`US 20020099665Al
`
`(19) United States
`(12) Patent Application Publication
`Burger et al.
`
`(10) Pub. No.: US 2002/0099665 Al
`Jul. 25, 2002
`(43) Pub. Date:
`
`(54) PORTABLE ELECTRONIC
`AUTHORIZATION SYSTEM AND METHOD
`
`(76)
`
`Inventors: Todd 0. Burger, Lexington, MA (US);
`Robert M. Cohen, Sudbury, MA (US)
`
`Correspondence Address:
`WOLF GREENFIELD & SACKS, PC
`FEDERAL RESERVE PLAZA
`600 ATLANTIC AVENUE
`BOSTON, MA 02210-2211 (US)
`
`(21)
`
`Appl. No.:
`
`09/968,628
`
`(22)
`
`Filed:
`
`Oct. 1, 2001
`
`Related U.S. Application Data
`
`(63)
`
`Continuation-in-part of application No. 09/675,438,
`filed on Sep. 28, 2000, which is a non-provisional of
`provisional application No. 60/156,356, filed on Sep.
`28, 1999, and which is a non-provisional of provi(cid:173)
`sional application No. 60/167,050, filed on Nov. 23,
`
`1999, and which is a non-provisional of provisional
`application No. 60/184,425, filed on Feb. 23, 2000,
`and which is a non-provisional of provisional appli(cid:173)
`cation No. 60/217,542, filed on Jul. 12, 2000.
`
`Publication Classification
`
`Int. Cl.7 ..................................................... G06F 17/60
`(51)
`(52) U.S. Cl. ................................................................ 705/67
`
`(57)
`
`ABSTRACT
`
`In one embodiment, an electronic device is used to authen(cid:173)
`ticate an identity of a user to determine that the user is
`permitted to access restricted information on a server. In
`response to the electronic device authenticating the identity
`of the user, a software module on a computer operated by the
`user is permitted to access the restricted information. In
`another embodiment, an electronic device is used to authen(cid:173)
`ticate an identity of a user. In response to the electronic
`device authenticating the identity of the user, the settings on
`a computer are altered to correspond to settings on the
`electronic device.
`
`;Vc2..f v/c) {'-k:
`~e/'ue..f'(§_J
`
`I tlf-
`
`)} ()i\ .. i~c.11\C:0
`\~ f
`ti\~; ....
`Is.,;.<J..~t~)
`
`r cc:>
`
`f,~._nc.1..._/
`Me,,n:~
`"Js.s,<-1~,l'(f)
`
`(C>'6
`
`( ( "".L.
`
`PayPal Ex. 1011, p. 1
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 1 of 36
`
`US 2002/0099665 Al
`
`~ -
`
`\j)
`0
`
`I
`
`\
`I -ll
`\ =;
`L
`
`PayPal Ex. 1011, p. 2
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 2 of 36
`
`US 2002/0099665 Al
`
`-
`-
`I 1
`I
`14
`'.!, \ I
`I ..JI
`~
`
`oJ
`
`r-i
`
`0
`r1
`
`-
`
`~
`:>,..
`• (.
`~ L
`~1
`"' ~
`~~
`
`r1
`- ~
`c-J
`
`>,..
`
`(
`
`J_
`;:i
`t.
`~
`s
`
`\
`(
`
`\
`=f1
`-=- !
`
`~
`
`~ 1
`
`~
`~
`~ &
`
`<jl
`. v
`"S
`~
`+;
`{"
`H
`t..
`d
`
`1
`
`-
`
`l
`~ ~I
`-=.
`0
`'-
`~ N
`0
`\J
`
`-:±: I
`:r
`-j
`'--H I
`ll
`--lL
`\)
`
`~ ·
`
`~
`
`• \J)
`\J_.
`
`>--
`.__!_
`-~
`Q
`
`~ X
`~
`'--
`;
`t.l
`
`\
`
`.1
`
`t...
`
`., -L.
`~
`Q)
`'I:-
`~
`,;:
`"
`(f
`?
`\J
`Li. V)
`
`I;)
`('J
`
`fl
`
`<:t'..
`
`<Y
`;:i
`
`*
`j
`--t
`{ill ~y
`
`--l2
`~-
`
`(
`
`PayPal Ex. 1011, p. 3
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 3 of 36
`
`US 2002/0099665 Al
`
`-
`
`·-
`
`--
`
`\ ---
`
`{
`
`-
`
`-
`
`- .
`
`\j)
`0
`C{\
`
`-
`
`-· - - ·-· - -
`
`- - --
`
`-
`
`-
`
`-
`
`PayPal Ex. 1011, p. 4
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 4 of 36
`
`US 2002/0099665 Al
`
`cl--
`
`0
`.::¾-
`
`11
`4 i)O
`~ \
`'X
`½
`~~
`J
`r
`~
`,-Q
`-..
`(
`a
`~
`
`,j-
`\)
`;:t--
`
`----...
`~
`l.
