A method, system, program, and method of doing business are disclosed for electronic commerce that includes the feature of a “thin” consumer's wallet by providing issuers with an active role in each payment. This is achieved by adding an issuer gateway and moving the credit/debit card authorization function from the merchant to the issuer. This enables an issuer to independently choose alternate authentication mechanisms without changing the acquirer gateway. It also results in a significant reduction in complexity, thereby improving the ease of implementation and overall performance.

PTO Wrapper PDF
Dossier Espace Google
Patent
   RE40444
Priority
Dec 29 1998
Filed
Jul 17 2003
Issued
Jul 29 2008
Expiry
Dec 29 2018
Inventors
Linehan, M…
Assg.orig
Internatio…
Assg.curr
PayPal, Inc
Entity
Large
Referenced by
262
References
39
Maint.:
all paid

REINSTATED
0. 59. A method of operating a four party payment protocol in accordance with a computer of a merchant, the method comprising the steps of:
sending a message from the merchant computer to a computer of a consumer with which the merchant computer is engaging in a transaction, the merchant message comprising a wallet initiation message, the wallet initiation message comprising a payment amount, an order description, a merchant identifier and a timestamp, wherein the merchant message is sent to a gateway associated with an issuing bank, via the consumer computer, along with information associated with the consumer computer;
receiving at the merchant computer an authorization token sent by the gateway after the gateway has verified an account of the consumer and ensured that at least one of funds and credit support the payment amount, the authorization token comprising the payment amount, the order description, the merchant identifier, the timestamp, and a reference number, the reference number having been created by the issuing bank and representing a credit card number or a debit card number and corresponding reference numbers wherein consumer's card number is paired with the reference number;
initiating fulfillment of the order description at the merchant computer; and
sending from the merchant computer to an acquirer bank, a capture request message comprising the reference number,
wherein the acquirer bank captures the transaction and disburses payment to the merchant; and further
wherein the issuing bank, in response to a message from the acquirer bank, converts the reference number into the consumer's credit or debit card number and applies the payment amount to a balance in the account of the consumer.
0. 85. A method of operating a four party payment protocol in accordance with a computer of a merchant, the method comprising the steps of:
sending a message from the merchant computer to a computer of a consumer with which the merchant computer is engaging in a transaction, the merchant message comprising a wallet initiation message, the wallet initiation message comprising a payment amount, an order description, a merchant identifier and a timestamp, wherein the merchant message is sent to a gateway associated with an issuing bank, via the consumer computer, along with information associated with the consumer computer;
receiving at the merchant computer an authorization token sent by the gateway after the gateway has verified an account of the consumer and ensured that at least one of funds and credit support the payment amount, the authorization token comprising the payment ampunt, the order description, the merchant identifier, the timestamp, and a reference number, the reference number having been created by the issuing bank and representing a credit card number or a debit card number and corresponding reference numbers wherein the consumer's card number is paired with the reference number;
initiating fulfillment of the order description at the merchant computer; and
sending from the merchant computer to an acquirer bank, a capture request message comprising the reference number,
wherein the acquirer bank captures the transaction and disburses payment to the merchant; and further
wherein the issuing bank, in response to a message from the acquirer bank, converts the reference number into the consumer's credit or debit card number and applies the payment amount to a balance in the account of the consumer.
0. 55. A method of operating a four party payment protocol in accordance with a gateway associated with an issuing bank, the method comprising the steps of:
receiving at the gateway, from a computer of a consumer, information associated with the consumer computer and a merchant message from a computer of a merchant with which the consumer is engaging in a transaction, the merchant message comprising a wallet initiation message comprising a payment amount, an order description, a merchant identifier and a timestamp;
receiving at the gateway, from the issuing bank, a reference number, the reference number having been created by the issuing bank and representing a credit card number or a debit card number of the consumer, the issuing bank maintaining a table of credit card numbers or debit card numbers and corresponding reference numbers wherein the consumer's card number is paired with the reference number;
verifying at the gateway an account of the consumer and ensuring that at least one of funds and credit support the payment; and
authorizing payment by sending an authorization token, the authorization token comprising the payment amount, the order description, the merchant identifier, the timestamp, and the reference number, wherein the merchant's computer receives the authorization token, initiates fulfillment of the order description, and sends a capture request message comprising the reference number, to an acquirer bank;
wherein the acquirer bank captures the transaction and disburses payment to the merchant; and further
wherein the issuing bank, in response to a message from the acquirer bank, converts the reference number into the consumer's credit or debit card number and applies the payment amount to a balance in the account of the consumer.
0. 81. A method of operating a four party payment protocol in accordance with a gateway associated with an issuing bank, the method comprising the steps of:
receiving at the gateway, from a computer of a consumer, information associated with the consumer computer and a merchant message from a computer of a merchant with which the consumer is engaging in a transaction, the merchant message comprising a wallet initiation message comprising a payment amount, an order description, a merchant identifier and a timestamp;
receiving at the gateway, from the issuing bank, a reference number, the reference number having been created by the issuing bank representing a credit card number or a debit card number of the consumer, the issuing bank maintaining a mapping of credit card numbers or debit card numbers and corresponding reference numbers wherein the consumer's card number is paired with the reference number;
verifying at the gateway an account of the consumer and ensuring that at least one of funds and credit support the payment amount; and
authorizing payment by sending an authorization token, the authorization token comprising the payment amount, the order description, the merchant identifier, the timestamp, and the reference number, wherein the merchant's computer receives the authorization token initiates fulfillment of the order description, and sends a capture request message comprising the reference number, to an acquirer bank;
wherein the acquirer bank captures the transaction and disburses payment to the merchant; and further
wherein the issuing bank, in response to a message from the acquirer bank, converts the reference number into the consumer's credit or debit card number and applies the payment amount to a balance in the account of the consumer.
0. 80. A method of providing at least a part of a four party payment service, the part of the service being provided in accordance with a computer of a merchant, the method comprising the steps of:
sending a message from the merchant computer to a computer of a consumer with which the merchant computer is engaging in a transaction, the merchant message comprising a wallet initiation message, the wallet initiation message comprising a payment amount, an order description, a merchant identifier and a timestamp, wherein the merchant message is sent to a gateway associated with an issuing bank, via the consumer computer, along with information associated with the consumer computer;
receiving at the merchant computer an authorization token sent by the gateway after the gateway has verified an account of the consumer and ensured that at least one of funds and credit support the payment amount, the authorization token comprising the payment ampunt, the order description, the merchant identifier, the timestamp, and a reference number, the reference number having been created by the issuing bank and representing a credit card number or a debit card number and corresponding reference numbers wherein the consumer's card number is paired with the reference number;
initiating fulfillment of the order description at the merchant computer; and
sending from the merchant computer to an acquirer bank, a capture request message comprising the reference number,
wherein the acquirer bank captures the transaction and disburses payment to the merchant; and further
wherein the issuing bank, in response to a message from the acquirer bank, converts the reference number into the consumer's credit or debit card number and applies the payment amount to a balance in the account of the consumer.
0. 76. A method of providing at least a part of a four party payment service, the part of the service being provided in accordance with a gateway associated with an issuing bank, the method comprising the steps of:
receiving at the gateway, from a computer of a consumer, information associated with the consumer computer and a merchant message from a computer of a merchant with which the consumer is engaging in a transaction, the merchant message comprising a wallet initiation message comprising a payment amount, an order description, a merchant identifier and a timestamp;
receiving at the gateway, from the issuing bank, a reference number, the reference number having been created by the issuing bank and representing a credit card number or a debit card number of the consumer, the issuing bank maintaining a table of credit card numbers or debit card numbers and corresponding reference numbers wherein the consumer's card number is paired with the reference number;
verifying at the gateway an account of the consumer and ensuring that at least one of funds and credit support the payment amount; and
authorizing payment by sending an authorization token, the authorization token comprising the payment amount, the order description, the merchant identifier, the timestamp, and the reference number, wherein the merchant's computer receives the authorization token initiates fulfillment of the order description, and sends a capture request message comprising the reference number, to an acqirer bank;
wherein the acquirer bank captures the transaction and disburses payment to the merchant; and further
wherein the issuing bank, in response to a message from the acquirer bank, converts the reference number into the consumer's credit or debit care number and applies the payment amount to a balance in the account of the consumer.
1. A method for electronic commerce, comprising:
forming a four party payment protocol for electronic sales including a consumer's computer coupled to a merchant's computer and to an issuing bank computer via an issuer gateway, the merchant computer being further coupled to an acquiring bank computer;
sending from a merchant's computer over an internet network to a consumer's computer, a merchant message including a wallet initiation message, a merchant digital signature, and a digital certificate from an acquiring bank, said wallet initiation message including a payment amount, an order description, and a timestamp;
