Secure money transfer between hand-held devices

[0001] This application is a continuation-in-part of U.S. patent application Ser. No. 10/961,816, filed on Oct. 8, 2004, which claims priority to provisional patent Application No. 60/510,649, filed on Oct. 10, 2003. Each of these references is hereby incorporated by reference in their entireties.

[0002] 1. Field of the Invention

[0003] This invention relates to systems and methods for completing transactions using hand-held devices.

[0004] 2. Description of Related Art

[0005] Convenient completion of financial transactions using hand-held devices continues to gain increasing popularity among consumers. For example, a consumer may call a number of retailers using a hand-held device, such as a mobile phone, provide the retailer with payment information, and have the desired product delivered to their home. Such an order may be placed using a variety of hand-held devices by any user who can read a credit card number. Accordingly, there is a potential for fraud in transactions using hand-held devices. In fact, there is currently no satisfactory mechanism for authenticating the identity of the person ordering a product using a hand-held device in order to ensure that the person is authorized to use the provided payment information. In many situations, it may be desirable to transfer money from one hand-held device to another, without the need for entering personal and financial institution identification for both the sender and the recipient of the money transfer.

[0006] A payment resolution module is configured to communicate with hand-held devices (such as mobile phones, PDA's, or computers) to allow purchase of products using the hand-held devices, without requiring the user of the hand-held device to enter payment information for each sales transaction. The user of the hand-held device may be identified as the owner of the device either by having the option to enter a personal identification code, or by using a biometric to identify himself, for example. Accordingly, only an authorized user of the hand-held device may use the hand-held device to purchase products.

[0007] In one embodiment, the user of a hand-held device selects a desired product (or products) by responding to a series of product menus or entering a product identification code into the hand-held device, for example. In one embodiment, the hand-held device receives product information via a data communication signal, such as a RF or infrared signal, and the user may then select a product from the product information received from that data communication signal. The payment resolution module may immediately return a confirmation of the selected product to the hand-held device, along with availability, price, product description, and/or other product related information. In one embodiment, the payment resolution module determines the identity of the mobile device user and communicates information regarding the requested product, including total price of the product, to a payment authorization source, such as a credit card company. After the payment resolution module receives authorization for payment of the total price from the payment authorization source, the payment resolution module generates an authorization code that is transmitted to the mobile device, such as by using a short message service (SMS), for example. In one embodiment, in order for the user of the hand-held device to retrieve the product at the point-of-sale, the user must present the authorization code, such as by entering the code into a computing device at the point-of-sale, to confirm the user's identity. In this way, the use of an authorization code reduces fraud by ensuring that only the authorized user may retrieve the ordered goods or services. Additionally, because each user is automatically identified by the payment resolution module, a simplified system and method for completing transactions using hand-held devices is provided.

[0008] FIG. 1 is a block diagram illustrating an exemplary arrangement of modules that may be used in a point-of-sale billing system for hand-held devices.

[0009] FIG. 2A is a block diagram illustrating exemplary modules in a payment resolution module, such as the payment resolution module illustrated in FIG. 1.

[0010] FIG. 2B is a block diagram illustrating exemplary modules in a transaction database, such as the transaction database illustrated in FIG. 1.

[0011] FIG. 3 is a flow chart illustrating an exemplary method of completing an authenticated transaction.

[0012] FIG. 4 is a flow chart illustrating an exemplary process by which the user of a hand-held device may determine a product and/or service to purchase.

[0013] FIG. 5 is a flow chart illustrating an exemplary process of determining the identity of the user of a hand-held device.

[0014] FIG. 6 is a flow chart illustrating an exemplary process of authorizing a transaction request received at the payment resolution module.

[0015] FIG. 7 is a flow chart illustrating an exemplary process of updating a transaction database.

[0016] FIG. 8 is a flow chart illustrating an exemplary process of verifying an authorization code.

[0017] FIG. 9 is a flow chart illustrating an exemplary process of securely transferring money from an account associated with a paying device to an account associated with a recipient device.

[0018] Embodiments of the invention will now be described with reference to the accompanying Figures, wherein like numerals refer to like elements throughout. The terminology used in the description presented herein is not intended to be interpreted in any limited or restrictive manner, simply because it is being utilized in conjunction with a detailed description of certain specific embodiments of the invention. Furthermore, embodiments of the invention may include several novel features, no single one of which is solely responsible for its desirable attributes or which is essential to practicing the inventions herein described.

