WO2001055921A1

WO2001055921A1 - Personal information data storage system and its uses

Info

Publication number: WO2001055921A1
Application number: PCT/IB2001/000104
Authority: WO
Inventors: Johannes Janse Van Rensburg; Craig Sheldon Saks; Cornelius Johannes Badenhorst; Anthony Ian Willis
Original assignee: Fundamo (Proprietary) Limited
Priority date: 2000-01-28
Filing date: 2001-01-29
Publication date: 2001-08-02
Also published as: AU2001226996A1

Abstract

A personal information data storage system is provided in which each participating system member has a data base record maintained on a general computerized server accessible over a public (optionally proprietary) network and wherein each participating system member has a communications device, usually a mobile phone which can communicate with the computerized server by way of the communications network. The data base record of each participating member contains therein required personal information as well as information required to initiate communication with the communications device of the relevant participating system member and a security signal associated with the participating system member. The computerized server is programmed to receive requests from the relevant participating system member, other participating system members, or third parties for access to all or a part of the information contained in the data base record of a particular participating system member; and to supply such information as requested consequent on receipt of an authenticating security signal entitling it to do so. The authentication may be by way of a temporary code allowing access to data restricted in duration, frequency, or in extent.

Description

PERSONAL INFORMATION DATA STORAGE SYSTEM AND ITS USES

FIELD OF THE INVENTION

This invention relates to a personal information data storage system and, more particularly, to a data storage system which can be used in various different ways to communicate either with a selected group of persons having selected items of data stored in an associated data base record or to allow the controlled release of personal information.

BACKGROUND TO THE INVENTION

The storage of personal information, which includes personal financial information of all different types including insurance related information, medical information such as medical history including allergies and the like, as well as other personal information unrelated to finances or a person's medical situation is invariably rather a difficult and often time consuming task to perform for many persons, probably the vast majority of persons, and the retrieval of selected information as and when required is also time- consuming and troublesome.

Such information may be required from time to time by third parties such as licensing authorities, financial institutions, insurance companies and suppliers of goods or services when opening an account and the conventional way in which such information is provided is for a form to be completed. This is usually a most aggravating and time consuming activity and often results in delays occasioned by the retrieval of some of the information required. Still further, there are many instances in which identification of a person is required and various measures are employed for this purpose. Most commonly an identity document or drivers license are acceptable but in many case the matter is taken further by using the so-called "memorable data" system in which one or more questions are asked of the person being identified to which it is unlikely that anyone else would know the answers. A typical question is "What is your mother's maiden name?" for example. Such identification procedures are also tedious and troublesome.

On rather a different subject, it is also extremely difficult for companies or other organizations to maintain contact with persons who may, for example, have certain attributes or other particular characteristics. It may, for example, be highly advantageous for an organization to be able to maintain contact, or at least be able to contact, persons having certain abilities as and when required or, alternatively, persons having particular abilities and/or being present within a particular geographic area.

OBJECT OF THE INVENTION

It is an object of this invention to provide a personal information data storage system, as well as ways in which the system can be used whereby the retrieval and transmission of personal information can be greatly facilitated, as may be required, and also wherein persons having certain attributes may be contacted as and when required.

DEFINITIONS

In this specification it is to be understood that the following terms are to be accorded the meanings stated hereunder. "Cleared", "clearance" or any other form of the word as applied to a transaction means that the relevant credit has become available for use by the recipient without restriction by the computerized server in which the relevant financial data base record is held

"Financial data base record" is intended to mean any data base record including data as to an amount of money reflected in currency units or a record of a number of any other type of redeemable or consumable units having value

"Irreversible" as applied to a transaction means that, absent criminal activity (including fraud) or processing error (whether hardware or software related) the transaction cannot be reversed other than at the instance of the recipient

"Merchant" is intended to include all suppliers of goods and services of all types which may be participating system members as herein defined but irrespective of such membership have been allocated a financial data base record in a computerized server of the invention as defined below

"Mobile device" means any device communicating by way of a wireless network operated by a service provider and including mobile telephones but which need not necessarily assume the form of a telephone

"Participating system member" is intended to mean any subscriber of a communications network forming a part of a system according to this invention as hereinafter defined and includes mobile telephone subscribers as well as users of prepaid cellular or mobile services who form part of such a system

