Method and system for controlling certificate based open payment transactions

• US 9,607,292 B1
• Filed: 01/12/2012
• Issued: 03/28/2017
• Est. Priority Date: 06/11/1999
• Status: Expired due to Fees

• Current Assignee: Citicorp Credit Services Incorporated (Citigroup Incorporated)
• Original Assignee: Citicorp Credit Services Incorporated (Citigroup Incorporated)
• Inventors: Kawan, Joseph C., Chu, Ronald King-Hang, Golvin, Charles, Tompkins, Peter
• Primary Examiner(s): Hamilton, Lalita M
• Application Number:
  US13/348,748
• Time in Patent Office: 1,902 Days
• Field of Search: 705/35, 705/39, 705/40
• US Class Current: 1/1
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 21/107 License processing; Key processing
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/145 Payments according to the detected use or quantity
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: G06Q 2220/18 Licensing
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes

Abstract

Methods and systems for controlling certificate-based open payment transactions involving a merchant and a customer utilizing various types of networks and terminals. Prior to accessing a merchant POS terminal or, for example, a merchant website, a customer obtains a certificate from a service provider (SP), such as a bank, certifying his identification (ID) and his relevant financial information, in a form that is understandable by the SP. The SP is capable of performing multiple functions. For example, the SP is capable of acting as a certificate authority when it issues the customer'"'"'s certificates, an authenticator when it receives private-key encrypted certificates from the customers to be decrypted using the corresponding public-key, and an authorizing authority when it checks the value available in a customer'"'"' chosen payment account against the requested purchase or transfer amount.

Claims

1. A system for facilitating financial transactions over a network comprising:

cellular phone programmed to include at least an identifying certificate, payment information, network routing instructions and an encryption program;

a first server for offering at least one product via the network through a terminal;

a processor connected to the terminal for

accessing the cellular phone,

retrieving the identifying certificate, the payment information, the network routing instructions and the encryption program off of the cellular phone,

attaching the identifying certificate to the payment information,

encrypting the payment information with the attached identifying certificate via the encryption program, and

sending the payment information with the attached identifying certificate across the network via the network routing instructions, and

a second server connected to the network for

receiving the encrypted payment information with the attached identifying certificate,

decrypting and reading the encrypted payment information with the attached identifying certificate,

authorizing a payment requested via the payment information, and

notifying the first server of the authorization.

2. A system according to claim 1, wherein the terminal is wireless.

3. A system for performing a financial transaction comprising:

means for presenting a customer with an amount due in response to a customer'"'"'s product selection;

means for communicating with a customer'"'"'s cellular phone by a terminal to facilitate payment of the amount due;

means for accessing a portion of the customer'"'"'s cellular phone containing payment information, wherein the payment information includes at least network address instructions for an issuer, a digital certificate for identifying the customer, the customer'"'"'s financial account information, an encryption program, and a customer memo balance containing updated customer account balances;

means for identifying the customer through the digital certificate;

means for receiving a customer'"'"'s account selection;

means for checking a customer'"'"'s memo balance for the selected account to determine if funds therein are sufficient to pay the amount due;

means for downloading the payment information from the cellular phone to a memory portion of the terminal;

means for storing the payment information from the cellular phone in a memory portion of the terminal for future processing of the financial transaction;

means for releasing the selected product to the customer; and

means for uploading the payment information to the issuer for further processing and settlement of the financial transaction.

4. The system according to claim 3, wherein the terminal is wireless.

5. The system according to claim 3, further comprising:

means for receiving verification from the issuer that the financial transaction is authorized; and

means for updating a merchant transaction log in the memory portion of the terminal to reflect authorization of the financial transaction by the issuer.

6. A method for facilitating a financial transaction over a first network comprising:

issuing software for installation on a cellular phone of a customer, wherein the cellular phone comprises an encryption program, wherein the cellular phone is configured to be programmed to include a customer identification profile, financial account information of the customer, and a private/public key pair using the encryption program;

issuing software to a merchant, wherein the software includes payment information of the merchant including a merchant'"'"'s financial account information and further wherein the software is capable of interacting with the customer'"'"'s cellular phone over a first network;

adding, by a computer, the merchant'"'"'s payment information to payment instructions transmitted over the first network from the customer'"'"'s cellular phone to a programmable memory device of the merchant, which is configured to store the merchant'"'"'s payment information; and

routing, by a computer, the payment information and the payment instructions for settlement processing of the financial transaction.

7. The method according to claim 6, wherein the payment information of the merchant further includes a merchant'"'"'s digital certificate.

8. The method according to claim 6, wherein the payment instructions further comprise network address information.

9. The method according to claim 8, wherein the network address information comprises at least one of a universal resource locator and a phone number.

10. The method according to claim 6, wherein the payment instructions further include an encrypted personal identification number recognizable by the customer'"'"'s financial institution for accessing the customer'"'"'s financial account information.

11. The method according to claim 6, wherein the customer'"'"'s financial account information includes an account identifier.

12. The method according to claim 11, wherein the customer'"'"'s account identifier includes at least one of an account type and an account number.

13. The method according to claim 6, wherein the encryption program contains a private key generated by an issuer.

14. The method according to claim 6, wherein the merchant'"'"'s financial account information includes the merchant'"'"'s account identifier.

15. The method according to claim 14, wherein the merchant'"'"'s account identifier includes at least one of an account type and an account number.

16. A method for performing a financial transaction comprising:

presenting a customer with an amount due in response to a customer'"'"'s product selection;

accepting a customer'"'"'s cellular phone by a merchant'"'"'s terminal to facilitate payment of the amount due;

accessing a portion of the customer'"'"'s cellular phone containing payment information, wherein the payment information includes at least network address instructions for an issuer of the customer'"'"'s cellular phone, a digital certificate for identifying the customer, the customer'"'"'s financial account information, and an encryption program;

identifying the customer through the digital certificate;

downloading the payment information from the cellular phone to a memory portion of the merchant'"'"'s terminal;

storing the payment information from the cellular phone in a memory portion of the merchant'"'"'s terminal for settlement processing of the financial transaction along with at least one other financial transaction, wherein the selected product is released to the customer upon receipt of the payment information; and

uploading the payment information to the issuer of the cellular phone for further processing and settlement of the financial transaction.

17. The method according to claim 16, further comprising receiving a selection from the customer of an account for payment of the selected product.

18. The method according to claim 17, further comprising checking a memo balance for the selected account to determine if funds therein are sufficient to pay the amount due.

19. The method according to claim 18, further comprising:

receiving verification from the issuer of the cellular phone that the financial transaction is authorized; and

updating a merchant transaction log in the memory portion of the terminal to reflect authorization of the financial transaction by the issuer of the cellular phone.