Abstract:
The invention offers methods and devices in which a clear-back signal and an answer signal of the subscriber device connected to the automated switched telephone network are used as primary or secondary factor of identification of personality and intentions of the transaction initiator. The invention can be used inter alia for confirmation or verification of transactions initiated by the unauthorized person or by the person authorized by existing authorization factors, by means of the subscriber device of the person authorized to make the transaction. The technical result is the fact that an authorization factor is offered that does not require connection traffic in the automated switched telephone network when such network is used for confirmation or verification of transactions.

Description:
CROSS-REFERENCE TO RELATED APPLICATIONS 
       [0001]    This application is a Continuation application of International Application PCT/RU2009/000582 filed on Oct. 28, 2009, which in turn claims priority to Russian application RU 2008143735 filed on Nov. 6, 2008, both of which are incorporated herein by reference in their entirety. 
     
    
     FIELD OF THE INVENTION 
       [0002]    The invention relates to identification means, namely methods and devices for multi-factor verification of transactions made over the telephone. Transaction parties are generally the first party initiating a transaction, e.g. a bank client, and the second party interested in transaction verification results, e.g. a bank, and the third party performing transaction verification and delivering the result to the second party, e.g. a processing center. In one of the schemes the second and the third parties are combined. 
         [0003]    In suggested schemes and devices phone clear-back and answer signals are used as main or additional factors for identification of personality and intentions of transaction initiator. 
         [0004]    Inter alia the invention can be used to verify a person&#39;s consent to perform an action aimed at transfer of title to the object of transaction in civil circulation. The object of transaction may be material valuables include money, securities, and goods. Alternatively, the object of transaction can be a delivery permission to a person of information access which is restricted to a limited number of persons; or verification of significant facts, such as authorship of a document, or a person&#39;s consent to an action. Thus the invention may be used to authenticate document authorship, and to authenticate a person participating in a process. 
         [0005]    The invention may be used to verify payment transactions, transactions in “client-broker” and “client-bank” systems, Internet authorization operations, third-party requests of access to private data, as well as to enable a customer to optionally endorse digital documents with an electronic signature by means of a cell phone. 
       BACKGROUND OF THE INVENTION 
       [0006]    Published U.S. patent application 2003/0061163 A1 herein incorporated by reference in its entirety describes permission verification system and method for credit or debit card use by cardholder during transaction. The minimum system configuration includes a seller&#39;s modem, a cardholder&#39;s modem, a processing center modem, a database server modem, a private telephone communicator, a database server, and a database. When a credit card is used in a remote sales terminal the seller&#39;s modem simultaneously transmits encoded information from the credit card to processing center modem and to the cardholder&#39;s modem. As soon as the processing center receives the transaction information from the seller, it transmits the transaction data to the database via modem, private telephone communicator, and database server, and waits for an encoded digital authorization or refusal signal for the transaction from the cardholder. The cardholder chooses an option in IVR (Interactive Voice Response) menu by pressing the corresponding key on his phone; after that the cardholder&#39;s modem transmits the cardholder&#39;s choice via a public telephone network simultaneously to the seller&#39;s modem, to the processing center modem, and to the database via modem, private telephone switchboard, and database server. The database server saves all transaction data in digital format. If the amount on the debit card is not sufficient, or the credit card limit is exceeded, the processing center is programmed to send a digital signal via modem and public telephone network to the seller&#39;s modem about the transaction cancellation, regardless of instructions received from the cardholder via modem. 
         [0007]    A shortcoming of aforementioned system is its hardware complexity. It requires two modems on the seller&#39;s side for simultaneous communication with the cardholder and the processing center; three modems on the cardholder&#39;s side for simultaneous transmission of the cardholder&#39;s decision to the seller&#39;s modem, to the processing center modem, and to the database; as well as a device transmitting incoming signals via modem to the IVR automatic informer playing back voice files for the cardholder and registering the cardholder&#39;s choices. Another shortcoming of the existing system is the considerable amount of time required to coordinate every payment transaction. Transaction completion requires four modem connections, IVR menu playback for the cardholder, and waiting for the cardholder&#39;s reply. The cost of transaction verification is increased because of the high per-minute cost of connection in public switched telephone networks. 
         [0008]    International publication WO 2006/099081 A2 herein incorporated by reference in its entirety describes a banking account management system and method. When someone requests access to the client&#39;s account, the client is notified of such request by a call to the client&#39;s number. When the voice connection with the client is being established the system asks the client for the PIN (Personal Identification Number) by playing back the voice file by IVR automatic informer. If the client enters the correct PIN the access to the client&#39;s account is granted. 
         [0009]    A shortcoming of this system is the high cost of receiving payment transaction verification because of the high per-minute cost of connection in public switched telephone networks, it being necessary for the client to memorize the PIN in order to use the system, as well as the fact that the system cannot be used for small amount payments, because the cost of verification can exceed the transaction amount. 
         [0010]    General shortcomings of the existing systems is the long duration of dial-up connection, high requirements to the user&#39;s knowledge of verification service infrastructure, dependence of verification results on client&#39;s accidental input errors, and verification&#39;s being multi-stage and slow. Existing multi-stage methods can be significantly inconvenient for mobile-phone users on the move e.g. while driving, riding in the subway between stations etc. These shortcomings make multi-stage transaction verification difficult to implement e.g. for verification of routine private operations (the complexity of verification is annoying for users), and for verification of exchange operations requiring instantaneous reaction of a player to the rapidly changing market situation. 
         [0011]    So, there still is an unmet demand for means of efficient transaction verification with low per-instance cost requiring minimum participation by the user in the verification process. 
       SUMMARY OF THE INVENTION 
       [0012]    The invention offers methods and devices in which a clear-back signal and an answer signal of the subscriber device connected to the automated switched telephone network are used as primary or secondary factor of identification of personality and intentions of the transaction initiator. The invention may be used inter alia for confirmation or verification of transactions initiated by the unauthorized person or by the person authorized by existing authorization factors, by means of the subscriber device of the person authorized to make the transaction. The technical result is the fact that an authorization factor is offered that does not require connection traffic in the automated switched telephone network when such network is used for confirmation or verification of transactions. 
