US 9,400,979 Transactional security over a network
3 defendants · 3 suits · updated October 9, 2026
Also cited as U.S. Patent No. 9,400,979 · US9400979B2 · US 9,400,979 B2 · 9400979 · the '979 patent
BenedorTSE, LLC has filed 3 patent-infringement suits on US 9,400,979, "Transactional security over a network" since August 24, 2026, 2 of them in the M.D. Tenn., against 3 distinct defendants including Benedortse LLC, Amazon.com Services LLC and JPMorgan Chase Bank, N.A.. The patent was granted July 26, 2016 on a priority date of December 1, 2000. Its abstract opens: "A system and method facilitating purchase transactions over a computer network, including the purchase of electronically storable items." The examiner cited 5 references during prosecution.
- Assignee
- Benedortse LLC
- Priority date
- December 1, 2000
- Granted
- July 26, 2016
- Expires
- December 1, 2020
- Status
- Expired - Fee Related
- Claims
- 30 (5 independent)
- Inventors
- Richard F. Carrott
- Full text
- Google Patents
The suits
3 cases · M.D. Tenn. (2) · N.D. Ala. (1)
| Filed | Defendant | Plaintiff | Court | Docket |
|---|---|---|---|---|
| 2026-08-24 | Benedortse LLCDJ | Regions Bank | N.D. Ala. | 2:26-cv-01504 |
| 2026-09-11 | Amazon.com Services LLC | BenedorTSE, LLC | M.D. Tenn. | 3:26-cv-01303 |
| 2026-09-18 | JPMorgan Chase Bank, N.A. | BenedorTSE, LLC | M.D. Tenn. | 3:26-cv-01340 |
Docket links open the public record on CourtListener. Filing dates are the complaint's.
Independent claims
What is actually asserted, verbatim.
1. A method comprising: receiving, into a graphic user interface of a computerized device, an entered password from a user; determining, by a processor of said computerized device, whether said entered password is valid; based on said password being valid, reading, by said processor, a hardware identifier from hardware of said computerized device; determining, by said processor, whether said hardware identifier is valid; based on at least one of said password being valid and said hardware identifier being valid, retrieving, by said processor, a user agreement identifier that identifies said user from a storage media of said computerized device; creating, by said processor, an encrypted user code by encrypting said user agreement identifier and said hardware identifier; transmitting, by an input and output device of said computerized device, said encrypted user code to a provider in a transaction request for a transaction authorization decision over a computer network; and receiving, by said user, performance of said transaction request from said provider, based on said transaction authorization decision approving said transaction request.
7. A method comprising: receiving, into a graphic user interface of a computerized device, an entered password from a user; determining, by a processor of said computerized device, whether said entered password is valid based on whether said entered password matches at least one permitted password; based on said password being valid, reading, by said processor, a hardware identifier from hardware of said computerized device; determining, by said processor, whether said hardware identifier is valid based on whether said hardware identifier matches at least one permitted hardware identifier; based on said hardware identifier being valid, retrieving, by said processor, a user agreement identifier from a storage media of said computerized device, said user agreement identifier identifying said user; creating, by said processor, an encrypted user code by encrypting said user agreement identifier and said hardware identifier, each said encrypted user code being valid only for a single request for an authorization decision; transmitting, by an input and output device of said computerized device, said encrypted user code to a provider in a transaction request for a transaction authorization decision over a computer network, said encrypted user code being sent by said provider to a verification entity for said transaction authorization decision; receiving, by said input and output device, said transaction authorization decision from said provider; and receiving, by said user, performance of said transaction request from said provider, based on said transaction authorization decision approving said transaction request.
13. A method comprising: receiving, into a graphic user interface of a computerized device, an entered password from a user; determining, by a processor of said computerized device, whether said entered password is valid; based on said password being valid, reading, by said processor, a hardware identifier from hardware of said computerized device; determining, by said processor, whether said hardware identifier is valid based on whether said hardware identifier matches at least one permitted hardware identifier; based on at least one of said password being valid and said hardware identifier being valid, retrieving, by said processor, a user identifier that identifies said user from a storage media of said computerized device; creating, by said processor, an encrypted user code by encrypting said user identifier and said hardware identifier; transmitting, by an input and output device of said computerized device, said encrypted user code to a provider in a transaction request for a transaction authorization decision over a computer network, said encrypted user code being sent by said provider to a verification entity for said transaction authorization decision; receiving, by said input and output device, said transaction authorization decision from said provider; and receiving, by said user, performance of said transaction request from said provider, based on said transaction authorization decision approving said transaction request.
19. A method comprising: reading, by a processor, a hardware identifier from hardware of a computerized device; determining, by said processor, whether said hardware identifier is valid; based on said hardware identifier being valid, retrieving, by said processor, a user agreement identifier that identifies a user from a storage media of said computerized device; creating, by said processor, an encrypted user code by encrypting said user agreement identifier and said hardware identifier; transmitting, by an input and output device of said computerized device, said encrypted user code to a provider in a transaction request for a transaction authorization decision over a computer network; receiving, by said input and output device, said transaction authorization decision from said provider; and receiving, by said user, performance of said transaction request from said provider, based on said transaction authorization decision approving said transaction request.
25. A method comprising: reading, by a processor, a hardware identifier from hardware of a computerized device; determining, by said processor, whether said hardware identifier is valid; based on said hardware identifier being valid, retrieving, by said processor, a user agreement identifier from a storage media of said computerized device, said user agreement identifier identifying an agreement between a user and a verification entity; creating, by said processor, an encrypted user code by encrypting said user agreement identifier and said hardware identifier, each said encrypted user code being valid only for a single request for an authorization decision; transmitting, by an input and output device of said computerized device, said encrypted user code to a provider in a transaction request for a transaction authorization decision over a computer network, said encrypted user code being sent by said provider to said verification entity for said transaction authorization decision; and receiving, by said user, performance of said transaction request from said provider, based on said transaction authorization decision approving said transaction request.
