System and Method for Merchant Invoked Electronic Commerce

This invention relates generally to a method and system where certain information pertaining to a consumer is stored on a server and is provided to a third party at the request of the consumer. More particularly, the present invention relates to a method and system where certain consumer information is stored on a server and is provided to a merchant thereby allowing the consumer to use an electronic payment system to purchase a product or service over a network in an easy and safe manner.

With the emergence of the Internet, consumers and merchants are using the Internet to engage in electronic commerce. To purchase products over the Internet, consumers typically prefer to use electronic payment services. Such services offer a variety of features, including security, privacy, anonymity, and access to transaction histories. The basic model for such services requires a communication link between a consumer's computer and a merchant's computer, and a link between the merchant's computer and a payment server. To use such a payment service, consumers are required to install large amounts of software (commonly called "wallets") onto their computer for the purpose of storing an electronic representation of money or for identifying sources of payments. An example of electronic payment services include such services as SET Specification, HP, CyberCash, IBM, OTP, etc).

If a consumer installs the software for a wallet onto the consumer's computer, the consumer typically has to update the wallet software to correct bugs, to add features, or to improve service performance. Further, the wallet software is accessible only on the computer on which the wallet software is installed. As a result, the consumer must install a copy of the wallet software onto each computer from which the consumer desires to access the payment service.

Once the wallet from a payment service is installed, the consumer may be limited as to where the consumer can shop because of the proprietary nature of the electronic payment service business. Typically a consumer can only purchase a product or service from a merchant who accepts payments from the same payment service. As a result, merchants may opt to use a plethora of payment services thereby raising costs and requiring merchants to manage a variety of software programs.

Present payment services require consumers to go through a large number of steps to complete a transaction. Research has shown that the more steps a consumer is required to take to complete a transaction, the more likely that the consumer will terminate the purchase process prior to completing the purchase. Experience has also shown that, as impressive as wallets may be from a theoretical perspective, consumers don't like them and don't use them. As a consequence, transactions are performed over the Internet in non-secure environments or in inefficient manners, or both.

In order to avoid such problems, some inventions have created new types of systems. One such system requires consumers to use a payment server which sends an access message to a merchant thereby causing the desired product to be sent to the consumer. The access messages include such information as a product identifier and a message authenticator. The message identifier is necessary to identify which product is to be sent and the message authenticator is necessary to ensure that the access message is legitimate. Once the payment server authorizes the transaction, an access message is sent to the merchant. However, these type of systems go against the current mode of operation where merchants determine the authorization of a transaction. Merchants typically want to control the authorization of a transaction in the same manner as they are accustomed to. Presently, if a consumer purchases an item at a store, the merchant controls the authorization of the transaction.

Therefore, a need exists for a system that allows a consumer to send payment information to a merchant's computer over the Internet in a manner that offers security, allows access from any computer that has access to the Internet, delivers payment information to a merchant's computer regardless of the payment system that the merchant uses to process transactions, and allows system upgrades without dependency on the consumers.

It is therefore an object of the present invention to reduce the number of steps a consumer is required to perform in order to purchase a product over any network.

A further object of the present invention is to reduce the number of steps a consumer is required to perform in order to purchase a product over the Internet.

A further object of the present invention is to eliminate the need for consumers to leave a merchant's site to acquire an electronic form of payment.

A further object of the present invention is to eliminate wallet software which is permanently stored on the consumer's computers.

A further object of the present invention is to create a consumer information server for storing wallet software, that can be accessed easily and transparently by a consumer.

A further object of the present invention is to allow the system administrator of the consumer information server to upgrade the software on such server at any time.

A further object of the present invention is to allow flexibility in providing new or modified services to the consumers via upgrades to software stored on the consumer information server.

A further object of the present invention is to reduce the number of payment parameters consumers are required to fill in when purchasing products over a network.

A further object of the present invention is to allow a consumer to conduct transactions using data stored on the consumer information server from any computer connected to the network on which the consumer information server resides.

A further object of the present invention is to allow consumer information to be provided to merchants using payment systems from various service providers.

A further object of the present invention is to use the architecture of the consumer information server to aid the consumer in distributing all manner of information, not just purchase/money information, to a variety of recipients when those recipients are to receive essentially the same information from one recipient to the next.

A further object of the present invention is to provide a mechanism for direct marketing to consumer wallet holders immediately before, during, or after completion of a transaction using a wallet.

