Patent ID: 8463713

Claim:
A method comprising: when establishing an account: establishing an agreement between a user and a verification entity; creating, by said verification entity, a user agreement identifier that identifies said agreement and identifies said user; downloading a software application from said verification entity and said user agreement identifier over a computer network to an input and output device of a computerized device associated with said user; using, by a processor of said computerized device, said software application to store at least one permitted password, at least one user identifier string, permitted hardware identifiers, and said agreement identifier in a storage media of said computerized device; and using, by said processor, said software application to transmit said user identifier string, said permitted hardware identifiers, and personal payment information of said user to said verification entity; and when requesting an authorization decision: receiving, into a graphic user interface of said computerized device, an entered password; determining, by said processor, whether said entered password is valid based on whether said entered password matches said at least one permitted password; based on said password being valid, reading, by said processor, a hardware identifier from hardware of said computerized device; determining, by said processor, whether said hardware identifier is valid based on whether said hardware identifier matches one of said permitted hardware identifiers; based on said hardware identifier being valid, retrieving, by said processor, said user agreement identifier from said storage media of said computerized device; creating, by said processor, an encrypted user code by encrypting said user agreement identifier and said hardware identifier, each said encrypted code being valid only for a single request for an authorization decision; causing, by said processor, said encrypted user code to be devoid of said personal payment information of said user; transmitting, by said input and output device of said computerized device, said encrypted user code to a provider in a request for an authorization decision over a computer network, said encrypted user code being sent by said provider to said verification entity for an authorization decision; and receiving, by said input and output device, said authorization decision from said provider.