       GENERAL DESCRIPTION 
       [0013]    As used herein, “transaction” means a process in which at least two parties participate and which ends in successful or unsuccessful obtaining of a predetermined result. Success or failure to obtain the result are subject to at least one transaction requirement. 
         [0014]    As used herein, “transaction requirement” means a provision which can be related to material values or to certain information, and which is subject to verification by means of this invention. 
         [0015]    Transaction requirements include, without limitation, the following facts: a person&#39;s having a title, authorship, a right to dispose of a material object on behalf of an authorized person, a person&#39;s having official authority, a person&#39;s having the right to access the information, and a person&#39;s willingness to perform a certain action. 
         [0016]    A transaction may have several requirements, e.g. a person&#39;s having the right to perform an action and a person&#39;s willingness to perform a certain action. In such case the transaction result is obtained only after meeting each of the transaction requirements. 
         [0017]    As used herein, “transaction result” means an action performed in case of a successful completion of a transaction; said action having been defined prior to the transaction initiation. 
         [0018]    Transaction results may be the following actions, without limitation: money transfer from one account to another, gaining access to information, verification of authorship of an electronic document, software execution and activation of any device. 
         [0019]    As used herein, “transaction information” means any information related to the transaction parties, transaction requirements, and transaction result. Information on transaction parties includes without limitation a commercial name, a name of a legal entity, a trade mark, a service mark, a service name, a physical person&#39;s name. Information on transaction result includes without limitation the following payment information: beneficiary&#39;s name, payer&#39;s account number, payment currency; information on document: document number and date; information on software: software name and name of the software supplier. Information on transaction requirements includes explanations of the actions which shall be performed to meet the transaction requirement. 
         [0020]    As used herein, terms “authorization”, “verification”, and “validation” are interchangeable and denote a process of checking conformity of an anonymous person with a defined criterion. In case of success an anonymous person is identified as the person characterized by predetermined registration data: name, unique number and scope of authority. 
         [0021]    As used herein, “the party authorized to make the transaction”, or “the authorized party” means a physical person or a legal entity, or their representatives, or a group of jointly acting persons, or a means by which said persons are represented in electronic environment. The authorized party has the unique identification data formed prior to transaction verification. Such data may include a person&#39;s name, a name of a legal entity, or other data making it possible to tell a person from other persons the information on which is used in the invention. 
         [0022]    As used herein, “the party initiating the transaction”, or “the initiating party” or “the verified party” means a physical person or a legal entity, or their representatives, or a group of jointly acting persons, at whose will a transaction is being initiated. As a specialist will realize, a person&#39;s willingness to make a transaction may be expressed by various means and does not necessarily require direct intervention and/or awareness of the initiating party of a transaction being initiated at this party&#39;s will. This can be illustrated by mechanical trading systems making trading decisions depending on results of technical analysis of the stock exchange share quotations. As a specialist will realize, “the initiating party” can coincide with “the authorized party” if a transaction is initiated and confirmed by the same person. However “the initiating party” and “the authorized party’ cannot coincide, inter alia, if a transaction is initiated by a dishonest person, or if there is a prior agreement between an authorized party and an honest transaction initiator (for example, if the transaction initiator is a child, and the authorized party is one of the child&#39;s parents). 
         [0023]    As used herein, “the party verifying transactions”, or “the verifying party” is a party by means and by effort of which the transaction requirement verification is performed. The means of transaction verification is an automated infrastructure including a system of interacting software and hardware described below. 
         [0024]    As used herein, “the transaction effector party”, or “the transaction effector” means a party by means and by effort of which the transaction result is obtained. 
         [0025]    Transaction effectors can be, without limitation, the following parties: a bank or a payment system (if the transaction results in a transfer from one account to another), a broker (if the transaction results in a purchase or a sale of securities), a car anti-theft system (if the transaction results in switching the monitoring off), a web or a WAP resource (if the transaction results in authorization at the web- or the WAP resource and/or in gaining access to information content of a web or WAP resource), a rightholder (if a transaction results in a permission to use copyrighted material or software), a physical person or a legal entity (if the transaction results in an endorsement of a document or in permission to use an encrypted file or such property as a personal computer, an automobile, a safe, a DVD). 
         [0026]    As used herein, “automated switched telephone network”, or “phone network” means at least one public telephone network, such as a stationary public telephone network, or a mobile telephone network, or a combination of the above. 
         [0027]    In accordance with the invention the telephone network that the verifying party&#39;s device is connected to (verifying party&#39;s telephone network), and the telephone network that the authorized party&#39;s device is connected to (verified party&#39;s telephone network) can be the same network or different networks. Verified party&#39;s telephone network is a mobile telephone network. Telephone networks of verifying and verified parties can be connected directly or, not necessarily, by means of one or several telecommunication data transfer channels. In one implementation scheme the telecommunication channel is another telephone network. Whether telephone networks of verifying and verified parties coincide or differ, and regardless of availability, type, quantity and connection sequence of telecommunication channels, the telephone network as a whole provides for addressing a caller and a called party, for transmission of the caller&#39;s address and bidirectional transmission of clear-back and answer signals between a caller and a called party. 
         [0028]    In one embodiment of the invention the telephone network uses communication standard selected from the group consisting of GSM (Global System for Mobile Communications), GPRS (General Packet Radio Service), CDMA (Code Division Multiple Access), AMPS (Advanced Mobile Phone System), EV-DO (Evolution-Data Optimized), EDGE (Enhanced Data Rates for GSM Evolution), 3GSM (UMTS—Universal Mobile Telecommunications System, e.g. ITU IMT-2000), DECT (Digital Enhanced Cordless Telecommunications), IS-136/TDMA (Digital AMPS),           iDEN (Integrated Digital Enhanced Network). 
         [0029]    In one embodiment of the invention the telephone network is a satellite telephone network. 
         [0030]    As used herein, “telecommunication channel”, or “data transfer channel” is a means of electronic data transfer (i.e. by electric or radio signals) having at least two end terminals adapted for data transfer between the units connected to them. Telecommunication channel has a predetermined structure and specifications of electric signals and functions in accordance with a physical level protocol, i.e. first-level protocol, according to the seven-level ISO/OSI model. Data transport in telecommunication channel is carried out according to existing protocols of channel, network, transport, session, representation, and applied levels in seven-level ISO/OSI model (see e.g. ISO/IEC 7498-1:1994 and ITU-T Recommendation X.200, 1994). 
