Privacy Preserving E-Payment Architecture, Systems, and Methods

• US 20140108262A1
• Filed: 10/11/2013
• Published: 04/17/2014
• Est. Priority Date: 10/11/2012
• Status: Abandoned Application

• Current Assignee: Bull Sas (Atos SE), Laboratoire Greyc
• Original Assignee: Bull Sas (Atos SE), Laboratoire Greyc
• Inventors: PLATEAUX, Aude, COQUET, Vincent, VERNOIS, Sylvain, LACHARME, Patrick, ROSENBERGER, Christophe
• Application Number:
  US14/052,493
• Publication Number:
  US 20140108262A1
• Time in Patent Office: Days
• US Class Current: 705/71
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: G06Q 20/387 Payment using discounts or coupons relating to marketing G06Q30/02
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists

Abstract

A method for providing privacy in online transactions. The method can include receiving, at a service provider system, a purchase request from a client, the purchase request including banking information, and the banking information being encrypted with a third party public key such that the service provider system cannot decrypt the encrypted banking information. The encrypted banking information can be transmitted to a bank system, such that the banking information cannot be used to identify the identity of the client. The method can also include receiving an authorization message if the client'"'"'s purchase request is authorized.

Claims

1. A computer system providing privacy in online transactions, said computer system comprising:

a processor; and

a memory coupled to the processor, the memory having stored therein software instructions that, when executed by the processor, cause the processor to perform operations including;

receiving a purchase request from a client, the purchase request including banking information, the banking information being encrypted with a third party public key such that the system cannot decrypt the encrypted banking information;

transmitting the encrypted banking information to a bank system, wherein the banking information cannot be used to identify the identity of the client;

receiving an authorization message if the client'"'"'s purchase request is authorized.

2. The system of claim 1,

wherein the banking information includes a voucher, the voucher including a purchase amount, a random order number, and client bank information,

wherein the voucher is generated and encrypted by a bank at which the client has an account, the account being identified by the client bank information, and the voucher being encrypted with the third party public key, and

wherein the system cannot decrypt the voucher to access the client bank information.

3. The system of claim 1,

wherein the transmitting the encrypted banking information to the bank system causes the bank system to transmit the encrypted banking information to a trusted third party to be decrypted using a third party private key.

4. The system of claim 2, wherein the banking information is pre-validated by the client'"'"'s bank.

5. The system of claim 1, wherein the purchase request includes a symmetric session key and the symmetric session key is used to encrypt messages transmitted to the client.

6. The system of claim 1, wherein the operations further include providing a service to the client if the client'"'"'s purchase is authorized.

7. A method for providing privacy in online transactions, the method comprising:

receiving, at a service provider system, a purchase request from a client, the purchase request including banking information, the banking information being encrypted with a third party public key such that the service provider system cannot decrypt the encrypted banking information;

transmitting the encrypted banking information to a bank system, wherein the banking information cannot be used to identify the identity of the client;

receiving an authorization message from the bank system if the client'"'"'s purchase request is authorized.

8. The method of claim 7,

wherein the banking information includes a voucher, the voucher including a purchase amount, a random order number, and client bank information,

wherein the voucher is generated and encrypted by a bank at which the client has an account, the account being identified by the client bank information, and the voucher being encrypted with the third party public key, and

wherein the service provider system cannot decrypt the voucher to access the client bank information.

9. The method of claim 7,

wherein the transmitting the encrypted banking information to the bank system causes the bank system to transmit the encrypted banking information to a trusted third party to be decrypted using a third party private key.

10. The method of claim 8, wherein the banking information is pre-validated by the client'"'"'s bank.

11. The method of claim 7, wherein the purchase request includes a symmetric session key and the symmetric session key is used to encrypt messages transmitted to the client.

12. The method of claim 7, wherein the operations further include providing a service to the client if the client'"'"'s purchase is authorized.

13. A non-transitory computer readable medium having stored thereon software instructions that, when executed by a computer, cause the computer to perform operations comprising:

receiving a purchase request from a client, the purchase request including banking information, the banking information being encrypted with a third party public key such that the system cannot decrypt the encrypted banking information;

transmitting the encrypted banking information to a bank system, wherein the banking information cannot be used to identify the identity of the client;

receiving an authorization message if the client'"'"'s purchase request is authorized.

14. The computer readable medium of claim 13,

wherein the banking information includes a voucher, the voucher including a purchase amount, a random order number, and client bank information,

wherein the voucher is generated and encrypted by a bank at which the client has an account, the account being identified by the client bank information, and the voucher being encrypted with the third party public key, and

wherein the system cannot decrypt the voucher to access the client bank information.

15. The computer readable medium of claim 13,

wherein the transmitting the encrypted banking information to the bank system causes the bank system to transmit the encrypted banking information to a trusted third party to be decrypted using a third party private key.

16. The computer readable medium of claim 14, wherein the banking information is pre-validated by the client'"'"'s bank.

17. The computer readable medium of claim 13, wherein the purchase request includes a symmetric session key and the symmetric session key is used to encrypt messages transmitted to the client.

18. The computer readable medium of claim 13, wherein the operations further include providing a service to the client if the client'"'"'s purchase is authorized.