SYSTEM AND METHOD FOR SECURE ONLINE TRANSACTION

• US 20070244831A1
• Filed: 04/18/2007
• Published: 10/18/2007
• Est. Priority Date: 04/18/2006
• Status: Abandoned Application

• Current Assignee: Online Security Portfolio LLC
• Original Assignee: Online Security Portfolio LLC
• Inventors: KUO, James Shaw-Han
• Application Number:
  US11/736,876
• Publication Number:
  US 20070244831A1
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

Methods and systems for secure electronic commerce (eCommerce) transactions having one or more trusted payment hosts where consumers/buyers can register credit card information and/or any payment card information and the corresponding secret keys for the credit card or payment card with the one or more payment hosts are provided. Embodiments of the invention include a method of engaging a purchase order in an online electronic transaction on the spot, where a seller posts and advertises at least one online electronic link embedded in a web-page or in an e-mail provided by a server.

Claims

1. A method of processing a purchase order in an online electronic transaction, where a seller posts at least one online electronic link provided by a server, comprising:

providing the online electronic link of the seller through the server for a buyer to invoke the online electronic link and place the purchase order with the seller;

creating a data form with a payment authorization link for the purchase order from the online electronic link;

generating an orderID for the purchase order;

generating through the payment authorization link a payment authorization request for the buyer to complete and to use to authorize payment of the purchase order by a pre-registered payment card of the buyer without disclosing a payment card number, wherein the buyer has pre-registered information related to the payment card in a pre-registered payment account with at least one host and has assigned secret keys for the pre-registered payment account with the at least one host;

sending the payment authorization request to the at least one host after the buyer fills out the secret keys for the pre-registered payment account on the payment authorization request, wherein the payment authorization request includes information on the purchase order, the orderID, and the secret keys for the pre-registered payment account;

verifying the payment authorization request by the at least one host;

sending the purchase order and the orderID to the seller; and

sending a payment approval request having the purchase order and the orderID from the seller to the at least one host and requesting for payment approval of the purchase order from a payment card issuer of the pre-registered payment card through the at least one host; and

matching the payment authorization request received from the buyer and the payment approval request received from the seller by the at least one host.

2. The method of claim 1, wherein the purchase order comprises an order selected from the group consisting of online advertised products, online advertised service, online advertised goods, and combinations thereof.

3. The method of claim 1, wherein the orderID generated for the purchase order further comprises information on the seller selected from the group consisting of a sellerID, the seller'"'"'s name, the seller'"'"'s e-mail address, the seller'"'"'s destination URI (Uniform Resource Identifier), the seller'"'"'s destination URL (Uniform Resource Locator), URI of the seller'"'"'s order processing server, and combinations thereof.

4. The method of claim 1, further comprising selecting the at least one host by the buyer.

5. The method of claim 1, wherein the secret keys for the pre-registered payment account comprise at least a first key for authentication and at least a second key for authorization.

6. The method of claim 1, wherein the secret keys for the pre-registered payment account comprises an userID for the pre-registered payment account and one or more passwords for the pre-registered payment account.

7. The method of claim 1, wherein the verifying the payment authorization request by the at least one host comprises verifying the secret keys for the pre-registered payment account by the at least one host.

8. The method of claim 7, further comprising detecting that the payment authorization request and payment approval request are not matched within a time period, and terminating the purchase order by the host by expiring the payment approval request, wherein the time period is determined by the at least one host.

9. The method of claim 8, further comprising:

sending a purchase order termination message by the at least one host to the seller; and

sending a purchase order termination message by the at least one host to the buyer.

10. The method of claim 7, further comprising detecting that the payment authorization request and payment approval request are matched within a time period, and validating the purchase order by the at least one host, wherein the time period is determined by the at least one host.

11. The method of claim 10, further comprising:

sending by the at least one host a payment authorization approval request to the buyer'"'"'s payment card issuer, with the payment card number, through a payment gateway; and

receiving by the at least one host an approval of the payment authorization approval request from the buyer'"'"'s payment card issuer.

12. The method of claim 11, further comprising sending a payment completion message by the at least one host to the seller.

