Method and apparatus for performing a credit based transaction between a user of a wireless communications device and a provider of a product or service

• US 20020107791A1
• Filed: 01/12/2001
• Published: 08/08/2002
• Est. Priority Date: 10/06/2000
• Status: Active Grant

• Current Assignee: Unwired Planet LLC (JP Morgan Chase & Co)
• Original Assignee: Openwave Systems Incorporated (JP Morgan Chase & Co)
• Inventors: Nobrega, Ryan J., Valloppillil, Vinod V.
• Granted Patent: US 7,292,996 B2
• Time in Patent Office: Days
• US Class Current: 705/39
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/047 using payment protocols involving electronic receipts
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists

Abstract

A wireless telecommunications carrier operates a commerce platform in a trusted domain, which may store sensitive information associated with a consumer. During a credit card based transaction, a merchant'"'"'s POS terminal sends transaction information to an acquirer. The acquirer recognizes the transaction type and responds by routing the transaction information to the commerce platform. The commerce platform validates the transaction by verifying the identity of the user. When the transaction is validated, the commerce platform notifies the acquirer, which initiates a clearing process. When the transaction clears, the acquirer notifies the commerce platform and signals the merchant'"'"'s POS terminal to output a paper receipt. The commerce platform stores a digital receipt of the transaction and signals the wireless device to output a confirmation message to the consumer. The consumer'"'"'s credit card number and other sensitive information may be restricted to the trusted domain, which excludes the merchant.

Claims

1. A method of facilitating a credit card transaction between a consumer and a provider of a product or service, the method comprising:

a telecommunications carrier providing telecommunications services to users of a plurality of wireless communications devices on a wireless communications network, the plurality of users including said consumer; and

the telecommunications carrier validating the credit card transaction between the consumer and the provider.

2. A method as recited in claim 1, wherein an amount of revenue is generated as a result of the transaction, and wherein the method further comprises the telecommunications carrier receiving a portion of said revenue for validating the transaction.

3. A method as recited in claim 1, wherein said validating the credit card transaction comprises verifying the identity of the consumer.

4. A method as recited in claim 1, further comprising using a wireless communications device operated by the consumer to acquire information from the consumer for validating the transaction.

5. A method as recited in claim 1, wherein said validating the credit card transaction comprises associating independent actions by the consumer and the provider with the transaction.

6. A method as recited in claim 1, wherein said validating the credit card transaction comprises storing credit card information of the consumer within a trusted domain, the trusted domain excluding the provider.

7. A method as recited in claim 6, wherein the stored credit card information includes a credit card number of a credit card issued to the consumer, wherein the credit card number is used in the transaction, and wherein the transaction is executed without requiring the credit card number to be communicated to the provider or equipment operated by the provider.

8. A method as recited in claim 6, further comprising, after validating the transaction, transmitting the credit card information and information on the transaction to a remote entity within the trusted domain, for purposes of initiating a transaction approval process.

9. A method of facilitating a credit based transaction between a consumer and a provider of a product or service, the method comprising:

storing credit account information of the consumer within a trusted domain which excludes the consumer and the provider; and

using the stored credit account information to validate the transaction between the consumer and the provider, such that the stored credit account information is not sent outside the trusted domain during the transaction.

10. A method as recited in claim 9, wherein the stored credit account information includes a credit card number of a credit card issued to the consumer.

11. A method as recited in claim 10, wherein the credit card number is used in the transaction, and wherein the transaction is executed without requiring the credit card number to be communicated to the provider or to any equipment operated by the provider.

12. A method as recited in claim 9, wherein the consumer is a user of a wireless communications devices, the method further comprising using the wireless communications device to acquire information from the consumer for validating the transaction.

13. A method as recited in claim 12, further comprising using the wireless communications device to provide information confirming the transaction to the user.

14. A method as recited in claim 12, further comprising providing telecommunications services to users of a plurality of wireless communications devices on a wireless communications network, including storing user account information for each of the plurality of users, including said consumer.

15. A method as recited in claim 14, wherein an amount of revenue is generated as a result of the transaction, and wherein the method further comprises receiving a portion of said revenue in exchange for validating the transaction.

