Cross-media notifications for e-commerce

[0002] The present invention relates generally to a system and method for limiting access to confidential information during an e-commerce transaction and more particularly to the use of cross-media to confirm an e-commerce transaction.

[0003] One of the greatest deterrents to widespread use of electronic commerce involves consumers' lack of confidence in current techniques used to secure confidential information. Although encryption techniques have been used to prevent third parties from discovering a customer's confidential information, many customers remain reluctant to provide a company with confidential information over the Internet. In particular, some customers are wary that the company will misuse the information by making fraudulent purchases or will sell the information to another company. These wary consumers recognize that in electronic transactions, confidential information such as credit cards numbers, social security numbers, telephone numbers and addresses, can be copied and distributed many times and across several companies with little effort. Accordingly, transactions over the Internet have been primarily limited to reputable companies, making e-commerce difficult for newer companies.

[0004] A method consistent with the present invention for effectuating a secure transaction between a user and a party represented by a web-site comprises several steps. Initially, user profile data, including unique user identification codes, as well as instructions and user data corresponding to the identification codes, are stored in a database. The profile server receives a user identification code and retrieves the instructions corresponding to the user identification code. Thereafter, the profile server performs a confirmation operation in accordance with the retrieved instructions.

[0005] A system consistent with the present invention for providing a secure transaction between a user and a party represented by a web-site comprises a profile server, a web-site server and a client. The profile server stores a user profile tag which includes a unique user identification code, user data, and instructions. When a user visits a web-site, the web-site server automatically receives the user's identification code. In requesting access to user data or completion of a transaction, the web-site server provides the user identification code to the profile server. In response, the profile server performs a confirmation operation in accordance with the instructions stored in the user profile tag. Until successful completion of the confirmation process, the server denies the party access to the user data and does not complete the transaction.

[0006] Both the foregoing general description and the following detailed description are exemplary and explanatory and are intended to provide further explanation of the invention as claimed.

[0007] The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate presently preferred embodiments of the invention and, together with the preceding general description and the following detailed description, explain the principles of the invention.

[0008] In the drawings:

[0009] FIG. 1 is a block diagram of a network consistent with the present invention;

[0010] FIG. 2 is a block diagram of a second network consistent with the present invention;

[0011] FIG. 3 is a block diagram of the profile server shown in FIG. 2;

[0012] FIG. 4 is a flowchart illustrating the process of limiting access to user data consistent with the present invention;

[0013] FIG. 5 is a flowchart illustrating a bill-forwarding process consistent with the present invention;

[0014] FIG. 6 is a flowchart illustrating a process of limiting access to user data consistent with the present invention;

[0015] FIG. 7 is a block diagram of an alternative network consistent with the present invention;

[0016] FIG. 8 is a flowchart illustrating a process of blocking unwanted e-mail consistent with the present invention;

[0017] FIG. 9 is a flowchart illustrating a process of blocking unwanted telephone calls consistent with the present invention; and

[0018] FIG. 10 is a flowchart illustrating a process of tracking the progress of a shipment consistent with the present invention.

[0019] Reference will now be made to the present preferred embodiment of the invention, examples of which are illustrated in the accompanying drawings. Where appropriate, the same reference numerals refer to the same or similar elements. The appended claims define the scope of the invention; the following description does not limit that scope.

[0020] Systems and methods consistent with the present invention facilitate a transaction between a user and a party represented by a server on a network. When the user agrees to purchase a product from the party, the party's server informs a profile server. The profile server then confirms that the user wishes to engage in the transaction. After this confirmation, the profile server preferably completes the transaction without disclosing confidential information like credit card numbers to the party's server.

[0021] FIG. 1 illustrates a generic network consistent with the present invention including a profile server 110, a server 120 for a party that will be engaged in a transaction with a user, and a personal computer 130 for a user. Network elements 110, 120 and 130 are interconnected with information flowing in both directions between each network element 110, 120, 130. Each network element 110, 120, and 130 has a network address. A network consistent with the present invention includes multiple servers 120 and/or multiple personal computers 130 and/or multiple profile servers 110.

[0022] FIG. 2 illustrates an internet system consistent with the present invention. The system includes a profile server 110, a web-site server 220, a personal computer 130 (or any other device giving the user access to the Interenet, such as Internet phone), a facsimile machine 210, a telephone 240 and a pager 250. The profile server 110 interfaces with the web-site server 220 via the Internet 270 and the public switching telephone network (PSTN) 260. The profile server 110 sends the user e-mail messages through the PSTN 260 and the internet 270. The profile server 110 sends voice messages and interactive voice response messages to the user's telephone 240 through the PSTN 260 (and, if necessary, through a second PSTN or through long distance network 280). The profile server 110 sends facsimile messages to the user's facsimile machine 210 via PSTN 260. Finally, the profile server 110 sends pager messages to the user's pager 250 through PSTN 260 and paging network 290.