13. The method of claim 12, wherein the payment completion message comprises the shipping address and contact information for the buyer.

14. The method of claim 11, further comprising:

sending an order completion message by the at least one host to the buyer;

generating a receipt for the purchase order, and

sending the receipt to the buyer.

15. The method of claim 7, further comprising:

recovering by the at least one host the secret keys for the pre-registered payment account sent by the buyer; and

hashing by the at least one host with the secrete keys for the pre-registered payment account to obtain the payment card number of the pre-registered payment card for paying the purchase order.

16. The method of claim 7, wherein one or more passwords are assigned for the pre-registered payment card by the buyer with the at least one host and wherein the verifying the payment authorization request by the at least one host further comprises verifying the one or more passwords for the pre-registered payment card by the at least one host.

17. The method of claim 16, further comprising:

hashing by the at least one host with the one or more passwords assigned for the pre-registered payment card to obtain the payment card number for paying the purchase order.

18. The method of claim 16, further comprising designing by the buyer personalization for one or more privileged web pages of the buyer with the at least one host, wherein verifying the payment authorization request by the at least one host comprises verifying the secret keys for the pre-registered payment account and verifying the one or more passwords for the pre-registered payment card in the one or more privileged web pages of the buyer.

19. The method of claim 18, wherein the designing the personalization for the one or more privileged web pages of the buyer comprises assigning a background for the one or more privileged web pages of the buyer with the at least one host.

20. The method of claim 18, wherein the designing the personalization for the one or more privileged web pages of the buyer comprises registering one or more secret personalization messages by the buyer with the at least one host.

21. The method of claim 20, wherein the one or more secret personalization messages are selected from the group consisting of textual messages, graphical messages, multimedia messages, and combinations thereof.

22. The method of claim 1, wherein the seller is selected from the group consisting of online merchants, order management centers, comparison shopping centers, order aggregators, order resellers, and combinations thereof.

23. The method of claim 1, wherein the online electronic link is embedded in a format selected from the group consisting of web-pages, e-mails, online advertisements, online documents, and combinations thereof.

24. A method of processing a purchase order in an online electronic transaction, where an order management center posts at least one online electronic link provided by a server, comprising:

providing the online electronic link by the order management center through the server for a buyer to invoke the online electronic link and place the purchase order with the order management center;

creating a data form with a payment authorization link for the purchase order from the online electronic link;

generating an orderID for the purchase order;

generating through the payment authorization link a payment authorization request for the buyer to complete and to use to authorize payment of the purchase order by a pre-registered payment card of the buyer without disclosing a payment card number, wherein the buyer has pre-registered information related to the payment card in a pre-registered payment account with at least one host and has assigned secret keys for the pre-registered payment account with the at least one host;

sending the payment authorization request to the at least one host after the buyer fills out the secret keys for the pre-registered payment account on the payment authorization request, wherein the payment authorization request includes information on the purchase order, the orderID, and the secret keys for the pre-registered payment account;

verifying the payment authorization request by the at least one host;

sending the purchase order and the orderID to the order management center;

sending the purchase order and the orderID from the order management center to a seller which is selected based on predetermined criteria from a plurality of sellers who have registered with the order management center;

sending a payment approval request having the purchase order and the orderID from the seller to the at least one host and requesting for payment approval of the purchase order from a payment card issuer of the pre-registered payment card through the at least one host; and

matching the payment authorization request received from the buyer and the payment approval request received from the seller by the at least one host.

25. The method of claim 24, wherein the purchase order comprises an order selected from the group consisting of online advertised products, online advertised service, online advertised goods, and combinations thereof.

26. The method of claim 24, wherein the orderID generated for the purchase order further comprises information on the order management center.

27. The method of claim 24, further comprising selecting the at least one host by the buyer.

28. The method of claim 24, wherein the secret keys for the pre-registered payment account comprise at least a first key for authentication and at least a second key for authorization.

29. The method of claim 24, wherein the secret keys for the pre-registered payment account comprises an userID for the pre-registered payment account and one or more passwords for the pre-registered payment account.

