Source: http://www.google.com/patents/US20060106734?ie=ISO-8859-1
Timestamp: 2014-12-27 03:05:37
Document Index: 486878682

Matched Legal Cases: ['arty 28', 'arty 28', 'arty 28', 'arty 28', 'arty 28', 'arty 28', 'arty 28', 'arty 28', 'arty 28']

Patent US20060106734 - System and method for processing tokenless biometric electronic ... - Google PatentsSearch Images Maps Play YouTube News Gmail Drive More »Sign inAdvanced Patent SearchPatentsHerein is described a tokenless biometric method for processing electronic transmissions, using at least one user biometric sample, an electronic identicator and an electronic rule module clearinghouse. The steps for processing of the electronic transmissions comprise of a user registration step, wherein...http://www.google.com/patents/US20060106734?utm_source=gb-gplus-sharePatent US20060106734 - System and method for processing tokenless biometric electronic transmissions using an electronic rule module clearinghouseAdvanced Patent SearchPublication numberUS20060106734 A1Publication typeApplicationApplication numberUS 11/321,138Publication dateMay 18, 2006Filing dateDec 28, 2005Priority dateNov 28, 1994Also published asCA2384416A1, CA2384416C, CA2749181A1, CA2749232A1, EP1214678A1, EP1214678A4, US7606401, US7613659, US7620605, US8260716, US8463710, US20050144133, US20050289058, US20120330838, WO2001020531A1Publication number11321138, 321138, US 2006/0106734 A1, US 2006/106734 A1, US 20060106734 A1, US 20060106734A1, US 2006106734 A1, US 2006106734A1, US-A1-20060106734, US-A1-2006106734, US2006/0106734A1, US2006/106734A1, US20060106734 A1, US20060106734A1, US2006106734 A1, US2006106734A1InventorsNed Hoffman, Philip LapsleyOriginal AssigneeNed Hoffman, Lapsley Philip DExport CitationBiBTeX, EndNote, RefManPatent Citations (15), Non-Patent Citations (3), Referenced by (26), Classifications (52), Legal Events (4) External Links: USPTO, USPTO Assignment, EspacenetSystem and method for processing tokenless biometric electronic transmissions using an electronic rule module clearinghouseUS 20060106734 A1Abstract Herein is described a tokenless biometric method for processing electronic transmissions, using at least one user biometric sample, an electronic identicator and an electronic rule module clearinghouse. The steps for processing of the electronic transmissions comprise of a user registration step, wherein a user registers with an electronic identicator at least one registration biometric sample taken directly from the person of the user. A formation of a rule module customized to the user in a rule module clearinghouse, wherein at least one pattern data of a user is associated with at least one execution command of the user. A user identification step, wherein the electronic identicator compares a bid biometric sample taken directly from the person of the user with at least one previously registered biometric sample for producing either a successful or failed identification of the user. In a command execution step, upon successful identification of the user, at least one previously designated rule module of the user is invoked to execute at least one electronic transmission. The above-mentioned steps are conducted in a manner wherein a biometrically authorized electronic transmission is conducted without the user presenting any personalized man-made memory tokens such as smartcards, or magnetic swipe cards. Images(9) Claims(28)
DETAILED DESCRIPTION The invention provides a tokenless biometric method and system for authorizing and executing electronic transmissions using a data processing center (DPC) 10, that has an Electronic Identicator (Identicator) 12 and an electronic Rule Module Clearinghouse (Clearinghouse) 14. The user forwards their biometric samples to the data processing center via biometric input apparatus (BIA) 16. Electronic transmissions of data, including the transmission of the biometric samples from the BIA to the DPC optionally occurs over an intranet 58, extranet or the Internet 18, whether using a local area network (LAN) or wide area network (WAN). It is the essence of this invention that the user not present any man-made personalized tokens during an identification process in order for an electronic transmission to be authorized. Such tokens include smart cards, magnetic swipe cards, or personal computers with resident user customized data. Tokenless biometric electronic transmissions are characterized by identifying the user with the user's bid biometric sample 62 submitted through a stand alone BIA 16 which is directly connected via dial-up, leased lines or wireless modem 56 to the Internet 18, or through a BIA 16 incorporated to any client terminal such as a desktop personal computer, a notebook computer, a thin-client, or other public terminal or kiosk 60 such as an Automated Teller Machine (ATM). In a preferred embodiment, the user is identified through biometrics while third-party databases 28 which are accessed to complete the electronic transmission are identified through the verification of a digital certificate issued by an authorized certifying authority. Execution of a Rule Module (RM) 50 or an Execution Command (EC) 52 by the Execution Module (EM) 38 may result in a declined transmission due to lack of an identifiable third-party 28, a closed or inoperative third-party database 28, or some other immediately detectable problem condition. If the transmission is declined, the Clearinghouse 14 or the Identicator 12 transmits the decline notification back to the BIA. In one embodiment, the BIA 16 is actually built-in and/or integrated with a personal computer, although the invention does not require that the personal computer contain any resident user customized data, such as Pattern Data (PD) 54, Execution Commands 52 or private encryption keys. In another embodiment, the third-party is a representative of a business entity or an actual business entity itself that has authorized the user to utilize the third-party databases 28 for data access, data processing or data presentation to complete the electronic transmission. An electronic transmission is any transmission that allows for access of electronic data, processing of electronic data, or presentation of any electronic data. Such electronic transmissions may take many forms, including a user customized electronic request for access to stored database content, an electronic request to personalize data using a digital certificate, or an electronic request to present or display data in a customized format. In sum, an electronic transmission is the accessing, processing, or presentation of any electronic data or content which does not in and of itself constitute or execute either an electronic financial transaction wherein the exchange or alteration of any financial assets occurs, nor an automated door lock or an automated physical site access mechanism. Examples of electronic accessing of data include accessing databases with content or text, access to web sites, web site chat rooms, Internet educational courses, Internet games or game arcades, Internet examinations or tests, medical or health data, and Internet software. Other such data access includes other databases that require membership such as extent of insurance coverage, airline frequent flier rules, health club membership privileges, concert seats, movie rentals, check verification, and electronic voting. Examples of electronic processing of data include, intelligent search of the Internet 18 to locate information (Pull Data), such as the retrieval of investment data and news regarding a specific company, the retrieval medical news about a specific topic, the retrieval of price quotes for services or products, the retrieval of mathematical spreadsheets, emails, visual or graphic images, audible content, software code, computer software programs, Internet web sites, electronic instant messaging, and the like. Pattern Data (PD) 54, as used herein, is any data or information which is customized to a particular user (�user customized�). Such Pattern Data includes user customized demographic information, user customized Internet search or browsing preferences, user customized purchasing patterns, and the like. It should be noted that user customized is different from user-unique. Electronic data or electronic transmissions which are customized to a user, or �user customized�, have been customized by or for a user, but may not necessarily be unique to that user. Therefore, user customized data which applies to one user may also apply identically to another user. However, electronic data or electronic transmissions which are unique to a user, or �user-unique�, are distinctive and without equal, and hence are exclusive to that particular user. An Execution Command (EC) 52, as used herein, is any computer software command which is associated with at least one Pattern Data 54. As shown in FIG. 5, a Rule Module (RM) 50, as used herein, is any conditional association between at least one Pattern Data 54 and at least one Execution Command, whereby if a Pattern Data 54 is invoked by a user, at least that one associated Execution Command 52 is in turn invoked by that Pattern Data 54 in order to execute at least one electronic transmission. The Clearinghouse 14 is a database or registry of at least one Pattern Data 54 and at least one Execution Command 52 together forming at least one Rule Module (RM) 50, and has the capability to delete, add or edit associations between any Pattern Data 54 and any Execution Command to delete, add, edit, or invoke any Rule Module 50 in order to execute an electronic transmission. The system used for identifying the user by their bid and registration biometric samples comprises the following components: Biometric Input Appartus (�BIA�) Communication lines Electronic Identicator Server (�Identicator�) These components together allow a user to access, process or present an electronic transmission without the user being required to present any man-made memory token such as plastic or paper cards, or a personal computer with resident user customized data. Biometric Input Apparatus (BIA) The BIA 16 is a device that gathers biometric samples from users. Each BIA 16 conducts one or more of the following operations: gather biometric input or sample directly from the person of a user gather a PIC code or password from a user secure communication between BIA 16 and DPC 10 using encryption secure storage of secret encryption keys store and retrieve a unique BIA hardware identification code secure enclosure & components from unauthorized tampering present or display electronic messages and allows users to either view or hear an electronic transmission message scan a magnetic stripe card allow parties to select and edit electronic transmissions. Biometric input is gathered using a biometric sensor 10 located within BIA 16. Biometric sensor 10 is a finger image sensor, however it is understood that other types of biometric sensors such as iris scan, voice print, retinal scan, facial scan and others are may be used. For BIAs requiring a fingerprint sensor, the BIA 16 has a biometric fraud detection mechanism (not shown) that will assure that any biometric input gathered from the biometric sensor is from a real physical person, instead of a copy or replica. Preferably for the finger image sensor, this is a blood flow detector. For systems employing a personal identification code (PIC), the PIC is gathered using a keypad or PIC pad 8 that is preferably located securely inside the BIA. Communication security is provided by encryption using unique secret keys known only to that specific BIA 16 and the DPC, and the DES encryption algorithm, preferably triple-encrypted. Triple encryption means successive encrypt/decrypt/encrypt operations using two distinct 56-bit DES keys. This provides significantly higher security than a single encryption operation with one 56-bit DES key. Alternately, a public/private key system may also be used to encrypt information that passes between BIA 16 and DPC. Both DES and public key encryption is well known in the industry. The BIA 16 also has secure memory that can store and retrieve the unique secret encryption keys used to enable secure communications with the DPC. In this embodiment, this is battery backed-up RAM that is set up to be erased whenever the tamper-detect circuitry reports that tampering has been detected. To use encryption keys, a key management system must be employed to assure that both sender and receiver are using the same key. When using DES, a