Transaction card information access web service

• US 7,342,918 B2
• Filed: 04/15/2003
• Issued: 03/11/2008
• Est. Priority Date: 04/15/2003
• Status: Active Grant

• Current Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Keenan, Sean M., Turko, Bill, Morgan, Bob
• Primary Examiner(s): NGUYEN, BRIAN D
• Application Number:
  US10/414,174
• Publication Number:
  US 20040208164A1
• Time in Patent Office: 1,792 Days
• Field of Search: None
• US Class Current: 370/352
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 67/01 Protocols

Abstract

There is provided a platform neutral method and system for retrieving card information in an extensible markup language (XML) format over the internet via a web service comprising the steps of formulating a simple access object protocol (SOAP) request for the selected information at a consumer application, transmitting the SOAP request to the web service over the internet, receiving the SOAP requests at a provider web service, routing the information request for card information to a provider back-end network, processing the information request and retrieving the selected card information and forwarding to the web service application, formatting the retrieved selected card information in an XML format and formulating a SOAP reply, transmitting the SOAP reply to the consumer over the internet, receiving the SOAP reply at a consumer web server application, reading the XML formatted stored value card information, and routing the XML formatted information to a consumer back-end application or end-point access devices.

Claims

1. A method for retrieving selected transaction card information associated with a transaction card in a standard format over a public interconnected network via a provider web service, comprising the steps of:

formulating a simple object access protocol (SOAP) request for transaction card information;

transmitting said SOAP request to said provider web service over the public interconnected network;

receiving said SOAP request at said provider web service;

reading said SOAP request to determine the transaction card information being requested;

retrieving the transaction card information from a storage location and forwarding the transaction card information to said provider web service;

formatting said transaction card information in an extensible markup language (XML) format and formulating a SOAP reply; and

transmitting said SOAP reply over the public interconnected network to a consumer web server application;

generating and transmitting an out-of-band message to a selected third party application indicating that said SOAP request was sent to said provider web service;

generating and transmitting an out-of-band message to said selected third party application acknowledging that said SOAP request was received at said provider web service;

generating and transmitting an out-of-band message to said selected third party application indicating that said SOAP reply was sent to said consumer web server application; and

generating and transmitting an out-of-band message to said selected third party application acknowledging that said SOAP reply was received at said consumer web server application;

whereby said third party application stores a plurality of received messages confirming that said SOAP request and said SOAP reply were transmitted and received by a consumer and provider network.

2. The method of claim 1, further comprising the steps of:

receiving said SOAP reply at the consumer web server application;

reading said SOAP reply to parse out said XML formatted transaction card information; and

routing said XML formatted transaction card information to one or more consumer back-end applications or end-point access devices.

3. The method of claim 1, further comprising the steps of:

prior to transmitting said SOAP request, encrypting said SOAP request, and providing said SOAP request with a consumer digital signature;

after receiving said SOAP request, verifying that said consumer digital signature on said received encrypted SOAP request corresponds to an authorized consumer and then decrypting said SOAP request;

prior to transmitting said SOAP reply, encrypting said SOAP reply, and providing said SOAP reply with a provider digital signature; and

after receiving said SOAP reply, verifying that said provider digital signature on said received encrypted SOAP reply corresponds to said provider web service, and then decrypting said SOAP reply.

4. The method of claim 1, wherein said transaction card is at least one of a stored value card, a gift card, a credit card, a smart card, a bank card, a charge card and a financial card.

5. The method of claim 1, wherein said transaction card information is card transaction history and balance of said transaction card.

6. A method for retrieving selected transaction card information associated with a transaction card in a standard format over a public interconnected network via a provider web service, comprising the steps of:

formulating a simple object access protocol (SOAP) request for transaction card information at a consumer web server application in a consumer network operating on a first platform;

transmitting said SOAP request to the provider web service over the public interconnected network;

receiving said SOAP request at a provider web service application of the provider web service;

reading said SOAP request to determine the transaction card information being requested;

generating and routing an internal information request based on said received SOAP request to a provider back-end network operating on a second platform;

retrieving said transaction card information from a storage location and forwarding the transaction card information to said provider web service application;

formatting said retrieved transaction card information in an extensible markup language (XML) format and formulating a SOAP reply containing said XML formatted transaction card information;

transmitting said SOAP reply to said consumer web server application over the public interconnected network;

receiving said SOAP reply at said consumer web server application;

reading said SOAP reply to parse out said XML formatted transaction card information;

routing said XML formatted transaction card information to one or more consumer back-end applications or end-point access devices;

generating and transmitting an out-of-band message to a selected third party application indicating that said SOAP request was sent to said provider web service application;

generating and transmitting an out-of-band message to said selected third party application acknowledging that said SOAP request was received at said provider web service application;

generating and transmitting an out-of-band message to said selected third party application indicating that said SOAP reply was sent to said consumer web server application; and

generating and transmitting an out-of-band message to said selected third party application acknowledging that said SOAP reply was received at said consumer web server application;

whereby said third party application stores a plurality of received messages confirming that said SOAP request and said SOAP reply were transmitted and received by a consumer and provider network.