starting a consumer's wallet program in said consumer's computer in response to said wallet initiation message;
sending from said consumer's computer consumer identity and authentication information and said merchant message, to an issuer gateway for an issuing bank;
the issuing bank creating a reference number or value representing the consumer's credit or debit card number by repairing a table of credit card or debit card numbers and a corresponding table of reference numbers, the issuing bank pairing the consumer's card number with a selected reference number and outputting the reference number to the issuer gateway;
verifying at said issuer gateway said merchant's signature to prove that the consumer is dealing with the actual merchant and validating at said issuer gateway the merchant's certificate and the acquirer's certificate to prove that the merchant and issuer share a common financial arrangement;
said issuer gateway verifying the consumer's account and ensuring that at least one of funds and/or and credit are available to support the payment amount, then authorizing payment by sending to the consumer over said internet network an authorization token, an issuer's digital certificate, said wallet initiation message, and a reference to said consumer's credit or debit card number;
said authorization token including the payment amount, order description, timestamp, a random nonce plus a merchant identifier and a reference to the consumer's credit or debit card number; and
said merchant's computer receiving said authorization token and fulfilling said order description.
2. The method for electronic commerce of claim 1, which further comprises:
sending from said consumer's computer a start message over the internet network to the merchants computer, to initiate said merchant's message.
0. 3. The method for electronic commerce of claim 1, wherein said wallet initiation message includes a nonce.
4. The method for electronic commerce of claim 1, wherein said merchant's computer further performs the steps comprising:
receiving said authorization token;
verifying the issuer's signature, digital certificate, the payment amount and merchant identity in the authorization token;
verifying the freshness of the authorization token via the timestamp in the token;
using the nonce in the authorization token to recognize duplicate tokens; and
fulfilling said order description.
0. 5. The method for electronic commerce of claim 1, wherein said consumer identity and authentication information is a userid and a password.
0. 6. The method for electronic commerce of claim 1, wherein said consumer identity and authentication information is an ATM debit card number and PIN.
0. 7. The method for electronic commerce of claim 1, wherein said consumer identity and authentication information is a smart card's account number and a symmetric message Authentication Code (MAC).
0. 8. The method for electronic commerce of claim 1, wherein said consumer identity and authentication information is a smart card's account number and an asymmetric digital signature.
0. 9. The method for electronic commerce of claim 1, wherein said consumer identity and authentication information is a consumer's digital signature and digital certificate.
0. 10. The method for electronic commerce of claim 1, wherein said authorization token includes a dummy card number for use in routing payment to an appropriate one of a plurality of issuing banks;
said dummy card number being shared among all cardholders of a particular issuing bank.
0. 11. The method for electronic commerce of claim 1, wherein said consumer identity and authentication information is a consumer's digital certificate and matching asymmetric digital signature.
0. 12. The method for electronic commerce of claim 1, wherein said consumer identity and authentication information is a is a user account number and a symmetric MAC or asymmetric digital signature.
0. 13. The method for electronic commerce of claim 1, wherein said consumer identity and authentication information is a is a user account number and an asymmetric digital signature.
0. 14. The method for electronic commerce of claim 1, wherein said consumer identity information is a consumer's biometric signal.
15. The method for electronic commerce of claim 1, wherein said issuer gateway sends said authorization token to said consumer, and the consumer forwards said authorization token to said merchant.
16. The method for electronic commerce of claim 1, wherein said issuer gateway sends said authorization token directly to said merchant.
17. The method for electronic commerce of claim 1, wherein said reference to said credit card is an alias card number that is mapped at the issuing bank to the real card number, thereby preventing use of the consumer's credit card number without said authorization token.
18. The method for electronic commerce of claim 1, wherein said reference to said card is an authorization number allocated uniquely by the issuer gateway for each authorization, enabling it to be passed by an acquirer gateway back to the issuing bank in a capture message;
said issuing bank maintaining a database mapping authorization numbers to card numbers, so that when the issuing bank receives the capture message, it uses the database mapping to determine the consumer's card number.
0. 19. The method for electronic commerce of claim 1, which further comprises:
a digital certificate hierarchy that covers issuing banks, acquiring banks, and merchants.
0. 20. The method for electronic commerce of claim 19, wherein said certificate hierarchy is used with public-key digital signatures to identify said merchant and said issuing bank.
0. 21. The method for electronic commerce of claim 20, wherein said certificates represent common financial agreements and obligations among said merchant and said issuing bank.
0. 22. The method for electronic commerce of claim 21, wherein the issuing bank certificates identify and help authenticate issuing banks to merchants, providing a basis for the merchants to trust the authorization tokens provided by the issuing banks.
0. 23. The method for electronic commerce of claim 22, wherein an acquiring bank certificate and a merchant certificate identify and help authenticate said acquiring bank and said merchant to issuing banks;
said merchant certificate identifying the merchant to the consumer and verifying that the merchant is a valid participant of a payment scheme, before the issuing bank provides said authorization token.
24. The method for electronic commerce of claim 1, wherein split shipments are supported by an additional message interaction between the merchant and issuer gateway, comprising:
the merchant sending the authorization token to the issuer gateway identified in the issuer's digital certificate, including details of a split requirement, such as the amount of a first payment, the merchant authenticating the request by signing it and including the merchant's digital certificate;
the issuer gateway verifying that the merchant signing message is the same merchant that signed an original request, verifying the split request according to business and risk management policies, and responding with a new authorization token in a message to the merchant;
the merchant forwarding the new authorization token in a capture message the acquirer gateway;
the merchant resubmitting the new authorization token to the acquirer gateway m in a second message, whenever the merchant has shipped a second part of the shipment.
25. The method for electronic commerce of claim 1, comprising:
the issuer offering the consumer a payment schedule conditioned on the merchant name from the merchant's digital certificate and the amount of payment from the initiation message.
26. The method of claim 1 further comprising:
sending a capture request message including the reference number representing the consumer's card number over the internet from the merchant to an acquirer gateway operating on behalf of an acquirer bank to capture the transaction and disburse payment to the merchant.
27. The method of claim 1 further comprising the step of:
settling accounts with the issuing bank by the acquiring bank over a private network by sending a settlement message that includes the reference number to the consumer's card number.
28. The method of claim 1 further comprising the step of
converting the reference number into the consumer's card number by the issuing bank and applying the transaction amount to the consumer's balance in his credit card or deposit account.
29. The method of claim 1 further comprising the step of:
proving that the issuing bank authorized the payment to the merchant by the combination of the issuing bank's signature on the authorization token, digital certificate, and the contents of the authorization token, providing undeniable proof that the issuing bank authorized the payment.
0. 30. A system for electronic commerce, comprising:
connecting apparatus which forms a four party payment protocol for electronic sales including a consumer's computer coupled to a merchant's computer and to an issuing bank computer via an issuer gateway, the merchant computer being further coupled to an acquiring bank computer;
the merchant's computer sending over an internet network to the consumer's computer, a merchant message including a wallet initiation message, a merchant digital signature, and a digital certificate from an acquiring bank, said wallet initiation message including a payment amount, an order description, and a timestamp;
the consumer's wallet program in said consumer's computer responsive to said wallet initiation message, for sending from said consumer's computer consumer identity and authentication information and said merchant message, to the issuer gateway for an issuing bank;
the issuing bank creating a reference number or value representing the consumer's credit or debit card number by preparing a table of credit card or debit card numbers and a corresponding table of reference numbers, the issuing bank pairing the consumer's card number with a selected reference number and outputting the reference number to the issuer gateway;
the issuer gateway verifying said merchant's signature to prove that the consumer is dealing with the actual merchant and validating at said issuer gateway the merchant's certificate and the acquirer's certificate to prove that the merchant and issuer share a common financial arrangement;
said issuer gateway verifying the consumer's account and ensuring that funds and/or credit are available to support the payment amount, then authorizing payment by sending over said internet network an authorization token, an issuer's digital certificate, said wallet initiation message, and a reference to said consumer's credit or debit card number;
said authorization token including the payment amount, order description, timestamp, a random nonce plus a merchant identifier and a reference to the consumer's credit or debit card number;
said merchant's computer receiving said authorization token and fulfilling said order description; and
said merchant sending a capture request message including the reference number representing the consumer's card number over the internet to an acquirer gateway operating on behalf of an acquirer bank to capture the transaction and disburse payment to the merchant.
0. 31. A computer program product, comprising:
computer program code forming a four party payment protocol for electronic sales including a consumer's computer coupled to a merchant's computer and to an issuing bank computer via an issuer gateway, the merchant computer being further coupled to an acquiring bank computer;
computer program code means for sending from the merchant's computer over an internet network to the consumer's computer, a merchant message including a wallet initiation message, a merchant digital signature, and a digital certificate from an acquiring bank, said wallet initiation message including a payment amount, an order description, and a timestamp;
computer program code means for starting a consumer's wallet program in said consumer's computer in response to said wallet initiation message;