preferred key management system is DUKPT, which is well known in the industry. DUKPT is designed to provide a different DES key for each transmission, without leaving behind the trace of the initial secret key. The implications of this are that even successful capture and dissection of a BIA 16 will not reveal messages that have previously been sent, a very important goal when the effective lifetime of the information transmitted is years. DUKPT is fully specified in ANSI X9.24. The DUKPT key table is stored in the secure memory. Each BIA 16 preferably has a hardware identification code that is registered with the Identicator 12 at the time of manufacture. This makes the BIA 16 uniquely identifiable to the Identicator 12 in all transmissions from that BIA 16. The BIA hardware identification code is preferably stored in write-once memory. BIA physical security is assured by standard mechanisms. Preferably, these comprise tamper-detect circuitry, an enclosure that cannot be easily opened without visibly injuring the enclosure, erasable memory for critical secrets such as encryption keys, write-once memory for hardware identification, tight integration of all components, and �potting� of exposed circuitry. Information such as the content of a transmission, the identity of a user, or other transmission-related information is displayed using an integrated LCD screen 6. It is preferable that the LCD screen be connected securely to the other components in the BIA 16 to maintain security. Approval or cancellation of a transmission is done using the BIA 16 keypad. A magnetic stripe reader 20 is optionally used to read any information that is encoded on the magnetic stripe of a card. This is preferably used during initial registration of the user for efficient gathering of a user's registration with the DPC. Optionally, the BIA 16 also validates public key digital certificates. In one embodiment, public keys of a particular certifying authority are initially stored in the BIA 16 at the time of construction. Although a preferred embodiment is described above, there are many different variations on specific BIA 16 implementations. Fundamentally any device that is secure, that can gather a biometric sample, and that can connect to the Identicator 12 via some form of communication line 18 can function as a BIA. The BIA hardware identification code is not used to identify the user. However, once a user is identified by their biometric, the BIA hardware identification code optionally functions as Pattern Data 54 to invoke certain access, processing, or display commands in the Clearinghouse. It should be noted that a BIA 16 machine is any device that reads or scans a biometric sample 62 of a user. Example devices which incorporate a BIA 16 include wireless pagers, cellular and standard telephones, on-line network computer terminals, on-line exercise machines that are connected to and can be accessed through a communications network, on-line electronic books which can download electronic text from an Internet site, on-line automated teller machines that are connected to a communications network such as the Internet, on-line vending machines that are connected to the Internet 18 or an Intranet 58, on-line information terminals or public kiosks at airports which are connected to a communications network such as the Internet, on-line personal digital assistants such as Palm Pilots�, on-line photocopy machines that are either connected to a communications network such as the Internet 18 or an Intranet, automobile embedded Internet-connected appliances which download preferred radio stations, seat and temperature adjustments, and the like, household appliances such as refrigerators, microwaves, and the like that are connected to a communications network such as the Internet, home entertainment appliances including on-line television devices such as WebTV�, and compact disc audio systems and the like, which are connected to communications networks such as the Internet, along with their respective remote controls. Registration As shown in FIG. 2, a user typically registers at least one biometric sample 62 with the Identicator 12 via a BIA 16 device. Any user-unique biometric sample 62 can be registered including a fingerprint, a facial scan, a retinal image, an iris scan, or a voice print. Biometric samples gathered during the registration step are stored at the data processing center (DPC) 10. At the time of registration of users, each user is assigned a User ID Code that is unique and exclusive to each user. The User ID Code is automatically generated by the DPC 10 to validate that a user's bid biometric sample 62 has matched with that user's stored biometric sample. The User ID Code is not known to the user. Further, the User ID Code is different from the Personal Identification Code (PIC) of the user. The user's Personal Identification Code is known to the user, and it is optionally presented to the Identicator 12 by the user during the identification process to increase the security and efficiency of the DPC's biometric matches. The user optionally registers user customized data with the Clearinghouse 14 by the user. Examples of optional user customized data include Pattern Data 54, an Execution Command 52 (EC), or a Rule Module 50 (RM). A Rule Module 50 comprises at least one Pattern Data 54 which is associated with at least one Execution Command. These data are stored in the Clearinghouse 14 and are optionally registered by the user, by the Clearinghouse 14, by an authorized third-party 28, or any combination of the above named parties. Authorized third-parties 28 optionally register identification credentials with the Identicator 12, in order to enable the Identicator 12 to authenticate to a specific user that their electronic transmission has been correctly executed by the intended third-party. Examples of authorized third-party execution of electronic transmissions include accessing data in third-party 28 databases or servers, processing data by third-party databases 28 or servers, presenting or displaying data to the user by a third-party database 28, or processing of data by the DPC 10. If the third-party is a person, the user may register a biometric with the Identicator 12. If the third-party is an entity, such as a corporation, it may register a digital certificate with the Identicator 12. Third-party digital certificates are available from certifying authorities, and they provide the assurance that the entity with the certificate is the authentic owner of that identity. These certificates contain readable text and other information that describes the entity. These certificates include corporate logos, a corporate address, as well as the company name. BIA hardware identification codes are unique numbers assigned to BIA 16 devices at the time of manufacture. If an entity, such as a company, wishes all user customized transmissions issuing from a given BIA 16 to be communicated to a particular intranet, the company registers any such BIAs with the Identicator 12, which updates the BIA 16 device records. Preferably, the security surrounding the registration of an entity's digital certificates or of the BIA hardware identification codes with the Identicator 12 is extremely strong, as this is a potential source for large losses over a short period of time. A user registers with the Identicator 12, and at least one Pattern Data 54 which include a biometric sample 62, a biometric-PIC association, or any other registration data such as the user's demographics. To register, a user submits a registration biometric sample 62 provided by their physical person to the BIA. The BIA 16 determines that the biometric scan is non-fraudulent, and translates and compresses that biometric scan into a format suitable for rapid transmission to the Identicator 12. In a preferred embodiment, the user enters a PIC code into the BIA 16 keypad. The BIA 16 transmits the registration data and identification data to the Identicator 12. The Identicator 12 inserts the biometric (or biometric-PIC) into the appropriate Identicator 12 database and generates a User ID Code that is unique to the user. From this point on, any time the user is identified by the Identicator 12, the user's User ID Code is forwarded to the Clearinghouse 14 and it invokes at least one Rule Module customized to that user. In the Clearinghouse 14 database, a Rule Module is created that is identified by the user's User ID Code. This enables the person to originate electronic transmissions. In one embodiment, the Identicator 12 automatically assigns a new user customized Clearinghouse 14 sub-database to a person's biometric biometric-PIC, or User ID Code. In one embodiment, there is a re-registration check step, wherein the user's registration biometric sample 62 is compared against previously registered biometric samples wherein if a match occurs, the computer system is alerted to the fact that the user is attempting or has re-registered with the Identicator. In another embodiment where a PIC is used for identification purposes as shown in FIG. 6, a biometric theft resolution step is preferably employed, to change a user's PIC when it is determined that a user's biometric sample 62 has been fraudulently used or duplicated. Subordinated User Registration In this embodiment, a user registers with the DPC 10 as a primary user. This means that the primary user may restrict, modify, or otherwise control a subordinated user's electronic transmissions to access, process or present electronic data and electronic content stored on various third-party 28 Execution Modules 38 or third-party 28 databases. This may be desired, for example, when the primary user is a parent who wishes to influence or govern the on-line browsing activity of their minor child, who as the subordinated user is permitted access to certain desirable electronic databases while being denied access to undesirable electronic databases. In this embodiment of the invention, the primary user registers with the DPC 10 their biometric sample 62 along with the subordinated user's biometric sample 62. Separate and unique User ID Codes are issued by the Identicator for the primary user and the subordinated user, respectively. Once the subordinated user logs onto a network and is identified by the Identicator, the subordinated user's User ID Code is forwarded to the Clearinghouse 14 to identify the subordinated user's customized Rule Modules 50. As shown in FIG. 4, in a Rule Module 50 designated for the subordinated user, a Pattern Data 54 is constructed indicating that the user is in fact a subordinated user, and the associated Execution Command 52 dictates that the subordinated user's access limits, restrictions and priorities must be governed by Rule Modules 50 of the primary user. In one embodiment, a subordinated user is prohibited by the primary user's Rule Modules 50 from purchasing cigarettes and alcohol, or from accessing R-rated films being shown in theatres. If the primary user's Rule Modules 50 are silent with respect to any particular subordinated user's requested electronic transmission, the subordinated user's relevant Rule Modules 50 will govern that electronic transmission and permit the electronic transmission to proceed unimpeded. In a different embodiment, a subordinate user may in turn have another subordinated user. Because a user's biometric is used for identification purposes, even if a subordinated user attempts to re-register with the DPC 10 under a different name, a search of previous registration biometric samples will show that the registrant has in fact previously registered with the DPC 10 and is a subordinated user. Communication Lines Communications between the BIA 16 and the Identicator occur via many different communication methods. Most depend on the particular communication networks already deployed by the organization or retailer that deploys the transmission authorization system. In an embodiment the BIAs 16 are connected via Ethernet to a local router, which is itself connected to a network operations center (NOC) via frame relay lines. At least one Identicator 12 is located at the NOC. Messages are sent from BIA 16 to the Identicator using TCP/IP over this network. In another embodiment, the BIAs 16 are connected via a cellular digital packet data (CDPD) modem to a CDPD provider, who provides TCP/IP connectivity from the BIA 16 to an intranet 58 to which at least one Identicator 12 is attached. In yet another embodiment, a BIA 16 is connected via the Internet, as