Method and system for secure mobile payment transactions

• US 9,530,125 B2
• Filed: 06/19/2015
• Issued: 12/27/2016
• Est. Priority Date: 02/20/2008
• Status: Active Grant

• Current Assignee: Stripe, Inc.
• Original Assignee: Collective Dynamics LLC
• Inventors: Bacastow, Steven V.
• Primary Examiner(s): Ludwig, Peter L
• Application Number:
  US14/745,083
• Publication Number:
  US 20150287036A1
• Time in Patent Office: 557 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/203 Inventory monitoring
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/26 Debit schemes, e.g. "pay now"
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/356 Aspects of software for card payments
• CPC Class Codes: G06Q 20/36 using electronic wallets or electronic money safes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation

Abstract

A method for facilitating the widespread use of the PIN-Debit payment method for Internet “eCommerce” and mobile payments sales which requires little or no change for the cardholders, merchants, debit networks and card issuers based primarily on the introduction of a layer of middleware and wherein the Debit Networks and Issuing Banks may customize the implementation of the services based on individual strategy and cardholder preferences.

Claims

1. A method for processing a secure mobile payment transaction conducted at a location operated by a merchant comprising the steps of:

receiving at a web server of a mobile wallet system from a consumer in connection with a registration event that is completed prior to the secure mobile payment transaction, a plurality of payment account numbers, the plurality of payment account numbers received at the mobile wallet system and associated with a mobile device of the consumer, the mobile wallet system comprising;

a transaction gateway for receiving and processing payment transactions,

the web server having a network interface for receiving and processing messages received from Internet sources in connection with the registration event,

a messaging server having a network interface for communicating with the mobile device, and

a settings database for storing settings from one or more of a merchant, an issuer, a payment network, a payment acquirer, and an e-commerce gateway;

in connection with the secure mobile payment transaction, which is initiated after the registration event, the mobile wallet system receiving at the transaction gateway mobile payment data from a point-of-sale device at the location operated by a merchant, the mobile payment data comprising a mobile payment account number transmitted to the point-of-sale device at the location operated by the merchant from the mobile device of the consumer;

transmitting, from the mobile wallet system to the mobile device, an approval request;

receiving, at the mobile wallet system from the mobile device of the consumer, a secure token associated with a mobile PIN, the secure token permitting the mobile PIN to be maintained securely on the mobile device, the secure token indicating the consumer has approved the secure mobile payment transaction;

in association with the secure mobile payment transaction, the mobile wallet system analyzing the mobile payment data received from the point-of-sale device at the location operated by the merchant to identify the mobile payment data as comprising the mobile payment account number;

upon identifying the mobile payment data as comprising the mobile payment account number,

determining, based on a selection from the consumer, a specified payment account number from the plurality of payment account numbers received in connection with the registration event,

substituting the specified payment account number for the mobile payment account number,

transmitting the mobile payment data comprising the specified payment account number to a secure payment network for processing; and

after transmitting the mobile payment data to the secure payment network for processing, the mobile wallet system transmitting a payment confirmation to the point-of-sale device at the location operated by the merchant.

2. The method of claim 1, wherein the mobile wallet system generates the secure token and the mobile PIN in connection with the registration event.

3. The method of claim 1, wherein the point-of-sale device at the location operated by the merchant is one of a merchant mobile device or a hosting computer.