Secure method for communicating credit card data when placing an order on a non-secure network

• US 5,727,163 A
• Filed: 03/30/1995
• Issued: 03/10/1998
• Est. Priority Date: 03/30/1995
• Status: Expired due to Term

• Current Assignee: Amazon.com, Inc.
• Original Assignee: Amazon.com, Inc.
• Inventors: Bezos, Jeffrey P.
• Primary Examiner(s): Chin, Wellington
• Assistant Examiner(s): Carman, Melissa Kay
• Application Number:
  US08/413,242
• Time in Patent Office: 1,076 Days
• Field of Search: 395/239, 395/849, 395/186, 395/240, 395/227, 364/401, 235/380, 235/487, 235/381, 379/111, 379/91, 379/59, 379/93, 379/114, 379/120, 379/130, 379/20, 379/58, 379/60, 379/88, 379/96, 379/91.01, 379/91.02, 380/25, 340/825.33, 340/825.34, 340/825.35
• US Class Current: 705/50
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/3827 Use of message hashing
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/4037 Remote solvency checks
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G06Q 30/0619 Neutral agent
• CPC Class Codes: G06Q 30/0635 Processing of requisition or of purchase orders
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02

Abstract

A method and system for placing an order charged to a credit card, over an unsecured network. The customer completing an order for goods or services enters information required for the order, such as the shipping and billing addresses and identification of the goods, but enters only a subset of the credit card account number to which the order is to be charged. The order is transmitted over the Internet or other network to a remote merchant location (32) from a customer'"'"'s location (10). A computer (38) at the remote merchant location processes the order to extract the data provided by the customer for storage in a database (40). During a subsequent telephone call to the remote merchant location, the customer enters the complete credit card number, preferably on a touch-tone keypad (28). The touch-tone signals are processed by an automated attendant system (44) for input of the complete credit card number into the computer. Using the portion of the complete credit card number that corresponds to the subset entered by the customer on the order form, the computer identifies the order previously placed and inserts the complete credit card number in the order data stored on the database to finalize the order.

Claims

1. A method for communicating confidential data and non-confidential data to an intended recipient at a remote location, comprising the steps of:

(a) transmitting the non-confidential data and a portion of the confidential data to the intended recipient over a non-secure network, said portion of the confidential data comprising a message reference key;

(b) transmitting the confidential data in a complete form to the intended recipient over a secure network;

(c) comparing a portion of the confidential data in the complete form received at the remote location over the secure network to the message reference key received over the non-secure network to match the non-confidential data with the confidential data in the complete form; and

(d) combining the confidential data in the complete form that were received at the remote location with the non-confidential data matched therewith to form a complete message.

2. A method for communicating credit card data in connection with a message transmitted over a non-secure network, comprising the steps of:

(a) transmitting the message over the non-secure network from a local computer, said message including only a portion of the credit card data;

(b) receiving the message with the portion of the credit card data at a remote location that is coupled to the non-secure network, said message being added to a database;

(c) calling the remote location via a secure network to finalize the message by entering complete credit card data; and

(d) matching the message containing the portion of the credit card data with the complete credit card data by comparing the portion of the credit card data that was included in the message with a corresponding portion of the complete credit card data that was entered via the secure network, said complete credit card data thereby being matched with and entered into the message in the database.

3. The method of claim 2, wherein the credit card data include a plurality of digits, said portion of the credit card data that is included with the message comprising a predefined subset of the digits of the credit card data, the number of digits in said subset being less than all of the digits of the credit card data.

4. The method of claim 2, wherein the secure network couples the local computer with the remote location over a telephone line.

5. The method of claim 4, wherein the step of entering the complete credit card data comprises the step of keying the credit card data into a telephone keypad so that the message is completed automatically without clerical assistance.

6. The method of claim 4, further comprising the step of entering additional identifying data via a telephone in the event that a duplicate entry of the portion of the credit card data is found in the database, said additional identifying data being compared to corresponding identifying data in the messages on the database to identify the message into which the complete credit card data should be entered.

7. The method of claim 4, further comprising the steps of automatically reading back at least a part of the finalized message on a telephone;

and enabling an entry to be made thereafter during the telephone call, to confirm the finalized message.

8. The method of claim 2, further comprising the step of providing clerical assistance during the step of calling the remote location via the secure network, if a problem arises in automatically finalizing the message.

9. A method for entering an order and/or establishing an account over a non-secure computer network, to make a purchase on credit by reference to a credit card number, comprising the steps of:

(a) completing a form that includes purchaser data and a predefined subset of the credit card number, said subset of the credit card number comprising an order key;

(b) transmitting data entered to complete the form to a remote location over the non-secure computer network;

(c) storing said data in a database of an automated order entry system, said data being associated with a specific customer;

(d) placing a telephone call to the remote location and entering the complete credit card number, a subset of said number that corresponds to the subset of the credit card number entered on the form comprising a match key;

(e) comparing the match key to the order keys stored in the data base to identify the data entered in the form previously stored in step (c) and to associate the telephone call with the specific customer with which said data are associated; and

(f) adding the complete credit card number to said data, to complete an order and/or to establish an account for placing subsequent orders for said specific customer.

10. The method of claim 9, further comprising the step of enabling confirmation that the data and specific customer have been correctly identified, by making an entry on the telephone.