`~
`-=
`i
`~
`'v
`
`,J)
`0
`
`ol
`...-)
`(
`.......0
`r(
`
`1
`
`~
`-
`,,SJ
`\_L
`
`PayPal Ex. 1011, p. 5
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 5 of 36
`
`US 2002/0099665 Al
`
`Wallet
`Core
`
`Down-
`Personal
`Info Mor
`Loadable
`Applications ~
`
`Security Middleware
`Man Machine Interface
`Middleware
`O/S (e.g. Palm, Java, Etc)
`uevir.P. unvers
`
`Bluetooth
`
`1S07816
`
`PC
`USB Port
`
`Virtual Mag Stripe
`
`Electrically Driven Mag Loop
`~==.:..::..:,:-=:.:!_ ___ _.:::._~--6~
`Co'?
`
`l.Clf
`
`""' RC
`~ -
`Energy
`• t ~torage
`
`PayPal Ex. 1011, p. 6
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 6 of 36
`
`US 2002/0099665 Al
`
`Begin
`
`Power on
`
`Senn r1ngorprlnt
`
`7l0
`
`lnfonn holdor lhal
`Chameteon Card Is not
`on board & ask holder ~
`non-card transaction is
`desired
`
`/V
`
`,c&
`
`'(
`
`7"2-"2..
`
`A~-fk;~J
`~e!'.
`r,
`cl\~
`
`Power down
`
`7"2.~
`
`Display shut down fiash
`screen
`
`-;? 2.- k,
`
`;v t '1---'/--
`
`Varlfy cord rolum routlna
`
`PayPal Ex. 1011, p. 7
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 7 of 36
`
`US 2002/0099665 Al
`
`~c4c..
`("'
`
`No , - - - - ,4 - - - - - - - - - -No - - - - - - -~
`
`[ : : holder to apply
`
`l t"~ne fingerprint of left
`
`hand to fingerprint
`scanner three limes,
`waiting for 'beep" each
`time
`
`Store fingerprint in
`memory
`
`- - - - - - - - - - - - - -Y e s - - - - - - - - - - - - -~
`
`~_____y_.L_r-15°_fftl !No
`I
`
`Prompt holder to apply
`one fingerprint of right
`hand to fingerprint
`scanner lhree times,
`waiting for ''beep" each
`ume
`
`Yes
`
`Store fingerprint in
`memory
`
`l~ - - - - - - - - - - i l~ - - - - - - - - - - - -Y e s - - - - - - - - - - - - -~
`
`No
`
`Transmit enaypted
`message including
`pocket vault ID to
`1nterfaceun1t
`
`fl,. ( ~
`r,--0
`L
`
`No
`
`T1meou1?
`
`Store valtdation
`1nformal10n {e.g., PKI
`certificate)
`
`Yes
`
`I
`
`Generate ndication re:
`successful ..-a11dation
`
`Generate 111dicat1on re:
`unsuccessful validation
`
`End
`
`PayPal Ex. 1011, p. 8
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 8 of 36
`
`US 2002/0099665 Al
`
`Begin
`
`Display non-secure
`media menu: (1) lly
`again, (2) pocket vault
`relum information, (3)
`emergency info""allon.
`or (4} end session.
`
`~lO
`
`Display nested menu
`ttoms
`
`y
`
`Take security
`precaulion(s) re: multiple
`railed matches
`
`Display information
`(W any) for selected
`menuttem
`
`Mer delay, prompt user
`lo re-apply fu,gerprint
`within 10 &!lalnds to
`avoid shutdown
`
`PayPal Ex. 1011, p. 9
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 9 of 36
`
`US 2002/0099665 Al
`
`Begin
`
`72?..
`-~
`
`Display Advertisement
`for lwO seconds
`
`Display Fades to
`preferred menu
`
`Ol1plny watcomc, ,aeon
`for ono socond
`
`Ol~ploy fndo& lo hoino
`monu
`
`Olllploy nontod monu
`llem•
`
`loo~
`
`y
`
`Display media
`
`,v
`
`1031./-
`
`rol/- 0
`
`lol.'-
`
`Prompt user lo eject
`card. ln'Voke a wireless
`trensedion, or relum to
`home menu
`
`Inform holder lhat
`Chameleon Card is not
`on bonrd
`
`Proce:.s/display selected
`non-media menu item:
`slOl'e any madificallons
`of prefers nee ae!Ungs
`
`lo)"
`
`Procou wirelen
`~ansadion
`
`Process card transaction
`rouUne
`
`, -__ ...,_ __ _,,...,
`
`10~'6
`
`Ver'ey card re Lum routine
`
`End
`
`Promptl..lJ.tEnd
`g.assk,n at Mi.m lo
`home menu
`
`PayPal Ex. 1011, p. 10
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 10 of 36
`
`US 2002/0099665 Al
`
`l03b
`
`c
`
`Bogin
`
`Configtire and ejed
`Chameleon Card
`
`tlO'-
`
`Gray out
`displayed media &
`disabfa ?Vs ability lo
`configure, anotht1r
`Chameleon Card wllh
`same
`
`,ro!f-
`
`,1 o-6
`
`Se1t~ored va1u:•nog •
`'"'"
`
`Prompt hold or to docide
`wholhor to record
`transaction
`
`11 ii.
