System and method for payment transaction authentication

• US 20040019564A1
• Filed: 07/26/2002
• Published: 01/29/2004
• Est. Priority Date: 07/26/2002
• Status: Abandoned Application

• Current Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Original Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Inventors: Crellin, Geoff, Goldthwaite, Scott, Graylin, William
• Application Number:
  US10/205,768
• Publication Number:
  US 20040019564A1
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3433 the counter having monetary units
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G07F 7/02 by keys or other credit registering devices

Abstract

An electronic payment system utilized by a customer to pay for the purchase of a good and/or a service with a payment card. The payment system includes a merchant server, an authentication server and a communication device. The merchant server is in connection with a first network and is adapted to receive a purchase order by the customer for the purchase of a good and/or a service and to create a digital purchase order. The authentication server is in connection with the first network and is adapted to receive the digital purchase order from the merchant server over the first network, format the digital purchase order into a first message and route it over a second network to the communication device. The communication device includes the identification information of the payment card, and is adapted to receive the first message from the authentication server over the second network, display the first message to the customer, request and receive authorization for payment for the purchase order from the customer, retrieve payment card identification information, request and receive payment card security information from the customer, and route the authorization result and in case of a positive authorization result the payment card identification and security information to the authentication server over the second network. The authorization result and payment card identification and security information are routed over the first network from the authentication server to the financial institution that has issued the payment card. The financial institution is asked to approve and execute the requested payment and to route the payment approval result through the authentication server to the merchant server and to the communication device.

Claims

1. An electronic payment system utilized by a customer to pay for a purchase of a good and/or a service with a payment card wherein said payment card is issued by a financial institution comprising:

a merchant server in connection with a first network, wherein said merchant server is adapted to receive a purchase order by said customer for the purchase of said good and/ or service and to create a digital order comprising purchase order information;

a payment server in connection with said first network, wherein said payment server is adapted to receive said digital order from said merchant server over said first network and to further route said digital order;

an authentication server in connection with said first network, wherein said authentication server is adapted to receive said digital order from said payment server over said first network, format said digital order into a first message and route said first message over a second network;

a communication device comprising identification information of said payment card, wherein said communication device is adapted to receive said first message from said authentication server over said second network, display said first message to said customer, request and receive authorization for payment for said purchase order with said payment card from said customer, retrieve payment card identification information, request and receive payment card security information from said customer, and route the authorization result and in case of a positive authorization result the payment card identification and security information to the authentication server over said second network; and

wherein said authorization result and payment card identification and security information are routed from said authentication server to said payment server over said first network and from said payment server to said financial institution over said first network system, wherein said financial institution is asked to approve and execute the requested payment and to route the payment approval result through said payment server to said merchant server and to said authentication server.

2. The electronic payment system of claim 1 wherein said authentication server further routes the payment approval result to said communication device.

3. The electronic payment system of claim 1 wherein said merchant server is further adapted to receive identification information for said communication device.

4. The electronic payment system of claim 3 wherein said authentication server is adapted to access said communication device via said communication device identification information and over said second network.

5. The electronic payment system of claim 2 wherein said communication device further comprises an authentication client application wherein said authentication client application comprises instructions for receiving said first message from said authentication server over said second network, displaying said first message to said customer, requesting and receiving authorization for payment for said purchase order with said payment card from said customer, retrieving payment card identification information, requesting and receiving payment card security information from said customer, routing the authorization result and in case of a positive authorization result the payment card identification and security information to the authentication server over said second network, and receiving said payment approval result and creating a record.

6. The electronic payment system of claim 1 wherein said merchant server upon receiving a positive approval result fulfills said purchase order.

7. The electronic payment system of claim 1 wherein said authentication server comprises an authentication server application and wherein said authentication server application comprises instructions for receiving said digital order from said payment server over said first network, formatting said digital order into a first message, routing said first message over a second network to said communication device, receiving said authorization result and payment card identification and security information from said communication device, routing said authorization result and payment card identification and security information to said payment server, receiving said payment approval result from said payment server, formatting said payment approval result into a second message and routing said second message to said communication device.