The present invention is a system for presenting a consumer's purchasing information to a merchant's computer to allow a sale of goods or services to be consummated. The system comprises a computer associated with a consumer (the "consumer's computer"), a computer associated with a merchant (the "merchant's computer") and a server (the "consumer information server" or "CIS") on which the necessary and desirable information about the consumer is stored. The consumer's computer, the merchant's computer, and the CIS are connected to a network, such as the Internet, and communicate using communication protocols. The consumer's computer operates Web browser software (the "consumer's browser"). The merchant's computer operates as a web server, provides transaction processing, and performs other functions. The merchant's computer may be a single device, or may, at the merchant's discretion comprise a number devices which may or may not be co-located. The merchant's computer also operates software ("client software") that communicates with the CIS. The CIS operates CIS software which provides access to information stored in various databases, logs, and/or datastructures.

The present invention allows consumers to purchase products over a network and allows merchants to receive payment information relating to that purchase. During the shopping process, a consumer browses a merchant's Web site. The merchant's Web site includes goods and/or services (herein, "item") for sale. The merchant's Web site also operates client software. When the consumer requests a merchant's offer, the client software sends a browser readable file and the merchant's offer to the consumer's browser on the consumer's computer. The merchant's offer comprises in part a transaction number which is not representative of the product code or description. The browser readable file includes an address to the merchant's Web page and instructions that instruct the consumer's browser to communicate with the CIS software. The merchant's offer passes through the consumer's computer to the CIS software.

The CIS software returns a message to the consumer's browser and instructs the consumer's browser to display a graphic within an area reserved for the wallet within the merchant's Web page. The content of this graphic depends on whether or not the consumer is known to the CIS software.

If the consumer is known to the CIS software, the CIS software takes information contained in the merchant's offer, formats the information to allow the consumer's browser to display the merchant's offer, and sends the merchant's offer to the consumer's computer where the merchant's offer is displayed by the consumer's browser within the area reserved for the wallet within the merchant's Web page. The consumer is prompted to decide whether or not to purchase the item. Typically, this communication occurs by the consumer clicking on an object resulting in a message being communicated to the CIS.

If the consumer elects to purchase the item, the CIS software forwards information to the merchant's computer. The information includes information from the merchant's offer and the consumer's personal information (e.g., credit card number, address, shipping address) which is stored on the CIS. The merchant's computer then uses the information to complete the transaction.

If the consumer is unknown to the CIS software, the CIS software sends a form to the consumer's computer which is displayed within the area reserved for the wallet within the merchant's Web page. The form prompts the consumer to provide the purchasing information to complete the transaction. Once the consumer provides sufficient information to complete the transaction, the CIS software prompts the consumer to purchase the item. If the consumer elects to purchase the item, then the consumer is prompted to elect to have the information retained on the CIS for future use (the process herein referred to as "registration"). If the consumer answers "no", then the information is stored in a temporary data structure. Information stored in the temporary data structure is retained for a set amount of time and is not available for reuse by the consumer. If the consumer answers "yes", then the information pertaining to the consumer is stored in a data structure intended for the retention and future use by the consumer.

If the consumer elects to register with the CIS software, during the registration process, the consumer's browser is sent a browser identifier. In the preferred embodiment, the browser identifier is a cookie. The browser identifier contains data which is crypto graphically protected to enhance security. The browser identifier allows the CIS software to identify the consumer's browser and permits a customer to authenticate himself or herself, thereby permitting the CIS software to use the consumer's stored information in future transactions.

The system also allows consumers who are registered on a different browser to authorize the CIS software to use the consumer's stored information. This situation occurs when the CIS software cannot identify the browser identifier because there is no browser identifier in the consumer's browser or the browser identifier cannot be used to identify the particular consumer using the consumer's browser.

Since the system establishes communication links between the merchant's computer and the CIS, the system can be optimized in several respects. For example, the price of an item may be affected by the location to which the item is to be shipped, the method of shipping, and by tax obligations. The CIS software communicates information pertaining to the consumer to the merchant's computer permitting the merchant's computer to determine a "final" price based on the consumer's information, i.e., shipping address and/or preferences.

