CA2600704A1 - Modular signature and data-capture system - Google Patents
Modular signature and data-capture system Download PDFInfo
- Publication number
- CA2600704A1 CA2600704A1 CA002600704A CA2600704A CA2600704A1 CA 2600704 A1 CA2600704 A1 CA 2600704A1 CA 002600704 A CA002600704 A CA 002600704A CA 2600704 A CA2600704 A CA 2600704A CA 2600704 A1 CA2600704 A1 CA 2600704A1
- Authority
- CA
- Canada
- Prior art keywords
- length
- arguments
- host
- argument
- field
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Abandoned
Links
Classifications
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
- G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
- G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
- G07F7/1008—Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
- G06Q20/341—Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q20/401—Transaction verification
- G06Q20/4014—Identity check for transactions
- G06Q20/40145—Biometric identity checks
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06V—IMAGE OR VIDEO RECOGNITION OR UNDERSTANDING
- G06V40/00—Recognition of biometric, human-related or animal-related patterns in image or video data
- G06V40/30—Writer recognition; Reading and verifying signatures
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
- G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
- G07F7/0873—Details of the card reader
- G07F7/088—Details of the card reader the card reader being part of the point of sale [POS] terminal or electronic cash register [ECR] itself
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07G—REGISTERING THE RECEIPT OF CASH, VALUABLES, OR TOKENS
- G07G1/00—Cash registers
- G07G1/0036—Checkout procedures
Abstract
The present invention relates to a system comprising a host and a remote transaction terminal in communication with the host, wherein the host is capable of generating a command, and the command includes an opcode, an arguments length field, and an arguments data field. The host comprises a processor and a memory containing code for execution by the processor, wherein the processor is capable of generating a command, and the command includes an opcode, an arguments length field, and an arguments data field. The present invention also relates to a method comprising providing a host capable of communicating with a remote transaction terminal, and generating at the host a command that includes an opcode, an arguments length field, and an argumentsdata field.
Description
MODULAR SIGNATURE AND DATA-CAPTURE SYSTEM
FIELD OF THE INVENTION
The invention relates generally to signature and data-capture equipment, and more particularly to such equipment providing a modular system capability, and providing capability to transact payment at point of transaction, and to issue a reward to a user of the system.
BACKGROUND OF THE INVENTION
Equipment that captures signature and other information drawn on a screen by a user is known in the art. For example, many businesses are beginning to adopt electronic equipment that captures a customer's signature to verify a credit card charge purchase. At a store or other point of transaction, the customer signs his or her name with a stylus on a screen surface. The screen surface responds to signals from the stylus or to force from the stylus. The signature data are collected and signal processed within the equipment for transmission, typically by telephone link, to a central office. One such signature collection product is the PenWare 2000, a commercially available product marketed by PenWare Corp.
of Sunnyvale, California.
At the central office, pre-stored data representing a genuine signature for the user are compared against the new data to confirm or deny authenticity of the new signature. The central office then transmits signature authenticity confirmation or denial back to the equipment at the point of transaction. If desired, the same central office and information link can be used to signal the customer's present credit limit back to the point of transaction as well.
Many existing systems use active capture technology, that often is relatively complex and expensive, and are not very robust. Such active capture technologies include use of an infra-red ("IR") emitting active stylus and a signature capture pad that includes an array of IR
detectors, or magnetic stylus and capacitive-based signature capture pad.
Such equipment should be backward-compatible with existing signature and data-capture equipment, and should be compatible with the software command sets embedded in such existing equipment.
Some signature capture systems include a sub-system for reading the magnetic track on a credit card, a debit card, or the like. Generally, to store more data on such cards, the industry is moving toward providing such cards with three strips of magnetic media on which data may be stored. Unfortunately many existing systems do not accommodate more than a single strip magnetic card reader. Further, techniques for providing user security when using such cards frequently are limited to the use of personal identification numbers ("PINs"), which numbers can become lost or compromised.
FIELD OF THE INVENTION
The invention relates generally to signature and data-capture equipment, and more particularly to such equipment providing a modular system capability, and providing capability to transact payment at point of transaction, and to issue a reward to a user of the system.
BACKGROUND OF THE INVENTION
Equipment that captures signature and other information drawn on a screen by a user is known in the art. For example, many businesses are beginning to adopt electronic equipment that captures a customer's signature to verify a credit card charge purchase. At a store or other point of transaction, the customer signs his or her name with a stylus on a screen surface. The screen surface responds to signals from the stylus or to force from the stylus. The signature data are collected and signal processed within the equipment for transmission, typically by telephone link, to a central office. One such signature collection product is the PenWare 2000, a commercially available product marketed by PenWare Corp.
of Sunnyvale, California.
At the central office, pre-stored data representing a genuine signature for the user are compared against the new data to confirm or deny authenticity of the new signature. The central office then transmits signature authenticity confirmation or denial back to the equipment at the point of transaction. If desired, the same central office and information link can be used to signal the customer's present credit limit back to the point of transaction as well.
Many existing systems use active capture technology, that often is relatively complex and expensive, and are not very robust. Such active capture technologies include use of an infra-red ("IR") emitting active stylus and a signature capture pad that includes an array of IR
detectors, or magnetic stylus and capacitive-based signature capture pad.
Such equipment should be backward-compatible with existing signature and data-capture equipment, and should be compatible with the software command sets embedded in such existing equipment.
Some signature capture systems include a sub-system for reading the magnetic track on a credit card, a debit card, or the like. Generally, to store more data on such cards, the industry is moving toward providing such cards with three strips of magnetic media on which data may be stored. Unfortunately many existing systems do not accommodate more than a single strip magnetic card reader. Further, techniques for providing user security when using such cards frequently are limited to the use of personal identification numbers ("PINs"), which numbers can become lost or compromised.
In the area of computer architecture, current design has evolved to accommodate standard buses, standard expansion slots and ports, and standardized add-on components.
Unfortunately, prior signature pad capture systems have tended to exhibit a closed architecture design that does not readily provide for standardized input and output signals and peripheral devices.
When used in a commercial environment such as a store, such systems do not appreciably help the merchant in terms of reducing paperwork and expediting cash flow.
Although at the moment of payment the merchant temporarily has the user's complete attention, such systems do not readily enable the merchant to promote further and additional sales, for example by displaying on the system appropriate advertising and/or rewards, such as coupons for discounts on present or future purchases.
Thus there is a need for a signature capture product and system that preferably employs backward-compatible standardized architecture, that can interface with a variety of input/output and other peripheral devices.
Preferably such device should read and write to a card bearing three magnetic stripes, and/or to a smartcard, and use a passive stylus. Further, such product should have the ability to provide security beyond that associated with PIN identification. In addition, the system should be useable to display merchant advertising and to issue rewards to the user, commensurate with the nature of the immediate purchase. Finally, such system should be useable to facilitate instant transaction payment to a merchant, while minimizing paperwork, and should be able to assist a user in maintaining computerized financial data relating to transactions made using the present invention.
The present invention aim at overcoming the above discussed drawbacks of the prior realizations SUMMARY OF THE INVENTION
More specifically, according to the present invention, there is provided a system comprising a host and a remote transaction terminal in communication with the host. The host is capable of generating a command, and the command includes an opcode, an arguments length field, and an arguments data field.
The present invention also relates to a host comprising a processor and a memory containing code for execution by the processor. The processor is capable of generating a command, and the command includes an opcode, an arguments length field, and an arguments data field.
The present invention is further concerned with a method comprising providing a host capable of communicating with a remote transaction terminal and generating at the host a command that includes an opcode, an arguments length field, and an arguments data field.
According to non-restrictive illustrative embodiments of the present invention:
- the arguments length field specifies a total length of arguments in the arguments data field;
- the arguments length field is set to a zero value when the arguments data field is empty;
- the arguments data field includes at least one fixed length argument;
- the arguments data field includes at least one variable length argument;
- the arguments data field includes at least one fixed length argument and at least one variable length argument;
- the opcode includes 16 bits and the arguments length field includes 16 bits.
- the at least one variable length argument includes an argument length sub-field;
- the argument length sub-field includes 16 bits;
- the at least one variable length argument includes an argument length sub-field;
- the argument length sub-field includes 16 bits;
Unfortunately, prior signature pad capture systems have tended to exhibit a closed architecture design that does not readily provide for standardized input and output signals and peripheral devices.
When used in a commercial environment such as a store, such systems do not appreciably help the merchant in terms of reducing paperwork and expediting cash flow.
Although at the moment of payment the merchant temporarily has the user's complete attention, such systems do not readily enable the merchant to promote further and additional sales, for example by displaying on the system appropriate advertising and/or rewards, such as coupons for discounts on present or future purchases.
Thus there is a need for a signature capture product and system that preferably employs backward-compatible standardized architecture, that can interface with a variety of input/output and other peripheral devices.
Preferably such device should read and write to a card bearing three magnetic stripes, and/or to a smartcard, and use a passive stylus. Further, such product should have the ability to provide security beyond that associated with PIN identification. In addition, the system should be useable to display merchant advertising and to issue rewards to the user, commensurate with the nature of the immediate purchase. Finally, such system should be useable to facilitate instant transaction payment to a merchant, while minimizing paperwork, and should be able to assist a user in maintaining computerized financial data relating to transactions made using the present invention.
The present invention aim at overcoming the above discussed drawbacks of the prior realizations SUMMARY OF THE INVENTION
More specifically, according to the present invention, there is provided a system comprising a host and a remote transaction terminal in communication with the host. The host is capable of generating a command, and the command includes an opcode, an arguments length field, and an arguments data field.
The present invention also relates to a host comprising a processor and a memory containing code for execution by the processor. The processor is capable of generating a command, and the command includes an opcode, an arguments length field, and an arguments data field.
The present invention is further concerned with a method comprising providing a host capable of communicating with a remote transaction terminal and generating at the host a command that includes an opcode, an arguments length field, and an arguments data field.
According to non-restrictive illustrative embodiments of the present invention:
- the arguments length field specifies a total length of arguments in the arguments data field;
- the arguments length field is set to a zero value when the arguments data field is empty;
- the arguments data field includes at least one fixed length argument;
- the arguments data field includes at least one variable length argument;
- the arguments data field includes at least one fixed length argument and at least one variable length argument;
- the opcode includes 16 bits and the arguments length field includes 16 bits.
- the at least one variable length argument includes an argument length sub-field;
- the argument length sub-field includes 16 bits;
- the at least one variable length argument includes an argument length sub-field;
- the argument length sub-field includes 16 bits;
- a size of the at least one fixed length argument is determined by its type;
- a size of the at least one fixed length argument is determined by its type; and - the remote transaction terminal is capable of generating a result argument, and the result argument lacks any opcode or arguments length field.
The foregoing and other objects, advantages and features of the present invention will become more apparent upon reading of the following non-restrictive description of preferred embodiments thereof, given by way of example only in conjunction with the accompanying drawings.
BRIEF DESCRIPTION OF THE DRAWINGS
In the appended drawings:
FIGURE 1 depicts a signature pad device with exemplary add-on options, according to the present invention;
FIGURE 2 is a block diagram of a signature pad device and plug-in accessories, according to the present invention;
FIGURE 3 depicts a signature pad device whose display shows a menu and virtual keys for user entry of data, according to the present invention;
- a size of the at least one fixed length argument is determined by its type; and - the remote transaction terminal is capable of generating a result argument, and the result argument lacks any opcode or arguments length field.
The foregoing and other objects, advantages and features of the present invention will become more apparent upon reading of the following non-restrictive description of preferred embodiments thereof, given by way of example only in conjunction with the accompanying drawings.
BRIEF DESCRIPTION OF THE DRAWINGS
In the appended drawings:
FIGURE 1 depicts a signature pad device with exemplary add-on options, according to the present invention;
FIGURE 2 is a block diagram of a signature pad device and plug-in accessories, according to the present invention;
FIGURE 3 depicts a signature pad device whose display shows a menu and virtual keys for user entry of data, according to the present invention;
FIGURE 4 depicts a signature pad device and omnibus plug-in accessory, according to the present invention;
FIGURE 5 is a block diagram depicting additional services and functions provided by the present invention.
DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT
Figure 1 depicts a generic system 10 that includes a signature pad device 20 that preferably is coupleable to a host system 30 via a communications link 40 that may include a telephone line, a network or internet linkage, wireless linkage including satellite linkage, among other modes of information transfer. Host 30 may be a dumb terminal, an electronic cash register, a sophisticated centralized networked server, or other piece of equip-ment. Although Figure 1 shows a single device 20 coupled to host 30, in practice, many devices 20 may be coupled to a common host, and/or may be daisy-chained to one another. As will be described, device 20 has software capabilities that permit host 30 to download not only commands and status signals, but applications and forms as well.
Device 20 includes a pressure sensitive screen and dis-play unit 50 that can respond to pressure from a passive stylus or pen 60. As will be described later, unit 50 combines and superimposes a pressure sensitive pad 50A
and as a liquid crystal display ("LCD") 50B into a single unit (see Figure 2). A user can write a signature 70 on unit 50 using stylus 60, and simultaneously see the as-written signature displayed on unit 50. Of course, ri sketches and other graphics may be user-drawn on unit 50.
Unit 50 can also display menus, commands, graphics, and other information from a processor unit within unit 20, or using data from the host system.
Unit 20 also can communicate input data and/or output data from other than screen 50. Unit 20 preferably in-cludes a magnetic card reader ("MCR") 80 that can read/write data from as many as three magnetic stripes 90 borne on a credit card or other substrate 100. The cred-it card 100 is hand-slid through a slit-like channel 110 in the housing 120 of unit 20, and magnetically stored information may be read from or written to stripes 90.
Unit 20 preferably includes at least one accessory slot 130 through which an accessory card 140 can be electroni-cally coupled to unit 20. Card 140 preferably has an industry-wide interface, e.g., PCMCIA type II, and may be a so-called smart card that internally stores user iden-tification data as well as a monetary value of the card.
As such, the card may be used as a debit card. Device 20 exhibits high degree of security when used with a smart card 140 in that the card internally stores the correct personal identify number ("PIN") for the card owner.
When using device 20 and a debit smart card, a user must manually enter PIN data that matches the true data pre-stored in the debit smart card. If a PIN match results, a transaction can go forth if the monetary value of the card is not exceeded. Of course, other accessory cards 140 complying with the internal interface standard may also be used. Further, PCMCIA compatibility permits the I
preferred embodiment to function with many PCMCIA type II
solid state memory units, among other accessories.
Unit 20 also provides several input/output ports e.g., 150, 160, 170 through which still other units and acces-sories may be accessed. Of course a greater or less number of such ports could be provided. Host system 30 for example is accessed via port 160, preferably a serial RJ45 or a DB9 communication port. Preferably such ports can carry synchronous or asynchronous data at rates at least up to 19.2 Kbaud. An infra-red transmitter/receiver light emitting diode ("LED") 180 preferably is also included to permit IR wireless commu-nication between unit 20 and other devices, a printer for example. A transducer 185 such as a loudspeaker is pro-vided to provide audio signal confirmation to the user with respect to entry of data, device status, and so on.
At least one port, e.g., port 150, is disposed to provide the option of allowing accessory units to plug-into and be physically attached to unit 20. Such plug-in and attachment is depicted in Figure 1 by the large arrow point toward port connector 150. Of course accessory units whose form factor did not readily permit such at-tachment could still be used. Such units would be elec-trically coupled to unit 20 via a cable terminating in a connector appropriate to mate to the connector associated with port 150, or other port(s) associated with device 20.
a One accessory unit 190 might include a key pad 200 to allow a user to enter data into unit 20, including for example a personal identification number ("PIN"). In the configuration of Figure 1, a connector (not shown) on the righthand side of unit 190 would be disposed so as to matingly engage connector 150 on unit 20 such that elec-trical and mechanical couplings results. Another acces-sory might be a fingerprint unit 210 that could include a screen 220 against which a user's thumb (or other finger) is pressed to make a print 230. Software within unit 210 and/or unit 20 could signal process a portion of the resultant fingerprint data for transmission to host sys-tem 30. Host system 30 can compare the just made finger-print with previously stored fingerprint data for the user and provide absolute confirmation that the user is who the user purports to be. Of course unit 210 could be implemented with a standalone computer and scanner unit, whose output data were coupled to unit 20 via an input port, e.g., port 150.
In the preferred embodiment, unit 20 is contained within a housing 120 that measures about 15 cm in width x 20 cm in depth by 4 cm in height, and weighs about 630 g. The useable area of pressure pad/LCD screen 50 is about 7.6 cm x 10.2 cm. Figure 1 is intended to depict a preferred form factor, and it is understood that other form factors having other dimensions and weights could be used instead. Housing 120 preferably is made of an injection-molded plastic resin, and is ergonomically designed to accommodate right and left handed users.
Preferably unit 20 is powered by a battery 240, e.g., 12 VDC, although an internal AC-to-DC power supply could also be used. As shown in Figure 1, unit 20 includes a holder 250 for storing stylus 60 when it is not be used, and also includes a member 260 that permits securing unit 20 to a desk or counter to prevent its unauthorized re-moval. Holder 250 may also be used with a cord or the like to secure stylus 60 to unit 20.
