Systems and Methods for Automatic and Transparent Client Authentication and Online Transaction Verification

• US 20080288405A1
• Filed: 05/20/2008
• Published: 11/20/2008
• Est. Priority Date: 05/20/2007
• Status: Active Grant

• Current Assignee: Michael Sasha John
• Original Assignee: Michael Sasha John
• Inventors: John, Michael Sasha
• Granted Patent: US 10,853,855 B2
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/384 using social networks
• CPC Class Codes: G06Q 20/386 using messaging services or messaging apps using mobile network messaging services for payment, e.g. SMS G06Q20/3255
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions

Abstract

Systems and methods are described for providing fraud deterrents, detection and prevention during e-commerce, e-transactions, digital rights management and access control. Fraud deterrent levels may be automatically selected by a requesting transaction approval entity server (and can be related to level of risk, or security, related to fraud) or may be selected by a consumer. These deterrent levels can determine the manner in which the transaction occurs as well as the types of information that must be provided and validated for successful approval of the transaction. The client can associate their credit card with a specific device, an e-identity, such as an instant messaging identity, and the e-identity is contacted as a part of finalizing a payment transaction so that a client response of ‘approve’ or ‘reject’ can be obtained. The anti-fraud technology also provides for management and storage of historical transaction information. Entity-to-client communication occurs according to merchant permission parameters which are defined by the client and which enable messages sent by the entity to be automatically allowed, rejected, and managed in other ways as well.

Claims

1. A system configured for conducting art e-commerce authorization processes during an e-commerce transactions comprising:

A e-identity-card linkage database for storing and retrieving a link between an e-identity and at least one credit card;

A server configured for obtaining an authorization request from an e-commerce entity, said request including at least a credit card number submitted to the entity, the server further configured to;

retrieve an e-identity which is associated with the credit card number using a e-identity-card linkage database;

determine if the e-identity has a status which is at least one of ‘

available’ and

‘

unavailable, and perform at least one of;

an e-identity unavailable operation if the e-identity status is unavailable; and

,

an e-identity available operation if the e-identity status is available.

2. The system of claim 1 wherein the e-identity available operation includes the following:

sending an authorization request to the e-identity so that it is presented to the client;

obtaining any client input response that is provided; and

,

providing an authorization signal to the e-commerce entity which indicates either to approve or reject the transaction.

3. The system of claim 1 wherein the e-commerce entity can be any of the following entities:

a merchant'"'"'s eCommerce platform conducting sales of goods with end consumers;

a credit card issuing bank receiving payment authorization request from an a merchant acquiring bank on behalf of an online seller/merchant;

a payment service provider which is at least one of PayPal or Googlecheckout where users already have established accounts with pre registered credit cards; and

,

a credit card association network including at least one of Visa, Mastercard, AmericanExpress, and Discover which receives payment authorization requests from a card issuing bank.

4. The system of claim 1 wherein the e-identity available operation includes the following;

sending an authorization request to the e-identity;

providing an authorization signal to the e-commerce entity which reflects the response to the authorization request that was sent to the e-identity, the authorization signal including at least one of approval of the transaction or rejection of the transaction.

5. The system claim 3 wherein the authorization signal is obtained without the client participation and by using a digital module that identifies a client registered computer.

6. The system claim 3 wherein the authorization signal is obtained without the client participation and by using a software module that identifies a client registered computer.

7. The system claim 3 wherein the authorization signal is obtained without the client participation and by using an identification method that identifies a client registered computer.

8. The system claim 3 wherein the authorization signal is obtained with the client participation and by using a digital module that identifies a client registered computer.

9. The system of claim 1 wherein the e-identity unavailable operation includes sending presenting the client with a web-page configured to allow the client to provide logon and password information to thereby activate the client e-identity associated with the web-page.

10. The system of claim 1 wherein the status of the e-identity is obtained by establishing the status of a presence of an e-identity is set to allow communication between the e-identity and the server.

11. The system of claim 1 wherein the authorization request also comprises additional information about the amount being charged, and the server is also configured to perform eFFT anti-fraud measures that are selected based upon the value of the transaction.

12. The system of claim 11 wherein the anti-fraud measures include at least one of;

requiring a client to provide a password;

requiring the client be using a particular computer;

requiring the client to be using an eFFT program having a particular identification number;

requiring the client to have logged onto an e-identity within a specified recent interval.

13. The system of claim 1 wherein the e-identity comprises an eFFT software module which resides on the client'"'"'s computer.

14. The system of claim 13 wherein the eFFT software module is configured to receive transaction information data from an entity.

15. The system of claim 13 wherein the eFFT software module is configured to receive transaction information from an entity and to provide this information to the server. whereby a match or mismatch is provided with information transmitted to the server by the entity, and wherein a match provides automatic authentication of the client.

16. The system of claim. 10 wherein the eFFT software module transaction information comprises reflecting a current browser session log information and whereby the eFFT server is configured to analyze the information to verify that the client has performed transactions with a merchant site within a specified recent time interval and whereby a transaction can be automatically approved.

17. The method of claim 13 wherein the transaction is at least on of declined and rejected if the browser session log information provided by the eFFT software module does not include a client presence on the merchant site within a specified time interval that is indicated in the authorization request.

18. A system for conducting authorization processes during e-commerce transactions comprising:

A client-card linkage database for storing and retrieving a link between a client and at least one credit card;

An online-identity-client linkage database for storing and retrieving a link between an online identity and a client;

A server configured for obtaining an authorization request from an e-commerce entity, said request including at least a credit card number submitted to the entity, the server further configured to;

Derive the client that is associated with an online-identity;

Determine if the client is authorized to use the credit card number using the client-card linkage database;

Provide an approval authorization signal to the e-commerce entity if the client is authorized to use the credit card number; and

Provide a rejection authorization signal to the e-commerce entity if the client is authorized to use the credit card number.

19. The system of claim 18 wherein the online-identity is dynamically assigned to the client by an internet service provider which the client uses to connect to the internet.

20. The system of claim 18 wherein the online-identity is dynamically assigned to the client by an internet service provider which the client uses to connect to the internet and includes an active transaction or session identification number.

21. A digital shopping cart system for conducting authorization processes during e-commerce transactions including a server configured with;

a transaction module configured to obtain information about the current transaction requested by a client including product and billing information; and

,

an authorization module configured to automatically identify whether the client is using a particular Internet service provider to gain access to the internet, and to determine if said service provider is a participant in an authorization service, and

a client interaction module for proposing to the client an option of using the internet service provider to provide authorization if the service provider is a participant.