Art before the examiner
36 references of record, 5 cited by the examiner.
Everything listed here was before the Office and is what a challenge must go beyond. Art the examiner never saw is where an invalidity search starts.
Examiner-cited
- US20040117664A1 — Apparatus for establishing a connectivity platform for digital rights management (Z4 Technologies, Inc.)
- US20060200855A1 — Electronic verification systems (Willis Taun E)
- US20070079136A1 — Methods and systems for using data processing systems in order to authenticate parties (Sbc Knowledge Ventures, Lp)
- US20080137861A1 — Security Code Production Method and Methods of Using the Same, and Programmable Device Thereof (Encap As)
- US7895443B2 — Secure authentication using hardware token and computer fingerprint (Safenet, Inc.)
Applicant-cited and other (31)
- US5398285A — Method for generating a password using public key cryptography
- EP0773490A1 — Security system for protecting information stored in storage media
- US5809160A — Method for encoding auxiliary data within a source signal
- WO1998040809A2 — Method and system for secure online transaction processing
- US5892900A — Systems and methods for secure transaction management and electronic rights protection
- US6000832A — Electronic online commerce card with customer generated transaction proxy number for online transactions
- US6078902A — System for transaction over communication network
- US6119946A — Countable electronic monetary system and method
- WO2001052212A1 — Secure electronic commerce system
- WO2001075744A1 — Method of and system for effecting anonymous credit card purchases over the internet
- US6512840B1 — Digital encoding of personal signatures
- US20030028481A1 — Credit card system and method
- WO2003063055A2 — Generation and verification of a digitized signature
- US20030161473A1 — Method and system to securely distribute content via a network
- US6618705B1 — Method and system for conducting business in a transnational e-commerce network
- US20030177093A1 — Data management method
- US6691229B1 — Method and apparatus for rendering unauthorized copies of digital content traceable to authorized copies
- US6865550B1 — System for secure distribution and playback of digital data
- EP1517215A2 — Adaptable security mechanism for preventing unauthorized access of digital data
- US6920565B2 — Method and system for providing secure digital music duplication
- US6947908B1 — System and use for correspondent banking
- US7051002B2 — Universal merchant platform for payment authentication
- US7062069B2 — Digital watermark embedding and decoding using encryption keys
- US7140036B2 — Centralized identity authentication for electronic communication networks
- US20070061580A1 — A License-Based Cryptographic Technique, Particularly Suited For Use In A Digital Rights Management System, For Controlling Access And Use Of Bore Resistant Software Objects In A Client Computer
- US7251326B2 — Method and apparatus for data encryption
- US7257225B2 — System and method for high speed reversible data encryption
- US20070288394A1 — Transactional security over a network
- US7386516B2 — System and method for providing secure services over public and private networks using a removable portable computer-readable storage
- US20080222046A1 — Method of and system for effecting anonymous credit card purchases over the internet
- US8019688B2 — Music distribution system and associated antipiracy protections
Classification
- G06Q20/38215primary — Use of certificates or encrypted proofs of transaction rights
- G06Q20/02 — Payment architectures, schemes or protocols involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
- G06Q20/12 — Payment architectures specially adapted for electronic shopping systems
- G06Q20/123 — Shopping for digital content
- G06Q20/382 — Payment protocols; Details thereof insuring higher security of transaction
- G06Q20/3821 — Electronic credentials
- G06Q20/3823 — Payment protocols; Details thereof insuring higher security of transaction combining multiple encryption tools for a transaction
- G06Q20/40 — Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q20/401 — Transaction verification
- G06Q20/4014 — Identity check for transactions
- G06Q30/0603 — Catalogue creation or management
- G06Q40/00 — Finance; Insurance; Tax strategies; Processing of corporate or income taxes
- H04L2209/56 — Financial cryptography, e.g. electronic payment or e-cash
- H04L9/3226 — Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using a predetermined code, e.g. password, passphrase or PIN
- H04L9/3297 — Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving time stamps, e.g. generation of time stamps
Family
- US9400979B2 — B2 (2016)
- US8463713B2 — B2 (2013)
- US20120296831A1 — A1 (2012)
- US8260723B2 — B2 (2012)
- US20130246282A1 — A1 (2013)
- US20080319914A1 — A1 (2008)
- 1 foreign family member: WO2010027657A1
Abstract
A system and method facilitating purchase transactions over a computer network, including the purchase of electronically storable items. The embodiments herein encrypt “customer identifier string” in an encryption stream and cause the encryption stream to be transferred from the customer to a merchant in the purchase transaction. A verification entity receives the encryption stream which is sent by the merchant for identity verification and payment authorization. Then, the verification entity verifies the identifiers contained in the encryption stream and transfers an identity verification and payment authorization from the verification entity to the merchant.
Also asserted by BenedorTSE, LLC
- US 8,260,723 — Transactional security over a network (3 defendants)
- US 8,463,713 — Transactional security over a network (3 defendants)
Named in one of these suits? A prior-art search is commissioned once and serves every defendant who shares it. The examiner's own search record is free on the tools page, and your first preliminary search is free — one claim, back within 24 hours — so you know whether there is art the Office never saw before anyone pays for more. Flat fees: $2,500$899 for the independent claims, $5,000$1,500 for every asserted claim.
This page is assembled from public records — federal court dockets and the patent's own file — and is updated as the case list changes. It states what the record shows and is not an opinion on the validity or infringement of any claim. Patent data via Google Patents; docket data via CourtListener.