US6820199B2
Expired / Lapsed
US
⏱️ 0.0 years remaining
Sending electronic transaction message, digital signature derived therefrom, and sender identity information in AADS system
Assignee: First Data Corp
•
Filing: 2002-03-04
•
Granted: 2004-11-16
•
Expires: 2022-03-04
Abstract
Abstract In a system for performing an action regarding an account in response to an electronic communication received from a sender by a receiver, wherein the electronic communication includes sender identity information associated with the account and a digital signature derived using a private key of a public-private key pair, and wherein the public key has been associated with the account by the receiver such that the public key is retrievable based on the sender identity information, a method of validating the identity of the sender for the electronic communication includes: (a) retrieving the public key based on the received sender identity information; and (b) comparing a function of the public key and the digital signature with a function of the electronic message. The digital signature is derived from an electronic message possessed first by the sender before the receiver. The sender identity information is different from the electronic message.
Inventors
- 👤 Henry Lynn Wheeler
- 👤 Anne M. Wheeler
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-09 14:39
CPC Classifications
G; G06; G06Q; G06Q20/00; G06Q20/04; G06Q20/02; G06Q20/08; G06Q20/10; G06Q20/30; G06Q20/36; G06Q20/367; G06Q20/3674; G06Q20/38; G06Q20/382; G06Q20/3825; G06Q20/3829; G06Q20/40; G06Q20/401; H; H04; H04L; H04L9/00; H04L9/32; H04L9/3247; H04L2209/00; H04L2209/56
Claims Analysis
Total Claims: 41
Claim 1
Independent Claim
305 words
In a system for performing an action, in response to an electronic communication regarding an account, which electronic communication is received from a sender by a receiver, a method comprising the steps of: (a) initially, associating by the receiver, sender identity information and a public key of a public-private key pair with the account such that the public key is retrievable based on the sender identity information, wherein the account comprises transactional account information, and wherein the public key is associated with the account in a computer database; and thereafter (b) receiving the electronic communication from the sender, (i) wherein the electronic communication was created after the association of the sender identity information and the public key with the account in step (a), (ii) wherein the electronic communication comprises, (A) the sender identity information, and (B) a digital signature derived using the private key of the pair from an electronic message possessed first by the sender before the receiver, the sender identity information being different from the electronic message, and (iii) wherein the electronic communication is communicated electronically from the sender; and (c) validating the identity of the sender for the electronic communication by only performing the steps of, (i) utilizing the sender identity information received in the electronic communication to retrieve the public key based on the association of the sender identity information and the public key with the account performed in step (a), and (ii) comparing a function of the public key and the digital signature with a function of the electronic message, wherein the function of the public key and the digital signature comprises decrypting the digital signature using the public key, and wherein the function of the electronic message comprises calculating a hash value of the electronic message, whereby a comparison resulting in a match validates the identity of the sender.
Claim 2
Dependent Claim
305 words
In a system for performing an action, in response to an electronic communication regarding an account, which electronic communication is received from a sender by a receiver, a method comprising the steps of: (a) initially, associating by the receiver, sender identity information and a public key of a public-private key pair with the account such that the public key is retrievable based on the sender identity information, wherein the account comprises transactional account information, and wherein the public key is associated with the account in a computer database; and thereafter (b) receiving the electronic communication from the sender, (i) wherein the electronic communication was created after the association of the sender identity information and the public key with the account in step (a), (ii) wherein the electronic communication comprises, (A) the sender identity information, and (B) a digital signature derived using the private key of the pair from an electronic message possessed first by the sender before the receiver, the sender identity information being different from the electronic message, and (iii) wherein the electronic communication is communicated electronically from the sender; and (c) validating the identity of the sender for the electronic communication by only performing the steps of, (i) utilizing the sender identity information received in the electronic communication to retrieve the public key based on the association of the sender identity information and the public key with the account performed in step (a), and (ii) comparing a function of the public key and the digital signature with a function of the electronic message, wherein the function of the public key and the digital signature comprises decrypting the digital signature using the public key, and wherein the function of the electronic message comprises calculating a hash value of the electronic message, whereby a comparison resulting in a match validates the identity of the sender.
