Computerized payment system for purchasing goods and services on the internet

• US 5,757,917 A
• Filed: 11/01/1995
• Issued: 05/26/1998
• Est. Priority Date: 11/01/1995
• Status: Expired due to Term

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: First Virtual Holdings, Inc.
• Inventors: Borenstein, Nathaniel S., New, Darren, Stefferud, Einar, Lowery, Carlyn M., Stein, Lee H., Rose, Marshall T.
• Primary Examiner(s): Tarcza, Thomas H.
• Assistant Examiner(s): Laufer, Pinchus M.
• Application Number:
  US08/548,305
• Time in Patent Office: 937 Days
• Field of Search: 395/226, 395/227, 395/239, 395/242, 395/244, 395/238, 395/237, 380/24, 380/30, 380/23, 380/25, 380/49, 364/400
• US Class Current: 705/79
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A method and system for use on a quasi-public network, such as the Internet, to enable users of the network to conduct commercial transactions involving a payment of funds by one user to another user of the network. The method includes operating a computer system for sending and receiving messages from users over the network. Upon receiving a message over the network from a qualified user-seller, a message is sent over the network to the user-buyer that was identified in the message from the user-seller. The message to the user-buyer requests confirmation of a transaction identified in the message received from the user-seller. Upon receiving a confirmation over the network from the user-buyer, payment information is sent by secure channels off the network to an agent of the user-seller. The user-seller'"'"'s agent may be a separate entity or the function of the user-seller'"'"'s agent may be performed by the transaction enabling system. Upon receipt of an authorization code from the seller'"'"'s agent, the authorization code is encrypted and sent to the user-seller over the network.

Claims

1. A method for enabling a seller and a buyer communicating over a quasi-public network to initiate a commercial transaction involving a payment of funds by the buyer to the seller, said method comprising the steps of:

on a computer system coupled to said quasi-public network, receiving a message over the quasi-public network from the seller, the seller'"'"'s message identifying the buyer and a transaction;

from said computer system coupled to said network, sending a message over the quasi-public network to the identified buyer, said message to the buyer identifying the transaction;

on said computer system coupled to said quasi-public network, receiving a message over the quasi-public network from the identified buyer, said buyer'"'"'s message indicating acceptance or refusal of the transaction;

if the buyer'"'"'s message indicates approval of the transaction, from a secure part of said computer system, communicating to an agent of the seller via a secure communication channel information for permitting the buyer to pay for transaction;

on said secure part of said computer system, receiving an authorization code from the seller'"'"'s agent via said secure communication channels; and

from said computer system coupled to said quasi-public network, sending a cryptographically-signed message including the authorization code to the seller via the quasi-public network.

2. The method of claim 1 further comprising the step of:

connecting a computer system to the quasi-public network, said computer system having a means for sending and receiving messages.

3. The method of claim 1 in which the cryptographically-signed message utilizes public key cryptography.

4. The method of claim 1 further comprising the steps of:

on said secure part of said computer system cryptographically-encoding the authorization code; and

from said computer system coupled to said network, attaching said cryptographically-encoded authorization code to the message to the seller.

5. The method of claim 1 in which the message received over the quasi-public network from a qualified seller is an e-mail message.

6. The method of claim 1 in which the message sent over the quasi-public network to the identified buyer is an e-mail message.

7. The method of claim 1 in which the message received over the quasi-public network from the identified buyer is an e-mail message.

8. The method of claim 1 in which the message sent over the quasi-public network to the seller is an e-mail message.

9. The method of claim 1 in which the quasi-public network is the Internet.

10. The method of claim 1 further comprising the step of:

qualifying users of the quasi-public network as sellers.

11. The method of claim 1 further comprising the step of:

maintaining a database of account holders who are users of the quasi-public network.

12. The method of claim 11 in which said database includes information regarding account holders who are qualified as sellers and account holders who are not qualified as sellers.

13. The method of claim 11 in which the database includes information indicating whether an account holder is qualified as a seller.

14. The method of claim 1 further comprising the step of maintaining a first system and a second system,

said first system comprising communication accessible to the quasi-public network, and

said second system comprising communication accessible to sellers'"'"' agents who interface with a bankcard processing network, and further in which said method further comprises the step of:

communicating information regarding the transaction from the first system to the second system, after approval by the buyer of the transaction.

15. The method of claim 1 further comprising the step of maintaining a first system and a second system,

said first system comprising a first database of account holders, said account holders being users of the quasi-public network and including a first group of account holders who are qualified as sellers and a second group of account holders who are not qualified as sellers, and

said second system comprising a second database of said account holders including information associated with said second group of account holders including means by which payment can be made by said second group of account holders.

16. The method of claim 15 further comprising the step of maintaining a firewall between said first system and said second system.

17. The method of claim 15 in which communication between the first system and the second system is by batch processing.

18. The method of claim 1 in which the transaction is for goods or services provided by the seller to the buyer.

19. A method of operating a computer system coupled to a quasi-public network to enable a seller and a buyer communicating over said quasi-public network to enter into a commercial transaction involving a payment of funds by the buyer for goods or services of value provided by the seller to the buyer, said method comprising the steps of:

on said computer system having a portion thereof that has access to the quasi-public network and a secure portion isolated from said quasi-public network, qualifying a first group of users of the quasi-public network as sellers;

maintaining bankcard payment information for a second group of users of the quasi-public network, said bankcard payment information maintained on a storage medium on said secure portion of said computer system;

maintaining listings of said first and second groups of users on a storage medium on said portion of said computer system that has access to the quasi-public network, but that is isolated from the secure portion of the computer system;

in response to a message over the quasi-public network to said portion of said computer system having access to the quasi-public network from a user of the first group identifying a potential transaction with a user of the second group, sending a message from said portion having access to the quasi-public network over the quasi-public network to the identified user of the second group for confirmation;

upon receipt of a message over the quasi-public network to said portion of said computer system having access to the quasi-public network from the user of the second group confirming the transaction with the user of the first group, communicating bankcard information from said secure portion of said computer system over secure channels to an agent of the user of the first group;

upon receipt of an authorization code from the agent via secure channels, cryptographically signing the authorization code; and

sending the authorization code to the user of the first group via the quasi-public network.

20. The method of claim 19 further comprising the step of:

on said computer system receiving authorization from said first group of users to act as said agent.