7. The method of claim 6, further comprising:

prior to transmitting said SOAP request to said provider web service, encrypting said SOAP request, and providing said SOAP request with a consumer digital signature;

after receiving said SOAP request at said provider web service application, verifying that said consumer digital signature on said received encrypted SOAP request corresponds to an authorized consumer and then decrypting said SOAP request;

prior to transmitting said SOAP reply to said consumer web server application, encrypting said SOAP reply, and providing said SOAP reply with a provider digital signature; and

after receiving said SOAP reply at said consumer web server application, verifying that said provider digital signature on said received encrypted SOAP reply corresponds to said provider web service, and then decrypting said SOAP reply.

8. The method of claim 6, wherein said transaction card is at least one of a stored value card, a gift card, a credit card, a smart card, a bank card, a charge card and a financial card.

9. The method of claim 6, wherein said selected transaction card information is card transaction history and balance of said transaction card.

10. The method of claim 6, where said first platform and said second platforms are different operating systems.

11. A method for retrieving selected transaction card information associated with a transaction card in a standard format over a public interconnected network via a provider web service, comprising the steps of:

formulating a simple object access protocol (SOAP) request for transaction card information;

transmitting said SOAP request to the provider web service over the public interconnected network;

receiving said SOAP request at the provider web service;

reading said SOAP request to determine the transaction card information being requested;

retrieving the transaction card information from a storage location and forwarding the transaction card information to said provider web service;

formatting said transaction card information in an extensible markup language (XML) format and formulating a SOAP reply; and

transmitting said SOAP reply over the public interconnected network;

receiving said SOAP reply at a consumer web server application;

reading said SOAP reply to parse out said XML formatted transaction card information;

routing said XML formatted transaction card information to one or more consumer back-end applications or end-point access devices;

prior to transmitting said SOAP request, encrypting said SOAP request, and providing said SOAP request with a consumer digital signature;

after receiving said SOAP request, verifying that said consumer digital signature on said received encrypted SOAP request corresponds to an authorized consumer and then decrypting said SOAP request;

prior to transmitting said SOAP reply, encrypting said SOAP reply, and providing said SOAP reply with a provider digital signature;

after receiving said SOAP reply, verifying that said provider digital signature on said received encrypted SOAP reply corresponds to said provider web service, and then decrypting said SOAP reply;

generating and transmitting an out-of-band message to a selected third party application indicating that said SOAP request was sent to said provider web service;

generating and transmitting an out-of-band message to said selected third party application acknowledging that said SOAP request was received at said provider web service;

generating and transmitting an out-of-band message to said selected third party application indicating that said SOAP reply was sent to said consumer web server application;

generating and transmitting an out-of-band message to said selected third party application acknowledging that said SOAP reply was received at said consumer web server application;

whereby said third party application stores a plurality of received messages confirming that said SOAP request and said SOAP reply were transmitted and received by a consumer and provider network.

12. A method for retrieving selected transaction card information associated with a transaction card in a standard format over a public interconnected network via a provider web service, comprising the steps of:

formulating a simple object access protocol (SOAP) request for transaction card information at a consumer web server application in a consumer network operating on a first platform;

transmitting said SOAP request to the provider web service over the public interconnected network;

receiving said SOAP request at a provider web service application of the provider web service;

reading said SOAP request to determine the transaction card information being requested;

generating and routing an internal information request based on said received SOAP request to a provider back-end network operating on a second platform;

retrieving said transaction card information from a storage location and forwarding the transaction card information to said provider web service application;

formatting said retrieved transaction card information in an extensible markup language (XML) format and formulating a SOAP reply containing said XML formatted transaction card information;

transmitting said SOAP reply to said consumer web server application over the public interconnected network;

receiving said SOAP reply at said consumer web server application;

reading said SOAP reply to parse out said XML formatted transaction card information;

routing said XML formatted transaction card information to one or more consumer back-end applications or end-point access devices;

prior to transmitting said SOAP request to said provider web service, encrypting said SOAP request, and providing said SOAP request with a consumer digital signature;

after receiving said SOAP request at said provider web service application, verifying that said consumer digital signature on said received encrypted SOAP request corresponds to an authorized consumer and then decrypting said SOAP request;

prior to transmitting said SOAP reply to said consumer web server application, encrypting said SOAP reply, and providing said SOAP reply with a provider digital signature; and

after receiving said SOAP reply at said consumer web server application, verifying that said provider digital signature on said received encrypted SOAP reply corresponds to said provider web service, and then decrypting said SOAP reply;

generating and transmitting an out-of-band message to a selected third party application indicating that said SOAP request was sent to said provider web service application;

generating and transmitting an out-of-band message to said selected third party application acknowledging that said SOAP request was received at said provider web service application;

generating and transmitting an out-of-band message to said selected third party application indicating that said SOAP reply was sent to said consumer web server application;

generating and transmitting an out-of-band message to said selected third party application acknowledging that said SOAP reply was received at said consumer web server application;

whereby said third party application stores a plurality of received messages confirming that said SOAP request and said SOAP reply were transmitted and received by a consumer and provider network.