Method and system using a cyber ID to provide secure transactions

摘要

A method and system for securing a user transaction involving a subscriber unit (“SU”) (having a processor, memory, and a display configured to accept user input), a credential information manager (“CIM”) (having a processor and memory), and a transaction service provider (“TSP”) (having a processor and memory). A cyber identifier (“CyberID”), a subscriber identifier (“SubscriberID”), and subscriber information, each associated with the user, is stored in the CIM. A transaction request is sent from the SU to the TSP, which creates a transaction identifier (“TID”), stores it in the TSP memory and transmits it to the SU. The SU transmits an authentication request, the TID, and SubscriberID to the CIM, which authenticates the SubscriberID and verifies the TID to the TSP. The TSP verifies the TID and reports it to the CIM, which transmits the CyberID and subscriber information to the TSP, and transmits a transaction authorization to the SU.

主权项

1. A method for securing a transaction among a user, a transaction service provider having a processor and a memory, and a credential information manager having a memory and a processor, the credential information manager configured to store a cyber identifier associated with the user, store and authenticate a subscriber identifier associated with the user, store subscriber information associated with the user, transmit a request for verification to the transaction service provider, transmit a transaction identifier to the transaction service provider for verification, receive a verification request result message from the transaction service provider, and transmit the cyber identifier, the subscriber information, and the transaction authorization to the transaction service provider, the method comprising:
providing a subscriber unit having a processor, a memory, and a display,
wherein said subscriber unit is configured to accept user input, transmitting a request for a transaction from said subscriber unit to the transaction service provider; receiving, by said subscriber unit, a transaction identifier transmitted from the transaction service provider; transmitting a request for authentication from said subscriber unit to the credential information manager; transmitting said transaction identifier from said subscriber unit to the credential information manager; transmitting a subscriber identifier and a cyber identifier associated with the user from said subscriber unit to the credential information manager, wherein said cyber identifier comprises a username and subscriber information; and transmitting a password from said subscriber unit to the transaction service provider; wherein said password is never transmitted to the credential information manager and wherein said cyber identifier is never transmitted to said subscriber unit; and wherein said subscriber information is never transmitted to the transaction service provider by said subscriber unit.