8. The electronic payment system of claim 1 wherein said communication device comprises a mobile wireless device and said second network comprises a wireless network.

9. The electronic payment system of claim 8 wherein said mobile wireless device is selected from a group consisting of a mobile phone, a personal digital assistant, a pager, wireless laptop computer, personal computer, television remote control, and combinations thereof.

10. The electronic payment system of claim 8 wherein said second network comprises a private communication network.

11. The electronic payment system of claim 8 wherein said second network is selected from a group consisting of a wireless wide area network (WWAN), a wireless local area network (WLAN), and a personal area network (PAN).

12. The electronic payment system of claim 1 wherein said communication device comprises a wired communication device and said second network comprises a wired network.

13. The electronic payment system of claim 12 wherein said wired communication device comprises a telephone and said wired network comprises a telecommunications network.

14. The electronic payment system of claim 12 wherein said wired communication device comprises a computer and said wired network comprises the Internet.

15. The electronic payment system of claim 1 wherein said first network comprises the Internet.

16. The electronic payment system of claim 1 wherein said first network comprises a telecommunication network.

17. The electronic payment system of claim 1 wherein said communication device comprises identification information for a plurality of payment cards issued by a plurality of financial institutions .

18. The electronic payment system of claim 1 wherein said communication device comprises a first Subscriber Identification Module (SIM) card wherein said first SIM card is adapted to store communication device and subscriber information.

19. The electronic payment system of claim 18 wherein said first SIM card is adapted to further store said payment card identification information.

20. The electronic payment system of claim 19 wherein said communication device further comprises an authentication client application and said first SIM card is adapted to further store said authentication client application.

21. The electronic payment system of claim 18 wherein said communication device further comprises a second SIM card, wherein said second SIM card is adapted to store said payment card identification information.

22. The electronic payment system of claim 21 wherein said communication device further comprises an authentication client application and said second SIM card is adapted to further store said authentication client application.

23. The electronic payment system of claim 19 wherein said communication device further comprises an attachment adapted to receive an external payment card and route said external payment card identification information through said communication device to said authentication server.

24. The electronic payment system of claim 21 wherein said communication device further comprises an attachment adapted to receive an external payment card and route said external payment card identification information through said communication device to said authentication server.

25. The electronic payment system of claim 1 wherein said communication device further comprises an attachment adapted to receive said payment card and route said payment card identification information through said communication device to said authentication server.

26. The electronic payment system of claim 21 wherein any of said SIM cards comprises a Universal Subscriber Identification Module (USIM), and wherein said USIM is adapted to support third-generation (3G) network requirements.

27. The electronic payment system of claim 1 wherein said payment card is selected from a group consisting of a credit card, debit card, a stored-value card, a coupon card, a reward card, an electronic cash card, loyalty card, and an identification card.

28. The electronic payment system of claim 1 wherein said merchant receives said purchase order via a route selected from a group consisting of the Internet, telephone connection, mail order form, fax, e-mail, voice recognition system, shot message service, interactive voice recording (IVR), and face-to-face interaction with the customer.

29. The electronic payment system of claim 1 wherein said purchase order information comprises at least one of price, currency indicator, product identification, product description, quantity, delivery method, delivery date, shipping and billing information, merchant identification, payment method, communication device identification information, and transaction number.

30. The electronic payment system of claim 1 wherein said first message comprises a format selected from a group consisting of Short Message Service (SMS), General Packet Radio Service (GPRS), Transmission Control Protocol/Internet Protocol (TCP/IP), User Datagram Protocol (UDP), Simple Mail Transmission Protocol (SMTP), Simple Network Management Protocol (SNMP), and proprietary message formats.

31. The electronic payment system of claim 1 wherein said identification information of said payment card comprises at least one of payment card number, payment card expiration date, cardholder'"'"'s name, cardholder'"'"'s contact information, cardholder'"'"'s account information, issuer financial institution identification, issuer financial institution contact information, and security information.