[0023] The personal computer 130 interfaces with the web-site server 220 via the internet 270. Preferably, web-site server 220 delivers web pages. Each web-site server 220 has an Internet Protocol (IP) address and possibly a domain name. Web browser 230, located in personal computer 130, locates the web-site server 220 and displays the web pages delivered by the web-site server 220. Preferably, the profile server 110 comprises part of an Internet Service Provider's system. Alternatively, the profile server 110 could be part of a separate service subscribed to by multiple users.

[0024] FIG. 3 is a block diagram of a profile server 110 consistent with the present invention. In this embodiment, the profile server is implemented in an intelligent peripheral device. The profile server 110 includes a memory block 310, display device 320, input device 330, network interface card 340 and processor 350. Memory block 310 includes application software 360 as well as the user profile database 140. The application software 360 optionally provides traditional services like voice mail, caller identification, call forward, call display and, interactive voice response in addition to the user profile service consistent with the present invention. Among other things, processor 350 retrieves the instructions and user data from the profile database 140. Network interface card 340 connects profile server 110 to PSTN 260.

[0025] Profile database 140 stores one or more user profile tags corresponding to one or more users. Preferably, each profile tag includes three parts: a user identification code, instructions, and user data. The user identification code is a unique code that identifies the user. The user data includes public and/or confidential information about the user identified by the user identification code. For example, the user data could include the user's credit card numbers, bank account numbers, social security number, telephone number, e-mail address and mailing address. If desired, the confidential information could be encrypted for additional security.

[0026] The instructions in the user profile tag define various functions to be performed by the profile server 110. For example, the instructions may include confirmation instructions for defining the confirmation process that the profile server must follow in response to a request for particular user data from server 120. In the preferred embodiment, the user programs the confirmation instructions. As such, the types of confirmation instructions, and hence the types of confirmation processes, are unlimited. Examples of such confirmation instructions include “send the user an e-mail whenever a party requests access to the user's confidential information,” “send the user a voice-mail for every purchase under $50,” and “send the user a voice-mail with interactive voice response for every purchase of $50 or more.”

[0027] Confirmation instructions consistent with the present invention may use cross-media to confirm e-commerce transactions. The term “cross-media” means using different media than the media on which the transaction was initiated. For example, where the user initially agrees to purchase a product from a party represented by a web-site on the internet, cross-media includes all media other than the internet. One of ordinary skill in the art would appreciate that the media employed by the present invention may be any media that would give the user notice. For example, profile server 110 could place a new entry on the user's web page or send the user a pager message, a voice message, a facsimile message or an e-mail message. The use of cross-media adds a real and perceived level of security to electronic transactions and reinforces the relationship between the customer and the party represented by the web-site.

[0028] In addition, the instructions stored in the user profile tag might include billing instructions that define the process that the profile server must follow after user agrees to make a purchase and the profile server confirms the transaction. Again, the user preferably programs the billing instructions. Examples of such billing instructions include “send information regarding the transaction to the credit card company,” “transfer funds from the user's bank account to the party's bank account,” “send the credit card number to the web-site server,” and “delay payment until after the user receives the ordered product.”

[0029] Preferably, the user can modify the instructions at any time. Moreover, the user can define unique confirmation and billing instructions for handling transactions with each individual party. Finally, the profile server 110 may be equipped with default instructions if the user elects to forgo setting his or her own instructions.

[0030] A profile tag consistent with the present invention is not limited to the three parts described above. For example, the profile tag might include four parts: a user identification code, instructions, and two levels of user data. The first level of user data might include less confidential information such as the user's name and e-mail address. The second level of user data might include the user's mailing address, telephone number, and credit card number. The user could set different instructions for each level of confidentiality. For example, the confirmation process associated with the user's name and e-mail address could be less demanding than the confirmation process associated with the user's mailing address, telephone number, and credit card number. In this manner, methods and systems consistent with the present invention provide a higher level of security for more confidential data.

[0031] FIG. 4 illustrates a process consistent with the present invention for providing a secure transaction between a user and a company represented by a web-site on the internet. First, the profile server 110 stores a user profile tag corresponding to the user (step 410). The user visits Company A's web-site using web browser 150 and the web-site server 120 automatically receives the user identification code (step 420).

