 |
Claims  |
|
|
What is claimed is:
1. A method for utilizing an access management computer to control a user's
access to digital data located at a data site and for causing a billing
system to toll said user's access to data, comprising the steps of:
said access management computer receiving, from said billing system, a
first access code corresponding to said user's request for access to said
digital data;
said access management computer receiving a second access code from said
data site;
said access management computer verifying that said first access code
corresponds to said second access code;
said access management computer communicating a message confirming said
verifying to said data site, thereby authorizing said user's access to
said digital data; and
said access management computer authorizing said billing system to post an
access charge to an account associated with said user based upon said
user's access to said digital data.
2. The method of claim 1, wherein said billing system comprises a
shared-revenue communications line.
3. The method of claim 2, wherein said shared-revenue communications line
comprises a telephone line such as a "900" line or equivalent.
4. The method of claim 1, wherein said access management computer and said
billing system are located remotely from each other.
5. The method of claim 1, wherein one of said first and second access codes
is received before the other of said first and second access codes and
stored in said access management computer in anticipation of the receipt
of the other of said first and second access codes.
6. The method of claim 1, wherein said first and said second access codes
are identical.
7. The method of claim 1, wherein said user provides said first access code
to said billing system.
8. The method of claim 7, wherein said first access code is provided to
said user by said data site.
9. The method of claim 8, further comprising the step of said access
management computer generating said first access code and transmitting
said first access code to said data site, prior to said step of providing
said first access code to said user.
10. The method of claim 9, wherein said access management computer
generates said first access code in response to a request from said data
site, subsequent to said user's connection thereto.
11. The method of claim 1, wherein said first and second access codes are
generated by said user.
12. The method of claim 11, wherein said first and second access codes
include said user's telephone number.
13. The method of claim 1, wherein said first access code includes pricing
information corresponding to said user access to said data site.
14. The method of claim 1, wherein said first access code includes usage
information corresponding to the number of times said access code may be
used.
15. The method of claim 1, further comprising the step of said access
management computer signaling said data site to terminate the user's
authorization to access said digital data upon the occurrence of a
predetermined event.
16. The method of claim 15, wherein said predetermined event includes
passage of a specified time interval.
17. The method of claim 15, wherein said predetermined event includes
accrual of a predetermined billing amount.
18. The method of claim 15, wherein said predetermined event includes
receiving a user disconnect signal from said billing system.
19. The method of claim 15, wherein said predetermined event includes
obtaining a session completion indication from said data site.
20. The method of claim 1, wherein said access charge is based on a
quantity of information which said user has requested from said data site.
21. The method of claim 1, wherein said access charge is based on the
period of time during which said user was connected to said data site.
22. The method of claim 1, wherein said access management computer is
connected to said billing system over a first communication channel, and
said access management computer is connected to said data site over a
second communication channel.
23. The method of claim 9, wherein said first access code corresponds to
database record values stored at said access management computer.
24. The method of claim 23, wherein said database record value includes a
dollar value associated with the use of said access code.
25. The method of claim 24, wherein said database record value further
includes an expiration date for said access code.
26. The method of claim 1, wherein said digital data represents a
confirmation of the purchase of physical goods.
27. An access management computer for controlling a user's access to
digital data located at a data site and for causing a billing system to
toll said ser's access to said digital data, comprising:
means for receiving, from said billing system, a first access code
corresponding to said user's request for access to said digital data;
means for receiving a second access code from said data site;
means for verifying that said first access code corresponds to said second
access code;
means for communicating a message confirming said verifying to said data
site, thereby authorizing said user's access to said digital data; and
means for authorizing said billing system to post an access charge to an
account associated with said user based upon said user's access to said
digital data.
28. The access management computer of claim 27, wherein said billing system
comprises a shared-revenue communications line.
29. The access management computer of claim 28, wherein said shared-revenue
communications line comprises a telephone line such as a "900" line or
equivalent.
30. The access management computer of claim 27, wherein said access
management computer and said billing system are located at remotely from
each other.
31. The access management computer of claim 27, wherein one of said first
and second access codes is received before the other of said first and
second access codes and further comprising means for storing in said
access management computer the first received of said access codes in
anticipation of the receipt of the other of said first and second access
codes.
32. The access management computer of claim 27, wherein said first and said
second access codes are identical.
