Online ATM transaction with digital certificate

• US 20050085931A1
• Filed: 02/27/2003
• Published: 04/21/2005
• Est. Priority Date: 08/31/2000
• Status: Abandoned Application

• Current Assignee: Accullink Incorporated (Fiserv Incorporated)
• Original Assignee: Accullink Incorporated (Fiserv Incorporated)
• Inventors: Willeby, Tandy
• Application Number:
  US10/375,290
• Publication Number:
  US 20050085931A1
• Time in Patent Office: Days
• US Class Current: 700/89
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/26 Debit schemes, e.g. "pay now"
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/202 Depositing operations within ATMs depositing in general G07D11/00
• CPC Class Codes: G07F 19/211 Software architecture within ATMs or in relation to the ATM network

Abstract

A system and method are provided for performing a secure ATM debit transaction for a buyer making a payment to a seller over the Internet. The system comprises an ATM debit network, a seller web site, a transaction computer system, and a software program. The ATM debit network links together a plurality of banks, financial institutions, and ATM machines. The seller web site is accessible to the buyer via the Internet. The transaction computer system is adapted to be communicably coupled to the seller web site and the ATM debit network as needed to perform the secure ATM debit transaction. The software program on the transaction computer system is adapted to authorize and facilitate the secure ATM transaction between the seller and the buyer using at least one digital certificate. When the secure ATM transaction is authorized by at least authenticating the at least one digital certificate, the software program submits a debit request to the ATM debit network corresponding to the secure ATM debit transaction.

Claims

1. A system for performing an ATM debit transaction over the Internet, comprising:

a transaction computer system adapted to be communicably coupled to each of a payee computer system and an ATM debit network as needed during said ATM debit transaction, said transaction computer system having software adapted to authenticate an identity of a payor using a payor digital certificate provided by said payor and adapted to debit funds from a bank account of said payor via said ATM debit network if said identity of said payor is authenticated by a decryption of said payor digital certificate.

2. A system in accordance with claim 1, wherein said transaction computer system further comprises software adapted to authenticate an identity of a payee using a payee digital certificate provided by said payee and adapted to deposit said debited funds in an account of said payee.

3. A system in accordance with claim 1, wherein said software comprises plural subprograms that can be called upon by said software program as needed.

4. A system in accordance with claim 1, wherein said software runs and resides on a single computer machine.

5. A system in accordance with claim 1, wherein said transaction computer system is a single computer machine at a single physical location.

6. A system in accordance with claim 1, wherein said transaction computer system comprises plural computer machines.

7. A system in accordance with claim 6, wherein said software comprises plural components distributed on said plural computer machines of said transaction computer system.

8. A system in accordance with claim 6, wherein said plural computer machines of said transaction computer system are distributed among different physical locations.

9. A system in accordance with claim 6, wherein said plural computer machines of said transaction computer system reside in a single building.

10. A system in accordance with claim 1, wherein said transaction computer system comprises a gateway server, a certificate authority server, a business server, and a database server.

11. A system in accordance with claim 1, wherein said payor digital certificate exchange involves an asymmetric cryptography process.

12. A system for transacting electronic commerce payments over the Internet, comprising:

a bank account debit network linking together a plurality of financial institutions;

a payee computer system communicably coupled to the Internet;

a payor computer system communicably coupled to the Internet, such that said payor computer system can be communicably coupled to said payee computer system via the Internet;

a transaction computer system communicably coupled to said payee computer system and said bank account debit network; and

a software program on said transaction computer system adapted to authorize a bank account debit transaction between said payee computer system and said payor computer system using at least one digital certificate exchange for at least partial authorization of said bank account debit transaction, and said software program being adapted to submit said bank account debit transaction to said bank account debit network for debiting money from a bank account of a payor if said bank account debit transaction has been authenticated and authorized using said at least one digital certificate exchange.

13. A system in accordance with claim 12, wherein said bank account debit network is an ATM debit network.

14. A system in accordance with claim 12, wherein said software program comprises plural subprograms that can be called upon by said software program as needed.

15. A system in accordance with claim 12, wherein said software program runs and resides on a single computer machine.

16. A system in accordance with claim 12, wherein said transaction computer system is a single computer machine at a single physical location.

17. A system in accordance with claim 12, wherein said transaction computer system comprises plural computer machines.

18. A system in accordance with claim 17, wherein said software comprises plural components distributed on said plural computer machines of said transaction computer system.

19. A system in accordance with claim 17, wherein said plural computer machines of said transaction computer system are distributed among different physical locations.

