引を行うための保証システムおよびそれに用いる方法
KR20000030170A (ko) 통신망 및 하이브리드카드를 이용한 전자결제방법

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CR CU CZ DE DK DM DZ EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PL PT RO RU SD SE SG SI SK SL TJ TM TR TT TZ UA UG US UZ VN YU ZA ZW

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR BF BJ CF CG CI CM GA GN GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
REG Reference to national code

Ref country code: DE

Ref legal event code: 8642

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTIFICATION UNDER RULE 69(1) EPC (F1205A) DATED 15.12.03

122 Ep: pct application non-entry in european phase
NENP Non-entry into the national phase

Ref country code: JP