System and method for storage and retrieval of information subject to authorization by a data controller

• US 7,617,125 B1
• Filed: 04/27/2000
• Issued: 11/10/2009
• Est. Priority Date: 10/07/1998
• Status: Expired due to Term

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: PayPal, Inc. (PayPal Holdings, Inc.), Paypal International Limited (PayPal Holdings, Inc.)
• Inventors: Ersheid, Ali, Light, Elliott D.
• Primary Examiner(s): ZURITA, JAMES H
• Application Number:
  US09/559,778
• Time in Patent Office: 3,484 Days
• Field of Search: 705/26, 705/27, 705/37
• US Class Current: 705/26.35
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/389 Keeping log of transactions for guaranteeing non-repudiation of a transaction
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: G06Q 40/04 Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange

Abstract

A system and method for storage and retrieval of information subject to authorization by a data controller that allows information for purchasing and other information exchange to occur only for authorized parties. A data subject place information about the data subject into a data repository controlled by a data controller. The data controller authorizes a data recipient to obtain that data subject data when authorized by a data subject. Such transactions as purchases of goods and services and applying for college admission are the types of trans actions contemplated. The data repository places client software on the computer of the data recipient thereby signifying that the data recipient is authorized. Thereafter, the data recipient can receive information about the data subject when the data subject accepts and offer from the data recipient.

Claims

1. A method for allowing a data subject to purchase an item from a data recipient over a computer network, comprising:

receiving, from a data subject network communication device, an offer associated with the item and with the data recipient and a message including a network communication device software identifier, the offer and the message being received at a data repository computer independent of the data recipient, the offer originating from the data subject accessing a Web page of the data recipient;

determining whether the data subject is registered;

determining whether the data recipient is authorized; and

if the data subject is registered and the data recipient is authorized;

retrieving purchasing information associated with the data subject from a database in the data repository computer;

sending a buy decision from the data repository computer to the data subject network communication device, the buy decision presenting a choice between purchasing the item, changing the purchasing information, or declining to purchase the item; and

in response to the buy decision received from the data subject network communication device comprising an election to purchase the item, sending the purchasing information to the data recipient.

2. The method of claim 1, wherein said determining whether the data subject is registered includes determining whether the network communication device software identifier matches an entry in the database.

3. The method of claim 1, wherein the offer includes a data recipient identifier, an item price, a data recipient digital signature to ensure validity of the offer, a final price indicator and a transaction number.

4. The method of claim 3, wherein the purchasing information associated with the data subject includes credit card information and shipping information, the shipping information including a shipping address and a shipping method.

5. The method of claim 4, further comprising:

determining whether the credit card information is accepted by the data recipient.

6. The method of claim 4, further comprising:

obtaining a new price from the data recipient based on the shipping address and the shipping method; and

setting the item price equal to the new price.

7. The method of claim 1, further comprising:

prompting the data subject for a passphrase; and

authenticating the data subject based on a passphrase stored within the database.

8. The method of claim 1, further comprising:

storing the transaction information in an authorized data recipient transaction log.

9. The method of claim 1, further comprising:

storing the transaction information in a data subject transaction log.

10. The method of claim 1, further comprising:

sending a transaction confirmation message to the data subject.

11. A computer readable medium including instructions adapted to be executed by a processor to allow a data subject to purchase an item from a data recipient over a computer network, the instructions including instructions to:

receive, from a data subject network communication device, an offer associated with the item and with the data recipient and a message including a network communication device software identifier, the offer and the message being received at a data repository computer independent of the data recipient, the offer originating from the data subject accessing a Web page of the data recipient;

determine whether the data subject is registered;

determine whether the data recipient is authorized; and

if the data subject is registered and the data recipient is authorized;

retrieve purchasing information associated with the data subject from a database in the data repository computer;

send a buy decision from the data repository computer to the data subject network communication device, the buy decision presenting a choice between purchasing the item, changing the purchasing information, or declining to purchase the item; and

in response to the buy decision received from the data subject network communication device comprising an election to purchase the item, send the purchasing information to the data recipient.

