Portable transaction device7013293Abstract A portable transaction device including transaction apparatus operative to participate in a monetary transaction, authorization apparatus operative to authorize the transaction apparatus to operate based on stored authorization parameters, and control apparatus operative to store the stored authorization parameters based on user input. The stored authorization parameters include at least one of the following: an identity of a user, a time period, and a distance. Related apparatus and methods are also provided. Claims What is claimed is: Description FIELD OF THE INVENTION
Moreover in accordance with a preferred embodiment of the present invention the at least one authorized person includes exactly one authorized person associated with an authorization profile, and the authorization apparatus is operative to authorize use of the portable element by the one authorized person in accordance with the authorization profile. Further in accordance with a preferred embodiment of the present invention the portable element includes a control device for controlling electronic equipment. Still further in accordance with a preferred embodiment of the present invention the control device includes a television remote control device. Additionally in accordance with a preferred embodiment of the present invention the predetermined criterion includes a predetermined transaction limit. Moreover in accordance with a preferred embodiment of the present invention the predetermined transaction limit includes a predetermined monetary limit. Further in accordance with a preferred embodiment of the present invention the authorization parameters are based, at least in part, on authorization parameter defining information, and also including authorization input apparatus operative to receive the authorization parameter defining information. Still further in accordance with a preferred embodiment of the present invention the authorization input apparatus includes input authentication apparatus operative to authenticate the received authorization parameter defining information and to reject non-authentic received information. There is also provided in accordance with another preferred embodiment of the present invention a method for use with a portable transaction device, the method including providing transaction apparatus operative to participate in a monetary transaction, authorizing the transaction apparatus to operate based on stored authorization parameters, the stored authorization parameters including at least one of the following: an identity of a user, a time period, and a distance, and storing the stored authorization parameters based on user input. There is also provided in accordance with still another preferred embodiment of the present invention a method for use with a portable element, the method including providing a portable element, authorizing use of the portable element in accordance with at least one of the following authorization parameters: at least one defined period of time, a defined distance from a specified location, at least one defined type of transaction, at least one type of transaction meeting a predefined criterion, and at least one authorized person authorized to use the portable element. BRIEF DESCRIPTION OF THE DRAWINGS The present invention will be understood and appreciated more fully from the following detailed description, taken in conjunction with the drawings in which: FIG. 1A is a simplified pictorial illustration of a system including a portable transaction device, the portable transaction device being constructed and operative in accordance with a preferred embodiment of the present invention; FIGS. 1B-1E are simplified pictorial illustrations of the system of FIG. 1A, useful in understanding the operation thereof; FIG. 2 is a simplified partly pictorial, partly block diagram illustration of a preferred implementation of the portable transaction device of FIG. 1A; and FIGS. 3A and 3B taken together comprise a simplified flowchart illustration of a preferred method of operation of the apparatus of FIGS. 1A-1E. DETAILED DESCRIPTION OF A PREFERRED EMBODIMENT Reference is now made to FIG. 1A which is a simplified pictorial illustration of a system including a portable transaction device, the portable transaction device being constructed and operative in accordance with a preferred embodiment of the present invention. The term "transaction device", as used throughout the present specification and claims, includes any device which is used for carrying out a transaction, such as a transaction of any appropriate kind between two parties or a monetary transaction. Transaction devices, including transaction devices in the form of a smart card, are well known in the art. Such devices may include, for example, electronic cash cards such as Mondex® cards and similar cards, and electronic wallets of various kinds, which are well known in the art. The system of FIG. 1A includes a card base/holder 100 and a smart financial card 110. The smart financial card 110 is shown as having been removed from the card base/holder 100. Preferably, the card base/holder 100 is formed to receive the smart financial card 110. It is appreciated that, alternatively, the card base/holder 110 may function as a base and not as a holder, and may be formed in any appropriate shape. Preferable functioning of the card