11. The method of claim 10, further comprising the step of playing back at least some of the data entered to complete the form using a recorded voice, to determine whether any errors exist and to determine that the correct data previously stored have been identified.

12. The method of claim 9, further comprising the step of entering other data on the telephone to differentiate between a plurality of customers having identical order keys, said other data also being transmitted on the non-secure computer network, thereby enabling the data entered on the form by the specific customer and previously stored to be identified from among the data entered by the plurality of customers having identical order keys, using both the match key and the other data.

13. The method of claim 9, further comprising the step of providing operator assistance to a customer if a problem arises during the telephone call.

14. The method of claim 9, further comprising the step of purging the order key after the order key is matched with a complete credit card number.

15. The method of claim 9, wherein the step of entering the complete credit card number comprises the step of keying said number into a telephone touch-tone keypad.

16. The method of claim 12, wherein the other data comprises an expiration date for the credit card.

17. The method of claim 12, wherein the step of entering other data on the telephone comprises the step of verbally prompting a customer with a plurality of options for entry on a telephone touch-tone keypad during a telephone call, to differentiate between the plurality of customers having identical order keys.

18. The method of claim 9, further comprising the step of placing a telephone call to each customer placing an order to prompt for entry of the complete credit card number of said customer as provided in step (d).

19. The method of claim 9, further comprising the step of transmitting a request to a customer placing an order via the non-secure computer network, said request prompting said customer to place a telephone call to the remote location for entry of the complete credit card number of said customer.

20. The method of claim 9, wherein if the telephone call is placed to the remote location to enter the complete credit card number before the data entered to complete the form are stored in the database, further comprising the step of storing the complete credit card number in the database for subsequent comparison of the match key derived from said complete credit card number to the order key included in said data when said data are received.

21. A system for receiving messages from a plurality of sites, each message including non-confidential data and a subset of confidential data, said non-confidential data and said subset of the confidential data being conveyed as a message to an intended recipient using a non-secure transmission method, to be completed by adding the complete confidential data, which are transmitted to the intended recipient using a secure transmission method, comprising:

(a) a computer for use in receiving said messages, said computer having a central processor that executes instructions, a memory for storing instructions to be executed, and non-volatile storage for storing the messages;

(b) an automated attendant system, coupled to the computer, for automatically answering a communication from one of the plurality of sites, said communication having been placed to enter the complete confidential data into the computer using the secure transmission method, a portion of the complete confidential data thus entered, which corresponds to the subset of the confidential data, comprising a match key; and

(c) said instructions in the memory of the computer causing the central processor to;

(i) store the messages received from the plurality of sites using the non-secure transmission method in the non-volatile storage, said messages including the non-confidential data and the subset of the confidential data, said subset comprising an order key;

(ii) compare the match key with the order keys associated with messages stored in the non-volatile storage to identify the message conveyed using the non-secure transmission method from said one of the plurality of sites and to associate the complete confidential data conveyed using the secure transmission method with said message; and

(iii) adding the complete confidential data conveyed using the secure transmission method to the message thus identified, for storage in the non-volatile storage, to complete the message.

22. The system of claim 21, wherein the automated attendant system prompts for entry of the confidential data during the communication using the secure transmission method.

23. The system of claim 21, wherein said automated attendant system includes automated voice means for producing verbal instructions;

and wherein, after the central processor has used the match key to identify the message with which the complete confidential data are associated, the automated voice means read at least a portion of the non-confidential data of the message that was identified and prompts for confirmation that the message has been correctly identified.

24. The system of claim 21, wherein if a duplicate order key is stored in the non-volatile storage for a plurality of messages so as to create an ambiguity in identifying the message associated with the complete confidential data, the central processor causes the automated attendant system to verbally prompt for entry of a specific portion of the non-confidential data comprising the message, in addition to prompting for entry of the complete confidential data, said specific portion of the non-confidential data being compared by the central processor to a corresponding portion of the non-confidential data from the plurality of messages with the duplicate order key, to resolve the ambiguity and identify the message associated with the complete confidential data.

25. The system of claim 24, wherein the automated attendant system verbally offers a plurality of options for entry on a telephone touch-tone keypad during a telephone call to resolve the ambiguity.

26. The system of claim 21, wherein the confidential data comprise a credit card number.

27. The system of claim 21, wherein the secure transmission method provides for communicating over a telephone and wherein the automated attendant system includes means for connecting a telephone call to a human attendant, if a problem arises that is not resolved by the automated attendant system.

28. The system of claim 21, wherein the automated attendant system places a telephone call to each of the plurality of sites to prompt for entry of the complete confidential data associated with messages received by the intended recipient from each of the plurality of sites.

29. The system of claim 21, wherein the instructions cause the central processor to transmit a request transmitted using the non-secure transmission method to said one of the plurality of sites, said request prompting for a telephone call to be placed to enter the complete confidential data associated with the message from said one of the plurality of sites.

30. The system of claim 21, wherein if the complete confidential data are entered before the message to be associated with the confidential data referenced by the match key is stored, the instructions cause the central processor to store the complete confidential data in the non-volatile storage for subsequent association with said message after the message is received using the non-secure transmission method.

31. The system of claim 21, wherein the instructions cause the central processor to purge the order key after the order key is matched with the complete confidential data based upon the match key.