         [0031]    Data transfer units can be telephone networks or telecommunication channels functioning in accordance with other protocols of physical, channel, network, transport, session, representation, and/or applied levels, or unit elements, in accordance with methods and devices as per the present invention. 
         [0032]    In one embodiment of the invention the telecommunication channel uses a physical level protocol selected from the group consisting of V.92 (see ITU-T V.92), IRDA, USB, Firewire, EIA RS-232, EIA-422, EIA-423, RS-449, RS-485, DSL, ISDN, Ethernet (see IEEE 802.3 standards), SONET/SDH, GSM radio interface, Bluetooth, IEEE 802.1x Wi-Fi, Etherloop, MTP-1 (Message Transport Protocol), MTP-2, MTP-3. 
         [0033]    In a preferred embodiment of the invention the telecommunication channel uses a transport level protocol selected from the group consisting of Ethernet and ISDN. 
         [0034]    In one embodiment of the invention the telecommunication channel uses a transport level protocol selected from the group consisting of AEP (AppleTalk Echo Protocol), ATP (AppleTalk Transaction Protocol), CUDP (Cyclic UDP), DCCP (Datagram Congestion Control Protocol), FCIP (Fiber Channel over TCP/IP), FCP (Fiber Channel Protocol), IL (IL Protocol), iSCSI (Internet Small Computer System Interface), LCP (in PPP, Link Control Protocol), NBF (NetBIOS Frames protocol), NBP (Name Binding Protocol), RTMP (Routing Table Maintenance Protocol), SCSI (Small Computer System Interface), SCTP (Stream Control Transmission Protocol), SPX (Sequenced Packet Exchange), SST (Structured Stream Transport), TCP (Transmission Control Protocol), UDP (User Datagram Protocol), UDP Lite, SCTP (Stream Control Transmission Protocol), RSVP (Resource ReSerVation Protocol). 
         [0035]    In a preferred embodiment of the invention the telecommunication channel uses a transport level protocol selected from the group consisting of TCP and UDP. 
         [0036]    In one embodiment of the invention the telecommunication channel uses a channel level protocol selected from the group consisting of ATM (Asynchronous Transfer Mode), PPP (Point-to-Point Protocol, see e.g. IETF RFC 1661). 
         [0037]    In one embodiment of the invention the telecommunication channel uses a network level protocol selected from the group consisting of X.25 (see e.g. ITU-T Recommendation X.25). 
         [0038]    In one embodiment of the invention the telecommunication channel uses a telecommunication protocol selected from the group consisting of SS/7 (Signaling System #7, see e.g. ITU-T Recommendation Q.700), and ISDN (Integrated Services Digital Network), WiFi (see e.g. IEEE Standard 802.11). 
         [0039]    In one embodiment of the invention the telecommunication channel connecting the telephone network of the verifying party with the telephone network of the verified party functions according to a standard selected from the group consisting of Ethernet, WiFi (see e.g. IEEE Standard 802.11)           Bluetooth (see e.g. IEEE Standard 802.15), ATM (Asynchronous Transfer Mode), SS/7 (Signaling System #7; see e.g. ITU-T Recommendation Q.700), X.25 (see e.g. ITU-T Recommendation X.25), WiMAX (Worldwide Interoperability for Microwave Access, see e.g. IEEE Standards 802.16-802.16e), SCCP (Signalling Connection Control Part), DUP (Data User Part), B-ISUP (B-ISDN User Part), ISUP (ISDN User Part), TUP (Telephone User Part), TCAP (Transaction Capabilities Application Part), SSCOP (Service-Specific Connection Oriented Protocol), H.323, SIP (Session Initiat Protocol), BICC (Bearer Independent Call Control protocol), IS-41, IS-634, CAS, CS1, CS2, R2, CAMEL (Customized Applications for Mobile network Enhanced Logic), INAP (Intelligent Network Application Part), MAP (Mobile Application Part). 
         [0040]    In one embodiment of the invention the telecommunication channel uses TCP/IP (Transmission Control Protocol/Internet Protocol, see IETF RFC 1122). 
         [0041]    In one embodiment of the invention the telecommunication channel connecting the telephone network of the verifying party with the telephone network of the verified party uses a VoIP (Voice over Internet Protocol) protocol for data transport. 
         [0042]    In accordance with the invention, for digital data transmission between telephone networks via telecommunication channels, any suitable digital data transmission can be used—the ones mentioned above as well as the ones known to specialists in this area. 
         [0043]    As used herein, “the subscriber address” means a user&#39;s telephone number in a public switched telephone network (see Ray Horack, Webster&#39;s New World® Telecom Dictionary, Wiley Publishing, Inc., 2007, ISBN 978-0-471-77457-0). 
         [0044]    As used herein, “the clear-back signal’ means an electric signal normally used in a telephone network when a called party refuses to answer an incoming call (rejects a call signal) after or during receiving an incoming call signal. Thus, a clear-back signal herein does not include a disconnect signal, i.e. a clear-back signal of a caller and/or of a called party sent during a connection. 
         [0045]    As used herein, “the answer signal” means an electric signal normally used in a telephone network to inform a caller on a called party&#39;s agreement to answer an incoming call after or during receiving an incoming call signal. 
         [0046]    For detailed information on telephone network signal system see e.g. GOST (State Standard Specification) 23595-79. 
         [0047]    As used herein, “the caller information” in the context of sending the data about a caller by means of the subscriber device of the authorized person, means the set of data unambiguously corresponding to the subscriber address of the caller. 
         [0048]    In one embodiment of the invention the caller information is the subscriber address. 
         [0049]    In another implementation scheme the caller information is the Caller ID. 
         [0050]    In yet till another embodiment the subscriber device of the authorized party includes a means for displaying a predetermined pictogram and/or playing back a predetermined phonogram corresponding to the corresponding user&#39;s number or to the Caller ID of the caller. It enables the user to crate easy-to-remember identifiers in order to distinguish the calls of the verifying party from other calls. 
         [0051]    As used herein, “the subscriber device of the party verifying a transaction”, or “the verifying party subscriber device”, denotes a means for gaining access to a public telephone network providing for transformation of analog and/or digital signals of said network into digital signals compatible with a digital processing device, such as a computer. 