Figure 2 is a block diagram depicting the preferred ar-chitecture 100 for unit 20, although other architectures might be utilized instead. Reference numerals in Figure 2 that are the same as numerals used in Figure 1 can refer to the same unit or sub-unit. Note that what in Figure 1 was denoted as pressure pad/LCD unit 50 is shown in Figure 2 as touch pad SOA and LCD 50B. In terms of signal processing, signals associated with units 50A and 50B may be handled differently, however from a user's perspective, these two units appear to function as a single module 50. Details as to design and fabrication of unit 50 are known in the art, and are not here pre-sented. As implemented, architecture system 300 is de-signed to be backward compatible with many existing sig-nature capture devices, for example the older PenWare model 2000 unit, and to be compatible with the command set used in such earlier devices.
Touch or pressure pad 50A preferably provides 4096x4096 pixel resolution and acts as a writing surface upon which a user may draw or write (e.g., a signature, a sketch, a doodle), preferably with passive pen 60. By passive it fl is meant that pen 60 may simply be a plastic or wooden pointed stick. In contrast to many prior art approaches, pen 60 need not emit or sense IR, or carry a magnet. As such, pen 60 and touch pad 50A are relatively robust and inexpensive to produce.
As a user writes upon the surface of touch pad 50A, pres-sure sensitive sensors within the pad respond to user-drawn positions of pen 60. In practice, the 4096x4096 pixels used in the preferred embodiment are adequate to permit signature verification. Of course, other resolu-tion pads could be used.
Preferably LCD 50B is backlit and displays signature and images drawn by user on touchpad 50A. Further, LCD 50B
can display forms, graphics controls, and generally per-mits unit 20 to act as a full featured transaction termi-nal. (For example, in Figure 3, a menu 400 including instructions 410, softkeys 420 and command key 430 is shown on LCD 50.) In the preferred embodiment, LCD 50B
provides VGA 320x240 pixel resolution and includes a zooming engine. (It will be seen that the data capture resolution of pad 50A exceeds resolution of LCD 50B.) In the preferred embodiment, LCD 50B provides sufficient resolution and contrast to comply with the low vision requirements of the Americans with Disabilities Act (ADA).
An analog-to-digital (A/D) interface 310 converts the analog pen position to the high resolution x-axis, y-axis coordinates of touch pad 50A. Pen-drawn pressure coordi-nates may be communicated in raw format to host system 30, or may be signal compressed and buffered within unit 20 and then transmitted to host system 30.
Architecture 300 includes a preferably industry standard architecture ("ISA") bus 320, which is drawn with bold lines in Figure 2. Bus 320 is used by the A/D interface unit and other units to couple information within unit 20. For example, pen detection circuitry 330 receives, via bus 320, A/D pressure pad coordinate data from unit 310, and thus can detect what the user has drawn upon touch pad 50. Display data for LCD 50B is output direct-ly by CPU 340.
In the preferred embodiment, system 300 operates under control of an embedded microprocessor (CPU) 340, e.g., an x86-compatible processor operating at 16 MHz clock fre-quency. The use of industry standard x86 architecture and an ISA bus permits unit 20 to readily accommodate future expansion, for example via PCMCIA type II memory cards and the like. Further, such standard architecture facilitates ease of software programming and permits use of readily available, low cost tooling programs. For example, system architecture 300 is sufficiently flexible to permit a software developer to custom write applica-tions for touch pad 50A, and also to use a personal com-munications system to send commands and receive informa-tion bytes from the pad. The preferred embodiment pro-vides support for MS DOS/Windows 95, Windows 3.1 and Windows NT platforms.
In Figure 2, read only memory (ROM) 360, preferably is a 256 KB EPROM unit, stores firmware used to control CPU
340, which firmware implements a command set for operat-ing unit 20. The firmware preferably supervises process-ing a signature or other writing 70 drawn on touchpad 50.
The firmware also preferably encrypts a user's personal identification number (PIN), provides on-the-fly data compression, and can control operation of any peripheral or optional attachments coupled to unit 20, by way of example, units 190, 210.
Volatile random access memory (RAM) 350, preferably 256 KB, provides in-system memory to maintain data including encryption key, custom stored signatures, customized logos to be displayed on LCD 50B. RAM 350 may also store compressed multiple complete signatures for transmission to host 40 upon request. Communications between CPU 340, ROM 360 and RAM 350 are via ISA bus 320. RAM 350 is backed-up by battery pack 245 to preserve such data dur-ing interruptions to the system main power supply 240.
A copy protection switch unit 370 can provide a security feature that enables CPU 340 to protect encryption key data and to erase such data automatically if an attempt is made to open the case of unit 10. Attempts to tamper with device 20 will thus preferably result in automatic erasure of data, to promote data security. Such encryp-tion and copy protection features help ensure the securi-ty of transactions made using device 20.
Preferably serial communications interfaces 380 and 390 couple serial port connectors, e.g., 160, to ISA bus 320 using standard serial communications protocols. In the preferred embodiment, one RS-232 serial connector 170 and two RJ-45 connectors 160 are provided. The serial con-nectors may be used to provide communication between unit 20 and a host system 30. Host system 30 may of course provide a full server-type computer system and will typi-cally be located off-site from the point of transaction whereat unit 20 is used.
As noted, system 20 includes a built-in magnetic stripe reader (MSR) 80 that enables identification and other data encoded magnetically on cards 90 to be read as the card is slid through guide channel 110. The ROM-held command set preferably enables unit 20 to provide read operations for reading two or three track magnetic debit or credit cards 100, to help promote secure transactions.
Further, CPU 340 and ROM 360 provide for reading and encrypting personal information number (PIN) data entered into unit 20, e.g., from a PIN pad accessory unit 190.
In general, data entered using handwriting 70, data keys 200, touch data (e.g., pressing on LCD 50 to select a displayed menu option) among other user responses may also be recognized by CpU 240. Unit 20 preferable in-cludes an audio transducer 185 to provide audible feed-back to confirm successful entry of PIN data, magnetical-ly encoded data, and the like.
Optionally, unit 10 includes a port and electronics to accommodate a second and preferably LCD display 65 (see Figure 5). When unit 10 is used at a point of transac-tion, the check-out counter of a store for example, sec-ond display 65 is mounted for easy viewing by the cash-ier. Display 65 replicates what is shown on display 50, and enables a check-out cashier to confirm, for example, that the consumer-user has written his or her signature.
Smart card circuitry 145 may also be included within unit 10, or may be included within an add-on unit such as unit 225 (see Figure 4).
Device 20 preferably is implemented using application specific integrated circuits ("ASICs") to provide a low integrated circuit ("IC") chip count, to provide high reliability and to decrease fabrication costs. For exam-ple, the present invention, with its passive pen technol-ogy can maintain nearly 43,000 hours MTBF.
Consider now the nature of hardware and software opera-tions with device 20. At a relatively unsophisticated level of operation, host 30 (e.g. a cash register or terminal) controls device 20 by issuing it various com-mands and then interpreting responses from device 20.
Host 30 may signal device 20 that it is ready to accept signature data. Device 20 may then send signature data to host 30 in real-time or as blocks of compressed data.
In the preferred embodiment, all communications are in-terrupt driven to insure a timely response without miss-ing data. Alteratively, a software development toolkit is available from assignee PenWare, Inc. for 16-bit DOS, !6 Windows 3.x and Windows 95, 32-bit Windows NT and OS/2 platforms. Toolkit library routines encapsulate details concerning touch pad-host communication, permitting ap-plication developers to focus on applications without undue concern for underlying details. Toolkit services range from libraries for traditional C/C++ environments to VBX and OCS controls for rapid program development environments such as Visual Basic and report generators.
The PenWare software user's Reference Manuals for the PenWare 2000 and 3000 are referred to for further appli-cation development information, and is incorporated here-in by reference to the extent necessary.
A SigBox tool provides component software, OCX (OLE) links, and visual basic (VBX) functions. A SigKit pro-cesses signatures, encrypts, sales, converts, and can provide data in various formats including *.BMP, *.TIF, *.PCL, *.WMF, as well as providing *.DLL and C/C++ func-tions. A PadCom toolkit provides low level communica-tions to the pressure pad, including attachments thereto.
As explained more fully in the above-cited Reference Manuals, when device 20 is powered-on, a message is dis-played on LCD 50 for a few seconds. During this interval the user can cause a setup menu to be displayed by touch-ing LCD 50B. The setup menu allows personalizing set-tings such as mode of operation, LCD brightness, audio control, etc., and also permits calibrating the touch pad. When exiting the setup menu (or if the LCD screen is not touched during the power-up cycle), the unit dis-1ri plays a logo and is ready for communication with the host.
As noted, unit 20 is controlled by host 30, which sends unit 20 one or more binary commands. Some of these com-mands will cause data values to be returned by unit 20 to the host via linkage 40 (which may in fact be wireless).
In the preferred embodiment, each issued host-command includes a 16-bit opcode followed by a 16-bit argument length, followed by optional argument data. Command results do not have an opcode or argument length fields, and consist of a stream of result arguments, All 16-bit values are ordered as low byte followed by high byte.
Each command sent from the host (or terminal) to the pad consists of 16-bit opcode followed by 16-bit arguments length, followed by optional argument data. The format is as follows:
opcode arguments length (optional)arguments data field =20 The arguments length specifies the total length of the arguments in the argument data field. If the command does not have any argument data, the argument length value is set to zero, and the argument field is omitted.
If the argument field exists, it may have one or more arguments, which may be fixed-length of variable=length.
Fixed-length arguments have a size determined by the type of argument. The size of variable-length arguments is specified by a 16-bit argument length sub-field, follow by the actual argument data.
SUBSTITUTE SHEET (RULE 26) argument data field lenl argl arg2 arg3 If the argument field exists, the field may consist of one or more arguments. Each argument is either fixed length or variable-length. The size of each fixed-length argument is determined by its type. The size of each variable-length argument is specified by a 16-bit argu-ment length sub-field followed by the actual argument data. In the command format shown immediately above, three arguments are present. The first argument (argl) is variable-length with the length being specified by the preceding field (leni). The two remaining fields (arg2, arg3) are each fixed-length arguments.
The format of data received by the host is a stream of result arguments, there being no opcode or arguments length fields. Similar to what was described for the host send command format, each result argument is fixed-length (the length being type-determined) or variable-length (the variable-length argument being spec-ified by a 16-bit argument length sub-field preceding the actual argument data. Format of 16-bit values is low byte/high byte, that is for a 16-bit value, the low byte precedes the high byte.
By way of example, consider a command having no argument.
(All of the following examples may be tested using VIEWCOMM operating under MS-DOS.) If it were desired to send a command clear the LCD screen, the following hexa-decimal byte stream would be issued:
~ Cl $40$32$O0$00 The above byte stream may be viewed as follows:
opcode arguments length $40$32 $00$00 The first byte $40 is command opcode low byte, and the second byte $32 is the high byte. Together these two bytes comprise the full 16-bit opcode value of $3240, which is the command Display_Clear. The next byte is the arguments length parameter low byte value, for which last byte is the high byte. Since no arguments are present in this example, the arguments length value is equal to $0000, which arguments length value should always be included even when sending no arguments. After executing this command, the LCD screen will be cleared, and there is nothing to be returned to the host computer.
Consider now an example of a command that requires four fixed length argument bytes of the AREA type. Suppose it is desired to draw a solid box on the LCD screen, starting at the horizontal column position $20 and verti-cal row position of $10, using a size $30 horizontal columns by $40 vertical rows. Drawing such box would result from sending the following stream of bytes:
$51$32$08$002 The byte stream may be viewed in a more simplified fash-ion as shown below:
opcode arguments length arguments data field $51$32 $08$00 $20$00$10$00$30$00$40$00 2C) SUBSTITUTE SHEET (RULE 26) In the above depiction, the first two bytes represent the opcode in the low byte/high byte format. Collectively these two bytes comprise the 16-bit value $3251, which is _ the command Display_Box. The second two bytes represent the arguments length, here equal to $0008, since a total of 8 bytes follow in the argument data field.
The arguments data field contains the following informa-tion:
argument data field POINT data type VAR data type column row length bytes $08$00 $10$00 $05$00 HELLO IL The first two bytes represent the horizontal column posi-tion and the vertical row position, whereat drawing the box should begin. The third two bytes represent the horizontal column size to use when drawing the box, and the fourth two bytes represent the vertical row size to use when drawing the box. After executing this command, there is nothing to be returned from the pad to the host computer.
Consider now a more complex example of a command that requires both fixed length arguments (POINT data type) and one variable-length argument (VAR data type). If it is desired to display the text message "HELLO" at LCD
screen horizontal column of $0008 and vertical row $0010, the following stream of bytes would be sent:
2.1 SUBSTITUTE SHEET (RULE 26) , ,.
$80$32$0B$00$08$00$10$00$05$OOHELLO
Again, to simplify this example one can view the bytes as follows:
opcode arguments length arguments data field $80$32 $OB$00 $08$00$10$00$05$OOHELLO
The arguments length value equals $000B in hexadecimal (11 in decimal) because the arguments length value is equal to the full length of all of the arguments in bytes. The argument data field in this example contains 11 total bytes, and the arguments length field must al-ways equal the exact amount of bytes to follow in the argument data field.
Consider now the argument field, which may be represented as follows:
arguments data field POINT data type VAR data type column row length bytes $08$00 $10$00 $05$00 HELLO
The first set of bytes is the low byte, high byte hori-zonal column position, and the second set of bytes is the low byte, high byte vertical row position. The next set of bytes is the length of the variable-length data that is to follow, here the five-byte character string "HEL-LO". The next five bytes represent the character string to be displayed, here "HELLO".
2.2 SUBSTITUTE SHEET (RULE 26) The present invention can also handle bitmaps, for exam-ple an image drawn with passive pen 60 upon the touch screen 50A. In a bitmap, an image is represented digi-tally such that each pixel in the image corresponds to one or more bits in the bitmap. The VAR bits are a pointer to a buffer that holds byte-aligned bitmap bits to be stored as an array of byte values. As implemented, the VAR bits are used in command $2050 Mem LoadBitmap, $3290 Display_Bitmap, and $32F4 Display_SetLogo. To avoid conflict, bitmap bits should not include Windows BITMAPINFOHEADER or color table.
Device 20 may be configured to capture and transmit sig-nature data to the host as soon as available, e.g., in real-time. Alternatively, signature data can be captured and stored or buffered within unit 20 for later transmis-sion to the host. A Pad Record command, or a Pad_RecordBuf command is used to start a signature cap-ture session. As it is being written on touch pad 50A, the signature is displayed on LCD 50B. The signature will remain displayed until a Pad_Reset command is re-ceived from the host. The host application will deter-mine when to terminate the signature signing session.
Such termination can be accomplished by host-setting a predetermined time for signing, by viewing the signature, or by a completion indication from the signing user. The completion indication may be entered using a virtual (e.g., LCD-displayed) control key such as softkey 430 shown in Figure 3. The user's pressing LCD 50 in the area of control key 430 (or the equivalent) causes a Pad_Stop or Pad StopBuf command to issue, which ends a signature signing session.
Signature real-time and buffered captured modes will now be described. Real-time signature capture x-axis,y-axis coordinates and pen status data can be sent to the host as soon as they are available. When the Pad Record com-mand is sent from the host to device 20, device 20 re-sponds by sending the signature data in real-time to the host. Preferably, the format of this real-time data is a uncompressed vector contained in five byte packet, al-though other formats could be used. Issuance of the Pad_Stop command terminates real-time signature capture mode.
In buffered signature capture mode, signatures can be stored in internal RAM 350 within device 20, for uploading to the host when requested. Procedurally, a Pad_RecordBuf command is first issued by the host to initiate a buffered capture mode. Device 20 then cap-tures and stores all pen strokes on touch pad 50A to an internal buffer (which may be associated with RAM 350), while simultaneously displaying the pen strokes on LCD
50B. At the end of signature signing session, the host issues a Pad_StopBuf command to terminate capture. The host then requests transmission of the buffered signature by sending a Pad GetBuf command to device 20. Device 20 then sends the signature data in compressed format to the host. In the preferred embodiment, the device buffer may retain up to 100 signatures at a time, although larger or smaller storage capacity may be implemented.
~~
Assume that device 20 is to read magnetically encoded information (using MSR unit 80) in one or more stripes 90 on a card 100, as shown in Figure 1. The host issues a Card GetTrack command followed by the track number, e.g., track 0, 1 or 2 in the preferred embodiment. Device 20 will then return the track data read from card 100, if available. A Card Reset command is then used to purge track storage buffers within device 20, e.g., associated with RAM 350, such that a new card 100 may be read.
As noted with respect to Figure 1 and Figure 3, device 20 may be used with a PIN pad unit 190. Alternatively, LCD
50B may be caused to display soft-keys that the user can touch to key-in PIN and other numeric data. In either event, the user is prompted to enter a PIN number, typi-cally in conjunction with a debit transactions.
In Figure 3, for example, LCD 50 presents the user with a menu display 400 that includes instructions 410, a virtu-al keypad 420, and one or more soft control keys 430. If the user wishes to input a PIN that is, for example, 3642, the user presses the soft "3" key, the soft "6"
key, the soft "4" key and the soft "2" key displayed on the LCD. As the target areas to be pressed are relative-ly large, the user may press the softkeys with a finger or with pen 60.
