SYSTEM AND METHOD FOR MERCHANT DISCOVERY AND TRANSFER OF PAYMENT DATA

• US 20080249938A1
• Filed: 03/31/2008
• Published: 10/09/2008
• Est. Priority Date: 04/03/2007
• Status: Abandoned Application

• Current Assignee: CPNI, Inc.
• Original Assignee: CPNI, Inc.
• Inventors: Drake-Stoker, Ryan Fredrick
• Application Number:
  US12/059,419
• Publication Number:
  US 20080249938A1
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/3265 characterised by personalisation for use
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/106 Packet or message integrity

Abstract

A method and system are provided for communicating with a merchant server and transferring payment data in a transaction between a mobile device and a merchant server. A user of the mobile device has a user identifier registered with the system and the merchant server has a merchant identifier registered with the system. The method comprises the steps of: receiving the merchant identifier from the mobile device; determining a merchant server address associated with the merchant identifier; establishing a communication channel with the merchant server; exchanging interactive information requests and responses between the merchant server and the mobile device; determining payment data associated with the user identifier; and providing the payment data to the merchant server.

Claims

1. A system for communicating with a merchant server and transferring payment data in a transaction between a mobile device and the merchant server, a user of the mobile device having a user identifier registered with the system and the merchant server having a merchant identifier registered with the system, the system comprising:

a mobile device gateway server comprising a processor operatively connected to a memory, the memory having data and instructions stored thereon to configure the mobile device gateway server to interface with the mobile device and to interface with other components of the system to;

receive the merchant identifier from the mobile device;

determine a merchant server address associated with the merchant identifier;

establish a secure communication channel with the merchant server;

transfer a payment data request from the merchant server to the mobile device;

transfer a payment request response from the mobile device to the merchant server;

determine payment data associated with the user identifier; and

provide the payment data to the merchant server.

2. The system according to claim 1, wherein the mobile device gateway is further configured to interface with the mobile device and to interface with other components of the system to, after establishing a communication channel:

transfer an interactive information request from the merchant server to the mobile device; and

transfer an information request response from the mobile device to the merchant server.

3. The system according to claim 2, wherein the interactive information request includes an interactive query script to be executed by the mobile device.

4. The system according to claim 3, wherein the interactive query script is an XML script.

5. The system according to claim 1, wherein the mobile device gateway server is further configured to interface with the mobile device and to interface with other components of the system to, before the step of receiving the merchant identifier:

authenticate a user of the mobile device; and

determine the unique user identifier associated with the authenticated user.

6. The system according to claim 1, wherein the mobile device gateway server is further configured to interface with the mobile device and to interface with other components of the system to, after establishing a secure communication channel with the merchant server:

authenticate the merchant server.

7. The system according to claim 1, wherein the mobile device gateway server is further configured to interface with the mobile device and to interface with other components of the system to, after providing the payment data to the merchant server:

provide a transaction confirmation to the mobile device if the transaction is successfully processed by the merchant server.

8. The system according to claim 1, wherein the system further comprises:

a service control host server connected to the mobile device gateway server through a first network, the service control host server also being connected to the merchant server through a second network; and

a bank server connected to the service control host server through a third network.

9. The system according to claim 1, wherein the system further comprises:

a bank server connected to the mobile device gateway server through a first network, and

a service control host server connected to the bank server through a second network, the service control host server being connected to the merchant server through a third network.

10. A method for use in payment a system for communicating with a merchant server and transferring payment data in a transaction between a mobile device and the merchant server, a user of the mobile device having a registered user identifier and the merchant having a registered merchant identifier, the method comprising:

receiving the merchant identifier from the mobile device;

determining a merchant server address associated with the merchant identifier;

establishing a communication channel with the merchant server;

transferring a transfer of payment data request from the merchant server to the mobile device;

transferring a payment request response from the mobile device to the merchant server;

determining payment data associated with the user identifier; and

providing the payment data to the merchant server.

11. The method according to claim 10, further comprising, after establishing a communication channel with the merchant server:

transferring an interactive information request from the merchant server to the mobile device and

transferring an information request response from the mobile device to the merchant server.

12. The method according to claim 11, wherein the interactive information request includes an interactive query script to be executed by the mobile device.

13. The method according to claim 12, wherein the interactive query script is an XML script.

14. The method according to claim 10, wherein the method further comprises, before receiving the merchant identifier:

authenticating a user of the mobile device; and

determining the unique user identifier associated with the authenticated user.

15. The method according to claim 10, wherein the method further comprises, after establishing a secure communication channel with the merchant server:

authenticating the merchant server.

16. The method according to claim 10, wherein the method further comprises, after providing the payment data to the merchant server:

providing a transaction confirmation to the mobile device if the transaction is successfully processed by the merchant server.

17. A method of registering a user in a payment system, the payment system for communicating with a merchant server and transferring payment data in a transaction between a mobile device and the merchant server, the method comprising:

receiving a request for registration of an account;

receiving payment data associated with the user;

generating an account identification (ID) and mapping the account ID to the payment data; and

storing the account ID, the mapping and the associated data in a database.

18. The method according to claim 17, further comprising:

receiving a user interface preference for the mobile device; and

sending to the mobile device a mobile application according to the received interface preference.

19. The method according to claim 18, further comprising:

generating a reference identifier for use to activate the registered account;

generating a user idenitifcation associated with the account ID;

mapping the account ID to the user identification and storing the mapping in a further database; and

activating the registered account by communicating with the mobile device.

20. The method according to claim 19, wherein activating the registered account by communicating with the mobile device comprises:

notifying the mobile device that registration was successful, the notification including an address of a server to complete activation;

authenticating the reference identifier generated during registration;

authenticating a personal identification number;

generating at the mobile application a key pair, encrypting a private portion of the key pair and storing it on the mobile device; and

opening a secure connection between the mobile device and a mobile server and generating and storing on each of the mobile device and the mobile server security certificates for use in future communications sessions between the mobile device and the mobile server