Claim 3
Dependent Claim
328 words
In a system for performing an action, in response to an electronic communication regarding an account, which electronic communication is received from a sender by a receiver, a method comprising the steps of: (a) initially, associating by the receiver, sender identity information and a public key of a public-private key pair with the account such that the public key is retrievable based on the sender identity information, wherein the account comprises transactional account information, and wherein the public key is associated with the account in a computer database; and thereafter (b) receiving the electronic communication from the sender, (i) wherein the electronic communication was created after the association of the sender identity information and the public key with the account in step (a), (ii) wherein the electronic communication comprises, (A) the sender identity information, and (B) a digital signature derived using the private key of the pair from an electronic message possessed first by the sender before the receiver, the sender identity information being different from the electronic message, and (iii) wherein the electronic communication is communicated electronically from the sender; and (c) validating the identity of the sender for the electronic communication by only performing the steps of, (i) utilizing the sender identity information received in the electronic communication to retrieve the public key based on the association of the sender identity information and the public key with the account performed in step (a), and (ii) comparing a function of the public key and the digital signature with a function of the electronic message, wherein the function of the public key and the digital signature comprises decrypting the digital signature using the public key, and wherein the function of the electronic message comprises calculating a hash value of the electronic message, whereby a comparison resulting in a match validates the identity of the sender, and wherein neither a PIN nor a password is required to be transmitted to the receiver for validating the identity of the sender.
Claim 4
Dependent Claim
328 words
In a system for performing an action, in response to an electronic communication regarding an account, which electronic communication is received from a sender by a receiver, a method comprising the steps of: (a) initially, associating by the receiver, sender identity information and a public key of a public-private key pair with the account such that the public key is retrievable based on the sender identity information, wherein the account comprises transactional account information, and wherein the public key is associated with the account in a computer database; and thereafter (b) receiving the electronic communication from the sender, (i) wherein the electronic communication was created after the association of the sender identity information and the public key with the account in step (a), (ii) wherein the electronic communication comprises, (A) the sender identity information, and (B) a digital signature derived using the private key of the pair from an electronic message possessed first by the sender before the receiver, the sender identity information being different from the electronic message, and (iii) wherein the electronic communication is communicated electronically from the sender; and (c) validating the identity of the sender for the electronic communication by only performing the steps of, (i) utilizing the sender identity information received in the electronic communication to retrieve the public key based on the association of the sender identity information and the public key with the account performed in step (a), and (ii) comparing a function of the public key and the digital signature with a function of the electronic message, wherein the function of the public key and the digital signature comprises decrypting the digital signature using the public key, and wherein the function of the electronic message comprises calculating a hash value of the electronic message, whereby a comparison resulting in a match validates the identity of the sender, and wherein neither a PIN nor a password is required to be transmitted to the receiver for validating the identity of the sender.
Claim 5
Dependent Claim
311 words
In a system for performing an action, in response to an electronic communication regarding an account, which electronic communication is received from a sender by a receiver, a method comprising the steps of: (a) initially, associating by the receiver, sender identity information and a public key of a public-private key pair with the account such that the public key is retrievable based on the sender identity information, wherein the account comprises transactional account information and the sender identity information comprises other than an account number, and wherein the public key is associated with the account in a computer database; and thereafter (b) receiving the electronic communication from the sender, (i) wherein the electronic communication was created after the association of the sender identity information and the public key with the account in step (a), (ii) wherein the electronic communication comprises, (A) the sender identity information, and (B) a digital signature derived using the private key of the pair from an electronic message possessed first by the sender before the receiver, the sender identity information being different from the electronic message, and (iii) wherein the electronic communication is communicated electronically from the sender; and (c) validating the identity of the sender for the electronic communication by, (i) utilizing the sender identity information received in the electronic communication to retrieve the public key based on the association of the sender identity information and the public key with the account performed in step (a), and (ii) comparing a function of the public key and the digital signature with a function of the electronic message, wherein the function of the public key and the digital signature comprises decrypting the digital signature using the public key, and wherein the function of the electronic message comprises calculating a hash value of the electronic message, whereby a comparison resulting in a match validates the identity of the sender.