[0019] FIG. 1 is a block diagram illustrating an exemplary arrangement of modules that may be used in a point-of-sale billing system for hand-held devices. The term “module,” as used herein, means, but is not limited to, a software or hardware component, such as a field programmable gate array (FPGA) or an application specific integrated circuit (ASIC), which performs certain tasks. A module may advantageously be configured to reside on an addressable storage medium and configured to execute on one or more processors. Thus, a module may include, by way of example, components, such as software components, object-oriented software components, class components and task components, processes, functions, attributes, procedures, subroutines, segments of program code, drivers, firmware, microcode, circuitry, data, databases, data structures, tables, arrays, and variables. The functionality provided for in the components and modules may be combined into fewer components and modules or further separated into additional components and modules.

[0020] As illustrated in FIG. 1, a payment resolution module 110 is in bi-directional communication with both a hand-held device 120 and a payment authorization source 130. The payment resolution module 110 also is in communication with a transaction database 140, which maintains records of transactions that are currently in process and those that have already been completed. A confirmation device at the point-of-sale 150, or simply confirmation device 150, is accessed by the user of the hand-held device 120 before the ordered product may be retrieved. FIG. 1 also includes numbered steps, signified by numbers inside of circles, that illustrate the order of data flow in completing an authenticated transaction.

[0021] In operation, the hand-held device 120 initially contacts the payment resolution module 110 to place an order for a product (step 1 of FIG. 1). The contact between the hand-held device 120 and the payment resolution module 110 can be accomplished using existing cellular telephone infrastructure, such as dialing a telephone number which corresponds to the payment resolution module 110. A product may be identified, for example, by entering a product identification code, or by having such code received by a proximity-based system such as RFID or infrared, or by navigating a series of menus using the hand-held device 120. In one embodiment, once a product has been identified by the hand-held device 120, the payment resolution module 110 transmits a verification of the selected product to the hand-held device 120 (step 1A of FIG. 1).

[0022] In an advantageous embodiment, the payment resolution module 110 identifies the user of the hand-held device 120 using information that is unique to the hand-held device 120, such as caller ID information or a device identifier specific to the hand-held device 120. This information may be stored locally at the payment resolution module 110, or may be accessed on a remote computer system. For example, when a product request is received by the payment resolution module 110, information identifying the mobile device may be sent to a user resolution module (not shown). Such a module may list a plurality of mobile device identifiers, each associated with a user. Thus, a user resolution module may determine a user based upon a mobile device identifier. The determined user may then be returned to the payment resolution module 110. Accordingly, the payment resolution module 110 acquires an identity of a specific user along with a product requested by the specific user.

[0023] In step 2 of FIG. 1, the payment resolution module 110 transmits information identifying the user, along with the product information, such as the price of the product requested, to the payment authorization source 130. The payment authorization source 130 may communicate with any entity, such as a credit institution or a bank, that has the ability to authorize payments from the identified user. In one embodiment, the payment authorization source 130 comprises a credit card company or communicates with a credit card company. In another embodiment, the payment authorization source 130 comprises a provider of wireless service, or communication with a wireless service provider. In another embodiment, the payment authorization source 130 provides an interface to various banks, credit card companies, wireless service providers, or other payment authorization sources 130.

[0024] In step 3 of FIG. 1, the payment authorization source 130 returns to the payment resolution module 110 either an authorization or denial to charge the amount requested from the requested payment source. In one embodiment, the payment authorization source 130 may provide further information to the payment resolution module 110, such as a status of the user's account or other information that may be helpful in determining why a request was denied (or authorized).

[0025] In step 4 of FIG. 1, the payment resolution module 110 communicates information regarding the requested transaction and the response received from the payment authorization source 130 to the transaction database 140. The transaction database 140 is in communication with various product vendors, such as via a telephone, internet, or wireless connection, for example. In one embodiment, the payment resolution module 110 also generates an authorization code for any requested transaction that has been approved. This authorization code may be sent to, and stored at, the transaction database 140. The transaction database 140 maintains the transaction information and corresponding authorization codes so that the information is available at multiple point-of-sale locations to verify that specific requested transactions were either authorized or denied by the requested payment source via the payment authorization source 130. This creates an auditable log to reduce fraud, manage creditor-defined spending limits, and to enhance system flexibility and user-friendliness by allowing information to be shared across a vendor's multiple locations for increased efficiency in delivery. It also provides a log for post-processing of billing and charge resolution to the customer's account.

[0026] In an advantageous embodiment, upon receipt of authorization from the payment authorization source 130, the payment resolution module 110 transmits the authorization code to the hand-held device 120. This authorization code will be required in order for the user to retrieve the requested product at the point-of-sale. The transmission of the authorization code may be accomplished through the use of a secure communication protocol, such as the SSL protocol. Once the hand-held device 120 has received the authorization code from the payment resolution module 110, the user of the hand-held device 120 may retrieve the product from the point-of-sale by presenting the authorization code at the point-of-sale.

