US 8,463,713 Transactional security over a network

3 defendants · 3 suits · updated October 9, 2026

Also cited as U.S. Patent No. 8,463,713 · US8463713B2 · US 8,463,713 B2 · 8463713 · the '713 patent

BenedorTSE, LLC has filed 3 patent-infringement suits on US 8,463,713, "Transactional security over a network" since August 24, 2026, 2 of them in the M.D. Tenn., against 3 distinct defendants including Benedortse LLC, Amazon.com Services LLC and JPMorgan Chase Bank, N.A.. The patent was granted June 11, 2013 on a priority date of December 1, 2000. Its abstract opens: "A system and method facilitating purchase transactions over a computer network, including the purchase of electronically storable items." The examiner cited 24 references during prosecution.

Assignee: Benedortse LLC
Priority date: December 1, 2000
Granted: June 11, 2013
Expires: December 1, 2020
Status: Expired - Fee Related
Claims: 36 (6 independent)
Inventors: Richard F. Carrott
Full text: Google Patents

The suits

3 cases · M.D. Tenn. (2) · N.D. Ala. (1)

Filed	Defendant	Plaintiff	Court	Docket
2026-08-24	Benedortse LLCDJ	Regions Bank	N.D. Ala.	2:26-cv-01504
2026-09-11	Amazon.com Services LLC	BenedorTSE, LLC	M.D. Tenn.	3:26-cv-01303
2026-09-18	JPMorgan Chase Bank, N.A.	BenedorTSE, LLC	M.D. Tenn.	3:26-cv-01340

Docket links open the public record on CourtListener. Filing dates are the complaint's.

Independent claims

What is actually asserted, verbatim.

Claim 1

1. A method comprising: when establishing an account: establishing an agreement between a user and a verification entity; creating, by said verification entity, a user agreement identifier that identifies said agreement and identifies said user; downloading a software application from said verification entity and said user agreement identifier over a computer network to an input and output device of a computerized device associated with said user; using, by a processor of said computerized device, said software application to store at least one permitted password, at least one user identifier string, permitted hardware identifiers, and said agreement identifier in a storage media of said computerized device; and using, by said processor, said software application to transmit said user identifier string, said permitted hardware identifiers, and personal payment information of said user to said verification entity; and when requesting an authorization decision: receiving, into a graphic user interface of said computerized device, an entered password; determining, by said processor, whether said entered password is valid based on whether said entered password matches said at least one permitted password; based on said password being valid, reading, by said processor, a hardware identifier from hardware of said computerized device; determining, by said processor, whether said hardware identifier is valid based on whether said hardware identifier matches one of said permitted hardware identifiers; based on said hardware identifier being valid, retrieving, by said processor, said user agreement identifier from said storage media of said computerized device; creating, by said processor, an encrypted user code by encrypting said user agreement identifier and said hardware identifier, each said encrypted code being valid only for a single request for an authorization decision; causing, by said processor, said encrypted user code to be devoid of said personal payment information of said user; transmitting, by said input and output device of said computerized device, said encrypted user code to a provider in a request for an authorization decision over a computer network, said encrypted user code being sent by said provider to said verification entity for an authorization decision; and receiving, by said input and output device, said authorization decision from said provider.

Claim 7

7. A method comprising: when establishing an account: storing at least one permitted password, at least one user identifier string, permitted hardware identifiers, and a user agreement identifier that identifies an agreement between a user and a verification entity in a storage media of an computerized device operated by said user; and transmitting said user identifier string, said permitted hardware identifiers, and personal payment information of said user to said verification entity, using an input and output device of said computerized device; and when requesting an authorization decision: receiving, into a graphic user interface of said computerized device, an entered password; determining, by a processor, whether said entered password is valid based on whether said entered password matches said at least one permitted password; based on said password being valid, reading, by said processor, a hardware identifier from hardware of said computerized device; determining, by said processor, whether said hardware identifier is valid based on whether said hardware identifier matches one of said permitted hardware identifiers; based on said hardware identifier being valid, retrieving, by said processor, said user agreement identifier from said storage media of said computerized device; creating, by said processor, an encrypted user code by encrypting said user agreement identifier and said hardware identifier, each said encrypted code being valid only for a single request for an authorization decision; transmitting, by said input and output device of said computerized device, said encrypted user code to a provider in a request for an authorization decision over a computer network, said encrypted user code being sent by said provider to said verification entity for an authorization decision; and receiving, by said input and output device, said authorization decision from said provider.