Another example of optimization is the ability of the CIS software to present a merchant's brand or other "brand" to the consumer's browser. The CIS software can also associate a consumer with an identification code that can be presented to the merchant's computer, thus allowing the merchant to "recognize" a consumer and provide customer-specific messages, displays, and offers. The CIS software can tailor its communication with the consumer's computer in accordance with a profile created by the CIS software. The profile is based upon preferences chosen by the consumer or created by the CIS software based on the consumer's behavior, from preferences chosen by the merchant, by a branding party, or the like.

With respect to consumers, the system is optimized to provide all of the purchasing information to the consumer thereby allowing the consumer to verify the information and make a purchase decision without further purchasing information input from the consumer. The system can also establish a dialogue between the consumer's computer and the CIS to permit the consumer to select from options such as which credit card to use, the shipping address, and the shipping means.

FIG. 1 illustrates the elements of the present invention.

FIG. 2A illustrates the process of purchasing an item over a network.

FIG. 2B illustrates the process of purchasing an item over a network (continued).

FIG. 2C illustrates the process of purchasing an item over a network (continued).

FIG. 2D illustrates the process of purchasing an item over a network (continued).

For the purpose of this application, the term software is deemed to include instructions.

Referring to FIG. 1, the elements of the present invention are illustrated. The present invention allows consumer 100 to purchase a product or service (hereinafter an "item") over network 160 and allows merchant 104 to receive payment information relating to the transaction.

To purchase an item, consumer 100 uses consumer computer 102. Consumer computer 102 operates consumer's Web browser (the "consumer's browser") 104. Consumer's browser 104 allows consumer 100 to download and display Web pages.

To receive payment information relating to the purchase, merchant 120 uses merchant computer 122. Merchant computer 122 operates Web server software 124 and client software 126. Web server software 124 displays a merchant's Web pages. Client software 126 allows merchant 104 to communicate with the Consumer Information Server (the "CIS") 140.

In the preferred embodiment, CIS 140 comprises CIS software 142 which gathers and stores the purchasing information to complete a purchasing transaction over common network 160, temporary data structure 144 which stores consumer information for a limited amount of time and cannot be used in future transactions, consumer data structure 146 which stores consumer information which can be used in future transactions, merchant data structure 148 which stores information pertaining to different merchants, consumer transaction log 150 which stores information pertaining to the transactions for registered consumers, and merchant transaction log 152 which stores information pertaining to transactions for registered and non-registered consumers.

Consumer computer 102, merchant computer 122, and CIS 140 are connected to common network 160. The present invention can operate over various types of common networks both wired and wireless. The present invention can operate over the Internet, intranet, LANS, and WANS however this list should not be construed as a limitation. In the preferred embodiment, the common network is the Internet.

CIS software 142 gathers and stores the purchasing information to complete a purchasing transaction over common network 160. CIS software 142 gathers the purchasing information directly from consumer 100, from consumer data structure 146 or from both. If consumer 100 has not previously registered with CIS software 142, consumer 100 is treated as a non-registered consumer. For non-registered consumers, CIS software 142 gathers the purchasing information by prompting consumer 100 for the information. If consumer 100 is a registered consumer, i.e., a consumer who previously registered with CIS software 142, then CIS software 142 gathers the purchasing information from consumer data structure 146. If additional purchasing information is needed, CIS software 142 prompts consumer 100 for the information.

Temporary data structure 144 stores label-value pairs relating to a particular interaction between consumer 100 and merchant 120. If consumer 100 is not known to CIS software 142 (discussed below), consumer 100 is prompted for purchasing information to complete the transaction. The purchasing information can include the customer's name, billing address, shipping address, and credit card number, however this information should not be construed as a limitation. In the preferred embodiment, the purchasing information is stored in temporary data structure 144 which is located at CIS 140. In alternative embodiments, the purchasing information can be stored on a dedicated server or a shared server.

If consumer 100 declines to have purchasing information stored at CIS 140, the purchasing information remains in temporary data structure 144 for a set period of time. The purchasing information in temporary data structure 144 is not available to consumer 100 for future transactions. If consumer 100 elects to have purchasing information stored at CIS 140, the purchasing information in temporary data structure 144 will be saved for subsequent use in consumer data structure 146.

Consumer data structure 146 stores label-value pairs relating to consumers, including consumer 100, that have completed the registration process with the operator of CIS 140. The label-value pairs in consumer data structure 146 represent information that is necessary, and may include information that is useful to complete a transaction. The purchasing information can include the customer's name, billing address, shipping address, and credit card number, however this information should not be construed as a limitation. The useful information can also include email, telephone numbers, facsimile numbers, and user preference data (regarding shipping address, shipping method, and related data), however this information should not be construed as a limitation.