32. The electronic payment system of claim 1 wherein said security information of said payment card comprises at least one of a personal identification number (PIN), password, biometric signal, fingerprint, retinal scan, voice signal, digital signature, encrypted signature, username and password combination, identity certificate, public and private keys supporting Public Key Infrastructure (PKI), Universal Card Authentication Field (UCAF™

) and combinations thereof.

33. An electronic payment system utilized by a customer to pay for a purchase of a good and/or a service with a payment card wherein said payment card is issued by a financial institution comprising:

a merchant server in connection with a first network, wherein said merchant server is adapted to receive a purchase order by said customer for the purchase of said good and/ or service and to create a digital order comprising purchase order information;

an authentication server in connection with said first network, wherein said authentication server is adapted to receive said digital order from said merchant server over said first network, format said digital order into a first message and route said first message over a second network;

a communication device comprising identification information of said payment card, wherein said communication device is adapted to receive said first message from said authentication server over said second network, display said first message to said customer, request and receive authorization for payment for said purchase order with said payment card from said customer, retrieve payment card identification information, request and receive payment card security information from said customer, and route the authorization result and in case of a positive authorization result the payment card identification and security information to the authentication server over said second network; and

wherein said authorization result and payment card identification and security information are routed from said authentication server to said financial institution over said first network system, wherein said financial institution is asked to approve and execute the requested payment and to route the payment approval result through said authentication server to said merchant server and to said communication device.

34. An electronic payment system utilized by a customer to pay for a purchase of a good and/or a service with a payment card issued by a financial institution comprising:

a merchant server in connection with a first network, wherein said merchant server is adapted to receive a purchase order by said customer for the purchase of said good and/or service and to create a digital order comprising purchase order information;

a financial institution authentication server in connection with said first network, wherein said financial institution authentication server is adapted to receive said digital order from said merchant server over said first network, format said digital order into a first message and route said first message over a second network;

a communication device comprising identification information of said payment card, wherein said communication device is adapted to receive said first message from said financial institution authentication server over said second network, display said first message to said customer, request and receive authorization for payment for said purchase order with said payment card from said customer, retrieve payment card identification information, request and receive payment card security information from said customer, and route the authorization result and in case of a positive authorization result the payment card identification and security information to the financial institution authentication server over said second network; and

wherein said financial institution authentication server is asked to approve and execute the requested payment and to route the approval result to said merchant server and to said communication device.

35. A payment authentication system for authenticating the identity of a customer and the presence of a payment card in a non-face-to-face payment transaction wherein said customer purchases a good and/or a service from a merchant server comprising:

a payment server in connection with said a first network, wherein said payment server is adapted to receive a digital order from said merchant server over said first network and to further route said digital order;

an authentication server in connection with said first network, wherein said authentication server is adapted to receive said digital order from said payment server over said first network, format said digital order into a first message and route said first message over a second network;

a communication device comprising identification information of said payment card, wherein said communication device is adapted to receive said first message from said authentication server over said second network, display said first message to said customer, request and receive authorization for payment for said purchase order with said payment card from said customer, retrieve payment card identification information, request and receive payment card security information from said customer, and route the authorization result and in case of a positive authorization result the payment card identification and security information to the authentication server over said second network; and

wherein said authorization result and payment card identification and security information are routed from said authentication server to said payment server over said first network and from said payment server to a financial institution over said first network system, wherein said financial institution is the issuer of said payment card and is asked to approve and execute the requested payment and to route the payment approval result through said payment server to said merchant server and to said authentication server.