Claim 6
Dependent Claim
311 words
In a system for performing an action, in response to an electronic communication regarding an account, which electronic communication is received from a sender by a receiver, a method comprising the steps of: (a) initially, associating by the receiver, sender identity information and a public key of a public-private key pair with the account such that the public key is retrievable based on the sender identity information, wherein the account comprises transactional account information and the sender identity information comprises other than an account number, and wherein the public key is associated with the account in a computer database; and thereafter (b) receiving the electronic communication from the sender, (i) wherein the electronic communication was created after the association of the sender identity information and the public key with the account in step (a), (ii) wherein the electronic communication comprises, (A) the sender identity information, and (B) a digital signature derived using the private key of the pair from an electronic message possessed first by the sender before the receiver, the sender identity information being different from the electronic message, and (iii) wherein the electronic communication is communicated electronically from the sender; and (c) validating the identity of the sender for the electronic communication by, (i) utilizing the sender identity information received in the electronic communication to retrieve the public key based on the association of the sender identity information and the public key with the account performed in step (a), and (ii) comparing a function of the public key and the digital signature with a function of the electronic message, wherein the function of the public key and the digital signature comprises decrypting the digital signature using the public key, and wherein the function of the electronic message comprises calculating a hash value of the electronic message, whereby a comparison resulting in a match validates the identity of the sender.
Claim 7
Dependent Claim
322 words
In a system for performing an action, in response to an electronic communication regarding an account, which electronic communication is received from a sender by a receiver, a method comprising the steps of: (a) initially, associating by the receiver sender identity information and a public key of a public-private key pair with the account such that the public key is retrievable based on the sender identity information, wherein the account comprises transactional account information, and wherein the public key is associated with the account in a computer database; and thereafter (b) receiving the electronic communication from the sender, (i) wherein the electronic communication was created after the association of the sender identity information and the public key with the account in step (a), (ii) wherein the electronic communication comprises, (A) the sender identity information, and (B) a digital signature derived using the private key of the pair from an electronic message possessed first by the sender before the receiver, the sender identity information being different from the electronic message, and (iii) wherein the electronic communication is communicated electronically from the sender, and (iv) wherein the electronic communication is the only electronic communication received from the sender by the receiver relating to the action; and (c) validating the identity of the sender for the electronic communication by, (i) utilizing the sender identity information received in the electronic communication to retrieve the public key based on the association of the sender identity information and the public key with the account performed in step (a), and (ii) comparing a function of the public key and the digital signature with a function of the electronic message, wherein the function of the public key and the digital signature comprises decrypting the digital signature using the public key, and wherein the function of the electronic message comprises calculating a hash value of the electronic message, whereby a comparison resulting in a match validates the identity of the sender.
Claim 8
Dependent Claim
322 words
In a system for performing an action, in response to an electronic communication regarding an account, which electronic communication is received from a sender by a receiver, a method comprising the steps of: (a) initially, associating by the receiver sender identity information and a public key of a public-private key pair with the account such that the public key is retrievable based on the sender identity information, wherein the account comprises transactional account information, and wherein the public key is associated with the account in a computer database; and thereafter (b) receiving the electronic communication from the sender, (i) wherein the electronic communication was created after the association of the sender identity information and the public key with the account in step (a), (ii) wherein the electronic communication comprises, (A) the sender identity information, and (B) a digital signature derived using the private key of the pair from an electronic message possessed first by the sender before the receiver, the sender identity information being different from the electronic message, and (iii) wherein the electronic communication is communicated electronically from the sender, and (iv) wherein the electronic communication is the only electronic communication received from the sender by the receiver relating to the action; and (c) validating the identity of the sender for the electronic communication by, (i) utilizing the sender identity information received in the electronic communication to retrieve the public key based on the association of the sender identity information and the public key with the account performed in step (a), and (ii) comparing a function of the public key and the digital signature with a function of the electronic message, wherein the function of the public key and the digital signature comprises decrypting the digital signature using the public key, and wherein the function of the electronic message comprises calculating a hash value of the electronic message, whereby a comparison resulting in a match validates the identity of the sender.
