SECURE SYNCHRONIZATION OF PAYMENT ACCOUNTS TO THIRD-PARTY APPLICATIONS OR WEBSITES

• US 20140351126A1
• Filed: 05/22/2013
• Published: 11/27/2014
• Est. Priority Date: 05/22/2013
• Status: Abandoned Application

• Current Assignee: SCVNGR, Inc. (GrubHub Inc.)
• Original Assignee: SCVNGR, Inc. (GrubHub Inc.)
• Inventors: Priebatsch, Seth
• Application Number:
  US13/899,760
• Publication Number:
  US 20140351126A1
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists

Abstract

A two-factor approach for authenticating payment transactions between a third-party application and a consumer is facilitated by a transaction server via a consumer'"'"'s mobile device. A first communication channel (e.g., the Internet) is used to request authorization, and a second independent communication channel is used for identity verification and authorization. The second channel is typically the user'"'"'s mobile phone or other wireless communication device. In this way, authorization is de-linked from, but “synchronized” with, the communication channel used to purchase goods or services.

Claims

1. A method of authorizing a payment transaction among a consumer, a merchant, and a registered consumer device by a transaction server, the method comprising:

transmitting, by a merchant system to the transaction server over a first communication channel, a transaction-authorization request containing a consumer identifier but not including secure information of the consumer;

subsequent to the communication from the merchant system and without initiation by the consumer, transmitting the transaction authorization request to the registered consumer device over a second communication channel different from the first communication channel; and

upon receiving over the second communication channel a transaction authorization, which does not include secure consumer information, granted by the consumer via the registered device, transmitting the transaction authorization to the merchant system over the first communication channel.

2. The method of claim 1 wherein the transaction authorization includes a permission for a single payment transaction with the merchant.

3. The method of claim 1 wherein the transaction authorization includes a permission to process a plurality of payment transactions with the merchant.

4. The method of claim 3 wherein the permission is for only transactions meeting at least one criterion defined by the consumer.

5. The method of claim 1 wherein the transaction authorization is in the form of a token.

6. The method of claim 1 wherein the consumer identifier is an email address.

7. The method of claim 1 wherein the consumer identifier is a phone number.

8. The method of claim 1 further comprising storing the transaction authorization in a first transaction with the consumer for authorization in a subsequent transaction with the consumer.

9. The method of claim 1 further comprising:

modifying the transaction authorization via the registered consumer device in communication with the transaction server over the second communication channel; and

transmitting, by the transaction server, the modified authorization to the merchant system over the first communication channel.

10. The method of claim 1 wherein the first communication channel is the Internet and the second communication channel is a wireless telephone connection.

11. A transaction server for authorizing a payment transaction among a consumer, a merchant, and a registered consumer device, the server comprising:

a first interface for communicating over a first communication channel for receiving, from a merchant server, a transaction authorization request containing a consumer identifier, the consumer identifier not including secure information of the consumer;

a second interface for communicating over a second communication channel different from the first communication channel; and

a processor configured to (i) identify the consumer based on the consumer identifier and without using secure information of the consumer, (ii) transmit the transaction authorization request to the registered consumer device over the second communication channel via the second interface without initiation by the consumer, and (iii) transmit the transaction authorization to the merchant system over the first communication channel via the first interface upon receiving, over the second communication channel via the second interface, a transaction authorization, which does not include secure consumer information, granted by the consumer via the registered consumer device.

12. The system of claim 11 wherein the transaction authorization includes a permission for a single payment transaction with the merchant.

13. The system of claim 11 wherein the transaction authorization includes a permission to process subsequent payment transactions with the merchant.

14. The system of claim 13 further comprising a permissions database for storing consumer permissions, the permission to process subsequent payment transactions with the merchant being application only to transactions meeting criteria defined by the consumer and stored in a record of the database.

15. The system of claim 11 wherein the first communication channel is the Internet and the second communication channel is a wireless telephone connection.