`
`Display expense
`cat~ory menu
`
`01:splnynostodmenu
`ltoma
`
`Prompt holder to enter
`transact.ion amount
`
`I(~
`
`Add transaction to
`axpe nse register for
`selecled category &
`update balances
`
`~~~ '(
`
`menu: (1) approved, (2) - - -~
`edit calego<y, or ,3) edit
`omounl
`
`End
`
`f~. I/
`
`PayPal Ex. 1011, p. 11
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 11 of 36
`
`US 2002/0099665 Al
`
`Begin
`
`Update atorod vol"'
`
`,
`
`Prompt holder to return
`Chameleon card
`
`l)..u.
`
`,,
`>'
`Set stored value ~ag to
`false
`
`(2-Cb
`
`Prompt holder to return
`Chameleon card
`(wilh chime)
`
`t 'l.2.o
`
`End
`
`PayPal Ex. 1011, p. 12
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 12 of 36
`
`US 2002/0099665 Al
`
`Begin
`
`Forward 1nfo/commands
`Y e s~ lo 111terface station f-----__._----(cid:157)
`computer
`
`-< Car:tr;::~:~ugh
`
`Yas
`
`Transmit info from
`swiped card to Interface
`station computer
`
`No
`
`No
`
`Transmit message to
`interlace station
`computer re:
`unsuccessful operator
`aulhenhcallon
`
`Yes
`
`rf3l{O
`
`Yes
`
`~ - -~ - - ' - - ,
`
`Forward
`info/commands to pocket
`vault
`
`Forward first encrypted
`massage to interface
`station computer
`
`~ - - -N lo - - - - - -
`
`No
`
`Timeout?
`
`-No
`
`Yes
`
`Fingerprint matched
`with authorized poeket vault Interface
`unit operator?
`
`Yes
`
`1sl'2...
`
`Transmit second encrypted massage to
`interface station computer including pock.et
`vault interface unit ID
`
`Yes
`
`Yes
`
`Yes
`
`Generate indication re
`successful validation
`
`Store valldaltan
`1nformat10n {e g, PKI
`certificate)
`
`Generate 1ndicahon re
`unsuccessful val1datlon
`
`PayPal Ex. 1011, p. 13
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 13 of 36 US 2002/0099665 Al
`
`C1splaymenu
`
`\'f-OL
`
`[ 'f-oO
`~
`
`Process reque$\ 10
`validate Pocket Vault
`routine
`
`( '('"( 0
`
`Process. roquest to
`updata Wa on Pocket f - - - - - - - ,
`Vault routine
`
`Process request lo
`au\horiz.e transaction
`routine
`
`'("
`
`')...:!..---------------,, opornlo~:~:i~:ntlcollon f-------,
`
`PfOC8ss unsuccouful
`
`'(
`
`{-., CiC(<CS.>
`
`r't=:>s •
`wch~;k
`,"-OL<i-111 t.
`
`PayPal Ex. 1011, p. 14
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 14 of 36 US 2002/0099665 Al
`
`Begin
`
`PrompS now poci,:al !o'avn. holdor lo apply flngeq:1~lnt
`lo pocket vault .and lnlotface poekol voull with
`pockal veuJI /nler1ace unit
`
`( SD "l.