[0027] In one embodiment, the user of the hand-held device 120, or a sales person at the point-of-sale, enters the authorization code into the confirmation device 150, which is located at the point-of-sale, in order to confirm that the transaction was approved by the payment authorization source 130. The confirmation device 150 communicates with the transaction database 140 to confirm that the sales transaction has been authorized. When the confirmation device 150 confirms that the sales transaction was authorized, the user is allowed to retrieve the selected product and the payment authorization source 130 charges the appropriate payment source.

[0028] FIG. 2A is a block diagram illustrating exemplary modules of the payment resolution module 110. The exemplary payment resolution module 110 comprises a customer look-up module 220, an Input/Output (I/O) interface module 230, an interactive voice response module 210, and an authorization code generation module 240. Each of the exemplary modules is described below in further detail.

[0029] The I/O interface module 230 interfaces facilitates communications between the payment resolution module 110 and various remote systems. In one embodiment, the I/O module 230 is in communication with each of the other modules in the payment resolution module 110, such as those illustrated in FIG. 2A, for example. Additionally, the I/O interface module 230 may be configured to communicate with multiple hand held devices, such as cell phones or PDA's, for example. Accordingly, in one embodiment the I/O interface module 230 receives incoming calls from hand-held devices. In one embodiment, the I/O interface module 230 transmits an acknowledge message to a hand-held device upon receipt of a request to establish a communication link.

[0030] The I/O interface module 230 communicates using various communication mediums and protocols that are known in the art. For example, in one embodiment the I/O interface module 230 includes an interface for transmitting information via a wireless communication link, such as those available by cellular phone carriers. In one embodiment, the I/O interface module 230 communicates digital messages using the short message service (SMS) protocol.

[0031] The customer look-up module 220 receives information from the I/O interface module 230 regarding a hand-held device that is in communication with the I/O interface module 230. The information obtained from the I/O interface module 230 may then be used by the customer look-up module 220 to retrieve an identity of the owner of the hand-held device and/or payment information associated with the hand-held device. For example, the customer look-up module 220 may receive caller ID (CID) information from the I/O interface module 230. The CID information may then be used to link the hand-held device to a particular user. As noted above, mapping a hand-held device to a user may be performed by the customer look-up module 220 or may be performed by a user resolution module that may be external to the payment resolution module 110. In another embodiment, the customer look-up module 220 receives a device ID, such as a MAC address of a hand-held device, from the I/O interface module 230, which may be used to map the hand-held device to a user. In another embodiment, the customer look-up module 220 receives an IP address, or other internet address information, for the I/O interface module 230, which may be used to map the hand-held device to a user. In one embodiment, the customer look-up module 220 also determines a location of the hand-held device according to the information received from the I/O interface 230.

[0032] The interactive voice response (IVR) module 210 interacts with the user operating the hand-held device to determine the specific products and/or services the user wishes to order. In one embodiment, the IVR module 210 is an automated system that communicates data to the hand-held device based on a structure of menus. The menu structure may be transmitted to the hand-held device graphically or, alternatively, communicated to the user with voice instructions. In one embodiment, the menu that a particular user accesses is based on a location of the user, as may be determined by the customer look-up module 220 or entered by the user. In this way, the IVR module 210 may personalize the menu according to the particular customer and/or according to the retail stores in a defined area surrounding the user's location.

[0033] The authorization code generation (ACG) module 240 generates an authorization code that will be necessary for the user to complete an authorized transaction at the POS. More particularly, when a particular transaction has been authorized, the ACG module 240 generates a code, or string of alphanumeric characters, which are transmitted to the hand-held device in the manner discussed above with reference to FIG. 1, for example. In one embodiment, the ACG module 240 is in communication with the I/O interface 230 so that the authorization code may be transmitted to the hand-held device via the I/O interface 230. In an advantageous embodiment, the authorization code is encoded, such as by using SSL, to reduce the risk of interception and decoding of the authorization code. The authorization code generated by the ACG module 240 may also be transmitted to the transaction database 140, which is accessed by the POS in order to confirm entry of the correct authorization code by the user at the POS. The confirmation process will be discussed in further detail below with reference to FIG. 8

[0034] FIG. 2B is a block diagram illustrating exemplary modules in a transaction database, such as the transaction database 140 illustrated in FIG. 1. In the embodiment of FIG. 2B, the transaction database 140 includes transaction data storage module 260 and transaction processing module 270. As noted above, the transaction database 140 is coupled to the payment resolution module 110 and also to the confirmation device 150. The transaction database 140 is advantageously configured to maintain records of transactions that are currently in process and those that have already been completed.