         [0052]    The verifying party subscriber device can be a modem. As a specialist will realize, the modem has to be of a type compatible with the telephone system that the verifying party subscriber device is connected to. So, one can use any number of GSM modems, WiFi modems, WiMax modems, 3G modems, 4G modems, satellite modems, radio modems, ADSL modems, ISDN modems, X.25 modems. 
         [0053]    As used herein, “the subscriber device of the party authorized to make a transaction”, or “the authorized party subscriber device”, denotes a mobile means for gaining access to a public telephone network. According to the invention the authorized party has at least the right to use said subscriber device. As a specialist will realize, the authorized party subscriber device has to be of a type compatible with the telephone network that it is connected to. The authorized party subscriber device is a telecommunication device selected from the group consisting of a mobile telephone, a cell telephone, a PDA (Personal Digital Assistant), and a personal computer equipped with a modem. 
         [0054]    According to the invention, the authorized party subscriber device can convey information about the caller and is capable of transmitting clear-back and answer signals. 
         [0055]    As used herein, “the data storage” means a totality of software and hardware for arranged storage, allocation and modification of data within data structures where each entry unambiguously corresponds to another entry. 
         [0056]    In other words, a data storage is a relation database or several interconnected relation databases, as well as means of access to these databases. Database access means includes hardware and software. The hardware includes at least one digital data medium with an electronic access interface and with at least one database present, as well as one or several means of automated digital processing connected to said medium via said interface and equipped with an arithmetic and logic unit. 
         [0057]    Data storage software includes at least one database management system (DBMS) providing for allocation, retrieval, and modification of data in said databases. Examples of existing DBMS are MS SQL Server, MySQL, Oracle DBMS, Firebird, Interbase, Sybase, PostgreSQL. 
         [0058]    Preferred means of automated digital processing is a database server or several database servers connected by telecommunication channels. The database server or several interacting database servers provide for functionality of said DBMS. 
         [0059]    Regardless of the large number of combinations of the above-mentioned means, i.e. specific schemes of database storage, the present invention includes only the functional combinations that are obvious to a specialist, that is one database or several interacting databases managed by one or several DBMS. Said databases are located on one/several digital data medium (media) which in turn is (are) connected to one or several means of automated digital processing. 
         [0060]    As used herein, “the reading device” means a device for transforming authorization factor recorded on a medium into electronic analog or digital form for subsequent transmission via the telecommunication channel. 
         [0061]    According to the invention, any reading device compatible with the authorization factor medium can be used, such as a magnetic card reader, a barcode scanner, and a radio-frequency identifier reader. 
         [0062]    Authorization factor medium can be any data medium, preferably a plastic card with a magnetic strip, a transponder, a plastic card with a microchip. The authorization factor medium can be a body part, such as a finger or an iris, the vocal tract (lips, mouth, tongue, throat, trachea, lungs), the brain (knowledge of token, digital combination, ID). 
         [0063]    As used herein, “identification factor of a party initiating a transaction”, or “authorization factor”, or “identifier of the party initiating a transaction”, or “identification data”, means any information identifying the person of the transaction initiator. 
         [0064]    The authorization factor can be for instance be a biometrical parameter such as a fingerprint, an iris pattern, hand geometry; digital identification means such as a number recorded on a plastic card with a magnetic strip, a letter/number combination (token), a radio-frequency identifier (RFID). 
         [0065]    Identification data can be recorded on a digital medium such as a card with a magnetic strip, a card with a microchip, a transponder, a digital optical disk, a barcode. Alternatively identification data are known to the transaction initiator and can be entered into the electronic environment by an input-output device such as a keyboard. 
         [0066]    According to the present invention clear-back and answer signals of the subscriber device in the automated switched telephone network are used as authorization factors. They make it possible to identify the party initiating a transaction as the party authorized to make a transaction. The invented authorization factor makes it possible to use for transaction verification just the signal traffic of the automated switched network and does not depend on the signal quality, telephone network capacity, user equipment and the equipment of the verifying party such as the capacity to form DTMF signals, to perform text message transmission, IVR message playback etc. The invented authorization factor does not require expensive connection traffic in the automated switched telephone network. The invented authorization factor simplifies and accelerates the authorization process by means of the subscriber device. It minimizes the possibility of the user&#39;s error typical for existing multi-stage authorization procedures. Technical simplicity of this solution makes it possible to accelerate, and to increase reliability of, authorization process by means of exclusion of connection delays and interruptions caused by data transmission errors in noisy telephone networks. 
         [0067]    The invented authorization factor can be used not only as a supplementary authorization factor but as the only authorization factor as well Implementation of the invented authorization factor as a supplementary authorization factor inter alia increases security of transactions connected with material value title transfers, and decreases the possibility of unauthorized transactions made by an unauthorized person. 
         [0068]    In its first aspect the present invention relates to a method for verification of the consent of the party authorized to make the transaction to the making of the transaction by the party initiating the transaction, comprising the following steps: 
         [0069]    (a) providing a subscriber device of the party verifying the transaction having a subscriber address, said device has a capability of transmitting a call signal, recognizing a clear-back signal, and recognizing an answer signal; 
         [0070]    (b) providing an automated switched telephone network with said subscriber device of the party verifying the transaction connected thereto; whereby said automated switched telephone network capable of transmiting the call signal, clear-back signal, answer signal, and a caller&#39;s address; 
         [0071]    (c) providing a subscriber device of the party authorized to make the transaction provided with a subscriber address and having a capability of receiving a call signal and a caller&#39;s subscriber address, and can send a clear-back signal, an answer signal, and transmit information about the caller; 
         [0072]    (d) providing a data storage comprising a predetermined (i) identifier of the party initiating the transaction, and (ii) an address of said subscriber device of the party authorized to make the transaction associated therewith; 
         [0073]    (e) receiving by the party verifying the transaction, of the information about the transaction including the identifier (i) of the party initiating the transaction; 
         [0074]    (f) determination by the party verifying the transaction, of the address of the subscriber device of the party authorized to make the transaction, by searching the database storage for the predetermined identifier (i) of the party initiating the transaction, which has to be identical to the identifier of the party initiating the transaction, and by determining the corresponding predetermined address (ii) of the subscriber device of the party authorized to make the transaction; and 
         [0075]    (g) initiating a call signal to the subscriber device of the party authorized to make the transaction by means of the subscriber device of the party verifying the transaction; 
         [0076]    wherein upon the recognition of an answer signal from the subscriber device of the party authorized to make the transaction, the verifying party identifies the party authorized to make the transaction as giving its consent to make the transaction, and upon the recognition of a clear-back signal from the subscriber device of the party authorized to make the transaction, the verifying party identifies the party authorized to make the transaction as refusing to make the transaction. 