33. The access management computer of claim 27, and further comprising
means for permitting said user to provide said first access code to said
billing system.
34. The access management computer of claim 33, and further comprising
means for providing said first access code to said user from said data
site.
35. The access management computer of claim 34, further comprising means
for generating said first access code and transmitting said first access
code to said data site, prior to providing said first access code to said
user.
36. The access management computer of claim 35, and further comprising
means for generating said first access code in response to a request from
said data site, subsequent to said user's connection thereto.
37. The access management computer of claim 27, wherein said first and
second access codes are generated by said user.
38. The access management computer of claim 37, wherein said first and
second access codes include said user's telephone number.
39. The access management computer of claim 27, wherein said first access
code includes pricing information corresponding to said user access to
said digital data.
40. The access management computer of claim 27, wherein said first access
code includes usage information corresponding to the number of times said
access code may be used.
41. The access management computer of claim 27, further comprising means
for signaling said data site to terminate the user's authorization to
access said digital data upon the occurrence of a predetermined event.
42. The access management computer of claim 41, wherein said predetermined
event includes passage of a specified time interval.
43. The access management computer of claim 41, wherein said predetermined
event includes accrual of a predetermined billing amount.
44. The access management computer of claim 41, wherein said predetermined
event includes receiving a user disconnect signal from said billing
system.
45. The access management computer of claim 41, wherein said predetermined
event includes obtaining a session completion indication from said data
site.
46. The access management computer of claim 27, wherein said access charge
is based on a quantity of information which said user has requested from
said data site.
47. The access management computer of claim 27, wherein said access charge
is based on the period of time during which said user was connected to
said data site.
48. The access management computer of claim 27, wherein said access
management computer is connected to said billing system over a first
communication channel, and said access management computer is connected to
said data site over a second communication channel.
49. The access management computer of claim 35, wherein said first access
code corresponds to database record values stored at said access
management computer.
50. The access management computer of claim 49, wherein said database
record value includes a dollar value associated with the use of said
access code.
51. The access management computer of claim 50, wherein said database
record value further includes an expiration date for said access code.
52. The access management computer of claim 27, wherein said digital data
represents a confirmation of the purchase of physical goods. |
|
 |
|
 |
Claims |
|
|
|
Description |
|
|
FIELD OF THE INVENTION
The present invention relates generally to billing for information, goods,
services and the like made available to a user on a computer or data
network, and more particularly, to a method for such billing and
collection linked to a separate telephone connection associated with a
billing network that manages and bills for access to information over the
computer or data network.
BACKGROUND
With the advent of data networks such as the Internet, World Wide Web,
bulletin board systems, and commercial on-line services, electronic
commerce has become one of the fastest growing segments of the economy.
The most readily available form of commerce is the exchange of information
to an end-user for payment. While these data networks are adept at
disseminating information, collection of payment has been
problematic--holding back the growth of electronic commerce.
Methods of collecting payment for information can be separated into two
broad categories, on-line and off-line. On-line methods include the
transfer of credit card numbers and the use of digital cash. Off-line
methods require the end-user to mail in cash or checks. These approaches
can be cumbersome, time consuming and risky from a security standpoint.
Transferring credit card numbers via the Internet, for example, carries the
risk of theft from unscrupulous computer hackers and thieves, who can tap
into a server connected to the Internet and search for messages containing
16 digit numbers. Digital money systems (e.g. DigiCash, eCash, etc.) are
presently a long way from practical implementation, with no standards
having yet been established. Another problem associated with the use of
credit cards, is that some users may not even be able to qualify for one,
or have a sufficient amount of credit. Vendors are also discouraged from
billing small amounts on credit cards because of the relatively high
transactional costs as a percent of the sale.
While cryptographic systems will eventually enable the safe transmission of
credit card numbers through cyberspace, some users will never feel
completely comfortable providing their credit card numbers in this manner,
even if the communications are ostensibly made secure.
Additionally, there exists a problem in that casual short-term or single
usage visits to an information provider on a computer network cannot be
charged in an economical manner for both the information provider and the
user. For example, if an information provider wanted to charge twenty-five
cents to view a one time copy of a "top ten" list, the end-user obviously
would not want to set-up a credit or cash account as the expense to
establish such an account would exceed the value of the one-time
information obtained. The minimum practical credit card charge exceeds
$2.50.