30. The method of claim 24, wherein the verifying the payment authorization request by the at least one host comprises verifying the secret keys for the pre-registered payment account by the at least one host.

31. The method of claim 30, further comprising detecting that the payment authorization request and payment approval request are not matched within a time period, and terminating the purchase order by the at least one host by expiring the payment approval request, wherein the time period is determined by the at least one host.

32. The method of claim 31, further comprising:

sending a purchase order termination message by the at least one host to the seller; and

sending a purchase order termination message by the at least one host to the buyer.

33. The method of claim 30, further comprising detecting that the payment authorization request and payment approval request are matched within a time period, and validating the purchase order by the at least one host, wherein the time period is determined by the at least one host.

34. The method of claim 33, further comprising:

sending by the at least one host a payment authorization approval request to the buyer'"'"'s payment card issuer, with the payment card number, through a payment gateway; and

receiving by the at least one host an approval of the payment authorization approval request from the buyer'"'"'s payment card issuer.

35. The method of claim 34, further comprising sending a payment completion message by the at least one host to the seller to release the delivery of the purchase order from the seller to the buyer.

36. The method of claim 35, wherein the payment completion message comprises the shipping address and contact information for the buyer.

37. The method of claim 34, further comprising:

sending an order completion message by the at least one host to the buyer;

generating a receipt for the purchase order, and

sending the receipt to the buyer.

38. The method of claim 30, further comprising:

recovering by the at least one host the secret keys for the pre-registered payment account sent by the buyer; and

hashing by the at least one host with the secrete keys for the pre-registered payment account to obtain the payment card number of the pre-registered payment card for paying the purchase order.

39. The method of claim 30, wherein one or more passwords are assigned for the pre-registered payment card by the buyer with the at least one host and wherein the verifying the payment authorization request by the at least one host further comprises verifying the one or more passwords for the payment card by the at least one host.

40. The method of claim 39, further comprising:

hashing by the at least one host with the one or more passwords assigned for the pre-registered payment card to obtain the payment card number for paying the purchase order.

41. The method of claim 24, wherein the online electronic link is embedded in a format selected from the group consisting of web-pages, e-mails, online advertisements, online documents, and combinations thereof.

42. A method of processing a purchase order in an online electronic transaction, where a seller posts at least one online electronic link provided by a server, comprising:

providing the online electronic link of the seller through the server for a buyer to invoke the online electronic link and place the purchase order with the seller;

creating a data form with a payment authorization link for the purchase order from the online electronic link;

generating an orderID for the purchase order;

generating through the payment authorization link a payment authorization request for the buyer to complete and to use to authorize payment of the purchase order by a pre-registered payment card without disclosing a payment card number, wherein the buyer has pre-registered information related to the payment card in a pre-registered payment account with at least one host and has assigned secret keys for the pre-registered payment account with the at least one host;

sending the payment authorization request to the at least one host after the buyer fills out the secret keys for the pre-registered payment account on the payment authorization request, wherein the payment authorization request includes information on the purchase order, the orderID, and the secret keys for the pre-registered payment account;

verifying the payment authorization request by the at least one host;

generating a transactionID by the at least one host;

sending the purchase order and the transactionID from the at least one host to the seller;

sending a payment approval request having the purchase order and the transactionID from the seller to the at least one host and requesting for payment approval of the purchase order from a payment card issuer of the pre-registered payment card through the at least one host; and

matching the payment authorization request received from the buyer and the payment approval request received from the seller by the at least one host over a time period determined by the at least one host to validate the purchase order by the at least one host.

43. The method of claim 42, wherein the orderID generated for the purchase order further comprises information on the seller selected from the group consisting of a sellerId, the seller'"'"'s name, the seller'"'"'s e-mail address, the seller'"'"'s destination URI (Uniform Resource Identifier), the seller'"'"'s destination URL (Uniform Resource Locator), URI of the seller'"'"'s order processing server, and combinations thereof.

44. The method of claim 42, wherein the transactionID further comprises the orderID for the purchase order.

45. The method of claim 42, wherein the seller is selected from the group consisting of online merchants, order management centers, comparison shopping centers, order aggregators, order resellers, and combinations thereof.