Audible feedback from transducer 185 can provide the user with appropriate confirmatory entry response. Such re-sponse might be a simple audible "beep" or in a more sophisticated implementation, transducer 185 could emit the spoken word corresponding to each softkey digit as the key is pressed. Circuitry and techniques directed to computer-generation of spoken words corresponding to digital entries are well known in the art, and will not be described further herein.
The host system activates PIN pad 200 on an accessory unit 190, or a virtual PIN pad 420 on LCD 50 by issuing a Prompt_PIN command. When a user enters a PIN and presses an ENTER key (e.g., the "#" key), the PIN is encrypted and sent to the host. Device to host transmission pref-erably iuses a ANSI X9.8 PIN block format. A valid PIN
will contain between four and twelve digits, and the host will return an error message if the PIN is invalid. The returned message may be displayed on LCD 50 and/or audi-bly sounded via transducer 185. If a printer is coupled to device 20 (e.g., by cable or by IR) the return error message may be printed.
To promote transaction security, all PINs are preferably data encryption standard ("DES") FIPS PUB 46, 1977 en-crypted using DUKPT (ANSI X9.24) or Master/Session key management. Before using the hardware or the virtual PIN
pad, the user is asked to input an initial encryption key and serial number into device 20 in a secure environment.
In the preferred embodiment, the DUKPT key management system derives a new key for each PIN encryption, and can derive more than one million keys. In a so-called Mas-ter/Session procedure, a master key is injected into the pad in a secure environment, and thereafter, new session keys, encrypted by the Master Key, can be sent to the No pad. Device 20 preferably uses the master key to deciphe r the new transaction key, which is then used to encrypt user PIN data sent to the host.
To promote security, preferably the initial key can never be read back from the device, and is automatically delet-ed if there is an attempt to tamper with the device. The initial key is stored in battery backed 350.
While the present invention accommodates use of PIN-secu-rity, PIN numbers may be lost or compromised, for exam-ple, the user may inadvertently misplace a paper contain-ing the PIN numbers. The present invention preferably provides the ability to use fingerprint identification from the user as a form of PIN identification. In addi-tion to or as an alternative to the use of fingerprints described earlier herein, a preferred embodiment scans a fingerprint 230, which is to say, scans the user's fin-gerprint, pressed against surface 220. To reduce manu-facturing cost and product weight, scanning may be accom-plished using a miniature linear charge coupled scanning device ("CCD"), of the general sort as are found in FAX
machines. Such a device is shown in phantom as element 125 in Figure 4, and is mechanically moved (as shown by the accompanying double arrow) to scan the image of a finger pressed against region 220. Such a CCD element typically is about 1" (2.54 cm) in length and includes perhaps 300 elements, providing 300 dpi scan resolution.
E.G. & G. Reticon Co. of Sunnyvale, California is one manufacturer of such devices.
z~-Rather than store the totality of fingerprint data, it is possible to electronically examine, within a unit 210 (Figure 1) or a unit 225 (Figure 4) a portion of the total fingerprint. An algorithm is executed by CPU 340 to represent this minimal fingerprint data as a digital token, or number, which may be used as a fingerprint PIN.
This PIN number may be electronically stored, for example on a magnetic strip 90 associated with a card 100, or stored within an IC contained in a smart card 140. It is in fact possible to generate a substantially unique PIN
token for a given fingerprint and store the token within less than about 60 bytes of data.
A system 10 equipped with a fingerprint accessory unit 210 or 225 or the like is used as follows. Either before or during the transaction, the user presses his or her fingerprint against surface 220, whereupon a token is generated in realtime corresponding to the fingerprint.
This token is then compared against fingerprint PIN token information stored in the user's card 100 or card 140.
If the tokens agree (as determined by electronics within unit 10), the user is the owner of card 100 or 140, and the transaction may go forth. If the tokens do not agree, absent an error in generating one of the tokens, the user is not the owner of card 100 or 140. Under these circumstances, the transaction should not be com-pleted, absent other positive identification to the rea-sonable satisfaction of the merchant at the point of transaction.
'Z
In this fashion, the user need not memorize a PIN to secure transactions, and indeed if card 100 or 140 were lost or stolen, the resultant token mismatch when the card(s) were attempted to be used would bar the transac-tion from completion. Indeed, since users would not know how system 10 functions, it is likely that a thief would not risk introducing what appears to be fingerprint iden-tification into the merchant's computer system, and would simply not use card 100 or 140.
Further details as to the internal display operation of device 10 will now be given. Device 20 displays graphic and text information, including advertisements, on its integrated high contrast backlit LCD pixel graphic dis-play 50 in the following manner. To display data at any time, the host issues a command such as Display_Text. If desired, the host can download a bitmap image for input into battery backed RAM 350 for immediate display on LCD
50 when device 20 powers-up. Such image may also be displayed programmatically at any time by issuing a Dis-play_Logo command. The image may be a custom logo to help the user identify the application. The image may also present a helpful message to the user. The pre-ferred embodiment provides two displayable text fonts: a small 8 pixel x 8 pixel font and a larger 16 pixel x 16 pixel font. Text, graphics, and pen strokes can be dis-played on LCD 50 simultaneously.
Optional add-on unit 225 in Figure 4 is an omnibus unit that includes a fingerprint identification unit 220 (and associated electronics), electronics 145 for reading a smartcard 140, an internal printer 65 for printing indi-cia such as an itemized receipt 75, and electronics 195 for reading and processing a user's check 205. Of course unit 225 could include fewer than all of these features, or could include still additional features.
The operation of the check processing function of unit 225 will now be described. As shown in Figure 4, check 205 is inserted into slot 215 within unit 225, and is moved up and through the unit in the direction shown by the curved arrow. Electronics 195 magnetically reads characters 235 imprinted on the check, which characters identify the user's bank and bank account number. Commu-nications link 40 enables unit 10 to communicate in sub-stantially realtime with the user's identified bank to confirm there are sufficient account funds to negotiate the transaction at hand. (By substantially realtime it is mean that if communications does not occur within seconds, any time delay will be less than perhaps a min-ute or so.) If not, display 50 can signal the check-out cashier appropriately, for example through an auxiliary display unit 55, and/or speaker 185 can emit an audible warning.
In practice, the consumer purchaser would sign check 205 and insert the otherwise blank check into slot 215 in unit 225. Alternatively, the customer need not sign the check, but would write a signature on screen 50. System 10 knows the merchant store identification and the dollar amount to be charged from host information available via link 40, and knows the user's bank and account number from indicia 235 on the check. Assuming that information transmitted via link 40 to a clearing house for the user's bank confirms available funds to complete the present transaction, printer 85 will then print the date, the dollar amount, and the merchant store as payee on check 205. Printer 85 can also print the customer's signature 70 on the check, and legally "VOID" the check, e.g., by printing "VOID" thereon. Processed check 205 will then emerge from the exit portion 217 of the contin-uation of slot 205, but near the rear portion of device 225, as shown in Figure 4. If desired, other documents 75 printed by printer 85 may also emerge from the same exit slot portion 217 as a processed check 205.
The check-out cashier will then hand the check to the customer as a transaction receipt, as the funds have automatically been transferred from the identified bank account into the merchant's bank account. Of course, the customer may also be given a printed receipt 75 enumerat-ing the items purchased and their cost. Security in the above transaction can of course be promoted if the mer-chant insists upon use of a credit card 100 or smartcard 140, whose memory includes for example either PIN or preferably fingerprint PIN token information. Such secu-rity will protect the user against misuse of lost or stolen checks.
It will be appreciated that the above-described use of system 10 permits instant transfer of funds, with minimal generation of paperwork. From the merchant's perspec-tive, payment for the transaction occurs in realtime, and .3I
the transaction is memorialized electronically. From the standpoint of the user's bank, there is no paper check to be negotiated and mailed back to the user as the user al-ready possesses the "voided" or "cancelled" check as a transaction receipt.
If the transaction has involved the user of card 100 or 140, e.g., to further identification and security, card-stored information may include the customer's internet address and customer accounting information, e.g., that the customer maintains a Quicken-compatible accounting database on a home computer. System 10 can, if desired, automatically couple data memorializing the instant transaction over link 40 to the customer-user's database, whereupon the database is updated to reflect a debit for the subject transaction. If, for example, the transac-tion (or a part thereof) represents a tax deduction to the user, the user can input such information using sys-tem 10, whereupon the updated user database will properly tag the deductible portion of the subject transaction.
Note too that since the user's identity and itemized present purchases are known to the present invention, the present invention can facilitate creation and maintenance of a purchase profile for each user. Stored preferably within the merchant's computer system, such a profile may be used by the merchant to determine effectiveness of advertising, goods placement on shelves, and so forth, on a per customer basis.
Figure 5 depicts operative steps for the above proce-dures, as well as the use of system 10 to provide instant ,3z advertisement and reward coupons to the customer user.
Although Figure 5 is described within the context of a merchant retail store operation, it will be appreciated that other working environments are also applicable.
In Figure 5 at the upper left-hand corner, unit 10 (shown here with omnibus add-on unit 225) is coupled via link 40 (data path A) to a host unit 10, here a server system, perhaps present within a merchant retail store. As will be described, reward-type information will be coupled over data path B from host system (or in-store processor, ISP) 30 to unit 10. Unit 10 and (if present, accessory display 55) is preferably located at the check-out area of a retail store. As has been described, it is assumed at this juncture that the purchaser has self-identified using a smartcard or a credit-type card with magnetic strips, and is identified to system 10. Assume too that a cashier has rung-up the user transaction on a cash register (or the equivalent), and that the transaction is almost complete.
Among the information carried by data path A will be an itemized list of the user's purchases, for example, 2 bags of Brand X potato chips at $1.20/bag, 1 carton of Brand Y soda at $2.95, and so on. These line items com-prising the transaction may be coupled via data path C to a corporate level server unit 500. Whereas the in store processor or store server system 30 can readily decrement the store inventory by the items being purchased, the corporate level server 500 can do likewise for this store, and other stores also coupled to server 500.
~
Preferably the corporate level server will transmit via data path E the debit/credit information pertaining to the subject transaction to a central clearinghouse for settlement.
Stored within, or made accessible to corporate level server 500 and/or merchant level server 30 is a database list of store-carried items for which rewards or promo-tions are to be issued in realtime to the user at the point of sale. For example, Brand X potato chips may wish to offer the user an immediate discount coupon for another type of Brand X chips, or a chip dip, or the like. Brand Y soda may wish to offer a discount coupon for the purchase of ice cream, and so on. Other items purchased by the user may not be the subject of a reward promotion.
Merchant server system 30 and/or corporate level server 500 may generate and store a profile of the individual customer's purchases, and in fact some rewards may be associated with a pattern of purchases by a given custom-er. Perhaps a customer who routinely purchases beer will be offered a discount coupon for pretzels after the third such beer purchase. The profile information may also be useful to the merchant store in deciding how effective shelf placement of certain goods has been, or how effec-tive advertising has been. The inclusion of system 10 permits uniquely identifying sales and sales patterns to specific customers, by name, and potentially by sex, by age, by residence, and so forth.
Data path D can communicate to the merchant server infor-mation to be presented immediately to the purchaser.
Merchant server 30 couples this information along data path B to system 10. If the information is a coupon or the like, preferably the printer associated with unit 225 immediately prints-out the relevant discount coupon(s) 225, or other promotional information. If desired, the coupon(s) can also be displayed. It is understood that data paths A and B may in fact be coupled over a single bus of wires.
It will be appreciated that at the time the transaction is being completed, the merchant has the user's complete attention, if for no other reason than to ensure there is no inadvertent overcharge. Thus, data path B may advan-tageously carry advertisement type information into unit 10, for display. Such advertisement may be ads for prod-ucts associated with the user's present purchases, e.g., perhaps a pretzel ad if beer is now being purchased.
Using a history of past purchases by this user (such purchases being stored within system 30 and/or system 500), the ads may intelligently present information di-rected to the user. For example, if the user routinely purchases dietetic food, an ad for a new type of dietetic food carried by the merchant might be displayed, and so forth. Such ads may include video animation and/or sound.
As noted, in identifying himself or herself to unit 10, the user's identification card (smart or magnetic strip) may include the user's e-mail or internet address, and 3~
personal accounting software information. In a preferred embodiment, data path F couples information, optionally via the internet 520 or other communications link to the customer's server unit 530, perhaps located at the customer's home or business. Stored within the customer server may be a database of the customer's financial transactions, stored perhaps as part of a financial ac-counting software program 540. Drawing upon information made available from warehoused records 510 for this user, the merchant and corporate level servers can periodically update via data path H the user's server 530, such that financial software 540 is current on at least a weekly or monthly basis. Of course more frequent updates could also be provided. The user's printer 510 may then pro-vide hard copies 550 of receipts and other records rele-vant to the transaction made using device 10.
It will be appreciated from the foregoing description that the present invention provides a flexible signature capture device whose architecture readily allows for present and future expansions. The use of standardized architecture, ports, and a built-in PCMCIA type II inter-face further promotes flexible expansion, and contributes to decreased fabrication and programming costs. The preferred hardware integration reduces IC chip count and improves price/performance attributes.
Modifications and variations may be made to the disclosed embodiments without departing from the subject and spirit of the invention as defined by the following claims.
- -__~
FIGURE 5 is a block diagram depicting additional services and functions provided by the present invention.
DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT
Figure 1 depicts a generic system 10 that includes a signature pad device 20 that preferably is coupleable to a host system 30 via a communications link 40 that may include a telephone line, a network or internet linkage, wireless linkage including satellite linkage, among other modes of information transfer. Host 30 may be a dumb terminal, an electronic cash register, a sophisticated centralized networked server, or other piece of equip-ment. Although Figure 1 shows a single device 20 coupled to host 30, in practice, many devices 20 may be coupled to a common host, and/or may be daisy-chained to one another. As will be described, device 20 has software capabilities that permit host 30 to download not only commands and status signals, but applications and forms as well.
Device 20 includes a pressure sensitive screen and dis-play unit 50 that can respond to pressure from a passive stylus or pen 60. As will be described later, unit 50 combines and superimposes a pressure sensitive pad 50A
and as a liquid crystal display ("LCD") 50B into a single unit (see Figure 2). A user can write a signature 70 on unit 50 using stylus 60, and simultaneously see the as-written signature displayed on unit 50. Of course, ri sketches and other graphics may be user-drawn on unit 50.
Unit 50 can also display menus, commands, graphics, and other information from a processor unit within unit 20, or using data from the host system.
Unit 20 also can communicate input data and/or output data from other than screen 50. Unit 20 preferably in-cludes a magnetic card reader ("MCR") 80 that can read/write data from as many as three magnetic stripes 90 borne on a credit card or other substrate 100. The cred-it card 100 is hand-slid through a slit-like channel 110 in the housing 120 of unit 20, and magnetically stored information may be read from or written to stripes 90.
Unit 20 preferably includes at least one accessory slot 130 through which an accessory card 140 can be electroni-cally coupled to unit 20. Card 140 preferably has an industry-wide interface, e.g., PCMCIA type II, and may be a so-called smart card that internally stores user iden-tification data as well as a monetary value of the card.
As such, the card may be used as a debit card. Device 20 exhibits high degree of security when used with a smart card 140 in that the card internally stores the correct personal identify number ("PIN") for the card owner.
When using device 20 and a debit smart card, a user must manually enter PIN data that matches the true data pre-stored in the debit smart card. If a PIN match results, a transaction can go forth if the monetary value of the card is not exceeded. Of course, other accessory cards 140 complying with the internal interface standard may also be used. Further, PCMCIA compatibility permits the I
preferred embodiment to function with many PCMCIA type II
solid state memory units, among other accessories.
Unit 20 also provides several input/output ports e.g., 150, 160, 170 through which still other units and acces-sories may be accessed. Of course a greater or less number of such ports could be provided. Host system 30 for example is accessed via port 160, preferably a serial RJ45 or a DB9 communication port. Preferably such ports can carry synchronous or asynchronous data at rates at least up to 19.2 Kbaud. An infra-red transmitter/receiver light emitting diode ("LED") 180 preferably is also included to permit IR wireless commu-nication between unit 20 and other devices, a printer for example. A transducer 185 such as a loudspeaker is pro-vided to provide audio signal confirmation to the user with respect to entry of data, device status, and so on.
At least one port, e.g., port 150, is disposed to provide the option of allowing accessory units to plug-into and be physically attached to unit 20. Such plug-in and attachment is depicted in Figure 1 by the large arrow point toward port connector 150. Of course accessory units whose form factor did not readily permit such at-tachment could still be used. Such units would be elec-trically coupled to unit 20 via a cable terminating in a connector appropriate to mate to the connector associated with port 150, or other port(s) associated with device 20.
a One accessory unit 190 might include a key pad 200 to allow a user to enter data into unit 20, including for example a personal identification number ("PIN"). In the configuration of Figure 1, a connector (not shown) on the righthand side of unit 190 would be disposed so as to matingly engage connector 150 on unit 20 such that elec-trical and mechanical couplings results. Another acces-sory might be a fingerprint unit 210 that could include a screen 220 against which a user's thumb (or other finger) is pressed to make a print 230. Software within unit 210 and/or unit 20 could signal process a portion of the resultant fingerprint data for transmission to host sys-tem 30. Host system 30 can compare the just made finger-print with previously stored fingerprint data for the user and provide absolute confirmation that the user is who the user purports to be. Of course unit 210 could be implemented with a standalone computer and scanner unit, whose output data were coupled to unit 20 via an input port, e.g., port 150.