Claim 9
Dependent Claim
21 words
The method of claim 1 , 2 , 3 , or 4 , wherein the electronic communication includes the electronic message.
Claim 10
Dependent Claim
26 words
The method of claim 1 , 2 , 3 , or 4 , wherein the electronic message is implied from the receipt of the electronic communication.
Claim 11
Dependent Claim
26 words
The method of claim 1 , 2 , 3 , or 4 , wherein the digital signature is derived within a smart card of the sender.
Claim 12
Dependent Claim
34 words
The method of claim 1 , 2 , 3 , or 4 , wherein the digital signature is received from the sender within a terminal of a third-party and then forwarded to the receiver.
Claim 13
Dependent Claim
23 words
The method of claim 1 , 2 , 3 , or 4 , wherein the electronic communication is received over a secure network.
Claim 14
Dependent Claim
23 words
The method of claim 1 , 2 , 3 , or 4 , wherein the electronic communication is received over an insecure network.
Claim 15
Dependent Claim
20 words
The method of claim 1 , 2 , 3 , or 4 , wherein the electronic communication is received encrypted.
Claim 16
Dependent Claim
20 words
The method of claim 1 , 2 , 3 , or 4 , wherein the electronic communication is received unencrypted.
Claim 17
Dependent Claim
30 words
The method of claim 1 , 2 , 3 , or 4 , wherein the receiver is a financial institution and the action on the account comprises a financial transaction.
Claim 18
Dependent Claim
21 words
The method of claim 1 , 2 , 3 , or 4 , wherein the electronic communication includes the public key.
Claim 19
Dependent Claim
20 words
The method of claim 1 , 2 , or 4 , wherein the sender identity information comprises the account number.
Claim 20
Dependent Claim
22 words
The method of claim 1 , 2 , or 4 , wherein the sender identity information comprises other than the account number.
Claim 21
Dependent Claim
28 words
The method of claim 1 , 2 , 3 , or 4 , wherein the public key was associated with the account when the account was first established.
Claim 22
Dependent Claim
12 words
The method of claim 10 , wherein the network comprises the Internet.
Claim 23
Dependent Claim
18 words
The method of claim 17 , wherein the public key was provided by the sender to the receiver.
Claim 24
Dependent Claim
18 words
The method of claim 17 , wherein the public key was provided to the sender by the receiver.
Claim 25
Dependent Claim
25 words
The method of claim 1 , 2 , 3 , or 4 , wherein the transactional account information includes information required to process the action.
Claim 26
Dependent Claim
24 words
The method of claim 1 , 2 , 3 , or 4 , wherein the transactional account information includes a personal identification number (PIN).
Claim 27
Dependent Claim
27 words
The method of claim 1 , 2 , 3 , or 4 , wherein the transactional account information includes an account balance representing funds in the account.
Claim 28
Dependent Claim
26 words
The method of claim 1 , 2 , 3 , or 4 , wherein the transactional account information includes information validated when the account was established.
Claim 29
Independent Claim
33 words
The method of claims 1 , 2 , 3 , or 4 , wherein the transactional account information includes information that was validated in a face-to-face acknowledgement between the sender and the receiver.
Claim 30
Independent Claim
20 words
The method of claims 1 , 2 , 3 , or 4 , wherein the account comprises a checking account.
Claim 31
Independent Claim
27 words
The method of claims 1 , 2 , 3 , or 4 , wherein the transactional account information includes a history of ledger transactions in the account.
Claim 32
Dependent Claim
26 words
The method of claim 1 , 2 , 3 , or 4 , wherein the transactional account information includes the social security number of the sender.
Claim 33
Dependent Claim
24 words
The method of claim 1 , 2 , 3 , or 4 , wherein the transactional account information includes the address of the sender.
