Method and apparatus for authorizing transactions using transaction phrases in a transaction authorization service

• US 8,239,326 B1
• Filed: 09/19/2007
• Issued: 08/07/2012
• Est. Priority Date: 09/19/2007
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Yuen, Philip, Huang, Chih-Jen, Gupta, Diwakar, Yuen, Gerald, George, Michael M.
• Primary Examiner(s): Rosen, Elizabeth
• Application Number:
  US11/858,006
• Time in Patent Office: 1,784 Days
• Field of Search: 705/35, 705/40, 705/44
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation

Abstract

A transaction processing and authorization service. If a source entity does not respond to an authorization attempt via a communications channel, the service may generate a transaction phrase corresponding to the transaction and communicate the transaction phrase to the source entity. The transaction phrase may also be stored by the service and associated with the source entity'"'"'s account and the particular transaction as initiated, and may be used to identify the transaction. After receiving the transaction phrase, the source entity may then, if desired, return the transaction phrase to the service. Upon receiving the transaction phrase from the source entity, the service may then contact the source entity via the communications channel to authorize the transaction. As an alternative, a source entity may submit a replay command to the service to replay any pending transactions.

Claims

1. A system, comprising:

a processor; and

a memory comprising program instructions, wherein the program instructions are executable by the processor to implement a transaction authorization service configured to;

receive a message indicating initiation of a transaction between a source entity and a target entity, wherein the message is received via a first communications channel;

send an authorization request message indicating a request for authorization of the transaction to a communications device of the source entity via a second communications channel, wherein the authorization request message is not sent to the target entity;

determine that the authorization request message was not responded to by the source entity;

in response to said determining that the authorization request message was not responded to by the source entity, generate a transaction phrase for the transaction, wherein the transaction phrase uniquely identifies the transaction to the transaction authorization service;

send a message indicating the transaction phrase to the source entity;

receive a message from the source entity, wherein the message from the source entity includes the transaction phrase to identify the transaction; and

in response to said receiving the message including the transaction phrase from the source entity, resend the authorization request message indicating the request for authorization of the same transaction to the communications device of the source entity via the same second communications channel.

2. The system as recited in claim 1, wherein the transaction authorization service is configured to send the message indicating the transaction phrase to the source entity via the first communications channel.

3. The system as recited in claim 1, wherein the transaction authorization service is configured to receive the message including the transaction phrase from the source entity via the first communications channel.

4. The system as recited in claim 1, wherein the transaction authorization service is configured to receive a response message indicating a response to the request for authorization from the source entity, wherein the response message includes information authorizing the transaction, and wherein the response message is received via the second communications channel.

5. The system as recited in claim 4, wherein the transaction authorization service is configured to complete the transaction between the source entity and the target entity, wherein, to complete the transaction between the source entity and the target entity, the transaction authorization service is configured to transfer funds from an account of the source entity to an account of the target entity.

6. The system as recited in claim 4, wherein the information authorizing the transaction is an identifier associated with the source entity.

7. The system as recited in claim 1, wherein the first communications channel and the second communications channel are the same communications channel.

8. The system as recited in claim 1, wherein the first communications channel and the second communications channel are different communications channels.

9. The system as recited in claim 1, wherein the message indicating the initiation of a transaction between a source entity and a target entity is received from the source entity.

10. The system as recited in claim 1, wherein the message indicating the initiation of a transaction between a source entity and a target entity is received from the target entity.

11. The system as recited in claim 1, wherein the message indicating the initiation of the transaction between the source entity and the target entity includes information identifying the target entity and a monetary amount to be transferred from the source entity to the target entity.

12. The system as recited in claim 1, wherein the message indicating the initiation of the transaction between the source entity and the target entity includes information identifying the source entity and a monetary amount to be transferred from the source entity to the target entity.