12. The computer readable medium of claim 11, wherein said instructions to determine whether the data subject is registered includes instructions to determine whether the network communication device software identifier matches an entry in the database.

13. The computer readable medium of claim 11, wherein the offer includes a data recipient identifier, an item price, a data recipient digital signature to ensure validity of the offer, a final price indicator and a transaction number.

14. The computer readable medium of claim 13, wherein the purchasing information associated with the data subject includes credit card information and shipping information, the shipping information including a shipping address and a shipping method.

15. The computer readable medium of claim 14, wherein the instruction further include instructions to:

determine whether the credit card information is accepted by the data recipient.

16. The computer readable medium of claim 14, wherein the instruction further include instructions to:

obtain a new price from the data recipient based on the shipping address and the shipping method; and

set the item price equal to the new price.

17. The computer readable medium of claim 11, wherein the instruction further include instructions to:

prompt the data subject for a passphrase; and

authenticate the data subject based on a passphrase stored within the database.

18. The computer readable medium of claim 11, wherein the instruction further include instructions to:

store the transaction information in an authorized data recipient transaction log.

19. The computer readable medium of claim 11, wherein the instruction further include instructions to:

store the transaction information in a data subject transaction log.

20. The computer readable medium of claim 11, wherein the instruction further include instructions to:

send a transaction confirmation message to the data subject.

21. A system for purchasing an item over a computer network, comprising:

a data subject network communications device, coupled to the network, including network communications device software;

a data recipient computer, coupled to the network, including web server software and client software; and

a server, including a processor, said server coupled to the network and independent of the data recipient computer, including a database and data repository software executed by the processor to;

receive, from the data subject network communications device, an offer associated with the item and with the data recipient computer and a message including a data subject network communication device software identifier, the offer originating from the data subject accessing a Web page of the data recipient,

determine whether the data subject network communications device software is registered,

determine whether the data recipient computer is authorized, and

if the data subject network communication device software is registered and the data recipient computer is authorized;

retrieve purchasing information associated with the data subject network communication device software from the database,

send a buy decision to the data subject network communications device, the buy decision presenting a choice between purchasing the item, changing the purchasing information, or declining to purchase the item, and

in response to the buy decision received from the data subject network communications device comprising an election to purchase the item, send the purchasing information to the data recipient computer.

22. The system of claim 21, wherein to determine whether the data subject network communications device software is registered includes to determine whether the network communication device software identifier matches an entry in the database.

23. The system of claim 21, wherein the offer includes a data recipient identifier, an item price, a data recipient digital signature to ensure validity of the offer, a final price indicator and a transaction number.

24. The system of claim 23, wherein the purchasing information associated with the data subject network communications device software includes credit card information and shipping information, the shipping information including a shipping address and a shipping method.

25. The system of claim 24, wherein the data repository software is further adapted to:

determine whether the credit card information is accepted by the data recipient computer.

26. The system of claim 24, wherein the data repository software is further adapted to:

obtain a new price from the data recipient computer based on the shipping address and the shipping method; and

set the item price equal to the new price.

27. The system of claim 21, wherein the data repository software is further adapted to:

prompt the data subject network communications device for a passphrase; and

authenticate the data subject network communications device based on a passphrase stored within the database.

28. The system of claim 21, wherein the data repository software is further adapted to:

store the transaction information in an authorized data recipient transaction log.

29. The system of claim 21, wherein the data repository software is further adapted to:

store the transaction information in a data subject transaction log.

30. The system of claim 21, wherein the data repository software is further adapted to:

send a transaction confirmation message to the data subject network communications device.

31. A method for performing a purchase transaction over a computer network, comprising:

receiving an offer from a purchaser, the offer including a network communication device identifier to identify a network communication device used by the purchaser to access a merchant web page; and

if the network communication device is registered with a purchaser data repository independent of the merchant and the merchant is authorized to access purchasing information associated with the purchaser;

retrieving the purchasing information associated with the purchaser from the purchaser data repository;

sending a buy decision to the network communication device, the buy decision presenting a choice between purchasing an item, changing the purchasing information, and declining to purchase the item; and

in response to the buy decision received from the network communication device comprising an election to purchase the item, sending the purchasing information to the merchant.