"Vendor" is intended to include all suppliers of goods and services of all types which do not have a financial data base record as herein defined SUMMARY OF THE INVENTION

In accordance with one aspect of this invention there is provided a personal information data storage system in which each participating system member has a data base record maintained on a general computerized server and wherein each participating system member has a communications device which can communicate with the computerized server by way of a communications network and wherein the data base record of each participating member contains therein required personal information as well as information required to initiate communication with the communications device of the relevant participating system member and a security signal associated with the participating system member, the computerized server being programmed to receive requests from the relevant participating system member, other participating system members, or third parties for access to all or a part of the information contained in the data base record of a particular participating system member; and to supply such information as requested upon receipt of an authenticating security signal entitling it to do so.

A request for an authenticating security signal may be communicated to the particular participating system member by the computerized server by way of said communications device in response to a request received by it. In such a case the participating system member operates the device to communicate authentication to the computerized server, for example by inputting a code such as a PIN (personal identification number) into the communications device or performing any other authentication such as a simple authorization in combination with secure identification of the participating system member, the secure identification including biometric identification such as thumb or finger print recognition, retina recognition, voice recognition, or palm print recognition. Alternatively, the computerized server may receive from the person requesting the information an authorization signal generally created by inputting a code in which case the code would generally be a temporary code authorizing restricted access to the information. The restriction may relate to the extent of the information authorized for disclosure; to the time or time period during which access is authorized; or it could authorize access on a once only basis. Such a temporary code could be generated on an ad hoc basis by the computerized server at the request of the participating system member and may be provided to the participating system member for onward transmission to the party requiring the information. Of course a direct request for information may originate with the participating system member at any time. In all cases the authorization signal may form part of the original request or may be inputted .

Further features of this aspect of the invention provide for the communications device to be a mobile device, especially a mobile telephone such as a cellular telephone; for the personal information to include, as separately identifiable sub-records, any one or more of a body of information being financial information including as a separate item a statement of assets and liabilities of the type usually requested by financial institutions, medical information, in particular medical history including information as to peculiarities, sensitivities and allergies of each member, information as to the identity of the participating system member such as memorable data and, in particular, a digitized picture of the participating system member; for any request for authorization transmitted to the participating system member to be transmitted in a format appropriate to display on the display screen of the device, or, in the case of a telephone not having a display screen, for the request to be conveyed by synthesized or recorded voice messaging; and for the data base record to include personal information categorizing the persons to enable the second aspect of the invention defined below to be capable of implementation using the relevant data base record. In the case that the requested information is released to a requesting party upon the provision of a temporary or restricted security code then the access enabled by the security code may be for a limited period of time after which it expires and the temporary security code ceases to be effective; the temporary or restricted security code may operate on a once only basis; and/or it may be restricted as to the nature or extent of information the release of which is authorized thereby. In order to enable the release of appropriate portions of the personal information the information is preferably either stored in sub-records which can be released individually or each item of information is categorized into one or more categories so that each category can be authorized independently of the others.

It is, still further preferred that the personal data base record provided by this invention be linked to, or combined with, a financial data base record in a banking system. This arrangement has the advantage that the information is easily accessible in the event of a financial transaction taking place which requires personal information, such as when buying a motor vehicle. The financial data base record is preferably one that can be accessed by the same communications device to conduct the transfer of funds from one financial data base record to another by operating the communications device, usually from a remote location. In such a case a participating system member will be able to use the same security signal (PIN) for the control of the personal information as for the transfer of funds and the data base containing the personal information can be integrated with the financial data base record, or it can be maintained as a separate but linked data base record. A banking system of a preferred type will be described below in relation to a preferred embodiment of the invention.

In accordance with a second aspect of the invention there is provided a personal information data storage system in which each participating member has a data base record maintained in a computerized server and wherein each participating member has a telephone capable of communication with the computerized server, the data base record of each participating member containing therein personal information as to the qualifications, work experience, and any other selected information appropriate to a curriculum vitae, the computerized server being programmed to communicate with a selected group of participating members selected according to the items of their personal information and wherein each participating member reacting to a communication sent out by the computerized server records such reaction by inputting the relevant security code into the telephone to acknowledge receipt of the communication to the computerized server which can then be interrogated to review the response to the communications.