In the preferred embodiment, unit 20 is contained within a housing 120 that measures about 15 cm in width x 20 cm in depth by 4 cm in height, and weighs about 630 g. The useable area of pressure pad/LCD screen 50 is about 7.6 cm x 10.2 cm. Figure 1 is intended to depict a preferred form factor, and it is understood that other form factors having other dimensions and weights could be used instead. Housing 120 preferably is made of an injection-molded plastic resin, and is ergonomically designed to accommodate right and left handed users.
Preferably unit 20 is powered by a battery 240, e.g., 12 VDC, although an internal AC-to-DC power supply could also be used. As shown in Figure 1, unit 20 includes a holder 250 for storing stylus 60 when it is not be used, and also includes a member 260 that permits securing unit 20 to a desk or counter to prevent its unauthorized re-moval. Holder 250 may also be used with a cord or the like to secure stylus 60 to unit 20.
Figure 2 is a block diagram depicting the preferred ar-chitecture 100 for unit 20, although other architectures might be utilized instead. Reference numerals in Figure 2 that are the same as numerals used in Figure 1 can refer to the same unit or sub-unit. Note that what in Figure 1 was denoted as pressure pad/LCD unit 50 is shown in Figure 2 as touch pad SOA and LCD 50B. In terms of signal processing, signals associated with units 50A and 50B may be handled differently, however from a user's perspective, these two units appear to function as a single module 50. Details as to design and fabrication of unit 50 are known in the art, and are not here pre-sented. As implemented, architecture system 300 is de-signed to be backward compatible with many existing sig-nature capture devices, for example the older PenWare model 2000 unit, and to be compatible with the command set used in such earlier devices.
Touch or pressure pad 50A preferably provides 4096x4096 pixel resolution and acts as a writing surface upon which a user may draw or write (e.g., a signature, a sketch, a doodle), preferably with passive pen 60. By passive it fl is meant that pen 60 may simply be a plastic or wooden pointed stick. In contrast to many prior art approaches, pen 60 need not emit or sense IR, or carry a magnet. As such, pen 60 and touch pad 50A are relatively robust and inexpensive to produce.
As a user writes upon the surface of touch pad 50A, pres-sure sensitive sensors within the pad respond to user-drawn positions of pen 60. In practice, the 4096x4096 pixels used in the preferred embodiment are adequate to permit signature verification. Of course, other resolu-tion pads could be used.
Preferably LCD 50B is backlit and displays signature and images drawn by user on touchpad 50A. Further, LCD 50B
can display forms, graphics controls, and generally per-mits unit 20 to act as a full featured transaction termi-nal. (For example, in Figure 3, a menu 400 including instructions 410, softkeys 420 and command key 430 is shown on LCD 50.) In the preferred embodiment, LCD 50B
provides VGA 320x240 pixel resolution and includes a zooming engine. (It will be seen that the data capture resolution of pad 50A exceeds resolution of LCD 50B.) In the preferred embodiment, LCD 50B provides sufficient resolution and contrast to comply with the low vision requirements of the Americans with Disabilities Act (ADA).
An analog-to-digital (A/D) interface 310 converts the analog pen position to the high resolution x-axis, y-axis coordinates of touch pad 50A. Pen-drawn pressure coordi-nates may be communicated in raw format to host system 30, or may be signal compressed and buffered within unit 20 and then transmitted to host system 30.
Architecture 300 includes a preferably industry standard architecture ("ISA") bus 320, which is drawn with bold lines in Figure 2. Bus 320 is used by the A/D interface unit and other units to couple information within unit 20. For example, pen detection circuitry 330 receives, via bus 320, A/D pressure pad coordinate data from unit 310, and thus can detect what the user has drawn upon touch pad 50. Display data for LCD 50B is output direct-ly by CPU 340.
In the preferred embodiment, system 300 operates under control of an embedded microprocessor (CPU) 340, e.g., an x86-compatible processor operating at 16 MHz clock fre-quency. The use of industry standard x86 architecture and an ISA bus permits unit 20 to readily accommodate future expansion, for example via PCMCIA type II memory cards and the like. Further, such standard architecture facilitates ease of software programming and permits use of readily available, low cost tooling programs. For example, system architecture 300 is sufficiently flexible to permit a software developer to custom write applica-tions for touch pad 50A, and also to use a personal com-munications system to send commands and receive informa-tion bytes from the pad. The preferred embodiment pro-vides support for MS DOS/Windows 95, Windows 3.1 and Windows NT platforms.
In Figure 2, read only memory (ROM) 360, preferably is a 256 KB EPROM unit, stores firmware used to control CPU
340, which firmware implements a command set for operat-ing unit 20. The firmware preferably supervises process-ing a signature or other writing 70 drawn on touchpad 50.
The firmware also preferably encrypts a user's personal identification number (PIN), provides on-the-fly data compression, and can control operation of any peripheral or optional attachments coupled to unit 20, by way of example, units 190, 210.
Volatile random access memory (RAM) 350, preferably 256 KB, provides in-system memory to maintain data including encryption key, custom stored signatures, customized logos to be displayed on LCD 50B. RAM 350 may also store compressed multiple complete signatures for transmission to host 40 upon request. Communications between CPU 340, ROM 360 and RAM 350 are via ISA bus 320. RAM 350 is backed-up by battery pack 245 to preserve such data dur-ing interruptions to the system main power supply 240.
A copy protection switch unit 370 can provide a security feature that enables CPU 340 to protect encryption key data and to erase such data automatically if an attempt is made to open the case of unit 10. Attempts to tamper with device 20 will thus preferably result in automatic erasure of data, to promote data security. Such encryp-tion and copy protection features help ensure the securi-ty of transactions made using device 20.
Preferably serial communications interfaces 380 and 390 couple serial port connectors, e.g., 160, to ISA bus 320 using standard serial communications protocols. In the preferred embodiment, one RS-232 serial connector 170 and two RJ-45 connectors 160 are provided. The serial con-nectors may be used to provide communication between unit 20 and a host system 30. Host system 30 may of course provide a full server-type computer system and will typi-cally be located off-site from the point of transaction whereat unit 20 is used.
As noted, system 20 includes a built-in magnetic stripe reader (MSR) 80 that enables identification and other data encoded magnetically on cards 90 to be read as the card is slid through guide channel 110. The ROM-held command set preferably enables unit 20 to provide read operations for reading two or three track magnetic debit or credit cards 100, to help promote secure transactions.
Further, CPU 340 and ROM 360 provide for reading and encrypting personal information number (PIN) data entered into unit 20, e.g., from a PIN pad accessory unit 190.
In general, data entered using handwriting 70, data keys 200, touch data (e.g., pressing on LCD 50 to select a displayed menu option) among other user responses may also be recognized by CpU 240. Unit 20 preferable in-cludes an audio transducer 185 to provide audible feed-back to confirm successful entry of PIN data, magnetical-ly encoded data, and the like.
Optionally, unit 10 includes a port and electronics to accommodate a second and preferably LCD display 65 (see Figure 5). When unit 10 is used at a point of transac-tion, the check-out counter of a store for example, sec-ond display 65 is mounted for easy viewing by the cash-ier. Display 65 replicates what is shown on display 50, and enables a check-out cashier to confirm, for example, that the consumer-user has written his or her signature.
Smart card circuitry 145 may also be included within unit 10, or may be included within an add-on unit such as unit 225 (see Figure 4).
Device 20 preferably is implemented using application specific integrated circuits ("ASICs") to provide a low integrated circuit ("IC") chip count, to provide high reliability and to decrease fabrication costs. For exam-ple, the present invention, with its passive pen technol-ogy can maintain nearly 43,000 hours MTBF.
Consider now the nature of hardware and software opera-tions with device 20. At a relatively unsophisticated level of operation, host 30 (e.g. a cash register or terminal) controls device 20 by issuing it various com-mands and then interpreting responses from device 20.
Host 30 may signal device 20 that it is ready to accept signature data. Device 20 may then send signature data to host 30 in real-time or as blocks of compressed data.
In the preferred embodiment, all communications are in-terrupt driven to insure a timely response without miss-ing data. Alteratively, a software development toolkit is available from assignee PenWare, Inc. for 16-bit DOS, !6 Windows 3.x and Windows 95, 32-bit Windows NT and OS/2 platforms. Toolkit library routines encapsulate details concerning touch pad-host communication, permitting ap-plication developers to focus on applications without undue concern for underlying details. Toolkit services range from libraries for traditional C/C++ environments to VBX and OCS controls for rapid program development environments such as Visual Basic and report generators.
The PenWare software user's Reference Manuals for the PenWare 2000 and 3000 are referred to for further appli-cation development information, and is incorporated here-in by reference to the extent necessary.
A SigBox tool provides component software, OCX (OLE) links, and visual basic (VBX) functions. A SigKit pro-cesses signatures, encrypts, sales, converts, and can provide data in various formats including *.BMP, *.TIF, *.PCL, *.WMF, as well as providing *.DLL and C/C++ func-tions. A PadCom toolkit provides low level communica-tions to the pressure pad, including attachments thereto.
As explained more fully in the above-cited Reference Manuals, when device 20 is powered-on, a message is dis-played on LCD 50 for a few seconds. During this interval the user can cause a setup menu to be displayed by touch-ing LCD 50B. The setup menu allows personalizing set-tings such as mode of operation, LCD brightness, audio control, etc., and also permits calibrating the touch pad. When exiting the setup menu (or if the LCD screen is not touched during the power-up cycle), the unit dis-1ri plays a logo and is ready for communication with the host.
As noted, unit 20 is controlled by host 30, which sends unit 20 one or more binary commands. Some of these com-mands will cause data values to be returned by unit 20 to the host via linkage 40 (which may in fact be wireless).
In the preferred embodiment, each issued host-command includes a 16-bit opcode followed by a 16-bit argument length, followed by optional argument data. Command results do not have an opcode or argument length fields, and consist of a stream of result arguments, All 16-bit values are ordered as low byte followed by high byte.
Each command sent from the host (or terminal) to the pad consists of 16-bit opcode followed by 16-bit arguments length, followed by optional argument data. The format is as follows:
opcode arguments length (optional)arguments data field =20 The arguments length specifies the total length of the arguments in the argument data field. If the command does not have any argument data, the argument length value is set to zero, and the argument field is omitted.
If the argument field exists, it may have one or more arguments, which may be fixed-length of variable=length.
Fixed-length arguments have a size determined by the type of argument. The size of variable-length arguments is specified by a 16-bit argument length sub-field, follow by the actual argument data.
SUBSTITUTE SHEET (RULE 26) argument data field lenl argl arg2 arg3 If the argument field exists, the field may consist of one or more arguments. Each argument is either fixed length or variable-length. The size of each fixed-length argument is determined by its type. The size of each variable-length argument is specified by a 16-bit argu-ment length sub-field followed by the actual argument data. In the command format shown immediately above, three arguments are present. The first argument (argl) is variable-length with the length being specified by the preceding field (leni). The two remaining fields (arg2, arg3) are each fixed-length arguments.
The format of data received by the host is a stream of result arguments, there being no opcode or arguments length fields. Similar to what was described for the host send command format, each result argument is fixed-length (the length being type-determined) or variable-length (the variable-length argument being spec-ified by a 16-bit argument length sub-field preceding the actual argument data. Format of 16-bit values is low byte/high byte, that is for a 16-bit value, the low byte precedes the high byte.
By way of example, consider a command having no argument.
(All of the following examples may be tested using VIEWCOMM operating under MS-DOS.) If it were desired to send a command clear the LCD screen, the following hexa-decimal byte stream would be issued:
~ Cl $40$32$O0$00 The above byte stream may be viewed as follows:
opcode arguments length $40$32 $00$00 The first byte $40 is command opcode low byte, and the second byte $32 is the high byte. Together these two bytes comprise the full 16-bit opcode value of $3240, which is the command Display_Clear. The next byte is the arguments length parameter low byte value, for which last byte is the high byte. Since no arguments are present in this example, the arguments length value is equal to $0000, which arguments length value should always be included even when sending no arguments. After executing this command, the LCD screen will be cleared, and there is nothing to be returned to the host computer.
Consider now an example of a command that requires four fixed length argument bytes of the AREA type. Suppose it is desired to draw a solid box on the LCD screen, starting at the horizontal column position $20 and verti-cal row position of $10, using a size $30 horizontal columns by $40 vertical rows. Drawing such box would result from sending the following stream of bytes:
$51$32$08$002 The byte stream may be viewed in a more simplified fash-ion as shown below:
opcode arguments length arguments data field $51$32 $08$00 $20$00$10$00$30$00$40$00 2C) SUBSTITUTE SHEET (RULE 26) In the above depiction, the first two bytes represent the opcode in the low byte/high byte format. Collectively these two bytes comprise the 16-bit value $3251, which is _ the command Display_Box. The second two bytes represent the arguments length, here equal to $0008, since a total of 8 bytes follow in the argument data field.
The arguments data field contains the following informa-tion:
argument data field POINT data type VAR data type column row length bytes $08$00 $10$00 $05$00 HELLO IL The first two bytes represent the horizontal column posi-tion and the vertical row position, whereat drawing the box should begin. The third two bytes represent the horizontal column size to use when drawing the box, and the fourth two bytes represent the vertical row size to use when drawing the box. After executing this command, there is nothing to be returned from the pad to the host computer.
Consider now a more complex example of a command that requires both fixed length arguments (POINT data type) and one variable-length argument (VAR data type). If it is desired to display the text message "HELLO" at LCD
screen horizontal column of $0008 and vertical row $0010, the following stream of bytes would be sent:
2.1 SUBSTITUTE SHEET (RULE 26) , ,.
$80$32$0B$00$08$00$10$00$05$OOHELLO
Again, to simplify this example one can view the bytes as follows:
opcode arguments length arguments data field $80$32 $OB$00 $08$00$10$00$05$OOHELLO
The arguments length value equals $000B in hexadecimal (11 in decimal) because the arguments length value is equal to the full length of all of the arguments in bytes. The argument data field in this example contains 11 total bytes, and the arguments length field must al-ways equal the exact amount of bytes to follow in the argument data field.
Consider now the argument field, which may be represented as follows:
arguments data field POINT data type VAR data type column row length bytes $08$00 $10$00 $05$00 HELLO
The first set of bytes is the low byte, high byte hori-zonal column position, and the second set of bytes is the low byte, high byte vertical row position. The next set of bytes is the length of the variable-length data that is to follow, here the five-byte character string "HEL-LO". The next five bytes represent the character string to be displayed, here "HELLO".
2.2 SUBSTITUTE SHEET (RULE 26) The present invention can also handle bitmaps, for exam-ple an image drawn with passive pen 60 upon the touch screen 50A. In a bitmap, an image is represented digi-tally such that each pixel in the image corresponds to one or more bits in the bitmap. The VAR bits are a pointer to a buffer that holds byte-aligned bitmap bits to be stored as an array of byte values. As implemented, the VAR bits are used in command $2050 Mem LoadBitmap, $3290 Display_Bitmap, and $32F4 Display_SetLogo. To avoid conflict, bitmap bits should not include Windows BITMAPINFOHEADER or color table.
Device 20 may be configured to capture and transmit sig-nature data to the host as soon as available, e.g., in real-time. Alternatively, signature data can be captured and stored or buffered within unit 20 for later transmis-sion to the host. A Pad Record command, or a Pad_RecordBuf command is used to start a signature cap-ture session. As it is being written on touch pad 50A, the signature is displayed on LCD 50B. The signature will remain displayed until a Pad_Reset command is re-ceived from the host. The host application will deter-mine when to terminate the signature signing session.
Such termination can be accomplished by host-setting a predetermined time for signing, by viewing the signature, or by a completion indication from the signing user. The completion indication may be entered using a virtual (e.g., LCD-displayed) control key such as softkey 430 shown in Figure 3. The user's pressing LCD 50 in the area of control key 430 (or the equivalent) causes a Pad_Stop or Pad StopBuf command to issue, which ends a signature signing session.
Signature real-time and buffered captured modes will now be described. Real-time signature capture x-axis,y-axis coordinates and pen status data can be sent to the host as soon as they are available. When the Pad Record com-mand is sent from the host to device 20, device 20 re-sponds by sending the signature data in real-time to the host. Preferably, the format of this real-time data is a uncompressed vector contained in five byte packet, al-though other formats could be used. Issuance of the Pad_Stop command terminates real-time signature capture mode.
In buffered signature capture mode, signatures can be stored in internal RAM 350 within device 20, for uploading to the host when requested. Procedurally, a Pad_RecordBuf command is first issued by the host to initiate a buffered capture mode. Device 20 then cap-tures and stores all pen strokes on touch pad 50A to an internal buffer (which may be associated with RAM 350), while simultaneously displaying the pen strokes on LCD
50B. At the end of signature signing session, the host issues a Pad_StopBuf command to terminate capture. The host then requests transmission of the buffered signature by sending a Pad GetBuf command to device 20. Device 20 then sends the signature data in compressed format to the host. In the preferred embodiment, the device buffer may retain up to 100 signatures at a time, although larger or smaller storage capacity may be implemented.