16. A method as recited in claim 9, further comprising, after validating the transaction, transmitting the credit card information and information on the transaction to a remote entity within the trusted domain, for purposes of initiating a transaction approval process.

18. A method as recited in claim 17, wherein said storing personal information of the consumer comprises storing personal information of the consumer in a database within a trusted domain, the trusted domain excluding the consumer and the provider.

19. A method as recited in claim 18, wherein the stored personal information of the consumer is not permitted to pass outside the trusted domain at any time during performance of said method.

20. A method as recited in claim 17, further comprising:

receiving a signal indicating the transaction has been approved; and

in response to receiving the signal indicating the transaction has been approved,

storing a digital receipt of the transaction, and

sending a signal to the wireless communication device to cause the wireless communication device to output a message confirming completion of the transaction.

21. A method as recited in claim 17, further comprising providing telecommunications services to users of a plurality of wireless communications devices on a wireless communications network, including storing user account information for each of the plurality of users, including said consumer.

22. A method as recited in claim 21, further comprising, prior to sending information on the transaction to the wireless communication device:

receiving a unique identifier of the wireless communication device from a remote entity; and

identifying the wireless communication device and an associated user account based on the unique identifier.

23. A method as recited in claim 22, further comprising verifying that the wireless communication device is in geographic proximity to the provider.

25. A method as recited in claim 24, wherein the stored personal information of the consumer is not permitted to pass outside the trusted domain at any time during performance of said method.

26. A method as recited in claim 24, further comprising providing telecommunications services to users of a plurality of wireless communications devices on a wireless communications network, including storing user account information for each of the plurality of users, including said consumer.

27. A method as recited in claim 26, further comprising, prior to sending information on the transaction to the wireless communication device:

receiving a unique identifier of the wireless communication device from a remote entity; and

identifying the wireless communication device and an associated user account based on the unique identifier.

28. A method as recited in claim 27, further comprising verifying that the wireless communication device is in geographic proximity to the provider.

29. A method as recited in claim 24, wherein the remote entity is within the trusted domain, and wherein said receiving information for requesting the transaction comprises receiving the information from the remote entity via a secure channel.

30. A method as recited in claim 24, wherein the stored digital receipt is remotely accessible to the consumer.

31. A method as recited in claim 24, providing a computer-implemented portal, through which the consumer can remotely access a commerce application;

32. A method as recited in claim 31, wherein the stored digital receipt is remotely accessible to the consumer via said portal.

17. A method of facilitating a credit card transaction between a consumer using a wireless communication device and a provider of a product or service, the method comprising:

storing personal information of the consumer, including a credit card number of a credit card issued to the consumer;

receiving information for requesting the transaction from a remote entity;

sending information on the transaction to the wireless communication device;

receiving a signal from the wireless communication device indicating acceptance of the transaction;

receiving a personal identification code from the wireless communication device;

using the received personal identification code and the stored personal information on the consumer to verify the identity of the consumer, and

if the identity of the consumer is verified, sending to a remote entity a transaction request including information on the transaction and the credit card number, for initiation of a transaction approval process.

24. A method of facilitating a credit card transaction between a consumer using a wireless communication device and a provider of a product or service, the method comprising:

storing personal information of the consumer in a database within a trusted domain, the trusted domain excluding the consumer and the provider, the personal information including a credit card number of a credit card issued to the consumer;

receiving information for requesting the transaction from a remote entity, the information for requesting the transaction including an amount of the transaction and a provider identifier;

storing the information for requesting the transaction;

sending information on the transaction to the wireless communication device via a wireless network;

receiving a signal from the wireless communication device indicating acceptance of the transaction by the consumer;

receiving a personal identification code from the wireless communication device via the wireless communications network;

using the received personal identification code and the stored personal information on the consumer to verify the identity of the consumer, and

if the identity of the consumer is verified, sending to a remote entity a transaction request including information on the transaction and the credit card number, for initiation of a transaction approval process, wherein the credit card information of the consumer is not permitted to pass outside the trusted domain;

receiving a signal indicating the transaction has been approved; and

in response to receiving the signal indicating the transaction has been approved,

storing a digital receipt of the transaction, and

sending a signal to the wireless communication device over the wireless communication network to cause the wireless communication device to output a message confirming completion of the transaction.

