Method of improving security in electronic transactions

• US 8,468,089 B1
• Filed: 09/02/1999
• Issued: 06/18/2013
• Est. Priority Date: 09/21/1998
• Status: Expired due to Fees

• Current Assignee: SINOEAST CONCEPT LIMITED (Tencent Holdings Limited)
• Original Assignee: International Business Machines Corporation
• Inventors: Abad-Peiro, Jose-Luis, Markus, Stolze
• Primary Examiner(s): TINKLER, MURIEL S
• Application Number:
  US09/787,753
• Time in Patent Office: 5,038 Days
• Field of Search: 705/35, 705/39, 705/64, 902/1, 902/2
• US Class Current: 705/39
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]

Abstract

A computerized method (10) is provided which improves data security in electronic transactions in an insecure network (12). This is accomplished when the method (10) operates on a user (18) which has established a commercial relationship with a trusted third party broker (22), and merchants (20a-20d). The method utilizes network links (14, 24) between (a) the trusted third party broker and the user and (b) the trusted third party broker and the merchants. Protocols are selected to operate between each network link, the selection being made, at least in part, on the basis of the computer resources which may be expected to be available in each network link.

Claims

1. A method comprising:

receiving, at a certified trusted third party, one or more requests for product of one

or more merchants from one or more user computing devices utilizing a first network link between the one or more user computing devices and the certified trusted third party, wherein the first network link utilizes a communication protocol, and wherein the one or more requests for product comprise one or more requests for product information and product order information; and

providing a secure payment option to users of the one or more user computing devices, wherein the secure payment option comprises;

transmitting one or more order requests from the certified trusted third party to the one or more merchants utilizing a second network link between the certified trusted third party and the one or more merchants, the one or more order requests from the certified trusted third party to one or more merchants corresponding to the one or more requests for product from the one or more user computing devices; and

processing payment with one the one or more merchants utilizing the second network link utilizing a payment protocol which is more secure than the communication protocol;

wherein the user communicates only with the certified trusted third party on the first network link to complete an entire transaction.

2. The method of claim 1, wherein a server of the certified trusted third party, which is built into a housing including a terminal interface, is configured to process one or more requests from the one or more user computing devices to select and purchase products of one or more merchant companies at one or more remote sites.

3. The method of claim 1, further comprising providing confirmation of payment to the one or more user computing devices.

4. The method of claim 1, wherein the communication protocol is an SSL protocol, and the payment protocol is an SET protocol.

8. The method according to claim 1, wherein the one or more user computing devices comprise one or more of a personal digital assistant, a mobile phone, and a hand-held computer.

9. The method according to claim 1, wherein the certified trusted third party comprises a server configured to implement a SET payment protocol.

10. The method according to claim 1, wherein:

the certified trusted third party displays a unique identifying icon registered with a certification authority; and

the one or more merchants are not trusted or certificated.

5. A method comprising:

presenting a user with an interface on an electronic device from which the user can send on a first network link utilizing a communication protocol one or more requests to a certified trusted third party for information concerning one or more products of one

or more merchants, wherein the information concerning one or more products comprises product information and product order information;

receiving, on the first network link, information corresponding to the one or more requests;

presenting the information to the user via an interactive window; and

providing a secure payment option to the user, wherein the secure payment option comprises;

sending a user payment order to the certified trusted third party in response to user selection of a product offered by a merchant; and

receiving confirmation of payment from the certified trusted third party;

wherein the user communicates only with the certified trusted third party on the first network link to complete an entire transaction.

6. The computerized method of claim 5 wherein the interface includes a browser which is JAVA-enabled, and the interactive window is an applet.

7. The computerized method of claim 5 wherein the communication protocol is an SSL protocol.

11. A computer-readable non-transitory storage medium encoded with a program of instructions configured to control a central processing unit to perform steps, the steps comprising:

receiving, at a certified trusted third party, one or more requests for product of one or more merchants from one or more user computing devices utilizing a first network link between the one or more user computing devices and the certified trusted third party, wherein the first network link utilizes a communication protocol, and wherein the one or more requests for product comprise one or more requests for product information and product order information; and

providing a secure payment option to users of the one or more user computing devices, wherein the secure payment option comprises;

transmitting one or more order requests from the certified trusted third party to the one or more merchants utilizing a second network link between the certified trusted third party and the one or more merchants, the one or more order requests from the certified trusted third party to one or more merchants corresponding to the one or more requests for product from the one or more user computing devices; and

processing payment with one the one or more merchants utilizing the second network link utilizing a payment protocol which is more secure than the communication protocol;

wherein the user communicates only with the certified trusted third party on the first network link to complete an entire transaction.

12. An apparatus comprising:

a server comprising a central processing unit; and

a computer-readable medium encoded with program instructions for controlling the central processing unit to perform steps, the steps comprising;

receiving, at the apparatus, one or more requests for product of one or more merchants from one or more users, wherein the one or more requests for product comprise one or more requests for product information and product order information; and

providing a secure payment option to the one or more users, wherein the secure payment option comprises;

transmitting one or more order requests from the apparatus to the one or more merchants, the one or more order requests from the apparatus to one or more merchants corresponding to the one or more requests for product from the one or more user computing devices; and

processing payment with one the one or more merchants utilizing a payment protocol which is highly secure;

wherein only the apparatus accesses an identity of one or more users.

13. The apparatus of claim 12, wherein the apparatus is a resident local machine with which the one or more users directly and physically interface comprising:

a keyboard; and

a card reader configured to receive and process payments made with a bank or smart card.

14. The apparatus of claim 13, wherein receiving, at the apparatus, one or more requests for product of one or more merchants from one or more users further comprises:

receiving keyboard input.

15. The apparatus of claim 12, wherein processing payment with one the one or more merchants utilizing a payment protocol which is highly secure further comprises utilizing a SET payment protocol.

16. The apparatus of claim 12, wherein the one or more requests for product further comprise one or more requests for insurance services.

17. A computer-readable non-transitory storage medium encoded with steps for securely transacting electronic commerce, said steps comprising:

receiving at a certified trusted third party one or more requests for product information regarding products of one or more merchants, said one or more requests for product information being sent from one or more user computing devices utilizing a first network link, wherein the first network link utilizes a communication protocol;

providing product information including product order information to the one or more user computing devices utilizing the first network link;

receiving one or more product orders from the one or more user computing devices utilizing the first network link;

providing a secure payment option to users of the one or more user computing devices, wherein the secure payment option comprises;

transmitting one or more order requests from the certified trusted third party to the one or more merchants utilizing a second network link between the certified trusted third party and the one or more merchants; and

processing payment with one the one or more merchants utilizing the second network link utilizing a payment protocol which is more secure than the communication protocol;

wherein the user communicates only with the certified trusted third party on the first network link to complete an entire transaction.