36. A payment authentication system for authenticating the identity of a customer and the presence of a payment card in a non-face-to-face payment transaction wherein said customer purchases a good and/or a service from a merchant server comprising:

an authentication server in connection with a first network, wherein said authentication server is adapted to receive a digital order from said merchant server over said first network, format said digital order into a first message and route said first message over a second network;

a communication device comprising identification information of said payment card, wherein said communication device is adapted to receive said first message from said authentication server over said second network, display said first message to said customer, request and receive authorization for payment for said purchase order with said payment card from said customer, retrieve payment card identification information, request and receive payment card security information from said customer, and route the authorization result and in case of a positive authorization result the payment card identification and security information to the authentication server over said second network; and

wherein said authorization result and payment card identification and security information are routed from said authentication server to a financial institution over said first network system, wherein said financial institution is the issuer of said payment card and is asked to approve and execute the requested payment and to route the payment approval result through said authentication server to said merchant server and to said communication device.

37. A payment authentication system for authenticating the identity of a customer and the presence of a payment card in a non-face-to-face payment transaction wherein said customer purchases a good and/or a service from a merchant server comprising:

an authentication server in connection with a first network, wherein said authentication server is adapted to receive a digital order from said merchant server over said first network, format said digital order into a first message and route said first message over a second network;

a communication device wherein said communication device is adapted to receive said first message from said authentication server over said second network, display said first message to said customer, request and receive authorization for payment for said purchase order with said payment card by said customer, request and receive payment card identification information and security information from said customer, and route the authorization result and in case of a positive authorization result the payment card identification and security information to the authentication server over said second network; and

wherein said authorization result and payment card identification and security information are routed from said authentication server to a financial institution over said first network system, wherein said financial institution is the issuer of said payment card and is asked to approve and execute the requested payment and to route the payment approval result through said authentication server to said merchant server and to said communication device.

38. An electronic payment method utilized by a customer for payment with a payment card for a purchase of a good and/or a service said payment method comprising:

providing a merchant server with identification information for a communication device wherein said merchant server offers said good and/or service and said communication device comprises identification information of said payment card;

creating a digital order comprising purchase order information and said identification number for said communication device by said merchant server;

routing said digital order to an authentication server via a first network;

formatting said digital order into a first message wherein said first message is adapted to be transmitted over a second network;

routing said first message over said second network to said communication device;

displaying said first message on said communication device;

requesting and receiving authorization of payment from the customer via said communication device;

retrieving payment card identification information from said communication device;

requesting and receiving payment card security information from said customer via said communication device;

routing authorization result and payment card identification and security information to said authentication server;

routing said authorization result and payment card identification and security information to a financial institution, wherein said financial institution is the issuer of said payment card; and

approving and executing said payment at said financial institution.

39. The electronic payment method of claim 38 further comprising:

before providing said merchant server with said identification information for said communication device;

placing a purchase order with said merchant server for said good and/or service; and

choosing to pay via said communication device.

40. The electronic payment method of claim 38 further comprising:

sending notification of said approval and execution of payment to said merchant server and said communication device.

41. The electronic payment method of claim 40 further comprising:

fulfilling said purchase order by said merchant server.

42. The electronic payment method of claim 38 wherein said communication device comprises a mobile wireless device and said second network comprises a wireless network.

43. The electronic payment method of claim 38 wherein said mobile wireless device is selected from a group consisting of a mobile phone, a personal digital assistant, a pager, a wireless laptop computer, a personal computer, a television remote control, and combinations thereof.

44. The electronic payment method of claim 38 wherein said second network is selected from a group consisting of a wireless wide area network (WWAN), a wireless local area network (WLAN), and a personal area network (PAN).

45. The electronic payment method of claim 38 wherein said communication device comprises a wired device and said second network comprises a wired network.

46. The electronic payment method of claim 45 wherein said wired communication device comprises a telephone and said wired network comprises a telecommunications network.

47. The electronic payment method of claim 45 wherein said wired communication device comprises a computer and said wired network comprises the Internet.

48. The electronic payment method of claim 38 wherein said first network comprises the Internet.

49. The electronic payment method of claim 38 wherein said first network comprises a telecommunication network.

50. The electronic payment method of claim 38 wherein said communication device comprises identification information for a plurality of payment cards issued by a plurality of financial institutions.

