Transaction system

• US 20040254848A1
• Filed: 03/30/2004
• Published: 12/16/2004
• Est. Priority Date: 10/23/2000
• Status: Active Grant

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: Cyota, Inc. (Symphony Technology Group LLC)
• Inventors: Flatau, Teddy, Rosen, Avi, Tsur, Michal, Enosh, Ben, Bennett, Naftali, Golan, Lior, Rivner, Nira
• Granted Patent: US 7,499,889 B2
• Time in Patent Office: Days
• US Class Current: 705/26
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/403 Solvency checks
• CPC Class Codes: G06Q 20/4037 Remote solvency checks
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

As part of the present invention, there is provided a financial transaction system having a set of transaction facilitating protocols, each of which may be used either in conjunction with a 3D Secure system, environment or protocol, or on a standalone basis, within a conventional credit card processing system or environment, or with any other association standard which may be used in commerce.

Claims

1. A method of registering a card holder to a service during an online card transaction, said method comprising:

receiving from a merchant web site a query as to whether the card holder is registered;

determining whether the card holder is registered;

sending a registration form directly to the card holder'"'"'s computer in the event the card holder is registered.

2. The method according to claim 1, further comprising sending a positive response to the merchant web site regardless of the card holder'"'"'s enrollment status.

3. The method according to claim 2, further comprising sending a failure to authenticate signal to the merchant web site in the event that the cardholder fails to complete the registration form.

4. The method according to claim 1, wherein a registration form is sent to the cardholder in the event the cardholder'"'"'s profile meets a predetermined criteria.

5. A transaction system comprising a merchant application functionally associated to a merchant web site and adapted to send a query to an access control server asking whether a card holder attempting a transaction on the merchant web site is registered to a particular service, said access control server adapted to determine whether a card holder is registered, and to send to the cardholder'"'"'s internet device a registration form in the event the cardholder is not registered.

6. The system according to claim 5, wherein said access control server produces a positive response to the merchant application regardless of the results of the database search.

7. The system according to claim 6, wherein said access control server sends a failure to authenticate signal to the merchant application if the cardholder fails to complete the registration form.

8. The system according to claim 6, wherein the access control server sends a registration form to the cardholder in the event the cardholder'"'"'s profile meets a predetermined criteria.

9. A method of pre-authorizing an on online card transaction, said method comprising:

receiving from a merchant web site details about a transaction being attempted by a card holder and a query as to whether the card holder is registered to a card related service; and

forwarding the transaction details to an authorization server for pre-authorization of the transaction.

10. The method according to claim 9, further comprising receiving an authorization code from the authorization server.

11. The method according to claim 10, further comprising forwarding the authorization code to the merchant web site.

12. The method according to claim 11, further comprising sending a loan request to the cardholder'"'"'s internet device in the event the authorization server does not authorize the transaction.

13. The method according to claim 12, wherein a loan request form is sent to the cardholder'"'"'s internet device if the authorization server indicates that the cardholder does not have sufficient credit to complete the transaction and the card holder'"'"'s profile meets a predefined requirement.

14. A transaction system comprising a merchant application functionally associated to a merchant web site and adapted to send to an access control server details regarding a transaction being attempted by a card holder and a query asking whether the card holder is registered to a card related service, said access control server determine a card holder'"'"'s registration status and to forward the transaction details to an authorization server.

15. The system according to claim 14, wherein the access control server is adapted to receive an authorization code from the authorization server.

16. The system according to claim 15, wherein said access control server is adapted to forward the authorization code to said merchant application.

17. The system according to claim 15, wherein the access control server is adapted to send a loan request form to the cardholder'"'"'s internet device in the event the authorization does not provide an authorization code.

18. The system according to claim 17, wherein the access control server is adapted to send a loan request form to the cardholder'"'"'s internet device if the authorization server indicates that the cardholder does not have sufficient credit to complete the transaction.

19. A method of authenticating an on online card transaction using a client application, said method comprising:

receiving from a merchant web site details about a transaction being attempted by a card holder and determining whether the card holder is registered to a card related service;

encrypting at the client application the transaction details and query; and

transmitting the encrypted details and query to an access control server.

