System and method for conducting electronic commerce with a remote wallet server

• US 20010027441A1
• Filed: 02/15/2001
• Published: 10/04/2001
• Est. Priority Date: 02/16/2000
• Status: Active Grant

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Wankmueller, John
• Granted Patent: US 8,150,767 B2
• Time in Patent Office: Days
• US Class Current: 705/41
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes

Abstract

A method is provided for conducting a transaction over a computer network (such as the Internet) where the remote wallet server conducts a transaction with a merchant computer in a format substantially compliant with a chip card electronic commerce protocol or specification, regardless of whether or not the payment card of the consumer involved in the transaction is a chip card.

Claims

1. A method for conducting a transaction over a computer network between a consumer and a merchant involving a payment card issued by an issuer institution to the consumer, wherein the computer network includes at least three computers connected thereto, a consumer computer operated by or on behalf of the consumer, a merchant computer operated by or on behalf of the merchant, and a remote wallet server that provides functionality for the consumer computer to conduct transactions over the computer network, the method comprising:

receiving a request by the remote wallet server from the consumer computer for conducting a payment function with the merchant computer;

conducting a transaction by the remote wallet server with the merchant computer in response to the request by the consumer computer in a format substantially compliant with a chip card electronic commerce protocol or specification, regardless of whether or not the payment card of the consumer involved in the transaction is a chip card.

2. The method of

claim 1

, wherein the remote wallet server and the issuer institution have a shared secret data object, and the method further comprises the steps of:

generating a cryptogram by the remote wallet server based on the shared secret data object between the remote wallet server and the issuer institution; and

sending payment-related information and the cryptogram by the remote wallet server to the merchant computer in response to the request by the consumer computer.

3. A remote wallet server for facilitating a transaction over a computer network between a consumer and a merchant, wherein the transaction involves a payment card issued by an issuer institution to the consumer, and wherein the computer network includes at least three computers connected thereto, a consumer computer operated by or on behalf of the consumer, a merchant computer operated by or on behalf of the merchant, and the remote wallet server;

the remote wallet server comprising;

a microprocessor unit;

a memory unit coupled to the microprocessor unit;

means for conducting a transaction with the merchant computer in response to a request for such a transaction by the consumer computer in a format substantially compliant with a chip card electronic commerce protocol or specification, regardless of whether or not the payment card of the consumer involved in the transaction is a chip card.

4. The remote wallet server of

claim 3

, further comprising:

a storage unit having stored therein a secret data object that is shared with the issuer institution;

means for generating a cryptogram by the remote wallet server based on the secret data that is shared between the remote wallet server and the issuer institution; and

application code stored in the memory unit for sending payment-related information and the cryptogram to the merchant computer in response to the request by the consumer computer to conduct a transaction with the merchant computer.

5. The remote wallet server of

claim 4

, wherein the storage unit and the means for generating a cryptogram are contained in a tamper-resistant security module.

6. A method for conducting a transaction over a computer network between a consumer and a merchant involving a payment card issued by an issuer institution to the consumer, wherein the computer network includes at least three computers connected thereto, a consumer computer operated by or on behalf of the consumer, a merchant computer operated by or on behalf of the merchant, and a remote wallet server that provides functionality for the consumer computer to conduct transactions over the computer network, wherein the remote wallet server and the issuer institution have a shared secret data object, the method comprising:

receiving a request by the remote wallet server from the consumer computer for conducting a payment function with the merchant computer;

generating a cryptogram by the remote wallet server based on the shared secret data object between the remote wallet server and the issuer institution; and

sending payment-related information and the cryptogram by the remote wallet server to the merchant computer in response to the request by the consumer computer.

7. The method of

claim 6

, wherein the payment-related information and the cryptogram are transmitted in a format substantially compliant with a chip card electronic commerce protocol or specification.

8. A remote wallet server for facilitating a transaction over a computer network between a consumer and a merchant involving a payment card issued by an issuer institution to the consumer, wherein the computer network includes at least three computers connected thereto, a consumer computer operated by or on behalf of the consumer, a merchant computer operated by or on behalf of the merchant, and the remote wallet server, comprising:

a microprocessor unit;

a memory unit coupled to the microprocessor unit;

a storage unit having stored therein a secret data object that is shared with the issuer institution;

means for generating a cryptogram by the remote wallet server based on the secret data that is shared between the remote wallet server and the issuer institution; and

application code stored in the memory unit for sending payment-related information and the cryptogram to the merchant computer in response to a request by the consumer computer to conduct a payment function with the merchant computer.

9. The remote wallet server of

claim 8

, wherein the application code includes means for transmitting the payment-related information and the cryptogram in a format substantially compliant with a chip card electronic commerce protocol or specification.

10. The remote wallet server of

claim 9

, wherein the storage unit and the means for generating a cryptogram are contained in a tamper-resistant security module