Method and apparatus for secure e-commerce transactions

摘要

A method of authenticating the identity of a user of a communication device and providing a securely encrypted communication channel, comprises first authenticating the identity of the user using biometric information collected and encrypted using apparatus which interfaces with a communication device. After authentication is complete the communication is encrypted using a series of different algorithms which include an encryption key derived from the user's biometric data as well as device-specific algorithms broadcast from time to time to the device, and an algorithm programmed into the device. The encrypted data packets include several separately encrypted components, the arrangement of which varies in successive data packets. The invention provides a means for securely authenticating the identity of a user without requiring the use of any particular communication device in order to do so.