There have been attempts to use existing telephone-based billing and
collection systems to bill for such information, however those have many
disadvantages. One type is a 900-number-based billing system, which is
cumbersome, difficult to use, and generally ineffective as described in
more detail below.
Specifically, all of the existing systems use codes that are simply
passwords, and are limited to the particular data site for which they were
issued. These codes do not represent "value" and therefore cannot be used
to control or limit access to digital data.
A second major problem with existing systems is that the information site
must be "intelligent" and able to store and maintain codes in order to
know which codes are valid (e.g. when does a code expire). This greatly
increases the information provider's cost for providing digital
information and greatly limits the number of information providers that
can afford the additional overhead, thus reducing commerce and competition
on data networks.
A third major problem with existing systems is that neither the data
network nor the information provider are connected to the billing system.
This severely limits their ability to provide even basic customer service
to users of the system.
A fourth major problem with existing systems relates to the use of the 900
system itself. Information providers are limited as to the amounts charged
for information. The 900-number system provider in existing systems offers
no more than seven different dollar amounts they can charge on their
900-numbers. Each 900-number represents a different dollar amount charged
to a consumer. For example, a 900-number system provider has three
different 900-numbers, each corresponding to a different dollar value,
$10, $15 and $20. An information provider using such a system for billing
would be limited to those dollar amounts regardless of the value of the
information they were selling. Additionally, the dollar charges cannot
reflect the number of times a user, or multiple users, has had access to
information, and the consumer is billed immediately for the 900-number
call, even if they never receive the digital information.
A specific example of one such system is known as Web 900, offered by
Logicom, Inc. In that system, the user calls a given 900-number, in
exchange for which he is provided a code valid for a specified time period
for unlimited access to a particular information site, and the information
site locally verifies the validity of the code. There are several problems
with this arrangement. First, there is no way to control access to the
information by the number of uses. Users are forced to pay for unlimited
access even if the user desires one piece of information or single use
access. Second, since the data network has no way of preventing access to
unauthorized users in possession of the code, the code could be posted to
a BBS or newsgroup on the web, allowing for repeated uncontrolled use by
anyone reading the posting. Third, the codes provided are usable only at a
particular information site. A code provided for the purchase of five
dollars worth of information at information site "A" cannot be used for
the purchase of five dollars worth of information at site "B." Finally,
the data network must have the ability to store codes, and must have
software to verify each code entered.
SUMMARY OF THE INVENTION
A principle object of the present invention is to provide a new and
improved system for selling digital data.
Another such object of the present invention is a system in which
information is communicated to an end-user from a data site, while billing
is implemented through a billing system, with communications between the
data site and billing system managed by an access management system. A
further object of the present invention is to provide such a system
wherein the billing system may include a "900 type" shared-revenue
telephone line.
In accordance with a first embodiment of the present invention, there is
provided a method and apparatus for using an access management computer to
control a user's access to digital data located at a data site, while
causing a billing system to toll the user's access to the data. In this
embodiment of the invention, the access management computer receives from
the billing system a first access code corresponding to the user's request
for access to the digital data. The access management computer receives a
second access code from the data site, and verifies that the first access
code corresponds to the second access code. (The first and second billing
codes may be received in either order.) The access management computer
communicates a message confirming the verification to the data site,
thereby authorizing the user's access to the digital data. To complete the
transaction, the access management computer authorizes the billing system
to post an access charge to an account associated with the user based upon
the user's access to the digital data.
In accordance with a second embodiment of the invention, a method and
apparatus are provided for using a billing site to toll a user's access to
digital data at a data site by signaling an access management computer to
authorize the user's access to the digital data. In this embodiment of the
invention, the billing site receives a user's request for access to the
digital data, the request for access being associated with a billing
account for charging the user, and including a code corresponding to the
digital data. The billing site routes to the access management computer a
signal indicating that the billing site has received the code
corresponding to the user request for access to the digital data.
Subsequently, the billing site receives from the access management
computer a signal that the user has received access to the digital data.
In response, the billing site posts an access charge to the billing
account based upon the user's access to the digital data.
In yet another embodiment of the invention, a method and apparatus are
provided for a user to access stored digital information at a data site.
In this embodiment, the user communicates to a billing system a first
access code authorizing the billing system to charge his billing account
for access to the stored digital information. The user receives from the
billing system a second access code permitting the user to access the
stored digital information at the data site. The user connects to the
remote data site, and provides to the remote data site the second access
code whereby to gain access to the stored digital information.
