Electronic transactions and payments system

• US 20030130958A1
• Filed: 10/30/2002
• Published: 07/10/2003
• Est. Priority Date: 01/18/2000
• Status: Abandoned Application

• Current Assignee: CAZH Pte Limited
• Original Assignee: CAZH Pte Limited
• Inventors: Swaminathan, Vishnuram, Singh, Navtej, Narayanan, Shankar
• Application Number:
  US10/181,165
• Publication Number:
  US 20030130958A1
• Time in Patent Office: Days
• US Class Current: 705/73
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

Secure electronic transaction system is provided between a plurality of computer systems and other electronic terminals wholly or partly over a public communication system such as the internet, a closed communication system such as a banking network or point-to-point communications such as dial-up connections and leased lines. Secure transmission of transaction information instructions and payment instructions is provided from a customer'"'"'s computer system to the customer'"'"'s bank'"'"'s computer system. The bank'"'"'s computer system processes and evaluates the instructions and transmits by way of secure transmissions the transaction instructions and payment instructions to the merchant'"'"'s computer system.

Claims

1. A method for conducting an electronic transaction between a first person having a first computer and a second person having a second computer, the first and second computers being able to be connected to each other by at least one communication network, the method including the steps of:

(a) establishing a communication between the first computer and the second computer via the communication channel;

(b) receiving at the first computer a request for payment from the second computer;

(c) the first person using the first computer to pass a payment instruction to a first bank to effect payment to the second person;

(d) the first computer receiving a request from the first bank for identity and login information from the first person, and the first person using the first computer for supplying to the first bank the identity and login information of the fist person for enabling the first bank to effect a debit transaction to debit an account of the first person and to effect a corresponding payment transaction to the second person; and

(e) the first computer receiving from the first bank approval of both transactions.

3. A method as claimed in claim 1 and claim 2, wherein the request for payment is passed from the second computer to the first computer via a server.

4. A method as claimed in any one of claims 1 to 3, wherein the first bank passes a notification of approval of the payment to the second computer.

5. A method as claimed in claim 3 or claim 4, wherein the first bank effects the payment transaction to the second computer.

6. A method as claimed in claim 5, wherein the payment transaction is effected via the server.

7. A method as claimed in claim 3 or claim 6, wherein the server collects and collates information regarding the payment transaction and the request for payment.

8. A method as claimed in any one of claims 1 to 7, wherein all communications was the communication network are subject to security selected from the group consisting of:

encryption and SSL Protocol.

9. A method as claimed in any one of claim 1 to 8, wherein the first computer produces a transaction information instruction in relation to the second computer.

10. A method as claimed in claim 9, wherein the transaction information instruction is sent from the first computer to the first bank

11. A method as claimed in claim 10, wherein the first computer also produces a payment authorization instruction on behalf of the first person.

12. A method as claimed in claim 11, wherein the payment authorization instruction is sent from the first computer to the first bank at the same time as the transaction information instruction is sent.

13. A method as claimed in claim 12, wherein in response to the receipt of the transaction information instruction and the payment authorization instruction, the bank produces and sends to the second computer a confirmed order and payment instruction.

14. A method as claimed in claim 13, wherein the confirmed order and payment instruction contains only that information from the payment authorization instruction as is required for the second person to be able to process the payment transaction.

15. A method as recited in any one of claims 1 to 14, including transmitting authentication information and an authentication instruction from the first computer to a certification authority to authenticate the identity of the first person;

and to authenticate the transaction information instruction, or the payment authorisation instruction, or both the transaction information instruction and the payment authorisation instruction, from the first computer to the first bank before processing of the transaction information instruction or the payment authorisation instruction or both the transaction information instruction and the payment authorisation instruction.

16. A method as recited in any one of claims 1 to 15 including transmitting authentication information and an authentication instruction from the first bank to a certification authority to authenticate the identity of the first bank;

and to authenticate the transaction information instruction, or the payment authorisation instruction, or both the transaction information instruction and the payment authorisation instruction, from the first computer to the first bank before processing of the transaction information instruction or the payment authorisation instruction or both the transaction information instruction and the payment authorisation instruction.

17. A method as claimed in claim 15 or claim 16, including transmitting further authentication information and a farther authentication instruction from the second computer to the certification authority, to authenticate the identity of the second person and to authenticate the confirmed order and payment instruction from the first bank to the second computer before processing of the confirmed order and payment instruction.