33. A method of facilitating a credit card transaction between a consumer and a provider of a product or service, the method comprising:

receiving information associated with the transaction from a remote terminal operated by the provider;

determining whether the transaction is of a predetermined type;

if the transaction is determined not to be of the predetermined type, then initiating a transaction approval process by transmitting at least a portion of the received information to a clearing network for approval of the transaction;

if the transaction is determined to be of the predetermined type, then

transmitting the received information to a remote validation entity other than the clearing network over a secure channel, to enable validation of the transaction by the remote validation entity, and

upon receiving an indication that the transaction has been validated by the remote validation entity, initiating a transaction approval process by transmitting at least a portion of the information to the clearing network for approval of the transaction.

34. A method as recited in claim 33, wherein the information received from the remote terminal does not include a credit card number if the transaction is of the predetermined type, such that the information transmitted to the remote validation entity does not include a credit card number, and such that the remote validation entity validates the transaction without requiring the consumer or the provider to communicate a credit card number in connection with the transaction.

35. A method as recited in claim 34, wherein the information received from the remote terminal includes a credit card number if the transaction is not of the predetermined type.

36. A method as recited in claim 33, wherein said determining whether the transaction is of a predetermined type comprises determining whether the transaction is of the predetermined type based on the information received from the remote terminal.

37. A method as recited in claim 36, wherein said determining whether the transaction is of a predetermined type comprises determining whether the received information includes a predetermined code.

38. A method as recited in claim 36, wherein the information received from the remote terminal may include a credit card number, and wherein said determining whether the transaction is of a predetermined type comprises determining whether the information received from the remote terminal includes a predetermined code in place of a credit card number.

40. A method as recited in claim 39, wherein the stored personal information of the consumer is not permitted to pass outside the trusted domain at any time during performance of said method.

39. A method of a telecommunications carrier facilitating a credit card transaction between a consumer using a wireless communication device and a provider of a product or service, the method comprising:

providing telecommunications services to users of a plurality of wireless communications devices on a wireless communications network, including storing user account information for each of the plurality of users, the plurality of users including said consumer;

storing personal information of the consumer in a database within a trusted domain, the trusted domain excluding the consumer and the provider, the personal information including a credit card number of a credit card issued to the consumer;

receiving information for requesting the transaction from a remote entity, the information for requesting the transaction including a unique identifier of the wireless communication device, an amount of the transaction, and a provider identifier;

storing the information for requesting the transaction;

identifying the wireless communication device and an associated user account based on the unique identifier;

verifying that the wireless communication device is in geographic proximity to the provider;

sending information on the transaction to the wireless communication device via a wireless network;

receiving a signal from the wireless communication device indicating acceptance of the transaction by the consumer;

receiving a personal identification code from the wireless communication device via the wireless communications network;

using the received personal identification code and the stored personal information on the consumer to verify the identity of the consumer, and

if the identity of the consumer is verified, sending to a remote entity a transaction request including information on the transaction and the credit card number, for initiation of a transaction approval process, wherein the credit card information of the consumer is not permitted to pass outside the trusted domain;

receiving a signal indicating the transaction has been approved; and

in response to receiving the signal indicating the transaction has been approved,

storing a digital receipt of the transaction, and

sending a signal to the wireless communication device over the wireless communication network to cause the wireless communication device to output a message confirming completion of the transaction.

41. A method of facilitating a credit card transaction between a consumer and a provider of a product or service, the method comprising:

providing a computer-implemented portal, through which the consumer can remotely access a commerce application;

storing personal information of the consumer in a database within a trusted domain, the trusted domain excluding the consumer and the provider, the personal information including a credit card number of a credit card issued to the consumer;

receiving, from a remote entity within the trusted domain, information for requesting the transaction, including an amount of the transaction and a provider identifier;

storing the information for requesting the transaction;

generating a session identifier corresponding to the transaction in response to receiving the information for requesting the transaction;

associating the session identifier with the stored information for requesting the transaction;

sending the session identifier to a remote entity, for subsequent communication to the consumer;

receiving a confidential personal identification code and a user-input session identifier from a wireless communication device via a wireless communications network;

using the received personal identification code, the user-input session identifier, and the stored personal information of the consumer to attempt to validate the transaction, including using the personal identification code and the stored personal information to verify the identity of the consumer, and