base/holder 100 is described below. The smart financial card 110 is shown as an example only of a portable transaction device in FIG. 1A for ease of description, it being appreciated that any other appropriate transaction device may be used. For example, and without limiting the generality of the foregoing, a transaction device not in the form of a card may be used. For example, as is well known from the field of electronic wallets, a transaction device may include an appropriately programmed personal computer, personal digital assistant, or cellular phone. It is appreciated that, in a preferred embodiment of the present invention, a transaction device preferably comprises a portable device, particularly a device that is easily carried from place to place. The smart financial card 110 preferably comprises a processor 120 and a memory 130, as well as other conventional components (not shown), as are well known in the art of smart cards. The memory 130 preferably comprises a non-volatile memory, it being appreciated that the smart financial card 110 does not necessarily comprise an internal power supply, and in the absence of an internal power supply is preferably fed power from an external power supply during a transaction session, as is well known in the art of smart cards. Because the presence of a power supply can not be assured in all cases and at all times, non-volatile memory is generally preferred. The processor 120 and the memory 130 are preferably operatively associated via appropriate bi-directional communications, as is well known in the art. A preferred implementation of the smart financial card 110, including a preferred implementation of the processor 120 and the memory 130, is described below with reference to FIG. 2. The smart financial card 110 also comprises a input device 140. The input device 140 may comprise any appropriate input device or combination thereof. For example, and without limiting the generality of the foregoing, the input device 140 may comprise:
One particular example of a keyboard input device, not intended to limit the generality of the foregoing, comprises a plurality of keys each indicating a particular denomination of money, period of time, and so forth. The label of each key may be either fixed or variable according to context, as is well known in the art. Furthermore, different types of input device may be combined such as, for example, a "keyboard" in which each of the plurality of input keys comprises a biometric sensor and input is accepted only upon biometric verification. It is appreciated that a voice input device may be considered as a type of biometric sensor, although a voice input device is generally discussed herein separately from a biometric sensor for purposes of simplicity of description. Biometric sensors generally are very well known in the art, and a person of the art would be able to choose one or more appropriate biometric sensors for use in the present invention. The operation of the system of FIG. 1A is now briefly described. Preferably, the smart financial card 110 is removed from the card base/holder 100. It is appreciated that, alternatively, the card base/holder 100 and the smart financial card 110 may be designed to allow operation of the financial card 110 while the financial card 110 is inserted in the card base/holder 100. Further alternatively, it is appreciated that, in a case where the card base/holder 100 functions as a base only, the smart financial card 110 would not need to be "removed". As further described below with reference to FIG. 2, owner information identifying an owner of the smart financial card 110 is preferably stored in the memory 130. Typically, only one person at a time may be identified as an owner of the smart financial card 110. Alternatively, more than one person may be identified as owner of the smart financial card 110 at one time; in such a case, one owner alone, all owners, a majority of all owners, or any other appropriate number of owners, acting together, may be understood as equivalent to "the owner" of the smart financial card 110. It is appreciated that, wherever the owner of the smart financial card 110 is described herein as providing the owner's identity to the smart financial card 110 or as being identified by the smart financial card 110, any appropriate method of identification, as is well known in the art, may be used. Typically, identification comprises comparison of a supplied input with a stored value associated with the owner, the stored value preferably being stored in the memory 130. It is appreciated that, as is well known in the art, particularly in the art of password checking, the stored value may comprise a derived value, with comparison comprising comparison of a derived value of the supplied input against the stored derived value. For example, and without limiting the generality of the foregoing, the derived value of the supplied input, for example, may comprise any one or combination of the following: a hash of the supplied value; and a result of applying a one-way function to the supplied value. Appropriate hash functions are well known in the art and are described, for example, in Applied Cryptography, Second Edition, by Schneier, referred to above. Appropriate apparatus and methods, well known in the art, for preventing illicit change of the stored value may preferably be employed. For example, and without limiting the generality of the foregoing, for the identification: 1. In a case where the input device 140 comprises a keyboard, identification may take place by entering a personal identification number (PIN) associated with the owner via the input device 140, identification comprising comparing the input PIN with the stored PIN of the owner, the stored PIN typically being stored in the memory 130. 