         [0077]    In one embodiment, the identifier of the party initiating the transaction is a personal identification number, a login, a password, a bank card number, a radio-frequency identifier (RFID), or a biometrical parameter. 
         [0078]    In a preferred embodiment, the radio-frequency identifier is read from a transponder. 
         [0079]    In another preferred embodiment the automated switched telephone network includes at least one mobile telephone communication network. 
         [0080]    In a more preferred embodiment the mobile telephone communication network uses the GSM standard. 
         [0081]    In one embodiment of the present invention, after step (f) and before step (g) an additional message is sent to the subscriber device of the party authorized to make the transaction, the message being selected from the group consisting of a short message service (SMS) message, zero SMS, a multimedia message service (MMS) message, and a message of a bidirectional session transmission of unstructured supplementary service data (USSD); this message is sent through the subscriber device of said mobile telephone communication network which can receive and transmit said SMS, MMS, and USSD messages. 
         [0082]    In a preferred embodiment of the invention, the message contains information about the transaction such as the name of a party acting as the transaction effector, the transaction result, the date of transaction initiation, and/or the time of transaction initiation. 
         [0083]    In one embodiment of the invention, the message includes information about the transaction selected from the group consisting of transaction amount, account number, currency, account balance, transaction initiation time, transaction initiation date, transaction beneficiary&#39;s name and an electronic digital signature imprint. 
         [0084]    In one embodiment of the invention, the subscriber device of the party authorized to make the transaction is a telecommunication device selected from the group consisting of a mobile phone, a cell phone, a personal digital assistant (PDA), and a personal computer equipped with a mobile communication network modem. 
         [0085]    In one embodiment of the invention, the call initiated during step (g) is a voice call or a video call. 
         [0086]    In one embodiment of the invention, the identifier of the party initiating the transaction is read from a device selected from the group consisting of a magnetic card reader, a barcode scanner, and a radio-frequency identifier reader. 
         [0087]    In one embodiment of the invention, information on transactions also includes data selected from the group consisting of transaction amount, account number, currency, account balance, transaction initiation time, transaction initiation date, transaction beneficiary name, and electronic digital signature imprint. 
         [0088]    In one embodiment of the invention, the transaction result selected from the group consisting of a money payment, securities transfer, gaining access to private data, and registration on a web site. 
         [0089]    In one embodiment of the invention the subscriber device of the party authorized to make the transaction includes a means of conveying information about the caller selected from the group consisting of phonogram playback means, pictogram indication means, letter/number combination (token) indication means, and a combination of the above. 
         [0090]    In a preferred embodiment of the invention the device for conveying information about the caller is used for conveying a phonogram, a pictogram, and/or letter/number combination predetermined for the caller&#39;s address. This provides for informing the authorized party on the receipt of the verifying party&#39;s call requiring an answer. 
         [0091]    In a more preferred embodiment, the subscriber address from which the verifying party makes a call to the subscriber device of the authorized party corresponds to the predetermined transaction information. For example when an incoming call is made from number 555-5555, the mobile phone or a PDA can display a message “Payment of up to $100”, and when an incoming call is made from number 555-5556 a message “Payment of $500 to $800” is displayed. 
         [0092]    In its second aspect the present invention refers to an automated system for verification of the consent of the party authorized to make the transaction to the making of the transaction by the party initiating the transaction, comprising: 
         [0093]    (a) a first database, the first database arranged to be capable of accumulating of transaction data including identifier of the party initiating the transaction; 
         [0094]    (b) a data storage, the data storage includes said first database and at least one second database with predetermined interconnected identifier of the party initiating the transaction, and the subscriber address of a subscriber device of the party authorized to make the transaction; 
         [0095]    (c) at least one subscriber device of an automated switched telephone network, the subscriber device can establish connection with a subscriber device of the party authorized to make the transaction, can transmit the caller&#39;s subscriber address, and receive clear-back and answer signals, 
         [0096]    the subscriber address corresponds to a subscriber device of the party verifying the transaction, and the subscriber device of the party authorized to make the transaction can convey information about the caller and send a clear-back and an answer signal 
         [0097]    (d) at least one device for reading the identifier of the party initiating the transaction; and 
         [0098]    (e) a transaction digital processing device connected to a reader of the identifier of the party initiating the transaction, and including said data storage and said subscriber device of the automated switched telephone network, 
         [0099]    whereby said transaction digital processing device can by means of said data storage (b), accumulate transaction information in said first database (a), and can determine the subscriber address of the party authorized to make the transaction according to the identifier of the party initiating the transaction, and can by means of said subscriber device of the automated switched telephone network, initiate a connection with the subscriber device of the party authorized to make the transaction, can transmit the caller&#39;s subscriber address, and receive a clear-back and an answer signal; whereby the subscriber device of the party authorized to make the transaction can convey information about the caller and can send a clear-back and an answer signal. 
         [0100]    In one embodiment of the invention, at least one device for reading identifier of the party initiating the transaction is selected from the group consisting of a magnetic card reader, a barcode scanner, and a radio-frequency identifier reader. 
         [0101]    In one embodiment of the invention, the information about a transaction also includes data selected from the group consisting of transaction amount, account number, currency, account balance, transaction initiation time and electronic digital signature imprint. 
         [0102]    In one embodiment of the invention, the subscriber device of the party authorized to make the transaction has means to transmit information about the caller through a phonogram, a pictogram, and/or letter/number identifier (token) predetermined for the caller&#39;s address. 
         [0103]    In one embodiment of the invention the transaction digital processing device includes an arithmetic and logic unit with an input/output device. 
         [0104]    In a preferred embodiment of the invention the arithmetic and logic unit is a programmable logic integral scheme. 
         [0105]    In one embodiment of the invention the database is an electronic digital medium with an electronic input/output interface. 
