SYSTEM AND METHOD FOR CARDLESS SECURE ON-LINE CREDIT CARD/DEBIT CARD PURCHASING

• US 20100241571A1
• Filed: 03/20/2009
• Published: 09/23/2010
• Est. Priority Date: 03/20/2009
• Status: Abandoned Application

• Current Assignee: SSK Virtualimage Corporation
• Original Assignee: SSK Virtualimage Corporation
• Inventors: MCDONALD, GREG
• Application Number:
  US12/408,325
• Publication Number:
  US 20100241571A1
• Time in Patent Office: Days
• US Class Current: 705/74
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]

Abstract

The invention is a system and method for cardless secure on-line purchasing using a credit/debit card. There is provided an on-line purchaser executing an on-line purchase with an on-line vendor having a credit/debit card payment screen. There is also at least one on-line credit/debit card service provider having an interface with the on-line purchaser the said on-line vendor. An e-authentication and credential service provider has an interface with the on-line purchaser and said at least one on-line credit/debit card service provider and provides means for secure on-line purchasing on a subscription basis by providing anonymity to the on-line purchase by hiding credit/debit card data during the on-line purchase making the purchase invisible to identity thieves and hackers.

Claims

1. A system for secure on-line purchasing using a credit/debit card, said system comprising:

a. an on-line purchaser executing an on-line purchase and having an interface with;

b. an on-line vendor having a credit/debit card payment screen;

c. at least one on-line credit/debit card service provider having an interface with said on-line purchaser and said on-line vendor; and

,

d. an c-authentication and credential service provider having an interface with the on-line purchaser and said at least one on-line credit/debit card service provider, wherein said e-authentication and credential service provider provides means for secure on-line purchasing on a subscription basis that requires payment of a subscription fee and or as an alternative payment method a transaction fee;

e. wherein said means for secure on-line purchasing provides anonymity to the on-line purchase by hiding credit/debit card data during the on-line purchase making the purchase invisible to identity thieves and hackers.

2. The system of claim 1, wherein the on-line purchaser and the at least one on-line credit/debit card service provider subscribe to said means, and wherein a personal digital identity token is issued to the on-line purchaser upon subscription (or was issued by another service provider for a different application) to said means by the e-authentication and credential service provider, and further wherein the personal digital identity token is identified to the e-authentication and credential service provider by a serial number provided to the on-line purchaser during an enrolment process.

3. The system of claim 1, wherein the on-line purchaser has at least one credit/debit card from the at least one credit/debit card provider, and wherein the name of said at least on one credit/debit card is bound to said serial number by the on-line purchaser during the civil identity binding process.

4. The system of claim 2, wherein the enrolment process further includes the on-line purchaser providing a suite of information and binding said suite to the serial number.

5. The system of claim 2, wherein the personal digital identity token includes biometric scanning and storage means, and wherein the on-line purchaser personalized the personal digital identity token by scanning and storing at least one biometric thereupon, and wherein the personal digital identity token is capable of communicating with a computer by encrypted sound signals, encrypted light signals, encrypted radio frequency signals, or hardwire connections through a USB port;

and still further wherein the communication with the e-authentication and credential service and physical identity identification can take place through a cell phone, smart phone, PDA or other wireless device.

6. The system of claim 1, further including at least one civil registration authority having identity credential data relevant to the on-line purchaser, and wherein the on-line purchaser confirms the existence of said identity credential data with said at least one civil registration authority, and further wherein the at least one civil registration authority records said confirmation as a civil identity credential in their database along with the personal digital identity token serial number and with the e-authentication and credential service provider by way of an identity validation transaction number.

7. The system of claim 6, wherein the at least one civil registration authority comprises a plurality of civil registration authorities each having identity credential data relevant to the on-line purchaser, and wherein the on-line purchaser confirms the existence of said identity credential data from each civil registration authority each recording the existence of said identity credential data in their database along with the personal digital identity token serial number.

8. The system of claim 7, wherein the personal digital identity token having at least one biometric thereupon and at least one civil identity credential thereupon is used to access the e-authentication and credential service provider website from said on-line vendor credit/debit card payment screen during an on-line purchase using a credit/debit card.