computer program code means for sending from said consumer's computer consumer identity and authentication information and said merchant message, to the issuer gateway for an issuing bank;
computer program code at the issuing bank creating a reference number or value representing the consumer's credit or debit card number by preparing a table of credit card or debit card numbers and a corresponding table of reference numbers, the issuing bank pairing the consumer's card number with a selected reference number and outputting the reference number to the issuer gateway;
computer program code verifying at said issuer gateway said merchant's signature to prove that the consumer is dealing with the actual merchant and validating at said issuer gateway the merchant's certificate and the acquirer's certificate to prove that the merchant and issuer share a common financial arrangement;
said issuer gateway verifying the consumer's account and ensuring that funds and/or credit are available to support the payment amount, then authorizing payment by sending over said internet network an authorization token, an issuer's digital certificate, said wallet initiation message, and a reference to said consumer's credit or debit card number;
said authorization token including the payment amount, order description, timestamp, a random nonce plus a merchant identifier and a reference to the consumer's credit or debit card number;
said merchant's computer receiving said authorization token and fulfilling said order description; and
computer program code at the acquiring bank settling accounts with the issuing bank over a private network by sending a settlement message that includes the reference number to the consumer's card number.
0. 32. A data processing system for electronic commerce, comprising: connecting apparatus which forms a four party payment protocol for electronic sales including a consumer's computer coupled to a merchant's computer and to an issuing bank computer via an issuer gateway, the merchant computer being further coupled to an acquiring bank computer;
sending apparatus which sends from a merchant's computer over an internet network to a consumer's computer, a merchant message including a wallet initiation message, a merchant digital signature, and a digital certificate from an acquiring bank, said wallet initiation message including a payment amount, an order description, and a timestamp;
means for starting a consumer's wallet program in said consumer's computer in response to said wallet initiation message;
means for sending from said consumer's computer consumer identity and authentication information and said merchant message, to an issuer gateway for an issuing bank;
the issuing bank creating a reference number or value representing the consumer's credit or debit card number by preparing a table of credit card or debit card numbers and a corresponding table of reference numbers, the issuing bank pairing the consumer's card number with a selected reference number and outputting the reference number to the issuer gateway;
means for verifying at said issuer gateway said merchant's signature to prove that the consumer is dealing with the actual merchant and validating at said issuer gateway the merchant's certificate and the acquirer's certificate to prove that the merchant and issuer share a common financial arrangement;
said issuer gateway verifying the consumer's account and ensuring that finds and/or credit are available to support the payment amount, then authorizing payment by sending over said internet network an authorization token, an issuer's digital certificate, said wallet initiation message, and a reference to said consumer's credit or debit card number;
said authorization token including the payment amount, order description, timestamp, a random nonce plus a merchant identifier and a reference to the consumer's credit or debit card number;
said merchant's computer receiving said authorization token and fulfilling said order description; and
the issuing bank converting the reference number into the consumer's card number and applying the transaction amount to the consumer's balance in his credit card or deposit account.
0. 33. The data processing system for electronic commerce of claim 32, which further comprises:
means for sending from said consumer's computer a start message over the internet network to the merchant's computer, to initiate said merchant's message.
0. 34. The data processing system for electronic commerce of claim 32, wherein said wallet initiation message includes a nonce.
0. 35. The data processing system for electronic commerce of claim 32, wherein said merchant's computer further comprises:
means for receiving said authorization token;
means for verifying the issuer's signature, digital certificate, the payment amount and merchant identity in the authorization token;
means for verifying the freshness of the authorization token via the timestamp in the token;
means for using the nonce in the authorization token to recognize duplicate tokens; and
means for fulfilling said order description.
0. 36. The data processing system for electronic commerce of claim 32, wherein said reference to said credit card is a consumer credit or debit account number.
0. 37. A method for electronic commerce, comprising:
forming a four party payment protocol for electronic sales including a consumer's computer coupled to a merchant's computer and to an issuing bank computer via an issuer gateway, the merchant computer being further coupled to an acquiring bank computer;
sending from a merchant's computer over an internet network to a consumer's computer, a merchant message including a wallet initiation message, a merchant digital signature, and a digital certificate from an acquiring bank, said wallet initiation message including a payment amount, an order description, and a timestamp;
said acquiring bank's digital certificate containing a network address or URL that identifies the network location of said acquiring bank contacted via an internet network as part of a payment protocol;
starting a consumer's wallet program in said consumer's computer in response to said wallet initiation message;
sending from said consumer's computer consumer identity and authentication information and said merchant message, to an issuer gateway for an issuing bank;
the issuing bank creating a reference number or value representing the consumer's credit or debit card number by preparing a table of credit card or debit card numbers and a corresponding table of reference numbers, the issuing bank pairing the consumer's card number with a selected reference number and outputting the reference number to the issuer gateway;
verifying at said issuer gateway said merchant's signature to prove that the consumer is dealing with the actual merchant and validating at said issuer gateway the merchant's certificate and the acquirer's certificate to prove that the merchant and issuer share a common financial arrangement;
said issuer gateway verifying the consumer's account and ensuring that funds and/or credit are available to support the payment amount, then authorizing payment by sending over said internet network an authorization token, an issuer's digital certificate, said wallet initiation message, and a reference to said consumer's credit or debit card number;
said issuer's digital certificate containing a network address or URL that identifies the network location of the issuer contacted via an internet network as part of a payment protocol;
said authorization token including the payment amount, order description, timestamp, a random nonce plus a merchant identifier and a reference to the consumer's credit or debit card number;
said merchant's computer receiving said authorization token and fulfilling said order description;
said merchant sending a capture request message including the reference number representing the consumer's card number over the internet to an acquirer gateway operating on behalf of an acquirer bank to capture the transaction and disburse payment to the merchant;
the acquiring bank settling accounts with the issuing bank over a private network by sending a settlement message that includes the reference number to the consumer's card number; and
the issuing bank converting the reference number into the consumer's card number and applying the transaction amount to the consumer's balance in his credit card or deposit account.
0. 38. A method for electronic commerce, comprising:
forming a four party payment protocol for electronic sales including a consumer's computer coupled to a merchant's computer and to an issuing bank computer via an issuer gateway, the merchant computer being further coupled to an acquiring bank computer;
sending from the consumer's computer consumer to an issuer gateway for an issuing bank, an authorization request message containing consumer identity and authentication information, payment amount, an order description, a timestamp, a digital certificate representing a merchant, and a digital certificate representing the merchant's acquiring bank;
said merchant's digital certificate containing a merchant identifier unique for the acquiring bank;
said acquiring bank's digital certificate containing a bank identifier unique among all banks sharing a common financial arrangement;
validating at said issuer gateway the merchant's certificate and the acquirer's certificate to prove that the merchant, acquirer, and issuer share a common financial arrangement;
said issuer gateway verifying the consumer's account and ensuring that funds and/or credit are available to support the payment amount, then authorizing payment by sending over said internet network an authorization token, an issuer's digital certificate, and a reference to said consumer's credit or debit card number;
said authorization token including the payment amount, order description, timestamp, a random nonce, said merchant identifier from the merchant's digital certificate, and said acquiring bank identifier from said acquiring bank's digital certificate, plus a reference to the consumer's credit or debit card number;
said authorization token being digitally signed by the issuing bank;
said merchant's computer receiving said authorization token and fulfilling said order description
said merchant sending a capture request message including the reference number representing the consumer's card number over the internet to an acquirer gateway operating on behalf of an acquirer bank to capture the transaction and disburse payment to the merchant;
the acquiring bank settling accounts with the issuing bank over a private network by sending a settlement message that includes the reference number to the consumer's card number; and
the issuing bank converting the reference number into the consumer's card number and applying the transaction amount to the consumer's balance in his credit card or deposit account.
0. 39. The method for electronic commerce of claim 38, which further comprises:
sending from a merchant's computer over an internet network to a consumer's computer, a merchant message including a wallet initiation message, a merchant digital signature, and a digital certificate from an acquiring bank, said wallet initiation message including a payment amount, an order description, and a timestamp;
starting a consumer's wallet program in said consumer's computer in response to said wallet initiation message;
said consumer's wallet program sending the authorization request message.
0. 40. The method for electronic commerce of claim 39, which further comprises:
including with the wallet initiation message a merchant's digital signature of the wallet initiation message;
including the wallet initiation message and said merchant's digital signature in the authorization request message;
verifying at said issuer gateway said merchant's signature to prove that the consumer is dealing with the actual merchant.
0. 41. The method for electronic commerce of claim 40, which further comprises:
sending from said consumer's computer a start message over the internet network to the merchant's computer, to initiate said merchant's message.
