Method and system using a cyber ID to provide secure transactions

摘要

A method and system for securing a user transaction involving a subscriber unit (“SU”) (having a processor, memory, and a display configured to accept user input), a credential information manager (“CIM”) (having a processor and memory), and a transaction service provider (“TSP”) (having a processor and memory). A cyber identifier (“CyberID”), a subscriber identifier (“SubscriberID”), and subscriber information, each associated with the user, is stored in the CIM. A transaction request is sent from the SU to the TSP, which creates a transaction identifier (“TID”), stores it in the TSP memory and transmits it to the SU. The SU transmits an authentication request, the TID, and SubscriberID to the CIM, which authenticates the SubscriberID and verifies the TID to the TSP. The TSP verifies the TID and reports it to the CIM, which transmits the CyberID and subscriber information to the TSP, and transmits a transaction authorization to the SU.

主权项

1. A method for securing a transaction by a user comprising:
providing a subscriber unit having a processor, a memory, and a display,
wherein said subscriber unit is configured to accept user input, providing a credential information manager having a processor and a memory, storing a cyber identifier associated with the user in said credential information manager memory, wherein said cyber identifier comprises a username and subscriber information; storing said subscriber information associated with the user in said credential information manager memory; providing a transaction service provider having a processor and a memory, transmitting a request for a transaction from said subscriber unit to said transaction service provider; creating, by said transaction service provider based on said transaction request, a first transaction identifier; authenticating, by said credential information manager, a first subscriber identifier associated with the user received by said credential information manager from said subscriber unit with a second subscriber identifier associated with the user stored in said credential information manager memory; verifying, by transaction service provider, a second transaction identifier based on said transaction request received by said transaction service provider from said credential information manager with said first transaction identifier based on said transaction request; transmitting, from said credential information manager to said transaction service provider, said cyber identifier stored in said credential information manager memory; transmitting, from said credential information manager to said transaction service provider, said subscriber information stored in said credential information manager memory; transmitting a transaction authorization from said credential information manager to said transaction service provider; and transmitting a password from said subscriber unit to said transaction service provider; wherein said password is never transmitted to said credential information manager and wherein said cyber identifier is never transmitted to said subscriber unit; and wherein said subscriber information is never transmitted to said transaction service provider by said subscriber unit.