`
`Olspllly me.ssago re:
`-•ful
`
`authoriz.alion attempt
`
`Prcimpl lntor10C(! slntlon
`oparalor to Input Info regarding
`now pock.al vault holdar
`
`(5"1'2
`
`Prompt lntarface statian
`operator IO apply
`finge,prlnt lo Interface
`urnl. f111gerprinl scanner
`
`Display mes.sage re;
`successful validation
`
`01,ploy meunge ro:
`tnm1ml11lon to.Uuro
`
`ConlPCI ootwork lOl\'Of
`
`Transmit new pocket
`vault holder requast lo
`netwodo;S&N8f
`
`Transmil ,eoayptad r'fffl holder info lo
`nolWQA: smver along wiUi encrypted
`r~---"1 lnterl'ac:e station operator 10, Interface
`.slalion 10. and por;ket vault 10
`
`l S 7...g'
`
`PayPal Ex. 1011, p. 15
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 15 of 36
`
`US 2002/0099665 Al
`
`pockol vault holder to apply fingerprint
`Prompt
`lo pc,cl,;ot vault and lmerfaee pocket vaurt w.lh
`poc.kel vaull intorfaco unit
`
`{ ' 0 -Z-
`
`Prompt inledaca Slalion
`operator to apply
`f111gerprtnt to Interface
`unit fingerprint scanner
`
`Display message re:
`unsuocossfuf
`authorization allempt
`
`/(;,!2
`r
`
`Q.O
`
`y
`
`Transmit received
`upd.ate1 to podc.el vautt
`Interface l.lnit for loading
`onto pocket vault
`
`End
`
`Fr~. l £
`
`PayPal Ex. 1011, p. 16
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 16 of 36 US 2002/0099665 Al
`
`Begin
`
`Prompt operator to input
`information regarding ~~~•~
`proposed tramaetlon
`
`Y
`
`. pocket vault holder Lo apply fingarpritlt
`Prompt
`>-'---+I lo pocket vault and in1atface podlal vaull with
`pocket vault interf.a~ unit
`
`ntv
`Iv
`
`Display message re:
`um:uccessful
`eulhorizalian attempt
`
`Message forwarded to
`pocket vault intert'ace
`unitn:igardlng
`tranuctlon approval
`(may be used to update
`pocket vau!! or to cause
`pockol vaull la gonomlo
`an lndlcallon regarding
`tr snsacUon approval)
`
`'(
`
`Contact nelWOit server
`
`Transmit trans.adion
`request to nelWOrk
`SONer
`
`Display transmission
`failure massage
`
`'(
`
`Trnns!Gr encrypted
`
`~=;:~:=
`
`setVeralong:
`with enaypled interfai.e
`,1atiorloperatorlD,
`lnterfa(;I) uni\ ID. and
`pocket vau!I ID
`
`-F~- l 7
`
`End
`
`(17-~
`
`PayPal Ex. 1011, p. 17
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 17 of 36 US 2002/0099665 Al
`
`lnfom, operator that he.f
`&ha is nol authOCUOQ to
`use lntorfaco unit
`
`Prompt operator lo; (1)
`ad<I new operator, or (2)
`abo~
`
`End
`
`~3'0
`
`r
`
`Forward enc,ypted
`validation Information lo
`pocket vault Interface
`unit
`
`Display m&ssage re:
`unsuceessful validation
`
`Transmit new operator
`request ta pocket vault
`interface unit
`
`Cont.act nolwork sotVor
`
`Transmit new operator
`request to network
`serve<
`
`Transmit encrypted new
`operator Jnro lo nelw<lfk
`server along with
`>--'---+I
`enaypled ~":'~ lU\lt ~
`.+rul"'t,J .. l'{"'--e .;1
`
`O.isplay transmission
`failure mas:saQe
`
`PayPal Ex. 1011, p. 18
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 18 of 36 US 2002/0099665 Al
`
`;-C q OCf-
`
`'(
`PrOC<lss request to
`>------ rogistor new poci<ol vautt
`holder
`
`Compile and transmit
`consumer marl<eting info
`to subsaibing Media
`lssuers/Advertisors
`
`t" l 0
`
`· Process roquost from
`'"(
`>----., Media lssuor/Advort,sor
`to update network server
`
`Process request lo
`update info on pockot
`voult
`
`Process request from
`holder 10 bad new ma
`onto network server
`
`PrOC'lSS request to
`auUlorize transaClion
`
`PayPal Ex. 1011, p. 19
`PayPal v. IOENGINE
`
`
`
`I")
`
`I")
`
`~
`
`~ = :-
`.... 0 =
`~ ....
`O" -....
`~
`.... 0 =
`~ ....
`l -....
`('I) = ....
`~ ....
`
`01 > 1--"
`N i 1,0
`
`0-,
`0-,
`1,0
`
`'J]
`c:j
`
`('I) ....
`'J] =(cid:173)
`§
`
`1,0
`1--"
`
`0-,
`w
`0 ...,
`
`('!)
`
`N
`~01
`N
`
`t='1~. '2'2..
`
`End
`
`-:z_"Z-ob
`
`7 •. :1_ o tf--
`
`Advertisers of update
`Inform Med'ia lssuer:sl
`
`Log time end dato of
`
`update
`
`_"Z.olO
`
`_2.:66
`
`Trensmt enaypled I J-2 0 "L
`
`-
`
`station for 1oading onto
`updates lo l"lterface
`
`poek•l vautt
`
`."Z.oeb
`
`~
`l-=tt1f(cid:173)
`
`:z.c,0'2.
`
`holder registration info
`and request transfer of
`Acknowledge request
`
`Begn
`
`Begin
`
`cJ
`l°lOl/(cid:173)
`
`id
`\ q_ (0
`
`Begin
`
`Fi5. 2-0
`
`End
`
`PayPal Ex. 1011, p. 20
`PayPal v. IOENGINE
`
`1. 1ntarfaeestation0p(!rator
`
`Log info incfudiog:
`
`ID
`
`2. Interlace
`
`fingerprint In pockel
`enable storage of
`Interface Station lo
`validation info to
`
`Transmit enaypled
`
`vault
`
`4. Holder Info
`
`'3. Pocket vault ID
`
`Fe.~-21
`
`End
`
`log r8C8Ned updates
`
`Z..lo~
`
`Transmit ac:ces, denial
`
`Issuer/ Ad'lertlsef
`massage lo M&d"~
`
`'Z,..!D~
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 20 of 36 US 2002/0099665 Al
`
`Begin
`
`Update network se1Yer
`with non-secure lile
`
`'>-1-'---.i Quety Media Issuer es to
`
`account status
`
`~3t0
`
`Updat" notworl\ server
`w11h secure file
`
`f-~.