is at least one Identicator. TCP/IP is used to transmit messages from BIA 16 to Identicator. There are many different ways to connect BIA 16 to Identicator, both tethered and wireless, that are well understood in the industry, including but not limited to: the Internet; an intranet; an extranet; a local area network (�LAN�); and a wide area network (�WAN�). Data Processing Center The Data Processing Center (DPC) 10 is comprised of an Electronic Identicator 12, a Rule Modules Clearinghouse 14, an internal Execution Module 38, a Firewall 40, a Decryption Module 22, a Gateway Machine 26, and a Logging Facility 42. Electronic Identicator The Electronic Identicator 12 (Identicator) serves to identify the user in an electronic transmission. The Identicator compares a user's bid biometric sample 62 with previously stored biometric samples from registered users, in order to identify the user. If a bid biometric sample 62 is successfully matched against a registered biometric sample, and the user is positively identified, the User ID Code which had been assigned to the user during initial registration will be forwarded to the Clearinghouse 14. The User ID Code transmitted by the Identicator 12 is used by the Clearinghouse 14 to locate the Rule Modules 50 that are customized to that user. As seen in FIG. 1, the Identicator 12 is connected to the Internet 18 or intranet 58 using a firewall machine 40. Messages are sent to a Gateway machine 26, which is responsible for overseeing the steps required to process the transmission, including forwarding the transmission to the Identicator 12 and the Clearinghouse 14. Preferably, electronic messages transmitted between the BIA 16 and the DPC 10 are encrypted. For this, the transmission processor uses the Decryption Module (DM) 22, which utilizes the hardware identification code of the BIA 16 to identify the encryption codes that is required to decrypt messages from the BIA. Once decrypted, the identity of the user is determined using Identicator 12, which provides storage, retrieval and comparison of biometric samples 24. In an embodiment, during the user identification step, the Identicator requests the user to submit their PIC, and this PIC is used by the Identicator in combination with the user's bid biometric sample 62 for purposes of validating the identity of the user. In another embodiment, the Identicator 12 provides periodic user re-identification queries. In this embodiment, in order for a user to extend an on-line session, the user is requested by the Identicator to re-identify themselves using any of the following: a user bid biometric sample 62 or Pattern Data 54, such as a personal identification code (�PIC�). In another embodiment, a third-party recipient of an electronic transmission is also identified by the Identicator using any of the following electronic verification means: a third-party ID Code, a digital certificate, an Internet protocol (�IP�) address, a biometric, a hardware identification number, or any other code, text or number that uniquely identifies the third-party. In this way, the Identicator is enabled to provide the user with confirmation that the correct third-party received the electronic transmission. Examples include confirming that the correct web site or remote database was accessed by the user, that the correct third-party designee received the user's email or instant message, and the like. In another embodiment, the Identicator 12 module is integrated with the Clearinghouse 14 (Clearinghouse) module. In a preferred embodiment, more than one Identicator provides fault tolerance from either natural or man-made disasters. In this embodiment, each Identicator uses a backup power generator, redundant hardware, mirrored databases, and other standard fault tolerant equipment known in the industry. Identification of the third-party and the user occurs using different methods, depending on the identification information that is provided by the BIA. The Identicator has subsystems for each type of information that is received by the Identicator, and each subsystem is highly optimized to provide rapid identification as outlined below. In a preferred embodiment, Identicator 12 comprises subsystems that can identify parties from the following information: biometric data and personal identification code (PIC) biometric data alone digital identification (digital certificates) BIA hardware identification code Biometric Identification Subsystem (BID) In one embodiment of the Identicator, the BID subsystem comprises at least two BID processors, each of which is capable of identifying users only from their biometric sample. In one embodiment, each BID processor contains the entire database of biometrics. To distribute the transmissions evenly across processors without undue effort, the Identicator determines randomly which BID processor will be used for a given electronic transmission, and delegates the identification request to that BID processor. That BID processor performs a search of its biometric sample database in order to find a matching registered biometric sample. In another embodiment, other information is present that assists the BID processor in searching the database. For finger images, this includes information such as the classification of the image (whirl, arch, etc.), and other information about the finger ridge structure that is useful for selecting out biometrics that are not likely to match (or information on biometrics that are likely to match). Such biometric-based sorting and classification systems using mathematical algorithms, are known in the art for fingerprints and for other biometrics such as retina of the eye, voice print, and face vascular patterns. Biometric comparisons are often more accurate if multiple biometrics are used. This includes the same type of biometrics from an individual such as fingerprint samples from different fingers, or different types of biometric samples such as a finger print and a voice print. In some embodiments, multiple biometrics are used to more rapidly and more accurately identify individuals. Biometric-PIC Identification Subsystem (BPID) As shown in FIG. 6, in a preferred embodiment, the BPID subsystem comprises at least two BPID processors, each of which is capable of identifying parties from their biometric and personal identification codes. Preferably, the database of parties identifiable from biometric-PIC combinations is distributed equally across all BPID processors. Each processor is responsible for a subset of identifications. The Identicator determines which Biometric-PIC from the BPID subsystem 30 is responsible for a given subdivision of the biometric database. In one embodiment, one BPID 32 is responsible for identifying people with PICs 1-10, another BPID 34 is responsible for identifying PICs 11-20, and a third BPID 36 is responsible for identifying PICs 21-30. For example, all messages from the BIA 16 containing a PIC that equals the number 30 would be routed to BPID 36 for identification of the user. Once a BPID processor receives a bid biometric sample 62 and PIC for identification, the processor searches through its database, retrieving all registered biometric samples that match or correspond to that particular bid PIC. Once all corresponding registered biometric samples are retrieved, the Identicator 12 compares the bid biometric samples obtained from the electronic transmission to all retrieved registered biometric samples. If a match occurs, the Identicator transmits the identity of the user or the User ID Code to the Clearinghouse 14. If no match is found, the Identicator transmits a �not identified� message back to gateway machine 26 and to the logging facility 42. Digital Identification Subsystem In a preferred embodiment, the Digital Identification subsystem comprises multiple processors, each of which is capable of identifying a third-party from their digital certificates. In this embodiment, digital certificates are used to perform digital identification of a third-party. Preferably, these include corporate web site addresses and certifying authorities only. Where possible, computers provide digital certificates for identification of the computer and users use their biometrics for identification of the user. Verifying that a particular digital certificate is valid requires a public key from the certifying authority that issued that particular digital certificate. This requires that the digital identification subsystem have a list of certifying authorities and the public keys used to validate the digital certificates they issue. This table must be secure, and the keys stored therein must be kept up to date. These processes and others relating to the actual process for validating digital certificates are well understood in the industry. BIA Hardware Identification Subsystem (BHI) In a preferred embodiment, BIA hardware identification codes are translated into third-party identification by the BHI subsystem. This subsystem maintains a list of all BIAs manufactured. Preferably, when a particular user uses a BIA, that user's geographic location is identified by their use of that particular BIA 16 during that electronic transmission session. In another embodiment, the BIA hardware identification code does not serve to identify either the user or a third-party. This is the case in BIAs installed in public venues such as airport terminals, Automated Teller Machines in banks, or computers with BIAs for home use. User ID Code A User ID Code is an electronic message transmitted to the Clearinghouse 14, which informs the Clearinghouse 14 that a user has been successfully identified, and instructs the Clearinghouse 14 to invoke the Rule Modules 50 for that particular user. Rule Modules Clearinghouse In a preferred embodiment, once the user is identified by the Identicator 12, the User ID Code is forwarded to the electronic Rule Module Clearinghouse (Clearinghouse) 14 The Clearinghouse 14 instructs the Execution Module 38 to take the necessary steps for executing the Execution Commands 52 that are associated with the Pattern Data 54 registered with the Clearinghouse 14. Rule Modules The Clearinghouse 14 is comprised of at least one Rule Module 50 which is indexed specifically to one or more registered users (hence, �user customized�). Therefore, the Rule Modules 50 are optionally not unique or exclusive to a single user. The Clearinghouse 14 functions as a central storage facility for registering, indexing, updating, and invoking various Rule Modules 50, and their software components, and to refine and improve execution of electronic transmissions according to user customized preferences and on-line activity patterns. Each of these Rule Modules 50 is composed of at least one Pattern Data 54 which is associated with or electronically linked to at least one Execution Command. As defined herein, user customizedity does not necessarily mean that any Pattern Data 54 or the Execution Command 52 is unique to a user, but rather that they are indexed to or are assigned to a specific user. As such, the same Pattern Data 54 or Execution Command 52 may be assigned to several specific users, and hence would not be unique to any one user. The Clearinghouse 14 optionally stores user customized Pattern Data 54 that is unassociated with any user customized Execution Commands 52 and optionally stores user customized Execution Commands 52 that are not associated with any user customized Pattern Data 54. Therefore, such unassociated Pattern Data 54 or Execution Commands 52 are optionally stored within the Clearinghouse 14 until they are associated with a Pattern Data 54 or an Execution Command 52 together thereby forming an executable Rule Module. Once the user is identified by the Identicator 12, the User ID Code is forwarded to the Clearinghouse 14. The Clearinghouse 14 takes the User ID Code, optionally along with the BIA hardware ID code, the BIA 16 location data and the electronic transmission request, and searches among the user's customized Rule Module to invoke all of the Pattern Data 54 relevant to the electronic transmission being undertaken. Pattern Data (PD) As previously noted, Pattern Data 54 may be provided by the user while the Execution Command 52 for that Pattern Data 54 is provided by the Clearinghouse 14 or an authorized third-party, or the Pattern Data 54 provided by the Clearinghouse 14 and the Execution Command 52 by an authorized third-party 28, to form a single Rule Module 50. Pattern Data 54 of a user is stored electronic data, which is