As indicated above, in implementing the second aspect of the invention the telephone could be of any type but, because of its particular attributes, it is preferred that in the implementation of the second aspect of the invention the telephones be cellular telephones for reasons which will become apparent from the following.

Preferably the information necessary to implement the second aspect of the invention and that necessary to implement the first aspect of the invention can be combined at the instance of the relevant member to provide a composite personal information body of stored data.

The utility of the first aspect of the invention is considerable in that all personal information of a participating system member which is required from time to time for various purposes can be stored in the data base for retrieval on an ad hoc basis from remote locations as will become more apparent from what follows. This facility is particularly useful when making a purchase requiring personal information; registering for some purpose or activity; opening an account with a supplier of goods or services; or when making application involving personal details such as making application for employment or the like. The utility of the second aspect of the invention may not be quite so plain and it is therefore indicated that such a body of data can be used for a variety of purposes not least of which is the mustering of a workforce of persons having certain abilities, skills or the like In its application the second aspect of the invention can be used, for example, to recall staff who may have been rendered redundant or have lost their jobs for any other of a number of reasons and implementation of this aspect of the invention enables personnel management to keep track of valuable staff members who may not have been accommodated in the work situation for a particular period of time

Of course, applying the second aspect of the invention has another advantage in the event that cellular telephones are employed in that it may be highly relevant to a situation in which a workforce is required in a particular area in that the relevant cells of the telephone network can be employed to define the geographic area to which the message requesting communication with the computerized server is transmitted

In order that the above and other features of the invention may be more fully understood one embodiment as well as a variety of optional features thereof will now be described with reference to the accompanying drawings

BRIEF DESCRIPTION OF THE DRAWINGS

In the drawings -

Figure 1 is a schematic diagram of a system according to the invention, and,

Figure 2 is a block diagram of a cellular telephone forming part of the system illustrated in Figure 1 DETAILED DECSRIPTION WITH REFERENCE TO THE DRAWING

Simply by way of example the instant embodiment of the invention is described as being applied to a computerized server to be used for the dual purpose of putting the present invention into practice as well as carrying out financial transactions by the remote operation of the communications device in order to transfer funds from a financial data base record of one participating member to that of another. However it will be understood that the invention can be set up as a stand alone personal data storage facility which participating system members could utilize for the exclusive purpose of storing personal data so as to be readily available.

In this particular embodiment of the invention the computerized server is to be accessed using, in amongst other devices, mobile devices in the form of cellular telephones in which a microprocessor and memory are embodied, such as in a SIM card removably held in each of the relevant cellular telephones. It will be quite apparent to those skilled in the art that the invention can just as easily be applied to any other type of cellular or mobile telephone or other suitable wireless device and associated network and that the term cellular telephone can be replaced by such other suitable device in what follows. Also a single system may involve the use of a plurality of different wireless and other communications devices as will be apparent from a reading of this specification although for simplicity of description cellular telephones will be used as the example. Even the Internet may be employed as a communications device provided that adequate attention is given to the security aspect.

In this embodiment of the invention a system for conducting commercial transactions includes a number of participating system members (as herein defined) each of which has, in this case, a cellular telephone (1 ) embodying a SIM card (2) or having alternative memory specially selected to be adequate for the purposes of implementing the system described below. The cellular telephones are each pre-programmed with conventional applications and data as indicated by numeral (3) (see Figure 2) as well as with additional applications and additional data necessary for the implementation of the system. Each menu item has associated with it a preset standard message which is a substantially complete instruction which only requires a small amount of data in order to complete it, for example, the identity of the recipient the amount to be transferred and a security signal which is described further below. The identity of the recipient may in appropriate cases even be selected from a sub-menu in which there is a custom list of potential recipients.

It is to be noted that the participating system members need not all belong to the same wireless network and that a plurality of networks can be involved without in any way adversely affecting the operation of the system.