         [0106]    In a preferred embodiment of the invention the electronic digital medium is selected from the group consisting of a hard-disk drive, a complementary metal-oxide semiconductor (CMOS) chip, and an electrically erasable programmable read-only memory (EEPROM) unit. 
         [0107]    In one embodiment of the invention the data storage is a software/hardware complex including a server and a database management system. 
         [0108]    According to a third aspect of the invention, there is provided a unit of the automated system for verification of the consent of the party authorized to make the transaction to the making of the transaction by the party initiating the transaction, which includes the following: 
         [0109]    (a) at least one device for transaction information input from the reader of the identifier of the party initiating the transaction; 
         [0110]    (b) at least one subscriber device of an automated switched telephone network which is capable of establishing a connection with a subscriber device of the party authorized to make the transaction, convey the caller&#39;s subscriber address, and receive a clear-back and an answer signal, 
         [0111]    whereby the subscriber address corresponds to the subscriber device of the party verifying the transaction, and the subscriber device of the party authorized to make the transaction can convey information about the caller, and send a clear-back and an answer signal; and 
         [0112]    (c) a control device for said at least one subscriber device connected to said at least one transaction information input device (a), and including at least one database containing the identifier of the party initiating the transaction and the corresponding registered identifier of the party authorized to make the transaction, the registered identifier of the party authorized to make the transaction and the corresponding subscriber address of the party authorized to make the transaction, transaction information including the identifier of the party initiating the transaction and the corresponding transaction status, 
         [0113]    whereby said control device for at least one subscriber device can enter into said at least one database, transaction information after the transaction information is received by said at least one transaction information input device and subsequent determination of the registered identifier of the party authorized to make the transaction according to the identifier of the party initiating the transaction, and of the subscriber address of the party authorized to make the transaction according to the registered identifier of the party authorized to make the transaction, can call the subscriber address of the party authorized to make the transaction, and can register the transaction status after receiving a clear-back or an answer signal. 
         [0114]    According to a fourth aspect of the invention, there is provided a unit of the automated system for verification of the consent of the party authorized to make the transaction to the making of the transaction by the party initiating the transaction, which includes the following: 
         [0115]    (a) at least one device for transaction information input from the reader of the identifier of the party initiating the transaction; 
         [0116]    (b) at least one subscriber device of an automated switched telephone network which can initiate a connection with the subscriber device of the party authorized to make the transaction, convey the caller&#39;s subscriber address, and receive a clear-back and an answer signal, 
         [0117]    whereby said subscriber device of the party authorized to make the transaction can convey information about the caller, and transmit a clear-back and an answer signal; 
         [0118]    (c) a data storage containing predetermined interconnected identifier of the party initiating the transaction, and the subscriber address of the subscriber device of the party authorized to make the transaction, whereby said data storage can accumulate transaction information including the identifier of the party initiating the transaction, and information on transaction verification result; 
         [0119]    (d) a data storage control device which can enter transaction information into said data storage (c) and retrieve from said data storage (c) the subscriber address of the subscriber device of the party authorized to make the transaction according to the identifier of the party initiating the transaction, and 
         [0120]    (e) a control device for said at least one subscriber device connected to said at least one transaction information input device (a), and the control device is so arranged that after receiving transaction information from said transaction information input device (a) it enters this information into said data storage (c), retrieves from said data storage (c) the subscriber address of the subscriber device of the party authorized to make the transaction, initiates a connection with the subscriber address of the party authorized to make the transaction by means of the subscriber device of an automated switched telephone network, and after receiving a clear-back signal it enters into the data storage information indicating a negative result of transaction verification, and after receiving an answer signal it enters into the data storage information indicating a positive result of transaction verification. 
         [0121]    In one embodiment of the invention the subscriber device of an automated switched telephone network is a GSE modem. 
         [0122]    In another embodiment the data storage is a server with a database, and the database storage control device is a database control system. 
         [0123]    According to a fifth aspect of the invention, there is provided a method of implementation of clear-back and answer signals in automated switched telephone networks as a transaction requirement which 
         [0124]    (a) providing a subscriber device of the party verifying the transaction, the subscriber device has a subscriber address and can initiate a call signal and recognize a clear-back and an answer signal; 
         [0125]    (b) providing an automated switched telephone network with the subscriber device of the party verifying the transaction connected thereto, whereby said automated switched telephone network can transmit call, clear-back, answer signals, and caller&#39;s address; 
         [0126]    (c) providing a subscriber device of the party authorized to make the transaction which has a subscriber address and can receive call signals and the caller&#39;s subscriber address, and send clear-back and answer signals; 
         [0127]    according to which upon recognition of an answer signal of the party authorized to make the transaction, the verifying party establishes the fact of meeting the transaction requirement, and on recognition of a clear-back signal from the subscriber device of the party authorized to make the transaction, the verifying party establishes the fact of a failure to meet the transaction requirement. 
         [0128]    In its sixth aspect the invention refers to a method of implementation of clear-back and answer signals in automated switched telephone networks as a factor of identification of the party initiating a transaction which 
         [0129]    (a) uses the subscriber device of the party verifying the transaction which has a subscriber address and can initiate a call signal and recognize a clear-back and an answer signal; 
         [0130]    (b) uses an automated switched telephone network with the subscriber device of the party verifying the transaction connected thereto, whereby said automated switched telephone network can transmit call, clear-back, answer signals, and caller&#39;s address; 
         [0131]    (c) uses the subscriber device of the party authorized to make the transaction which has a subscriber address and can receive call signals and a caller&#39;s subscriber address, and to send clear-back and answer signals; 
         [0132]    according to which on recognition of an answer signal of the party authorized to make the transaction, the verifying party identifies the party initiating the transaction as the party authorized to make the transaction, and on recognition of a clear-back signal from the subscriber device of the party authorized to make the transaction, the verifying party identifies the party initiating the transaction as a party not authorized to make the transaction. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0133]      FIG. 1  is a flow chart of one of the embodiments of the verification system according to the invention, with the use of a cell phone as a subscriber device of an authorized party. 
           [0134]      FIG. 2  is a flow chart illustrating embodiment of the invention for verification of transactions in which the medium with the initiating party&#39;s identifier is a plastic card with a magnetic strip. 
