SYSTEM AND METHOD FOR PROCESSING AN ONLINE TRANSACTION REQUEST

• US 20130132283A1
• Filed: 11/23/2011
• Published: 05/23/2013
• Est. Priority Date: 11/23/2011
• Status: Active Grant

• Current Assignee: Toronto-Dominion Bank
• Original Assignee: Toronto-Dominion Bank
• Inventors: Hayhow, Robert, Borsella, Giovanna
• Granted Patent: US 9,792,593 B2
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/401 Transaction verification

Abstract

A method of processing an online transaction request involves a network gateway generating a revised transaction request from an incoming transaction request that is received from a client terminal. The revised transaction request includes a revised transaction message that is derived from the incoming transaction request and a revised transaction request cryptogram that is generated from the revised transaction message. The revised transaction request cryptogram is uniquely associated with an identity token that is interfaced with the client terminal. The network gateway receives a transaction authorization from an issuer server for the revised transaction request, and provides a revised transaction authorization message to the client terminal in accordance with the received transaction authorization. The revised transaction authorization message provides an indication of authorization of the revised transaction request.

Claims

1. A method of processing an online transaction request comprising:

a network gateway generating a revised transaction request from an incoming transaction request transmitted from a client terminal, the revised transaction request including a revised transaction message derived from the incoming transaction request and a revised transaction request cryptogram generated from the revised transaction message, the revised transaction request cryptogram being uniquely associated with an identity token interfaced with the client terminal;

the network gateway receiving a transaction authorization from an issuer server for the revised transaction request; and

the network gateway providing a revised transaction authorization message to the client terminal in accordance with the received transaction authorization, the revised transaction authorization message providing an indication of authorization of the revised transaction request.

2. The method according to claim 1, wherein the incoming transaction request includes an identification number, and the generating a revised transaction request comprises the network gateway transmitting a portion of the incoming transaction request to a computer server, receiving an adjustment message from the computer server and generating the revised transaction message from the adjustment message and the incoming transaction request, the computer server generating the adjustment message from at least the identification number.

3. The method according to claim 2, wherein the incoming transaction request includes an incoming transaction message, and the revised transaction authorization message includes the incoming transaction message and the adjustment message.

4. The method according to claim 1, wherein the revised transaction request cryptogram generating comprises the network gateway generating the revised transaction request cryptogram from a token cryptographic key uniquely associated with the identity token.

5. The method according to claim 4, wherein the incoming transaction request includes an identification number, and the revised transaction request cryptogram generating comprises the network gateway generating the token cryptographic key from the identification number.

6. The method according to claim 4, wherein the revised transaction request cryptogram generating further comprises the network gateway generating the revised transaction request cryptogram from the incoming transaction request.

7. The method according to claim 1, wherein the incoming transaction request includes a token cryptogram, the revised transaction authorization message includes a revised transaction authorization cryptogram, and the generating a revised transaction authorization message comprises the network gateway generating the revised transaction authorization cryptogram from the token cryptogram and the received transaction authorization.

8. The method according to claim 1, wherein the receiving a transaction authorization comprises the issuer server receiving the revised transaction request from the network gateway, validating the revised transaction request from the revised transaction request cryptogram, and generating the transaction authorization in accordance with an outcome of the revised transaction request validating.

9. The method according to claim 1, wherein the incoming transaction request includes a token cryptogram, and the generating a revised transaction request comprises the network gateway verifying that the token cryptogram was generated by the identity token and generating the revised transaction request in accordance with an outcome of the verifying.

10. The method according to claim 1, wherein the incoming transaction request includes an identification number, and the generating a revised transaction request comprises the network gateway generating the revised transaction request upon validation of the identification number.

11. The method according to claim 1, further comprising the client terminal determining from the revised transaction authorization message whether the issuer server authorized the revised transaction request.

12. The method according to claim 1, wherein the receiving an incoming transaction request comprises a front-end switch receiving the incoming transaction request from the client terminal and directing the incoming transaction request to the network gateway in accordance with a data field of the incoming transaction request.

13. A computer-readable medium comprising computer processing instructions stored thereon for execution by a computer, the computer processing instructions, when executed by the computer, causing the computer to perform the method of claim 1.

14. A network gateway comprising:

a primary network interface for interfacing the network gateway with a primary network;

a secondary network interface for interfacing the network gateway with a secondary network; and

a transaction processor coupled to the primary and secondary network interfaces, the transaction processor being configured to;

(i) generate a revised transaction request from an incoming transaction request received from a client terminal via the primary network, the revised transaction request including a revised transaction message derived from the incoming transaction request and a revised transaction request cryptogram generated from the revised transaction message, the revised transaction request cryptogram being uniquely associated with an identity token interfaced with the client terminal;

(ii) receive a transaction authorization for the revised transaction request from an issuer server via the secondary network; and

(iii) provide a revised transaction authorization message to the client terminal via the primary network in accordance with the received transaction authorization, the revised transaction authorization message providing an indication of authorization of the revised transaction request.