~~
Assume that device 20 is to read magnetically encoded information (using MSR unit 80) in one or more stripes 90 on a card 100, as shown in Figure 1. The host issues a Card GetTrack command followed by the track number, e.g., track 0, 1 or 2 in the preferred embodiment. Device 20 will then return the track data read from card 100, if available. A Card Reset command is then used to purge track storage buffers within device 20, e.g., associated with RAM 350, such that a new card 100 may be read.
As noted with respect to Figure 1 and Figure 3, device 20 may be used with a PIN pad unit 190. Alternatively, LCD
50B may be caused to display soft-keys that the user can touch to key-in PIN and other numeric data. In either event, the user is prompted to enter a PIN number, typi-cally in conjunction with a debit transactions.
In Figure 3, for example, LCD 50 presents the user with a menu display 400 that includes instructions 410, a virtu-al keypad 420, and one or more soft control keys 430. If the user wishes to input a PIN that is, for example, 3642, the user presses the soft "3" key, the soft "6"
key, the soft "4" key and the soft "2" key displayed on the LCD. As the target areas to be pressed are relative-ly large, the user may press the softkeys with a finger or with pen 60.
Audible feedback from transducer 185 can provide the user with appropriate confirmatory entry response. Such re-sponse might be a simple audible "beep" or in a more sophisticated implementation, transducer 185 could emit the spoken word corresponding to each softkey digit as the key is pressed. Circuitry and techniques directed to computer-generation of spoken words corresponding to digital entries are well known in the art, and will not be described further herein.
The host system activates PIN pad 200 on an accessory unit 190, or a virtual PIN pad 420 on LCD 50 by issuing a Prompt_PIN command. When a user enters a PIN and presses an ENTER key (e.g., the "#" key), the PIN is encrypted and sent to the host. Device to host transmission pref-erably iuses a ANSI X9.8 PIN block format. A valid PIN
will contain between four and twelve digits, and the host will return an error message if the PIN is invalid. The returned message may be displayed on LCD 50 and/or audi-bly sounded via transducer 185. If a printer is coupled to device 20 (e.g., by cable or by IR) the return error message may be printed.
To promote transaction security, all PINs are preferably data encryption standard ("DES") FIPS PUB 46, 1977 en-crypted using DUKPT (ANSI X9.24) or Master/Session key management. Before using the hardware or the virtual PIN
pad, the user is asked to input an initial encryption key and serial number into device 20 in a secure environment.
In the preferred embodiment, the DUKPT key management system derives a new key for each PIN encryption, and can derive more than one million keys. In a so-called Mas-ter/Session procedure, a master key is injected into the pad in a secure environment, and thereafter, new session keys, encrypted by the Master Key, can be sent to the No pad. Device 20 preferably uses the master key to deciphe r the new transaction key, which is then used to encrypt user PIN data sent to the host.
To promote security, preferably the initial key can never be read back from the device, and is automatically delet-ed if there is an attempt to tamper with the device. The initial key is stored in battery backed 350.
While the present invention accommodates use of PIN-secu-rity, PIN numbers may be lost or compromised, for exam-ple, the user may inadvertently misplace a paper contain-ing the PIN numbers. The present invention preferably provides the ability to use fingerprint identification from the user as a form of PIN identification. In addi-tion to or as an alternative to the use of fingerprints described earlier herein, a preferred embodiment scans a fingerprint 230, which is to say, scans the user's fin-gerprint, pressed against surface 220. To reduce manu-facturing cost and product weight, scanning may be accom-plished using a miniature linear charge coupled scanning device ("CCD"), of the general sort as are found in FAX
machines. Such a device is shown in phantom as element 125 in Figure 4, and is mechanically moved (as shown by the accompanying double arrow) to scan the image of a finger pressed against region 220. Such a CCD element typically is about 1" (2.54 cm) in length and includes perhaps 300 elements, providing 300 dpi scan resolution.
E.G. & G. Reticon Co. of Sunnyvale, California is one manufacturer of such devices.
z~-Rather than store the totality of fingerprint data, it is possible to electronically examine, within a unit 210 (Figure 1) or a unit 225 (Figure 4) a portion of the total fingerprint. An algorithm is executed by CPU 340 to represent this minimal fingerprint data as a digital token, or number, which may be used as a fingerprint PIN.
This PIN number may be electronically stored, for example on a magnetic strip 90 associated with a card 100, or stored within an IC contained in a smart card 140. It is in fact possible to generate a substantially unique PIN
token for a given fingerprint and store the token within less than about 60 bytes of data.
A system 10 equipped with a fingerprint accessory unit 210 or 225 or the like is used as follows. Either before or during the transaction, the user presses his or her fingerprint against surface 220, whereupon a token is generated in realtime corresponding to the fingerprint.
This token is then compared against fingerprint PIN token information stored in the user's card 100 or card 140.
If the tokens agree (as determined by electronics within unit 10), the user is the owner of card 100 or 140, and the transaction may go forth. If the tokens do not agree, absent an error in generating one of the tokens, the user is not the owner of card 100 or 140. Under these circumstances, the transaction should not be com-pleted, absent other positive identification to the rea-sonable satisfaction of the merchant at the point of transaction.
'Z
In this fashion, the user need not memorize a PIN to secure transactions, and indeed if card 100 or 140 were lost or stolen, the resultant token mismatch when the card(s) were attempted to be used would bar the transac-tion from completion. Indeed, since users would not know how system 10 functions, it is likely that a thief would not risk introducing what appears to be fingerprint iden-tification into the merchant's computer system, and would simply not use card 100 or 140.
Further details as to the internal display operation of device 10 will now be given. Device 20 displays graphic and text information, including advertisements, on its integrated high contrast backlit LCD pixel graphic dis-play 50 in the following manner. To display data at any time, the host issues a command such as Display_Text. If desired, the host can download a bitmap image for input into battery backed RAM 350 for immediate display on LCD
50 when device 20 powers-up. Such image may also be displayed programmatically at any time by issuing a Dis-play_Logo command. The image may be a custom logo to help the user identify the application. The image may also present a helpful message to the user. The pre-ferred embodiment provides two displayable text fonts: a small 8 pixel x 8 pixel font and a larger 16 pixel x 16 pixel font. Text, graphics, and pen strokes can be dis-played on LCD 50 simultaneously.
Optional add-on unit 225 in Figure 4 is an omnibus unit that includes a fingerprint identification unit 220 (and associated electronics), electronics 145 for reading a smartcard 140, an internal printer 65 for printing indi-cia such as an itemized receipt 75, and electronics 195 for reading and processing a user's check 205. Of course unit 225 could include fewer than all of these features, or could include still additional features.
The operation of the check processing function of unit 225 will now be described. As shown in Figure 4, check 205 is inserted into slot 215 within unit 225, and is moved up and through the unit in the direction shown by the curved arrow. Electronics 195 magnetically reads characters 235 imprinted on the check, which characters identify the user's bank and bank account number. Commu-nications link 40 enables unit 10 to communicate in sub-stantially realtime with the user's identified bank to confirm there are sufficient account funds to negotiate the transaction at hand. (By substantially realtime it is mean that if communications does not occur within seconds, any time delay will be less than perhaps a min-ute or so.) If not, display 50 can signal the check-out cashier appropriately, for example through an auxiliary display unit 55, and/or speaker 185 can emit an audible warning.
In practice, the consumer purchaser would sign check 205 and insert the otherwise blank check into slot 215 in unit 225. Alternatively, the customer need not sign the check, but would write a signature on screen 50. System 10 knows the merchant store identification and the dollar amount to be charged from host information available via link 40, and knows the user's bank and account number from indicia 235 on the check. Assuming that information transmitted via link 40 to a clearing house for the user's bank confirms available funds to complete the present transaction, printer 85 will then print the date, the dollar amount, and the merchant store as payee on check 205. Printer 85 can also print the customer's signature 70 on the check, and legally "VOID" the check, e.g., by printing "VOID" thereon. Processed check 205 will then emerge from the exit portion 217 of the contin-uation of slot 205, but near the rear portion of device 225, as shown in Figure 4. If desired, other documents 75 printed by printer 85 may also emerge from the same exit slot portion 217 as a processed check 205.
The check-out cashier will then hand the check to the customer as a transaction receipt, as the funds have automatically been transferred from the identified bank account into the merchant's bank account. Of course, the customer may also be given a printed receipt 75 enumerat-ing the items purchased and their cost. Security in the above transaction can of course be promoted if the mer-chant insists upon use of a credit card 100 or smartcard 140, whose memory includes for example either PIN or preferably fingerprint PIN token information. Such secu-rity will protect the user against misuse of lost or stolen checks.
It will be appreciated that the above-described use of system 10 permits instant transfer of funds, with minimal generation of paperwork. From the merchant's perspec-tive, payment for the transaction occurs in realtime, and .3I
the transaction is memorialized electronically. From the standpoint of the user's bank, there is no paper check to be negotiated and mailed back to the user as the user al-ready possesses the "voided" or "cancelled" check as a transaction receipt.
If the transaction has involved the user of card 100 or 140, e.g., to further identification and security, card-stored information may include the customer's internet address and customer accounting information, e.g., that the customer maintains a Quicken-compatible accounting database on a home computer. System 10 can, if desired, automatically couple data memorializing the instant transaction over link 40 to the customer-user's database, whereupon the database is updated to reflect a debit for the subject transaction. If, for example, the transac-tion (or a part thereof) represents a tax deduction to the user, the user can input such information using sys-tem 10, whereupon the updated user database will properly tag the deductible portion of the subject transaction.
Note too that since the user's identity and itemized present purchases are known to the present invention, the present invention can facilitate creation and maintenance of a purchase profile for each user. Stored preferably within the merchant's computer system, such a profile may be used by the merchant to determine effectiveness of advertising, goods placement on shelves, and so forth, on a per customer basis.
Figure 5 depicts operative steps for the above proce-dures, as well as the use of system 10 to provide instant ,3z advertisement and reward coupons to the customer user.
Although Figure 5 is described within the context of a merchant retail store operation, it will be appreciated that other working environments are also applicable.
In Figure 5 at the upper left-hand corner, unit 10 (shown here with omnibus add-on unit 225) is coupled via link 40 (data path A) to a host unit 10, here a server system, perhaps present within a merchant retail store. As will be described, reward-type information will be coupled over data path B from host system (or in-store processor, ISP) 30 to unit 10. Unit 10 and (if present, accessory display 55) is preferably located at the check-out area of a retail store. As has been described, it is assumed at this juncture that the purchaser has self-identified using a smartcard or a credit-type card with magnetic strips, and is identified to system 10. Assume too that a cashier has rung-up the user transaction on a cash register (or the equivalent), and that the transaction is almost complete.
Among the information carried by data path A will be an itemized list of the user's purchases, for example, 2 bags of Brand X potato chips at $1.20/bag, 1 carton of Brand Y soda at $2.95, and so on. These line items com-prising the transaction may be coupled via data path C to a corporate level server unit 500. Whereas the in store processor or store server system 30 can readily decrement the store inventory by the items being purchased, the corporate level server 500 can do likewise for this store, and other stores also coupled to server 500.
~
Preferably the corporate level server will transmit via data path E the debit/credit information pertaining to the subject transaction to a central clearinghouse for settlement.
Stored within, or made accessible to corporate level server 500 and/or merchant level server 30 is a database list of store-carried items for which rewards or promo-tions are to be issued in realtime to the user at the point of sale. For example, Brand X potato chips may wish to offer the user an immediate discount coupon for another type of Brand X chips, or a chip dip, or the like. Brand Y soda may wish to offer a discount coupon for the purchase of ice cream, and so on. Other items purchased by the user may not be the subject of a reward promotion.
Merchant server system 30 and/or corporate level server 500 may generate and store a profile of the individual customer's purchases, and in fact some rewards may be associated with a pattern of purchases by a given custom-er. Perhaps a customer who routinely purchases beer will be offered a discount coupon for pretzels after the third such beer purchase. The profile information may also be useful to the merchant store in deciding how effective shelf placement of certain goods has been, or how effec-tive advertising has been. The inclusion of system 10 permits uniquely identifying sales and sales patterns to specific customers, by name, and potentially by sex, by age, by residence, and so forth.
Data path D can communicate to the merchant server infor-mation to be presented immediately to the purchaser.
Merchant server 30 couples this information along data path B to system 10. If the information is a coupon or the like, preferably the printer associated with unit 225 immediately prints-out the relevant discount coupon(s) 225, or other promotional information. If desired, the coupon(s) can also be displayed. It is understood that data paths A and B may in fact be coupled over a single bus of wires.
It will be appreciated that at the time the transaction is being completed, the merchant has the user's complete attention, if for no other reason than to ensure there is no inadvertent overcharge. Thus, data path B may advan-tageously carry advertisement type information into unit 10, for display. Such advertisement may be ads for prod-ucts associated with the user's present purchases, e.g., perhaps a pretzel ad if beer is now being purchased.
Using a history of past purchases by this user (such purchases being stored within system 30 and/or system 500), the ads may intelligently present information di-rected to the user. For example, if the user routinely purchases dietetic food, an ad for a new type of dietetic food carried by the merchant might be displayed, and so forth. Such ads may include video animation and/or sound.
As noted, in identifying himself or herself to unit 10, the user's identification card (smart or magnetic strip) may include the user's e-mail or internet address, and 3~
personal accounting software information. In a preferred embodiment, data path F couples information, optionally via the internet 520 or other communications link to the customer's server unit 530, perhaps located at the customer's home or business. Stored within the customer server may be a database of the customer's financial transactions, stored perhaps as part of a financial ac-counting software program 540. Drawing upon information made available from warehoused records 510 for this user, the merchant and corporate level servers can periodically update via data path H the user's server 530, such that financial software 540 is current on at least a weekly or monthly basis. Of course more frequent updates could also be provided. The user's printer 510 may then pro-vide hard copies 550 of receipts and other records rele-vant to the transaction made using device 10.
It will be appreciated from the foregoing description that the present invention provides a flexible signature capture device whose architecture readily allows for present and future expansions. The use of standardized architecture, ports, and a built-in PCMCIA type II inter-face further promotes flexible expansion, and contributes to decreased fabrication and programming costs. The preferred hardware integration reduces IC chip count and improves price/performance attributes.
Modifications and variations may be made to the disclosed embodiments without departing from the subject and spirit of the invention as defined by the following claims.
- -__~
Claims (28)
1. A system, comprising:
a host; and a remote transaction terminal in communication with the host, wherein:
the host is capable of generating a command, and the command includes an opcode, an arguments length field, and an arguments data field.
a host; and a remote transaction terminal in communication with the host, wherein:
the host is capable of generating a command, and the command includes an opcode, an arguments length field, and an arguments data field.
2. The system of claim 1, wherein:
the arguments length field specifies a total length of arguments in the arguments data field.
the arguments length field specifies a total length of arguments in the arguments data field.
3. The system of claim 2, wherein:
the arguments length field is set to a zero value when the arguments data field is empty.
the arguments length field is set to a zero value when the arguments data field is empty.
4. The system of claim 1, wherein:
the arguments data field includes at least one fixed length argument.
the arguments data field includes at least one fixed length argument.
5. The system of claim 1, wherein:
the arguments data field includes at least one variable length argument.
the arguments data field includes at least one variable length argument.
6. The system of claim 1, wherein:
the arguments data field includes at least one fixed length argument and at least one variable length argument.
the arguments data field includes at least one fixed length argument and at least one variable length argument.
7. The system of claim 1, wherein:
the opcode includes 16 bits, and the arguments length field includes 16 bits.
the opcode includes 16 bits, and the arguments length field includes 16 bits.
8. The system of claim 5, wherein:
the at least one variable length argument includes an argument length sub-field.
the at least one variable length argument includes an argument length sub-field.
9. The system of claim 8, wherein the argument length sub-field includes 16 bits.
10. The system of claim 6, wherein:
the at least one variable length argument includes an argumentlength sub-field.
the at least one variable length argument includes an argumentlength sub-field.
11. The system of claim 9, wherein the argument length sub-field includes 16 bits.
12. The system of claim 4, wherein:
a size of the at least one fixed length argument is determined by its type.
a size of the at least one fixed length argument is determined by its type.
13. The system of claim 6, wherein:
a size of the at least one fixed length argument is determined by its type.
a size of the at least one fixed length argument is determined by its type.
14. The system of claim 1, wherein:
the remote transaction terminal is capable of generating a result argument, the result argument lacks any opcode or arguments length field.
the remote transaction terminal is capable of generating a result argument, the result argument lacks any opcode or arguments length field.
15. A host, comprising:
a processor; and a memory containing code for execution by the processor, wherein:
the processor is capable of generating a command, and the command includes an opcode, an arguments length field, and an arguments data field.
a processor; and a memory containing code for execution by the processor, wherein:
the processor is capable of generating a command, and the command includes an opcode, an arguments length field, and an arguments data field.
16. The host of claim 15, wherein:
the arguments length field specifies a total length of arguments in the arguments data field.
the arguments length field specifies a total length of arguments in the arguments data field.
17. The host of claim 16, wherein:
the arguments length field is set to a zero value when the arguments data field is empty.
the arguments length field is set to a zero value when the arguments data field is empty.
18. The host of claim 15, wherein:
the arguments data field includes at least one fixed length argument.
the arguments data field includes at least one fixed length argument.
19. The host of claim 15, wherein:
the arguments data field includes at least one variable length argument.
the arguments data field includes at least one variable length argument.