0. 42. The method for electronic commerce of claim 40, wherein said wallet initiation message includes a nonce.
0. 43. The method for electronic commerce of claim 40, wherein said merchant's computer further performs the steps comprising:
receiving said authorization token;
verifying the issuer's signature, digital certificate, the payment amount and merchant identity in the authorization token;
verifying the freshness of the authorization token via the timestamp in the token;
using the nonce in the authorization token to recognize duplicate tokens; and
fulfilling said order description.
0. 44. The method for electronic commerce of claim 38, wherein the merchant claims payment through the acquiring bank by forwarding the customer reference number and payment amount to the acquiring bank.
0. 45. The method for electronic commerce of claim 44, wherein the case of a subsequent dispute, the merchant proves payment authorization by submitting a copy of the authorization token and issuer's digital certificate to the acquiring bank.
0. 46. The method for electronic commerce of claim 38, wherein the merchant claims payment through the acquiring bank by forwarding the authorization token and issuer's digital certificate to the acquiring bank;
the acquiring bank verifying the issuer's signature on the authorization token, validating the issuer's digital certificate, checking for duplicates via the timestamp in the authorization token; and the acquiring bank paying the amount indicated in the authorization token.
0. 47. The method for electronic commerce of claim 38, wherein said authorization request message and authorization token includes a hash of an order description instead of the actual order description, the order description itself being available separately at the merchant, the merchant validating that the authorization token refers to the same order description by comparing the hash of the order description in the authorization token against a locally-computed hash of the same order description.
0. 48. The method for electronic commerce of claim 38, wherein said reference to said credit card is a consumer credit or debit account number.
0. 49. The method for electronic commerce of claim 48, wherein the confidentiality of said credit or debit account number is maintained by using a higher-level security protocol, such as encrypted email or SSL, to protect the communications among the consumer and the issuer gateway, the consumer and the merchant, the issuer gateway and the merchant, and, if applicable, the merchant and the acquirer.
0. 50. A method for electronic commerce, comprising:
forming a four party payment protocol for electronic sales, the four party payment protocol including a consumer's computer coupled to a merchant's computer and to an issuing bank computer via an issuer gateway, the merchant computer being further coupled to an acquirer bank computer;
sending from the merchant's computer, over an internet network to the consumer's computer, a merchant message including a wallet initiation message, and a digital certificate of a merchant provided by an acquiring bank, said wallet initiation message including a payment amount, an order description, a merchant identifier and a timestamp;
starting a consumer's wallet program in said consumer's computer in response to said wallet initiation message;
sending from said consumer's computer consumer identity and authentication information and said merchant message, to the issuer gateway for an issuing bank;
the issuing bank creating a reference number or value representing the consumer's credit or debit card number by preparing a table of credit card or debit card numbers and a corresponding table of reference numbers, the issuing bank pairing the consumer's card number with a selected reference number and outputting the reference number to the issuer gateway;
verifying at said issuer gateway that the merchant and issuer share a common financial arrangement;
said issuer gateway verifying the consumer's account and ensuring that funds and/or credit are available to support the payment amount, then authorizing payment by sending over said internet network an authorization token, an issuer's digital certificate, said wallet initiation message, and a reference to said consumer's credit or debit card number;
said authorization token including the payment amount, order description, timestamp, a random nonce plus a merchant identifier and a reference to the consumer's credit or debit card number;
said merchant's computer receiving said authorization token and fulfilling said order description; and
sending a capture request message including the reference number representing the consumer's card number over the internet from the merchant to an acquirer gateway operating on behalf of an acquirer bank to capture the transaction and disburse payment to the merchant.
0. 51. The method of claim 50 further comprising:
providing the merchant's digital signature and matching certificate to the consumer's computer.
0. 52. The method of claim 50 further comprising
the issuer gateway signing the authorization token.
0. 53. A method for electronic commerce, comprising:
means for forming a four party payment protocol for electronic sales, the four party payment protocol including a consumer's computer coupled to a merchant's computer and to an issuing bank computer via an issuer gateway, the merchant computer being further coupled to an acquiring bank computer;
the merchant's computer sending over an internet network to the consumer's computer, a merchant message including a wallet initiation message, and a digital certificate of a merchant provided by an acquiring bank, said wallet initiation message including a payment amount, an order description, a merchant identifier and a timestamp;
a consumer's wallet program in said consumer's computer responsive to said wallet initiation message, for sending from said consumer's computer consumer identity and authentication information and said merchant message, to the issuer gateway for an issuing bank;
the issuing bank creating a reference number or value representing the consumer's credit or debit card number by preparing a table of credit card or debit card numbers and a corresponding table of reference numbers, the issuing bank pairing the consumer's card number with a selected reference number and outputting the reference number to the issuer gateway;
the issuer gateway verifying that the merchant and issuer share a common financial arrangement;
said issuer gateway verifying the consumer's account and ensuring that funds and/or credit are available to support the payment amount, then authorizing payment by sending over said internet network an authorization token, an issuer's digital certificate, said wallet initiation message, and a reference to said consumer's credit or debit card number;
said authorization token including the payment amount, order description, timestamp, a random nonce plus a merchant identifier and a reference to the consumer's credit or debit card number;
said merchant's computer receiving said authorization token and fulfilling said order description; and
settling apparatus which settles accounts with the issuing bank by the acquiring bank over a private network by sending a settlement message that includes the reference number to the consumer's card number.
0. 54. The system of claim 53 further comprising:
means for providing the merchant's digital signature and matching certificate to the consumer's computer; and
means for issuing gateway to sign the authorization token.
0. 56. The method of claim 55, wherein the gateway associated with the issuing bank sends the authorization token to the merchant computer via the consumer computer.
0. 57. The method of claim 55, wherein the gateway associated with the issuing bank sends the authorization token directly to the merchant computer.
0. 58. The method of claim 55, further comprising the step of the gateway associated with the issuing bank signing the authorization token.
0. 60. The method for electronic commerce of claim 1, wherein said wallet initiation message includes a nonce.
0. 61. The method for electronic commerce of claim 1, wherein said consumer identity and authentication information is a userid and a password.
0. 62. The method for electronic commerce of claim 1, wherein said consumer identity and authentication information is an ATM debit card number and PIN.
0. 63. The method for electronic commerce of claim 1, wherein said consumer identity and authentication information is a smart card's account number and a symmetric message Authentication Code (MAC).
0. 64. The method for electronic commerce of claim 1, wherein said consumer identity and authentication information is a smart card's account number and a symmetric digital signature.
0. 65. The method for electronic commerce of claim 1, wherein said consumer identity and authentication information is a consumer's digital signature and digital certificate.
0. 66. The method for electronic commerce of claim 1, wherein said authorization token includes a dummy card number for use in routing payment to an appropriate one of a plurality of issuing banks;
said dummy card number being shared among all cardholders of a particular issuing bank.
0. 67. The method for electronic commerce of claim 1, wherein said consumer identity and authentication information is a consumer's digital certificate and matching asymmetric digital signature.
0. 68. The method for electronic commerce of claim 1, wherein said consumer identity and authentication information is a user account number and a symmetric MAC or asymmetric digital signature.
0. 69. The method for electronic commerce of claim 1, wherein said consumer identity and authentication information is a user account number and an asymmetric digital signature.
0. 70. The method for electronic commerce of claim 1, wherein said consumer identity information is a consumer's biometric signal.
0. 71. The method for electronic commerce of claim 1, which further comprises:
a digital certificate hierarchy that covers issuing banks, acquiring banks, and merchants.
0. 72. The method for electronic commerce of claim 71, wherein said certificate hierarchy is used with public-key digital signatures to identify said merchant and said issuing bank.
0. 73. The method for electronic commerce of claim 72, wherein said certificates represent common financial agreements and obligations among said merchant and said issuing bank.
0. 74. The method for electronic commerce of claim 73, wherein the issuing bank certificates identify and help authenticate issuing banks to merchants, providing a basis for the merchants to trust the authorization tokens provided by the issuing banks.
0. 75. The method for electronic commerce of claim 74, wherein an acquiring bank certificate and a merchant certificate identify and help authenticate said acquiring bank and said merchant to issuing banks;
said merchant certificate identifying the merchant to the consumer and verifying that the merchant is a valid participant of a payment scheme, before the issuing bank provides said authorization token.
0. 77. The method of claim 76, wherein the gateway associated with the issuing bank sends the authorization token to the merchant computer via the consumer computer.
0. 78. The method of claim 76, wherein the gateway associated with the issuing bank sends the authorization token directly to the merchant computer.
0. 79. The method of claim 76, further comprising the step of the gateway associated with the issuing bank signing the authorization token.
0. 82. The method of claim 81, wherein the gateway associated with the issuing bank sends the authorization token to the merchant computer via the consumer computer.
0. 83. The method of claim 81, wherein the gateway associated with the issuing bank sends the authorization token directly to the merchant computer.
0. 84. The method of claim 81, further comprising the step of the gateway associated with the issuing bank signing the authorization token.