2. In a case where the input device 140 comprises a voice input device, identification may take place by voice pattern recognition, as is well known in the art. Typically, the voice pattern recognition may be executed by an appropriate combination of software and hardware in the processor 120. It is appreciated that auxiliary special purpose hardware (not shown), as is well known in the art, may be used in conjunction with the processor 120. 3. In a case where the input device 140 comprises a biometric sensor, identification may take place by biometric identification, as is well known in the art. Typically, the biometric identification may be executed by an appropriate combination of software and hardware in the processor 120. It is appreciated that auxiliary special purpose hardware (not shown), as is well known in the art, may be used in conjunction with the processor 130. Without limiting the generality of the foregoing, the biometric sensor may, for example, comprise a fingerprint sensor. The owner of the smart financial card 110 may intend to make use of the smart financial card 110. Preferably, in such a case, the owner provides the owner's identity to the smart financial card 110, and only upon successful identification of the owner and verification that the owner is the authorized owner, as described above, the processor 120 is preferably operative to process a financial transaction. Alternatively, as shown in FIG. 1A, preferably upon command by the owner and upon successful identification of the owner and verification that the owner is the authorized owner, as described above, the smart financial card 110 is operative to receive a limited owner authorization 150 to another person to become a user of the smart financial card 110. Preferably, an identification of the newly authorized user is entered via the input device 140 and stored in the memory 130. Preferably, the limited owner authorization 150 comprises one or more limits, in addition to a limit to a particular user. It is appreciated that more than one user may be given authorization, either as part of one limited owner authorization 150 or by a plurality of limited owner authorizations 150, directed to more than one user. The one or more limits may include any appropriate limit; for example, the one or more limits may include any of the following: 1. A limit on location of use of the smart financial card 110, typically comprising a limit forbidding, modifying, or otherwise restricting use of the smart financial card 110 beyond a predefined distance from the card base/holder 100. In such a case appropriate proximity determination apparatus (not shown in FIG. 1A) is preferably comprised in the smart financial card 110, with appropriate complementary apparatus being comprised in the card base/holder 100. It is appreciated that proximity determination apparatus is well known in the art, and that any appropriate proximity determination apparatus may be used. Preferably, predefined distance information defining the predefined distance is stored, in such a case, in the memory 130. A preferred implementation of proximity determination apparatus is described in more detail below with reference to FIG. 2. 2. A time limit on use of the smart financial card 110, typically comprising a maximum elapsed time from a time of authorization, beyond which the smart financial card 110 is not authorized for use. Alternatively, the time limit may comprise a fixed time. In such a case appropriate time determination apparatus (not shown), such as an accurate clock, as is well known in the art, is preferably comprised in the smart financial card 100. Preferably, predefined time information defining the time limit is stored, in such a case, in the memory 130. Reference is now additionally made to FIGS. 1B-1E, which are simplified pictorial illustrations of the system of FIG. 1A, useful in understanding the operation thereof. In FIG. 1B an authorized user request for transaction 160 is received, the authorized user request 160 preferably comprising a request by a user authorized by the owner, as described above with reference to FIG. 1A. The smart financial card 110 of FIG. 1B preferably participates in a financial transaction based, at least in part, on the request by the authorized user. In FIG. 1C a non-authorized user request for transaction 170 is received, the non-authorized user request 170 typically comprising a request by user who is not authorized by the owner, as described above with reference to FIG. 1A. The smart financial card 110 of FIG. 1C preferably declines to participate in a financial transaction as requested by the non-authorized user. In FIG. 1D a user, typically but not necessarily comprising an authorized user, enters a distant request 180 for a transaction, the smart financial card 110 being more than a predetermined distance from the card base/holder 100, as described above with reference to FIG. 1A. The smart financial card 110 of FIG. 1D preferably declines to participate in a