20. A system in accordance with claim 17, wherein said plural computer machines of said transaction computer system reside in a single building.

21. A system in accordance with claim 12, wherein said transaction computer system comprises a gateway server, a certificate authority server, a business server, and a database server.

22. A system in accordance with claim 12, wherein said at least one digital certificate exchange involves an asymmetric cryptography process.

23. A system in accordance with claim 12, wherein said at least one digital certificate exchange involves the submission of a payee digital certificate to said transaction computer system and submission of a payor digital certificate to said transaction computer system to authenticate the identity of parties to said bank account debit transaction.

24. A system for performing a secure ATM transaction for a buyer making a payment to a seller over the Internet, comprising:

an ATM network linking together a plurality of banks;

a seller web site accessible to said buyer via the Internet;

a transaction computer system adapted to be communicably coupled to said seller web site and said ATM network as needed to perform said secure ATM transaction; and

a software program on said transaction computer system adapted to authorize and facilitate said secure ATM transaction between said seller and said buyer using at least one digital certificate to verify the identity of at least one of said buyer and said seller, and when said secure ATM transaction is authorized, said software program being adapted to submit a debit request to said ATM network corresponding to said secure ATM transaction.

25. A system in accordance with claim 24, wherein said at least one digital certificate exchange involves asymmetric cryptography.

26. A system in accordance with claim 24, wherein said at least one digital certificate exchange involves the submission of a seller digital certificate to said transaction computer system and submission of a buyer digital certificate to said transaction computer system to authenticate the identity of both parties to said secure ATM transaction over the Internet.

27. A system for authenticating identities of parties to an ATM debit transaction occurring over the Internet, comprising:

a transaction computer system located remotely from a first computer system of a first party to said ATM debit transaction, said transaction computer system comprising a software program adapted to authenticate the identity of said first party using a digital certificate presented to said transaction computer system by said first party, wherein said transaction computer system is adapted to be communicably coupled to an ATM debit network as needed, wherein said first computer system is adapted to be communicably coupled to said transaction computer system as needed, and wherein a second computer system of a second party to said ATM debit transaction communicates with said first computer system via the Internet when said ATM debit transaction is initiated.

28. A system in accordance with claim 27, wherein said first party is a buyer and said second party is a seller.

29. A system in accordance with claim 27, wherein said first party is a seller and said second party is a buyer.

30. A system in accordance with claim 27, wherein said use of said digital certificate involves asymmetric cryptography.

31. A method of performing a bank account debit transaction over the Internet, comprising the steps of:

requiring a payor to provide a payor digital certificate that can authenticate the identity of said payor;

verifying the authenticity of said payor digital certificate on a transaction computer system; and

if said payor digital certificate is authenticated, debiting funds from a bank account of said payor via a bank account debit network, wherein said transaction computer system is communicably coupled to said bank account debit network as needed during said debiting step.

32. A method in accordance with claim 31, wherein said payor is a buyer purchasing goods or services from a web site.

33. A method in accordance with claim 31, wherein said payor is a person or entity paying a bill over the Internet.

34. A method in accordance with claim 31, wherein said payor is a person or entity subscribing to at least one of a magazine, journal, newspaper, and news service over the Internet.

35. A method in accordance with claim 31, wherein said payor is person purchasing a lottery ticket over the Internet.

36. A method in accordance with claim 31, wherein said payor is a person playing a casino game over the Internet.

37. A method in accordance with claim 31, wherein said payor is a person gambling over the Internet.

38. A method in accordance with claim 31, wherein said payor is a person or entity sending money to another person or entity over the Internet.

39. A method in accordance with claim 31, wherein said payor is a person or entity buying groceries over the Internet.

40. A method in accordance with claim 31, wherein said payor is a person or entity buying at least one of a book, video, music recording, game, and software program over the Internet that will be delivered to said person or entity by parcel deliver.

41. A method in accordance with claim 31, wherein said payor is a person or entity paying for or bidding on items in an online auction over the Internet.

42. A method in accordance with claim 31, wherein said payor is a person or entity purchasing a movie to view via the Internet.

43. A method in accordance with claim 31, wherein said payor is a person or entity donating money to a charity organization over the Internet.

44. A method in accordance with claim 31, wherein said payor is a person or entity downloading at least one of a digital book, music file, image file, video clip, graphic art clip, game, and software program over the Internet.

45. A method in accordance with claim 31, wherein said payor is a person or entity buying real estate over the Internet.

46. A method in accordance with claim 31, further comprising the steps of:

requiring a payee to provide a payee digital certificate that can authenticate the identity of said payee;

verifying the authenticity of said payee digital certificate on said transaction computer system; and

if said payee digital certificate is authenticated, transferring said debited funds to an account of said payee.