[0032] Step 420 can be implemented by using a tag similar to user preference tags known as “cookies.” In this embodiment, the web browser 150 preferably stores a tag containing the address of the profile server 110 as well as the user identification code. The web browser 150 provides this tag to web-site server 120 when the browser 150 requests a page from the web-site server 120. In this manner, the web-site server 120 automatically learns that it can obtain information about the user by providing the user identification code to the profile server 110.

[0033] In an alternative embodiment, the user's identification code is identical to the user's IP address. Whenever a user visits a web-site, the web-site server 120 automatically reads the user's IP address. So long as each assigned IP address is unique, the alternative is a viable embodiment. On the other hand, if a user's IP address varies depending on the internet service subscribed to by the user, use of the first embodiment is preferred.

[0034] One of ordinary skill in the art would appreciate that systems and methods consistent with the present invention could use any mechanism that would allow web-site server 120 to receive the user identification code. For example, the web browser 150 could include a plug-in application, which runs whenever the user visits a web-site and which provides the user identification code to the web-site server 120.

[0035] The user decides to make a purchase using his credit card or some other third party billing plan (step 430). The user also expresses his or her willingness to make the purchase to Company A. Company A's server informs the profile server 110 that the user has agreed to a make a purchase and forwards the amount of the purchase and other relevant data to the profile server 110 (step 440). In response, the profile server 110 initiates a confirmation process in accordance with the instructions stored in the user profile tag (step 450). As noted above, the confirmation process could include an interactive voice response message, such as “send the user a voice mail message with interactive voice response choices to confirm the transaction.” Again, because the confirmation process is specified by the user-defined instructions in the user profile tag, the types of confirmation processes that may be performed by the profile server 110 are unlimited.

[0036] The profile server takes a different course of action depending on whether the user-defined process confirms the transaction (step 460). If the confirmation process is not successfully completed, the profile server 110 denies Company A's request (e.g., by denying access to the user data) (step 470). If the confirmation process is successfully completed, however, the profile server grants the company's request in accordance with the billing instructions stored in the user profile tag (step 480).

[0037] Because the user can program the billing instructions, the method for handling credit card and other third party billing transactions varies depending on the user's selected preferences. FIGS. 5 and 6 are flowcharts of exemplary billing methods. In the method of FIG. 5, the profile server 110 completes the transaction without sharing the user's confidential credit card information with Company A. Specifically, after successful completion of the confirmation process (step 360), the profile server 110 reads the billing instructions in the user profile tag. In accordance with the instructions, the profile server forwards the user's credit card number, the amount of the purchase, and any other relevant transaction data to the third billing party directly (step 580). In this manner, the user can engage in an e-commerce transaction while maintaining the confidentiality of his or her credit card information. Of course, if profile server 110 does not confirm the transaction, the profile server 110 does not forward the transaction information (step 570).

[0038] Users that are comfortable with the release of their credit card numbers may prefer that the profile server 110 simply grant Company A access to the particular user data. In FIG. 6, after successful completion of the confirmation operation (step 460), the profile server 110 provides the requested user data (in this case, credit card numbers) to the web-site server 120 (step 680). Alternatively, in the event of an unsuccessful confirmation operation, the profile server 110 denies the web-site server 120 access to the user data (step 670). Users that are comfortable with granting only certain parties access to their confidential user information could use the method of FIG. 6 for transactions with parties that they trust, while using the method depicted in FIG. 5 for transactions with other parties.

[0039] One of ordinary skill would appreciate that in systems and methods consistent with the invention, the user could program the profile server to implement any desired billing method. For example, in a preferred embodiment, the profile service provider (or some other provider) could establish an account system. Preferably, the user would have an account and the party would have an account. In this embodiment, the billing instructions in the user profile tag might provide for the transfer of funds from the user's account to the party's account.

[0040] While the preferred embodiment was described primarily with respect to credit card numbers, one of ordinary skill would appreciate that the user data could be any information about the user. For example, Company A's web-site server 120 might request the user's name and e-mail address from the profile server 110. Depending on the instructions stored in the user profile tag, the profile server 110 may perform a confirmation process, such as “e-mail the user whenever a company requests the user's name and e-mail address.”

[0041] In an alternative embodiment consistent with the present invention, the profile server is not a third party server. FIG. 7 shows a profile server 710 in a personal computer 730. The network includes the web-site server 120, the personal computer 730 and the profile server 710. Profile server 710 performs the same functions as profile server 110. For example, profile server 710 stores one or more user profile tags and performs confirmation and billing operations in accordance with user-defined instructions.

[0042] Record Keeping

[0043] The profile server 110 optionally performs a record keeping function. Specifically, the profile server stores a record every time a party requests information about the user. Using his or her user identification code, the user can access this information. For example, the record could include the name of the party making the request, the date of the request, the specific information requested, and the transaction data provided.