20. The host of claim 15, wherein:
the arguments data field includes at least one fixed length argument and at least one variable length argument.
the arguments data field includes at least one fixed length argument and at least one variable length argument.
21. The host of claim 15, wherein:
the opcode includes 16 bits, and the arguments length field includes 16 bits.
the opcode includes 16 bits, and the arguments length field includes 16 bits.
22. The host of claim 19, wherein:
the at least one variable length argument includes an argument length sub-field.
the at least one variable length argument includes an argument length sub-field.
23. The host of claim 22, wherein the argument length sub-field includes 16 bits.
24. The host of claim 19, wherein:
the at least one variable length argument includes an argument length sub-field.
the at least one variable length argument includes an argument length sub-field.
25. The host of claim 24, wherein the argument length sub-field includes 16 bits.
26. The host of claim 18, wherein:
a size of the at least one fixed length argument is determined by its type.
a size of the at least one fixed length argument is determined by its type.
27. The host of claim 20 wherein:
a size of the at least one fixed length argument is determined by its type.
a size of the at least one fixed length argument is determined by its type.
28. A method, comprising:
providing a host capable of communicating with a remote transaction terminal; and generating at the host a command that includes an opcode, an arguments length field, and an argumentsdata field.
providing a host capable of communicating with a remote transaction terminal; and generating at the host a command that includes an opcode, an arguments length field, and an argumentsdata field.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CA002600704A CA2600704A1 (en) | 1997-05-09 | 1998-05-08 | Modular signature and data-capture system |
Applications Claiming Priority (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US08/853,955 US6193152B1 (en) | 1997-05-09 | 1997-05-09 | Modular signature and data-capture system and point of transaction payment and reward system |
USUS08/853,955 | 1997-05-09 | ||
CA002296548A CA2296548C (en) | 1997-05-09 | 1998-05-08 | Modular signature and data-capture system |
CA002600704A CA2600704A1 (en) | 1997-05-09 | 1998-05-08 | Modular signature and data-capture system |
Related Parent Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CA002296548A Division CA2296548C (en) | 1997-05-09 | 1998-05-08 | Modular signature and data-capture system |
Publications (1)
Publication Number | Publication Date |
---|---|
CA2600704A1 true CA2600704A1 (en) | 1998-11-12 |
Family
ID=25317335
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CA002296548A Expired - Lifetime CA2296548C (en) | 1997-05-09 | 1998-05-08 | Modular signature and data-capture system |
CA002600704A Abandoned CA2600704A1 (en) | 1997-05-09 | 1998-05-08 | Modular signature and data-capture system |
Family Applications Before (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CA002296548A Expired - Lifetime CA2296548C (en) | 1997-05-09 | 1998-05-08 | Modular signature and data-capture system |
Country Status (5)
Country | Link |
---|---|
US (2) | US6193152B1 (en) |
EP (1) | EP0980560A4 (en) |
AU (1) | AU7375498A (en) |
CA (2) | CA2296548C (en) |
WO (1) | WO1998050876A1 (en) |
Families Citing this family (289)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5897620A (en) * | 1997-07-08 | 1999-04-27 | Priceline.Com Inc. | Method and apparatus for the sale of airline-specified flight tickets |
US7140964B2 (en) * | 1997-06-23 | 2006-11-28 | Walker Digital, Llc | Gaming device for a flat rate play session and a method of operating same |
EP0944011A4 (en) * | 1997-08-05 | 2000-08-23 | Enix Corp | Fingerprint collation |
US6539101B1 (en) * | 1998-04-07 | 2003-03-25 | Gerald R. Black | Method for identity verification |
GB9811069D0 (en) * | 1998-05-23 | 1998-07-22 | Ncr Int Inc | Modular self service terminal |
US7349557B2 (en) * | 1998-06-19 | 2008-03-25 | Solidus Networks, Inc. | Electronic transaction verification system |
JP2000105648A (en) * | 1998-09-29 | 2000-04-11 | Nec Saitama Ltd | Portable electronic equipment |
US6747752B1 (en) * | 1998-11-06 | 2004-06-08 | Steven Farago | Demonstration control adjunct device for printers |
GB9825108D0 (en) * | 1998-11-16 | 1999-01-13 | Checkout Computer Systems Limi | Computer displays |
US7961917B2 (en) * | 1999-02-10 | 2011-06-14 | Pen-One, Inc. | Method for identity verification |
JP3663075B2 (en) * | 1999-04-05 | 2005-06-22 | シャープ株式会社 | Information processing device |
WO2000079496A2 (en) | 1999-06-04 | 2000-12-28 | Receiptcity.Com, Inc. | A point-of-sale/service (pos) portal |
US7350139B1 (en) * | 2000-06-16 | 2008-03-25 | American Express Travel Related Services Company, Inc. | System and method for utilizing a drag and drop technique to complete electronic forms |
US7830666B2 (en) | 2000-01-06 | 2010-11-09 | Super Talent Electronics, Inc. | Manufacturing process for single-chip MMC/SD flash memory device with molded asymmetric circuit board |
US7257714B1 (en) * | 1999-10-19 | 2007-08-14 | Super Talent Electronics, Inc. | Electronic data storage medium with fingerprint verification capability |
US8073985B1 (en) | 2004-02-12 | 2011-12-06 | Super Talent Electronics, Inc. | Backward compatible extended USB plug and receptacle with dual personality |
US7744387B2 (en) * | 1999-08-04 | 2010-06-29 | Super Talent Electronics, Inc. | Multi-level cell (MLC) rotate flash memory device |
US7873837B1 (en) | 2000-01-06 | 2011-01-18 | Super Talent Electronics, Inc. | Data security for electronic data flash card |
US7690031B2 (en) * | 2000-01-06 | 2010-03-30 | Super Talent Electronics, Inc. | Managing bad blocks in flash memory for electronic data flash card |
US20070292009A1 (en) * | 1999-08-04 | 2007-12-20 | Super Talent Electronics, Inc. | Press/Push USB Flash Drive With Deploying And Retracting Functionalities With Elasticity Material And Fingerprint Verification Capability |
US7466556B2 (en) * | 1999-08-04 | 2008-12-16 | Super Talent Electronics, Inc. | Single chip USB packages with swivel cover |
US7628622B2 (en) * | 1999-08-04 | 2009-12-08 | Super Talent Electronics, Inc. | Multi-level cell (MLC) slide flash memory |
US7535719B2 (en) * | 1999-08-04 | 2009-05-19 | Super Talent Electronics, Inc. | Single chip USB packages with contact-pins cover |
US7984303B1 (en) | 2000-01-06 | 2011-07-19 | Super Talent Electronics, Inc. | Flash memory devices with security features |
US8625270B2 (en) | 1999-08-04 | 2014-01-07 | Super Talent Technology, Corp. | USB flash drive with deploying and retracting functionalities using retractable cover/cap |
US8102662B2 (en) * | 2007-07-05 | 2012-01-24 | Super Talent Electronics, Inc. | USB package with bistable sliding mechanism |
US7872871B2 (en) * | 2000-01-06 | 2011-01-18 | Super Talent Electronics, Inc. | Molding methods to manufacture single-chip chip-on-board USB device |
US8043099B1 (en) | 2004-02-12 | 2011-10-25 | Super Talent Electronics, Inc. | Extended USB plug, USB PCBA, and USB flash drive with dual-personality |
US8141240B2 (en) | 1999-08-04 | 2012-03-27 | Super Talent Electronics, Inc. | Manufacturing method for micro-SD flash memory card |
US7702831B2 (en) * | 2000-01-06 | 2010-04-20 | Super Talent Electronics, Inc. | Flash memory controller for electronic data flash card |
US8078794B2 (en) * | 2000-01-06 | 2011-12-13 | Super Talent Electronics, Inc. | Hybrid SSD using a combination of SLC and MLC flash memory arrays |
US20080071973A1 (en) * | 2000-01-06 | 2008-03-20 | Chow David Q | Electronic data flash card with various flash memory cells |
US7447037B2 (en) * | 1999-08-04 | 2008-11-04 | Super Talent Electronics, Inc. | Single chip USB packages by various assembly methods |
NZ517144A (en) * | 1999-08-09 | 2004-11-26 | First Data Corp | Point of sale payment terminal |
US8751250B2 (en) | 1999-08-09 | 2014-06-10 | First Data Corporation | Health care eligibility verification and settlement systems and methods |
US6886742B2 (en) * | 1999-08-09 | 2005-05-03 | First Data Corporation | Systems and methods for deploying a point-of sale device |
US6827260B2 (en) * | 1999-08-09 | 2004-12-07 | First Data Corporation | Systems and methods for utilizing a point-of-sale system |
US7086584B2 (en) * | 1999-08-09 | 2006-08-08 | First Data Corporation | Systems and methods for configuring a point-of-sale system |
US20050015280A1 (en) * | 2002-06-11 | 2005-01-20 | First Data Corporation | Health care eligibility verification and settlement systems and methods |
US7600673B2 (en) * | 1999-08-09 | 2009-10-13 | First Data Corporation | Systems and methods for performing transactions at a point-of-sale |
US20040148203A1 (en) * | 2002-10-08 | 2004-07-29 | First Data Corporation | Systems and methods for verifying medical insurance coverage |
US6925565B2 (en) * | 2001-05-25 | 2005-08-02 | Pen-One, Inc | Pen-based transponder identity verification system |
US7047419B2 (en) | 1999-09-17 | 2006-05-16 | Pen-One Inc. | Data security system |
US20060229930A9 (en) * | 1999-11-15 | 2006-10-12 | Gottfurcht Elliot A | Method to generate advertising revenue based on time and location |
US6600497B1 (en) * | 1999-11-15 | 2003-07-29 | Elliot A. Gottfurcht | Apparatus and method to navigate interactive television using unique inputs with a remote control |
US7020845B1 (en) * | 1999-11-15 | 2006-03-28 | Gottfurcht Elliot A | Navigating internet content on a television using a simplified interface and a remote control |
US7376587B1 (en) * | 2000-07-11 | 2008-05-20 | Western Union Financial Services, Inc. | Method for enabling transfer of funds through a computer network |
US7690030B1 (en) | 2000-01-06 | 2010-03-30 | Super Talent Electronics, Inc. | Electronic data flash card with fingerprint verification capability |
US7702984B1 (en) | 2000-01-06 | 2010-04-20 | Super Talent Electronics, Inc. | High volume testing for USB electronic data flash cards |
US20080286990A1 (en) * | 2003-12-02 | 2008-11-20 | Super Talent Electronics, Inc. | Direct Package Mold Process For Single Chip SD Flash Cards |
US8240034B1 (en) | 2000-01-06 | 2012-08-14 | Super Talent Electronics, Inc. | High throughput manufacturing method for micro flash memory cards |
US20060161725A1 (en) * | 2005-01-20 | 2006-07-20 | Lee Charles C | Multiple function flash memory system |
US7874067B1 (en) | 2000-01-06 | 2011-01-25 | Super Talent Electronics, Inc. | Manufacturing method for single chip COB USB devices with optional embedded LED |
US7788553B2 (en) * | 2000-01-06 | 2010-08-31 | Super Talent Electronics, Inc. | Mass production testing of USB flash cards with various flash memory cells |
US7440287B1 (en) | 2000-01-06 | 2008-10-21 | Super Talent Electronics, Inc. | Extended USB PCBA and device with dual personality |
US7676640B2 (en) * | 2000-01-06 | 2010-03-09 | Super Talent Electronics, Inc. | Flash memory controller controlling various flash memory cells |
US20080082813A1 (en) * | 2000-01-06 | 2008-04-03 | Chow David Q | Portable usb device that boots a computer as a server with security measure |
US6661920B1 (en) * | 2000-01-19 | 2003-12-09 | Palm Inc. | Method and apparatus for multiple simultaneously active data entry mechanisms on a computer system |
US7609862B2 (en) * | 2000-01-24 | 2009-10-27 | Pen-One Inc. | Method for identity verification |
GB0001978D0 (en) * | 2000-01-29 | 2000-03-22 | Neopost Ltd | Method and apparatus for printing on smartcards and the like |
US20040150677A1 (en) * | 2000-03-03 | 2004-08-05 | Gottfurcht Elliot A. | Method for navigating web content with a simplified interface using audible commands |
US6611881B1 (en) | 2000-03-15 | 2003-08-26 | Personal Data Network Corporation | Method and system of providing credit card user with barcode purchase data and recommendation automatically on their personal computer |
US6834285B1 (en) * | 2000-03-24 | 2004-12-21 | Numoda Corporation | Computer system for portable digital data capture and data distribution |
NO20003006L (en) * | 2000-06-09 | 2001-12-10 | Idex Asa | Mouse |
US20080162298A1 (en) * | 2000-06-15 | 2008-07-03 | American Express Travel Related Services Company, Inc. | Online ordering system and method |
AU2002214748A1 (en) | 2000-06-12 | 2001-12-24 | Infospace, Inc. | Universal shopping cart and order injection system |
US20080306835A1 (en) * | 2000-06-15 | 2008-12-11 | American Express Travel Related Services Company, Inc. | System and method for customizing an email message |
US7951002B1 (en) | 2000-06-16 | 2011-05-31 | Igt | Using a gaming machine as a server |
US20040064414A1 (en) * | 2000-06-30 | 2004-04-01 | Kia Silverbrook | Method and system for banking coded self-identifying forms |
US7398252B2 (en) * | 2000-07-11 | 2008-07-08 | First Data Corporation | Automated group payment |
CA2416130A1 (en) * | 2000-07-11 | 2002-01-17 | First Data Corporation | Wide area network person-to-person payment |
US20020152168A1 (en) * | 2000-07-11 | 2002-10-17 | First Data Corporation | Automated transfer with stored value fund |
AU8326401A (en) * | 2000-08-18 | 2002-03-04 | Int Game Tech | Gaming machine virtual player tracking and related services |
US7716082B1 (en) * | 2000-08-24 | 2010-05-11 | Gilbarco, Inc. | Wireless payment mat device and method for retail environments |
WO2002029702A1 (en) | 2000-10-04 | 2002-04-11 | American Express Travel Related Services Company, Inc. | System and method for providing feedback in an interactive payment system |
US6820804B2 (en) * | 2000-12-05 | 2004-11-23 | Interlink Electronics, Inc. | Method and system for performing a purchase transaction using a remote control and a television |
US7972214B2 (en) * | 2000-12-07 | 2011-07-05 | Igt | Methods and devices for downloading games of chance |
US7130817B2 (en) * | 2000-12-15 | 2006-10-31 | First Data Corporation | Electronic gift linking |
US7266533B2 (en) * | 2000-12-15 | 2007-09-04 | The Western Union Company | Electronic gift greeting |
GB2370809B (en) * | 2001-01-06 | 2004-03-31 | Richard Gerald Enston | Automated teller machine multi function card |
US6619543B1 (en) * | 2001-01-23 | 2003-09-16 | Tokheim Holding B.V. | URL-encoded internet access card for retrieving and viewing e-mail at a fuel dispenser |
JP4839516B2 (en) * | 2001-02-27 | 2011-12-21 | ソニー株式会社 | Authentication system and authentication method |
US8595055B2 (en) * | 2001-03-27 | 2013-11-26 | Points.Com | Apparatus and method of facilitating the exchange of points between selected entities |
US7107249B2 (en) * | 2001-03-31 | 2006-09-12 | First Data Corporation | Electronic identifier payment systems and methods |
US7165052B2 (en) * | 2001-03-31 | 2007-01-16 | First Data Corporation | Payment service method and system |
US7103577B2 (en) * | 2001-03-31 | 2006-09-05 | First Data Corporation | Systems and methods for staging transactions, payments and collections |
US7117183B2 (en) * | 2001-03-31 | 2006-10-03 | First Data Coroporation | Airline ticket payment and reservation system and methods |
US9853759B1 (en) | 2001-03-31 | 2017-12-26 | First Data Corporation | Staged transaction system for mobile commerce |
US7184989B2 (en) * | 2001-03-31 | 2007-02-27 | First Data Corporation | Staged transactions systems and methods |
US8150763B2 (en) * | 2001-03-31 | 2012-04-03 | The Western Union Company | Systems and methods for staging transactions, payments and collections |
US7000828B2 (en) * | 2001-04-10 | 2006-02-21 | Cummins-Allison Corp. | Remote automated document processing system |
US7609863B2 (en) * | 2001-05-25 | 2009-10-27 | Pen-One Inc. | Identify authentication device |
US20030018532A1 (en) * | 2001-07-23 | 2003-01-23 | General Motors Corporation | Method and device for conducting mobile commerce |
US20040044606A1 (en) * | 2001-08-09 | 2004-03-04 | Buttridge Kelly A. | Methods and systems for check processing |