47. A method in accordance with claim 46, wherein said payee is a seller and said payor is a buyer purchasing at least one of a good, service, personal property, and real property from a web site of said seller over the Internet.

48. A method in accordance with claim 31, wherein at least part of said bank account debit transaction occurs via an ATM debit network.

49. A method in accordance with claim 31, wherein said verifying the authenticity step involves the use of at least one cryptography algorithm.

50. A method in accordance with claim 31, wherein said verifying the authenticity step involves the use of Public Key Infrastructure (PKI) for distributing at least one public key over the Internet.

51. A method in accordance with claim 31, wherein said payor digital certificate is encrypted using a public-private key pair, and wherein said verifying the authenticity step comprises a step of decrypting said buyer digital certificate at said transaction computer system using a public key of a certificate authority.

52. A method in accordance with claim 31, wherein said verifying the authenticity step involves the use of asymmetric cryptography.

53. A method of performing a bank account debit transaction over the Internet, comprising the steps of:

debiting funds from a bank account of a payor via a bank account debit network;

requiring a payee to provide a payee digital certificate that can authenticate the identity of said payee;

verifying the authenticity of said payee digital certificate on a transaction computer system; and

if said payee digital certificate is authenticated, transferring said debited funds into an account of said payee.

54. A method of purchasing at least one of a product, service, or property from a seller via the Internet with an ATM debit card, without requiring a buyer and said ATM debit card to be physically present at a machine, employee, or facility of said seller, comprising the steps of:

when said buyer selects a debit card payment option to pay for said at least one product, service, or property offered on a seller web site, requiring said buyer to provide a buyer digital certificate to authenticate the identity of said buyer;

verifying the authenticity of said buyer digital certificate;

if said buyer digital certificate is authenticated, debiting funds from a bank account associated with said ATM debit card via an ATM debit network; and

transferring said debited funds to an account of said seller as payment for said at least one product or service purchased by said buyer from said seller web site over the Internet.

55. A method of selling at least one of a product, service, or property via the Internet, comprising the steps of:

providing a seller web site that a buyer can access via the Internet;

providing a transaction computer system, wherein said transaction computer system is adapted to be communicably coupled to a seller computer system as needed, wherein said seller computer system comprises code and data adapted to provide said seller web site, and wherein said transaction computer system is adapted to be communicably coupled to a bank account debit network;

when a buyer selects a debit card payment option for an electronic commerce transaction to purchase said at least one product, service, or property offered on said seller web site, initiating a debit transaction on said transaction computer system;

sending a seller digital certificate to said transaction computer system for verification of the identity of said seller;

determining whether said seller digital certificate is authentic by decrypting said seller digital certificate at said transaction computer system;

collecting a bank account number for a bank account of said buyer;

determine whether said bank account number is valid;

collecting a buyer digital certificate for verification of the identity of said buyer;

determining whether said buyer digital certificate is authentic by decrypting said buyer digital certificate at said transaction computer system;

if said buyer digital certificate and said seller digital certificate are authenticated, submitting said debit transaction to said bank account debit network;

debiting funds from said bank account of said buyer via said bank account debit network;

informing said seller computer system that said debit transaction was successfully executed so that said electronic commerce transaction can be completed; and

depositing said debited funds into an account of said seller.

56. A method in accordance with claim 55, further comprising the step of:

if said buyer does not have said buyer digital certificate, issuing said buyer digital certificate to said buyer so that said transaction can continue.

57. A method in accordance with claim 55, further comprising the step of:

collecting an Internet protocol address for said buyer.

58. A method in accordance with claim 55, further comprising the step of:

collecting domain information for said buyer.

59. A method in accordance with claim 55, further comprising the step of:

requiring said buyer to input a debit card number using a keyboard at a buyer computer system of said buyer.

60. A method in accordance with claim 55, further comprising the step of:

requiring said buyer to input a debit card number using a mouse and a number pad displayed on a graphical user interface on a buyer computer system of said buyer.

61. A method in accordance with claim 55, further comprising the steps of:

checking a database on said transaction computer system to determine whether said buyer has triggered a lockout based on prior activities of said buyer;

if said buyer has triggered said lockout, sending an error message to said buyer and terminating said debit transaction.

62. A method in accordance with claim 55, further comprising the steps of:

determining whether said debit transaction is permissible based on one or more prior transaction amounts and based on a current amount of said debit transaction;

if said debit transaction is not permissible, sending an error message to said buyer and terminating said debit transaction.