thenor asymmetric digital signaturethemessage33. 3. In FIG. 4, path 224, the Wallet initiation message causes consumer's browser to start consumer's wallet. Consumer is prompted to logon to the wallet using userid/password, smartcard, or other appropriate authentication mechanism. Wallet sends data from step 1, plus consumer's identity and authentication data to the issuer gateway.

  • 4. In FIG. 4, path 402, the issuer gateway verifies the merchant's signature and digital certificate to validate that the merchant and issuer share a common financial arrangement established by national law or a financial association such as MasterCard, Visa, an ATM network, or similar organization. Issuer gateway authorizes payment via issuer's credit card processing system. Issuer gateway generates and sends a signed authorization token directly to the merchant, along with the issuer gateway's certificate. The authorization token contains the data from step 1 plus a merchant identifier and a reference to the consumer's credit card number, as with the base protocol.

    • Note that the authorization token is “bound” to the particular payment by the reference to the consumer's credit card number, merchant identifier, payment amount, timestamp, and nonce. This means that a specific authorization token is good for just one payment.

    The difference between this and the base design is that the issuer gateway sends the authorization token directly to the merchant, instead of relaying it through the consumer wallet. The primary advantage of this design is that it matches a “thin” wallet design by moving responsibility for error recovery to the issuer gateway. The disadvantage is that the consumer wallet (and hence the consumer) has less opportunity to be aware of the progress of the payment.

    The principle of operation of the invention applies to both non-interactive internet communications such as email, as well as to interactive applications such as the World Wide Web. The method of the invention includes the step of sending from a consumer's computer to an issuer gateway for an issuing bank, an authorization request message containing consumer identity and authentication information, payment amount, an order description, a timestamp, a digital certificate representing a merchant, and a digital certificate representing the merchants acquiring bank. Then the method continues with the merchant's digital certificate containing a merchant identifier unique for the acquiring bank. Then the method continues with the acquiring bank's digital certificate containing a bank identifier unique among all banks sharing a common financial arrangement. Then the method continues with the step of validating at the issuer gateway the merchant's certificate and the acquirer's certificate to prove that the merchant, acquirer, and issuer share a common financial arrangement. Then the method continues with the step of the issuer gateway verifying the consumer's account and ensuring that funds and/or credit are available to support the payment amount, then authorizing payment by sending over the internet network an authorization token, an issuer's digital certificate, and a reference to the consumer's credit or debit card number. Then the method continues with the authorization token including the payment amount, order description, timestamp, a random nonce, the merchant identifier from the merchant's digital certificate, and the acquiring bank identifier from the acquiring bank's digital certificate, plus a reference to the consumer's credit or debit card number. Then the method continues with the authorization token being digitally signed by the issuing bank. Then the method continues with the step of merchant's computer receiving the authorization token and fulfilling the order description.

    The method can include the feature of sending from a merchant's computer over an internet network to a consumer's computer, a merchant message including a wallet initiation message, a merchant digital certificate, and a digital certificate from an acquiring bank, the wallet initiation message including a payment amount, an order description, and a timestamp. Then the method starts a consumer's wallet program in the consumer's computer in response to the wallet initiation message. Then the consumer's wallet program sends the authorization request message.

    The method can include the feature of including with the wallet initiation message a merchant's digital signature of the wallet initiation message, including the wallet initiation message and the merchant's digital signature in the authorization request message, and verifying at the issuer gateway the merchant's signature to prove that the consumer is dealing with the actual merchant.

    The merchant's computer can perform the steps of receiving the authorization token, verifying the issuer's signature, digital certificate, the payment amount and merchant identity in the authorization token, verifying the freshness of the authorization token via the timestamp in the token, using the nonce in the authorization token to recognize duplicate tokens, and fulfilling the order description.

    The merchant can claim payment through the acquiring bank by forwarding the customer reference number and payment amount to the acquiring bank. In the case of a subsequent dispute, the merchant proves payment authorization by submitting a copy of the authorization token and issuer's digital certificate to the acquiring bank. The acquiring bank verifies the issuer's signature on the authorization token, validates the issuer's digital certificate, checks for duplicates via the timestamp in the authorization token, and then the acquiring bank pays the amount indicated in the authorization token.

    The authorization request message and authorization token can include a hash of an order description instead of the actual order description, the order description itself being available separately at the merchant, the merchant validating that the authorization token refers to the same order description by comparing the hash of the order description in the authorization token against a locally-computed hash of the same order description.

    Although specific embodiments of the invention have been disclosed, it will be understood by those skilled in the art that changes can be made to those specific embodiments without departing from the spirit and the scope of the invention.

    INVENTORS:

