MERCHANT FACILITATION OF ONLINE CARD PRESENT TRANSACTION

• US 20090157556A1
• Filed: 02/23/2009
• Published: 06/18/2009
• Est. Priority Date: 03/15/2001
• Status: Active Grant

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Hussain, Sohail M., Hobson, Carol Lee
• Granted Patent: US 7,873,579 B2
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]

Abstract

An online card-present transaction system facilitates card-present type transactions with a merchant over a public network. A host system is configured to accept authentication data from a user via an authentication device. The host system, after authenticating a user is configured to retrieve the user'"'"'s account information from a user database system and translate a user account number into a temporary transaction number. The temporary transaction number is then transmitted directly from the host system to the merchant, thereby eliminating the need for the user to send to the merchant over the internet, the user'"'"'s transaction account number.

Claims

1. An online card present transaction method comprising:

detecting a presence of a smart card reader connected to a client computer by a merchant computer;

presenting said client computer with a payment option for using a smart card for payment in response to said detection of said smart card reader;

receiving a selection of said payment option;

redirecting said client computer to a website of a host computer in response to said detection, wherein said host computer;

prompts to insert a smart card into said smart card reader;

receives a digital certificate from said smart card;

generates a secondary transaction account code based on authentication of said digital certificate, wherein said secondary transaction account code is valid for a single purchase transaction;

associates said secondary transaction account code with a primary transaction account code; and

,

communicates said secondary transaction account code to said client computer, wherein a payment request is submitted based on said secondary transaction account code; and

,

receiving account information including said secondary transaction account code from said host computer over said authenticated communication channel, wherein said account information and said secondary transaction account code facilitates completion of a transaction.

2. The method of claim 1, wherein said host computer further transmits a challenge string to said client computer.

3. The method of claim 2, wherein said challenge string prompts to insert said smart card into said smart card reader.

4. The method of claim 3, wherein said smart card stores a digital certificate.

5. The method of claim 1, wherein said host computer further receives a copy of said digital certificate from said client computer.

6. The method of claim 1, wherein said host computer further receives a signed challenge string from said client computer.

7. The method of claim 6, wherein said challenge string is signed to create said signed challenge string.

8. The method of claim 5, wherein said digital certificate is accessed in response to entry of a Personal Identification Number (PIN)

9. The method of claim 1, wherein said host computer further authenticates said smart card using a signed challenge string.

10. The method of claim 1, wherein said host computer further authenticates said smart card using a copy of said digital certificate.

11. The method of claim 1, wherein generating said secondary transaction account code comprises receiving an encrypted host computer signature.

12. The method of claim 11, wherein generating said secondary transaction account code further comprises decrypting said encrypted host computer signature to determine that said account information originated with said host computer.

13. The method of claim 1, further comprising establishing an authenticated communication channel.

14. The method of claim 1, further comprising receiving a host computer token over a first communication channel.

15. The method of claim 14, wherein said host computer token identifies said host computer.

16. The method of claim 1, further comprising communicating to said host computer over a second communication channel to confirm that a host computer token was issued by said host computer.

17. The method of claim 1, wherein said host computer further:

transmits a challenge string to said client computer, wherein said challenge string prompts to insert said smart card into said smart card reader, wherein said smart card stores a digital certificate;

receives a copy of said digital certificate and a signed challenge string from said client computer, wherein said challenge string is signed to create said signed challenge string and said digital certificate is accessed in response to entry of a PIN; and

,

authenticates said smart card using said signed challenge string and said copy of said digital certificate.

18. The method of claim 1, wherein said generating said secondary transaction account number comprises:

receiving an encrypted host computer signature; and

decrypting said encrypted host computer signature to determine that said account information originated with said host computer.

19. The method of claim 1, further comprising:

establishing an authenticated communication channel;

receiving a host computer token over a first communication channel, wherein said token identifies said host computer; and

communicating to said host computer over a second communication channel to confirm that said token was issued by said host computer.

20. A tangible computer-readable medium having stored thereon a plurality of instructions which are executed on a computer, said plurality of instructions comprising:

instructions to detect a presence of a smart card reader connected to a client computer by a merchant computer;

instructions to present said client computer with a payment option for using a smart card for payment in response to said detection of said smart card reader;

instructions to receive a selection of said payment option;

instructions to redirect said client computer to a website of a host computer in response to said detection, wherein said host computer;

prompts to insert a smart card into said smart card reader;

receives a digital certificate from said smart card;

generates a secondary transaction account code based on authentication of said digital certificate, wherein said secondary transaction account code is valid for a single purchase transaction;

associates said secondary transaction account code with a primary transaction account code; and

,

communicates said secondary transaction account code to said client computer, wherein a payment request is submitted based on said secondary transaction account code;

and,

instructions to receive account information including said secondary transaction account code from said host computer over said authenticated communication channel, wherein said account information and said secondary transaction account code facilitates completion of a transaction.