9. The system of claim 8, wherein the e-authentication and credential service provider requests that the on-line purchaser perform a first biometric scan of said at least one biometric and upon successful confirmation of said first biometric scan, the e-authentication and credential service provider issues the on-line purchaser an encrypted first temporary one-time password using a computer interface for decryption by the personal digital identity token.

10. The system of claim 9, wherein said computer interface includes a field for entry of said one-time password, and whereupon decryption of the first temporary one-time password, the one-line purchaser enters it into said field.

11. The system of claim 10, where upon entry of the first temporary one-time password into the field, the on-line purchaser is presented with a list comprising the name of the at least one credit/debit card provider.

12. The system of claim 11, wherein the on-line purchaser selects a credit card provider from said list of the at least one credit card provider, and whereupon the on-line purchaser it taken by the e-authentication and credential service provider to the website of said credit card provider, said website having a field for a second one-time password.

13. The system of claim 12, wherein the credit card issuer requests a second biometric scan and upon success of said second biometric scan, the credit card issuer issues the on-line purchaser a temporary credit card number, a temporary credit card validation number, a temporary expiry date and said second one-time password.

14. The system of claim 13, wherein the on-line purchaser enters the second one-time password into said field and is taken to the on-line vendor credit/debit card payment screen, wherein the screen has a data entry field for said temporary credit card number, said temporary credit card validation number and said temporary expiry date.

15. The system of claim 14, wherein the on-line purchaser completes said on-line purchase by entering the temporary data into each field and clicks the transaction complete button on the on-line vendor credit/debit card payment screen.

16. A method for cardless secure on-line credit/debit card purchasing between an on-line purchaser, an on-line vendor and an on-line credit card service provider, said method comprising the steps of:

a. Providing an e-authentication and credential service provider having a website and secure on-line access to said website;

b. Enrolling said on-line purchaser and said on-line credit card service provider on a subscription basis into said e-authentication and credential service;

c. Obtaining a list of credit card names used by the on-line purchaser for on-line credit card purchases;

d. Issuing a personal digital security token having a serial number to the on-line purchaser by the e-authentication and credential service provider;

e. Recording at least one biometric on said personal digital security token by the on-line purchaser; and

,

f. Recording at least one identity credential on the personal digital security token by the on-line purchaser.

17. The method of claim 16, further comprising, on the part of on-line purchaser, the steps of:

a. Accessing the website of the e-authentication and credential service provider from the on-line vendor credit/debit card website;

b. Validating said at least one biometric using the personal digital security token;

c. Obtaining an encrypted first one-time password from the e-authentication and credential service provider;

d. Decrypting said one-time password using the personal digital security token;

e. Entering the one-time pass word into a field provided by the e-authentication and credential service provider;

f. Viewing a display of credit/debit cards authorized for on-line purchases;

g. Selecting one of said credit/debit card for the on-line purchase; and

,

h. Moving to the website of the credit/debit card service provider.

18. The method of claim 17, further comprising on the part of the on-line purchaser, the steps of:

a. Validating a second biometric scan to the credit/debit card provider;

b. Upon successful validation of said second biometric scan, receiving from the credit/debit card provider the following credit card data;

a temporary credit card number, a temporary credit card validation number, a temporary credit card expiry date and a second one-time password, wherein said credit card data is displayed on the personal digital security token;

c. Entering into data fields provided on the credit/debit card website the serial number, the name of the on-line purchaser, the amount of the purchase and the currency of the purchase;

d. Entering into a field provided on the credit/debit card website said second one-time password;

e. Moving to the one-line vendor credit/debit card payment screen.

19. The method of claim 18, comprising the steps on the part of the on-line purchaser of:

a. Entering the temporary credit card number, temporary credit card validation number and temporary expiry date into the fields provided on the on-line vendor credit/debit card payment screen;

b. Completing the on-line purchase by clicking the confirm transaction button on the on-line vendor credit/debit payment screen, whereby said clicking of the confirm transaction button has a legal binding effect on the on-line purchaser to the transaction.

20. The method of claim 19, further comprising the steps of:

a. On the part of the credit/debit card issuer;

i. Paying the on-line vendor the on-line purchase amount;

ii. Billing the on-line purchaser the purchase amount;

b. On the part of the e-authentication and credential service provider;

i. Issuing a transaction number to the credit/debit card provider; and

,

ii. Storing said transaction number in an accessible memory.