The extent to which the additional menu items and data are carried by the cellular telephone itself will depend largely on the capacity of the memory (in the instant case the SIM card) in the mobile device and the associated microprocessor. Thus, in its most comprehensive form, as far as the cellular telephone is concerned, all of the applications and data occasioned by the additional menu structures will be resident in the memory of the cellular telephone. In other cases a lesser portion of those applications and data may be present but in any event whatever is necessary to achieve the objectives set out below. The smallest amount will inevitably be cases in which the cellular telephone has a browser for accessing the necessary applications and data which may then be maintained on the server, for example.

Irrespective of this, all of the applications and data associated with the additional menu items will be resident on the computerized server described in more detail below. The cellular telephone memory, in this case the SIM cards, used in the system, are programmed to communicate interactively by way of suitable interpretive software (6) with a general computerized server (7) with the communication being by way of the associated cellular (wireless) network (5), the applicable one of which in this particular instance is of the type generally known as GSM in which SMS (sort message system) format of transmission is used.

The computerized server (7) is programmed to accept instructions also from a computer, for example a laptop computer (8); via the Internet as indicated by numeral (9) as well as from call centres indicated by numeral (10); or even by way of intra-net as indicated by numeral (11). Participating system members, and also third parties, can thus, communicate with the computerized server (7).

The computerized server (7) may also be connected through suitable communications software (14) with participating banking institutions (15); with vendors (16) as well as merchants (17) not having cellular telephones and information services (18). Finally, the computerized server may also be linked to similar computerized servers (7a) which may be located in different geographic areas or in different countries and each of which has its own set of participating system members, merchants, vendors etc..

The computerized server in this example provides a data base record for each participating system member and merchant wherein each data base record may be identified at least in part by a cellular telephone number where applicable. Each data base record also includes data embodying the additional PIN number, and any additional security number or data which may be desirable for use in the authorization process.

The programming of the computerized server enables the functions of receiving and sending of data in the form of; a facility for encrypting and decrypting data at least with regard to financial data; and the ability to link up with participating banks vendors; broadcast services; other third party services and other similar computerized servers.

Most importantly the program enables financial transactions to be carried out between a participating system member as the instructing participating system member and any one of another instructing participating system member or merchant by the debiting and crediting a value balance in each data base record or sub-record affected by a particular transaction.

The arrangement is such that a participating system member is able, by remote operation of the cellular telephone, to conduct a commercial transaction by debiting the data base record associated with himself and crediting a data base record of another participating system member or merchant. The information required to do this, and which has to be transmitted to the computerized server is the identity of the recipient, conveniently conveyed by way of a identification number of some sort, the amount to be transferred, and the security signal such as the PIN number or the like.

Use of a menu structure of the type described above with pre-set standard messages, enables data pertaining to a transaction to be captured rapidly and a composite message, including the additional PIN (almost invariably encrypted) if it be required by the server, to be formulated prior to connection with the server where the size of memory is adequate to permit this. This results from the fact that a substantial part, if not an entire duplicate, of the necessary parts of the program or application as well as the menu data are resident in the memory of the cellular telephone itself so that certain activities can be carried out independently of the server. This facility will be limited if inadequate memory is available in the cellular telephone. On the other hand, if the recipient is a merchant which has its own application and computer, a transaction may be selected interactively with the recipient's application with the communication being by way of the computerized server in order to select a required transaction. Of course, the computerized server can also be used as a conduit to any vendor and to their computer systems.

As a general rule the computerized server is programmed to enable the debiting from a relevant data base record which has an adequate positive balance (or specially arranged credit facilities) to another data base record in the general manner which will be quite apparent from the above.

Preferably, once the transaction becomes completed, at least as between an instructing participating system member and a recipient who has a data base record in the computer server, the transaction becomes irreversible. The transaction is therefore as good as having taken place in cash of any type as the only person who can reverse the transaction (other than in instances addressed in the definition of "irreversible" above), either in whole, or partly by way of a refund, is the recipient. Dispute resolution is therefore up to the payer and recipient.

Once the transaction has been completed the server may be programmed to send a confirmatory message to both parties advising them of the completion of the transaction.

In instances in which there are other similarly configured and programmed servers inter-linked with the server described above, the recipient could be a participating system member of a different server from that of which the payer is a participating system member. In order to ensure that transactions may be irreversible and can be carried out with clearance taking place in real time the computerized servers must all be connected, or be capable of immediate connection, at all times via fixed connections. Each server will, of course, have its own unique identification number.

