Checkout system for on-line, card present equivalent interchanges

• US 20030018587A1
• Filed: 07/20/2001
• Published: 01/23/2003
• Est. Priority Date: 07/20/2001
• Status: Abandoned Application

• Current Assignee: Fleet Credit Card Services LP (Bank of America Corp.)
• Original Assignee: Fleet Credit Card Services LP (Bank of America Corp.)
• Inventors: Abbott, Michael J., Johnston, Thomas S., Althoff, Oliver T.
• Application Number:
  US09/910,256
• Publication Number:
  US 20030018587A1
• Time in Patent Office: Days
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07G 1/0036 Checkout procedures

Abstract

The present invention includes methods for providing merchant'"'"'s with verified information about a user during a remote electronic transaction; methods for carrying out a verified, remote electronic transaction over a network by providing verified user information to a merchant'"'"'s server, which information is necessary to complete the verified transaction; and systems enabling a user to complete a verified, remote electronic transactions over a network with a merchant, wherein the verified transactions include providing the merchant'"'"'s server with verified user information. Moreover, the present invention provides methods and systems for conducting verified, remote electronic transactions using a single access code. The system comprises one or more verifying servers that are maintained by the merchant or a third party; one or more servers that are maintained by a merchant, one or more digital, electronic devices that are maintained by the user or by a third party, and a machine-readable-data structure that interfaces with said digital, electronic device. The machine-readable data structure comprises at least one internal microprocessor that controls at least one internal semiconductor memory, having a secured first portion for storing verifiable user information and an unsecured second portion. Verifiable user information about the user, which is necessary to complete a verified, card present equivalent transaction, resides in the secured first portion of the semiconductor memory. A security algorithm and a previously registered security code reside on the unsecured second portion of the semiconductor memory. The verifiable user information is provided to the merchant server or, alternately, to the verifying server after the machine-readable data structure is read and a single access code that matches the previously registered security code is provided by the user.

Claims

1. A method for carrying out over a network at least one verified, remote electronic transaction between at least one user and at least one merchant by providing to a merchant'"'"'s server verified user information, which is necessary to complete the verified transaction, the method comprising:

interfacing a machine-readable data structure of the user with a digital, electronic device, wherein the digital, electronic device is connected to the network;

providing an access code via the digital, electronic device to unlock the machine-readable data structure and to thereby access a database of verifiable user information contained therein; and

providing the verifiable user information to the merchant over a communication link of the network to complete the transaction.

2. The method of claim 1, wherein verifiable user information is compared with similar user information residing on a verifying server on the network.

3. The method of claim 1, wherein the machine-readable data structure is selected from the group consisting of an integrated circuit card, a magnetic stripe card, and a bar coded card.

4. The method of claim 1, wherein at least one merchant is a verifiable merchant.

5. The method of claim 1, wherein the machine-readable data structure is unlocked by providing an access code through the digital, electronic device that matches a previously registered personal security code.

6. The method of claim 5, wherein the previously registered personal security code is contained in unsecured memory on the machine-readable data structure.

7. The method of claim 1, wherein a first communication link between said digital, electronic device and the merchant'"'"'s server is established following the unlocking of the machine-readable data structure.

8. The method of claim 1, wherein the communication link between the digital, electronic device and the merchant'"'"'s server is established through a second communication link from said digital, electronic device to a verifying server and then through a third communication link from said verifying server to said merchant'"'"'s server.

9. The method of claim 1, wherein verified user information is transmitted to at least one merchant'"'"'s server to populate at least one merchant'"'"'s check-out form.

10. The method of claim 9, wherein verified user information is transmitted to at least one merchant'"'"'s server to populate at least one merchant'"'"'s check-out form, following verification of the user'"'"'s information at a verifying server.

11. The method of claim 9, wherein said check-out form is populated manually by the user.

12. The method of claim 9, wherein said check-out form is populated automatically.

13. The method of claim 1, wherein verified user information is transmitted to at least one merchant'"'"'s server by automatically populating a merchant'"'"'s order database and transaction systems.

14. The method of claim 13, wherein verified user information is transmitted to at least one merchant'"'"'s server by automatically populating a merchant'"'"'s order database and transaction systems following verification of the user'"'"'s information at a verifying server.

15. The method of claim 1, wherein the merchant'"'"'s server contains server-side software to accept direct transmission of verified user information from the machine-readable data structure, without using forms.

