Secure transaction protocol

• US 20060168663A1
• Filed: 02/27/2002
• Published: 07/27/2006
• Est. Priority Date: 05/25/2000
• Status: Abandoned Application

• Current Assignee: SertintyONE Corp.
• Original Assignee: SertintyONE Corp.
• Inventors: Hutchison, Robin B., Llewellyn, Robert C., Viljoen, Andre F.
• Application Number:
  US10/172,149
• Publication Number:
  US 20060168663A1
• Time in Patent Office: Days
• US Class Current: 726/27
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 30/0222 During e-commerce, i.e. online transactions
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions

Abstract

A system for engaging in secure transactions over an internetwork, involving, a consumer, a merchant and a Transaction Authority as parties to a transaction. To initiate the transaction the consumer makes an inquiry with the merchant who then returns a signed offer. The consumer then accepts the offer by also signing the offer. The doubly signed offer is then forwarded to the Transaction Authority. The Transaction Authority validates the transaction by checking both the authority and identity of the merchant and the consumer. The Transaction Authority then signs the offer to create a triply signed offer. The Transaction Authority returns the triply signed offer to the merchant. Once the merchant has a validated offer they are then able to request settlement of the transaction from the Transaction Authority, either immediately, or at some future date by sending a settlement request to the Transaction Authority.

Claims

1. A method for engaging in a secure transaction with a merchant server using a secure transaction account, comprising:

receiving a request from a consumer device to engage in a transaction with said merchant server using said secure transaction account;

in response to said transaction request, determining whether said consumer device is associated with said secure transaction account;

in response to determining that said consumer device is associated with said secure transaction account, initiating a secure transaction between said consumer device and said merchant server; and

fulfilling a purpose of said secure transaction for a consumer associated with said consumer device.

2. The method of claim 1, wherein determining whether said consumer device is associated with said secure transaction account comprises:

transmitting an authentication request from said consumer device to a transaction server;

determining at said transaction server whether said secure transaction account is associated with said consumer device; and

transmitting an account identification container to said consumer device in response to determining that said consumer device is associated with a valid secure transaction account.

3. The method of claim 2, wherein determining at said transaction server whether said secure transaction account is associated with said consumer device further comprises determining at said transaction server whether said secure transaction account is valid.

4. The method of claim 2, wherein said authentication request comprises a digital certificate.

5. The method of claim 4 further comprising retrieving said digital certificate from a secure token.

6. The method of claim 1, wherein said secure transaction account comprises a main account and at least one sub-account.

7. The method of claim 6, wherein said sub-account is operative only to accept charges from a predetermined list of merchant servers.

8. The method of claim 6, wherein a authority limit may be set by said consumer for said sub-account.

19. A computer-readable medium having an computer executable component for performing the method of any of claims 1-8.

9. A method for engaging in a secure transaction with a merchant server using a secure transaction account associated with a consumer device, comprising:

receiving a request from a consumer device to engage in a transaction with said merchant server using said secure transaction account;

in response to said transaction request, transmitting an validation request to a transaction server;

in response to a positive validation from said transaction server, initiating a secure transaction between said consumer device and said merchant server; and

fulfilling a purpose of said secure transaction for a consumer associated with said consumer device.

10. The method of claim 9, wherein said authentication request comprises a digital certificate, and wherein said digital certificate is transmitted to said transaction server.

20. A computer-readable medium having an computer executable component for performing the method of any of claims 9-10.

11. A method for settling at least one secure transaction, the method comprising:

receiving at least one settlement transaction request from a merchant server;

determining that said at least one settlement transaction request is permissible;

in response to determining that said at least one settlement transaction request is permissible, processing said at least one settlement transaction request;

in response to processing said at least one transaction request, adjusting a merchant account associated with said merchant server.

12. The method of claim 11, wherein said at least one settlement transaction request is substantially contemporaneous with at least one associated secure transaction.

13. The method of claim 11, wherein said at least one settlement transaction request is delayed for a predetermined period of time after at least one associated secure transaction.

21. A computer-readable medium having an computer executable component for performing the method of any of claims 11-13.

14. A method for generating a report comprising receiving a report request from a merchant server using a secure transaction account;

in response to said report request, determining whether said merchant server is associated with said secure transaction account;

in response to determining that said merchant server is associated with said secure transaction account, generating a report; and

transmitting said report to said merchant server.

15. The method of claim 14, wherein determining whether said merchant server is associated with said secure transaction account comprises:

transmitting an authentication request comprising a digital certificate from said merchant server to a transaction server;

determining at said transaction server whether said secure transaction account is valid;

determining at said transaction server whether said secure transaction account is associated with said merchant server; and

transmitting an account identification container comprising said digital certificate to said merchant server in response to determining that said merchant server is associated with a valid secure transaction account.

22. A computer-readable medium having an computer executable component for performing the method of any of claims 14-15.

16. A system for engaging in a secure transaction, comprising:

a consumer device operative to engage in a secure transaction using a secure transaction account; and

a merchant server operative to;

receive a request from a consumer device to engage in a transaction with said merchant server using said secure transaction account;

in response to said transaction request, determine whether said consumer device is associated with said secure transaction account;

in response to determining that said consumer device is associated with said secure transaction account, initiate a secure transaction between said consumer device and said merchant server; and

fulfill a purpose of said secure transaction for a consumer associated with said consumer device.

17. The system of claim 16, further comprising:

a secure token associated with said consumer device; and

said merchant server is further operative to;

determine whether said consumer device is associated with said secure transaction account by retrieving a digital certificate from said secure token; and

transmit an authentication request including said digital certificate to a transaction server; and

said transaction server is operative to;

determine whether said secure transaction account is valid;

determine whether said secure transaction account is associated with said consumer device; and

transmit an account identification container to said consumer device in response to determining that said consumer device is associated with a valid secure transaction account.

18. The system of claim 16, further comprising a transaction server operative to:

apply a cost of said product to said secure transaction account also;

receiving an account identifier associated with said secure transaction account from said merchant server;

determining whether said secure transaction account is valid to engage in secure transactions; and

in response to determining that said secure transaction account is valid, transmitting a valid transaction authorization from said transaction server to said merchant server.