It is also preferred that the programming of both the server and the SIM cards is such that the additional menu data can be changed remotely by way of the server as and when required and the additional PIN, if resident on the SIM, can also be change as required.

The system as described above is significantly enhanced in its flexibility in that the computerized server is further programmed to receive requests for the payment of amounts from a financial data base record of a participating system member or for the reservation of funds for future payment of such amounts from a variety of different devices other than the mobile device of a participating system member.

In particular, the participating system member may request payment or reservation of funds in respect of a transaction initiated on the Internet, the request being made by way of the Internet rather than by means of the cellular telephone (or other mobile device). In such an instance the payment or reservation of funds request is conveyed to the computerized server which then sends the authorization request to the participating system members mobile device, the cellular telephone in this case, requesting authorization. The security signal is returned in consequence of the participating system member either interactively, or subsequently transmitting a message, authorizing the payment or reservation of funds. As a result of the fact that a completely different device is used for the authorization process a high degree of security is present in the arrangement. Of course the security signal can be encrypted to whatever degree is required to ensure security.

By the same token the payment or reservation of funds request could be initiated by a third party, for example, the supplier which offers their goods and services on a web site over the Internet. The same principles apply. In order to still further enhance the system described above the data base record may be configured to receive personal information so all or parts of it can be released against authorization. The personal information may be stored in a separate data base record linked to the financial data base record or it may be stored in a suitably identified manner in the financial data base record itself. Furthermore, as indicated above, the personal information may be stored in a plurality of different sub-records according to its general nature and sub-records considered to be exemplary of a storage system would be financial information, an up-to-date statement of assets and liabilities, information as to insurance policies and retirement annuities etc, information concerning the identity of the participating system member including a digitized picture and any memorable data, medical information as indicated above, a curriculum vitae, and a categorized employment data record including information as to skills and work preferences. The data base record may also include address lists which can be employed in the event of a change of address taking place.

The personal information data storage system provided by the invention can be used for all sorts of different purposes in each of which the computerized server will receive a request to release certain information as indicated above and, provided that the appropriate authorization is provided, the information will be released to the party requesting it or to another party at the direction of the participating system member. Of course authorization can be requested and given by operations from all the devices described with reference to Figure 1.

In amongst other uses, the personal information data storage system can even be used for purposes of identification. A person or an official needing to verify the identity of a participating system member can be authorized to access the identification information and, where a digitized picture is present, even the picture can be displayed on, for example, a computer monitor screen. In this manner a highly efficient and effective identification system is provided.

The system can be developed so that a third party having their own computer systems can access information against authorization so that a form can automatically be completed by the computer system for any required purpose such as purchase and licensing of the new motor vehicle; opening an account with a supplier of goods and services; filling in an application form for insurance purposes and any other situation in which forms are to be filled in. In such a case the party running the computer system receives authorized access to the relevant personal information necessary to complete the particular form. In the case of the present embodiment of the invention, in which the personal information data base record is integrated with a financial data base record, the invention is particularly useful for in conducting financial transactions requiring forms to be completed and including personal information.

One very important advantage of the system is that information supplied from the data base is much more likely to be accurate (free of errors) and thus trustworthy. The original information, insofar as is necessary, will already have been checked in an efficiently run system.

As indicated above, the second aspect of the invention enables selected groups of participating system members to the contacted and their replies to be monitored and processed as may be required.

There are numerous other situations in which personal information stored on a system as provided by this invention.

Clearly, the aforegoing is simply indicative of the enormous scope of application of the invention and numerous variations can be made within the scope hereof. As indicated above the secure authorization signal may be selected from that associated with a security code such as a PIN number, or a simple authorization in combination with secure identification of the participating member, the secure identification including biomethc identification such as thumb or finger print recognition, retina recognition, voice recognition, or palm print recognition.

It will be quite apparent that in response to any authorization request which is communicated to the participating system member he or she may respond by entering the security PIN or, in other cases, performing the necessary activity to generate the appropriate security signal. As no one else is in position to generate a return message (assuming the participating system member to be responsible and not to have shared information concerning his security situation with others) the release of information is entirely secure and not subject to any of the disadvantages outlined above where third parties, or the merchant or vendor are supplied with credit card details which can be abused.