    Linehan, Mark

    THIS PATENT IS REFERENCED BY THESE PATENTS:
    Patent Priority Assignee Title
    10009177, May 15 2009 Visa International Service Association Integration of verification tokens with mobile communication devices
    10015147, Oct 22 2014 Visa International Service Association Token enrollment system and method
    10026087, Apr 08 2014 Visa International Service Association Data passed in an interaction
    10038563, Jul 23 2014 Visa International Service Association Systems and methods for secure detokenization
    10043178, Jun 25 2007 Visa International Service Association Secure mobile payment system
    10043186, May 15 2009 Visa International Service Association Secure authentication system and method
    10049353, Aug 22 2014 Visa International Service Association Embedding cloud-based functionalities in a communication device
    10049360, May 15 2009 Visa International Service Association Secure communication of payment information to merchants using a verification token
    10057061, Sep 13 2016 WELLS FARGO BANK, N A Secure digital communications
    10062079, Jan 14 2014 Visa International Service Association Payment account identifier system
    10078832, Aug 24 2011 Visa International Service Association Method for using barcodes and mobile devices to conduct payment transactions
    10096009, Jan 20 2015 Visa International Service Association Secure payment processing using authorization request
    10121129, Jul 05 2011 Visa International Service Association Electronic wallet checkout platform apparatuses, methods and systems
    10140615, Sep 22 2014 Visa International Service Association Secure mobile device credential provisioning using risk decision non-overrides
    10147089, Jan 05 2012 Visa International Service Association Data protection with translation
    10154084, Jul 05 2011 Visa International Service Association Hybrid applications utilizing distributed models and views apparatuses, methods and systems
    10164996, Mar 12 2015 Visa International Service Association Methods and systems for providing a low value token buffer
    10176478, Oct 23 2012 Visa International Service Association Transaction initiation determination system utilizing transaction data elements
    10187363, Dec 31 2014 Visa International Service Association Hybrid integration of software development kit with secure execution environment
    10192216, Sep 11 2012 Visa International Service Association Cloud-based virtual wallet NFC apparatuses, methods and systems
    10204227, Aug 10 2012 Visa International Service Association Privacy firewall
    10223691, Feb 22 2011 Visa International Service Association Universal electronic payment apparatuses, methods and systems
    10223710, Jan 04 2013 Visa International Service Association Wearable intelligent vision device apparatuses, methods and systems
    10223730, Sep 23 2011 Visa International Service Association E-wallet store injection search apparatuses, methods and systems
    10242358, Aug 18 2011 Visa International Service Association Remote decoupled application persistent state apparatuses, methods and systems
    10243958, Jan 07 2016 Visa International Service Association Systems and methods for device push provisoning
    10248952, Nov 19 2013 Visa International Service Association Automated account provisioning
    10255456, Sep 26 2014 Visa International Service Association Remote server encrypted data provisioning system and methods
    10255591, Dec 18 2009 Visa International Service Association Payment channel returning limited use proxy dynamic value
    10255601, Feb 25 2010 Visa International Service Association Multifactor authentication using a directory server
    10257185, Dec 12 2014 Visa International Service Association Automated access data provisioning
    10262001, Feb 02 2012 Visa International Service Association Multi-source, multi-dimensional, cross-entity, multimedia merchant analytics database platform apparatuses, methods and systems
    10262308, Jun 25 2007 Visa U.S.A. Inc. Cardless challenge systems and methods
    10269018, Jan 14 2014 Visa International Service Association Payment account identifier system
    10282724, Mar 06 2012 Visa International Service Association Security system incorporating mobile device
    10289999, Sep 06 2005 Visa U.S.A. Inc. System and method for secured account numbers in proximity devices
    10296904, Jun 06 2012 Visa International Service Association Method and system for correlating diverse transaction data
    10304047, Dec 07 2012 Visa International Service Association Token generating component
    10313321, Apr 07 2016 Visa International Service Association Tokenization of co-network accounts
    10325261, Nov 25 2014 Visa International Service Association Systems communications with non-sensitive identifiers
    10326601, Sep 13 2016 Wells Fargo Bank, N.A. Secure digital communications
    10333921, Apr 10 2015 Visa International Service Association Browser integration with Cryptogram
    10354240, Aug 18 2011 Visa International Service Association Multi-directional wallet connector apparatuses, methods and systems
    10361856, Jun 24 2016 Visa International Service Association Unique token authentication cryptogram
    10366387, Oct 29 2013 Visa International Service Association Digital wallet system and method
    10373133, Mar 03 2010 Visa International Service Association Portable account number for consumer payment account
    10387871, May 15 2009 Visa International Service Association Integration of verification tokens with mobile communication devices
    10402814, Dec 19 2013 Visa International Service Association Cloud-based transactions methods and systems
    10402815, Aug 24 2011 Visa International Service Association Method for using barcodes and mobile devices to conduct payment transactions
    10404461, Apr 23 2014 Visa International Service Association Token security on a communication device
    10412060, Oct 22 2014 Visa International Service Association Token enrollment system and method
    10419529, Jul 05 2011 Visa International Service Association Hybrid applications utilizing distributed models and views apparatuses, methods and systems
    10430381, Feb 02 2012 Visa International Service Association Multi-source, multi-dimensional, cross-entity, multimedia centralized personal information database platform apparatuses, methods and systems
    10433128, Jan 07 2014 Visa International Service Association Methods and systems for provisioning multiple devices
    10477393, Aug 22 2014 Visa International Service Association Embedding cloud-based functionalities in a communication device
    10484345, Jul 31 2014 Visa International Service Association System and method for identity verification across mobile applications
    10489779, Oct 21 2013 Visa International Service Association Multi-network token bin routing with defined verification parameters
    10491389, Jul 14 2017 Visa International Service Association Token provisioning utilizing a secure authentication system
    10496965, Jan 20 2015 Visa International Service Association Secure payment processing using authorization request
    10496986, Aug 08 2013 Visa International Service Association Multi-network tokenization processing
    10498713, Dec 29 2016 Wells Fargo Bank, N.A. Wireless peer to peer mobile wallet connections
    10505731, Sep 13 2016 Wells Fargo Bank, N.A. Secure digital communications
    10505743, Sep 13 2016 Wells Fargo Bank, N.A. Secure digital communications
    10509779, Sep 14 2016 Visa International Service Association Self-cleaning token vault
    10510073, Aug 08 2013 Visa International Service Association Methods and systems for provisioning mobile devices with payment credentials
    10511583, Dec 31 2014 Visa International Service Association Hybrid integration of software development kit with secure execution environment
    10515358, Oct 18 2013 Visa International Service Association Contextual transaction token methods and systems
    10552828, Apr 11 2011 Visa International Service Association Multiple tokenization for authentication
    10552834, Apr 30 2015 Visa International Service Association Tokenization capable authentication framework
    10567975, Oct 04 2005 HOFFBERG FAMILY TRUST 2 Multifactorial optimization system and method
    10568016, Apr 16 2015 Visa International Service Association Systems and methods for processing dormant virtual access devices
    10572864, Apr 28 2009 Visa International Service Association Verification of portable consumer devices
    10586054, Aug 10 2012 Visa International Service Association Privacy firewall
    10586227, Feb 16 2011 Visa International Service Association Snap mobile payment apparatuses, methods and systems
    10586229, Jan 12 2010 Visa International Service Association Anytime validation tokens
    10607217, Jan 26 2012 Visa International Service Association System and method of providing tokenization as a service
    10614460, Oct 23 2012 Visa International Service Association Transaction initiation determination system utilizing transaction data elements
    10643001, Sep 26 2014 Visa International Service Association Remote server encrypted data provisioning system and methods
    10652028, Jul 23 2014 Visa International Service Association Systems and methods for secure detokenization
    10652223, Dec 29 2016 Wells Fargo Bank, N.A. Wireless peer to peer mobile wallet connections
    10657528, Feb 24 2010 Visa International Service Association Integration of payment capability into secure elements of computers
    10664824, Dec 19 2013 Visa International Service Association Cloud-based transactions methods and systems
    10664843, Dec 04 2015 Visa International Service Association Unique code for token verification
    10664844, Dec 04 2015 Visa International Service Association Unique code for token verification
    10685379, Jan 05 2012 Visa International Service Association Wearable intelligent vision device apparatuses, methods and systems
    10692076, Nov 21 2012 Visa International Service Association Device pairing via trusted intermediary
    10726413, Aug 12 2010 Visa International Service Association Securing external systems with account token substitution
    10726416, Jun 25 2007 Visa International Service Association Secure mobile payment system
    10733604, Sep 13 2007 Visa U.S.A. Inc. Account permanence
    10740731, Jan 02 2013 Visa International Service Association Third party settlement
    10755264, Oct 08 2015 MASTERCARD ASIA PACIFIC PTE LTD Methods and systems for secure online payment
    10769628, Oct 24 2014 VISA EUROPE LIMITED Transaction messaging
    10776777, Aug 04 2017 WELLS FARGO BANK, N A Consolidating application access in a mobile wallet
    10785212, Dec 12 2014 Visa International Service Association Automated access data provisioning
    10803449, Jul 05 2011 Visa International Service Association Electronic wallet checkout platform apparatuses, methods and systems
    10825001, Aug 18 2011 Visa International Service Association Multi-directional wallet connector apparatuses, methods and systems
    10839374, Jul 29 2011 Visa International Service Association Passing payment tokens through an HOP / SOP
    10846683, May 15 2009 Visa International Service Association Integration of verification tokens with mobile communication devices
    10846694, May 21 2014 Visa International Service Association Offline authentication
    10853797, Sep 11 2012 Visa International Service Association Cloud-based virtual wallet NFC apparatuses, methods and systems
    10878422, Jun 17 2013 Visa International Service Association System and method using merchant token
    10891610, Oct 11 2013 MasterCard International Incorporated; Visa International Service Association Network token system
    10902418, May 02 2017 Visa International Service Association System and method using interaction token
    10902421, Jul 26 2013 Visa International Service Association Provisioning payment credentials to a consumer
    10904002, Apr 23 2014 Visa International Service Association Token security on a communication device
