Method of and system for authorizing purchases made over a computer network

• US 7,318,048 B1
• Filed: 09/07/2000
• Issued: 01/08/2008
• Est. Priority Date: 09/07/1999
• Status: Expired due to Term

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Rysix Holdings LLC
• Inventors: King, Douglas W.
• Primary Examiner(s): NGUYEN, NGA B
• Application Number:
  US09/657,285
• Time in Patent Office: 2,679 Days
• Field of Search: 705/16, 705/17, 705/18, 705/26, 705/27, 705/41, 705/42, 705/43, 705/64, 705/65, 705/72, 705/75, 705/66, 705/37, 705/38, 705/39, 705/40
• US Class Current: 705/39
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 30/00 Commerce
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 30/0603 Catalogue ordering
• CPC Class Codes: G06Q 30/0613 Third-party assisted
• CPC Class Codes: G06Q 30/08 Auctions
• CPC Class Codes: G06Q 40/03 Credit; Loans; Processing thereof
• CPC Class Codes: G06Q 40/04 Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange

Abstract

A method of and system for authorizing purchases made over a computer network is provided. In accordance with the present invention, a consumer electronically transmits an ATM card number over the network to an on-line merchant from which the consumer desires to make a purchase. The on-line merchant then electronically forwards the ATM card number to a third party contractor, such as a bank, that will oversee and authorize the transaction. The third party contractor subsequently determines an authentication token type associated with the card and electronically prompts the consumer for the appropriate type of authentication token, such as a PIN or biometric signature or the like. The consumer then inputs and electronically transmits the authentication token over the network to the third party contractor, bypassing the on-line merchant. Having both the ATM card number and the authentication token, the third party contractor verifies that the ATM card number and authentication token are valid, checks for sufficiency of funds, and either authorizes or denies the transaction. The authorization or denial is communicated to the on-line merchant over the network, who either completes or rejects the purchase.

Claims

1. A method of authorizing purchase transactions over a computer network using an account number that identifies a consumer'"'"'s account from which funds will be withdrawn to pay a purchase price and an authorization token associated with said account number which, when used with said account number, enables withdrawal of funds from said account, said method comprising:

transmitting said account number electronically over said network from a consumer location to an on-line merchant location;

forwarding said account number electronically over said network from said on-line merchant location to a third party contractor location;

initiating a verification connection between said consumer location and said third party contractor location, said verification connection including a verification web browser window provided from said on-line merchant location to said consumer location to initiate said verification connection between said consumer location and said third party contractor location, said verification connection being independent of, and bypassing said on-line merchant location;

determining at said third party contractor location an authentication token type associated with said account number;

prompting a consumer at said consumer location to electronically transmit an authentication token in accordance with said determined authentication token type over said connection to said third party contractor location;

transmitting said authentication token electronically over said connection; and

determining at said third party contractor location whether said account number and said authentication token are valid and, if so, then authorizing the purchase transaction to proceed.

2. The method according to claim 1 wherein said account number is transmitted over said network via encrypted connection and wherein said authentication token is transmitted over said connection via encrypted connection.

3. The method according to claim 1 wherein said network is the Internet and wherein said number is electronically transmitted from said on-line merchant location to said third party contractor location over the Internet.

4. The method according to claim 1 wherein said number is electronically transmitted from said on-line merchant location to said third party contractor location over a private computer network.

5. The method according to claim 1 including the additional step of determining at said third party contractor location whether said account has sufficient funds to cover said purchase price.

6. The method according to claim 1 including the additional step of electronically transmitting a message from said third party contractor location to said on-line merchant location indicating whether said account number and said authentication token are valid.

7. The method according to claim 5 including electronically transmitting a message from said third party contractor location to said on-line merchant location indicating whether there are sufficient funds in said account to cover said purchase price.

8. The system according to claim 1 wherein said authentication token type is at least one of a personal identification number, a biometric signature, an authorization code stored on a smart card, or a password.

9. The method according to claim 1 wherein said number is electronically transmitted from said on-line merchant location to said third party contractor location over a direct connection between the on-line merchant location and the third party contractor location.

10. The method according to claim 1 including the additional step of electronically transmitting a message over said network from said on-line merchant location to said consumer location whether said purchase has been authorized.

11. A method of authorizing a purchase to be made over a computer network using an account number that identifies a consumer'"'"'s account from which funds will be withdrawn to pay a purchase price and an authentication token associated with said account number which, when used with said account number, enables withdrawal of funds from said account, said method comprising:

receiving said account number electronically transmitted from an on-line merchant location;

determining an authentication token type associated with said number;

establishing a verification connection between a consumer location and a third party contractor location, said verification connection including a verification web browser window provided from said on-line merchant location to said consumer location to initiate said verification connection between said consumer location and said third party contractor location, said verification connection being independent of, and bypassing said on-line merchant location;

prompting said consumer location to electronically transmit over said connection an authentication token in accordance with said authentication token type;

receiving said authentication token electronically transmitted over said connection; and

verifying the validity of said number and said authentication token at said third party contractor location.

12. The method according to claim 11 wherein said network is the Internet and wherein said number is electronically transmitted from said on-line merchant location to said third party contractor location over the Internet.