The invention therefore provides an integrated system which is versatile and can be used in a number of different situations as will be clear from the aforegoing

Claims

CLAIMS:

1 . A personal information data storage system in which each participating system member has a data base record maintained on a general computerized server and wherein each participating system member has a communications device which can communicate with the computerized server by way of a communications network and wherein the data base record of each participating member contains therein required personal information as well as information required to initiate communication with the communications device of the relevant participating system member and a security signal associated with the participating system member, the computerized server being programmed to receive requests from the relevant participating system member, other participating system members, or third parties for access to all or a part of the information contained in the data base record of a particular participating system member; and to supply such information as requested consequent on receipt of an authenticating security signal entitling it to do so.

2. A personal information data storage system as claimed in claim 1 in which a request for an authenticating security signal may be communicated to the relevant participating system member by the computerized server by way of said communications network and communications device in response to a request received by it and the participating system member operates the device to communicate authentication to the computerized server.

3. A personal information data storage system as claimed in claim 2 in which authentication is communicated to the computerized server by inputting a code in the form of a PIN (personal identification number) into the communications device.

4. A personal information data storage system as claimed in claim 2 in which authentication is communicated to the computerized server by performing a simple authorization in combination with secure identification of the participating system member, the secure identification being selected from biomet c identification such as thumb or finger print recognition, retina recognition, voice recognition, or palm print recognition..

5. A personal information data storage system as claimed in claim 1 in which the computerized server may receive from the person requesting the information an authorization signal created by inputting a code.

6. A personal information data storage system as claimed in claim 5 in which the code is a temporary code authorizing restricted access to the information.

7. A personal information data storage system as claimed in claim 6 in which the restriction relates to the extent of the information authorized for disclosure; to the time or time period during which access is authorized; or it could authorize access on a once only basis.

8. A personal information data storage system as claimed in either one of claims 6 or 7 in which the temporary code is generated on an ad hoc basis by the computerized server at the request of the participating system member.

9. A personal information data storage system as claimed in any one of the preceding claims in which the communications device is a mobile device.

10. A personal information data storage system as claimed in claim 9 in which the mobile device is a mobile telephone.

1 1. A personal information data storage system as claimed in claim 10 in which the mobile telephone is a cellular telephone.

12. A personal information data storage system as claimed in any one of the preceding claims in which the personal information includes any one or more of a body of information being financial information including as an optionally separate item a statement of assets and liabilities of the type usually requested by financial institutions, medical information, including one or more of medical history, and information as to peculiarities, sensitivities or allergies of the participating system member, information as to the identity of the participating system member such as memorable data and a digitized picture of the participating system member.

13. A personal information data storage system as claimed in any one of the preceding claims in which any request for authorization transmitted to a participating system member to be transmitted in a format appropriate to display on the display screen of the device, or, in the case of a telephone not having a display screen, for the request to be conveyed by synthesized or recorded voice messaging

14. A personal information data storage system as claimed in any one of the preceding claims in which the data base record includes personal information categorizing the persons to enable the second aspect of the invention defined below to be capable of implementation using the relevant data base record. A personal information data storage system as claimed in any one of the preceding claims in which the personal data base record is linked to, or combined with a financial data base record in a banking system

A personal information data storage system as claimed in claim 15 in which the financial data base record is one that can be accessed by the same communications device to conduct the transfer of funds from one financial data base record to another by operating the communications device optionally from a remote location

A personal information data storage system as claimed in either one of claims 15 or 16 in which a participating system member is able to use the same security signal (PIN) for the control of the personal information as for the transfer of funds

A personal information data storage system as claimed in any one of claims 15 to 17 in which the data base containing the personal information is integrated with the financial data base record

A personal information data storage system as claimed in any one of the preceding claims in which, the data base record of each participating member contains therein personal information as to the qualifications, work experience, and any other selected information appropriate to a curriculum vitae, the computerized server being programmed to communicate with a selected group of participating members selected according to the items of their personal information and wherein each participating member reacting to a communication sent out by the computerized server records such reaction by inputting the relevant security code into the telephone to acknowledge receipt of the communication to the computerized server which can then be interrogated to review the response to the communications