Citicorp Development Center, Inc.

Citibank Development Center, Inc.

Citicorp Credit Services, Inc. (usa)

Transaction Technology Inc.

Citibank, N.a.

Michael L Grandcolas

Leslie C Moss

Teresa A Petach

Peter Tompkins

Patrick Law

Wendell W Anthony

Albert E Cohen

Dilip Parekh

Grigor Markarian

James Cook

Nik Boyd

James Zeanah

Charles Abbott

Bonnie Lindsley

Thomas Yee

Ashwin Doshi

Marc Guzman

Michael L Sears

Nigel Pinnell

Howard A Schechtman

Sikun Lan

Stephen M Gryte

Nancy Bryant

Irina Koryakovtseva

Yongqiang Chen

Sikhun Lan

Lucilla Warren

Sam Shahdousti

Jennifer Vos

Paul Sidikman

John Riblett

Simon Khilkevich

Chris Kowalski

Rajashree Karwa

Yonggiang Chen

Naresh Vyas

Jeremy Dimond

Robert A Herrig

France Law

Avinash Kharul

Michael Williams

Yeona Jang

Toni Merschen

Mike Mast

Amit Chitnis

Jack Pan

Alan Young

Ravin Vernekar

Valerie Fenster

Paul Witman

Alex J Virnig

Patricia Millo

Walter Greenberg

Steve Shulman

Howard Schechtman

Mark Bitter

Marvin Moskowitz

Frank McCallick

Randy Cole

Paul Blumstein

Ted Krawiec

Gene Stolarov

Farah Khalili

Greg Johnson

A method and system for implementing on-line financial institution services via a single physical and logical platform deploys global online banking applications in an environment in which the applications are built from a single source base and adapted to various business rules and languages associated with different regions, countries and businesses. Separate web apps are created for each individual business according to contextual attributes, and application servers running the context dependent web apps provide the interface between customers and banking functionality. The platform relies in part on reuse of appropriate components to achieve integration, as well as sharing of core services. As a result of the independent nature of business specific components, each business may require different versions of application software and may update or implement new components without affecting existing business components.

Methods and systems for implementing on-line financial institution services via a single platform

A method and system automatically harmonizes access to a given software application program via different access devices. The financial institution receives information from the user via the user's access device, including information identifying the type of device being used and the application program the user wishes to access. The application program is then accessed and the information to be displayed to the user is identified. This information is automatically translated into a format which is compatible with the device, including its display, and sent to the device for display. The user, in turn, inputs information in response to the displayed information and this input information is automatically translated into a format which is compatible with the application program and is sent to the application program. The response generated by the application program is automatically translated to be compatible with the device and is sent to the device.

Method and system for automatically harmonizing access to a software application program via different access devices

A financial institution can provide financial services to a plurality of remote devices, such as personal computers, personal data assistants, screen phones, automatic teller machines, external service providers, and internally to staff terminals and individual branches. By separating the components of the system into independent components, the system and method can be developed and tested on a component level rather than the entire system level, thereby reducing the development and maintenance cycle time. The system and method operate in sessions and can employ a dialog component for gathering information from a customer, a rule broker component for providing answers to the various legal and regulatory rules in a particular country, a language man component for selecting appropriate language, a transaction executor component for performing transactions, and a presentation manager component for formatting outputs to the customer.

Delivering financial services to remote devices

A method and system for securely logging onto a banking system authentication server so that a user credential never appears in the clear during interaction with the system in which a user's credential is DES encrypted, and the DES key is PKI encrypted with the public key of an application server by an encryption applet before being transmitted to the application server. Within the HSM of the application server, the HSM decrypts and re-encrypts the credential under a new DES key known to the authentication server, the re-encrypted credential is forwarded to the authentication server, decrypted with the new DES key known to the authentication server, and verified by the authentication server.

Method and system for secure authentication of a user by a host system

A delivery system and method allow a financial institution to provide financial services to a plurality of remote devices. The system is comprised of a set of re-usable global components which are modular and are organized into services sets. The system and method operate in sessions and, for instance, employ a dialog component for gathering information from a customer, a rule broker component for providing answers to the various legal and regulatory rules in a particular country, a language man component for selecting appropriate language, a transaction executor component for performing transactions, and a presentation manager component for formatting outputs to the customer. The system and method provide state-of-the art interfaces that can be configured and delivered to the customer in a globally consistent format that is based on the customer's account profile, various languages, various currencies, different legal regulatory requirements, as well as, different sets of business products.

System and method for delivering financial services

Methods and systems for secure authentication of a user by a host system

A method and system automatically harmonizes access to a given software application program via different access devices. Through use of the method and system, a financial institution can provide access to a given application (such as, for example, automatic bill payment services) to customers using different access devices such web browsers, screen phones and personal computers. A single application program is all that needs to be written and maintained by the financial institution. Also, the method and system enables financial institutions to 'leverage' existing programs because now the institution can automatically 'project' its existing stock of program services unto new access devices&#x2014;devices which may not have even existed at the time the program was created. By receiving information from the user via the user's access device, including information identifying the type of device being used and the application program the user wishes to access, the present invention solves these problems. The application program is then accessed and the information to be displayed to the user is identified. This information is automatically translated into a format which is compatible with the device, including its display, and sent to the device for display. The user, in turn, inputs information in response to the displayed information and this input information is automatically translated into a format which is compatible with the application program and is sent to the application program. The response generated by the application program is automatically translated to be compatible with the device and is sent to the device.

A computer-implemented method and system for secure user authentication in electronic commerce involves maintaining electronic information having a first aspect that is accessible over a first electronic communication channel in response to entry of a first credential known to the user and a second aspect that is accessible by the user over the first electronic communication channel in response to entry of a second credential provided to the user at a pre-registered delivery address on a second electronic communication channel. The second credential is provided to the user via the second electronic communication channel in response to entry of a pre-determined user selection during a current session of user access to the first aspect if no change has occurred in the pre-registered delivery address within a pre-determined period of time, and the user is allowed a session of access to the second aspect in response to entry of the second credential either during the current session of user access to the first aspect or during a succeeding session of user access to the first aspect.

Methods and systems for secure user authentication

A method and system for securely logging onto a banking system authentication server so that a user credential never appears in the clear during interaction with the system in which during a log on process, an encryption applet and the public key of a public/private key pair of a banking application server, the private key for which is known by a hardware security module (HSM) of the banking application, are downloaded by a user's browser. The applet contains code for generating a DES key and performing DES and PKI encryption. A user's credential is DES encrypted, and the DES key is PKI encrypted with the public key of the application server by the applet before being transmitted to the application server. Within the HSM of the application server, the HSM decrypts and re-encrypts the credential under a new DES key known to the authentication server, the re-encrypted credential is forwarded to the authentication server, decrypted with the new DES key known to the authentication server, and verified by the authentication server.

A delivery system and method allow a financial institution to provide financial services to a plurality of remote devices and internally within the financial institution to staff terminals using a set of re-usable global components which are modular and are organized into services sets. The system and method operate in sessions and, for instance, employ a dialog component for gathering information from a customer, a rule broker component for providing answers to the various legal and regulatory rules in a particular country, a language man component for selecting appropriate language, a transaction executor component for performing transactions, and a presentation manager component for formatting outputs to the customer. The system and method provide interfaces which can be configured and delivered to the customer in a globally consistent format that is based on the customer's account profile, various languages, various currencies, different legal regulatory requirements, as well as, different sets of business products.

Delivery of financial services to remote devices

Growing community of inventors

Santa Monica, CA, United States of America

Michael L Grandcolas