15. The network gateway according to claim 14, wherein the incoming transaction request includes an identification number, and the network gateway is configured to generate the revised transaction request by transmitting a portion of the incoming transaction request to a computer server, receiving an adjustment message from the computer server and generating the revised transaction message from the adjustment message and the incoming transaction request, the computer server generating the adjustment message from at least the identification number.

16. The network gateway according to claim 15, wherein the incoming transaction request includes an incoming transaction message, and the revised transaction authorization message includes the incoming transaction message and the adjustment message.

17. The network gateway according to claim 14, wherein the network gateway is configured to generate the revised transaction request cryptogram from a token cryptographic key uniquely associated with the identity token.

18. The network gateway according to claim 17, wherein the incoming transaction request includes an identification number, and the network gateway is configured to generate the token cryptographic key from the identification number.

19. The network gateway according to claim 17, wherein the network gateway is configured to generate the revised transaction request cryptogram further from the incoming transaction request.

20. The network gateway according to claim 14, wherein the incoming transaction request includes a token cryptogram, the revised transaction authorization message includes a revised transaction authorization cryptogram, and the network gateway is configured to generate the revised transaction authorization cryptogram from the token cryptogram and the received transaction authorization.

21. The network gateway according to claim 14, wherein the incoming transaction request includes a token cryptogram, and the network gateway is configured to generate the revised transaction request by verifying that the token cryptogram was generated by the identity token and generating the revised transaction request in accordance with an outcome of the verifying.

22. The network gateway according to claim 14, wherein the incoming transaction request includes an identification number, and the network gateway is configured to generate the revised transaction request upon validation of the identification number.

23. An online transaction processing network comprising:

a client terminal configured to communicate with an identity token interfaced therewith;

an issuer server; and

a network gateway configured to;

(i) generate a revised transaction request from an incoming transaction request received from the client terminal, the revised transaction request including a revised transaction message derived from the incoming transaction request and a revised transaction request cryptogram generated from the revised transaction message, the revised transaction request cryptogram being uniquely associated with the identity token;

(ii) receive a transaction authorization from the issuer server for the revised transaction request; and

(iii) provide a revised transaction authorization message to the client terminal in accordance with the received transaction authorization, the revised transaction authorization message providing an indication of authorization of the revised transaction request.

24. The processing network according to claim 23, further comprising a computer server, and wherein the incoming transaction request includes an identification number, and the network gateway is configured to generate the revised transaction request by transmitting a portion of the incoming transaction request to the computer server, receiving an adjustment message from the computer server and generating the revised transaction message from the adjustment message and the incoming transaction request, the computer server generating the adjustment message from at least the identification number.

25. The processing network according to claim 24, wherein the incoming transaction request includes an incoming transaction message, and the revised transaction authorization message includes the incoming transaction message and the adjustment message.

26. The processing network according to claim 23, wherein the network gateway is configured to generate the revised transaction request cryptogram from a token cryptographic key uniquely associated with the identity token.

27. The processing network according to claim 26, wherein the incoming transaction request includes an identification number, and the network gateway is configured to generate the token cryptographic key from the identification number.

28. The processing network according to claim 26, wherein the network gateway is configured to generate the revised transaction request cryptogram further from the incoming transaction request.

29. The processing network according to claim 23, wherein the incoming transaction request includes a token cryptogram, the revised transaction authorization message includes a revised transaction authorization cryptogram, and the network gateway is configured to generate the revised transaction authorization cryptogram from the token cryptogram and the received transaction authorization.

30. The processing network according to claim 23, wherein the issuer server is configured to receive the revised transaction request from the network gateway, validate the revised transaction request from the revised transaction request cryptogram, and generate the transaction authorization in accordance with an outcome of the revised transaction request validating.

31. The processing network according to claim 23, wherein the incoming transaction request includes a token cryptogram, and the network gateway is configured to generate the revised transaction request by verifying that the token cryptogram was generated by the identity token and generating the revised transaction request in accordance with an outcome of the verifying.

32. The processing network according to claim 23, wherein the incoming transaction request includes an identification number, and the network gateway is configured to generate the revised transaction request upon validation of the identification number.

33. The processing network according to claim 23, further comprising a front-end switch configured to direct the incoming transaction request to the network gateway in accordance with a data field of the incoming transaction request.