Electronic authorization system and method

• US 10,673,824 B2
• Filed: 03/06/2017
• Issued: 06/02/2020
• Est. Priority Date: 04/29/2005
• Status: Active Grant

• Current Assignee: Merchant-Link LLC (JP Morgan Chase & Co)
• Original Assignee: Merchant-Link LLC (JP Morgan Chase & Co)
• Inventors: Bauer Marshall, Stephanie, Freedman, Jonathan N., Lane, Daniel J., Jaffe, Miriam, Zloth, Susan M.
• Primary Examiner(s): Pearson, David J
• Application Number:
  US15/451,070
• Publication Number:
  US 20170180333A1
• Time in Patent Office: 1,184 Days
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

An electronic authorization system comprising a data source system configured to transmit transaction data. A secure data system is coupled to the data source system over an open network, the secure data system is configured to receive the transaction data from the data source system, generate a unique encrypted identifier for the transaction data and to transmit the unique encrypted identifier to the data source system. The data source system is configured to receive the unique encrypted identifier and replace payment card data associated with the transaction data in a database with the unique encrypted identifier.

Claims

1. An electronic data processing method, comprising:

receiving a confidential electronic data record and an associated electronic data record at a first electronic data processing system;

electronically transmitting the confidential electronic data record and the associated electronic data record from the first electronic data processing system to a second electronic data processing system over an encrypted communications medium;

generating an electronic unique encrypted identifier associated with the confidential electronic data record and the associated electronic data record using the second electronic data processing system;

electronically transmitting the electronic unique encrypted identifier from the second electronic data processing system to the first electronic data processing system; and

storing the electronic unique encrypted identifier with the associated electronic data record and with a time field in an electronic data memory device, wherein the time field is used to determine a storage period for the electronic unique encrypted identifier, wherein the storage period is determined as a function of response data.

2. The method of claim 1 wherein the storage period is determined as a function of an additional electronic data record that is received over the encrypted communications medium.

3. The method of claim 1 wherein the storage period is determined as a function an additional electronic data record that is received over the encrypted communications medium in response to a settlement request.

4. The method of claim 1 further comprising determining whether the storage period has elapsed and deleting the electronic unique encrypted identifier if the storage period has elapsed.

5. The method of claim 1 further comprising retrieving the electronic unique encrypted identifier from the electronic data memory device and transmitting the retrieved electronic unique encrypted identifier to the second electronic data processing system over the encrypted communications medium.

6. The method of claim 1 further comprising retrieving the electronic unique encrypted identifier from the electronic data memory device and transmitting the retrieved electronic unique encrypted identifier and an electronic request record to the second electronic data processing system over the encrypted communications medium.

7. The method of claim 6 further comprising:

receiving the retrieved electronic unique encrypted identifier and the electronic request record at the second electronic data processing system;

extracting the confidential electronic data record from an electronic data memory device; and

processing the confidential electronic data record as a function of one or more instructions in the electronic request record.

8. The method of claim 7 further comprising:

generating an electronic response data record associated with the electronic request record after processing the confidential electronic data record;

storing the electronic response data record at the second electronic data processing system;

retrieving the electronic unique encrypted identifier; and

transmitting the electronic response data record and the electronic unique encrypted identifier to the first electronic data processing system.

9. The method of claim 1 further comprising retrieving the electronic unique encrypted identifier from the electronic data memory device and transmitting the retrieved electronic unique encrypted identifier and an electronic settlement request record to the second electronic data processing system over the encrypted communications medium.

10. The method of claim 9 further comprising:

receiving the retrieved electronic unique encrypted identifier and the electronic settlement request record at the second electronic data processing system;

extracting the confidential electronic data record from an electronic data memory device; and

performing settlement processing with a settlement system using the confidential electronic data record as a function of one or more instructions in the electronic settlement request record.

11. The method of claim 10 further comprising:

generating an electronic settlement response data record associated with the electronic settlement request record after processing the confidential electronic data record;

storing the electronic settlement response data record at the second electronic data processing system;

retrieving the electronic unique encrypted identifier; and

transmitting the electronic settlement response data record and the electronic unique encrypted identifier to the first electronic data processing system.

12. The method of claim 11 wherein the storage period is determined as a function of the electronic settlement response data record.

13. The method of claim 1 further comprising retrieving the electronic unique encrypted identifier from the electronic data memory device and transmitting the retrieved electronic unique encrypted identifier and an electronic reporting request record to the second electronic data processing system over the encrypted communications medium.

14. The method of claim 13 further comprising:

receiving the retrieved electronic unique encrypted identifier and the electronic reporting request record at the second electronic data processing system;

extracting the confidential electronic data record from an electronic data memory device; and

performing report processing with a reporting system using the confidential electronic data record as a function of one or more instructions in the electronic report request record.

15. The method of claim 14 further comprising:

generating an electronic reporting response data record associated with the electronic request record after processing the confidential electronic data record;

storing the electronic reporting response data record at the second electronic data processing system;

retrieving the electronic unique encrypted identifier; and

transmitting the electronic reporting response data record and the electronic unique encrypted identifier to the first electronic data processing system.

16. The method of claim 15 wherein the storage period is determined as a function of the electronic reporting response data record.

17. An electronic data processing method, comprising:

receiving a confidential electronic data record and an associated electronic data record at a first electronic data processing system;

electronically transmitting the confidential electronic data record and the associated electronic data record from the first electronic data processing system to a second electronic data processing system over and encrypted communications medium;

generating an electronic unique encrypted identifier associated with the confidential electronic data record and the associated electronic data record using the second electronic data processing system;

electronically transmitting the electronic unique encrypted identifier from the second electronic data processing system to the first electronic data processing system; and

storing the electronic unique encrypted identifier with the associated electronic data record and with a time field in an electronic data memory device, wherein the time field is used to determine a storage period for the electronic unique encrypted identifier, wherein the storage period is determined as a function of an electronic settlement response data record.

18. An electronic data processing method, comprising:

receiving a confidential electronic data record and an associated electronic data record at a first electronic data processing system;

electronically transmitting the confidential electronic data record and the associated electronic data record from the first electronic data processing system to a second electronic data processing system over an encrypted communications medium;

generating an electronic unique encrypted identifier associated with the confidential electronic data record and the associated electronic data record using the second electronic data processing system;

electronically transmitting the electronic unique encrypted identifier from the second electronic data processing system to the first electronic data processing system; and

storing the electronic unique encrypted identifier with the associated electronic data record and with a time field in an electronic data memory device, wherein the time field is used to determine a storage period for the electronic unique encrypted identifier, wherein the storage period is determined as a function of an electronic reporting response data record.