customized to at least one user. A single Pattern Data 54 includes any of the following stored user customized electronic data: a personal identification code, which is optionally alpha-numeric; demographic information; an email address; a BIA hardware identification code; a financial account; the user's date of birth; a secondary biometric; a non-financial data repository account; a telephone number; a mailing address; purchasing patterns; data on pre-paid accounts or memberships for products or services; electronic data usage patterns; Internet browsing patterns; employee status; job title; pre-set data on a user's current activity patterns; a digital certificate; a network credential; an Internet protocol address; a digital signature; an encryption key; an instant messaging address; personal medical records; an electronic audio signature; and an electronic visual signature. Although a User ID Code is optionally used as Pattern Data 54, the User ID Code is unique to each user and is not shared between users. Any such Pattern Data 54 may be provided to the Clearinghouse 14 by: the user, the Clearinghouse 14, or an authorized third-party 28. Execution Commands (ECs) The Execution Commands 52 executed by the Execution Module 38 transmits electronic messages necessary for accessing, processing, or presentation of electronic data or content. Such transmissions include invoking a user's membership or eligibility for accessing insurance benefits (health, automobile, home, life, etc.), accessing travel service club benefits, accessing entertainment or travel event admittance, accessing electronic voting based on a user's place of residence, accessing electronic filing for taxes, and accessing privileges for permission to write paper checks or electronic checks. Additionally, these Execution Commands 52 include activation and invocation of a user's privileges for accessing, processing or displaying stored database content. Such content includes word-processing files, spreadsheet files, software code, graphics files, audio files, medical records; activation and invocation of a user's privileges for accessing, processing, or displaying on-line content-rich media, wherein such media includes, but is not limited to, Internet web sites, on-line audio or graphical content, electronic game content, on-line chat content, on-line messaging content, on-line educational content, on-line academic examination-taking, on-line personalized medical and health content, server-based computer software programs and hardware drivers. Any Execution Command 52 is invoked by any Pattern Data 54 with which it is associated. Execution Commands 52 are user customized instructions or commands which include Execution Commands 52 governing data access privileges, Execution Commands 52 governing data processing, Execution Commands 52 governing data display or presentation. As shown in FIG. 5, in one embodiment, a single Pattern Data 54 is associated with multiple Execution Commands 52, thereby forming multiple Rule Modules 50. Also shown in FIG. 5 is another embodiment, where multiple Pattern Data 54 are associated with a single Execution Command, again forming multiple Rule Modules 50. Also shown in FIG. 5, another embodiment there is only one Pattern Data 45 associated with one Execution Command 52. Any user customized Execution Command 52 may be provided to the Clearinghouse 14 by any of the following: the user, the Clearinghouse 14, or an authorized third-party. There are several embodiments of user customized Execution Commands 52 that govern access to electronic data such as web sites, web site content and databases. In one embodiment, an Execution Command 52 governing electronic transmissions for data access is a Universal Access Command (UAC) that is unique to the user. Each such Execution Command 52 is optionally invoked by the User ID Code serving as the Pattern Data 54. This Execution Command 52 is a software command that provides an authorized user access to any secured electronic data, such as those on third-party 28 databases. Invoking this Execution Command 52 enables the user to simultaneously access all Internet chat or messaging forums, web sites and on-line database content to which the user has authorization. In another embodiment, the third-party being 28 contacted by the user for data access is also identified by the Identicator using public/private key cryptography. Once the third-party is successfully identified by the Identicator, this invokes a Rule Module in the Clearinghouse which is unique to this third-party and which is used to confirms to the user that the correct third-party database was accessed. In another embodiment, the Universal Access Command is an Execution Command 52 that activates an on-line or Internet-connected device, such as a wireless pager, a wireless or tethered telephone, a network computer, an exercise machine that is connected to the Internet, an electronic book, an on-line public access Internet terminal, an automobile or household appliance that is connected to the Internet, an Internet-connected personal digital assistant such as a Palm Pilot�, an on-line photocopy machine, an Internet-connected digital audio player such as the Rio�. In such instances, the executed Rule Module renders the on-line or Internet connected device operational and permits the user that has gained access using their biometrics to conduct on-line activity to control or otherwise access the above mentioned Internet connected devices. For example, in one embodiment, an exercise machine incorporates a BIA 16 and is connected to the Internet. A user of the exercise machine enters their biometric sample, which is compared to registered biometric samples by the Identicator 12. Once the user is identified using their biometric samples, and the exercise device is identified using its hardware identification code, the Rule Module executes a command allowing the user to gain access to the exercise device. Optionally, additional Rule Modules 50 allow a user to save the details of their exercise activity (number of times, weight amount, date of exercise, etc.) on that exercise device as Pattern Data 54, in order to keep track of past performance and as a template for future exercise routines. In another embodiment, an Internet-connected electronic book that incorporates a BIA, is activated when the Identicator successfully identifies the user. This allows the user to download text and graphics of complete novels or films for which they have previously paid. In another embodiment, a personal digital assistant, such as the Palm Pilot�, incorporates a BIA. When activated after the Identicator has successfully identified the user, the personal digital assistant permits the user to download and take on-line academic examinations. In another embodiment, an Internet-connected digital audio player such as the Rio�, incorporates a BIA 16. When activated as a result of successfully identification of the user by the Identicator, the audio player permits the user to download music for which they have authorization. Optionally, additional Rule Modules can track how many pages of the electronic book have been displayed and can retain a bookmark for the most recently read page. Optionally, additional Rule Modules can track how many times a downloaded electronic audio track has been played. Upon the Identicator's successful identification of the user from their bid biometric, other embodiments of Execution Commands 52 governing electronic transmission access include permitting the user to access their health insurance account and validate their benefits to a health-care provider prior to being admitted to a hospital, to access their pre-paid entertainment account and validate to admittance personnel their eligibility to attend an entertainment event, such as a live music concert on a pre-prescribed day, at a pre-prescribed time and to sit in a pre-prescribed seat, to access their video club account and validate to a merchant their eligibility to rent videos under their pre-paid membership, to access their driver's license on-line and validate to an authority their eligibility to drive a car, to purchase restricted products like alcohol or tobacco, or to access a restricted entertainment event such as an R-rated film being shown in theatres, to access their credit rating account and validate to a cashier their eligibility for check-writing privileges, to access an Internet web site and enter a real-time chat room with other people on-line. Further embodiments of Execution Commands 52 governing electronic transmission access include entitling a user to extend an on-line user customized session by repeating their user customized session log-in by entering either their biometric or at least one of their user customized Pattern Data 54 when periodically queried to do so by the Identicator 12 or Clearinghouse 14, to access customized radio or television programming, wherein the user can be provided with customized programming, with or without time restrictions, that reflects pre-designated preferences, such as a channel broadcasting only news on companies in which the user has an investment or a channel broadcasting only music from Broadway theater shows which the user has seen or indicated a desire to see, to access restricted portions of corporate intranet 58 databases on a selective basis, based upon pre-designated Pattern Data 54, such as the user's job title or company division, to access their travel reservations and validate to the admittance attendant that the user is eligible to travel, such as boarding a particular flight or a specific train, on a pre-prescribed day, at a pre-prescribed time, and to sit in a pre-prescribed seat, to access on-line position �papers� of user customized political candidates and electoral ballot initiatives, and validate to an authorized third-party that the user is eligible to vote in particular elections, such as voting for a particular candidate running from a particular user customized district. There are several embodiments of user customized Execution Commands 52 governing the processing of electronic data and electronic transmissions. Such Execution Commands 52 can govern: user customized notification preferences for such electronic transmissions as real-time medical updates, pending Internet auctions, electronic stock trades and the like; user customized instructions for user-location designating, for example, that the user may be located by third parties via whichever BIA 16 the user is using during an indicated time period, whereby the user can automatically receive their e-mails, instant messages, phone calls, faxes, and the like in real-time at the particular BIA 16 in use by him; user customized travel customizations such as the user's preferences for lodging accommodations, travel costs, food, travel locations, and the like. Further embodiments of user customized Execution Commands 52 governing the processing of electronic data and electronic transmissions include: user customized identity presentation preferences depending upon various pre-designated criteria such as the identity of a particular recipients, the user's sending location, and the like, whereby a user's pre-selected personal identifier, such as a distinct audio or visual sample, is electronically presented to a third-party recipient of the user's electronic transmission; invocation of user customized Internet environment preferences, whereby a user's preferences are used to create a customized Internet web portal with the user's preferred search engines, bookmarks, and the like; user customized data presentation preferences, whereby the priority, formatting and organization of displaying data is pre-designated by the user; user customized customization of Internet search engines, and; user customized customization of intelligent data tracking and extrapolating agents. In one embodiment of an Execution Command 52 governing the processing of an electronic transmission, the user customized Internet search engine is customized to locate, retrieve and present electronic transmissions for the user using an intelligent tracking and extrapolating agent. In one embodiment, the user's customized Rule Modules 50 provide instructions that even when the user is not logged onto a network, the Pattern Data 54 and Execution Commands 52 are periodically and automatically executed, added, changed or deleted based on the user's previous BIA 16 and on-line usage patterns. As a result, the user customized search engine is