Merchant data structure 148 stores label-value pairs relating to merchants, including merchant 120, that have completed the registration process with the operator of CIS 140. The label-value pairs in merchant data structure 148 represent information that is necessary to identify merchant 120 and merchant computer 122. This information includes contact information, merchant identification number, network location(s) for the merchant computer 122, payment card type, accepted currencies, and payment methods (e.g., electronic check, micropayments), however this information should not be construed as a limitation.

Consumer transaction log 150 stores label-value pairs relating to transactions performed by registered consumers. Merchant transaction log 152 stores label-value pairs relating to transactions performed by registered and non-registered consumers, including consumer 100. The operator of CIS software 142 can allow consumers and merchants access to the information contained in their respective data structures as deemed necessary. For instance, consumer 100 can be given a summary of the consumer's transactions over a period of time. Merchant 120 can be given a summary of the merchant's transactions over a period of time.

Referring to FIGS. 2A, the process of purchasing an item over a network is illustrated. The following process is the preferred embodiment of the present invention, in alternate embodiments, similar processes can occur in different orders. In the preferred embodiment, the process starts with a consumer requesting a merchant's offer 200 from a merchant. In response to the consumer's request, the merchant's computer responds by sending a browser readable file and the merchant's offer to the consumer's computer 202. The consumer's browser processes the browser readable file and sends the merchant's offer and a message to the CIS 204.

The merchant's offer includes the following information, however this information should not be considered a limitation: merchant identifier, price of the item, a form of digital signature of the merchant, a final price indicator, and a transaction number. The merchant identifier identifies the merchant who is offering the item for sale. The price of the item is cost to purchase the item. A digital signature of the merchant is used to ensure the validity of the offer. The final price indicator is used to indicate whether the final cost for the item is affected by the consumer's shipping address and/or shipping preference. The transaction number is used for tracking purposes. The transaction number does not contain any product identifying information. The transaction number acts as an identifier for identifying a transaction.

The message sent from the consumer's browser to the CIS indicates whether the browser contains a browser identifier. In the preferred embodiment, the browser identifier is a cookie. A browser identifier identifies the consumer browser on a specific consumer computer. The CIS software receives and processes the message to determine if the consumer's browser contains an identifier which identifies a consumer that matches a data entry in a file in the consumer data structure of the CIS 206. The CIS software determines whether a single user or multiple users have used the consumer's browser 208 by checking the consumer data structure. If the CIS software identifies more than one user, the CIS software will select a user based on a selection criteria generated by the operator of the CIS. If the user selected by the CIS software is not the current user and the current user objects, then the consumer is asked for identification 210. If the current user does not object, as described below, the current user cannot complete a transaction unless the current user enters the proper passphrase which belongs to the selected user. This process requires the CIS software to send a message to the consumer's computer prompting the consumer to provide information to identify the consumer. In the preferred embodiment, the CIS software prompts the consumer for the consumer's identification number, email address, and a passphrase. The consumer's identification number, email address, and passphrase are used to authenticate the consumer. These entries were provided by the consumer during the registration process which is discussed below. In alternate embodiments, the consumer can be prompted for different information to identify the consumer.

The consumer's response is sent back to the CIS where the CIS software then determines if the consumer is known to the CIS software 212. A known or registered consumer is a consumer who has previously registered with the CIS software and whose information matches information supplied by the consumer during a prior registration. If the CIS software determines that the information provided by the consumer is insufficient to identify the consumer, then the CIS software prompts the consumer for the same information again. The operator of the CIS can set the number of iterations that the consumer is prompted for the consumer's identity. If the consumer's response matches the information the consumer supplied during registration, then the CIS software accesses and gathers the consumer's information which is stored in the consumer data structure (CDS) 214.

In an alternative embodiment, the system can include a plurality of CISs. In such a system, the consumer would be registered on one of the CISs. If the CIS software determines that the information provided by the consumer does not match the information on the CIS the consumer is connected to, then the CIS software will communicate with the other CISs to identify the consumer and obtain the consumer's information.