18. A method as claimed in any one of claims 13 to 17, wherein the confirmed order and payment instruction is transmitted to a third computer trusted by the second person from the first bank, the confirmed order and payment instruction is sent from the first bank to the third computer;

and the processed confirmed order and payment instruction is transmitted from the third computer to the second computer.

19. A method as claimed in claim 18, wherein the transmission from the third computer to the second computer is via the server.

20. A method as claimed in claim 18 or 19, wherein the transmission to the third computer from the first bank is via the server.

21. A method as claimed in any one of claims 1 to 20, wherein the second computer includes a second component to integrate with the second person'"'"'s software to implement message composition, encryption, hashing, and message sending routines.

22. A method as claimed in claim 21, wherein the second component includes a transaction generator that accepts messages from the second person and, depending upon the type of transaction, sends a second message to the server.

23. A method as claimed in claim 22, wherein the second message is a transaction message from the second person and the second computer sends the second message to the server by redirecting the first person to the server.

24. A method as claimed in claim 22 or claim 23, wherein the second computer retrieves result messages sent by the server when the first computer is redirected back to the second computer after the transaction is completed.

25. A method as claimed in any one of claims 1 to 24, wherein there is a bank component responsible for authentication of the first person, communication with the bank'"'"'s legacy systems, and to enable the bank to debit the first person for the required amount.

26. A method as claimed in any one of claims 1 to 24, wherein the server includes a transaction processor to receive redirected messages from the second computer, validate the transaction, record the transaction in a database, and to send it to the first bank.

27. A method as claimed in claim 26, wherein the server receives status request messages from the second person regarding the status of an ongoing transaction, in response to which the server checks for the status in the database and advises the second person.

28. A method as claimed in claim 26 or claim 27, wherein the server also includes a settlement module by which the second person can request settlement of its transactions;

whereupon the server prepares settlement files for a second bank of the second person and sends them to the second bank to credit an account of the second person, and to the first bank to debit the account of the first person.

31. A method as claimed in any one of claims 1 to 30, wherein the first person is a customer and the second person is a merchant, the request for payment being as a result of an order being placed with the merchant by the customer, the order being placed by the customer using the first computer, and being received by the merchant using the second computer.

32. A method as claimed in claim 31, wherein the order is placed by the customer as a result of the merchant supplying to the customer information about at least one product, the information passing from the second computer to the first computer.

33. A method as claimed in claim 31 or claim 32, wherein the first bank is a bank of the customer.

34. A method as claimed in any one of claims 31 to 33, wherein the second bank is a bank of the merchant.

35. A method as claimed in any one of claims 31 to 32, wherein the third computer is a merchant bank computer operated by a financial institution with which the merchant establishes an account and which also processes said confirmed order and payment instructions on the merchant'"'"'s account.

36. A computer readable medium including a series of program instructions for performing the method of any one of claims 1 to 35.

2. A method for conducting an electronic transaction between a first person having a first computer and a second person having a second computer, the first and second computers being able to be connected to each other by at least one communication network, the method including the steps of:

(a) establishing a communication between the first computer and the second computer via the communication channel;

(b) sending from the second computer to the first computer a request for payment for the first person to use the first computer to pass a payment instruction to a first bank to effect payment to the second person, and for enabling the first bank to effect a debit transaction to debit an account of the first person; and

(c) the second computer receiving a corresponding payment from the first bank.

29. A method for conducting an electronic transaction between a first person having a first computer and a second person having a second computer, the first and second computers being able to be connected to each other by at least one communication network via a server, the method including the steps of:

(a) the server receiving a communication from the first computer via the comunication channel, the communication containing a request for payment to the second person;

(b) the server advising the second computer of the request for payment and requesting details of the second person'"'"'s bank;

(c) the server receiving the first person using the first computer a payment instruction to effect payment to the second person;

(d) conveying to the first person a request from a first bank for identity and login information from the first person, to enable the first person to use the first computer for supplying to the first bank the identity and login information of the first person thus enabling the first bank to effect a debit transaction to debit an account of the first person and to effect a corresponding payment transaction to the second person; and

(e) sending to the first computer advice of completing of the transactions.

30. A method as claimed in claim 29, wherein the server receives bank account details from the second person before proceeding with step (c).