automatically and progressively refined and customized to the user's evolving preferences and on-line activity patterns as tracked and interpreted by the user's own electronic, automated intelligent agent. As an example of the above, the user's intelligent agent can direct the user's search engine to automatically conduct periodic, customized on-line data retrievals reflecting user customized priorities for: product or service promotional offers or discounts via email or instant messaging; user customized investment updates; user customized medical or health information; competitive product or service prices across a broad range of on-line merchants; hobby or recreational interests; interactive user customized on-line advertisements, wherein product or service providers are permitted to provide unsolicited information to a user based upon certain user customized criteria; on-line event calendaring, wherein a user is automatically notified of upcoming events or activities reflecting their interests. Further, the intelligent agent can extrapolate from the user's existing preferences and on-line activity patterns to automatically and periodically recommend to the user new data that may expand or delete the user's Pattern Data 54 and Execution Commands 52 based upon the intelligent agent's algorithmic projection of what the user's on-line preferences and activities will be in the future. In another embodiment, an Execution Command 52 functioning as an intelligent tracking and extrapolating agent centrally integrates data on the user's Internet browsing to provide user customized recommendations on new products and services available from any number of Internet web sites or Internet merchants. Examples include the Execution Commands for retrieval of new types of music, books, and investment opportunities that reflect the user's preferences, but that such recommendations are pre-selected based on the Execution Command 52 having automatically conducted competitive price-comparisons from various third-party databases. In another embodiment, an Execution Command 52 integrates user customized data from a user's calendaring or scheduling software program to provide the user with customized recommendations on user customized offering for products, services or upcoming events based on the user's pre-scheduled activities in their on-line calendar. In another embodiment, an Execution Command 52 appends a customized, user customized audio or visual identifier which accompanies an electronic transmission for presentation to the recipient. This identifier is appended to the user's electronic transmission as a form of �electronic personal signature� to readily notify the recipient that the authenticated user sent the message. This identifier may be a unique biometric image or biometric sound sampled from the user, or it may be a non-biometric, distinct graphical or audio sample selected by the user to reflect their personal preferences, such as a cartoon image or a favorite sound or audio tone. In another embodiment where greater security is required, an Execution Command 52 governs the appending of a user-unique network credential or digital certificate to an electronic transmission. If a user employing a biometric seeks to append their digital certificate to an electronic transmission, the user stores at least one command to sign electronic documents using their private keys, which are themselves centrally stored on a Clearinghouse 14 server. As such, the user's private keys are invoked as a header for the user's electronic transmission which, in combination with the electronic document itself and an MD5 calculation of the document, together form a digital signature. At a later time, an authorized recipient can use the user's public key from the DPC 10 or a third-party certifier to verify the authenticity of the sender and the electronic document's contents to yield a secure, authenticated electronic transmission. In this way, users do not have to manage their own private keys, nor do they have to retain physical possession of their digital certificates via smart cards or personal computers with resident user customized data. In one embodiment, public keys of a particular certifying authority are initially stored in the BIA 16 at the time of construction. In another embodiment, an Execution Command 52 governs the processing of an on-line, user customized calendaring program or Internet calendaring web site, wherein the user's on-line scheduling calendar is automatically updated by the user customized search engine and the user customized intelligent search and tracking agent based upon user customized Pattern Data 54. This could include, but would not be limited to, automatically updating the user's on-line calendar based on upcoming: user customized entertainment events, user customized business seminars, user customized airline discounts to the user's preferred destinations, user customized candidate and elections bulletins, and the like. In another embodiment, the user pre-designates Execution Commands 52 governing the processing of electronic transmissions which filter the access and presentation of data when the user is subordinated user who is co-registrant or legal dependant of the primary user himself. Examples of such subordinated users could be the children or the spouse of a user. Examples of such access and presentation, or viewing, filters may be restrictions pre-designated by the primary user governing: subordinated user access to Internet web sites with adult or violent content; subordinated user access to on-line television or radio programming with adult or violent content; subordinated user access to the Internet 18 with restrictions covering on-line session length; subordinated user access to educational on-line resources which are automatically �pushed� to the subordinated user during a particular on-line session, as pre-determined by the primary user, in order to pro-actively circumscribe the content which a particular subordinated user is permitted to view or download. In another embodiment, an Execution Command 52 provided to the Clearinghouse 14 by an authorized third-party, such as a user's employer, governs the processing and prioritization of electronic transmissions to the user on an intranet 58. As such, the Execution Command 52 determines which electronic transmissions are automatically �pushed� to the user during a particular on-line session, as pre-determined by the authorized third-party, in order to pro-actively circumscribe the content which a particular user is permitted to view or download Embodiments of user customized Execution Commands 52 governing the display or presentation of electronic transmissions include controlling the organization and prioritization of on-line content such that text, audio and graphics are displayed according to a user's pre-determined preferences. This includes displaying informational updates in a certain prioritization order, wherein user customized regional news may be presented prior to national or international news, displaying expenditure records in user customized categories which reflect anticipated tax deduction categories, such as home improvement expenses, charitable contributions, and the like, displaying customized user customized Internet web sites or portals, including the user's pre-designated bookmarks, preferred web links, calendaring programs, email mail addressing rosters, multiple email accounts with their accompanying inbox messages, user customized instant messaging �buddy� lists. Other embodiments of user customized Execution Commands 52 governing the display or presentation of electronic transmissions include: displaying accrued user customized consumer rewards incentives or customized on-line advertising according to a user's prescribed priorities, such that skiing apparel is presented to the user at a time based on their calendaring program's designating their scheduled winter vacation or such that an advertisement for new coffee flavors from the user's preferred vendor is presented during the user's morning log-on session; displaying the user's customized fitness program on an Internet-connected exercise machine, whereby the user is reminded of the number of repetitions the user performed at what difficulty level during their last exercise session, and thereby also presents a recommended number of repetitions and a recommended difficulty level for the user's current session. Other embodiments include Execution Commands 52 governing: presentation or display filters which circumscribe what text, graphic or audio content the user is permitted to view; presentation or display filters which govern which products or services a user is permitted to purchase, such as a subordinated user whose parent is a primary user, and where the subordinated user is prohibited from purchasing cigarettes, is limited in their selection of on-line merchants, is limited in the amount of on-line session time the user is permitted to have in a single day, and the like Preferably, each identification request and each transmission request, whether successful or not, is logged in the Logging Facility (LF) 42. In a preferred embodiment, more than one Clearinghouse 14 servers provide fault tolerance from either natural or man-made disasters. In this embodiment, each Identicator uses a backup power generator, redundant hardware, mirrored databases, and other standard fault tolerant equipment known in the industry. Rule Modules and Electronic Transmissions A specific embodiment of how Pattern Data 54 is used in conjunction with Execution Commands 52 is shown in FIG. 8. A user logs on by submitting their biometric to a BIA incorporated into a public kiosk 60. In this embodiment, the public kiosk itself is�a computer terminal containing a networked thin-client and a web browser (collectively referred to in this embodiment as the �kiosk�). The BIA 16 forwards the user's bid biometric sample 62 to the DPC 10 for identity verification. Once the user is successfully identified by the Identicator 12, the user's User ID Code is forwarded to the Rule Modules Clearinghouse 14. Optionally, the BIA 16 also forwards its BIA hardware identification code to the DPC 10 for identification of the BIA 16 by the Identicator 12. In this embodiment, once the BIA 16 and the user are successfully identified, the BIA hardware identification code is forwarded to the Clearinghouse 14 along with the user's User ID Code. The Clearinghouse 14 is able to geographically and electronically locate the user via either the BIA hardware identification code, or the Internet Protocol (IP) Address (well known in the art). Once the user logs on to the BIA 16 at the kiosk 60 and is successfully identified by the Identicator, the DPC 10 forwards the user's Universal Access Command to the BIA. The Universal Access Command identifies all third-party Execution Modules 38 and databases 28, along with the third party's Internet locations, denoted as IP Addresses or Uniform Resource Locators (URLs) and the like, to which the user has access privileges. In an embodiment, the DPC 10 forwards to the kiosk 60 a user customized display, presenting visual icons representing URLs for viewing by the user via the kiosk screen. In this embodiment, the following icons are presented to the user: a �Calendaring� icon, representing the user's centralized scheduling programs and customized scheduling; a �Messaging� icon, representing the user's centralized Internet accounts for email, voicemail, and fax; an �Academics� icon, representing the user's private academic coursework examinations account; a �Medical� icon, representing the user's centralized private health and medical records; a �Reading� icon, representing the user's centralized electronic books accounts; a �Games� icon, representing the user's centralized Internet game accounts; a �Word Processing� icon, representing the user's centralized accounts for word processing programs and user-edited content, and; a �Buddy List� icon, representing the user's centralized instant electronic messaging accounts. The DPC 10 forwards to the BIA 16 a unique, one-time usage Random Key Number (RKN), optionally one for each and every one of said third-party database 28 Internet locations which are relevant to the user. The BIA 16 will store the Random Key Number in Random Access Memory (RAM), and will erase them when the user's log-on session terminates. These Random Key Numbers are preferably sent from the DPC 10 to the BIA 16 as encrypted 128-bit random