Secure transaction processing system and method

• US 7,127,427 B1
• Filed: 03/08/2000
• Issued: 10/24/2006
• Est. Priority Date: 10/05/1999
• Status: Expired due to Term

• Current Assignee: Andrew Casper
• Original Assignee: Andrew Casper
• Inventors: Casper, Andrew
• Primary Examiner(s): Poinvil, Frantzy
• Application Number:
  US09/521,636
• Time in Patent Office: 2,421 Days
• Field of Search: 705/57, 705/63, 705/64, 705/65, 705 35- 41, 705/44, 705/53, 235/379, 235/380
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 20/403 Solvency checks
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes

Abstract

A processing system and method for processing purchase orders between a purchaser and a merchant across a public network. The processing system comprising a purchaser account database for storing purchaser account information for each purchaser and including at least a purchaser identifier and delivery data associated with the purchaser identifier, a disabler for monitoring the status of the purchaser account database and disabling the account database in response to a monitored change in the purchaser account information, and a processor for receiving the purchase orders and processing the orders.

Claims

1. A processing system for processing a secure purchase order between a purchaser and a merchant across a public network, the processing system comprising:

a purchaser account database including purchaser account information for each purchaser, the purchaser account information including at least a purchaser identifier that is any alpha-numeric code generated by the processing system during account setup and being inextricably linked to delivery data of said purchaser such that any change or attempted change to the delivery data will render the purchaser identifier inoperable for identifying a particular purchaser, payment data for effecting payment for purchased goods or services wherein the payment data is different from the purchaser identifier, and said delivery data associated with said purchaser identifier, said delivery data including at least one delivery address of said purchaser for fulfillment of the purchase order

a processor capable of communication with the purchaser account database via a private network and further capable of communication via a public network with a merchant system for receiving the purchase order, said purchase order including at least a monetary amount for a good and said purchaser identifier and not including the payment data which is not transmitted to the merchant;

wherein, in response to receipt of the purchase order including the purchaser identifier, the processor retrieves the payment data and the delivery data from the purchaser account database on the private network corresponding to the purchaser identifier, transmits the delivery data to the merchant to fulfill the purchase order, and uses the payment data to pay for the purchased goods or services without exposing the payment data to the merchant; and

wherein the merchant delivers the purchased goods or services to the purchaser using the delivery data.

2. The processing system of claim 1, wherein said delivery address is a physical address.

3. The processing system of claim 1, wherein said delivery address is an electronic address.

4. The processing system of claim 3, wherein said electronic address is an e-mail address.

5. The processing system of claim 1, wherein only one delivery address for a particular type of address is associated with the purchaser identifier.

6. The processing system of claim 1, wherein a disabler disables said purchaser identifier for a particular purchaser when either the purchaser identifier or the delivery data is altered.

7. The processing system of claim 1, further comprising a securitizer disposed between a secure network and the public network;

and

the secure network including the purchaser account database and the processor, and said securitizer preventing unauthorized access to said secure network.

8. The processing system of claim 7, wherein a disabler is operatively connected to said securitizer and said purchaser account information, said securitizer monitoring said processing system and determining if any alterations to said delivery data are being attempted and outputting a trigger to the disabler if said alterations are attempted, and the disabler disabling the particular purchase account information in response to the trigger.

9. The system of claim 8, wherein the disabler invalidates the purchaser identifier in response to the trigger.

10. The processing system of claim 1, wherein the public network is a mail and the merchant is a catalog company.

11. The processing system of claim 1, wherein the merchant is a utility company.

12. A transaction processing service system for facilitating the processing of a secure purchase order between a purchaser and a merchant across a public network, the processing service system comprising:

a processing system, including;

a purchaser account database including purchaser account information for each purchaser, the purchaser account information including at least a purchaser identifier for identifying a particular purchaser and being generated by the processing system during account setup so as to be inextricably linked to a delivery address for use by the merchant to deliver a purchased good to the purchaser, and payment data for effectuating payment of the purchase order, and wherein the purchaser identifier is different than the payment data and cannot be used to make purchases except in connection with the transaction processing service system;

the processing system being programmed to detect a change or attempted change in the delivery address linked to the purchaser identifier and, in response, render the purchaser identifier inoperable

wherein, in order to make a purchase, the purchaser accesses a merchant'"'"'s electronic store system and selects one or more goods for purchase and transmits the purchaser identifier to the merchant, the merchant'"'"'s electronic store system submits a purchase order and the purchaser identifier to the processing system, and, in response to receipt of the purchase order including the purchaser identifier, the processing system retrieves the payment data and a delivery data from the purchaser account database on the a network corresponding to the purchaser identifier, transmits the delivery data to the merchant, and uses the payment data to pay for the purchased goods or services, and the merchant delivers the purchased goods or services to the purchaser using the delivery data; and

wherein the payment data is not transmitted by the purchaser to the merchant and the processing system pays for the purchased goods without exposing the payment data to the merchant.