In still another embodiment of the invention, a method and system are
provided for using a billing site to toll a user's access to a data site
through an access management computer, wherein the user establishes a
communications link between himself and the billing site, the
communications link being associated with a the user's billing account. A
communications link is established between the billing site and the access
management computer, and the billing site sends the access management
computer a signal indicating that the communications link between the user
and the billing site is active. This signal authorizes the user access to
the data site. Subsequently, the billing site receives from the access
management computer a signal that the user has received access to the data
site, and posts via the billing site an access charge to the billing
account based upon the user's access to the data site.
In all of the embodiments described above, the billing site, or billing
system, preferably consists of a shared-revenue telephone system -
typically a "900 number" or equivalent. The data sites comprise database
providers, for example, as may be found on the internet or through other
means of user access. The user is typically remote, while the billing
system, access management computer, and data site may be all or in some
limited combination co-located.
In accordance with the foregoing, the many features and advantages of the
invention will be better understood as the detailed description of the
invention proceeds with particular reference to the accompanying drawings.
BRIEF DESCRIPTION OF THE DRAWINGS
FIG. 1 illustrates a first embodiment of the present invention;
FIG. 2 is a block diagram showing one embodiment of the access management
system;
FIG. 3 is a block diagram showing an exemplary end-user site;
FIG. 4 is a block diagram showing an exemplary data network;
FIG. 5 is a block diagram showing an exemplary access management system;
FIG. 6 is a block diagram showing an exemplary billing system;
FIG. 7 illustrates an exemplary information search procedure in an
asynchronous embodiment;
FIG. 8 illustrates an exemplary billing procedure associated with granting
access to information in an asynchronous embodiment;
FIG. 9 illustrates an exemplary process for verifying the validity of
access codes in an asynchronous embodiment;
FIGS. 10A, 10B, and 10C illustrate an exemplary synchronous embodiment;
FIG. 11 illustrates an exemplary procedure for limited use access codes;
FIG. 12 illustrates an exemplary embodiment for purchasing physical goods;
FIG. 13 illustrates an exemplary procedure for the use of digital tokens in
the purchase of information;
FIG. 14 illustrates operational aspects of the billing system; and
FIG. 15 illustrates the process of collecting payment from the end-user,
and the distribution of these funds to the content and system providers.
DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS
The method and apparatus of the preferred embodiments of the invention will
now be described with reference to FIGS. 1-6. In a preferred embodiment,
the invention generally comprises an end-user system 300, data network
400, access management system 500, and 900-number network 600. The present
invention allows information providers on a data network to control access
to information using a system of codes, where the 900-number system
functions as the billing agent. This enables an information provider to
simply and economically bill in small, incremental amounts for the
information provided.
System Architecture
With reference to FIGS. 1-6, the system architecture for a first embodiment
of the invention is illustrated. As shown in FIG. 1, the overall system
comprises an end-user system 300, data network 400, access management
system 500, and 900-number network 600. Access management system 500
regulates access to data network 400 and manages the billing for such
access by facilitating communications between 900-number network 600, data
network 400, and end-user system 300.
FIG. 2 generally depicts the flow of information among the primary
components in greater detail. The end-user accesses data network 400
through user computer 310 and modem 390, and communicates with 900-number
network 600 through telephone 395 over a standard telephone connection. In
this regard, those skilled in the art will appreciate that dedicated data
lines, cellular telephones, Personal Communication Systems ("PCS"),
microwave links, satellite systems, or any other direct or indirect
communication link may alternatively be used. The overall system
facilitates the purchase of information 450 on a data network 400 by
linking 900-number calls to the activation of codes necessary to retrieve
the information 450.
Referring now to FIG. 3, there is shown a block diagram of user system 300.
The end-user communicates with data network 400 via end-user computer 310,
which is preferably a conventional personal computer having a CPU 320,
input device 325 (e.g. a keyboard or mouse), one or more communication
ports 330, clock 340, video driver 345 connected to video monitor 350,
secure processor 355, RAM 360, ROM 365, and data storage device 370. Data
storage device 370 may be either fixed media (e.g., a hard disk) or a
drive capable of reading removable media (e.g., a floppy disk or CD-ROM).