number. The BIA 16 decrypts the Random Key Number and forwards it to the kiosk. At this point, the kiosk is permitted to display or present all such URLs for the user as text or�preferably as visual icons. Note the user may have previously designated his Rule Modules 50 in the Clearinghouse 14 to display any or all such third-party database 28 locations in a grouped manner. In this embodiment, for example, the user's Rule Modules 50 may designate that all email, voicemail, and fax URLs be grouped together and represented by the presentation of a single �messaging� icon or graphic. In this embodiment, when the user clicks on a particular icon and seeks to log into a particular URL third-party database, or to all of the URL third-party databases 28 represented by that icon, the kiosk 60 or the DPC 10 sends the Random Key Numbers to all of the respective URLs designated by the icon, along with the user's electronic transmission request. Execution Modules 38 located at each of these URLs query the DPC 10 to validate the Random Key Number it has received. If the DPC 10 confirms that the Random Key Number is current and valid, the DPC 10 invokes each Execution Module 38 pertinent to all of the user's relevant URL account number and access privileges for that third-party database. The DPC 10 provides this data to the URL, along with validation of the Random Key Number. In this way, the user is automatically permitted by each of the respective URL Execution Modules 38 to access that URL and its third-party databases. Also in this embodiment, the user's Rule Modules 50 specify that the BIA 16 location may be used by the Clearinghouse 14 to enable the Clearinghouse 14 to automatically customize certain electronic transmissions for the user in real-time. For example, in this embodiment, the user clicks on the �Calendaring� icon. The kiosk requests the DPC 10 to access the user's Rule Module in the Clearinghouse 14 governing customized scheduling data. The relevant Rule Module 50 uses the BIA's location along with the user's Rule Modules 50 to access third-party Execution Modules 38 and databases 28 that optionally forward to the kiosk user customized, geographically-specific scheduling data for presentation to the user. Such scheduling data includes where in the local area the user can find their pre-registered preferences for culture, travel accommodations, and business manifested in locally available radio stations, hotels, films, theatres, museums, business events, companies in which the user might be interested, book readings, university lectures, friends whom the user may want to contact, and local sales calls the user may wish to make. Further, the user's calendaring priorites, highlighting local appointments, can be displayed for their review. In this way, the user is immediately familiarized with the locality in which the user finds himself using a BIA, with the scheduling data automatically reflecting their customized, personal priorities. In this embodiment, the user's Rule Modules 50 stipulate that even when the user is not logged onto a network, certain of the user's Rule Modules 50 are to function on an automated basis, such as periodically updating the DPC's central retrieval of the user's email, voicemail and fax messages. In this way, when the user does actually log-on seeking to access this data, it is also available from the DPC 10 in real-time. Further, in this embodiment, the user on the �Messaging� icon to access all of their email, Internet fax and Internet voicemail messaging accounts. The �Messaging� icon, represents all of the URLs related to the user's messaging accounts which have been grouped by the Clearinghouse 14 according to the user's Rule Modules 50. The user has previously stored with the Clearinghouse 14 their messaging account URLs along with their respective account names and passwords. Once the user clicks on the kiosk's �get new messages� icon, the kiosk requests the DPC 10 to access the user's messaging accounts. Once this request is received by the DPC, the Clearinghouse 14 invokes the user's Rule Modules 50 governing message requests. Assuming the user wants to simultaneously obtain all of their messages at once, the DPC 10 in turn sends a HyperText Transfer Protocol (HTTP) �get� message command for each URL, thereby enabling the DPC 10 to retrieve all of their email, Internet voicemail and Internet fax account messages at once. (Note that HTTP is the protocol currently used to transfer information from Internet third-party databases 28 to client browsers.) These messages are the Pull Data retrieved by the DPC. The DPC 10 filters the HyperText Markup Language (HTML) to retain only user-relevant message contents and forward this to the kiosk for presentation to the user. In the embodiment, the user also seeks to simultaneously retrieve their standard voicemail messages. This can be accomplished by the user storing their voicemail account numbers and respective passwords as part of Execution Commands 52 in the Clearinghouse. Once the user signals the kiosk to �get standard voicemail messages�, this request is forwarded to the DPC 10 which places dial-up calls to the relevant voicemail systems in order to record and digitize the voicemail message playbacks. The DPC 10 forwards these messages to the kiosk for presentation to the user either as text or real audio. In this embodiment, one of the user's invoked Rule Modules 50 that provide calendaring functions, the kiosk automatically presents the user with an �Academics� icon for notification that they must complete their university's on-line coursework examination. In this embodiment, the DPC 10 provides the BIA 16 with a packet containing the Universal Access Command, the Random Key Number, and any other relevant user-unique network credentials for the university's restricted database. The BIA 16 decrypts this packet and forwards it to the kiosk for display to the user. The user clicks on the displayed icon representing the URL for the third-party Execution Module 38 and databases at which resides the examination for which the user has pre-registered. The kiosk forwards Random Key Number to the URL, and the resident Execution Module 38 queries the DPC 10 to authenticate the validity of the Random Key Number. If the DPC 10 confirms the validity of the Random Key Number to the URL, the user is enabled to access the third party database and take their electronically stored course exam. Preferably for security, this particular Random Key Number would be good for only one on-line session by the user with the relevant third-party database, in this case being the university server on which is stored the course examination. In this embodiment, the user also clicks on the �Medical� icon�to access their private health records in order to check on medical tests which their physician had completed that morning, along with accessing a customized collection of current medical news. Preferably, while the user was logged off, the user's relevant Rule Module automatically and periodically directed the Execution Module 38 to collect this data from third-party databases 28. In this instance, the DPC 10 provides the BIA 16 with a packet containing the Universal Access Command, the Random Key Number, and any other relevant user-unique network credentials for each third party database 28 containing the user's medical records and health news updates. The BIA 16 decrypts this package and forwards the data to the kiosk for display to the user. The displayed �Medical� icon represents the URLs of the respective third-parties' Execution Modules 38 and databases at which resides the user's customized medical information. The kiosk forwards a Random Key Number to each of said URLs, and the respective Execution Modules 38 query the DPC 10 to authenticate the validity of each of the Random Key Numbers. For each Random Key Number validation provided by the DPC 10 to the respective URL, the user is enabled to access the respective third party database for presentation of the user's private medical data. Additionally, in this embodiment, the user clicks on the �Reading� icon to access third-party databases 28 storing certain electronic books for which the user has pre-paid, some of which are a customized selection of books related to the user's coursework and some of which are a customized selection of new best sellers. Preferably, while the user was logged-off, these customized book selections were automatically and periodically collected from third-party databases 28 by the Clearinghouse 14 based on the user's Rule Module to reflect the user's interests. In this instance, the DPC 10 provides the BIA 16 with a packet containing the Universal Access Command, the Random Key Number, and any other relevant user-unique network credentials for each third party database containing the electronic books for which the user has pre-paid. The BIA 16 decrypts this package and forwards the data to the kiosk for display to the user. The displayed �Reading� icon represents the URLs of the respective third-parties' Execution Modules 38 and databases at which resides the user's customized selection of books. The kiosk forwards a Random Key Number to each of said URLs, and the respective Execution Modules 38 query the DPC 10 to authenticate the validity of each of the Random Key Numbers. For each Random Key Number validation provided by the DPC 10 to the respective URL, the user is enabled to access the respective third party database for presentation of the user's electronic books' content. In this embodiment, the user downloads the electronic books to a hand-held display panel, such as the Rocket-eBook�. In this embodiment, the user also clicks on the �Games� icon to access an interactive Internet game site. However, as this user is actually a subordinated user on their parents' primary user accounts, the user's related Rule Modules 50 are subordinated to their parents' Internet access filtering Rule Modules 50 which restrict the user's viewing and use of Internet games when the user is not at home. In this case, the location of the BIA 16 notifies the DPC 10 that the user is attempting Internet game access from a public kiosk away from home, and the DPC 10 automatically responds with notification that user access to Internet games is denied. Further, the user in this embodiment clicks on the �Word Processing� icon to access and edit a short story he is in the process of writing. In this instance, the BIA 16 is automatically provided by the DPC 10 with a packet containing the Universal Access Command, the Random Key Number, and any other relevant user-unique network credentials for the third party database containing the user's word processing programs and word processing content. The BIA 16 decrypts this package and forwards the data to the kiosk for display to the user. The displayed �Word Processing� icon represents the URL of the third-party Execution Module 38 and database at which resides the user's word processing software and content. The kiosk forwards a Random Key Number to said URL, and the respective Execution Module 38 queries the DPC 10 to authenticate the validity of the Random Key Number. With the DPC's validation to the URL of the Random Key Number, the user enabled to access the respective third party database for editing of the user's word processing content. It should be noted that for preferred security, this particular Random Key Number would be good for only one on-line session by the user with this third-party database. In this embodiment, the user also clicks on the �Buddy List� icon to access their instant electronic messaging accounts. In this instance, the BIA 16 is automatically provided by the DPC 10 with a packet containing the Universal Access Command, the Random Key Number, and any other relevant user-unique network credentials for each third party database containing the instant electronic messaging accounts to which the user belongs. The BIA 16 decrypts this package and forwards the data to the kiosk for display to the user. The displayed �Buddy List� icon represents the URLs of the respective third-parties' Execution Modules 38 and databases at which reside the user's instant electronic messaging accounts. The kiosk forwards a Random Key Number to each of said URLs, and the respective Execution Modules 38 query the DPC 10 to authenticate the validity of each of the Random Key Numbers. For each Random Key Number validation provided by the DPC 10 to the respective URL, the user is enabled to access the respective