           [0135]      FIG. 3  is a flow chart illustrating embodiment of the invention for verification of transactions in which the initiating party is identified in electronic environment by means of an executable program within a “Bank-Client” system. 
           [0136]      FIG. 4  is a flow chart illustrating embodiment of the invention in the world-wide web to verify transactions the object of which is a fact of authorship of transaction initiator. 
           [0137]      FIG. 5  is a flow chart illustrating embodiment of the invention for verification of transactions having the requirement of transaction initiator&#39;s having rights to use a software product or to access information. 
           [0138]      FIG. 6  is a flow chart illustrating embodiment of the invention for verification of transactions having the requirement of transaction initiator&#39;s authorship in relation to an electronic document.  FIG. 6  illustrates the invention implementation both separately and in combination with an electronic signature. 
           [0139]      FIG. 7  is a flow chart illustrating embodiment of the invention for verification of transactions having the requirement of transaction initiator&#39;s having rights to perform an action relating to an automobile. 
           [0140]      FIG. 8  shows the algorithm of one of the embodiments. 
           [0141]      FIG. 9  graphically shows parties participating in a transaction using an example of one embodiment for the banking sector. 
       
    
    
     DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
       [0142]    The invention will now be illustrated by reference to the following example. 
       Example 1 
     Transaction Verification System 
       [0143]    As shown in  FIG. 1 , the transaction verification system includes reader device  2  and transaction digital processing device  4  sequentially connected by means of telecommunication channel  3 , database  7  connected to transaction digital processing device  4 , database server  8  connected to transaction digital processing device  4  by means of telecommunication channel  5 , database  13  connected to database server  8 , mobile communication network  10  connected to automated switched telephone network  11 , which in its turn by means of the verifying party&#39;s subscriber device (not shown), is connected to telephone server  12 , telephone server  12  is connected to database  8 . Transaction initiator  6  in order to work with the system uses user identifier  1  recorded on a medium, and mobile telephone  9  as the subscriber device of the party authorized to make the transaction. 
         [0144]    For the sake of simplicity in the present example the transaction initiator coincides with the authorized party, and is the owner of the subscriber device of the authorized party. 
         [0145]    User identifier  1  medium (not shown in  FIG. 1 ) is a card with a magnetic strip, a transponder, a key to an electronic lock, a radio-key (for instance, a car alarm system transmitter). 
         [0146]    User identifier  1  is inter alia a biometrical property of user  6  such as a fingerprint, an iris pattern etc., or a known to the transaction initiator  6  letter/number combination (token) such as a PIN, a login, or a password. 
         [0147]    Reader device  2  is inter alia an ATM (Automated Teller Machine), a POS terminal, a lock with an electronic key, a car anti-theft system, an express payment terminal, a biometrical identification device, or a letter/number or digital combination input device. Reader device  2  can be located in an area open for access by transaction initiator  6  for user identifier  1  input, and at any distance from other elements of the system, subject to maintaining the functionality of telecommunication channel  3 . 
         [0148]    Telecommunication channel  3  is one or several interconnected wire or wireless communication lines. 
         [0149]    Transaction digital processing device  4  is inter alia a personal computer, an industrial computer, or other computing device. Transaction digital processing device  4  can perform the following functions: 
         [0150]    (a) to receive user identifier  1  via telecommunication channel  3  from reader device  2 ; 
         [0151]    (b) to send a request to database  7  with the recognition of the identifier of the party authorized to make the transaction based on the identifier of the party initiating the transaction, i.e. on user identifier  1 ; 
         [0152]    (c) to transmit the user identifier of the party authorized to make the transaction via telecommunication channel  5  to database server  8 . 
         [0153]    Transaction digital processing device  4  can be located separately from database server  8 . In this case transaction digital processing device  4  is connected to database server  8  via telecommunication channel  5 . 
         [0154]    Telecommunication channel  5  is one or several wire or wireless communication line(s). Telecommunication channel  5  does not necessarily include Internet elements and/or other existing telecommunication networks. 
         [0155]    Database  7  includes data structures in which the identifier of the party initiating the transaction (i.e. user identifier  1 ) is unambiguously connected with the identifier of the party authorized to make the transaction. 
         [0156]    Database server  8  is a personal computer, an industrial computer, or other computing device. Database server  8  can perform the following functions: 
         [0157]    (a) to receive the identifier of the party authorized to make the transaction from transaction digital processing device  4  via telecommunication channel  5 ; 
         [0158]    (b) to send a request to database  13  with the recognition of the subscriber address of the party authorized to make the transaction based on the identifier of the party authorized to make the transaction; 
         [0159]    (c) to transmit the subscriber address of the party authorized to make the transaction to the subscriber device of the verifying party  12 . 
         [0160]    It is assumed that the received subscriber address corresponds to subscriber device  9  of transaction initiator  6 . 
         [0161]    Subscriber device  9  is a telecommunication device registered in mobile communication network  10  and is a mobile telephone, or a cell telephone, or a personal digital assistant, or a personal computer equipped with a subscriber device having a subscriber address in mobile communication network  10 . A mobile telephone can be directly accessed by transaction initiator  6 . 
         [0162]    Mobile communication network  10  is a cellular or a satellite communication network. 
         [0163]    Channel of switched telephone network  11  is a stationary telephone communication network or several such networks interconnected. 
         [0164]    Telephone server  12  is one or several modems, a personal computer with a Dialogic telephony card, an industrial computer with a Dialogic telephony card, an intellectual communication platform, or other telecommunication device which can perform the following functions: 
         [0165]    (a) to receive the subscriber address of the party authorized to make the transaction from database server  8 ; 
         [0166]    (b) to initiate an outgoing call to the received subscriber address via switched telephone network channel  11 ; 
         [0167]    (c) to wait for an answer to said call; 
         [0168]    (d) to disconnect immediately if the called user answers the call; 
         [0169]    (e) to transmit subscriber address and the result of said call to database server  8 . 
         [0170]    Database  13  includes data structures in which the identifier of the party authorized to make the transaction unambiguously corresponds to the subscriber address of the party authorized to make the transaction. 
         [0171]    Telephone server, database server  8 , and database  13  are located in the same information environment in order to provide for the security of the transactions made. 