Claim 13

13. A method comprising: receiving, into a graphic user interface of a computerized device, an entered password from a user; determining, by a processor, whether said entered password is valid based on whether said entered password matches at least one permitted password; based on said password being valid, reading, by said processor, a hardware identifier from hardware of said computerized device; determining, by said processor, whether said hardware identifier is valid based on whether said hardware identifier matches at least one permitted hardware identifier; based on said hardware identifier being valid, retrieving, by said processor, a user agreement identifier from a storage media of said computerized device, said user agreement identifier identifying an agreement between said user and a verification entity; creating, by said processor, an encrypted user code by encrypting said user agreement identifier and said hardware identifier, each said encrypted code being valid only for a single request for an authorization decision; transmitting, by an input and output device of said computerized device, said encrypted user code to a provider in a request for an authorization decision over a computer network, said encrypted user code being sent by said provider to said verification entity for an authorization decision; and receiving, by said input and output device, said authorization decision from said provider.

Claim 19

19. A method comprising: receiving, into a graphic user interface of a computerized device, an entered password from a user; determining, by a processor of said computerized device, whether said entered password is valid based on whether said entered password matches at least one permitted password stored in storage media of said computerized device; based on said password being valid, reading, by said processor, a hardware identifier from hardware of said computerized device; determining, by said processor, whether said hardware identifier is valid based on whether said hardware identifier matches a permitted hardware identifier stored in said storage media; based on said hardware identifier being valid, retrieving, by said processor, a user agreement identifier from said storage media, said agreement identifier identifying an agreement between said user and a verification entity; based on said hardware identifier being valid, incrementing a count value to produce a different count value each time said count value is incremented, using said processor; creating, by said processor, an encrypted code by encrypting said count value, said user agreement identifier, and said hardware identifier, each said encrypted code being valid only for a single request for an authorization decision; transmitting, by an input and output device of said computerized device, said encrypted code to a provider in an request for an authorization decision over a computer network, said encrypted code being sent by said provider to said verification entity for an authorization decision; and receiving, by said input and output device, said authorization decision from said provider, said authorization decision comprising a consent between said user and said provider through operation of said agreement between said user and said verification entity.

Claim 25

25. A non-transitory computer readable storage medium readable by a computerized device, said non-transitory computer readable storage medium storing instructions executable by said computerized device to perform a method comprising: when establishing an account: storing at least one permitted password, at least one user identifier string, permitted hardware identifiers, and a user agreement identifier that identifies an agreement between a user and a verification entity in a storage media of an computerized device operated by said user; and transmitting said user identifier string, said permitted hardware identifiers, and personal payment information of said user to said verification entity, using an input and output device of said computerized device; and when requesting an authorization decision: receiving, into a graphic user interface of said computerized device, an entered password; determining, by a processor, whether said entered password is valid based on whether said entered password matches said at least one permitted password; based on said password being valid, reading, by said processor, a hardware identifier from hardware of said computerized device; determining, by said processor, whether said hardware identifier is valid based on whether said hardware identifier matches one of said permitted hardware identifiers; based on said hardware identifier being valid, retrieving, by said processor, said user agreement identifier from said storage media of said computerized device; creating, by said processor, an encrypted user code by encrypting said user agreement identifier and said hardware identifier, each said encrypted code being valid only for a single request for an authorization decision; transmitting, by said input and output device of said computerized device, said encrypted user code to a provider in a request for an authorization decision over a computer network, said encrypted user code being sent by said provider to said verification entity for an authorization decision; and receiving, by said input and output device, said authorization decision from said provider.

Claim 31

31. A computerized device comprising: a non-transitory storage media device storing at least one permitted password, at least one user identifier string, permitted hardware identifiers, and a user agreement identifier that identifies an agreement between a user operating said computerized device and a verification entity; and an input and output device operatively connected to said storage media device, said input and output device transmitting said user identifier string, said permitted hardware identifiers, and personal payment information of said user to said verification entity; a graphic user interface operatively connected to said storage media device, said graphic user interface receiving an entered password from said user; and a processor operatively connected to said storage media device, said processor determining whether said entered password is valid based on whether said entered password matches said at least one permitted password, based on said password being valid, said processor reading a hardware identifier from hardware of said computerized device, said processor determining whether said hardware identifier is valid based on whether said hardware identifier matches one of said permitted hardware identifiers, based on said hardware identifier being valid, said processor retrieving said user agreement identifier from said storage media of said computerized device, said processor creating an encrypted user code by encrypting said user agreement identifier and said hardware identifier, said input and output device transmitting said encrypted user code to a provider in a request for an authorization decision over a computer network, said encrypted user code being sent by said provider to said verification entity for an authorization decision, and said input and output device receiving said authorization decision from said provider.

Art before the examiner

29 references of record, 24 cited by the examiner.

Everything listed here was before the Office and is what a challenge must go beyond. Art the examiner never saw is where an invalidity search starts.