third party database for instant messaging with any other on-line members of his buddy list. In this embodiment, the user's Rule Modules 50 governing the sending of instant messages by user instruct that these messages are automatically appended with both his personal visual trademark icon and digital certificate, both of which are stored in the Clearinghouse. This provides both user customized visually graphical and cryptographically secure confirmation to recipients that the instant messages are authentically from the user. In essence, a public kiosk without resident user customized data and without extensive resident software, has been automatically and nearly instantly transformed, via a user's biometric log-on, into a terminal receiving on-line sophisticated computing capabilities that are customized for the user, complete with user customized electronic transmission accessing, processing and presentation. The user has been able to personalize: their own Internet web portal displaying all URLs with which the user has pre-registered for access privileges; topical recommendations for local activities, events and people that reflect their priorities; their Internet web site preferences, or �bookmarks�; and temporary DPC 10 downloading to the BIA 16 for RAM storage of their Internet �cookies�, or that set of data that an Internet website server provides to a user each time the user visits the website. In this invention, the Clearinghouse's remote servers save the information the cookie contains about the user, as a text file stored in the Netscape or Explorer system folder, and is able to temporarily download this data to whatever BIA 16 the user is currently logged onto. In sum, the invention constructs and presents for the user, on any terminal equipped with a BIA 16 that the user may be using, a user customized gateway to the Internet 18 containing their desired bookmarks, their personalized search engine and their customized web page directory. This is the user's personal Internet 18 web page �portal� which is a starting point for their electronic transmissions, including electronic mail, Internet 18 web browsing or �surfing�, and the like. In all of these electronic transmissions, this invention provides the user the ability, with only a single log-on, to automatically enter all restricted or confidential third-party databases 28 throughout the Internet 18 to which the user has pre-authorized access privileges. Once the user time the user has completed their Internet 18 usage of the BIA 16 for this on-line session, all of the data stream from their on-line session, including all new cookies provided by third parties on behalf of the user and all new data on their browsing activity, is batched and forward to the DPC 10 for downloading, storage, along with any updating and revising of the user's Rule Modules 50 within the Clearinghouse. Alternatively, the user's session on-line data stream could be monitored in real-time by the DPC 10 for central server downloads and real-time revisions to the user's Rule Modules 50. Interconnections and Communications between the Electronic Identicator and Rule Module Clearinghouse In one embodiment, the Identicator 12 module is physically distinct and separate from the Clearinghouse 14 module with each housed in independent servers or modules. In another embodiment, the Identicator is physically integrated with the Clearinghouse, whereby the Identicator 12 and Clearinghouse 14 are physically interconnected and integrated together within one server or module. In both embodiments, communications between the Identicator and the Clearinghouse 14 occur via many different methods and means that are well known in the art. Most depend on the particular communication networks already deployed by the organization or company that deploys the electronic transmission authorization system. In one embodiment the, the Identicator and the Clearinghouse 14 are connected via Ethernet to a local router, which is connected to a network operations center (NOC) via frame relay lines. Messages are sent between the Identicator and the Clearinghouse 14 using TCP/IP over this network. In another embodiment, the Identicator and the Clearinghouse 14 are connected via a cellular digital packet data (CDPD) modem to a CDPD provider, who provides TCP/IP connectivity from the Identicator to an intranet 58 to which at least one Clearinghouse 14 is attached. In yet another embodiment, an Identicator is connected via the Internet, as is at least one Clearinghouse. TCP/IP is used to transmit messages from between the Identicator and the Clearinghouse. There are many different ways to connect the Identicator and the Clearinghouse 14 that are well understood in the industry, such as cable TV networks, cellular telephone networks, telephone networks, the Internet, an intranet, a LAN, a WAN, or an X.25 network. The Identicator compares a user's bid biometric sample with previously stored biometric samples from registered users. The Identicator and the Clearinghouse 14 hardware modules are high-reliability database servers, well known in the art, such as those available from Sun�, Compaq�, Tandem�, IBM� and the like. Further, the Identicator and the Clearinghouse 14 software may incorporate scalable database architecture, well known in the art, such as those available from Oracle�, Sybase�, Informix� and the like. Electronic Identicator and Rule Module Clearinghouse: Master Servers and Local Servers In certain embodiments, a master Identicator is responsible for storage of the entire set of biometric samples and digital certificates registered for use with this invention. The master Clearinghouse 14 is responsible for storage of the entire set of Pattern Data 54, Execution Commands 52, and Rule Modules 50 registered for use with this invention. Each master Identicator and master Clearinghouse 14 site is preferably made up of a number of computers and databases connected together over a LAN (known in the industry). Multiple and redundant master computer sites ensure reliable service in the face of disaster or serious hardware failure at any single central computer site. Local Identicator servers store subsets of the entire set of biometric samples and digital certificates registered for use with this invention. Local Clearinghouse 14 servers store subsets of the entire set of Pattern Data 54, Execution Commands 52, and Rule Modules 50 registered for use with this invention. Such Pattern Data 54 and Execution Commands 52 subsets are circumscribed by any number of criteria including, usage location, usage frequency, usage recency, usage demographics and usage volume of electronic transmissions. Furthermore, each master and local server site has electrical power backup and multiple redundancy in all of its critical hardware and database systems. It is preferred that the master servers have a firewall 40 machine which is the entry point of data and messages into these computers, and a gateway machine which is a system coordinator and message processor. Use-Sensitive Identicator and Clearinghouse Configurations As shown in FIG. 7, in some embodiments the invention has use-sensitive data processing capabilities, wherein multiple Identicators 12 and multiple Clearinghouses 14 exist, some of which store a subset of the total number of registered parties. This system comprises at least one master Identicator and one master Clearinghouse, which contains a large subset of all parties registered with the system. The system further comprises at least two local Identicators or two local Clearinghouses that are physically apart from each other. Each local Identicator or Clearinghouse 14 contains a subset of the parties contained within the master Identicator or Clearinghouse. Data communications lines allow electronic transmissions to flow between each local Identicator or Clearinghouse 14 and the master Identicator or Clearinghouse. In this embodiment, identification request electronic transmissions are first sent to the local Identicator or Clearinghouse 14 for processing. If a party cannot be identified by the local Identicator or if the requisite Rule Module is not contained in the local Clearinghouse, the electronic transmission is forwarded to the master Identicator or Clearinghouse. If the parties are identified properly by the master Identicator or if the requisite Rule Module is located in the master Clearinghouse, the electronic transmission is processed appropriately. In addition, the user's identity information can be transmitted from the master Identicator to the local Identicator, so that the next time the user will be successfully identified by the local Identicator. In another embodiment of a use-sensitive system, the system further comprises a purge engine for deleting a party's user customized information from the local Identicator and Clearinghouse 14 databases. In order to store only records for those parties who use the system more than a prescribed frequency and prevent the overload of databases with records from parties who use the system only occasionally, the record of a party is deleted from the local Identicator and Clearinghouse 14 databases if there has been no attempt to identify the party upon expiration of a predetermined time limit. In order to make communications between the master servers and the local servers secure, the system further comprises encryption and decryption means, wherein communications between the master servers and local servers are encrypted. Third-Party Computers In one embodiment, an Execution Command 52 optionally requires the Clearinghouse 14 and the Execution Module 38 to communicate with at least one third-party 28 computer or database to conduct the user's command. For example, when the Execution Module 38 communicates with a host server located within an educational institution, where the third-party database 28 stores research data which is accessed in order to complete the user's Execution Command 52. Decryption Module In a preferred embodiment, all messages the Data Processing Center 10 receives, with the exception of those not transmitted via a BIA, contain a BIA hardware identification code, a sequence number, and a Message Authentication Code (MAC). MACs, also known as cryptographic checksums, are well known in the computer industry, and are used to assure that any changes to the content of the message will be detectable by the entity receiving the transmission. The Decryption Module 22 validates the message's MAC and checks the sequence number for that particular BIA. If the Decryption Module 22 determines that both the MAC and the sequence number are valid, the DM uses the unique secret key for that particular BIA 16 to decrypt the message. For the decryption to function properly, the Decryption Module 22 must contain a copy of each BIA's DUKPT key table. If the decryption operation fails, or if the MAC check fails, the message is considered an invalid message. The Decryption Module 22 logs a warning to the logging facility (LF), terminates processing for the message, and returns an error message to the originating BIA. Before the Decryption Module 22 replies to a message that includes a response key, it encrypts the response message with that response key. The Decryption Module 22 also generates a MAC for the response and appends it to the message. Preferably, error messages are not encrypted although the Decryption Module 22 does include a MAC for message authentication. Such messages never include confidential information. However, most response messages include a status or response codes that can indicate whether the request succeeded or not. For example, when the Execution Module 38 declines a transmission for a specific reason, it does not return an error message, it returns a normal transmission response message with a response code set to �failed�. Gateway Module (GM) The Gateway Module 26 serves as an intermediary between redundant Identicator 12 and redundant Clearinghouse 14 servers, routing electronic transmissions from servers on overload to servers that have available capacity. The Gateway Module 26 also periodically queries servers to ensure that are operative and to alert the system administrator is any server is inoperative. Firewall (FW) The firewall 40 provides a first line of defense against network viruses and computer hackers. All communication links into or out of the Identicator 12 and Clearinghouse 14 server sites first pass through a secure firewall 40 Machine. Preferably, the firewall 40 Machine, an