[0035] The transaction data storage module 260 comprises any type of storage device known in the art, such as magnetic, electrical, or optical storage devices. In one embodiment, the transaction data storage module 260 comprises one or more hard drives. Transaction data, such as information related to (1) the user of the hand-held device 120, (2) the requested product or service, (3) the payment authorization source, (4) the authorization code, and (5) the status of the requested product or service, may be stored on the transaction data storage module 260. This information stored on the transaction data storage module 260 may be accessed by other modules of the system, such as those illustrated in FIG. 1. In particular, the authorization code, user information, and product or service information may be accessed by the confirmation device 150 in order to complete an authorized transaction.

[0036] The transaction processing module 270 advantageously accesses the transaction data storage module 260 and communicates with the confirmation device 150 at the point of sale. In one embodiment, the transaction processing module 270 receives authorization requests from various confirmation devices 150. Upon receiving such requests, which include an authorization code, the transaction processing module 270 accesses the transaction data storage module 260 in order to determine if the transaction is authorized. As noted above, the authorization code may advantageously be transmitted using a secure transmission protocol, such as SSL. In one embodiment, the transaction processing module 270 simply compares the authorization code received from the confirmation device 150 to any authorization codes associated with the user operating the confirmation device 150. If the authorization code entered at the confirmation device matches an authorization code associated with the user, the transaction processing module 270 sends an authorization signal to the confirmation device 150 indicating that the transaction has been authorized. The transaction processing module 270 may then initiate payment for the already authorized transaction. This may be accomplished by transmitting a message to the payment authorization source 130, or directly to a payment source, indicating that the payment amount should be charged to the user's account.

[0037] In another embodiment, after matching an authorization code received from the confirmation device 150 with an authorization code stored in the transaction data storage module 160, the transaction processing module 270 performs further authorization procedures before responding to the confirmation device. For example, the transaction processing module 270 may analyze the time difference between authorization of the transaction and the time of receipt of the authorization code from the confirmation device 150. In one embodiment, transactions have a time-out, such that the authorization is only valid for a predetermined amount of time, such as 30 minutes, 1 hour, 4 hours, 1 day, or 1 week, for example. Accordingly, if a transaction has timed-out, even if a proper authorization code is entered at the confirmation device 150, the transaction processing module 270 will not authorize the confirmation device 150 to complete the transaction. In other embodiments, the transaction processing module 270 may also compare information received from the confirmation device regarding the user, the hand-held device, or the payment source, for example, with information regarding these same items stored in the transaction data storage module 160.

[0038] FIG. 3 is a flow chart illustrating an exemplary process of securely completing a transaction using a hand-held device, without the need to enter payment information. In one embodiment, the method of FIG. 3 automatically identifies a user and a corresponding payment source, based upon identification information from the hand-held device. In one embodiment the identification information is wirelessly transmitted from the hand-held device and includes personally-identifiable information regarding the user, such as an identification code or a biometric. Thus, based upon the identification information, the system may prevent unauthorized users from proceeding with a transaction request. In this way, the method of FIG. 3 secures and simplifies the process of completing purchase of a product or service.

[0039] In a block 310, the user determines the product and/or service to purchase. For ease of description herein, any reference to a product is also applicable to a service and vice versa. A product may be advertised in any manner, including conventional methods, such as billboards, flyers, and magazine ads. In one embodiment, the advertisement includes a telephone number to call in order to order the product.

[0040] Continuing to a block 320, the user transmits a transaction request to a payment resolution module. In one embodiment, a desired product is identified by entering a product identification code or by navigating a series of menus using the hand-held device 120. For example, an advertisement for a specific product may include an identification code so that a user may enter only the identification code, and possibly a quantity, as part of the transaction request. In another embodiment, the user is presented with a number of hierarchal menus on a display of the hand-held device. By navigating these menus, the user determines one or more products for purchase. Those of skill in the art will recognize that a product may be selected in any number of other manners.

[0041] Moving to a block 330, the identity of the user (referred to also as a “requester”) is determined. As discussed above, in one embodiment the user is identified based on information that is transmitted by the hand-held device 120, such as a serial number of the hand-held device 120 or CID information. A database, such as the transaction database 140 of FIG. 1, may be accessed in order to match a hand-held device 120 to a specific user. In one embodiment, the user may comprise multiple users, such as members of a family. Thus, in this embodiment, several users may be associated with a single user account.

[0042] In a block 340, the transaction request is either authorized or denied. In one embodiment, the transaction request is transmitted to a payment authorization source 130 to determine if the user is authorized to complete the transaction. The payment authorization source 130 may have access to information regarding the user's credit and/or other payment sources that are associated with the user.