using the user-input session identifier to look up the stored information for requesting the transaction and to associate the consumer with the transaction;

if the transaction is successfully validated, then sending information on the transaction to the wireless communication device over the wireless network, to cause the wireless communication device to output a prompt to accept or decline the transaction;

receiving a signal from the wireless communication device indicating acceptance of the transaction;

in response to receiving the signal indicating acceptance of the transaction, sending to the remote entity a transaction request including information on the transaction and the credit card number, for initiation of a transaction approval process by a clearing network, without sending the credit card information outside the trusted domain;

receiving a signal indicating the transaction has been approved by the clearing network; and

in response to receiving the signal indicating the transaction has been approved by the clearing network,

storing a digital receipt of the transaction in association with the identity of the consumer; and

sending a signal to the wireless communication device over the wireless communication network to cause the wireless communication device to output a message confirming completion of the transaction.

42. A method as recited in claim 41, wherein the credit card number is not permitted to pass outside the trusted domain at any time during the transaction.

43. A method as recited in claim 41, wherein said receiving information for requesting the transaction comprises receiving the information for requesting the transaction via a secure channel.

44. A method as recited in claim 41, wherein the stored digital receipt is remotely accessible to the consumer.

45. A method as recited in claim 44, wherein the stored digital receipt is remotely accessible to the consumer via said portal.

47. An apparatus as recited in claim 46, wherein the stored credit card information includes a credit card number of a credit card issued to the consumer, wherein the credit card number is used in the transaction, and wherein the transaction is executed without requiring the credit card number to be communicated to the provider or equipment operated by the provider.

48. An apparatus as recited in claim 46, wherein the consumer is a user of a wireless communications devices, and wherein the apparatus further comprises:

means for using the wireless communications device to acquire information from the consumer for validating the transaction; and

means for using the wireless communications device to provide information confirming the transaction to the user.

49. An apparatus as recited in claim 48, further comprising means for providing telecommunications services to users of a plurality of wireless communications devices on a wireless communications network, including storing user account information for each of the plurality of users, including said consumer.

46. An apparatus for facilitating a credit card transaction between a consumer and a provider of a product or service, the apparatus comprising:

means for storing credit card information of the consumer within a trusted domain, the trusted domain excluding the consumer and the provider; and

means for using the stored credit card information to validate the transaction, such that the stored credit card information is not permitted to pass outside the trusted domain at any time in relation to the transaction.

50. A processing system to facilitate credit card transaction between a plurality of consumers using wireless communication devices and a plurality of providers of products or services, the processing system comprising:

a database of personal information of the consumers, including, for each of the consumers, a credit card number of a credit card issued to said consumer;

a processor; and

a memory containing instructions for execution by the processor to control operation of the processing system;

wherein the processing system is configured to

receive information for requesting a transaction from a remote entity;

send information on the transaction to one of the wireless communication devices;

receive a signal from the wireless communication device indicating acceptance of the transaction;

receive a personal identification code from the wireless communication device;

use the received personal identification code and the stored personal information on the consumer to verify the identity of the consumer, and

if the identity of the consumer is verified, send to a remote entity a transaction request including information on the transaction and the credit card number, for initiation of a transaction approval process.

51. A processing system as recited in claim 50, wherein the database of personal information of the consumers is stored within a trusted domain, the trusted domain excluding the consumer and the provider.

52. A processing system as recited in claim 51, wherein the stored personal information of the consumer is not permitted to pass outside the trusted domain at any time during performance of said method.

53. A processing system as recited in claim 50, wherein the processing system is operated by a telecommunications carrier providing wireless communications services to the plurality of consumers.

54. A processing system as recited in claim 50, wherein the processing system is further configured to verify that the wireless communication device is in geographic proximity to said provider.

55. A processing system as recited in claim 50, wherein the processing system is further configured to provide a computer-implemented portal, through which the consumer can remotely access a commerce application using the wireless communications device.

56. A processing system as recited in claim 50, wherein the processing system is further configured to:

receive a signal indicating the transaction has been approved; and

in response to receiving the signal indicating the transaction has been approved,

store a digital receipt of the transaction, and

send a signal to the wireless communication device to cause the wireless communication device to output a message confirming completion of the transaction.