Internet-localnet router, only handles messages destined for the Gateway Module 26 machines. BIA-equipped terminals send packets to Identicator 12 and Clearinghouse 14 server sites via modem, X.25, or other communication medium. The Identicator 12 and Clearinghouse 14 server sites rely on a third-party to supply the modem banks required to handle the volume of calls and feed the data onto the DPC 10 backbone. For communications between Identicator 12 and Clearinghouse 14 server sites, the FW Machines send out double-length DES encrypted packets. The server site LAN component handles the encryption and decryption: the firewall 40 does not have the ability to decrypt the packets. A properly configured network sniffer acts as an intruder detector as backup for the FW. If an anomalous message is detected, the intruding messages are recorded in their entirety, an operator is alerted, and the firewall 40 is physically shut down by the sniffer. The firewall 40 disallows any transmissions from the internal network to the rest of the Internet. An electronic transmission message requires about 400 bytes and registration packets require about 10 to 20 KB. To handle 1000 electronic transmissions per second and 1 registration packet per second, the firewall 40 machines are able to process about 400 KB per second. Execution Module In a preferred embodiment, an Execution Command of a Rule Module 50 causes an electronic transmission to be executed by the Execution Module 38. The Execution Module 38 may be on a database which is located within the DPC 10 itself, or it may be co-located with a third-party database 28 that is external to the DPC. In the event that a designated third-party database 28 cannot be contacted for the electronic transmission to be completed, the transmission is �declined�. Logging Facility In a preferred embodiment, the logging facility 42 logs all electronic transmission attempts, whether successful or not, to write-once media, so that a record is kept of each transmission and each error that has occurred during the operation of the Identicator. From the foregoing, it will be appreciated how the objectives and features of the invention are met. First, the invention provides a computerized electronic transmissions system that is tokenless. As such, this system eliminates the need for a user to possess and present any personalized man-made tokens, in order to authorize, send or receive a user customized electronic transmission. Second, the invention provides a computerized electronic transmissions system that is capable of verifying a user's unique personal identity, as opposed to verifying the user's possession of personalized objects and information. Third, the invention provides a cost-effective computerized electronic transmissions system that is practical, convenient, and easy use. Fourth, the invention provides a system of secured access to a computer system that is highly resistant to fraudulent electronic transmission authorization attempts by unauthorized users. Fifth, the invention provides a tokenless system for ensuring that users have the portability and mobility to gain immediate access to their electronic transmissions via any network-connected interface, regardless of the resident capabilities of the computing device the user is using to interface with the computer network and a central server. Sixth, this invention provides a user customized �portal� or gateway to the Internet including their desired bookmarks, their personalized search engine and their customized web page directory. Seventh, this invention provides enhanced security by maintaining authenticating data and carrying out the identity verification operations at a point in the system that is operationally isolated from the user requesting access, thereby preventing the user from acquiring copies of the authenticating data or from tampering with the verification process. Eighth, this invention enables a user to enter and update their customized data in a centralized database. Ninth, this invention enables primary users to both register and govern the electronic transmissions of subordinated users. Tenth, this invention provides the ability for a third-party database to be identified by the computer system, wherein the user is notified that they have accessed the correct third-party database. Although the invention has been described with respect to a particular computer system having rule module clearinghouse and method for its use, it will be appreciated that various modifications of the apparatus and method are possible without departing from the invention, which is defined by the claims set forth below. Patent CitationsCited PatentFiling datePublication dateApplicantTitleUS4879747 *Mar 21, 1988Nov 7, 1989Leighton Frank TMethod and system for personal identificationUS4995081 *Nov 6, 1989Feb 19, 1991Leighton Frank TMethod and system for personal identification using proofs of legitimacyUS5485510 *Sep 1, 1994Jan 16, 1996At&T Corp.Secure credit/debit card authorizationUS5594806 *Jun 20, 1994Jan 14, 1997Personnel Identification & Entry Access Control, Inc.Knuckle profile indentity verification systemUS5602933 *Mar 15, 1995Feb 11, 1997Scientific-Atlanta, Inc.Method and apparatus for verification of remotely accessed dataUS5657389 *May 8, 1995Aug 12, 1997Image Data, LlcPositive identification system and methodUS5768382 *Nov 22, 1995Jun 16, 1998Walker Asset Management Limited PartnershipRemote-auditing of computer generated outcomes and authenticated biling and access control system using cryptographic and other protocolsUS5790674 *Jul 19, 1996Aug 4, 1998Image Data, LlcSystem and method of providing system integrity and positive audit capabilities to a positive identification systemUS5832464 *Aug 21, 1996Nov 3, 1998Image Data, LlcSystem and method for efficiently processing payments via check and electronic funds transferUS5872834 *Sep 16, 1996Feb 16, 1999Dew Engineering And Development LimitedTelephone with biometric sensing deviceUS6028950 *Feb 10, 1999Feb 22, 2000The National Registry, Inc.Fingerprint controlled set-top boxUS6040783 *Nov 10, 1997Mar 21, 2000Image Data, LlcSystem and method for remote, wireless positive identity verificationUS6148091 *Sep 5, 1997Nov 14, 2000The Identiscan Company, LlcApparatus for controlling the rental and sale of age-controlled merchandise and for controlling access to age-controlled servicesUS6282658 *May 20, 1999Aug 28, 2001Equifax, Inc.System and method for authentication of network users with preprocessingUS6522772 *Sep 30, 1998Feb 18, 2003Ncr CorporationSelf-service checkout terminal having a biometric sensing device for verifying identity of a user and associated method* Cited by examinerNon-Patent CitationsReference1 *Handbook of Applied Cryptography, Menezes et al. CRC Pres, 1996. Available from . Entire work cited.2 *How Networks Work, Bestseller Edition. Derfler, Frank J. and Les Freed. Macmillan Computer Publishing USA, 1996. ISBN 1-56276-376-8. Entire work cited.3 *Security in Computing, second edition. Pfleeger, Charles P. Prentice Hall, repub. 2000. ISBN 0-13-337486-6.* Cited by examinerReferenced byCiting PatentFiling datePublication dateApplicantTitleUS7266776 *Dec 30, 2002Sep 4, 2007Aol LlcFacilitating communications between computer users across a networkUS7434169Mar 20, 2003Oct 7, 2008Aol Llc, A Delaware Limited Liability CompanyFacilitating communications between computer users across a networkUS7487130 *Jan 6, 2006Feb 3, 2009Grdn. Net Solutions, LlcConsumer-controlled limited and constrained access to a centrally stored information accountUS7620600Nov 21, 2007Nov 17, 2009Verient, Inc.Systems and methods for multiple sessions during an on-line transactionUS7698649Jul 13, 2007Apr 13, 2010Aol Inc.Facilitating communications between computer users across a networkUS7773779Oct 19, 2006Aug 10, 2010I.Q.S. Shalev Ltd.Biometric systemsUS8156443Aug 26, 2008Apr 10, 2012Aol Inc.Facilitating communications between computer users across a networkUS8328642Jun 16, 2010Dec 11, 2012Zynga Inc.Game based incentives for commerceUS8447272Nov 24, 2010May 21, 2013Visa International Service AssociationAuthentication and human recognition transaction using a mobile device with an accelerometerUS8449385 *Sep 26, 2011May 28, 2013Zynga Inc.Online game rewards for online purchasesUS8468358Nov 9, 2010Jun 18, 2013Veritrix, Inc.Methods for identifying the guarantor of an applicationUS8491380 *Sep 26, 2011Jul 23, 2013Zynga Inc.Online game rewards for non-gaming online activitiesUS8516562Aug 18, 2011Aug 20, 2013Veritrix, Inc.Multi-channel multi-factor authenticationUS8589238May 31, 2006Nov 19, 2013Open Invention Network, LlcSystem and architecture for merchant integration of a biometric payment systemUS8661520Nov 21, 2006Feb 25, 2014Rajesh G. ShakkarwarSystems and methods for identification and authentication of a userUS8682798Sep 23, 2011Mar 25, 2014Visa International Service AssociationMethod and system using universal ID and biometricsUS8690773 *May 24, 2011Apr 8, 2014Kenneth J. BaganSecurity enabled medical screening deviceUS8769479 *Jan 31, 2007Jul 1, 2014Digital River, Inc.Physical on demandUS8818845Sep 26, 2011Aug 26, 2014Zynga Inc.Online game rewards for web-based purchasesUS20070234353 *Jan 31, 2007Oct 4, 2007Digital River, Inc.Physical on DemandUS20100106647 *Feb 26, 2008Apr 29, 2010Raja RamanMethod and system for close range communication using audio tonesUS20120010897 *May 24, 2011Jan 12, 2012Bagan Kenneth JSecurity Enabled Medical Screening DeviceUS20120198532 *Apr 9, 2012Aug 2, 2012Paul HeadleyUser Authentication for Social NetworksEP2084843A2 *Oct 16, 2007Aug 5, 2009I.Q.S Shalev Ltd.Biometric systemsWO2007033285A2 *Sep 13, 2006Mar 22, 2007Craig S EtchegoyenSecurity system for transactionsWO2008047356A2 *Oct 16, 2007Apr 24, 2008I Q S Shalev LtdBiometric systems* Cited by examinerClassifications U.S. Classification705/64International ClassificationG06Q20/00, G06F21/20, G06Q99/00, G06F1/00, G07F7/02, G06F21/00, H04L29/06, C07K14/53, G07C9/00Cooperative ClassificationH04L69/329, H04L67/306, G06Q20/40, H04L63/0428, H04L63/0861, G07F7/025, G06Q30/0225, G07C9/00158, G06Q20/382, C07K14/53, G06F2221/2117, G06Q20/18, H04L63/0823, G06Q20/401, G06F21/83, G06Q20/4014, G06Q20/10, G06F21/33, G06Q20/342, G06F2211/008, G06Q20/02, G06Q20/00, G06F21/32European ClassificationG06Q20/10, G06Q20/02, G06Q20/18, G06Q20/40, G06Q20/342, G06F21/32, G06F21/83, G06Q30/0225, G06F21/33, H04L63/08F, G06Q20/4014, G06Q20/401, G06Q20/382, H04L29/08A7, H04L29/08N29U, G07F7/02E, G06Q20/00, C07K14/53, G07C9/00C2DLegal EventsDateCodeEventDescriptionOct 13, 2010ASAssignmentFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:YOU TECHNOLOGY, INC.;REEL/FRAME:025126/0404Effective date: 20100924Owner name: OPEN INVENTION NETWORK, LLC, NORTH CAROLINASep 28, 2010ASAssignmentOwner name: YOUR TECHNOLOGY, INC. (F/K/A YT ACQUISITION CORPORFree format text: RELEASE BY SECURED PARTY - SECOND LIEN GRANT;ASSIGNOR:THE BANK OF NEW YORK, AS ADMINISTRATIVE AND COLLATERAL AGENT;REEL/FRAME:025051/0339Effective date: 20100928Free format text: RELEASE BY SECURED PARTY - FIRST LIEN GRANT;ASSIGNOR:THE BANK OF NEW YORK, AS ADMINISTRATIVE AND COLLATERAL AGENT;REEL/FRAME:025051/0307Sep 9, 2008ASAssignmentOwner name: YT ACQUISITION CORPORATION, FLORIDAFree format text: ASSET SALE AND PURCHASE AGREEMENT;ASSIGNORS:SOLIDUS NETWORKS, INC. D/B/A PAY BY TOUCH;PAY BY TOUCH CHECKING RESOURCES, INC.;INDIVOS CORPORATION;AND OTHERS;REEL/FRAME:021502/0001Effective date: 20080328Owner name: YT ACQUISITION CORPORATION,FLORIDAFree format text: ASSET SALE AND PURCHASE AGREEMENT;ASSIGNORS:SOLIDUS NETWORKS, INC. D/B/A PAY BY TOUCH;PAY BY TOUCH CHECKING RESOURCES, INC.;INDIVOS CORPORATION AND OTHERS;US-ASSIGNMENT DATABASE UPDATED:20100413;REEL/FRAME:21502/1Free format text: ASSET SALE AND PURCHASE AGREEMENT;ASSIGNORS:SOLIDUS NETWORKS, INC. D/B/A PAY BY TOUCH;PAY BY TOUCH CHECKING RESOURCES, INC.;INDIVOS CORPORATION AND OTHERS;REEL/FRAME:21502/1Dec 20, 2007ASAssignmentOwner name: THE BANK OF NEW YORK, AS AGENT, AS SECURED PARTY,Free format text: GRANT OF PATENT SECURITY INTEREST;ASSIGNOR:INDIVOS CORPORATION;REEL/FRAME:020279/0105Effective date: 20071219Owner name: THE BANK OF NEW YORK, AS AGENT, AS SECURED PARTY,TFree format text: GRANT OF PATENT SECURITY INTEREST;ASSIGNOR:INDIVOS CORPORATION;US-ASSIGNMENT DATABASE UPDATED:20100413;REEL/FRAME:20279/105RotateOriginal ImageGoogle Home - Sitemap - USPTO Bulk Downloads - Privacy Policy - Terms of Service - About Google Patents - Send FeedbackData provided by IFI CLAIMS Patent Services©2012 Google