51. The electronic payment method of claim 38 wherein said communication device comprises a first Subscriber Identification Module (SIM) card wherein said first SIM card is adapted to store communication device and subscriber information for the second network.

52. The electronic payment method of claim 51 wherein said first SIM card is adapted to further store said identification information for said payment card.

53. The electronic payment method of claim 52 wherein said communication device further comprises an authentication client application and said first SIM card is adapted to further store said authentication client application.

54. The electronic payment method of claim 51 wherein said communication device further comprises a second SIM card, wherein said second SIM card is adapted to store said identification information for said payment card.

55. The electronic payment method of claim 54 wherein said communication device further comprises an authentication client application and said second SIM card is adapted to further store said authentication client application.

56. The electronic payment method of claim 52 wherein said communication device further comprises an attachment adapted to receive an external payment card and route said external payment card identification information through said communication device to said authentication server.

57. The electronic payment method of claim 54 wherein said communication device further comprises an attachment adapted to receive an external payment card and route said external payment card identification information through said communication device to said authentication server.

58. The electronic payment method of claim 38 wherein said communication device further comprises an attachment adapted to receive said payment card and route said payment card identification information through said communication device to said authentication server.

59. The electronic payment method of claim 54 wherein any of said SIM cards comprises a Universal Subscriber Identification Module (USIM), and wherein said USIM is adapted to support third-generation (3G) network requirements.

60. The electronic payment method of claim 38 wherein said payment card is selected from a group consisting of a credit card, debit card, a stored-value card, a coupon card, a reward card, an electronic cash card, loyalty card, and an identification card.

61. The electronic payment method of claim 38 wherein said merchant receives said purchase order via a route selected from a group consisting of the Internet, telephone connection, mail order form, fax, e-mail, voice recognition system, short message service SMS), interactive voice recording (IVR), and face-to-face interaction with the customer.

62. The electronic payment method of claim 38 wherein said purchase order information comprises at least one of price, currency indicator, product identification, product description, quantity, delivery method, delivery date, shipping and billing information, merchant identification, payment method, communication device identification information, and transaction number.

63. The electronic payment method of claim 38 wherein said first message comprises a format selected from a group consisting of Short Message Service (SMS), General Packet Radio Service (GPRS), Transmission Control Protocol/Internet Protocol (TCP/IP), User Datagram Protocol (UDP), Simple Mail Transmission Protocol (SMTP), Simple Network Management Protocol (SNMP), and proprietary message formats

64. The electronic payment method of claim 38 wherein said identification information of said payment card comprises at least one of payment card number, payment card expiration date, cardholder'"'"'s name, cardholder'"'"'s contact information, cardholder'"'"'s account information, issuer financial institution identification, issuer financial institution contact information, and security information

65. The electronic payment method of claim 38 wherein said security information of said payment card comprises at least one of a personal identification number (PIN), password, biometric signal, fingerprint, retinal scan, voice signal, digital signature, encrypted signature, username and password combination, identity certificate, public and private keys supporting Public Key Infrastructure (PKI), Universal Card Authentication Field (UCAF™

) and combinations thereof.

66. An electronic method of transacting a sale of a good and/or service by a merchant server comprising:

receiving a purchase order for said good and/or service;

receiving a request to pay via a communication device, wherein said communication device comprises identification information of a payment card;

receiving identification information for said communication device;

creating a digital order comprising purchase order information and communication device identification information;

routing said digital order to an authentication server via a first network;

formatting said digital order into a first message wherein said first message is adapted to be transmitted over a second network;

routing said first message over said second network to said communication device;

displaying said first message on said communication device;

requesting and receiving authorization of payment from a customer via said communication device;

retrieving payment card identification information from said communication device;

requesting and receiving payment card security information from said customer via said communication device;

routing authorization result and payment card identification and security information to said authentication server;

routing said authorization result and payment card identification and security information to a financial institution, wherein said financial institution is the issuer of said payment card;

approving and executing said payment at said financial institution;

receiving notification of said approval and execution of payment; and

fulfilling said purchase order by said merchant server.