Secure intermediation system and method

• US 9,172,679 B1
• Filed: 04/14/2004
• Issued: 10/27/2015
• Est. Priority Date: 04/14/2004
• Status: Active Grant

• Current Assignee: Sprint Spectrum LLC (Deutsche Telekom AG)
• Original Assignee: Sprint Spectrum LP (Deutsche Telekom AG)
• Inventors: Geddes, Martin
• Primary Examiner(s): MOORTHY, ARAVIND K
• Application Number:
  US10/824,113
• Time in Patent Office: 4,213 Days
• Field of Search: 726/31, 726/12, 713/153, 705/52, 705/75
• US Class Current: 1/1
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/0464 using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 63/067 using one-time keys cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/166 at the transport layer

Abstract

In an intermediation system, an intermediary is positioned along a communications path between a client and a server. The client sends a payment message over the communications path to consummate a payment. The intermediary receives the payment message and detects whether the message includes an account number, such as a credit card number. The intermediary replaces the account number with a limited-use payment number, such as a one-time-use credit card number. The intermediary may request the limited-use payment number from a credit card issuer. The intermediary may send a verification message to the client to verify that the client approves of the replacement of the account number with a limited-use payment number.

Claims

1. A payment number intermediation method performed by an intermediary positioned along a communication path between a client and a server, comprising:

receiving a payment message from the client;

detecting an account number in the payment message after receiving the payment message;

after detecting the account number, sending a request for a limited-use payment number associated with an account identified by the account number, wherein the request identifies at least one payment limitation selected from the group consisting of i) an identity of a payee, ii) a payment amount, and iii) a time limitation;

receiving a limited-use payment number, wherein use of the limited-use payment number is subject at least to the identified payment limitation;

replacing the account number with a limited-use payment number to create a modified message; and

sending the modified message along the communication path to the server.

2. The method of claim 1, wherein detecting the account number includes identifying a user who sent the payment message and comparing an account number in the payment message with one or more stored account numbers associated with the user.

3. The method of claim 1, wherein the account number is a credit card number.

4. The method of claim 1, wherein the limited-use payment number is a one-time use credit card number.

5. The method of claim 1, wherein the limited-use payment number is a one-time use credit card number, wherein the sending of the request comprises requesting the one-time use credit card number from an account service provider.

6. The method of claim 1, wherein receiving the payment message comprises receiving a payment message addressed to the server.

7. The method of claim 1, wherein receiving the payment message comprises receiving a payment message from the client over a secure socket layer session.

8. The method of claim 1, wherein sending the modified message comprises sending the modified message to the server over a secure socket layer session.

9. The method of claim 1, wherein receiving the payment message comprises receiving the payment message from the client over a first secure socket layer session, and wherein sending the modified message comprises sending the modified message to the server over a second secure socket layer session.

10. The method of claim 1, wherein the payment limitation is the identity of the payee.

11. The method of claim 1, wherein the payment limitation is the payment amount.

12. The method of claim 1, wherein the payment limitation is a time limitation.

13. A payment number intermediation system, comprising:

a network interface;

a processor; and

data storage, wherein the data storage stores instructions executable by the processor (i) to receive a payment message from a client over the network interface;

(ii) to identify a credit card number in the payment message;

(iii) to replace the credit card number with a one-time use credit card number to create a modified message; and

(iv) to send the modified message to a server over the network interface.

14. A payment number intermediation method performed by an intermediary positioned along a communication path between a client and a server, comprising:

receiving a payment message from the client;

after receiving the payment message, detecting a credit card account number in the payment message;

after detecting the credit card account number, replacing the credit card number with a one-time use credit card number to create a modified message; and

sending the modified message along the communication path to the server.

15. The method of claim 14, wherein the replacing of the credit card account number includes requesting the one-time use credit card number from a credit card account service provider.