13. The method according to claim 11 wherein said number is electronically transmitted from said on-line merchant location to said third party contractor location over a direct connection between the on-line merchant location and the third party contractor location.

14. The method according to claim 11 including determining at said third party contractor location whether said account has sufficient funds to cover said purchase price.

15. The method according to claim 11 wherein said computer is further configured to notify said on-line merchant'"'"'s computer whether said account number and authorization token are valid.

16. The method according to claim 14 including the additional step of electronically transmitting a message from said third party contractor location to said on-line merchant location indicating whether there are sufficient funds in said account to cover said purchase price.

17. The method according to claim 11 wherein said authentication token type is at least one of a personal identification number, a biometric signature, an authorization code stored on a smart card, or a password.

18. The method according to claim 11 wherein said account number is electronically transmitted from said on-line merchant location to said third party contractor location over a private computer network.

19. A system for authorizing a purchase to be made over a computer network using an account number that identifies a consumer'"'"'s account from which funds will be withdrawn to pay a purchase price and an authorization token associated with said account number which, when used with said number, enables withdrawal of funds from said account, said system comprising:

a computer connected to said network;

said computer being configured to receive said account number transmitted from an on-line merchant'"'"'s computer, said computer being further configured to initiate a verification connection between a consumer'"'"'s computer and a third party contractor computer, said verification connection including a verification web browser window provided from said on-line merchant'"'"'s computer to said consumer'"'"'s computer to initiate said verification connection between said consumer'"'"'s computer and said third party contractor'"'"'s computer, said verification connection being independent of, and bypassing said on-line merchant'"'"'s computer, said computer being further configured to determine an authentication token type associated with said account number, prompt said consumer'"'"'s computer to transmit over said connection an authentication token to said computer in accordance with said authentication token type, receive said authentication token transmitted over said network connection from said consumer'"'"'s computer, and verify the validity of said number and said authentication token.

20. The system according to claim 19 wherein said network is the Internet and wherein said account number is transmitted from said on-line merchant'"'"'s computer to said computer over the Internet.

21. The system according to claim 19 wherein said account number is transmitted from said online merchant'"'"'s computer to said computer over a private computer network.

22. The system according to claim 19 wherein said account number is electronically transmitted from said on-line merchant'"'"'s computer to said computer over a direct connection between the on-line merchant computer and said computer.

23. The system according to claim 19 wherein said computer is further configured to determine whether said account has sufficient funds to cover said purchase price.

24. The system according to claim 19 wherein said computer is further configured to notify said on-line merchant'"'"'s computer whether said account number and authentication token are valid.

25. The system according to claim 23 wherein said computer is further configured to notify said on-line merchant'"'"'s computer whether there are sufficient funds in said account to cover said purchase price.

26. The system according to claim 19 wherein said authentication token type is at least one of a personal identification number, a biometric signature, an authorization code stored on smart card, or a password.

27. A system for authorizing a purchase to be made over a computer network using an account number that identifies a consumer'"'"'s account from which funds will be withdrawn to pay a purchase price and an authentication token associated with said number which, when used with said account number, enables withdrawal of funds from said account, said system comprising:

a first computer at a consumer location, said first computer being connected to said network;

a second computer at an on-line merchant location, said second computer being connected to said network; and

a third computer at a third party contractor location, said third computer being connected to said network;

said first computer being configured to (1) transmit said account number over said network to said second computer and (2) transmit said authentication token over said network to said third computer;

said second computer being configured to forward said number received from said first computer to said third computer, said second computer being further configured to initiate a verification connection between said first computer and said third computer, said connection including a verification web browser window provided from said second computer to said first computer to initiate said verification connection between said first computer and said third computer, said verification connection being independent of, and bypassing said second computer; and

said third computer being configured to (1) determine an authentication token type associated with said account number;

(2) prompt said first computer to transmit an authentication token in accordance with said determined authentication token type over said network, and (3) determine whether said number and said authentication token are valid.

28. The system according to claim 27 wherein said first computer bypasses said second computer when transmitting said authentication token to said third computer.

29. The system according to claim 27 wherein said account number and said authentication token are transmitted via encrypted connections.

30. The system according to claim 27 wherein said account number is transmitted from said second computer to said third computer over a private computer network.

31. The system according to claim 27 wherein said account number is transmitted from said second computer to said third computer over a direct connection between the second computer and the third computer.

32. The system according to claim 27 wherein said third computer is further configured to determine whether said account has sufficient funds to cover said purchase price.

33. The system according to claim 32 wherein said third computer is further configured to notify said second computer whether there are sufficient funds in said account to cover said purchase price.

34. The system according to claim 27 wherein said second computer is further configured to notify said first computer whether said purchase is authorized.

35. The system according to claim 27 wherein said network is the Internet and wherein said account number is transmitted from said second computer to said third computer over the Internet.

36. The system according to claim 27 wherein said third computer is further configured to notify said second computer whether said account number and said authentication token are valid.

37. The system according to claim 27 wherein said authentication token type is at least one of a personal identification number, a biometric signature, an authorization code stored on a smart card, or a password.