US20030033252A1 (en) * | 2001-08-09 | 2003-02-13 | Buttridge Kelly A. | Methods and systems for check processing using blank checks at a point-of-sale |
US20040111371A1 (en) * | 2001-08-09 | 2004-06-10 | Friedman Lawrence J. | Methods and systems for check processing |
US8020754B2 (en) | 2001-08-13 | 2011-09-20 | Jpmorgan Chase Bank, N.A. | System and method for funding a collective account by use of an electronic tag |
TW581305U (en) * | 2001-10-05 | 2004-03-21 | High Tech Comp Corp | Ejecting device of touch control pen |
US8244632B2 (en) | 2001-10-26 | 2012-08-14 | First Data Corporation | Automated transfer with stored value |
US8374962B2 (en) * | 2001-10-26 | 2013-02-12 | First Data Corporation | Stored value payouts |
US7822679B1 (en) * | 2001-10-29 | 2010-10-26 | Visa U.S.A. Inc. | Method and system for conducting a commercial transaction between a buyer and a seller |
US7233960B1 (en) | 2001-10-31 | 2007-06-19 | Numoda Corporation | System and method for mobile wireless electronic data capture and distribution of a merchant card-processing application |
US6670569B2 (en) * | 2001-11-08 | 2003-12-30 | First Data Corporation | Mail handling equipment and methods |
CA2363372A1 (en) * | 2001-11-20 | 2003-05-20 | Wayne Taylor | System for identity verification |
US20030163417A1 (en) * | 2001-12-19 | 2003-08-28 | First Data Corporation | Methods and systems for processing transaction requests |
US6801211B2 (en) * | 2001-12-21 | 2004-10-05 | Ladd B. Forsline | Computer painting system with passive paint brush stylus |
US20030132294A1 (en) * | 2002-01-11 | 2003-07-17 | Hand Held Products, Inc. | Transaction terminal including signature entry feedback |
US7451917B2 (en) * | 2002-01-11 | 2008-11-18 | Hand Held Products, Inc. | Transaction terminal comprising imaging module |
US7748620B2 (en) | 2002-01-11 | 2010-07-06 | Hand Held Products, Inc. | Transaction terminal including imaging module |
US7121470B2 (en) * | 2002-01-11 | 2006-10-17 | Hand Held Products, Inc. | Transaction terminal having elongated finger recess |
US7472825B2 (en) * | 2002-01-11 | 2009-01-06 | Hand Held Products, Inc. | Transaction terminal |
US7479946B2 (en) * | 2002-01-11 | 2009-01-20 | Hand Held Products, Inc. | Ergonomically designed multifunctional transaction terminal |
US20030132293A1 (en) * | 2002-01-11 | 2003-07-17 | Hand Held Products, Inc. | Transaction terminal including raised surface peripheral to touch screen |
US6873715B2 (en) * | 2002-01-31 | 2005-03-29 | You-Ti Kuo | System of central signature verifications and electronic receipt transmissions |
US20030154153A1 (en) * | 2002-01-31 | 2003-08-14 | Steidlmayer J. Peter | Composite commodity financial product |
US7596529B2 (en) * | 2002-02-13 | 2009-09-29 | First Data Corporation | Buttons for person to person payments |
US10031885B2 (en) | 2010-02-01 | 2018-07-24 | Netmotion Wireless, Inc. | Public wireless network performance management system with mobile device data collection agents |
US8645685B2 (en) * | 2002-02-27 | 2014-02-04 | Igt | Token authentication |
US7950996B2 (en) * | 2002-02-27 | 2011-05-31 | Igt | Methods and devices for gaming account management |
US6905411B2 (en) * | 2002-02-27 | 2005-06-14 | Igt | Player authentication for cashless gaming machine instruments |
CA2478505A1 (en) * | 2002-03-04 | 2003-09-18 | First Data Corporation | Method and system for processing credit card related transactions |
US6997803B2 (en) * | 2002-03-12 | 2006-02-14 | Igt | Virtual gaming peripherals for a gaming machine |
US8597116B2 (en) * | 2002-03-12 | 2013-12-03 | Igt | Virtual player tracking and related services |
CA2488730A1 (en) * | 2002-06-11 | 2003-12-18 | First Data Corporation | Value processing network and methods |
US7121456B2 (en) * | 2002-09-13 | 2006-10-17 | Visa U.S.A. Inc. | Method and system for managing token image replacement |
US20040064705A1 (en) * | 2002-09-30 | 2004-04-01 | Rivet Gregory M. | Automated system and method for gaining access to restricted or controlled areas |
US8032452B2 (en) | 2002-11-06 | 2011-10-04 | The Western Union Company | Multiple-entity transaction systems and methods |
JP2004178584A (en) * | 2002-11-26 | 2004-06-24 | Asulab Sa | Input method of security code by touch screen for accessing function, device or specific place, and device for executing the method |
EP1424658B1 (en) * | 2002-11-26 | 2006-03-08 | Asulab S.A. | Security code input method using a touch screen for accessing a function, an apparatus or a specific area, and device therefor |
US7363059B1 (en) * | 2003-01-16 | 2008-04-22 | Sprint Spectrum L.P. | Method and system for presenting a graphical representation of telephone keys on a wireless terminal |
SG122813A1 (en) * | 2003-01-24 | 2006-06-29 | Seiko Epson Corp | Printing apparatus and printing method |
US6983882B2 (en) * | 2003-03-31 | 2006-01-10 | Kepler, Ltd. | Personal biometric authentication and authorization device |
US7353373B2 (en) * | 2003-03-31 | 2008-04-01 | Sharp Laboratories Of America, Inc. | Intelligent printer installation |
DE60322338D1 (en) * | 2003-04-07 | 2008-09-04 | St Microelectronics Srl | Encryption method using chaotic mappings and digital signature methods |
GB2400478B (en) | 2003-04-07 | 2006-03-29 | Research In Motion Ltd | Method and system of supporting smart cards on electronic devices |
KR20040087690A (en) * | 2003-04-07 | 2004-10-15 | 주식회사 씨크롭 | System and Method for a credit transaction by a fingerprint |
US7063473B2 (en) * | 2003-04-18 | 2006-06-20 | Canon Kabushiki Kaisha | Both-side recording apparatus |
US20050033704A1 (en) * | 2003-08-04 | 2005-02-10 | International Business Machines Corporation | Automatic signature verification for retail payment transactions |
DE10339349A1 (en) * | 2003-08-25 | 2005-03-24 | Endress + Hauser Process Solutions Ag | Input unit for process automating technology linked to a communications network has a detection unit for a user's electronic identification key with a signature entered by a user |
US7240824B2 (en) * | 2003-09-19 | 2007-07-10 | International Business Machines Corporation | Using radio frequency identification with customer loyalty cards to detect and/or prevent theft and shoplifting |
US20060033620A1 (en) * | 2003-09-19 | 2006-02-16 | International Business Machines Corporation | Using radio frequency identification with transaction receipts to detect and/or prevent theft and shoplifting |
US20050109835A1 (en) * | 2003-11-26 | 2005-05-26 | Jacoby Brian L. | User self-authentication system and method for remote credit card verification |
US7872873B2 (en) | 2003-12-02 | 2011-01-18 | Super Talent Electronics, Inc. | Extended COB-USB with dual-personality contacts |
US7771215B1 (en) | 2003-12-02 | 2010-08-10 | Super Talent Electronics, Inc. | MLC COB USB flash memory device with sliding plug connector |
US8102657B2 (en) | 2003-12-02 | 2012-01-24 | Super Talent Electronics, Inc. | Single shot molding method for COB USB/EUSB devices with contact pad ribs |
US7440286B2 (en) * | 2005-04-21 | 2008-10-21 | Super Talent Electronics, Inc. | Extended USB dual-personality card reader |
US8998620B2 (en) * | 2003-12-02 | 2015-04-07 | Super Talent Technology, Corp. | Molding method for COB-EUSB devices and metal housing package |
US7363505B2 (en) * | 2003-12-03 | 2008-04-22 | Pen-One Inc | Security authentication method and system |
EP1542182A3 (en) * | 2003-12-11 | 2006-01-25 | NCR International, Inc. | Automated teller machine |
US7831519B2 (en) * | 2003-12-17 | 2010-11-09 | First Data Corporation | Methods and systems for electromagnetic initiation of secure transactions |
US8014130B1 (en) | 2004-02-26 | 2011-09-06 | Super Talent Electronics, Inc. | Pen-like universal serial bus (USB) flash drive with deploying and retracting functionalities |
US8021166B1 (en) | 2004-02-12 | 2011-09-20 | Super Talent Electronics, Inc. | Extended USB plug, USB PCBA, and USB flash drive with dual-personality for embedded application with mother boards |
US7815469B1 (en) | 2004-02-12 | 2010-10-19 | Super Talent Electronics, Inc. | Dual-personality extended USB plugs and receptacles using with PCBA and cable assembly |
US7869219B2 (en) * | 2004-01-20 | 2011-01-11 | Super Talent Electronics, Inc. | Flash drive with spring-loaded retractable connector |
US7806705B2 (en) * | 2004-02-26 | 2010-10-05 | Super Talent Electronics, Inc. | Slide flash memory devices |
US20080147964A1 (en) * | 2004-02-26 | 2008-06-19 | Chow David Q | Using various flash memory cells to build usb data flash cards with multiple partitions and autorun function |
EP1723498A2 (en) * | 2004-03-11 | 2006-11-22 | Preh KeyTec GmbH | Keypad, particularly a point of sale keypad, and method for placing it into operation and for exchanging and updating firmware of the keypad |
US7664902B1 (en) | 2004-03-16 | 2010-02-16 | Super Talent Electronics, Inc. | Extended SD and microSD hosts and devices with USB-like high performance packetized interface and protocol |
US7707110B2 (en) * | 2004-05-04 | 2010-04-27 | First Data Corporation | System and method for conducting transactions with different forms of payment |
US8606697B2 (en) * | 2004-06-17 | 2013-12-10 | Visa International Service Association | Method and system for providing buyer bank payable discounting services |
US7219832B2 (en) * | 2004-06-17 | 2007-05-22 | First Data Corporation | ATM machine and methods with currency conversion capabilities |
US8684839B2 (en) | 2004-06-18 | 2014-04-01 | Igt | Control of wager-based game using gesture recognition |
US20080195817A1 (en) * | 2004-07-08 | 2008-08-14 | Super Talent Electronics, Inc. | SD Flash Memory Card Manufacturing Using Rigid-Flex PCB |
US7942744B2 (en) | 2004-08-19 | 2011-05-17 | Igt | Virtual input system |
US8419542B2 (en) * | 2004-08-20 | 2013-04-16 | Igt | Wide area bonusing systems |
US8433647B1 (en) * | 2004-08-25 | 2013-04-30 | Vectorsgi, Inc. | Method and system for processing electronic checks |
US7850082B1 (en) | 2004-10-01 | 2010-12-14 | Super Talent Electronics, Inc. | Extended universal serial bus (USB) card reader |
US7660938B1 (en) | 2004-10-01 | 2010-02-09 | Super Talent Electronics, Inc. | Flash card reader and data exchanger utilizing low power extended USB protocol without polling |
US8152054B2 (en) | 2004-10-19 | 2012-04-10 | The Western Union Company | Money transfer systems and methods |
US7641109B2 (en) * | 2005-05-18 | 2010-01-05 | The Western Union Company | Money transfer cards, systems and methods |
US7813982B2 (en) * | 2004-11-08 | 2010-10-12 | First Data Corporation | Unit-based prepaid presentation instrument accounts and methods |
US7565548B2 (en) * | 2004-11-18 | 2009-07-21 | Biogy, Inc. | Biometric print quality assurance |
US7172114B2 (en) * | 2004-12-30 | 2007-02-06 | Hand Held Products, Inc. | Tamperproof point of sale transaction terminal |
US7711639B2 (en) * | 2005-01-12 | 2010-05-04 | Visa International | Pre-funding system and method |
US8723804B2 (en) * | 2005-02-11 | 2014-05-13 | Hand Held Products, Inc. | Transaction terminal and adaptor therefor |
US7392940B2 (en) * | 2005-05-18 | 2008-07-01 | The Western Union Company | In-lane money transfer systems and methods |
US8672220B2 (en) * | 2005-09-30 | 2014-03-18 | The Western Union Company | Money transfer system and method |
US20070214091A1 (en) * | 2005-05-18 | 2007-09-13 | The Western Union Company | Electronic payment instrument system and method |
US7992770B2 (en) * | 2005-06-18 | 2011-08-09 | Charles Holley | Spec-trac |
US7887420B2 (en) | 2005-09-12 | 2011-02-15 | Igt | Method and system for instant-on game download |
US7997981B2 (en) * | 2005-09-12 | 2011-08-16 | Igt | Universal casino bonusing systems and methods |
US8287379B2 (en) | 2005-09-12 | 2012-10-16 | Igt | Distributed game services |
US7547218B2 (en) * | 2005-10-24 | 2009-06-16 | Super Talent Electronics Inc. | Plug and cap for a universal-serial-bus (USB) device |
US20070150415A1 (en) * | 2005-12-22 | 2007-06-28 | Bundy Ross E | Method and apparatus for creating and entering a PIN code |
TW200729072A (en) * | 2006-01-27 | 2007-08-01 | qi-qing Chen | Merchandise trading system and its data reader |
US8345931B2 (en) * | 2006-02-10 | 2013-01-01 | The Western Union Company | Biometric based authorization systems for electronic fund transfers |
KR100863744B1 (en) * | 2006-06-15 | 2008-10-16 | 노틸러스효성 주식회사 | PINPAD for preventing outflow of client's information in an ATM and method for operating the same |
FR2905187B1 (en) * | 2006-08-22 | 2012-11-16 | Ingenico Sa | BIOMETRIC ELECTRONIC PAYMENT TERMINAL AND TRANSACTION METHOD |
US7876930B2 (en) * | 2007-01-02 | 2011-01-25 | Topaz Systems, Inc. | Fingerprint reader combination |
US20090089168A1 (en) * | 2007-01-10 | 2009-04-02 | Phyllis Adele Schneck | ACE (Alternative Currency Exchange): Alternative Currency Tracking and Mapping System and Method |
US8818904B2 (en) | 2007-01-17 | 2014-08-26 | The Western Union Company | Generation systems and methods for transaction identifiers having biometric keys associated therewith |
US7933835B2 (en) * | 2007-01-17 | 2011-04-26 | The Western Union Company | Secure money transfer systems and methods using biometric keys associated therewith |
US8583165B2 (en) * | 2007-02-20 | 2013-11-12 | Bindu Rama Rao | System for cartoon creation and distribution to mobile devices |
US8771060B2 (en) | 2007-03-23 | 2014-07-08 | Igt | Providing progressive games for gaming environments |
US8504473B2 (en) * | 2007-03-28 | 2013-08-06 | The Western Union Company | Money transfer system and messaging system |
US8254134B2 (en) * | 2007-05-03 | 2012-08-28 | Super Talent Electronics, Inc. | Molded memory card with write protection switch assembly |
US7783571B2 (en) | 2007-05-31 | 2010-08-24 | First Data Corporation | ATM system for receiving cash deposits from non-networked clients |
US20080298875A1 (en) * | 2007-06-01 | 2008-12-04 | Intermec Technologies Corporation | Modular workboard thermal printer system |
US7850468B2 (en) | 2007-06-28 | 2010-12-14 | Super Talent Electronics, Inc. | Lipstick-type USB device |
US8102658B2 (en) * | 2007-07-05 | 2012-01-24 | Super Talent Electronics, Inc. | Micro-SD to secure digital adaptor card and manufacturing method |
US7789680B2 (en) * | 2007-07-05 | 2010-09-07 | Super Talent Electronics, Inc. | USB device with connected cap |
US20090045257A1 (en) * | 2007-08-17 | 2009-02-19 | Maus Christopher T | Federated ID Secure Virtual Terminal Emulation Smartcard |
US7944702B2 (en) | 2007-08-27 | 2011-05-17 | Super Talent Electronics, Inc. | Press-push flash drive apparatus with metal tubular casing and snap-coupled plastic sleeve |
KR20230116073A (en) | 2007-09-24 | 2023-08-03 | 애플 인크. | Embedded authentication systems in an electronic device |
US8565723B2 (en) * | 2007-10-17 | 2013-10-22 | First Data Corporation | Onetime passwords for mobile wallets |
US8095113B2 (en) * | 2007-10-17 | 2012-01-10 | First Data Corporation | Onetime passwords for smart chip cards |
US8241047B2 (en) * | 2007-10-30 | 2012-08-14 | Super Talent Electronics, Inc. | Flash drive with spring-loaded swivel connector |
US8116083B2 (en) * | 2007-12-04 | 2012-02-14 | Super Talent Electronics, Inc. | Lipstick-type USB device with tubular housing |
US8600120B2 (en) | 2008-01-03 | 2013-12-03 | Apple Inc. | Personal computing device control using face detection and recognition |
US20090216652A1 (en) * | 2008-02-21 | 2009-08-27 | Weconnectit | Point-of-sale enhancement system |
US20090237374A1 (en) * | 2008-03-20 | 2009-09-24 | Motorola, Inc. | Transparent pressure sensor and method for using |
US9018030B2 (en) * | 2008-03-20 | 2015-04-28 | Symbol Technologies, Inc. | Transparent force sensor and method of fabrication |
US7817097B2 (en) * | 2008-04-07 | 2010-10-19 | Toyota Motor Engineering & Manufacturing North America, Inc. | Microwave antenna and method for making same |
US20100030590A1 (en) * | 2008-08-01 | 2010-02-04 | Sodaro Donald E | Centralized multi-property management system |
