Method and System for Secure Mobile Payment Transactions

• US 20150287036A1
• Filed: 06/19/2015
• Published: 10/08/2015
• Est. Priority Date: 02/20/2008
• Status: Active Grant

• Current Assignee: Stripe, Inc.
• Original Assignee: Collective Dynamics LLC
• Inventors: Bacastow, Steven V.
• Granted Patent: US 9,530,125 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/203 Inventory monitoring
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/26 Debit schemes, e.g. "pay now"
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/356 Aspects of software for card payments
• CPC Class Codes: G06Q 20/36 using electronic wallets or electronic money safes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation

Abstract

A method for facilitating the widespread use of the PIN-Debit payment method for Internet “eCommerce” and mobile payments sales which requires little or no change for the cardholders, merchants, debit networks and card issuers based primarily on the introduction of a layer of middleware and wherein the Debit Networks and Issuing Banks may customize the implementation of the services based on individual strategy and cardholder preferences.

Claims

1-18. -18. (canceled)

19. A method for processing a secure mobile payment transaction conducted at a location operated by a merchant comprising the steps of:

receiving from a consumer in connection with a registration event that is completed prior to the secure payment transaction, a mobile device ID and a payment account number associated therewith, the mobile device ID and the payment account number received at a secure payment service computing device comprising a mobile wallet system;

in connection with the secure mobile payment transaction, which is initiated after the registration event, receiving mobile payment data at the mobile wallet system, the mobile payment data received from a device at the location operated by the merchant, the mobile payment data comprising a mobile account number;

in association with the secure mobile payment transaction, analyzing the mobile payment data with the mobile wallet system to identify the mobile payment data as comprising the mobile account number;

upon identifying the mobile payment data as comprising the mobile account number, the mobile wallet system;

communicating an approval request to a registered mobile device of the consumer;

after receiving an approval response from the consumer'"'"'s registered mobile device, the mobile wallet system substituting the consumer'"'"'s registered payment account number for the mobile account number, and transmitting the mobile payment data to a secure payment network for processing; and

after transmitting the mobile payment data to the secure payment network for processing, the mobile wallet system transmitting a payment confirmation to the merchant.

20. The method of claim 19, wherein the location is one of an ecommerce site or a retail point of sale.

21. The method of claim 19, wherein the payment account number is associated with one of a credit card, a debit card, a gift card, or an alternative payment account.

22. The method of claim 19, wherein the secure payment network is one of a debit network, a credit card network, or an alternative payment network.

23. The method of claim 19, wherein the device at the location operated by the merchant is one of a POS device, a mobile device, or a hosting computer.

24. A method for processing a secure mobile payment transaction conducted at a location operated by a merchant comprising the steps of:

in association with a registration event that is completed prior to the secure payment transaction, receiving, at a mobile wallet system from an issuer entity, an issuer primary account number (PAN);

receiving at the mobile wallet system from a consumer in connection with the registration event, one or more of a mobile PIN and a biometric factor, the one or more of the mobile PIN and the biometric factor associated with the issuer PAN;

in connection with a secure mobile payment transaction conducted after the registration event, receiving payment data at the mobile wallet system, the payment data received from a computing device at the location operated by the merchant, the payment data comprising a mobile PAN which is associated with the issuer PAN;

analyzing the payment data with the mobile wallet system to identify the payment data as comprising the mobile PAN;

upon identifying the payment data as comprising the mobile PAN, the mobile wallet system;

communicating an approval request to a mobile device of the consumer operable to receive one or more of the mobile PIN and the biometric factor;

after receiving an approval response from the consumer'"'"'s mobile device, the mobile wallet system replacing the mobile PAN with the issuer PAN and transmitting the payment data and the issuer PAN to a payment network for processing; and

after transmitting the payment data and the issuer PAN to the payment network for processing, the mobile wallet system transmitting a payment confirmation to the merchant.

25. The method of claim 24, wherein the location is one of an ecommerce site or a retail point of sale.

26. The method of claim 24, wherein the issuer PAN is one of a credit card, a debit card, a gift card, or an alternate payment method.

27. The method of claim 24, wherein the payment network is one of a debit network, a credit card network, or an alternative payment network.

28. The method of claim 24, wherein the mobile PAN is received at the computing device at the location operated by the merchant via one of a contactless transmission, a transmission via contact, or a manual entry of the mobile PAN.

29. The method of claim 24, wherein the computing device at the location operated by the merchant is one of a POS device, a mobile device, or a hosting computer.

30. The method of claim 24, wherein the computing device at the location operated by the merchant is configured to detect the mobile PAN using Near Field Communication (NFC), RFID or other wireless based communications.