16. The method of claim 1, wherein the network is selected from the group consisting of local area networks, wide area networks, the Internet, and Wireless and Mobile networks.

17. The method of claim 1, comprising the additional steps of:

providing authorization from the user to complete said verified transaction;

completing said verified transaction;

providing at least one message to the merchant, indicating that said verified transaction comprises a valid, card present equivalent transaction; and

providing at least one message, comprising at least one transaction number, to the user'"'"'s digital, electronic device to confirm the sale.

19. The method of claim 18, wherein said access code is verified by comparing said access code with a previously registered security code stored on a machine-readable data structure.

20. The method of claim 19, wherein said access code is verified by presenting said access code through a digital, electronic device to the machine-readable data structure.

21. The method of claim 18, wherein said unique user information is released for verification against similar data stored in at least one database of the at least one verifying server.

22. The method of claim 21, wherein said unique user information is released for verification against similar data stored in at least one database of the at least one verified server upon verification of the access code.

23. The method of claim 18, wherein the network is selected from the group consisting of local area networks, wide area networks, the Internet, and Wireless and Mobile networks.

25. The system of claim 24, wherein the system further comprises a registered personal security code that is stored in said secure memory cache of said machine-readable data structure.

26. The system of claim 24, wherein the machine-readable data structure comprises at least one of an integrated circuit card, a magnetic stripe card, or a bar coded card.

27. The system of claim 26, wherein the integrated circuit card, having a surface, further comprises:

at least one internal microprocessor,

at least one internal semiconductor memory, having a secured first portion for storing verifiable user information and an unsecured second portion, wherein said at least one internal semiconductor memory is controlled by said at least one internal microprocessor; and

at least one mass-storage memory, wherein said at least one mass storage memory is accessible from the surface of the card.

28. The system of claim 24, wherein said machine-readable data structure can be unlocked by a security algorithm.

29. The system of claim 28, wherein said machine-readable data structure can be unlocked by inputting an access code.

30. The system of claim 29, wherein said machine-readable data structure is unlocked after the access code inputted by the user is verified against a previously registered security code that is stored in said secured first portion of said internal semiconductor memory.

31. The system of claim 30, wherein said previously registered security code is resident in one or more memory on the machine-readable data structure.

32. The system of claim 29, wherein said system further comprises software capable of providing verified user information to at least one verifying server for verification upon prior successful access code verification.

33. The system of claim 24, wherein at least one verifying server provides verified user information to said merchant'"'"'s server to populate a merchant'"'"'s check-out form contained therein.

34. The system of claim 33, wherein said at least one verifying server provides verified user information to said merchant'"'"'s server by automatically populating an order database and transaction system.

35. The system of claim 33, wherein said merchant'"'"'s server contains server-side software to accept direct transmission of the user'"'"'s machine-readable data, without using forms.

36. The system of claim 35, wherein said direct transmission of the user'"'"'s machine readable data is stored originally on the user'"'"'s machine-readable data structure.

37. The system of claim 33, wherein the user manually populates the merchant'"'"'s check-out form by dragging verified user information from at least one pop-up window and dropping the dragged information into an appropriate location of the merchant'"'"'s check-out form.

18. A method for providing verified information about at least one user over a network to at least one merchant during at least one electronic transaction, the method comprising the steps:

providing at least one access code provided by the at least one user and unique user information to at least one verifying server, wherein said verifying server is connected to the network;

verifying said access code and unique user information; and

providing verified user information to the at least one merchant.

24. A system enabling a user to complete one or more verified, remote electronic transactions over a network with at least one merchant, said merchant having a server, wherein said verified transactions are completed by providing the merchant'"'"'s server with verified user information, the system comprising:

a network;

at least one remote verifying server, wherein said remote verifying server is connected to the network and is capable of receiving and verifying verified user information;

at least one remote server maintained by a merchant, wherein the merchant'"'"'s at least one remote server is connected to the network and is capable of accessing said remote verifying server to receive verified user information therefrom;

at least one remote digital, electronic device that is maintained by the user or by a third party, wherein said digital, electronic device is connected to the network and is capable of accessing said verifying server to transmit verified user information and said remote server maintained by a merchant to initiate and complete said verified, remote electronic transactions; and

a machine-readable-data structure, having at least one secure memory cache, which interfaces with said digital, electronic device.