    10909522, Dec 19 2013 Visa International Service Association Cloud-based transactions methods and systems
    10911456, Jan 07 2016 Visa International Service Association Systems and methods for device push provisioning
    10915899, Mar 17 2017 Visa International Service Association Replacing token on a multi-token user device
    10922686, Sep 06 2005 Visa U.S.A. Inc. System and method for secured account numbers in proximity devices
    10937031, May 04 2012 Visa International Service Association System and method for local data conversion
    10942918, Sep 14 2016 Visa International Service Association Self-cleaning token vault
    10958442, Sep 13 2016 Wells Fargo Bank, N.A. Secure digital communications
    10965469, Sep 13 2016 Wells Fargo Bank, N.A. Secure digital communications
    10977657, Feb 09 2015 Visa International Service Association Token processing utilizing multiple authorizations
    10983960, Feb 02 2012 Visa International Service Association Multi-source, multi-dimensional, cross-entity, multimedia centralized personal information database platform apparatuses, methods and systems
    10990967, Jul 19 2016 Visa International Service Association Method of distributing tokens and managing token relationships
    10990977, Nov 25 2014 Visa International Service Association System communications with non-sensitive identifiers
    10997573, Apr 28 2009 Visa International Service Association Verification of portable consumer devices
    11004043, May 20 2009 Visa International Service Association Device including encrypted data for expiration date and verification value creation
    11010734, Jan 20 2015 Visa International Service Association Secure payment processing using authorization request
    11010753, Jul 05 2011 Visa International Service Association Electronic wallet checkout platform apparatuses, methods and systems
    11010756, Aug 18 2011 Visa International Service Association Remote decoupled application persistent state apparatuses, methods and systems
    11017402, Jun 17 2013 Visa International Service Association System and method using authorization and direct credit messaging
    11023886, Feb 22 2011 Visa International Service Association Universal electronic payment apparatuses, methods and systems
    11023890, Jun 05 2014 Visa International Service Association Identification and verification for provisioning mobile application
    11036681, Feb 02 2012 Visa International Service Association Multi-source, multi-dimensional, cross-entity, multimedia analytical model sharing database platform apparatuses, methods and systems
    11036873, Aug 22 2014 Visa International Service Association Embedding cloud-based functionalities in a communication device
    11037138, Aug 18 2011 Visa International Service Association Third-party value added wallet features and interfaces apparatuses, methods, and systems
    11037140, Jun 06 2012 Visa International Service Association Method and system for correlating diverse transaction data
    11055710, May 02 2013 Visa International Service Association Systems and methods for verifying and processing transactions using virtual currency
    11068578, Jun 03 2016 Visa International Service Association Subtoken management system for connected devices
    11068889, Oct 15 2015 Visa International Service Association Instant token issuance
    11068899, Jun 17 2016 Visa International Service Association Token aggregation for multi-party transactions
    11074218, Feb 02 2012 Visa International Service Association Multi-source, multi-dimensional, cross-entity, multimedia merchant analytics database platform apparatuses, methods and systems
    11080696, Feb 01 2016 Visa International Service Association Systems and methods for code display and use
    11087328, Sep 22 2014 Visa International Service Association Secure mobile device credential provisioning using risk decision non-overrides
    11093936, Jul 24 2013 Visa International Service Association Systems and methods for communicating token attributes associated with a token vault
    11100507, Apr 08 2014 Visa International Service Association Data passed in an interaction
    11122133, May 05 2014 Visa International Service Association System and method for token domain control
    11127016, Dec 04 2015 Visa International Service Association Unique code for token verification
    11164176, Feb 18 2014 Visa International Service Association Limited-use keys and cryptograms
    11176554, Feb 03 2015 Visa International Service Association Validation identity tokens for transactions
    11195154, Mar 27 2014 Nokia Technologies Oy Method and apparatus for automatic inter-device authorisation
    11238140, Jul 11 2016 Visa International Service Association Encryption key exchange process using access device
    11240217, Dec 29 2016 Wells Fargo Bank, N.A. Wireless peer to peer mobile wallet connections
    11240219, Dec 31 2014 Visa International Service Association Hybrid integration of software development kit with secure execution environment
    11245513, Dec 21 2018 Capital One Services, LLC System and method for authorizing transactions in an authorized member network
    11250391, Jan 30 2015 Visa International Service Association Token check offline
    11250424, May 19 2016 Visa International Service Association Systems and methods for creating subtokens using primary tokens
    11252136, Jul 31 2014 Visa International Service Association System and method for identity verification across mobile applications
    11256789, Jun 18 2018 Visa International Service Association Recurring token transactions
    11257074, Sep 29 2014 Visa International Service Association Transaction risk based token
    11263625, Jan 19 2010 BLUECHAIN PTY LTD Method, device and system for securing payment data for transmission over open communication networks
    11271921, Apr 10 2015 Visa International Service Association Browser integration with cryptogram
    11276058, Jan 05 2012 Visa International Service Association Data protection with translation
    11288661, Feb 16 2011 Visa International Service Association Snap mobile payment apparatuses, methods and systems
    11308467, Nov 23 2011 The Toronto-Dominion Bank System and method for deriving a primary numeric value and a secondary numeric value from an authorized request
    11315099, Sep 22 2008 Visa International Service Association Over the air update of payment transaction data stored in secure memory
    11323443, Nov 28 2016 Visa International Service Association Access identifier provisioning to application
    11329822, Jun 24 2016 Visa International Service Association Unique token authentication verification value
    11341491, May 15 2013 Visa International Service Association Mobile tokenization hub using dynamic identity information
    11354723, Sep 23 2011 Visa International Service Association Smart shopping cart with E-wallet store injection search
    11356257, Mar 07 2018 Visa International Service Association Secure remote token release with online authentication
    11379835, Jul 30 2020 Visa International Service Association System, method, and computer program product to ensure data integrity for conducting a payment transaction
    11386421, Apr 19 2016 Visa International Service Association Systems and methods for performing push transactions
    11392939, Aug 08 2013 Visa International Service Association Methods and systems for provisioning mobile devices with payment credentials
    11397931, Aug 18 2011 Visa International Service Association Multi-directional wallet connector apparatuses, methods and systems
    11398910, Jul 14 2017 Visa International Service Association Token provisioning utilizing a secure authentication system
    11449862, May 02 2017 Visa International Service Association System and method using interaction token
    11470164, May 01 2014 Visa International Service Association Data verification using access device
    11481742, Jun 25 2007 Visa U.S.A. Inc. Cardless challenge systems and methods
    11481754, Jul 13 2012 SCVNGR, INC. Secure payment method and system
    11494765, May 11 2017 Visa International Service Association Secure remote transaction system using mobile devices
    11501274, Sep 22 2008 Visa International Service Association Over the air update of payment transaction data stored in secure memory
    11516018, Sep 13 2016 Wells Fargo Bank, N.A. Secure digital communications
    11516019, Sep 13 2016 Wells Fargo Bank, N.A. Secure digital communications
    11568405, Jun 05 2014 Visa International Service Association Identification and verification for provisioning mobile application
    11574311, Sep 22 2014 Visa International Service Association Secure mobile device credential provisioning using risk decision non-overrides
    11574312, May 15 2009 Visa International Service Association Secure authentication system and method
    11580519, Dec 12 2014 Visa International Service Association Provisioning platform for machine-to-machine devices
    11605074, Sep 06 2005 Visa U.S.A. Inc. System and method for secured account numbers in proximily devices
    11611543, Dec 29 2016 Wells Fargo Bank, N.A. Wireless peer to peer mobile wallet connections
    11620643, Nov 26 2014 Visa International Service Association Tokenization request via access device
    11669816, Jan 08 2009 VISA EUROPE LIMITED Payment system
    11676138, Aug 08 2013 Visa International Service Association Multi-network tokenization processing
    11710119, Oct 11 2013 Visa International Service Association; MasterCard International Incorporated Network token system
    11714885, Jul 11 2016 Visa International Service Association Encryption key exchange process using access device
    11715097, Sep 11 2012 Visa International Service Association Cloud-based virtual wallet NFC apparatuses, methods and systems
    11720893, Feb 01 2016 Visa International Service Association Systems and methods for code display and use
    11727392, Feb 22 2011 Visa International Service Association Multi-purpose virtual card transaction apparatuses, methods and systems
    11734679, Sep 29 2014 Visa International Service Association Transaction risk based token
    11743042, Mar 07 2018 Visa International Service Association Secure remote token release with online authentication
    11763294, Aug 18 2011 Visa International Service Association Remote decoupled application persistent state apparatuses, methods and systems
    11770369, Jul 31 2014 Visa International Service Association System and method for identity verification across mobile applications
    11777934, Aug 22 2018 Visa International Service Association Method and system for token provisioning and processing
    11783061, Aug 22 2014 Visa International Service Association Embedding cloud-based functionalities in a communication device
    11783343, Jun 17 2016 Visa International Service Association Token aggregation for multi-party transactions
    11799862, Nov 28 2016 Visa International Service Association Access identifier provisioning to application
    11803825, Aug 18 2011 Visa International Service Association Multi-directional wallet connector apparatuses, methods and systems
    11803846, Aug 12 2010 Visa International Service Association Securing external systems with account token substitution
    11842350, May 21 2014 Visa International Service Association Offline authentication
    11847645, Aug 12 2010 Visa International Service Association Securing external systems with account token substitution
    11849042, May 17 2019 Visa International Service Association Virtual access credential interaction system and method
    11856108, Sep 13 2016 Wells Fargo Bank, N.A. Secure digital communications
    11861607, May 15 2013 Visa International Service Association Mobile tokenization hub using dynamic identity information
    11875344, Dec 19 2013 Visa International Service Association Cloud-based transactions with magnetic secure transmission
    11875348, Jul 31 2019 Visa International Service Association System, method, and computer program product to ensure data integrity for conducting a payment transaction