`
`PayPal Ex. 1011, p. 21
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 21 of 36 US 2002/0099665 Al
`
`l 422.
`C
`
`Tronsmll mossogo lo
`commorcial lntorfoco
`atolion/commorclal card
`roodor/commorcial bor
`code render Indicating
`Ir ans0ction Is outsido of
`ac;ceptabte ncc:ount
`parnmelers
`
`Begin
`
`y
`
`Log transaction info Including:
`1. Commercial interface $1.aUonlcommercial card
`reader/commercial bar code reader 10
`2. Pocket vaull 10
`3. Time/dale of transaction
`
`Transmit encrypted approval me,sage for
`roquHIDd ltnn111ctlon to ccmmorclal lnlorf11ce
`,10Uonlcommotcltll Cllrd ro11dar/commarci11I b11r
`cede rendor
`
`End
`
`PayPal Ex. 1011, p. 22
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 22 of 36 US 2002/0099665 Al
`
`Begin
`
`2o06
`d
`
`y
`
`Generate security alert/
`refuse transaction
`
`z...:~; (L
`
`Aulhorize pocket veutt
`Use
`
`End
`
`PayPal Ex. 1011, p. 23
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 23 of 36 US 2002/0099665 Al
`
`15mm
`~ .. ...:.::.·.,•
`
`2.-CoZ.
`
`PayPal Ex. 1011, p. 24
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 24 of 36 US 2002/0099665 Al
`
`J:,:;, 2c L
`
`PayPal Ex. 1011, p. 25
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 25 of 36 US 2002/0099665 Al
`
`tc>"Lq
`
`PayPal Ex. 1011, p. 26
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 26 of 36 US 2002/0099665 Al
`
`__,
`f V\
`
`PayPal Ex. 1011, p. 27
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 27 of 36 US 2002/0099665 Al
`
`')
`'-
`-·
`
`~
`~
`~
`
`\
`
`U)
`
`1
`\.
`
`Q
`
`C
`
`0
`
`Co
`
`~
`
`(.
`
`N
`
`C)
`
`c--1
`Oo
`a
`~ 0
`o<J
`~
`~
`t - 00.
`~
`-
`l
`?
`\/) cv
`~
`~ cl
`'-)•+-
`r
`-;-
`... ~ / r ~ +
`C ~ ~
`_o
`j-r J ~- ~,
`if) +~ c::::>;, i;~ q
`l
`v, *
`--
`-
`CJ
`JI C
`-+-
`--~
`--
`:_j:.
`'4---:' ~ \,.
`~ I ] Jl .s:: +
`~ if.)
`~
`v}
`ti
`\:,
`<3
`C
`~
`-i-
`{f,'v V)
`'9
`u
`
`~
`•
`
`0
`
`I~
`
`0
`
`0
`
`PayPal Ex. 1011, p. 28
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 28 of 36 US 2002/0099665 Al
`
`r /.712
`
`\ ._ ___ !; __ __ _ ,
`
`I' -
`\._.O l'Yl I
`
`D ( i ve. -r
`
`DwlCI.-___
`--Y
`\-c;;-~c,;,-.f-/ w a.re __ _
`
`2 710
`
`.[) CL,i ,a_..
`
`i Use~~:;:-+ ), 1 O ~.
`
`~---···--·
`
`PayPal Ex. 1011, p. 29
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 29 of 36 US 2002/0099665 Al
`
`No
`
`Prompt user to interface
`pocket vault with
`interface station and
`connact interface statron
`to interface station
`compuler (e.g., via USB)
`
`No
`
`Attempt to establish
`connection between
`>oi----j pocket vault and website
`on nelwork server(s) via
`driver{s)
`
`Or,oln
`
`Website on
`network server{s)
`accessed by browser on
`inter1ace stabon
`compuler
`
`Run dnver(s)
`
`Yes
`
`Requisite driver{s)
`instaUed?
`
`No
`
`lnstalldriver(s)
`rouUne
`
`Yos
`
`Yos
`
`New pockel
`vnull holdor
`roul1no
`
`Vos-
`
`Y e s - - - - - - - - - Existing pocket vault
`holder routine
`
`Display message re:
`unsuccessful
`commun1cal1on allempt
`
`No
`
`End
`
`PayPal Ex. 1011, p. 30
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 30 of 36
`
`US 2002/0099665 Al
`
`Begin
`
`Download driver(s)
`
`~(OC
`
`/ (cid:173)
`
`---- -----
`
`Run installer
`
`'
`
`Register driver(s)
`
`,
`
`Lr'
`
`Set preferences
`
`,.