31. A system for processing a secure payment transaction, the system comprising:

a rule database, the rule database comprising configuration settings whereby the configuration settings are used to determine the criteria to be used to authorize the secure payment transaction;

a mobile wallet system in communication with the rule database and with one or more payment networks, the mobile wallet system comprising computer-readable instructions that when executed by one or more processors are configured to;

receive the configuration settings from one or more of a consumer, an issuer entity, a payment network, and a merchant, the configuration settings requiring a mobile approval for registered payment accounts;

store the configuration settings in the rule database;

receive from a first consumer in connection with a registration event that is completed prior to the secure payment transaction, a first payment account identifier associated therewith, the first payment account identifier stored in the rule database and associated with the configuration settings;

in connection with the secure payment transaction, which is initiated after the registration event, receive mobile payment data at the mobile wallet system, the mobile payment data received from a first merchant, the mobile payment data comprising a mobile payment account identifier;

analyzing the mobile payment data with the mobile wallet system to identify the mobile payment data as requiring a mobile approval;

upon identifying the mobile payment data as requiring a mobile approval, the mobile wallet system further configured to;

communicate an approval request to a mobile device of the first consumer;

after receiving an approval response from the first consumer'"'"'s mobile device, substituting the consumer'"'"'s registered payment account number for the mobile account number, and transmitting the mobile payment data to a first payment network for processing; and

after receiving an approval response from the first payment network,

transmitting a payment confirmation to the merchant.

32. The system of claim 31, wherein the payment data received from the first merchant is received from one of a retail point of sale, a mobile device, or an ecommerce site.

33. The system of claim 31, wherein the first payment account identifier is associated with one of a credit card, a debit card, a gift card, or an alternative payment account.

34. The system of claim 31, wherein the first payment network is one of a debit network, a credit card network, or an alternative payment network.

35. The system of claim 31, wherein the approval response is communicated by entry into the first consumer'"'"'s mobile device of a mobile PIN or biometric factor of the consumer which is one of a finger print, a voice print, or a geometric facial scan.

36. The system of claim 31, wherein the approval response is transmitted in the form of a token released from the first consumer'"'"'s mobile device to the mobile wallet system.

37. The configuration settings of claim 31, wherein the criteria for approving a payment transaction include one or more of merchant white lists, merchant black lists, transaction velocity, and location based restrictions.

38. The system of claim 31, wherein the payment data received from the first merchant is received from one of manual input or wireless input method.

39. A method for processing a secure mobile payment transaction conducted at a location operated by a merchant comprising the steps of:

receiving from one of an issuer entity and a consumer in connection with a registration event that is completed prior to the secure mobile payment transaction, a payment account number and one or more of a mobile PIN and a biometric factor of the consumer, the payment account number and the one or more of the mobile PIN and the biometric factor received at a mobile wallet system and associated with the payment account number;

in connection with the secure mobile payment transaction, which is initiated after the registration event, the mobile wallet system receiving mobile payment data from a device at a location operated by a merchant, the mobile payment data comprising a mobile account number transmitted to the device at the location operated by the merchant from a mobile device of the consumer;

in association with the secure mobile payment transaction, the mobile wallet system analyzing the mobile payment data received from the device at the location operated by the merchant to identify the mobile payment data as comprising the mobile account number;

upon identifying the mobile payment data as comprising the mobile account number,

substituting the registered payment account number for the mobile account number, transmitting the mobile payment data to a secure payment network for processing; and

after transmitting the payment data to the secure payment network for processing, the mobile wallet system transmitting a payment confirmation to the merchant.

40. The method of claim 39, wherein the registered payment account number is one of a debit card, credit card, gift card, or an alternative payment account number.

41. The method of claim 39, wherein the secure payment network is one of a debit network, a credit card network, or an alternative payment network.

42. The method of claim 39, wherein the device at the location operated by the merchant is one of a POS device, a mobile device, or a hosting computer.

43. The method of claim 39, wherein the secure mobile payment transaction is approved by a mobile device of the consumer using one of the mobile PIN or the biometric factor of the consumer.

44. The method of claim 39, wherein the biometric factor is one of a finger print, a voice print, a geometric facial scan, or other biometric factor.

45. The method of claim 39, wherein the secure payment transaction is approved in accordance with configuration settings received from one or more of an issuing entity, a merchant, and a consumer.

46. The method of claim 39, wherein elements of the mobile wallet system are comprised on one or more of the mobile device of the consumer, a payment acquirer computing device, a remote server comprising the secure payment service computing device, and a facility operated by a mobile network operator.

47. The method of claim 39, wherein one or more mobile devices of the consumer are associated with the payment account number during registration.

48. The method of claim 39, wherein the secure mobile payment transaction is declined based on the velocity of transactions received from a specified IP address.