[0043] Next, in a block 350, a transaction database 140 is updated with the results from the payment authorization source. In one embodiment, the transaction database 140 maintains records of transactions that are currently in process and those that have already been completed. The transaction database 140 may store the transaction data, including the product information, for example, or may only store a transaction identifier, along with an indicator of whether the transaction is authorized.

[0044] Moving to a block 360, an authorization code is generated and transmitted to the hand-held device. In one embodiment, this authorization code is necessary for the user to complete the transaction at the point of sale.

[0045] Finally, at a block 370, the user enters the authorization code at the point of sale and the transaction is authorized. In one embodiment, the authorization device at the point of sale accesses the transaction database 140 in order to compare the authorization code entered by the user with the authorization code received from the transaction authorization source.

[0046] FIG. 4 is a flow chart illustrating an exemplary process by which the user of a hand-held device 120 may determine a product and/or service to purchase.

[0047] In block 410, the contact information for the payment resolution module is identified. Contact information may include, for example, a telephone number or IP address. Contact information may be obtained from various sources, such as advertising on billboards, television, radio, or the point of sale. Certain hand-held devices may also have access to one or more databases of vendors that may be contacted to make purchases using the process described herein.

[0048] In block 420, a communication link with the payment resolution module 110 is established. For example, a cellular phone may call a telephone number advertised on a billboard in order to order products from a vendor. As another example, the user of a PDA having internet access may contact a payment resolution module 110 via a wireless connection established with an advertised IP address (or other identifier). In one embodiment the communication link is secured so that interception and decoding of the transmitted information is increasingly difficult. For example, the communication link may be secured by encrypting all transmitted data.

[0049] In block 430 the user of the hand-held device 120 selects one or more products to purchase using voice and/or keyboard commands. In one embodiment, keys on the hand-held device 120 are pressed in response to menu choices communicated from the payment resolution module 110. For example, a user may press a specific key, or key combination, to indicate a particular type, brand, size, color, or quantity of a product. Alternatively, in one embodiment the user may use voice commands to identify one or more products. For example, the user may speak commands indicating a type of product, such as “coffee,” “bagel,” “movie,” or “groceries,” for example. Alternatively, the user may speak commands, such as “1,” “2,” “A,” or “B,” in order to navigate a menu of product choices. In another embodiment, a combination of voice and keypad commands are used in order to identify a product for purchase.

[0050] In yet another embodiment, the user may select a product for purchase by placing the hand-held device in proximity to the product, or a representation of the product, thereby placing the hand-held device in range to receive product information from a communication device, such as an RFID tag or infrared transceiver, near the product. In this embodiment, the user may have a pre-set rule indicating that when the hand-held device is brought in close proximity to a product, the hand-held device automatically transmits a transaction request for the product. In another embodiment, the user may push one or more buttons on the hand-held device, or speak a verbal command into the hand-held device, for example, in order to confirm that a transaction request for a product in close proximity should be transmitted. In this embodiment, the hand-held device may display identifying information regarding the product that is in close proximity.

[0051] FIG. 5 is a flow chart illustrating an exemplary process for determining the identity of the user of the hand-held device 120. As described below, in an advantageous embodiment, the identity of the hand-held device 120 user is advantageously determined based on identification information related to the hand-held device 120.

[0052] In block 510, the payment resolution module receives identifying information from the hand-held device. The identifying information may be any information, in any format, that uniquely identifies the particular hand-held device 120. For example, in one embodiment Caller ID (CID) information is determined by the payment resolution module 110 and used to uniquely identify the hand-held device 120. Alternatively, a device serial number or IP address may be used to uniquely identify each hand-held device 120. It is expressly contemplated that any other type and format of identifying information may also be used according to the methods described herein.

[0053] In block 520, the identifying information is used to query one or more databases in order to determine the user of the hand-held device 120. For example, if CID information for the hand-held device 120 is obtained, a reverse telephone number lookup database may be accessed to determine the owner of the hand-held device 120. In one embodiment, a device identification code associated with the hand-held device 120 is received by the payment resolution module 110 and a database mapping users with device identification codes is accessed to determine the user. Such a mapping database may be maintained in conjunction with the transaction database 140, payment authorization source 130, or any other internal or external database.

[0054] FIG. 6 is a block diagram illustrating an exemplary process of authorizing a transaction request received at the payment resolution module 110. In one embodiment, a transaction request, including a total cost, is generated by the interaction of the hand-held device 120 and the payment resolution module 110. As described below, before a transaction request may be completed, a payment source, such as a credit card company, may be queried to determine if the total cost is available from the user account.

[0055] In a block 610, the payment authorization source 130 determines a total cost for the transaction requested by the payment resolution module 110. This may include calculating costs for multiple quantities of the same product, costs for various products and any applicable tax, handling, and shipping charges. In one embodiment, the total cost is determined by the payment resolution module 110 and transmitted to the payment authorization source 130.