13. The system as recited in claim 1, wherein the first communications channel is a text messaging channel.

14. A computer-implemented method, comprising:

receiving, by one or more computers implementing a transaction authorization service, a message indicating initiation of a transaction between a source entity and a target entity, wherein the message is received via a first communications channel;

sending, by the one or more computers, an authorization request message indicating a request for authorization of the transaction from the transaction authorization service to a communications device of the source entity via a second communications channel, wherein the authorization request message is not sent to the target entity;

determining, by the one or more computers, that the authorization request message was not responded to by the source entity;

in response to said determining that the authorization request message was not responded to by the source entity, generating, by the one or more computers, a transaction phrase for the transaction, wherein the transaction phrase uniquely identifies the transaction to the transaction authorization service;

sending, by the one or more computers, a message indicating the transaction phrase to the source entity;

receiving, by the one or more computers, a message from the source entity, wherein the message from the source entity includes the transaction phrase to identify the transaction; and

in response to said receiving the message including the transaction phrase from the source entity, resending, by the one or more computers, the authorization request message indicating the request for authorization of the same transaction from the transaction authorization service to the communications device of the source entity via the same second communications channel.

15. The method as recited in claim 14, further comprising:

receiving, at the transaction authorization service, a response message indicating a response to the request for authorization from the source entity, wherein the response message includes information authorizing the transaction, and wherein the response message is received via the second communications channel; and

completing the transaction between the source entity and the target entity, wherein said completing the transaction between the source entity and the target entity comprises transferring funds from an account of the source entity to an account of the target entity.

16. The method as recited in claim 14, wherein the message indicating the initiation of a transaction between a source entity and a target entity is received from one of the source entity and the target entity.

17. The method as recited in claim 14, wherein the first communications channel is a text messaging channel.

18. A computer-accessible storage medium comprising program instructions, wherein the program instructions are computer-executable to implement a transaction authorization service configured to:

receive a message indicating initiation of a transaction between a source entity and a target entity, wherein the message is received via a first communications channel;

send an authorization request message indicating a request for authorization of the transaction to a communications device of the source entity via a second communications channel, wherein the authorization request message is not sent to the target entity;

determine that the authorization request message was not responded to by the source entity;

in response to said determining that the authorization request message was not responded to by the source entity, generate a transaction phrase for the transaction, wherein the transaction phrase uniquely identifies the transaction to the transaction authorization service;

send a message indicating the transaction phrase to the source entity;

receive a message from the source entity, wherein the message from the source entity includes the transaction phrase to identify the transaction; and

in response to said receiving the message including the transaction phrase from the source entity, resend the authorization request message indicating the request for authorization of the transaction to the communications device of the source entity via the same second communications channel.

19. The computer-accessible storage medium as recited in claim 18, wherein the transaction authorization service is configured to:

receive a response message indicating a response to the request for authorization from the source entity, wherein the response message includes information authorizing the transaction, and wherein the response message is received via the second communications channel; and

complete the transaction between the source entity and the target entity, wherein, to complete the transaction between the source entity and the target entity, the transaction authorization service is configured to transfer funds from an account of the source entity to an account of the target entity.

20. The computer-accessible storage medium as recited in claim 18, wherein the first communications channel and the second communications channel are different communications channels.

21. The computer-accessible storage medium as recited in claim 18, wherein the first communications channel is a text messaging channel.

22. A computer-implemented method, comprising:

receiving, by one or more computers implementing a transaction authorization service, a message from a source entity, wherein the message requests replay of authorization requests for pending transactions associated with the source entity, wherein each pending transaction is between the source entity and a target entity;

wherein each pending transaction involved sending an authorization request message indicating a request for authorization of the transaction from the transaction authorization service to a communications device of the source entity, wherein the authorization request message was not sent to the target entity;

in response to the message requesting replay of authorization requests for pending transactions associated with the source entity, determining, by the one or more computers, that there are two or more different pending transactions associated with the source entity;

for each of the two or more pending transactions;

resending, by the one or more computers, the authorization request message indicating the request for authorization of the transaction from the transaction authorization service to the communications device of the source entity, wherein the authorization request message is not sent to the target entity; and

receiving, by the one or more computers, a response message indicating a response to the request for authorization from the source entity, wherein the response message includes information authorizing the transaction.

23. The method as recited in claim 22, further comprising, for each of the two or more pending transactions, completing the transaction between the source entity and the target entity indicated by the transaction, wherein said completing the transaction between the source entity and the target entity comprises transferring funds from an account of the source entity to an account of the target entity.

24. The method as recited in claim 22, wherein the message requesting replay of authorization requests for pending transactions associated with the source entity is received via a first communications channel, and wherein said sending an authorization request message and said receiving a response message are performed via a second communications channel.