System and method for online data processing

• US 9,501,662 B2
• Filed: 12/15/2014
• Issued: 11/22/2016
• Est. Priority Date: 02/25/2010
• Status: Active Grant

• Current Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Rosner, Wendy Silver, Shelby, James R., Yong, Jackie S., Bowman, Jean
• Primary Examiner(s): Simitoski, Michael
• Application Number:
  US14/570,428
• Publication Number:
  US 20150101062A1
• Time in Patent Office: 708 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/3827 Use of message hashing
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0253 During e-commerce, i.e. online transactions
• CPC Class Codes: G06Q 30/0255 based on user history
• CPC Class Codes: G06Q 30/0615 Anonymizing
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08

Abstract

Customer online data is collected via script on customer computers and is communicated to a server hosted by an organization, such as a card issuer. The customer online data communicated to the server is non-personally identifiable information (non-PII). In turn, the server aggregates the non-PII customer online data from the set of participating merchants. The server associates the received non-PII customer online data with non-PII demographic data. Other non-PII transaction data, such as previous transactions processed at a card issuer, also can be associated with the non-PII customer online data and non-PII demographic data. These associations are, in turn, used to create reports and to provide services to help merchants or other requesting organizations develop online strategies to drive click thru and conversion rates.

Claims

1. A computer implemented method comprising:

generating, by a computer-based system, a card key-code;

associating, by the computer-based system, a first hash code with a first user identification (ID) of a consumer by inserting the first hash code in the card key-code, wherein the first hash code replaces a card number in the card key-code; and

transmitting, by the computer-based system, transaction data for the first user ID, the first user ID, and the first hash code to a first service;

wherein the first service stores an association between the transaction data and online data for a browsing history of the consumer, in response to the first hash code matching a second hash code,

wherein the computer-based system does not have access to the online data,

wherein the online data identifies an abandoned online shopping cart of the consumer.

2. The method of claim 1, wherein the online data identifies items selected for eventual purchase that have not yet been purchased.

3. The method of claim 1, wherein the first service receives the online data and the first user ID from different entities.

4. The method of claim 1, wherein the first hash code is not communicated outside the computer-based system and the first service.

5. The method of claim 1, wherein the first service does not have access to a transaction account code associated with the consumer.

6. The method of claim 1, wherein the second hash code is retrieved by the first service based on a second user ID associated with the online data.

7. The method of claim 1, further comprising generating, by the computer-based system, the first hash code.

8. The method of claim 1, wherein the first service further associates the online data with demographic data, in response to the first hash code matching the second hash code.

9. The method of claim 1, wherein a transaction account code associated with the consumer comprises personally identifiable information (PII) and the first user ID comprises non-personally identifiable information (non-PII).

10. The method of claim 9, wherein the first service generates a report based on online data, wherein PII is not accessed by the first service during the generating.

11. The method of claim 9, further comprising enforcing, by the computer-based system, a security policy that restricts the first service from accessing PII.

12. A system comprising:

a consumer privacy processor,

a tangible, non-transitory memory configured to communicate with the processor,

the tangible, non-transitory memory having instructions stored thereon that, in response to execution by the processor, cause the processor to perform operations comprising;

generating, by the processor, a card key-code;

associating, by the processor, a first hash code with a first user identification (ID) of a consumer by inserting the first hash code in the card key-code, wherein the first hash code replaces a card number in the card key-code; and

transmitting, by the processor, transaction data for the first user ID, the first user ID, and the first hash code to a first service;

wherein the first service stores an association between the transaction data and online data for a browsing history of the consumer, in response to the first hash code matching a second hash code,

wherein the computer-based system does not have access to the online data,

wherein the online data identifies an abandoned online shopping cart of the consumer.

13. The system of claim 12, wherein the online data identifies items selected for eventual purchase that have not yet been purchased.

14. The system of claim 12, wherein the first service further associates the online data with demographic data, in response to the first hash code matching the second hash code.

15. The system of claim 12, wherein a transaction account code associated with the consumer comprises personally identifiable information (PII) and the first user ID comprises non-personally identifiable information (non-PII).

16. An article of manufacture including a non-transitory, tangible computer-readable storage medium having instructions stored thereon that, in response to execution by a consumer privacy computer-based system, cause the computer-based system to perform operations comprising:

generating, by the computer-based system, a card key-code;

associating, by the computer-based system, a first hash code with a first user identification (ID) of a consumer by inserting the first hash code in the card key-code, wherein the first hash code replaces a card number in the card key-code; and

transmitting, by the computer-based system, transaction data for the first user ID, the first user ID, and the first hash code to a first service;

wherein the first service stores an association between the transaction data and online data for a browsing history of the consumer, in response to the first hash code matching a second hash code,

wherein the computer-based system does not have access to the online data,

wherein the online data identifies an abandoned online shopping cart of the consumer.

17. The article of claim 16, wherein the online data identifies items selected for eventual purchase that have not yet been purchased.

18. The article of claim 16, wherein the first service further associates the online data with demographic data, in response to the first hash code matching the second hash code.

19. The article of claim 16, wherein a transaction account code associated with the consumer comprises personally identifiable information (PII) and the first user ID comprises non-personally identifiable information (non-PII).