[0056] Moving to a block 620, a payment source is determined. Exemplary payment sources include various bank accounts, credit card accounts, and wireless service provider accounts. In one embodiment, the user has only one account and, thus, this account is the determined payment source. In another embodiment, the user has several possible payment sources and the payment sources are prioritized. For example, one user may prioritize payment sources so that a credit card account is used for for large transactions, while a bank account is used as the payment source for other transactions. In another embodiment, a particular payment source may be selected first for a user while a second payment source is only selected when the first payment source does not authorize the transaction. In yet another embodiment, payment sources may be selected based upon the type of product or service that is being requested. Those of skill in the art will recognize that the payment source may be any source that agrees to make a payment on behalf of the user and the payment source may be selected based on any criteria.

[0057] Continuing to a block 630, transaction information is communicated to the selected payment source. In one embodiment, user account information and the total transaction price are transmitted to the payment source. In another embodiment, additional information, such as a location of the user, information regarding the point of sale, or information about the requested products, for example, may also be transmitted to the payment source.

[0058] At a block 640, the payment authorization source 130 receives information from the selected payment source indicating whether the requested transaction is authorized. The response from the payment source may be simply a yes or no response, represented by any number of data indicators, or a response including additional details for completing the transaction. In one embodiment, the payment source indicates that further information is necessary in order to authorize payment of the requested transaction amount. For example, the payment source may request the zip code, mailing address, or other information regarding the user.

[0059] FIG. 7 is a flow chart illustrating an exemplary process of updating a transaction database. In one embodiment, the method described in FIG. 7 is performed by a transaction database 140. However, any other module may perform these features.

[0060] In a decision block 710, the transaction database 140 determines whether new transaction data has been received. As described above, transaction data may be transmitted from the payment resolution module 110 for storage on the transaction database 140. In one embodiment, transaction data may also be received directly from the hand-held device 120, the payment authorization source, the payment source, or the confirmation device 150, for example. The transaction data may include information regarding a user, such as address; current location; credit history; maximum transaction allowance; information regarding the requested transaction, such as a type, model, brand, size, color, or quantity of a product; and/or information regarding the user's authorization to complete the transaction, such as an authorization code.

[0061] If it is determined in block 710 that new transaction data has been received, the method moves to a block 720 where the received transaction data is stored in the transaction database 140. The transaction database 140 may use any available organization method and file system structure for storage of data.

[0062] From block 720, or from block 710 if it was determined that new transaction data had not been received, the method continues to a decision block 730, wherein the transaction database determines if an authorization request has been requested from a point of sale vendor. If an authorization code has not been requested by a vendor, the methods returns to block 710 and repeats the process. If an authorization code has been requested by a vendor, the method continues to a block 740.

[0063] In block 740, the authorization code is transmitted to the point of sale vendor using encryption and/or a secure communication protocol. In another embodiment, the authorization code is not transmitted to the point of sale, but instead, the authorization code entered by the user is transmitted to the transaction database. In this embodiment, the transaction database may perform an authorization procedure that is similar to that described in FIG. 8.

[0064] FIG. 8 is a flow chart illustrating an exemplary process of verifying an authorization code. In one embodiment, the authorization code is verified by the confirmation device 150.

[0065] In a block 810, the user is uniquely identified to the confirmation device. In one embodiment, the user is identified by entering the authorization code received from the payment resolution module 110 into the confirmation device 150. In one embodiment, the user types the authorization code on a keyboard connected to the confirmation device 150. In another embodiment, the hand-held device 120 communicates the authorization code to the confirmation device 150 via a wired or wireless connection, for example.

[0066] Moving to a block 820, the confirmation device 150 accesses the transaction database 140. In one embodiment, the transaction database 140 queries a list of authorization codes in search of an authorization code that matches the code entered by the user. In another embodiment, the transaction database receives information from the confirmation device regarding a particular transaction. The transaction database 140 then locates the particular transaction and transmits an authorization code corresponding to that transaction to the confirmation device.

[0067] In a block 830, the authorization code from the transaction database 140 is compared to the authorization code entered by the user at the confirmation device 150.

[0068] Moving to a block 840, the result of the comparison performed in block 830 is analyzed to determine if the transaction is authorized. In one embodiment, if the authorization codes entered by the user and stored on the transaction database 140 are the same, then the transaction is authorized and the process continues to a block 860. Otherwise, if the authorization codes entered by the user and stored on the transaction database 140 are not the same, then the transaction is not authorized and the process continues to a block 850.

