DYNAMIC POINT OF SALE SYSTEM INTEGRATED WITH READER DEVICE

• US 20140108172A1
• Filed: 10/15/2013
• Published: 04/17/2014
• Est. Priority Date: 10/16/2012
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Weber, Lance, Bailey, Keith
• Granted Patent: US 9,390,412 B2
• Time in Patent Office: Days
• US Class Current: 705/17
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 30/00 Commerce

Abstract

Embodiments of the present invention are directed to methods, systems, and apparatuses for enabling payment information received via a reader device coupled to a mobile point-of-sale (POS) terminal to be communicated in a secure manner to a third party service provider for payment processing of a transation between a merchant and a consumer. Some embodiments are directed to communication of the payment information received from a reader device using a payment processing mechanism (e.g., a hosted order page) of the merchant to process payment information via the third party service provider in a secure manner. The reader device can encrypt payment information using a third party encryption mechanism, such as derived unique key per transaction (DUKPT). The third party encryption mechanism can be used or accessed by the third party service provider to enable end-to-end security for payment processing.

Claims

1. A method, comprising:

receiving, by a server computer of a service provider, a session request to establish a session for communication with a computing device to conduct a payment transaction between a merchant and a consumer;

sending, by the server computer, activation information to the computing device, wherein the activation information identifies a location of a webpage on the server computer, and wherein the webpage enables operation of a reader device to receive payment information;

receiving, by the server computer, the payment information via an order form of the web page, wherein the order form includes the payment information received from the reader device, and wherein the payment information is encrypted; and

processing, by the processor, the payment transaction based on the received payment information.

2. The method of claim 1, wherein the activation information includes a uniform resource locator identifying the location of the web page, and wherein the webpage includes a prompt to initiate operation of the reader device to receive the payment information.

3. The method of claim 1, wherein the web page is a hosted order page, wherein the payment information is inserted in the order form, and wherein the payment information is received via the order form in response to a post function executed for the order form.

4. The method of claim 1, wherein processing the payment transaction further comprises:

sending, by the server computer, a decryption request to a payment processing system to decrypt the payment information;

receiving, by the server computer, a decryption result in response to the decryption request;

sending, by the server computer, an authorization request to the payment processing system to determine authorization for the payment transaction; and

receiving, by the server computer, an authorization result in response to the authorization request.

5. The method of claim 1, further comprising:

sending, by the server computer, to a merchant system a notification of a payment result of processing the payment transaction; and

sending, by the server computer, to the computing device the payment result of the processing the payment transaction.

6. A gateway server computer, comprising:

one or more processors; and

one or more memory devices coupled to the one or more processors, the one or more memory devices comprising instructions executable by the one or more processors to perform a method comprising;

receiving a session request to establish a session for communication with a computing device to conduct a payment transaction between a merchant and a consumer;

sending activation information to the computing device, wherein the activation information identifies a location of a webpage in the one or more memory devices, and wherein the webpage enables operation of a reader device to receive payment;

receiving the payment information via an order form of the web page, wherein the order form includes the payment information received from the reader device, and wherein the payment information is encrypted; and

processing the payment transaction based on the received payment information.

7. The gateway server computer of claim 6, wherein the webpage is associated with the merchant, and wherein the one or more memory devices stores different activation information for each of a plurality of webpages, each web page corresponding to one of a plurality of merchants.

8. The gateway server computer of claim 6, wherein the payment information is requested from the reader device in response to interaction with the webpage.

9. The gateway server computer of claim 6, wherein the web page is a hosted order page hosted by the gateway server computer, wherein the payment information is inserted in the order form, and wherein the payment information is received via the order form in response to a post function executed for the order form.

10. A system, comprising:

a client system configured to;

send to a merchant system a request to initiate payment for a payment transaction between a merchant and a consumer;

receive activation information from a server computer of a service provider, wherein the activation information identifies a location of a webpage in the server computer, and wherein the webpage enables operation of a reader device to receive payment;

receive the payment information from the reader device in response to input received via the webpage, wherein the payment information is encrypted;

insert the payment information into an order form of the web page; and

cause the payment information to be submitted to the server computer via the order form of the web page for payment processing; and

a server system configured to;

receive a session request to establish a session for communication with the client system to conduct the payment transaction, wherein the session request is received from a merchant system in response to receiving the request to initiate payment;

send the activation information to the client system;

receive the payment information via the order form of the web page; and

process the payment transaction based on the received payment information.

11. A method, comprising:

sending, from a computing device, a request to a merchant system to initiate payment for a transaction between a merchant and a consumer;

receiving, by the computing device, activation information from a server computer of a service provider, wherein the activation information identifies a location of a webpage in the server computer, and wherein the webpage enables operation of a reader device to receive payment;

receiving, by the computing device, the payment information from the reader device in response to input received via the webpage, wherein the payment information is encrypted;

inserting, by the computing device, the payment information into an order form of the web page; and

causing, by the computing device, the payment information to be submitted to the server computer via the order form of the web page for payment processing.

12. The method of claim 11, wherein the request to initiate payment is initiated via a merchant webpage provided by the merchant system, and wherein the request causes the merchant system to send a session request to the server computer to establish a session for communication between the computing device and the server computer to conduct the transaction.

13. The method of claim 11, wherein the payment information for the payment transaction is encrypted based on a key derived for the payment transaction based on an encryption key received from a security service provider.

14. The method of claim 11, wherein the security service provider is distinct from the service provider that processes the payment information.

15. The method of claim 11, wherein the web page is a hosted order page and wherein causing the payment information to be submitted includes executing a post function call on the order form of the webpage.

16. The method of claim 11, further comprising:

receiving, by the computing device, from the service provider, a payment result of the processing the payment transaction.

17. The method of claim 11, further comprising:

sending, by the computing device, a request for payment information from reader device, wherein the request is sent in response to operation of a control on the webpage.

18. The method of claim 11, wherein the location of the webpage is indicated by a uniform resource locator, and wherein the webpage includes a control to initiate operation of the reader device to receive the payment information.

19. The method of claim 11, wherein the webpage is associated with the merchant, and wherein the one or more memory devices stores different activation information for each of a plurality of webpages, each web page corresponding to one of a plurality of merchants.

20. The method of claim 11, wherein the request to a merchant system to initiate payment for a transaction is initiated via a merchant website hosted by the merchant system.