Examiner-cited

US5398285A — Method for generating a password using public key cryptography (Motorola, Inc.)
US5809160A — Method for encoding auxiliary data within a source signal (Digimarc Corporation)
US5892900A — Systems and methods for secure transaction management and electronic rights protection (Intertrust Technologies Corp.)
US6000832A — Electronic online commerce card with customer generated transaction proxy number for online transactions (Microsoft Corporation)
US6078902A — System for transaction over communication network (Nush-Marketing Management & Consultance)
US6119946A — Countable electronic monetary system and method (Cardis Enterprise International N.V.)
US6512840B1 — Digital encoding of personal signatures (Sun Microsystems, Inc.)
US20030028481A1 — Credit card system and method (Orbis Patents, Ltd.)
US20030161473A1 — Method and system to securely distribute content via a network (Fransdonk Robert W.)
US6618705B1 — Method and system for conducting business in a transnational e-commerce network (Tiejun (Ronald) Wang)
US20030177093A1 — Data management method (Fujitsu Limited)
US6691229B1 — Method and apparatus for rendering unauthorized copies of digital content traceable to authorized copies (Matsushita Electric Industrial Co., Ltd.)
US6865550B1 — System for secure distribution and playback of digital data (Eastman Kodak Company)
US6920565B2 — Method and system for providing secure digital music duplication (Iomega Corporation)
US7051002B2 — Universal merchant platform for payment authentication (Cardinalcommerce Corporation)
US7062069B2 — Digital watermark embedding and decoding using encryption keys (Digimarc Corporation)
US7140036B2 — Centralized identity authentication for electronic communication networks (Cardinalcommerce Corporation)
US20070061580A1 — A License-Based Cryptographic Technique, Particularly Suited For Use In A Digital Rights Management System, For Controlling Access And Use Of Bore Resistant Software Objects In A Client Computer (Microsoft Corporation)
US7251326B2 — Method and apparatus for data encryption (Harris Corporation)
US7257225B2 — System and method for high speed reversible data encryption (American Express Travel Related Services Company, Inc.)
US20070288394A1 — Transactional security over a network (Carrott Richard F)
US7386516B2 — System and method for providing secure services over public and private networks using a removable portable computer-readable storage (Metavante Corporation)
US20080222046A1 — Method of and system for effecting anonymous credit card purchases over the internet (Incogno Corporation)
US8019688B2 — Music distribution system and associated antipiracy protections (Ochoa Optics Llc)

Applicant-cited and other (5)

EP0773490A1 — Security system for protecting information stored in storage media
WO1998040809A2 — Method and system for secure online transaction processing
WO2001052212A1 — Secure electronic commerce system
WO2003063055A2 — Generation and verification of a digitized signature
EP1517215A2 — Adaptable security mechanism for preventing unauthorized access of digital data

Classification

G06Q20/38215primary — Use of certificates or encrypted proofs of transaction rights
G06Q20/401primary — Transaction verification
G06Q20/02 — Payment architectures, schemes or protocols involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
G06Q20/12 — Payment architectures specially adapted for electronic shopping systems
G06Q20/123 — Shopping for digital content
G06Q20/382 — Payment protocols; Details thereof insuring higher security of transaction
G06Q20/3821 — Electronic credentials
G06Q20/3823 — Payment protocols; Details thereof insuring higher security of transaction combining multiple encryption tools for a transaction
G06Q20/40 — Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
G06Q20/4014 — Identity check for transactions
G06Q30/0603 — Catalogue creation or management
G06Q40/00 — Finance; Insurance; Tax strategies; Processing of corporate or income taxes
H04L2209/56 — Financial cryptography, e.g. electronic payment or e-cash
H04L9/3226 — Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using a predetermined code, e.g. password, passphrase or PIN
H04L9/3297 — Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving time stamps, e.g. generation of time stamps

Family

US8463713B2 — B2 (2013)
US9400979B2 — B2 (2016)
US20120296831A1 — A1 (2012)
US8260723B2 — B2 (2012)
US20130246282A1 — A1 (2013)
US20080319914A1 — A1 (2008)
1 foreign family member: WO2010027657A1

Abstract

A system and method facilitating purchase transactions over a computer network, including the purchase of electronically storable items. The embodiments herein encrypt “customer identifier string” in an encryption stream and cause the encryption stream to be transferred from the customer to a merchant in the purchase transaction. A verification entity receives the encryption stream which is sent by the merchant for identity verification and payment authorization. Then, the verification entity verifies the identifiers contained in the encryption stream and transfers an identity verification and payment authorization from the verification entity to the merchant.

Also asserted by BenedorTSE, LLC

US 8,260,723 — Transactional security over a network (3 defendants)
US 9,400,979 — Transactional security over a network (3 defendants)

Named in one of these suits? A prior-art search is commissioned once and serves every defendant who shares it. The examiner's own search record is free on the tools page, and your first preliminary search is free — one claim, back within 24 hours — so you know whether there is art the Office never saw before anyone pays for more. Flat fees: $2,500$899 for the independent claims, $5,000$1,500 for every asserted claim.

Order a free preliminary search → How much prior art does an IPR petition need?

This page is assembled from public records — federal court dockets and the patent's own file — and is updated as the case list changes. It states what the record shows and is not an opinion on the validity or infringement of any claim. Patent data via Google Patents; docket data via CourtListener.