Mechanism for enabling secure electronic transactions on the open internet

• US 5,778,173 A
• Filed: 06/12/1996
• Issued: 07/07/1998
• Est. Priority Date: 06/12/1996
• Status: Expired due to Term

• Current Assignee: AT&T Corporation (AT&T, Inc.)
• Original Assignee: AT&T Corporation (AT&T, Inc.)
• Inventors: Apte, Jitendra
• Primary Examiner(s): Decady, Albert
• Application Number:
  US08/664,019
• Time in Patent Office: 755 Days
• Field of Search: 395/186, 395/187.01, 395/188.01, 380/4, 380/23, 380/25
• US Class Current: 726/2
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04M 7/12 for working between exchanges having different types of switching equipment, e.g. power-driven and step by step or decimal and non-decimal

Abstract

A method is provided for performing a transaction that is initiated over an open communication network between a user and a remotely located server. The open communication network may be the Internet, for example. In accordance with one embodiment of the method, a transaction identification number is received from the remotely located server over the open network and subsequently, communication between the user and the remotely located server is discontinued. Communication is established between the user and a transaction server. The transaction server is operatively coupled to the user and the remotely located server over a communication network which is isolated from the open network. The transaction identification number is transmitted to the transaction server over the communication network. After the transaction server confirms the validity of the transaction identification number, in response to a request from the transaction server, a transaction authorization number is transmitted over the communication network to the transaction server to complete the transaction.

Claims

1. A method for performing a transaction initiated over an open communication network between a user and a remotely located server, comprising the steps of:

a. receiving a transaction identification number from the remotely located server over the open network;

b. automatically discontinuing communication between said user and said remotely located server responsive to a request from said user to complete the transaction;

c. automatically establishing communication between said user and a transaction server responsive to the request from said user to complete the transaction, said transaction server being operatively coupled to said user and said remotely located server over a communication network isolated from said open network contemporaneous with step (b) and substantially seamless to said user;

d. transmitting said transaction identification number to said transaction server over said communication network;

e. after the transaction server confirms validity of the transaction identification number, transmitting over said communication network, in response to a request from said transaction server, a transaction authorization number to said transaction server to complete the transaction.

2. The method of claim 1 wherein communication between said user and said transaction server is configured to appear as a World Wide Web communication.

3. The method of claim 1 wherein communication over said communication network between said user and said transaction server employs an encrypted protocol at least in part operating over a telephone link.

4. The method of claim 1 wherein said open network comprises the Internet.

5. The method of claim 4 wherein said open network comprises the world wide web.

6. The method of claim 1 wherein said user is in communication with said remotely located server and said transaction server over a personal computer.

7. The method of claim 1 wherein said remotely located server is employed by a vendor to advertise on the open network.

8. The method of claim 7 wherein said transaction comprises a purchase.

9. The method of claim 8 wherein said transaction authorization number is a credit card number.

10. The method of claim 1 wherein step (a) further comprises the step of receiving from said remotely located server a telephone number of said transaction server.

11. The method of claim 1 wherein step (b) includes the step of suspending communication between said user and said remotely located server by placing said remotely located server in a hold state.

12. The method of claim 1 wherein said communication in step (c) is initiated by said user.

13. The method of claim 12 wherein said user initiates communication with said transaction server by performing the step of retrieving a locally stored telephone number of said transaction server.

14. The method of claim 12 wherein said user initiates communication with said transaction server by retrieving a telephone number from a directory located in said communication network.

15. The method of claim 5 wherein said transaction is initiated by the user using a World Wide Web browser.

16. The method of claim 1 further comprising the steps of:

f. discontinuing communication between said user and said transaction server after completion of step (e);

g. resuming communication between said user and said remotely located server contemporaneous with step (f) and substantially seamless to said user.

17. The method of claim 16 wherein steps (f) and (g) occur automatically after completion of step (e).

18. A computer readable medium having a computer program encoded thereon for performing a transaction initiated over an open communication network between a user and a remotely located server, comprising:

a first portion of said medium having a first program segment for receiving a transaction identification number from the remotely located server over the open network;

a second portion of said medium having a second program segment for automatically discontinuing communication between said user and said remotely located server responsive to a request from said user to complete the transaction;

a third portion of said medium having a third program segment for automatically establishing communication between said user and a transaction server over a communication network isolated from said open network responsive to the request from said user to complete the transaction, and seamless to said user and contemporaneous with automatically discontinuing communication performed by said second program segment;

a fourth portion of said medium having a fourth program segment for transmitting said transaction identification number to said transaction server over said communication network;

a fifth portion of said medium having a fifth program segment for transmitting over said communication network, after the transaction server confirms validity of the transaction identification number and in response to a request from said transaction server, a transaction authorization number to said transaction server to complete the transaction.

19. The medium of claim 18 wherein said third, fourth and fifth program segments are executed such that communication between said user and said transaction server is configured to appear as a World Wide Web communication.

20. The medium of claim 18 wherein said third, fourth, and fifth program segments employ an encrypted protocol operating at least in part over a telephone link.

21. The medium of claim 18 wherein said open network comprises the Internet.

22. The medium of claim 21 wherein said open network comprises the World Wide Web.

23. The medium of claim 18 wherein said remotely located server is employed by a vendor to advertise on the open network.

24. The medium of claim 23 wherein said transaction comprises a purchase.

25. The medium of claim 24 wherein said transaction authorization number is a credit card number.

26. The medium of claim 18 wherein said first program segment further receives from said remotely located server a telephone number of said transaction server.

27. The medium of claim 18 wherein said second program segment suspends communication between said user and said remotely located server by placing said remotely located server in a hold state.

28. The medium of claim 18 wherein said third program segment initiates communication between said user and said transaction server.

29. The medium of claim 28 wherein said third program segment initiates communication with said transaction server by retrieving a locally stored telephone number of said transaction server from a sixth portion of said medium.

30. The medium of claim 28 wherein said third program segment initiates communication with said transaction server by retrieving a telephone number from a directory located in said communication network.

31. The medium of claim 22 further comprising a sixth portion of said medium having a sixth program segment for browsing on the World Wide Web.