[0069] Continuing to block 850, the vendor is notified that the requested transaction is not authorized. In one embodiment, the user at the confirmation device 150 is first notified and given another opportunity to enter the authorization code. The vendor may be notified via the confirmation device 150 and/or via another computer that is controlled by the vendor. For example, a computer that is operated by a manager or worker at the point of sale may receive information indicating that an invalid authorization code has been entered at the confirmation device 150. After providing notice of the invalid authorization code, the method returns to block 810 where the user, or another user, may enter an authorization code.

[0070] If the transaction has been determined to be authorized, at block 860 the vendor is notified that the transaction is authorized and payment has been secured. In one embodiment, a receipt is printed at the point of sale, such as by a printing device connected to the confirmation device 150. The receipt may be presented for pickup of the product or service. In another embodiment, a computer that is operated by a manager or worker at the point of sale may receive information indicating that a transaction has been authorized. In one embodiment, the transaction data is received and viewed by the vendor prior to the user entering the authorization code, so that the product may be ready for pickup by the user immediately after authorization. In another embodiment, after receiving notice that a transaction is authorized, the vendor prepares the product or service for the user.

[0071] FIG. 9 is a flow chart illustrating an exemplary process of securely transferring money from an account associated with a paying device to an account associated with a recipient device. As illustrated in FIG. 9, a payment resolution module 910 is in bi-directional communication with both a paying device 920 and a payment authorization source 930. In an advantageous embodiment, the paying device 920 is a hand-held device, such as a wireless computer or PDA, and the payment resolution module 910 and the payment authorization source each comprise one or more computing devices executing specialized software. The payment resolution module 910 also is in communication with a payment transfer module 940, which transmits an authorized payment to a recipient account 950 at a financial institution, such as a bank, for example, in accordance with a payment request sent by the paying device. In one embodiment, the recipient account 950 is associated with a recipient device 960, such as a wireless computer or PDA, so that money may be transferred to the recipient account 950 by identifying the associated recipient device 960. In one embodiment, after sending the money to the recipient account 950, the payment transfer module 940 sends a confirmation message to the associated paying device 960 indicating that the payment has been completed. However, because the secure transfer of money to the recipient account 950 may occur without the recipient device 960, the recipient device 960 is not a necessary element of the system. In one embodiment, payments can be made to/from a credit card, checking account, or any other payment source. FIG. 9 also includes numbered steps, signified by numbers inside of circles, which illustrate a preferred order of data flow in completing an authenticated transaction.

[0072] In operation, the paying device 920 initially contacts the payment resolution module 910 to initiate a funds transfer to the recipient account (step 1 of FIG. 9). The contact between the paying device 920 and the payment resolution module 910 can be accomplished using existing cellular telephone infrastructure, such as dialing a telephone number which corresponds to the payment resolution module 910. The recipient account may be identified by entering identification information for a recipient device 960, such as a device name, associated with the recipient account. For example, a product vendor may have a financial account set up and associated with a particular recipient device 960 identified as “CELLCITYSD.” The paying device may identify the recipient account 950 of this vendor by entering the identifier “CELLCITYSD.” In another embodiment, the recipient device 960 may be automatically detected by the paying device 920, such as through the transmission of RFID or infrared signals sent from the recipient device 960.

[0073] In an advantageous embodiment, the payment resolution module 910 identifies the user of the paying device 920 by use of information that is unique to the paying device 920, such as caller ID information or a device identifier specific to the paying device 920. This information may be stored locally at the payment resolution module 910, or may be accessed on a remote computer system. For example, when a payment request is received by the payment resolution module 910, information identifying the paying device 920 may be sent to a user resolution module (not shown). Such a module may list a plurality of device identifiers, each associated with a user. Thus, a user resolution module may determine a user based upon a device identifier. Information regarding the determined user may then be returned to the payment resolution module 910. Accordingly, in one embodiment the payment resolution module 910 acquires an identity of a specific user along with a payment requested by the specific user. Once a user is identified, the payment resolution module 910 may then identify a source account associated with the user. Information regarding the payment source may be stored at the payment resolution module or externally, such as at the user resolution module. In one embodiment, the user resolution module returns both a user identification and a corresponding payment source. In another embodiment, user resolution module returns only a payment source and a user identification is not specifically resolved.

[0074] In step 2 of FIG. 9, the payment resolution module 910 transmits information identifying the user and/or the payment source, along with the requested payment amount to the payment authorization source 930. The payment authorization source 930 may communicate with any entity, such as a credit institution or a bank, that has the ability to authorize payments from the identified user. In one embodiment, the payment authorization source 930 comprises a credit card company or communicates with a credit card company. In another embodiment, the payment authorization source 930 comprises a provider of wireless service, or communication with a wireless service provider. In another embodiment, the payment authorization source 930 provides an interface to various banks, credit card companies, wireless service providers, or other payment authorization sources 930.