         [0172]    A system shown in  FIG. 1  functions as follows. As illustrated in  FIG. 8 , transaction initiator  6  by means of reader device  2  enters the identifier of the party initiating the transaction (hereinafter “ID 1 ”). Reader device  2  transmits ID 1  to transaction digital processing device  4 . Transaction digital processing device  4  sends a request about ID 1  to database  7 . Database  7  transforms ID 1  into a pre-registered identifier of the party authorized to make the transaction (hereinafter “ID 2 ”), and transmits it to transaction digital processing device  4 . Transaction digital processing device  4  transmits ID 2  to database server  8 . Database server  8  sends a request about ID 2  to database  13 . Database  13  transforms ID 2  into the subscriber address of the party authorized to make the transaction (hereinafter MSISDN), and transmits it to database server  8 . Database server  8  transmits MSISDN to telephone server  12 . Telephone server  12  initiates a call to mobile phone  9  of user  6 . If user  6  rejects the incoming call from telephone server  12 , then telephone server  12  transmits the result to database server  8 . If user  6  accepts the incoming call from telephone server  12 , then telephone server  12  immediately terminates the initiated call and transmits the result to database server  8 . If the call is rejected by user  6 , then database server  8  sets the Success variable to “0”. If the call is accepted by user  6 , then database server  8  sets the Success variable to “1”. The database server sends a request about MSISDN to database  13 . Database  13  transforms MSISDN into ID 2  and transmits it to database server  8 . Database server  8  transmits ID 2  and the Success variable value to transaction digital processing device  4 . Transaction digital processing device  4  sends a request about ID 2  to database  7 . Database  7  transforms ID 2  into ID 1  and transmits it to transaction digital processing device  4 . Transaction digital processing device  4  sends ID 1  and the Success variable value to receiving device  2 . 
       Example 2 
     Implementation of the Transaction Verification System for Plastic Card Operations in the Banking Sector 
       [0173]    The scheme of the transaction verification system implemented for verification of operations with a plastic card as a medium for user identifier  1  is shown in  FIG. 9 . 
         [0174]    For the sake of simplicity it is assumed that the transaction initiator and the authorized party coincide. Transaction initiator  6  inserts a bank plastic card (a medium for user identifier  1 ) into the ATM (the reader device  2 ) located within the Merchant Area, enters the PIN and instructs the ATM to make a cash withdrawal from the transaction initiator&#39;s personal account. The ATM via telecommunication channel  3  transmits the card data to the bank processing center (transaction digital processing device  4 ) located in the Bank Area. Processing center  4  by means of database  7  determines ID 2  using received identifier of the transaction initiator  1 , and transmits ID 2  via telecommunication channel  5  to database server  8 . Database server  8  by means of database  13  using the received ID 2  determines the subscriber address of the transaction initiator MSISDN. Database server  8  instructs telephone server  12  to make an outgoing call to the subscriber device of transaction initiator  9 . Database server  8 , database  13 , and telephone server  12  are located in Verifying System area. Telephone server  12  with the help of the subscriber device (not shown) connected to a stationary telephone network calls the subscriber device of transaction initiator  9 . An automated switched telephone network is connected to mobile communication network  10 , to which the subscriber device of transaction initiator  9  is connected. The subscriber device of transaction initiator  6  should have the Caller ID service activated. The transaction initiator sees the number of the incoming call and realizes that the call is sent by the verifying party. By answering the incoming call transaction initiator  6  agrees to make the transaction; by rejecting the call (refusing to accept the call) the user prohibits the transaction. 
         [0175]    Thereby, to receive a reply from transaction initiator  6 , only the signal traffic of switched telephone network  11  is used, without any usage of a voice communication channel, and the confirmation or the refusal regarding the transaction is conveyed by the answer to the verifying party&#39;s call by the transaction initiator, or correspondingly, by the refusal to answer such a call. 
         [0176]    For a user to be able to identify 6 different types of authorization requests, database server  8  makes an outgoing call from different subscriber addresses. For example, for a request to make a transaction for the amount of up to 5,000.00 rubles the system makes an outgoing call to the telephone of the transaction initiator from the number +7(495)123-40-00, and for transaction for the amount of up to 15,000.00 rubles the call is made from the number +7(495)123-40-02. The transaction initiator for the sake of convenience can save these numbers in the telephone memory under easily identifiable names, e.g. “A payment of up to 5,000 rubles”, “A payment of up to 15,000 rubles” etc. If initiator  6  answers to the incoming call, then telephone server  12  immediately terminates this call. Following that telephone server  12  transmits to database server the status of the call made (whether or not user  6  with the corresponding MSISDN has answered the call). The result of the user&#39;s answer after the reverse transformation as shown in  FIG. 8  illustrating the system algorithm is transmitted to the processing center. The processing center based on the answer received from the subscriber device of transaction initiator  9  instructs the ATM whether to dispense or not, the cash requested by transaction initiator  6 . 
       Example 3 
       [0177]    As shown in  FIG. 2  the invented authorization factor can be used in addition to the authorization factor recorded on a credit or a debit bank card, when the transaction initiator withdraws cash from an ATM. 
       Example 4 
       [0178]    As shown in  FIG. 3  the invented authorization factor can be used by a small business company director to endorse the payment instructions for the company&#39;s account prepared by the accountant. 
       Example 5 
       [0179]    As shown in  FIG. 4  the invented authorization factor can be used to replace passwords for several WEB resources with one universal password with a mobile confirmation. 
       Example 6 
       [0180]    As shown in  FIG. 5  the invented authorization factor can be used to check whether a transaction initiator has the right to access any information systems, data storages, or any specific data within such storages. 
       Example 7 
       [0181]    As shown in  FIG. 6  the invented authorization factor can be used in addition to an electronic signature for remote endorsement of digital documents by the transaction initiator. 
       Example 8 
       [0182]    As shown in  FIG. 7  the invented authorization factor can be used to verify transactions resulting in switching on an electronically controlled mechanism, for example an electronic lock, a car control system, a computer power-on button, a safe equipped with an electronic lock, a VCR etc. 
         [0183]    It will be appreciated by persons skilled in the art that numerous variations and/or modifications may be made to the invention as shown in the specific embodiments without departing from the spirit or scope of the invention as broadly described. The present embodiments are, therefore, to be considered in all respects as illustrative and not restrictive.