Patent EA-001825-B1 (EA)
Title: Method and system for secure online transaction processing
Inventor: SIXTUS TIMOTHY
IPC: G06Q20/24
Filed: 1998-03-12
Abstract: 1. A method for executing a secure online transaction between a vendor computer and a user computer, the vendor computer and the user computer being interconnected to a computer network for data communications therebetween, the method comprising the steps of: a) the user computer transmitting a transaction request message to the vendor computer via the computer network, the financial transaction request comprising user identification data unique to the user computer; b) in response to receiving the transaction request, the vendor computer sending a transaction verification request to a trust server computer interconnected to the computer network, the transaction verification request comprising the user identification data and data indicative of the requested transaction; c) in response to receiving the transaction verification request, the trust server computer authenticating the user computer using the user identification data and communicating with the user computer for verification with the user identification data; and d) the trust server authorizing the transaction when the authenticating step has passed. 2. A method for executing a secure online transaction between a user computer and a vendor computer, the vendor computer and the user computer being interconnected to a computer network for data communications therebetween, the user computer having associated therewith a network address unique thereto at the time of the request; the method comprising the steps of: a) the user computer executing a transaction request, comprising the steps of i) generating a user authentication number as a first function of a user registration number unique to the user computer, time stamp data correlated to the time of the transaction request, and an internally stored user matrix unique to the user computer; ii) assigning a network protocol port number as a second function of the user registration number, the time stamp data, and the user matrix; iii) transmitting a transaction request message to the vendor computer via the computer network, the transaction request message comprising the user registration number, the time stamp data, first data indicative of the requested transaction, and the network address associated with the user computer; b) in response to receiving the transaction request message, the vendor computer sending a transaction verification request to a trust server computer interconnected to the computer network, the transaction verification request comprising (i) the user registration number, (ii) the time stamp data, (iii) second data indicative of the requested transaction, and (iv) the network address associated with the user computer; c) in response to receiving the transaction verification request from the vendor computer, the trust server computer authenticating the user computer by (i) calculating the user matrix by from an internal memory by utilizing the received user registration number to address the memory, (ii) generating a trust server authentication number as a first function of the received user registration number, the received time stamp data, and the calculated matrix; (iii) calculating an expected network protocol port number as a second function of the received user registration number, the received time stamp data, and the calculated user matrix, (iv) communicating via the computer network with the user computer by utilizing the user computer network address received from the vendor computer and the calculated expected network protocol port number, (v) obtaining from the user computer the user authentication number, (vi) comparing the obtained user authentication number with the generated trust server authentication number; and (vii) indicating that the user computer is authentic when the comparison step has passed, and indicating that the user computer is not authentic when the comparison step has failed. 3. The method of claim 2 in which: the first function for generating a user authentication number comprises the step of synthesizing a user matrix as a third function of the user matrix; and the first function for generating a trust server authentication number comprises the step of synthesizing a trust server user matrix as the third function of the calculated matrix. 4. The method of claim 3 in which: for generating a user authentication number utilizes the user registration number arid the time stamp data to extract the user authentication number from the synthesized user matrix; and for generating a trust server authentication number utilizes the user registration number and the time stamp data to extract the trust server authentication number from the synthesized trust server user matrix. 5. A method for executing a secure online transaction between a user computer and a vendor computer, the vendor computer and the user computer being interconnected to a computer network for data communications therebetween, the user computer having associated therewith a network address unique thereto at the time of the request; the method comprising the steps of: a) the user computer executing a transaction request, comprising the steps of i) generating a user authentication number as a first function of a user registration number unique to the user computer, and an internally stored user matrix unique to the user computer; ii) assigning a network protocol port number as a second function of the user registration number, and the user matrix; iii) transmitting a transaction request message to the vendor computer via the computer network, the transaction request message comprising the user registration number, first data indicative of the requested transaction, and the network address associated with the user computer; b) in response to receiving the transaction request message, the vendor computer sending a transaction verification request to a trust server computer interconnected to the computer network, the transaction verification request comprising (i) the user registration number, (ii) second data indicative of the requested transaction, and (iv) the network address associated with the user computer; c) in response to the transaction verification request from the vendor computer, the trust server computer authenticating the user computer by (i) calculating the user matrix from an internal memory by utilizing the received user registration number to address the memory, (ii) generating a trust server authentication number as a first function of the received user registration number, and the calculated matrix, (iii) calculating an expected network protocol port number as a second function of the received user registration number, and the calculated user matrix, (iv) communicating with the user computer by utilizing the user computer network address received from the vendor computer and the calculated expected network protocol port number, (v) obtaining from the user computer the user authentication number, (vi) comparing the obtained user authentication number with the generated trust server authentication number; and (vii) indicating that the user computer is authentic when the comparison step has passed, and indicating that the user computer is not authentic when the comparison step has failed. 6. The method of claim 5 in which: the first function for generating a user authentication number comprises the step of synthesizing a user matrix as a third function of the user matrix; and the first function for generating a trust server authentication number comprises the step of synthesizing a trust server user matrix as the third function of the calculated matrix. 7. The method of claim 6 in which: for generating a user authentication number utilizes the user registration number to extract the user authentication number from the synthesized user matrix; and for generating a trust server authentication number utilizes the user registration number to extract the trust server authentication number from the synthesized trust server user matrix. 8. The method of claim 5 wherein the user authentication number generated by the user computer is also a first function of time stamp data correlated to the time of the transaction request, the transaction request message transmitted by the user computer to the vendor computer also comprises the time stamp data, the transaction verification request sent by the vendor computer to the trust server computer also comprises the time stamp data, and the trust server authentication number generated by the trust server computer is also a first function of the received time stamp data. 9. The method of claim 5 wherein the network protocol port number assigned by the user computer as also a second function of time stamp data correlated to the time of the transaction request, the transaction request message transmitted by the user computer to the vendor computer also comprises the time stamp data, the transaction verification request sent by the vendor computer to the trust server also comprises the time stamp data, and the expected network protocol port number is calculated as a second function of the received time stamp data. 10. A method for executing a secure online transaction between a user computer and a vendor computer, the vendor computer and the user computer being interconnected to a computer network for data communications therebetween, the user computer having associated therewith a network address unique thereto at the time of the request; the method comprising the steps of: a) the user computer executing a transaction request, comprising the steps of i) generating a user authentication number as a first function of a user registration number unique to the user computer, and time stamp data correlated to the time of the transaction request; ii) assigning a network protocol port number as a second function of the user registration number, and the time stamp data; iii) transmitting a transaction request message to the vendor computer via the computer net