. . . "According to the present invention, only a limited number of entities (and preferably only one such entity) holds the Web customer's personal and/or financial information, such as bank account numbers and credit/charge card numbers." .