Patent ID: 7516884

Claim:
A method for performing private information communication in smart card commerce utilizing a smart card having a processor, a memory including a public area, at least one user input device, a display and a communication port, said method comprising: in response to determining that an item of biometric data received via the at least one user input device corresponds to an authorized user, unlocking a communication channel on the communication port and exchanging public keys, wherein exchanging public keys includes delivering a public key correlating to said authorized user by placing said public key in said public area of the memory of said smart card; in response to determining that a valid information request from an external point of sale machine has been received across said communication channel, decrypting said information request and parsing a data token; in response to determining that private information has been requested in said information request, prompting a user for authorization to release said private information; performing private information communication in smart card commerce by, in response to said user authorizing, via the at least one user input device of the smart card, release of the private information, placing an encrypted copy of said private information in said public area of said memory for transmission across said communication channel to said external point of sale machine and transmitting the encrypted copy of said private information across said communication channel to said external point of sale machine; and refusing to perform private information communication in said smart card commerce by, in response to said user refusing, via the at least one user input device of the smart card, release of the private information, closing said communication channel to said external point of sale machine and displaying a failure message on said display.