`
`End
`
`3/
`
`PayPal Ex. 1011, p. 31
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 31 of 36
`
`US 2002/0099665 Al
`
`Begin
`
`:3/(_.,'2.-
`
`No
`
`Create account for
`new holder in
`response to user
`input
`
`Yes
`
`Yes----~
`
`_/,
`.)c.
`2.
`"-is, ~
`
`Prompt new pocket vault
`holder to apply fingerprint to /
`pocket vault while pocket
`vault is interfaced with
`interface unit, and to follow
`instructions given by pocket
`vault
`
`Yes +41--
`
`Website
`released encrypted
`validation information
`(e.g., PKI certificate) to
`pocket vault?
`
`No
`
`Yes
`
`Yes
`
`Yes
`
`Display message
`ro: successful
`validation of new
`holder
`
`~2(b
`
`Display message
`ro: unsuccessful
`validation of new
`holder
`
`r
`
`•-.i:·22 0
`_,,
`
`End
`
`PayPal Ex. 1011, p. 32
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 32 of 36 US 2002/0099665 Al
`
`3024-
`
`Por1 lntemet l!iellings
`~om oockel vaul! t9
`l «·-fen,<sc e Mt
`Cu,,,~.,r
`
`14-------Yes
`
`_J-
`
`Card loading
`roullne
`
`Synchrornznlion
`roul1no
`
`~ ';) L)C,.
`_,r
`
`Prompt user to apply
`l1ngorpnnl lO pockot
`vaull while pock.ol voull is
`lnlerfaood w1lh inlorface
`u~l
`
`Yes
`
`Display message re:
`unsucce&&ful
`~ l l emp l
`<1.,fi,.c,.i,r,tli,,.
`
`Select runction
`
`r r
`-
`Identity por1ing' .set'ecuo.r-{
`/-
`routine
`
`Backup routino
`
`Set preferences
`routine
`
`Terminale sossion
`
`Change Internal seUings
`back lo original
`configuration
`
`Delete cached pages
`and anfonnation
`
`PayPal Ex. 1011, p. 33
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 33 of 36 US 2002/0099665 Al
`
`(
`
`llown
`
`Ye,
`
`Prompt user lo swipe
`card in interface uml
`stripe reader
`
`No
`
`__ J_
`
`Yes
`
`Uso browser to cronto
`
`cordaccountonwobs1te i - - - - - - - - - - - - - - - -L - - - -(cid:157) <
`
`Yes-~
`
`Take appropriate
`security measures
`
`No
`
`Download card V"::,, If-f 6
`
`lnrormation rram webs11e
`to pocke! vault via
`dnve~•)
`
`DISplay message to
`holder rs: successful
`card loading
`
`PayPal Ex. 1011, p. 34
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 34 of 36 US 2002/0099665 Al
`
`Website-compiles
`data to download
`to pocket vault
`
`Yes
`
`·3,(,/_ D
`
`Yes
`
`,,__ 3(0<t
`
`Generate
`message re:
`unsuccessful
`recovery
`
`Generate
`message re:
`successful
`recovery
`
`End
`
`Determine
`synchronization
`parameters based
`on user
`preferences and
`pocket vault ID
`
`r;,5 0 '2
`
`Website generates
`sets of current r
`data to transfer to
`pocket vault
`
`'"Sc- 0 Cf
`)
`
`Yes
`
`Transfer
`synchronization
`data from website
`to pocket vault,
`and vice•versa, via
`driver(s)
`
`Update last
`synchronization
`date on both
`pocket vault and
`website
`
`/' ;,~(L_
`
`Yes
`
`';,S-( (,
`
`,.~t<?
`
`~~(<l
`
`Generate
`message re:
`successful
`synchronization
`
`Generate
`message re:
`unsuccessful
`synchronization
`
`End
`
`PayPal Ex. 1011, p. 35
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 35 of 36
`
`US 2002/0099665 Al
`
`Download internet
`7 L.
`settings from
`interface station ~ ()
`computer to
`WP.hsite
`
`Compile and ~ 7 o Cf
`display internet
`settings to user via
`browser
`
`No---~
`
`Yes-
`
`Download
`modified internet
`settings to
`interface station
`computer via
`driver{s)
`
`No
`
`End
`
`-- ....
`
`PayPal Ex. 1011, p. 36
`PayPal v. IOENGINE
`
`
`
`Patent Application Publication
`
`Jul. 25, 2002 Sheet 36 of 36
`
`US 2002/0099665 Al
`
`Yes
`
`Display message
`re: communicatior
`error
`
`Begin
`
`Gi
`
`ansm· -reqTiesJ
`;,"'\ o l..