13. The transaction processing service system of claim 12, wherein said service system is operated by a credit card company.

14. The transaction processing service system of claim 12, wherein said service system is operated by a financial institution.

15. A method of facilitating secure transactions between a purchaser and a merchant across a public network wherein, in order to make a purchase, the purchaser accesses a merchant electronic store system and selects one or more goods for purchase and transmits a purchaser identifier to the merchant electronic store system, and the merchant electronic store system generates a purchase order including the purchaser identifier, comprising the steps of:

storing purchaser account information which includes at least payment data for paying for purchased goods and delivery data for delivery of the purchased goods to the purchaser;

generating the purchaser identifier so that the purchaser identifier is inextricably linked to the stored delivery data, and wherein the purchaser identifier is any alpha-numeric code that is different from the payment data;

rendering the purchaser identifier inoperable in response to any change or attempted change in the stored delivery data;

receiving the purchase order including the purchaser identifier from the merchant electronic store system;

retrieving the delivery data and payment data associated with the received purchaser identifier;

effectuating payment for the purchased product using the payment data without exposing the payment data to the merchant; and

communicating only the delivery data for the purchaser identified by the purchaser identifier to the merchant.

16. The method of claim 15, wherein the method further comprises prior to the step of effectuating payment,

determining whether the identified purchaser can pay for the purchased product;

and

if said purchaser is not capable of paying, canceling the purchase order.

17. The method of claim 15, further comprising the step of invalidating the purchaser identifier if said delivery data is altered.

18. A method of facilitating secure transactions between purchasers and merchants across a public network, comprising the steps of:

at a purchaser system having access to a merchant store system;

selecting a product offered for sale by the merchant, the product being associated with a product identifier;

transmitting a purchaser identifier from the purchaser system to the merchant store system;

at the merchant store system;

receiving the purchaser identifier;

generating a purchase order for the selected product that includes the purchaser identifier; and

communicating the purchase order to a processing system; and

at the processing system;

processing the purchase order to retrieve delivery data and payment data associated with the purchaser identifier;

wherein the purchaser identifier is any alpha-numeric code that is different from the payment data, and the purchaser identifier is inextricably linked to the delivery data such that if the delivery data is changed or attempted to be changed the purchaser identifier will be rendered unusable;

effectuating payment for the selected product without exposing the payment data to the merchant; and

communicating the delivery data corresponding to the purchaser identifier to the merchant.

19. The method of claim 18, wherein said purchaser is not given an opportunity to change said delivery data.

20. A purchasing system for facilitating secure electronic transactions between a consumer and a merchant, wherein a secure consumer account is stored on the purchasing system and the account includes consumer payment information and at least one delivery address for delivering purchased items;

the purchasing system comprising;

a communication connection to a merchant system via a network;

a server system operative with programming to;

receive a request for payment from the merchant system in response to an order placed by the consumer with the merchant to purchase items, wherein the request for payment includes a unique consumer identifier unrelated to the consumer payment information which is associated with the secure consumer account;

retrieve the consumer payment information from the consumer account associated with the unique consumer identifier and effectuate payment for the order to the merchant;

retrieve the delivery address from the consumer account associated with the unique consumer identifier and transmit the delivery address to the merchant computer for delivery of the purchased item; and

wherein once the secure consumer account is established by the consumer and the unique consumer identifier is assigned to the consumer account, the at least one delivery address associated with the unique consumer identifier cannot be changed without causing the unique consumer identifier to be disabled.

21. The system of claim 20, wherein if the delivery address is changed and the unique consumer identifier is disabled, the consumer must be issued a new unique consumer identifier prior to making a purchase using the secure consumer account stored on the purchasing system.

22. The system of claim 20, wherein only a single delivery address is stored in the secure consumer account, such that purchased items can only be delivered to the single delivery address.

23. A purchasing system for processing a secure purchase order between a purchaser and a merchant across a public network, the purchasing system comprising:

a processing system residing on a private network and in communication with a purchaser computer and a merchant computer via the public network;

a purchaser account database in communication with the processing system via the public network private network;

the processing system programmed to;

receive from the purchaser computer purchaser account information including at least delivery data including at least one delivery address for the purchaser and payment data for effecting payment of purchased goods or services;

store the purchaser account information on the purchaser account database;

generate a purchaser identifier that is an alpha-numeric code having no monetary value and that is unrelated to any personally identifiable information of the purchaser; and

link the purchaser identifier to the delivery data such that any change or attempted change to the delivery data will render the purchaser identifier inoperable; and

in order to process a purchase order from the purchaser, the processing system further programmed to;

receive the purchase order, including order information and the purchaser identifier;

verify the purchaser identifier and retrieve the payment data and the delivery data corresponding to the purchaser identifier from the purchaser account database;

arrange for payment to be made to the merchant for the purchased goods or services without exposing the payment data to the merchant; and

transmit only the delivery data and a payment authorization to the merchant to fulfill the purchase order, whereby the purchaser need not enter or transmit the payment data at any time to make a purchase.