ONLINE CARD PRESENT TRANSACTION

• US 20080052183A1
• Filed: 09/24/2007
• Published: 02/28/2008
• Est. Priority Date: 03/15/2001
• Status: Active Grant

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Hussain, Sohail, Hobson, Carol
• Granted Patent: US 8,538,891 B2
• Time in Patent Office: Days
• US Class Current: 705/26
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]

Abstract

An online card-present transaction system facilitates card-present type transactions with a merchant over a public network. A host system is configured to accept authentication data from a user via an authentication device. The host system, after authenticating a user is configured to retrieve the user'"'"'s account information from a user database system and translate a user account number into a temporary transaction number. The temporary transaction number is then transmitted directly from the host system to the merchant, thereby eliminating the need for the user to send to the merchant over the internet, the user'"'"'s transaction account number.

Claims

1. A host computer for facilitating online card present transactions, said host computer configured to:

detect the presence of a smart card reader connected to a client computer;

present to a user a payment option for using a smart card for payment in response to the detection of the smart card reader;

receive, from said client computer, a selection by said user of said payment option;

prompt said user to insert a smart card into said smart card reader;

receive a digital certificate from said smart card;

generate secondary transaction account number based on authentication of said digital certificate, wherein said secondary transaction account number is valid for a single purchase transaction;

associate said secondary transaction account number with said transaction account of said user; and

,

communicate said secondary transaction account number over said authenticated communication channel to a merchant, wherein said merchant submits a payment request based on said secondary transaction account number.

2. The system of claim 1, said host further configured to transmit, to said client computer, a challenge string in response to said selection by said user, wherein said challenge string prompts said user to insert a smart card into said smart card reader.

3. The system of claim 1, wherein said smart card stores said digital certificate.

4. The system of claim 1, wherein said host is further configured to receive said digital certificate and a signed challenge string from said client computer, wherein said challenge string is signed to create the signed challenge string.

5. The system of claim 4, wherein said signed challenge string is accessed in response to the user entering a Personal Identification Number (PIN).

6. The system of claim 4, wherein said digital certificate is accessed in response to the user entering a Personal Identification Number (PIN).

7. The system of claim 1, wherein said host is further configured to authenticate said smart card using a signed challenge string and said digital certificate.

8. The system of claim 1, wherein said host is further configured to:

embed an encrypted host computer signature in said client computer of said user; and

redirect a browser of said client computer to said merchant, causing said merchant to authenticate said host computer by decrypting said host computer signature.

9. The system of claim 1, wherein said host is further configured to:

communicate a token to said merchant over a first communication channel;

receive a communication from said merchant over a second communication channel requesting said host computer to confirm issuance of said token; and

confirm to said merchant that said host computer issued said token.

10. A merchant computer for receiving online card present transactions, said merchant computer configured to:

detect the presence of a smart card reader connected to a client computer by a merchant computer;

present a user of said client computer with a payment option for using a smart card for payment in response to the detection of the smart card reader;

receive a selection by said user of said payment option;

redirect said client computer to a website of a host computer in response to said detection, wherein said host computer is configured to;

prompt said user to insert a smart card into said smart card reader;

receive a digital certificate from said smart card;

generate a secondary transaction account number based on authentication of said digital certificate, wherein said secondary transaction account number is valid for a single purchase transaction;

associate said secondary transaction account number with an account of said user; and

,

communicate said secondary transaction account number to said client computer, wherein said user of said client computer submits a payment request based on said secondary transaction account number; and

,

receive account information including said secondary transaction account number from said host computer over said authenticated communication channel, wherein said account information and said secondary transaction account number facilitates completion of a transaction between said user and a merchant.

11. The system of claim 10, said host computer further configured to:

transmit a challenge string to said client computer, wherein said challenge string prompts said user to insert said smart card into said smart card reader, wherein said smart card stores a digital certificate;

receive a copy of said digital certificate and a signed challenge string from said client computer, wherein said challenge string is signed to create the signed challenge string and said digital certificate is accessed in response to the user entering a Personal Identification Number (PIN); and

,

authenticate said smart card using said signed challenge string and said copy of said digital certificate.

12. The system of claim 10, said host further configured to:

generate said secondary transaction account number comprises the steps of;

receive an encrypted host computer signature; and

decrypt said encrypted host computer signature to determine that said account information originated with said host computer.

13. The system of claim 10, said merchant computer further configured to:

establish an authenticated communication channel;

receive a host computer token over a first communication channel, wherein said token identifies said host computer; and

communicate to said host computer over a second communication channel to confirm that said token was issued by said host computer.

14. A client computer for participating online card present transactions, said client computer configured to:

transmit to a merchant computer a request to facilitate a transaction with a merchant;

receive a payment option for using a smart card for payment in response to said merchant computer detecting a presence of a smart card reader connected to a client;

transmit a selection by said user of said payment option;

receive a prompt from said merchant computer to insert said smart card into a smart card reader; and

,

transmit a digital certificate from said smart card to a host computer, wherein said host computer retrieves a primary transaction account number associated with said digital certificate and generates a secondary transaction account number that is transmitted to said merchant computer.

15. The system of claim 14, wherein said host computer receives said secondary transaction account number from said merchant computer as part of a settlement process;

and applies a charge associated with said settlement process to a transaction account of said user associated with said secondary account transaction number.

16. The system of claim 14, wherein said host computer receives a Personal Identification Number (PIN) which triggers signing of a challenge string to create a signed challenge string and which accesses said digital certificate.

17. The system of claim 14, wherein said host computer authenticates said smart card using said signed challenge string and said copy of said digital certificate.

18. The system of claim 14, wherein said secondary transaction account number is valid for a single purchase transaction.

19. The system of claim 14, wherein said host computer associates said secondary transaction account number with said primary transaction account number.

20. The system of claim 14, wherein said merchant computer submits a payment request based on said secondary transaction account number.