    11900343, Mar 03 2010 Visa International Service Association Portable account number for consumer payment account
    11900359, Jul 05 2011 Visa International Service Association Electronic wallet checkout platform apparatuses, methods and systems
    11900361, Feb 09 2016 Visa International Service Association Resource provider account token provisioning and processing
    11900371, Mar 17 2017 Visa International Service Association Replacing token on a multi-token user device
    11915235, Jul 24 2013 Visa International Service Association Systems and methods for communicating token attributes associated with a token vault
    11915243, Feb 03 2015 Visa International Service Association Validation identity tokens for transactions
    8108317, Aug 31 2005 Hand Held Products, Inc. System and method for restricting access to a terminal
    8694438, Mar 12 2013 SCVNGR Distributed authenticity verification for consumer payment transactions
    8788429, Dec 30 2009 First Data Corporation Secure transaction management
    8827154, May 15 2009 Visa International Service Association Verification of portable consumer devices
    9038886, May 15 2009 Visa International Service Association Verification of portable consumer devices
    9256871, Jul 26 2012 Visa U.S.A. Inc. Configurable payment tokens
    9280765, Apr 11 2011 Visa International Service Association Multiple tokenization for authentication
    9317848, May 15 2009 Visa International Service Association Integration of verification tokens with mobile communication devices
    9342823, Jun 18 2007 LEXISNEXIS RISK SOLUTIONS FL INC Payment clearing network for electronic financial transactions and related personal financial transaction device
    9372971, May 15 2009 Visa International Service Association Integration of verification tokens with portable computing devices
    9424413, Feb 24 2010 Visa International Service Association Integration of payment capability into secure elements of computers
    9485258, Feb 13 2011 OPENWAVE MOBILITY, INC Mediation system and method for restricted access item distribution
    9516487, Nov 19 2013 Visa International Service Association Automated account provisioning
    9524501, Jun 06 2012 Visa International Service Association Method and system for correlating diverse transaction data
    9530131, Jul 29 2008 Visa U.S.A. Inc. Transaction processing using a global unique identifier
    9530289, Jul 11 2013 SCVNGR, INC Payment processing with automatic no-touch mode selection
    9547769, Jul 03 2012 Visa International Service Association Data protection hub
    9582801, May 15 2009 Visa International Service Association Secure communication of payment information to merchants using a verification token
    9589268, Feb 24 2010 Visa International Service Association Integration of payment capability into secure elements of computers
    9660977, Nov 13 2012 Alcatel Lucent Restricted certificate enrollment for unknown devices in hotspot networks
    9665722, Aug 10 2012 Visa International Service Association Privacy firewall
    9680942, May 01 2014 Visa International Service Association Data verification using access device
    9684889, Feb 12 1999 IDENTRUST, INC System and method for providing certification-related and other services
    9704155, Jul 29 2011 Visa International Service Association Passing payment tokens through an hop/sop
    9715681, Apr 28 2009 Visa International Service Association Verification of portable consumer devices
    9727858, Jul 26 2012 Visa U.S.A. Inc. Configurable payment tokens
    9741051, Jan 02 2013 Visa International Service Association Tokenization and third-party interaction
    9775029, Aug 22 2014 Visa International Service Association Embedding cloud-based functionalities in a communication device
    9780953, Jul 23 2014 Visa International Service Association Systems and methods for secure detokenization
    9792593, Nov 23 2011 The Toronto Dominion Bank System and method for processing an online transaction request
    9792611, May 15 2009 Visa International Service Association Secure authentication system and method
    9830595, Jan 26 2012 Visa International Service Association System and method of providing tokenization as a service
    9836735, Oct 07 2009 DIJBESZEDO INFORMATIKAI KFT Method for initiating and performing a CNP business transaction, software for the same and a communication device comprising such software
    9846861, Jul 25 2012 Visa International Service Association Upstream and downstream data conversion
    9846878, Jan 14 2014 Visa International Service Association Payment account identifier system
    9848052, May 05 2014 Visa International Service Association System and method for token domain control
    9898740, Nov 06 2008 Visa International Service Association Online challenge-response
    9904919, May 15 2009 Visa International Service Association Verification of portable consumer devices
    9911118, Nov 21 2012 Visa International Service Association Device pairing via trusted intermediary
    9911146, Feb 06 2006 International Business Machines Corporation Method and system for providing online authentication utilizing biometric data
    9922322, Dec 19 2013 Visa International Service Association Cloud-based transactions with magnetic secure transmission
    9942043, Apr 23 2014 Visa International Service Association Token security on a communication device
    9947010, Jul 15 2011 MASTERCARD INTERNATIONAL, INC Methods and systems for payments assurance
    9959531, Aug 18 2011 Visa International Service Association Multi-directional wallet connector apparatuses, methods and systems
    9972005, Dec 19 2013 Visa International Service Association Cloud-based transactions methods and systems
    9978062, May 15 2013 Visa International Service Association Mobile tokenization hub
    9978094, Oct 11 2013 Visa International Service Association Tokenization revocation list
    9996826, Apr 30 1999 PAYPAL, INC. System and methods for facilitating value exchanges using mobile devices
    9996835, Jul 24 2013 Visa International Service Association Systems and methods for communicating token attributes associated with a token vault
    THIS PATENT REFERENCES THESE PATENTS:
    Patent Priority Assignee Title
    4799156, Oct 01 1986 Strategic Processing Corporation Interactive market management system
    4947028, Jul 19 1988 Visa International Service Association Automated order and payment system
    5495533, Apr 29 1994 GOOGLE LLC Personal key archive
    5557518, Apr 28 1994 Citibank, N.A.; CITIBANK, N A Trusted agents for open electronic commerce
    5590197, Apr 04 1995 SSL SERVICES LLC Electronic payment system and method
    5594796, Oct 05 1994 MOTOROLA SOLUTIONS, INC Method and apparatus for detecting unauthorized distribution of data
    5621797, Apr 28 1994 Citibank, N.A. Electronic ticket presentation and transfer method
    5642419, Apr 28 1994 Citibank N.A. Method for acquiring and revalidating an electronic credential
    5671279, Nov 13 1995 Meta Platforms, Inc Electronic commerce using a secure courier system
    5677955, Apr 07 1995 FleetBoston Financial Corporation Electronic funds transfer instruments
    5703949, Apr 28 1994 Citibank, N.A. Method for establishing secure communications among processing devices
    5715314, Oct 24 1994 Soverain Software LLC Network sales system
    5724424, Dec 16 1993 Soverain IP, LLC Digital active advertising
    5744787, Sep 25 1994 CARDIS ENTERPRISE INTERNATIONAL N V System and method for retail
    5757917, Nov 01 1995 PayPal, Inc Computerized payment system for purchasing goods and services on the internet
    5790025, Aug 01 1996 International Business Machines Corporation Tamper detection using bulk multiple scattering
    5790677, Jun 29 1995 SET SECURE ELECTRONIC TRANSACTION LLC System and method for secure electronic commerce transactions
    5805798, Oct 29 1996 Hewlett Packard Enterprise Development LP Fail-safe event driven transaction processing system and method
    5812776, Jun 07 1995 Soverain IP, LLC Method of providing internet pages by mapping telephone number provided by client to URL and returning the same in a redirect command by server
    5822737, Feb 05 1996 SPINDLE MOBILE, INC Financial transaction system
    5825881, Jun 28 1996 Allsoft Distributing Inc. Public network merchandising system
    5826242, Oct 06 1995 Meta Platforms, Inc Method of on-line shopping utilizing persistent client state in a hypertext transfer protocol based client-server system
    5826245, Mar 20 1995 ECTOLINK, LLC Providing verification information for a transaction
    5850446, Jun 17 1996 Hewlett Packard Enterprise Development LP System, method and article of manufacture for virtual point of sale processing utilizing an extensible, flexible architecture
    5930777, Apr 15 1997 CLICK SALES INC Method of charging for pay-per-access information over a network
    5974146, Jul 30 1997 ENT SERVICES DEVELOPMENT CORPORATION LP Real time bank-centric universal payment system
    5991750, Oct 24 1997 Liberty Peak Ventures, LLC System and method for pre-authorization of individual account transactions
    6014636, May 06 1997 Alcatel-Lucent USA Inc Point of sale method and system
    6016484, Apr 26 1996 Hewlett Packard Enterprise Development LP System, method and article of manufacture for network electronic payment instrument and certification of payment and credit collection utilizing a payment
    6023682, Oct 21 1997 CITICORP Method and apparatus for credit card purchase authorization utilizing a comparison of a purchase token with test information
    6029150, Oct 04 1996 Certco, LLC Payment and transactions in electronic commerce system
    6049785, Dec 16 1993 Soverain IP, LLC Open network payment system for providing for authentication of payment orders based on a confirmation electronic mail message
    6058381, Oct 30 1996 HYPION NETWORK SRVC, LLC Many-to-many payments system for network content materials
    6163771, Aug 28 1997 PayPal, Inc Method and device for generating a single-use financial account number
    JP10063925,
    WO9516971,
    WO9741540,
    WO9814921,
    WO9821679,
    ASSIGNMENT RECORDS    Assignment records on the USPTO
    ///
    Executed onAssignorAssigneeConveyanceFrameReelDoc
    Jul 17 2003International Business Machines Corporation(assignment on the face of the patent)
    Sep 28 2012International Business Machines CorporationeBay IncASSIGNMENT OF ASSIGNORS INTEREST SEE DOCUMENT FOR DETAILS 0295120567 pdf
    Jul 17 2015eBay IncPayPal, IncASSIGNMENT OF ASSIGNORS INTEREST SEE DOCUMENT FOR DETAILS 0361590873 pdf
    MAINTENANCE FEES AND DATES:    Maintenance records on the USPTO
    Date Maintenance Fee Events
    Jun 17 2008ASPN: Payor Number Assigned.
    Jun 15 2009REM: Maintenance Fee Reminder Mailed.
    Sep 02 2009M1552: Payment of Maintenance Fee, 8th Year, Large Entity.
    Sep 02 2009M1555: 7.5 yr surcharge - late pmt w/in 6 mo, Large Entity.
    Jul 12 2013REM: Maintenance Fee Reminder Mailed.
    Dec 04 2013EXPX: Patent Reinstated After Maintenance Fee Payment Confirmed.
    Jul 18 2014M1553: Payment of Maintenance Fee, 12th Year, Large Entity.
    Jul 18 2014PMFP: Petition Related to Maintenance Fees Filed.
    Jul 18 2014M1558: Surcharge, Petition to Accept Pymt After Exp, Unintentional.
    Jan 12 2015PMFG: Petition Related to Maintenance Fees Granted.


    Date Maintenance Schedule
    Jul 29 20114 years fee payment window open
    Jan 29 20126 months grace period start (w surcharge)
    Jul 29 2012patent expiry (for year 4)
    Jul 29 20142 years to revive unintentionally abandoned end. (for year 4)
    Jul 29 20158 years fee payment window open
    Jan 29 20166 months grace period start (w surcharge)
    Jul 29 2016patent expiry (for year 8)
    Jul 29 20182 years to revive unintentionally abandoned end. (for year 8)
    Jul 29 201912 years fee payment window open
    Jan 29 20206 months grace period start (w surcharge)
    Jul 29 2020patent expiry (for year 12)
    Jul 29 20222 years to revive unintentionally abandoned end. (for year 12)