US20100048226A1 (en) * | 2008-08-20 | 2010-02-25 | First Data Corporation | Managing mobile marketing offers |
US10235832B2 (en) * | 2008-10-17 | 2019-03-19 | Igt | Post certification metering for diverse game machines |
US10867298B1 (en) | 2008-10-31 | 2020-12-15 | Wells Fargo Bank, N.A. | Payment vehicle with on and off function |
US20100114768A1 (en) | 2008-10-31 | 2010-05-06 | Wachovia Corporation | Payment vehicle with on and off function |
US8346611B2 (en) * | 2009-04-21 | 2013-01-01 | First Data Corporation | Systems and methods for pre-paid futures procurement |
US8485442B2 (en) | 2009-07-02 | 2013-07-16 | Biometric Payment Solutions | Electronic transaction verification system with biometric authentication |
US8456429B2 (en) * | 2009-07-30 | 2013-06-04 | Ncr Corporation | Encrypting touch-sensitive display |
US8988191B2 (en) * | 2009-08-27 | 2015-03-24 | Symbol Technologies, Inc. | Systems and methods for pressure-based authentication of an input on a touch screen |
US20110226849A1 (en) * | 2010-03-22 | 2011-09-22 | Toby Mark Padilla | Transition reader mounting bracket |
US20110309142A1 (en) * | 2010-06-17 | 2011-12-22 | Ncr Corporation | Payment card reader apparatus and method of operating a payment card reader apparatus |
US8963874B2 (en) | 2010-07-31 | 2015-02-24 | Symbol Technologies, Inc. | Touch screen rendering system and method of operation thereof |
US9042608B2 (en) | 2010-10-25 | 2015-05-26 | Pen-One, Inc. | Data security system |
US20120124378A1 (en) * | 2010-11-12 | 2012-05-17 | Xac Automation Corp. | Method for personal identity authentication utilizing a personal cryptographic device |
JP2012206497A (en) | 2011-03-15 | 2012-10-25 | Seiko Epson Corp | Multifunction printing device |
US9417754B2 (en) | 2011-08-05 | 2016-08-16 | P4tents1, LLC | User interface system, method, and computer program product |
US9002322B2 (en) | 2011-09-29 | 2015-04-07 | Apple Inc. | Authentication with secondary approver |
GB201212878D0 (en) | 2012-07-20 | 2012-09-05 | Pike Justin | Authentication method and system |
DE202012104705U1 (en) * | 2012-12-04 | 2013-01-07 | Paschalis Papagrigoriou | Chip card reader with a space-saving and combined user-related data input and output |
US20150006382A1 (en) * | 2013-06-27 | 2015-01-01 | German Scipioni | Systems and methods for implementing money orders |
US9898642B2 (en) | 2013-09-09 | 2018-02-20 | Apple Inc. | Device, method, and graphical user interface for manipulating user interfaces based on fingerprint sensor inputs |
US9261904B2 (en) * | 2013-09-16 | 2016-02-16 | Top Victory Investments Limited | Point of sale system |
KR101952928B1 (en) | 2013-10-30 | 2019-02-27 | 애플 인크. | Displaying relevant user interface objects |
FR3016229B1 (en) * | 2014-01-07 | 2016-02-05 | Systemes Et Technologies Identification Stid | ACCESS CONTROL READER AND COMPLEMENTARY CONTROL MODULE |
FR3016228B1 (en) | 2014-01-07 | 2016-02-05 | Systemes Et Technologies Identification Stid | ACCESS CONTROL READER WITH OPENING DETECTION DEVICE |
US10043185B2 (en) | 2014-05-29 | 2018-08-07 | Apple Inc. | User interface for payments |
CN104077616B (en) * | 2014-07-02 | 2017-08-25 | 广州广电运通金融电子股份有限公司 | Self-aided terminal retain card processing method and system |
US10066959B2 (en) | 2014-09-02 | 2018-09-04 | Apple Inc. | User interactions for a mapping application |
WO2016129028A1 (en) * | 2015-02-09 | 2016-08-18 | 株式会社日立製作所 | Business coordination system and business coordination method |
US11429975B1 (en) | 2015-03-27 | 2022-08-30 | Wells Fargo Bank, N.A. | Token management system |
SG10201503701PA (en) * | 2015-05-11 | 2016-12-29 | Mastercard Asia Pacific Pte Ltd | Method and system for rewarding customers in a tokenized payment transaction |
GB201520741D0 (en) | 2015-05-27 | 2016-01-06 | Mypinpad Ltd And Licentia Group Ltd | Authentication methods and systems |
US9940637B2 (en) | 2015-06-05 | 2018-04-10 | Apple Inc. | User interface for loyalty accounts and private label accounts |
US20160358133A1 (en) | 2015-06-05 | 2016-12-08 | Apple Inc. | User interface for loyalty accounts and private label accounts for a wearable device |
US11170364B1 (en) | 2015-07-31 | 2021-11-09 | Wells Fargo Bank, N.A. | Connected payment card systems and methods |
US10380681B2 (en) * | 2015-09-08 | 2019-08-13 | Bank Of America Corporation | Real-time data processing |
US10417616B2 (en) * | 2015-09-08 | 2019-09-17 | Bank Of America Corporation | Real-time data processing |
DK179186B1 (en) | 2016-05-19 | 2018-01-15 | Apple Inc | REMOTE AUTHORIZATION TO CONTINUE WITH AN ACTION |
US10621581B2 (en) | 2016-06-11 | 2020-04-14 | Apple Inc. | User interface for transactions |
DK201670622A1 (en) | 2016-06-12 | 2018-02-12 | Apple Inc | User interfaces for transactions |
CN106203029A (en) * | 2016-06-28 | 2016-12-07 | 联想(北京)有限公司 | A kind of verification method and electronic equipment |
US10992679B1 (en) | 2016-07-01 | 2021-04-27 | Wells Fargo Bank, N.A. | Access control tower |
US11935020B1 (en) | 2016-07-01 | 2024-03-19 | Wells Fargo Bank, N.A. | Control tower for prospective transactions |
US11386223B1 (en) | 2016-07-01 | 2022-07-12 | Wells Fargo Bank, N.A. | Access control tower |
US11615402B1 (en) | 2016-07-01 | 2023-03-28 | Wells Fargo Bank, N.A. | Access control tower |
US11886611B1 (en) | 2016-07-01 | 2024-01-30 | Wells Fargo Bank, N.A. | Control tower for virtual rewards currency |
US10192076B1 (en) | 2016-08-29 | 2019-01-29 | Square, Inc. | Security housing with recesses for tamper localization |
US9842330B1 (en) | 2016-09-06 | 2017-12-12 | Apple Inc. | User interfaces for stored-value accounts |
US10860199B2 (en) | 2016-09-23 | 2020-12-08 | Apple Inc. | Dynamically adjusting touch hysteresis based on contextual data |
US10595400B1 (en) | 2016-09-30 | 2020-03-17 | Square, Inc. | Tamper detection system |
US10496808B2 (en) | 2016-10-25 | 2019-12-03 | Apple Inc. | User interface for managing access to credentials for use in an operation |
US20180130035A1 (en) * | 2016-11-09 | 2018-05-10 | Ca, Inc. | Advanced cash reservation system in atms |
CN107025541A (en) * | 2016-12-19 | 2017-08-08 | 阿里巴巴集团控股有限公司 | Implementation method, client and the service end of transactional operation |
US11556936B1 (en) | 2017-04-25 | 2023-01-17 | Wells Fargo Bank, N.A. | System and method for card control |
US10504096B1 (en) | 2017-04-28 | 2019-12-10 | Square, Inc. | Tamper detection using ITO touch screen traces |
US11062388B1 (en) | 2017-07-06 | 2021-07-13 | Wells Fargo Bank, N.A | Data control tower |
JP6991762B2 (en) * | 2017-07-13 | 2022-01-13 | 東芝テック株式会社 | Electronic signature pad and program |
KR102185854B1 (en) | 2017-09-09 | 2020-12-02 | 애플 인크. | Implementation of biometric authentication |
KR102301599B1 (en) | 2017-09-09 | 2021-09-10 | 애플 인크. | Implementation of biometric authentication |
WO2019075276A1 (en) * | 2017-10-11 | 2019-04-18 | Aquifi, Inc. | Systems and methods for object identification |
US11188887B1 (en) | 2017-11-20 | 2021-11-30 | Wells Fargo Bank, N.A. | Systems and methods for payment information access management |
AU2018202984A1 (en) * | 2018-04-30 | 2019-11-14 | Main Continental Technology Limited | An Electronic Signing Tablet |
US11170085B2 (en) | 2018-06-03 | 2021-11-09 | Apple Inc. | Implementation of biometric authentication |
US10860096B2 (en) | 2018-09-28 | 2020-12-08 | Apple Inc. | Device control using gaze information |
US11100349B2 (en) | 2018-09-28 | 2021-08-24 | Apple Inc. | Audio assisted enrollment |
US11328352B2 (en) | 2019-03-24 | 2022-05-10 | Apple Inc. | User interfaces for managing an account |
US11477609B2 (en) | 2019-06-01 | 2022-10-18 | Apple Inc. | User interfaces for location-related communications |
US11481094B2 (en) | 2019-06-01 | 2022-10-25 | Apple Inc. | User interfaces for location-related communications |
US11169830B2 (en) | 2019-09-29 | 2021-11-09 | Apple Inc. | Account management user interfaces |
KR102602556B1 (en) | 2019-09-29 | 2023-11-14 | 애플 인크. | Account management user interfaces |
DK202070633A1 (en) | 2020-04-10 | 2021-11-12 | Apple Inc | User interfaces for enabling an activity |
AU2021257238A1 (en) | 2020-04-14 | 2022-12-15 | Mobile Sonic, Inc. | Mobile management system |
US11816194B2 (en) | 2020-06-21 | 2023-11-14 | Apple Inc. | User interfaces for managing secure operations |
US10992606B1 (en) | 2020-09-04 | 2021-04-27 | Wells Fargo Bank, N.A. | Synchronous interfacing with unaffiliated networked systems to alter functionality of sets of electronic assets |
US11546338B1 (en) | 2021-01-05 | 2023-01-03 | Wells Fargo Bank, N.A. | Digital account controls portal and protocols for federated and non-federated systems and devices |
CN116935519B (en) * | 2023-09-15 | 2023-12-12 | 四川金投科技股份有限公司 | Intelligent lock based on short-range wireless communication technology and control method thereof |
Family Cites Families (29)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4058839A (en) | 1974-08-21 | 1977-11-15 | R. D. Products, Inc. | Magnetic-type information card and method and apparatus for encoding and reading |
US4386266A (en) * | 1980-02-11 | 1983-05-31 | International Business Machines Corporation | Method for operating a transaction execution system having improved verification of personal identification |
US4385285A (en) | 1981-04-02 | 1983-05-24 | Ncr Corporation | Check dispensing terminal |
US4882675A (en) * | 1984-11-26 | 1989-11-21 | Steven Nichtberger | Paperless system for distributing, redeeming and clearing merchandise coupons |
ATE64484T1 (en) * | 1986-05-06 | 1991-06-15 | Siemens Ag | ARRANGEMENT AND PROCEDURE FOR DETERMINING THE AUTHORIZATION OF INDIVIDUALS BY VERIFYING THEIR FINGERPRINTS. |
US4982346A (en) * | 1988-12-16 | 1991-01-01 | Expertel Communications Incorporated | Mall promotion network apparatus and method |
US5201010A (en) * | 1989-05-01 | 1993-04-06 | Credit Verification Corporation | Method and system for building a database and performing marketing based upon prior shopping history |
US5488575A (en) | 1989-05-02 | 1996-01-30 | Norand Corporation | Portable work station and data collection terminal including switchable multi purpose touch screen display |
US4993068A (en) * | 1989-11-27 | 1991-02-12 | Motorola, Inc. | Unforgeable personal identification system |
US5623547A (en) * | 1990-04-12 | 1997-04-22 | Jonhig Limited | Value transfer system |
US5175682A (en) * | 1990-12-14 | 1992-12-29 | Verifone, Inc. | Check system and method including prioritizing checks for transmission to banks for processing |
US5195133A (en) * | 1991-01-11 | 1993-03-16 | Ncr Corporation | Apparatus and method for producing a digitized transaction record including an encrypted signature |
US5288976A (en) * | 1991-07-15 | 1994-02-22 | Nynex Corporation | Bar code use in information, transactional and other system and service applications |
US5233547A (en) * | 1991-11-12 | 1993-08-03 | Ncr Corporation | Electronic checking account apparatus and method having a digitizer to receive information as a check is being written |
US5334823A (en) * | 1992-01-10 | 1994-08-02 | National Bancard Corporation | Systems and methods for operating data card terminals for transaction chargeback protection |
US5428210A (en) * | 1992-01-10 | 1995-06-27 | National Bancard Corporation | Data card terminal with embossed character reader and signature capture |
US5313051A (en) * | 1992-04-06 | 1994-05-17 | International Business Machines Corp. | Paperless parcel tracking system |
US5536930A (en) | 1992-06-03 | 1996-07-16 | Symbol Technologies, Inc. | Apparatus and method for sensing positional orientations of a portable terminal |
AU5538494A (en) * | 1992-10-30 | 1994-05-24 | Microbilt Corporation | Multi-reader transaction terminal |
US5448044A (en) * | 1993-04-30 | 1995-09-05 | Microbilt Corporation | Signature capture pad for point of sale system |
US5650761A (en) * | 1993-10-06 | 1997-07-22 | Gomm; R. Greg | Cash alternative transaction system |
US5559885A (en) * | 1994-01-14 | 1996-09-24 | Drexler Technology Corporation | Two stage read-write method for transaction cards |
US5459306A (en) * | 1994-06-15 | 1995-10-17 | Blockbuster Entertainment Corporation | Method and system for delivering on demand, individually targeted promotions |
US5509083A (en) * | 1994-06-15 | 1996-04-16 | Nooral S. Abtahi | Method and apparatus for confirming the identity of an individual presenting an identification card |
WO1995035549A1 (en) | 1994-06-21 | 1995-12-28 | Soltesz John A | Modular optical memory card image display point of sale terminal |
US5594226A (en) * | 1994-07-11 | 1997-01-14 | Steger; Paul | Automated check verification and tracking system using bar code information |
US5559313A (en) * | 1994-12-23 | 1996-09-24 | Lucent Technologies Inc. | Categorization of purchased items for each transaction by a smart card |
US5587560A (en) * | 1995-04-10 | 1996-12-24 | At&T Global Information Solutions Company | Portable handwritten data capture device and method of using |
US5640002A (en) | 1995-08-15 | 1997-06-17 | Ruppert; Jonathan Paul | Portable RF ID tag and barcode reader |
-
1997
- 1997-05-09 US US08/853,955 patent/US6193152B1/en not_active Expired - Lifetime
-
1998
- 1998-05-08 AU AU73754/98A patent/AU7375498A/en not_active Abandoned
- 1998-05-08 WO PCT/US1998/009448 patent/WO1998050876A1/en not_active Application Discontinuation
- 1998-05-08 EP EP98921069A patent/EP0980560A4/en not_active Withdrawn
- 1998-05-08 CA CA002296548A patent/CA2296548C/en not_active Expired - Lifetime
- 1998-05-08 CA CA002600704A patent/CA2600704A1/en not_active Abandoned
-
2003
- 2003-02-27 US US10/377,830 patent/USRE41716E1/en not_active Expired - Lifetime
Also Published As
Publication number | Publication date |
---|---|
US6193152B1 (en) | 2001-02-27 |
CA2296548C (en) | 2007-10-30 |
AU7375498A (en) | 1998-11-27 |
WO1998050876A1 (en) | 1998-11-12 |
USRE41716E1 (en) | 2010-09-21 |
CA2296548A1 (en) | 1998-11-12 |
EP0980560A1 (en) | 2000-02-23 |
EP0980560A4 (en) | 2001-12-05 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CA2296548C (en) | Modular signature and data-capture system | |
US5297202A (en) | Apparatus and method for producing a digitized transaction record including an encrypted signature | |
US7409358B2 (en) | Methods and systems for coordinating a change in status of stored-value cards | |
US6539363B1 (en) | Write input credit transaction apparatus and method with paperless merchant credit card processing | |
US4877947A (en) | Transaction processing system | |
US6234389B1 (en) | PCMCIA-based point of sale transaction system | |
US6431439B1 (en) | System and method for the electronic storage and transmission of financial transactions | |
US20130268443A1 (en) | System and method for a secure transaction module | |
US20040104268A1 (en) | Plug in credit card reader module for wireless cellular phone verifications | |
US20070029376A1 (en) | Systems and methods for configuring a point-of-sale system | |
US20020153414A1 (en) | Systems and methods for performing transactions at a point-of-sale | |
US20020156683A1 (en) | Systems and methods for utilizing a point-of-sale system | |
GB2427059A (en) | Portable transaction processing device | |
US20080011838A1 (en) | Rotatable point-of-service terminal | |
JP2002109640A (en) | Finance unifying terminal device and method of operating the same | |
JPH02308392A (en) | Signature collating type pos terminal equipment | |
JP5784879B2 (en) | Document reference system, document reference method | |
JP2661559B2 (en) | Transaction processing method | |
KR200429476Y1 (en) | Card Terminal Devices with Sign-pad | |
KR20050006628A (en) | System and method for processing an electronic-receipt | |
MXPA01005560A (en) | Transactions register terminal. | |
KR20050042960A (en) | Terminal for settling transaction and method for handling cash transaction |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
EEER | Examination request | ||
FZDE | Discontinued |
Effective date: 20140306 |