20. The method according to claim 19, further comprising sending to the access control server an encrypted password associated with the card being used as part of the transaction.

21. The method according to claim 20, further comprising receiving from the access control server a digital authentication certificate.

22. The method according to claim 21, further comprising forwarding the digital authentication certificate to the merchant web site.

23. A transaction system comprising:

a merchant application functionally associated to a merchant web site and adapted to send details regarding a transaction being attempted by a card holder and a query asking whether the card holder is registered to a card related service;

and a client application functionally associated with a internet device being used as part of the transaction, said client application adapted to receive, encrypt and forward to an access control server the information sent by said merchant application.

24. The system according to claim 23, wherein said access control server is adapted to receive and decrypt the information sent by said client application and to search a database relating to the to the card related service.

25. The system according to claim 24, wherein said client application is adapted to send to the access control server an encrypted password associated with the card being used as part of the transaction.

26. The system according to claim 25, wherein said access control server is adapted to send to said client application a digital authentication certificate.

27. The system according to claim 26, wherein said client application is adapted to forward the digital authentication certificate to said merchant application.

28. A method of authenticating an online card transaction whose pricing is established some period of time after an initial order is placed, said method comprising:

receiving from a merchant web site a message with a pointer to a web page or other location on the merchant web site containing transaction details;

sending through the web-browser connected to the web page and on to an access control server the transaction details and a query as to whether the card is registered to a card related service.

29. The method according to claim 28, wherein the received message may either be an email or an instant message.

30. A system for authenticating an online card transaction whose pricing is established some period of time after an initial order is placed, said system comprising a merchant application functionally associated to a merchant web site and adapted to send a message to a computer associated with the transaction, wherein the message contains a link to a page on the merchant application with details regarding the transaction, said application adapted to pass through the web-browser connected to the web page and on to an access control server the transaction details and a query as to whether the card is registered to a card related service.

31. The system according to claim 30 wherein the message is either an email or an instant message.

32. A method of authorizing an on online card transaction, said method comprising:

receiving from a merchant web site details about a transaction being attempted by a card holder and a query as to whether the card holder is registered to a card related service; and

receiving from an authorization request relating to the transaction and comparing the received transaction details against the authorization request. Te comparison is with the PA.

33. The method according to claim 32, further comprising authorizing the transaction if the received transaction details and authorization request correlate.

34. The method according to claim 33, further comprising forwarding an authorization code to the merchant in the event the transaction is authorized.

35. A transaction system comprising a merchant application functionally associated to a merchant web site and adapted to send to an access control server details regarding a transaction being attempted by a card holder and a query asking whether the card holder is registered to a card related service, said access control server adapted to receive a copy of an authorization request the merchant web site sends to an authorization server and to compare the received transaction details and the authorization request.

36. The system according to claim 35, wherein the access control server is adapted to send the authorization server an indication as to the correlation between the received transaction details and the authorization request.

37. A method of authenticating an on online card transaction, said method comprising:

receiving from a merchant web site details about a transaction being attempted by a card holder, a query as to whether the card holder is registered to a card related service, and information about any special a merchant may be offering; and

sending to a internet device associated with the transaction a web page requesting a password associated with the card service and providing information relating to the special.

38. A system for authenticating an on online card transaction comprising:

a merchant application functionally associated to a merchant web site and adapted to send to an access control server details about a transaction being attempted by a card holder, a query as to whether the card holder is registered to a card related service, and information about any specials the merchant web site may be offering; and

said access control server being adapted to send to a internet device associated with the transaction a web page requesting a password associated with the card service and providing information relating to the special.

39. A method of authenticating an on online card transaction, said method comprising:

receiving from a proxy server a proxy card number;

sending to a merchant web site the proxy number as part of a transaction; and

sending details about the transaction being attempted by the card holder, a query as to whether the card holder is registered to an access control server associated with a financial server.

40. The method according to claim 39, wherein the proxy number is issues for a specific purchase order and further comprising the step of reconciling a charge to the proxy number and the purchase order.