Methods and system for performing data exchanges related to financial transactions over a public network

• US 20060167818A1
• Filed: 01/21/2005
• Published: 07/27/2006
• Est. Priority Date: 01/21/2005
• Status: Abandoned Application

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Lindelsee, Mike, Wachob, Gabriel, Wentker, David
• Application Number:
  US11/040,363
• Publication Number:
  US 20060167818A1
• Time in Patent Office: Days
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869

Abstract

Methods and systems for exchanging data related to financial transactions utilizing a public network are disclosed. One or more participant computer systems are in communication with the public network. Each participant computer system includes at least one application for performing functions related to a financial transaction, and a gateway providing an interface for sending and receiving data between participant computer systems. At least one directory is used to identify a path for transmitting data between participant computer systems. Upon receiving a message from an application, the gateway accesses the directory to determine a destination address. The gateway then uses the address to open a channel through the public network to send the message to another participant computer system.

Claims

1. A system for exchanging data related to financial transactions utilizing a public network, the system comprising:

a plurality of participant computer systems, each in communication with the public network, wherein each participant computer system comprises;

one or more applications for performing functions related to a financial transaction, and

a gateway in communication with both the public network and the one or more applications, wherein the gateway provides an interface for sending and receiving data between applications over the public network; and

one or more private directories in communication with the public network, wherein the directories are effective for identifying a trusted messaging path between the participant computer systems.

2. The method of claim 1 wherein the one or more private directories are accessible only to the plurality of participant computer systems.

3. The method of claim 1 wherein the one or more private directories identify each of the trusted resources available to the plurality of computer systems.

4. The method of claim 1 wherein the trusted messaging path comprises authorized participant computer systems identified in the one or more private directories.

5. The method of claim 1 wherein the financial transaction comprises one or more of the following:

a credit card transaction;

a debit card transaction;

a calling card transaction;

a stored value transaction;

a loyalty card transaction; and

a coupon transaction.

6. The method of claim 1, wherein the financial transaction comprises an exchange of investment instruments.

7. The method of claim 1, wherein the financial transaction comprises the delivery of government benefits.

8. The method of claim 1 wherein the financial transaction comprises any exchange of value.

9. The system of claim 1 wherein the public network comprises the Internet.

10. The system of claim 1 wherein the data is exchanged using a message format comprising a header and a body, wherein the header includes information used by the gateway to perform one or more functions, wherein the body includes data transmitted by an application.

11. The system of claim 10 wherein the gateway performs one or more of the following:

transmitting a message;

receiving a message;

routing a message;

resolving message header information;

providing message reliability;

performing message security;

filtering a message; and

performing message correlation.

12. The system of claim 11 wherein transmitting a message comprises:

receiving a message from an application;

determining one or more policies for the message based on a message type for the message;

resolving a transport address for a recipient of the message;

applying one or more security features to the message;

opening and securing a channel in the public network; and

sending the message via the channel.

13. The system of claim 12 wherein the security features comprise one or more of a digital signature and encryption.

14. The system of claim 11 wherein receiving a message comprises:

receiving a message from the public network;

retrieving one or more policies based on a message type for the message;

applying each policy to the message; and

delivering the message to a receiving application.

15. The system of claim 14 wherein applying comprises using security policy information to verify a digital signature.

16. The system of claim 14 wherein applying comprises using security policy information to decrypt the message.

17. The system of claim 1 wherein the gateway comprises:

a gateway server in communication with the public network, wherein the gateway server queues incoming messages, opens channels, and maintains channels;

a gateway client library in communication with the gateway server, wherein the gateway client library interfaces with one or more protocols; and

a gateway application programming interface in communication with the gateway client library and at least one application.

18. The system of claim 1 wherein a participant computer system further comprises:

a directory accessible via the public network, wherein the directory comprises a storage medium containing one or more entries, wherein each entry comprises one or more identifiers.

19. The system of claim 18 wherein the identifiers comprise one or more of message routing data, metadata, and security policy information.

20. The system of claim 1 wherein a participant computer system further comprises:

a certificate authority in communication with the public network, wherein the certificate authority provides one or more keys to the gateway for use in performing one or more of mutual authentication of channels, mutual authentication of messages, integrity checks for channels, integrity checks for messages, channel encryption and message encryption.

21. The system of claim 1 wherein a participant computer system further comprises:

a platform service in communication with the public network, wherein the platform service provides messaging services for messages routed through the platform service.

22. The system of claim 21 wherein the platform service comprises a remote gateway service, wherein the remote gateway service provides access to the public network for an application that is remote from the participant computer system.

23. The system of claim 22, further comprising one or more consumer devices, wherein each consumer device uses the remote gateway service to access the public network.

24. The system of claim 23 wherein a consumer device comprises one or more of a telephone, a cellular phone, a personal digital assistant, a handheld device, a set-top box and a personal computer.

25. The system of claim 21 wherein the platform service comprises a broadcast message service, wherein the broadcast message service supports broadcast messaging and manages distribution lists for broadcast messages.

26. A method for transmitting data related to financial transactions over a public network, the method comprising:

receiving a message object from a first trusted participant, wherein the message object includes an identifier;

generating a message from the message object;

determining one or more policies for the message;

resolving a destination address for the message using the identifier;

applying one or more security features to the message;

opening and securing a channel in a public network to the destination address wherein the destination address identifies a second trusted participant; and

transmitting the message to the second trusted participant via the channel.

27. The method of claim 26 wherein the one or more policies include one or more of a message security policy and a message routing policy.

28. The method of claim 26 wherein the one or more policies comprise one or more of a multi-hop routing policy, a hub and spoke routing policy, a peer-to-peer routing policy, and a fan-out routing policy.

29. The method of claim 26 wherein the identifier comprises one or more of an organization identifier, an organization member identifier, a financial account identifier, a certificate authority identifier, a merchant identifier, a bank identifier, a service identifier, a service identifier, and a policy identifier.

30. The method of claim 26 wherein the one or more security features include one or more of a digital signature and an encryption algorithm.

31. The method of claim 26 wherein the first trusted participant and the second trusted participant are identified in one or more private directories accessible to the first trusted participant and the second trusted participant.

32. The method of claim 31 wherein the first trusted participant and the second trusted participant possess the necessary security authorization to exchange messages.

33. A method of receiving data related to financial transactions over a public network, the method comprising:

receiving a message from a remote trusted computer system, wherein the message is directed to a financial transaction application;

determining one or more policies applied to the message;

applying one or more security measures applied to the message;

generating a message object from the message; and

sending the message object to the application, wherein the message object includes an identifier.

34. The method of claim 33 wherein the one or more policies includes a message security policy.

35. The method of claim 33 wherein applying one or more security measures comprises verifying a digital signature.

36. The method of claim 33 wherein applying one or more security measures comprises decrypting the message.

37. The method of claim 33 wherein the identifier comprises one or more of an organization identifier, an organization member identifier, a financial account identifier, a certificate authority identifier, a merchant identifier, a bank identifier, a service identifier, a service identifier, and a policy identifier.

38. A method for transmitting financial transaction information using a remote gateway service, the method comprising:

receiving, from an application operated by a remote participant over a first network, financial transaction information by a remote gateway service;

processing, by the remote gateway service, the financial transaction information; and

transmitting, by the remote gateway service, the processed financial transaction information to a destination over a second network.

39. The method of claim 38, further comprising:

receiving, by the remote gateway service from the second network, a response to the processed financial transaction information;

processing, by the remote gateway service, the response; and

transmitting, by the remote gateway service to the application operated by the remote participant over the first network, the processed response.