If the consumer's browser does not contain a browser identifier or if the information the consumer provided does not properly identify the consumer, i.e., the consumer is not found in a file in the consumer data structure of the CIS, the CIS software prompts the consumer for the purchasing information 216. This is accomplished by the CIS software sending a form to the consumer's browser. In an alternative embodiment, the consumer is prompted for the purchasing information using a plurality of forms. The form or forms prompts the consumer to provide the purchasing information to complete the transaction. The purchasing information includes the consumer's name, address, shipping address, and credit card number, however this list should not be construed as a limitation. In the preferred embodiment, the consumer has the option of indicating that the consumer is a registered consumer.

The consumer's response or responses are sent to the CIS 218. The CIS software then determines if the consumer claims to be a registered consumer 220. If the consumer claims to be a registered consumer, then the CIS software prompts the consumer for proof 222. In the preferred embodiment, this is accomplished by the CIS software prompting the consumer for the consumer's identification number, email address, and a passphrase. The consumer's identification number, email address, and passphrase are used to authenticate the consumer. These entries were provided by the consumer during the registration process which is discussed below. In alternate embodiments, the consumer can be prompted for different information to identify the consumer.

The consumer's response for proof is sent back to the CIS where the CIS software then determines if the consumer is a registered consumer 224. Again, a registered consumer is a consumer who has previously registered with the CIS software and whose information supplied by the consumer matches information supplied by the consumer during a prior registration.

If the CIS software determines that the information provided by the consumer matches the information the consumer supplied during registration, then the CIS software accesses and gathers the consumer's information which is stored in the consumer data structure (CDS) 214.

Referring to FIG. 2B, if the CIS software determines that the information provided by the consumer is insufficient to identify the consumer, then the CIS software prompts the consumer for the purchasing information to complete the transaction 216.

If the consumer does not claim to be registered then the CIS software acquires the consumer's data from the forms 226. In addition, the consumer's response can be sent to the merchant to determine whether the item can be sold to that consumer. For instance, a consumer in one state may not be able to purchase a firearm if the law governing the consumer or merchant does not permit such a transaction. In yet another embodiment, the consumer response to one question can lead to another question which requires another form. For instance, if the consumer requests overnight shipping, the CIS software can prompt the consumer to select the overnight shipping service.

The CIS software stores the data in a temporary data structure 228. The data is evaluated to determine if the consumer elected to register with the CIS 230. If the consumer elects to become a registered consumer, then the CIS software sets the flag 232. If the consumer does not elect to become a registered consumer then the flag is not set. Registration allows the CIS software to access the consumer's information which was previously stored in the consumer data structure. The information acquired from the forms is evaluated to determine if the information from the consumer is sufficient to complete the purchase transaction 234. This step includes the CIS software accessing the merchant data structure using the merchant identifier to ensure that the consumer's purchasing information is in proper order, i.e., to check that the consumer's credit card accepted by the merchant. If the information is not sufficient, the consumer is prompted for the information again 216. The operator of the CIS can set the number of iterations that the consumer is prompted for the information.

Referring to FIG. 2C, once the CIS software determines that the consumer's information is sufficient to complete the purchase transaction, the CIS software reads the final price indicator in the merchant's offer to determine if the price needs to be adjusted due to the consumer's shipping address and/or shipping preference 236. If the price is affected by the consumer's shipping address and/or shipping preference, then the CIS software communicates the required information to the merchant to calculate a new price based on the consumer's shipping address 238. In the preferred embodiment, the CIS software only sends the city, state, country, and mail code information to the merchant's computer. This information is limited to permit the revised price calculation without having to disclose personal information relating to the consumer.

In alternate embodiments, the consumer's address can be the consumer's email address or a facsimile number.

Once the merchant responds with the revised price or if the price was not affected, the CIS software presents the merchant's offer to the consumer 240. The merchant's offer is displayed to the consumer in the area reserved for the wallet. The CIS software then determines if the consumer needs to enter a passphrase. If the consumer is a registered consumer who has not gone through the authentication process yet, then the consumer is required to enter the proper passphrase for the consumer identified with the browser identifier (cookie) 242. The offer is then augmented with a prompt for the user to enter the consumer's passphrase 244. The CIS software evaluates the entered passphrase against data held in the consumer data structure 246 to determine if the consumer is known (registered) by the CIS software. If the passphrase does not match, then the consumer is prompted for the correct passphrase 244. The operator of the CIS can set the number of iterations that the consumer is prompted for a correct passphrase to avoid multiple fraudulent attempts to access information.