financial transaction as requested, when beyond the predetermined distance from the card base/holder 100. In one preferred embodiment of the present invention, once a financial transaction is requested via a distant request 180, participation in future financial transactions are also declined, preferably until a predefined event such as a re-authorization (not shown) by the owner. In an alternative preferred embodiment of the present invention, participation in future financial transactions is determined on an individual basis for each financial transaction such that, for example, a later authorized request such as the authorized user request 160 of FIG. 1B will result in the smart financial card 110 participating in a transaction. In FIG. 1E a request for transaction beyond a time limit 190 is received by the smart financial card 110. The smart financial card 110 of FIG. 1E preferably declines to participate in a financial transaction as requested, after a predetermined time as specified above. It is appreciated that any appropriate combination of factors described above, particularly with reference to FIGS. 1A-1E, may be used by the smart financial card 110 to determine whether or not to participate in or otherwise allow a transaction. For example, and without limiting the generality of the foregoing, a function might be defined to determine a spending limit. One particular example of such a function, provided as a particularly detailed example only, might comprise the following: spending limit in dollars=(100)/(elapsed time in minutes)2 It will be appreciated that the example function would greatly lower the spending limit as the time since the spending was authorized increases; such an approach might be desirable when the owner of the smart financial card 110 expected the authorized user to use the card quickly. Should the card go astray or not be returned, the value of the card when used in a transaction would quickly decline. It is appreciated that a skilled person of the art would understand other factors, similar to those mentioned above, to be included in the scope of the present invention even if not explicitly enumerated herein. It is further appreciated that the smart financial card 110 may include an output unit (not shown) which may be operative to provide appropriate output to a user of the smart financial card 110. Without limiting the generality of the foregoing, the output of the output unit (not shown) may comprise one or more of the following: a name of the owner or of one or more authorized users; a listing of limits imposed on transactions, such as the factors described above for limiting transactions; records of transactions; and records of attempted transactions in which the smart financial card 110 declined to participate. It is appreciated, as is well known in the art, that an appropriate output unit (not shown) may comprise an LCD display or a similar display, a voice output device, or any similar output device. Reference is now made to FIG. 2, which is a simplified partly pictorial, partly block diagram illustration of a preferred implementation of the portable transaction device of FIG. 1A. The apparatus of FIG. 2 comprises one particular preferred implementation of the smart financial card 110 of FIGS. 1A-1E; it is appreciated that many other implementations are possible. The smart financial card 110 of FIG. 2 comprises the following elements:
The memory 130 preferably comprises the following subunits:
It is appreciated that the memory 130 is also preferably operative to store other information related to authorization determinations. For example, and without limiting the generality of the foregoing, the memory 130 may be operative to store information defining a function defining a spending limit, as described above, or to store any other appropriate information. It is appreciated that at least some of the elements of the smart financial card 110 of FIG. 2 are shown functionally, and that an appropriate hardware implementation of the smart financial card 110 may comprises more or fewer physical elements than the number of functional elements which are shown, the physical elements implementing the functional elements in appropriate combination, as will be appreciated by a person skilled in the art. It is appreciated that the smart financial card 110 and the elements comprised therein are preferably equipped with appropriate anti-tamper features, as is well known in the art. Reference is now made to FIGS. 3A and 3B, which, taken together, comprise a simplified flowchart illustration of a preferred method of operation of the apparatus of FIGS. 1A-1E. The method of FIGS. 3A and 3B is self-explanatory with reference to the above description of FIGS. 1A-1E and 2. It is appreciated that various features of the invention which are, for clarity, described in the contexts of separate embodiments may also be provided in combination in a single embodiment. Conversely, various features of the invention which are, for brevity, described in the context of a single embodiment may also be provided separately or in any suitable subcombination. It will be appreciated by persons skilled in the art that the present invention is not limited by what has been particularly shown and described hereinabove. Rather the scope of the invention is defined only by the claims which follow:
|
Same subclass Same class Consider this |
||||||||||