[0075] In step 3 of FIG. 9, the payment authorization source 930 returns to the payment resolution module 910 either an authorization or denial to charge the amount requested from the requested payment source. In one embodiment, the payment authorization source 930 may provide further information to the payment resolution module 910, such as a status of the user's account or other information that may be helpful in determining why a request was denied (or authorized). If the payment request has been denied, the payment resolution module does not move forward to step 4, but instead notifies the paying device 920 of the denial. In one embodiment, the payment resolution module 910 may be configured to notify other devices, such as the recipient device 960 that a payment has been requested, but denied.

[0076] In step 4 of FIG. 9, the payment resolution module 910 communicates information regarding the requested payment and the response received from the payment authorization source 930 to the payment transfer module 940. The payment transfer module 940 receives the payment authorization and, if the payment is authorized, the payment transfer module 940 transfers a payment to the identified recipient account 950 (step 5 of FIG. 9). In one embodiment, the payment transfer module 940 identifies the recipient account 950 using information that was provided from the paying device 920 regarding the recipient device 960. For example, the payment transfer module 940 may receive the recipient device identifier “CELLCITYSD” and may retrieve the corresponding recipient account 950 from a database storing recipient account information. In this embodiment, the recipient device 960 is registered with a central service that provides account information to authorized users in response to receiving a device identifier. In another embodiment, the recipient device is a cell phone and the phone number is entered as a portion of the payment request by the paying device 920.

[0077] In another embodiment, the paying device 920 may directly enter recipient account information, such as a bank or credit card account number, so that the payment transfer module 940 is not required to look up the user account information for the recipient account 950. The information relating the recipient device 960 to the recipient account 950 may be stored locally at the payment transfer module 940, or may be accessed on a remote computer, such as the payment resolution module 910. In another embodiment, another device, such as the payment resolution module 910, may provide the information regarding the recipient account 950 directly to the payment transfer module 940.

[0078] In step 5 of FIG. 9, the requested amount of money is transferred to the identified recipient account 950 and deducted from the payment source corresponding with the paying device 920.

[0079] In step 6 of FIG. 9, a confirmation of payment to the recipient account 950 is transmitted to the recipient device 960. In this way, the recipient of the payment may ensure that the payment was actually transferred to the recipient account 950. In one embodiment, the confirmation does not include any personal information regarding the paying device 920 or the user of the paying device 920. Thus, the user of the paying device 920 may remain anonymous to the recipient. For example, a user may wish to buy a gift from a mall kiosk without providing personal information to the kiosk. The user may enter an identification code assigned to the mall kiosk, along with a payment amount, into the paying device 920. This payment request, after being authorized by the payment authorization source 930, may be transferred to the recipient account 950 associated with the identification code without transferring any personal information regarding the user of the paying device 920. Similarly, the confirmation sent to the recipient device 960 may simply indicate that a particular amount of money has been securely received in the recipient account 950, without including personal information regarding the user of the paying device 920.

[0080] In one embodiment, the payment resolution module 910, for example, maintains an audit trail of the payment requests and authorizations that are received at the payment resolution module 910. In this way, transactions may be traced and reviewed in the future.

[0081] In one embodiment, the paying device 920 may be owned by an individual and the recipient device 960 may be owned by an individual. In another embodiment, the paying device 920 is owned by an individual and the recipient device 960 is owned by a business. In another embodiment, the paying device 920 is owned by a business and the recipient device 960 is owned by an individual. Also, both the paying device 920 and the recipient device 960 may be owned by businesses. In one embodiment, the above-described method of transferring money may be used to provide payments for auctions, such as online auctions, from a buyer to a seller. In another embodiment, money may be transferred from a user's paying device 920, such as a mobile phone, to a vendor at locations such as street fairs, garage sales, and on airlines. In one embodiment, a user may pay for a taxi ride using the paying device 920, such as a mobile phone, and the payment may be quickly confirmed on the recipient device 960, such as a mobile computer mounted in the taxi cab. In this way, the cab fare may be securely transferred directly to the appropriate account while preventing personal information of either the cab driver or the user from being disseminated. In addition to the examples provided above, the systems and methods described herein may be used in conjunction with any funds transfer between two entities.

[0082] The foregoing description details certain embodiments of the invention. It will be appreciated, however, that no matter how detailed the foregoing appears in text, the invention can be practiced in many ways. As is also stated above, it should be noted that the use of particular terminology when describing certain features or aspects of the invention should not be taken to imply that the terminology is being re-defined herein to be restricted to including any specific characteristics of the features or aspects of the invention with which that terminology is associated. The scope of the invention should therefore be construed in accordance with the appended claims and any equivalents thereof.