[0044] Blocking

[0045] After completion of a transaction between the user and Company A, Company A might send the user unwanted solicitations or distribute its customer profile database to another party who in turn might send the user unwanted solicitations. To solve the problem of unwanted solicitations, the profile server preferably blocks unwanted e-mail and telephone calls.

[0046] FIG. 8 is a flowchart of an e-mail blocking method consistent with the present invention. First, a party sends the user an e-mail using an address originally provided by the profile server 110 (step 810). The address originally provided by the profile server routes the e-mail to the profile server (step 820). This operation is transparent to the party that sent the e-mail.

[0047] When the profile server 110 receives the e-mail, it determines whether the customer wishes to receive e-mail from the sending party (step 830). In particular, the profile server 110 retrieves a set of user-defined instructions stored in a user profile tag corresponding to the user. These instructions sort out unwanted e-mail and specify the treatment that the profile server 110 should give the unwanted e-mail. To perform the sorting function, the instructions may take the form of a list of parties that are denied e-mail access or a list of parties that are granted e-mail access. As a default, a list of parties that are granted e-mail access could include anyone that the user initiated contact with by visiting the party's web-site, sending the party e-mail, or calling the party. The profile server discards the unwanted e-mail (step 850) and forwards the wanted e-mail to the user's true e-mail address (step 840). In addition, the profile server could sort the wanted e-mail into different categories for routing into different priority level mail boxes as desired by the user.

[0048] FIG. 9 is a flowchart of a telephone call blocking method consistent with the present invention. First, the party calls the user using the telephone number originally provided to the party by the profile server (step 910). The telephone number provided by the profile server routes the telephone call to a voice application in the profile server 110 (step 920). This operation is transparent to the calling party. The profile server 110 determines whether the user wants to receive the telephone call from the calling party (step 930). Specifically, user-defined instructions (similar to those described in connection with FIG. 8) specify how the telephone call should be treated. Depending on the identity of the calling party and the user-defined instructions, the profile server 110 might provide a interactive voice response message to the party (step 940), send the user a pager message to notify the user of the call (step 950), forward the call to the user's voice mail (step 960), forward the call to the customer (step 970), or take any other viable action programmed by the user.

[0049] Systems and methods consistent with the present invention could use an alternative e-mail blocking method. For example, the profile server 110 could periodically send a new key pass to the personal computer 130. To send the user an e-mail, Company A's server 120 would need to provide both the user's e-mail address and the key pass to personal computer 130. Because the profile server 110 frequently updates the key pass, the fact that the profile server 110 gave the user's e-mail address and key pass to Company A today would not mean that Company A could send the user e-mail a month later.

[0050] Tracking

[0051] In e-commerce, the party represented by a web-site must mail the purchased product to the user. In addition to the functions described above, the profile server can track a purchase for the user. In conventional mail tracking systems, the user must retain a tracking number to access information about a mailed package. Because the tracking number changes for each new package sent, the tracking numbers are easily forgotten or lost. Moreover, the tracking of numerous packages is difficult to administer. Systems and methods consistent with the invention overcome these disadvantages by allowing the user to access information about a mailed package using the user's unique identification code.

[0052] FIG. 10 illustrates a tracking method consistent with the present invention. A party mails a parcel to the user through a courier (step 1010). The party provides the profile server address and user identification code to the courier (step 1020). The courier's electronic inventory system logs the parcel into the inventory (step 1030). At the same time, the courier accesses the user's address from the profile server using the method depicted in FIG. 3 (unless the party already provided the name and address). The courier labels the parcel with the profile server address and the user's unique identification code (using a alphanumeric label or a bar code label) (step 1040). As the package is delivered through the courier's system (e.g., from a first mail center to a second mail center), the electronic inventory system scans the package label. Moreover, the electronic inventory system is programmed to send a location message to the profile server each time it scans the bar code or alphanumeric label (step 1050). The profile server logs the location information. The user can access the log information and thereby track the package using his or her user identification code. In step 1060, in accordance with user-defined instructions, the profile server sends the user a cross-media notification that the package has reached its final destination.

[0053] While there has been illustrated and described preferred embodiments and methods of the present invention, those skilled in the art will understand that various changes and modifications may be made, and equivalents may be substituted for elements thereof, without departing from the true scope of the invention.

[0054] In addition, many modifications may be made to adapt a particular element, technique or implementation to the teachings of the present invention without departing from the central scope of the invention. Therefore, this invention should not be limited to the particular embodiments and methods disclosed herein, but should include all embodiments falling within the scope of the appended claims.