`for information
`oncemmg current
`preference
`ettings to pocket
`aull.Jli ~ciYe1(1,
`
`Yes
`
`Compile and
`display current
`preference
`settings to user
`··---~-- ~---
`
`3"'1 tO
`
`--No
`
`Yes
`
`Download
`modified".:·
`preference
`settings to pocket
`vault via driver(s)
`
`Display message
`re: successful
`modification of
`preferences
`
`No
`
`End
`
`PayPal Ex. 1011, p. 37
`PayPal v. IOENGINE
`
`Yes
`
`j
`
`?;,¥0'6
`~
`Display message
`re: communication
`error
`
`Transmit request
`for backup
`information to
`pocket vault via
`driver(s)
`
`':2-;<;;,0'--
`
`Yes
`
`Store backup
`Information on
`network server(s)
`
`..-.z,,'J''o
`
`··-·r·---- -aft (L..
`
`Display message
`re: successful
`backup operation
`
`End
`
`
`
`US 2002/0099665 Al
`
`Jul. 25, 2002
`
`1
`
`PORTABLE ELECTRONIC AUTHORIZATION
`SYSTEM AND METHOD
`
`RELATED APPLICATIONS
`
`[0001] This is a Continuation-in-Part (CIP) of U.S. appli(cid:173)
`cation Ser. No. 09/675,438, filed Sep. 28, 2000, and now
`pending, which claims the benefit of each of: (1) Application
`Serial No. 60/156,356, filed Sep. 28, 1999; (2) Application
`Serial No. 60/167,050, filed Nov. 23, 1999; (3) Application
`Serial No. 60/184,425, filed Feb. 23, 2000; and (4) Appli(cid:173)
`cation Serial No. 60/217,542, filed Jul. 12, 2000.
`
`FIELD OF THE INVENTION
`
`[0002] The present inventions are directed to novel sys(cid:173)
`tems and methods for engaging in transactions involving
`financial and/or non-financial media.
`
`BACKGROUND OF THE INVENTION
`
`[0003] People often times carry wallets with them when
`they engage in their day to day activities. A typical wallet is
`made of leather or other suitable material, and is generally
`a foldable structure that readily fits into a pocket or purse. A
`wallet typically includes a number of pockets, pouches, or
`the like for storing items such as a driver's license, a social
`security card, identification cards, credit cards, debit cards,
`membership cards, commuter passes, access tools, business
`cards, cash, coupons, event tickets, transportation tickets,
`frequent customer cards (e.g., a frequent flier card), medical
`information cards, receipts, photographs, etc.
`
`[0004] Wallets are frequently stolen, lost, or misplaced.
`When any of these events occurs, not only must the wallet
`itself be replaced, but all of the contents of the wallet must
`be replaced as well. As anyone who has lost a wallet can
`testify, replacing the contents of a wallet can be cumbersome
`and expensive. In addition, if a wallet is stolen or if a lost
`wallet falls into the wrong hands, the contents of the wallet
`may be used to engage in unauthorized activities which
`financially detriment the wallet owner, as well as any banks,
`credit issuers, and/or other institutions that issued financial
`media to the wallet owner.
`
`[0005] While the wallet owner is generally able to "can(cid:173)
`cel" financial media in such situations by contacting the
`respective financial media issuers, often times this is done
`too late, i.e., after one or more media have been exploited by
`the unauthorized user. In some cases, the wallet owner may
`not recall all of the contents of the now stolen wallet, and so
`may fail to report theft of one or more items. Further, in
`addition to any cash contained in a lost or stolen wallet,
`many media issued by non-financial media issuers have a
`significant cash value, e.g., transportation tickets, event
`tickets, commuter passes, and the like, and therefore repre(cid:173)
`sent an immediate ( and often times unrecoverable) financial
`loss to the wallet owner. Moreover, the misappropriation of
`media issued by non-financial media issuers that contain
`personal information, e.g., a drivers license, social security
`card, identification card, etc., present the opportunity for an
`unauthorized possessor of a wallet to engage in the practice
`known as "identity theft," whereby the possessor may
`assume the identity of the wallet owner for various fraudu(cid:173)
`lent purposes, e.g., using the assumed identity to obtain and
`exploit one or more new financial media.
`
`SUMMARY OF THE INVENTION
`
`[0006] According to one aspect of the present invention, a
`method is disclosed for enabling a software module on a
`computer operated by a user to access restricted information
`on a server. With an electronic device distinct from the
`computer, an identity of the user is authenticated to deter(cid:173)
`mine that the user is permitted to access the restricted
`information on the server. In response to the electronic
`device authenticating the identity of the user, the software
`module on the computer is permitted to access the restricted
`information on the server.
`
`[0007] According to another aspect, a method is disclosed
`for altering settings on a computer to correspond to settings
`on an electronic device distinct from the computer. With the
`electronic device, an identity of a user is authenticated to
`determine that the user is authorized to use the electronic
`device. In response to authenticating the identity of the user,
`the settings on the computer are altered to correspond to
`settings on the electronic device.