Once the consumer enters a correct passphrase or if there was no browser identifier for the consumer, the consumer is presented with a buy decision 248. The consumer has several options available at this step: the consumer can elect to buy the item, change the consumer's information and buy the item, or cancel the transaction. If the consumer elects to change the consumer's information, the consumer must still decide to either buy the item or cancel the transaction after changing the information. If the consumer declines to purchase the item, then the transaction is canceled, then the information held in the temporary data structure is deleted, the dialogue ends and the transaction is terminated 250.

The consumer also has the option of changing the consumer's information. The consumer may wish to change such information for such reasons as the consumer does not agree with the selection by the CIS software or the information contains an error. For instance, if the consumer wishes to change the shipping address, the consumer can enter a new shipping address. In some instances, the consumer can have a plurality of possible entries into the same information block with a preferred entry. In such a situation, the CIS software chooses the preferred information to enter into the information block. The CIS software chooses the information via any selection process known in the art, such as most popular, last used, first used, etc. However, the CIS software cannot enter information into an information block if the merchant will not allow such an entry. For instance, a merchant may only accept the ACME credit card and the consumer has not previously used an ACME credit card to purchase an item using the present invention. In such a situation the CIS software prompts the consumer to provide an acceptable form of payment. Information options are available to the consumer in the form of directory of addresses, shippers, shipping methods, credit cards, and other information options.

Referring to FIG. 2D, if the consumer elects to purchase the item, then the information regarding the transaction is delivered to the merchant's computer, information is written to the merchant transaction log, and a message confirming the transaction is sent to the consumer's computer 252. The CIS software then determines if the consumer is registered 254. If the consumer is a registered consumer, then the information regarding the transaction is written to the consumer transaction log 256.

If the consumer is non-registered consumer, i.e, not known to the CIS software, then a browser identifier (i.e., a cookie) is sent to consumer's computer 258 and CIS software determines if the register flag was set 260. If the register flag is set, then the information stored in the temporary data structure pertaining to the consumer is transferred to the consumer data structure for subsequent uses, the consumer is prompted for a passphrase, and the CIS software saves the transaction data to the consumer transaction log 262. If the register flag is not set, the transaction data remains in the temporary data structure until it is discarded but is unavailable for future use. The transaction process ends 264.

In addition to registering during a purchasing transaction, a consumer can also register by accessing the consumer information server and entering the purchasing information to become a registered consumer in advance of any purchase.

Although the above description is directed at purchasing an item over the Internet, the same concept of distribution of information can be applied to other areas. In an alternative embodiment, the consumer can be an accessee, the merchant can be an accessor, the consumer information server can be an information server (IS), the consumer data structure can be an accessee data structure, the merchant data structure can be an accessor data structure, the consumer transaction log can be an accessee transaction log, and the merchant transaction log can be an accessor transaction log. The accessee can authorize the software on the IS to provide information to an accessor. For instance, the accessee can be a prospective applicant applying for admission into an educational institution such as a college or a university. In this case, the prospective applicant stores an entire range of information on the IS where the information is relevant to the initial screening for college applications. For example, SAT scores, addresses for references, personal information, responses to questions of desired major or subject area would be information stored on the IS. This information could then be supplied to colleges whose Web sites could access the IS for the desired information.

In yet another embodiment, the accessee can be a potential mortgage borrower, the accessor can be a mortgage lender, and the information stored on the IS can be the accessee's financial information. The accessee can authorize the software on the IS to provide the accessor the information stored on the IS to allow the accessee to apply for a mortgage or to get a quote. Again, the accessee would provide a wide range of data necessary for the mortgage application process. The information can include the accessee's credit reports, bank statements, employment record, and other credit related information.

In all of these different type of embodiments, the communications between the different parties can be encrypted in any manner known in the art. In addition, some of the communications can be accomplished in different manners. For example, in an alternate embodiment of the preferred embodiment, communications between the CIS and the merchant computer can occur using a separate communication link. The communication link can be a direct link between the merchant and the CIS. Using this separate link can ensure against unauthorized transactions.

Although the present invention has been described in detail for purpose of illustration, it is understood that such detail is solely for that purpose, and variations can be made therein by those skilled in the art without departing from the scope of the invention. The preceding descriptions of the operations of the present invention are merely illustrative. In various embodiments of the disclosed inventions operational steps may be added, eliminated, performed in parallel or performed in a differing order. The apparatus and process of the present invention is defined by the following claims.