Claim 34
Dependent Claim
26 words
The method of claim 1 , 2 , 3 , or 4 , wherein the transactional account information includes the mother's maiden name of the sender.
Claim 35
Dependent Claim
24 words
The method of claim 1 , 2 , 3 , or 4 , wherein the transactional account information includes entity information of the sender.
Claim 36
Dependent Claim
25 words
The method of claim 1 , 2 , 3 , or 4 , wherein the transactional account information only includes entity information of the sender.
Claim 37
Dependent Claim
22 words
The method of claim 1 , 2 , 3 , or 4 , wherein the transactional account information includes business process information.
Claim 38
Dependent Claim
28 words
The method of claim 1 , 2 , 3 , or 4 , wherein the transactional account information is stored in fields in records in a computer database.
Claim 39
Dependent Claim
13 words
The method of claim 34 , wherein the records comprise an account file.
Claim 40
Dependent Claim
14 words
The method of claim 35 , wherein the records further comprise a transactions file.
Claim 41
Dependent Claim
26 words
The method of claim 1 , 2 , 3 , or 4 , wherein the digital signature is derived within a hand-held device of the sender.
References Cited (Backward Citations)
US3962539A
Cited
US4200770A
Cited
US4218582A
Cited
US4405829A
Cited
US4408203A
Cited
US4424414A
Cited
US4825050A
Cited
US4823388A
Cited
US4734564A
Cited
US5018196A
Cited
US4885788A
Cited
US5097504A
Cited
US4748668A
Cited
US4850017A
Cited
US4897920A
Cited
US5140634A
Cited
US4868877A
Cited
US5225978A
Cited
US5455865A
Cited
US5209208A
Cited
US5214703A
Cited
US5231668A
Cited
US5453601A
Cited
US5502766A
Cited
US5534855A
Cited
US5677953A
Cited
US5625690A
Cited
US5623637A
Cited
US6205437B1
Cited
US5724424A
Cited
US6009177A
Cited
US5788953A
Cited
US5509071A
Cited
US5563946A
Cited
US5963648A
Cited
US5557518A
Cited
US6134325A
Cited
US5539828A
Cited
US5586036A
Cited
US5878142A
Cited
US5659616A
Cited
US5694471A
Cited
US5606609A
Cited
US5715314A
Cited
US5878172A
Cited
US6044154A
Cited
US5636280A
Cited
US20010000535A1
Cited
US5604801A
Cited
US5812666A
Cited
US5590197A
Cited
US5677955A
Cited
US5910989A
Cited
US5577120A
Cited
US5745886A
Cited
US5708780A
Cited
US6000522A
Cited
US5790677A
Cited
US5778072A
Cited
US5615266A
Cited
US5798640A
Cited
US5721779A
Cited
US5671279A
Cited
US5949881A
Cited
US5671285A
Cited
US5943423A
Cited
US5928298A
Cited
US5751813A
Cited
US5848161A
Cited
US5677120A
Cited
US5781723A
Cited
US5862327A
Cited
US6324525B1
Cited
US6373950B1
Cited
US6253027B1
Cited
US5956404A
Cited
US6023509A
Cited
US6029150A
Cited
US6279112B1
Cited
US6047051A
Cited
US5903882A
Cited
US6285991B1
Cited
US6021202A
Cited
US5887131A
Cited
US6104815A
Cited
US6105012A
Cited
US6282522B1
Cited
US6202151B1
Cited
US6565000B2
Cited
US6240091B1
Cited
US5910988A
Cited
US6243812B1
Cited
US6161180A
Cited
US6213391B1
Cited
US6000832A
Cited
US5970147A
Cited
US6061794A
Cited
US6111956A
Cited
US6061799A
Cited
US6314519B1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2007-11-16 | 2008-05-17 | 2008-11-16 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2011-11-16 | 2012-05-17 | 2012-11-16 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2015-11-16 | 2016-05-17 | 2016-11-16 | $7700.00 | Window Closed / Lapsed |