`
`[0008] According to another aspect of the invention, a
`system for enabling a software module on a computer
`operated by a user to access restricted information on a
`server includes an electronic device which includes a user(cid:173)
`authenticator to authenticate an identity of the user to
`determine that the user is permitted to access the restricted
`information on the server. The system further comprises
`means for, in response to the electronic device authenticat(cid:173)
`ing the identity of the user operating the computer, enabling
`the software module on the computer to access the restricted
`information on the server.
`
`[0009] According to yet another aspect, a system for
`altering settings on a computer to correspond to settings on
`an electronic device distinct from the computer comprises a
`user authenticator included in the electronic device to
`authenticate an identity of a user to determine that the user
`is authorized to use the electronic device. The system further
`comprises means for, in response to authenticating the
`identity of the user, altering the settings on the computer to
`correspond to settings on the electronic device.
`
`[0010] According to another aspect, an apparatus includes
`a housing; a user authenticator, supported by the housing,
`that authenticates an identity of a user; at least one memory,
`supported by the housing, that stores transaction information
`for at least first and second media; and at least one output,
`supported by the housing, that releases at least a portion of
`the transaction information to a point-of-sale (POS) terminal
`after the user authenticator has authenticated the identity of
`the user.
`
`[0011] According to another aspect of the present inven(cid:173)
`tion, a method involves steps of: ( a) storing transaction
`information for at least first and second media in a memory
`of a device (b) using the device to authenticate an identity of
`a user; and ( c) after authenticating the identity of the user
`with the device, transferring at least a portion of the trans(cid:173)
`action information from the device to a point-of-sale (POS)
`terminal.
`
`[0012] According to another aspect of the present inven(cid:173)
`tion, an apparatus includes: a housing; at least one memory,
`supported by the housing, that stores transaction information
`for at least one media; a user authenticator, supported by the
`housing, that authenticates an identity of a user of the
`
`PayPal Ex. 1011, p. 38
`PayPal v. IOENGINE
`
`
`
`US 2002/0099665 Al
`
`Jul. 25, 2002
`
`2
`
`apparatus; and at least one output, supported by the housing,
`that, after the user authenticator has authenticated the iden(cid:173)
`tity of the user, releases an embedded identification code of
`the apparatus from the housing that enables a device receiv(cid:173)
`ing the embedded identification ID code to authenticate the
`identity of the apparatus.
`
`[0013] According to another aspect of the present inven(cid:173)
`tion, a method involves steps of: storing transaction infor(cid:173)
`mation for at least one media in a memory of a first device;
`using the first device to authenticate an identity of a user;
`and after authenticating the identity of the user with the first
`device, releasing an embedded identification code of the
`apparatus from the housing that enables a second device
`receiving the embedded identification code to authenticate
`the identity of the first device.
`
`[0014] According to another aspect of the present inven(cid:173)
`tion, an apparatus includes: at least one memory that stores
`transaction information for at least first and second media; at
`least one input that enables a user to select one of the at least
`first and second media; a display that provides a visual
`indication to the user regarding which of the at least first and
`second media has been selected with the at least one input;
`and at least one output that selectively releases at least a
`portion of the transaction information to a point-of-sale
`(POS) terminal.
`
`[0015] According to another aspect of the present inven(cid:173)
`tion, a method involves steps of: storing transaction infor(cid:173)
`mation for at least first and second media in a memory of a
`device; receiving as input a user's selection of one of the at
`least first and second media; displaying a visual indication to
`the user regarding which of the at least first and second
`media has been selected; and transferring at least a portion
`of the transaction information from the device to a point(cid:173)
`of-sale (POS) terminal.
`
`[0016] According to another aspect of the present inven(cid:173)
`tion, an apparatus includes: at least one memory that stores
`transaction information for at least one financial media and
`at least one non-financial media; and at least one output that
`selectively releases at least a portion of the transaction
`information to a point-of-sale (POS) terminal.
`
`[0017] According to another aspect of the present inven(cid:173)
`tion, a method involves steps of: storing transaction infor(cid:173)
`mation for at least one financial media and at least one
`non-financial media in a memory of a device; and transfer(cid:173)
`ring at least a portion of the transaction information from the
`device to a point-of-sale (POS) terminal.
`
`[0018] According to another aspect of the present inven(cid:173)
`tion, a system includes: a housing; at least one memory,
`supported by the housing, that stores transaction information
`for at least one media; a device releasably attached to the
`housing; and configuring means, supported by the housing,
`for selectively configuring the device to hold the transaction
`information so that the device may be used to engage in a
`transaction involving the at least one media.
`
`[0019] According to another aspect of the present inven(cid:173)
`tion, a method involves steps of: ( a) storing transaction
`information for at least one media in a memory of a first
`device, the first device having a second device releasably
`attached thereto; (b) while the second device is attached to
`the first device, configuring the second device to hold the
`transaction information for the at least one media based on
`
`the contents of the memory; ( c) detaching the second device
`from the first device; and (d) using the second device to
`engage in a transaction involving the at least one media.
`[0020] According to another aspect of the present inven(cid:173)
`tion, a system includes: a f