Data storage device 370 may contain information storage 375, which is used
for storing information 450 retrieved from data network 400. Additionally,
an audit trail for information transactions may also be saved in audit
database 380. The audit trail can include a record of all information
purchases as well as any codes used during the process. This audit trail
is useful in the event of a disputed charge or disputed bill. Secure
storage 377 is used for any embodiment requiring secure storage of
messages or data at end-user computer 310. End user computer 310
communicates with data network 400 through communications port 330 and
modem 390 (or other communication device such as a network card or a
transmitter) to enable direct communications with data network 400.
FIG. 4 is a representative block diagram of the structure of data network
400, which is comprised of at least one information provider 410. In one
embodiment, data network 400 is the World Wide Web, with web pages
representing the various information providers 410. Data network 400 may
have a dedicated communications channel or data communications link with
access management computer 510 or 900 number network (billing network)
600. For a given information provider 410 there is at least one index of
information 420 which permits users to quickly find information 450. Much
like the table of contents of a journal, an index of information 420 might
list articles by topic, providing the author, price, size of file, etc. A
web page specializing in chess game databases, for example, might list the
names of ten chess grandmasters along with the number of games in each
database and the price for the information. Free samples of the
information may be included in the index of information 420. Each chess
game database might have two or three games provided free in order to give
a potential purchaser a better idea of the information that is being sold.
In addition to indexes of information 420, some sites may have indexes of
products 425 which describe goods available for sale. In the case of the
chess site, the index of products 425 might list chess books.
To obtain access to information 450, the end-user must pass through
information barrier 430. Information barrier 430 acts as a "toll-booth" at
information provider 410, and is analogous to password screens that
require a valid password to be inputted to obtain access to a computer. If
the proper code is entered, access is granted; otherwise the barrier
remains in place. Information barrier 430 determines whether the code is
valid by communicating with access management computer 510 over an open
channel of communication as described below.
In another embodiment, information barrier 430 itself may contain a code
generator capable of issuing codes directly to the end-user, thus
eliminating some of the communication between information barrier 430 and
access management computer 510. This code generator either retrieves a
predetermined code from a database or generates random codes. These codes
may then be transmitted to access management computer 510 for validation.
In yet another embodiment, information barrier 430 accepts digital
"tokens" in exchange for access to information 450.
FIG. 5 is a block diagram depicting access management system 500. This
system manages the communications between data network 400 and 900-number
network 600. Access management computer 510 could be a conventional
mainframe computer, workstation, or personal computer depending upon the
volume of transactions expected to be handled by the system. Access
management computer 510 includes CPU 520, communications port 530, clock
540, operating system 545, secure processor 555, RAM 560, ROM 565, and
data storage device 570. For high volume transaction processing a
relatively powerful microprocessor that has a wide data bus may be a used
as CPU 520. Typical of such processors are the Intel Pentium or the
Motorola PowerPC 604, which both employ a 32-bit data bus. The storage
device can be either fixed media (e.g., a hard disk) or a drive capable of
reading removable media (e.g., a floppy disk or CD-ROM). Data storage
device 570 is used to store the various databases needed in the system,
such as the code databases that track the codes necessary to manage the
information purchase process. The code databases include a session code
database 575 and purchase code database 577. Other stored databases
include a billing record database 580, token database 582, ANI database
584, and activation query database 586. Those skilled in the art will
understand that each of the databases may be relational to one another, or
that all of them may be combined into a single large database.
Session and purchase codes are generally described as a unique series of
digits, either retrieved from a database of predetermined codes or
generated at random, used to purchase information 450 or physical goods
40. Those skilled in the art will understand that there are some
variations to the structure of the codes in each embodiment of the
invention and they can range from a simple series of random digits to long
strings or groups of digits. Optionally, each group of digits may
represent a number of pieces of information including, but not limited to,
cost, product description, originating ANI, time/date, server ID number,
etc. The uniqueness of codes allows a high level of security. The code can
be limited to one-time access, making the broadcasting on the web of a
lost or stolen code useless. Thus, only the first user is able to use the
code, subsequent users of the same code will be denied access. This
uniqueness of codes also assures an easy and reliable method for auditing
of the 900-number service provider.
Session code database 575 stores codes used to purchase information 450. To
activate the codes, the end-user calls 900-number network 600 and enters
the requested code, which is then processed by access management computer | | |
