MERCHANT SYSTEM FACILITATING AN ONLINE CARD PRESENT TRANSACTION

• US 20090157557A1
• Filed: 02/23/2009
• Published: 06/18/2009
• Est. Priority Date: 03/15/2001
• Status: Active Grant

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Hussain, Sohail M., Hobson, Carol Lee
• Granted Patent: US 7,873,580 B2
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]

Abstract

An online card-present transaction system facilitates card-present type transactions with a merchant over a public network. A host system is configured to accept authentication data from a user via an authentication device. The host system, after authenticating a user is configured to retrieve the user'"'"'s account information from a user database system and translate a user account number into a temporary transaction number. The temporary transaction number is then transmitted directly from the host system to the merchant, thereby eliminating the need for the user to send to the merchant over the internet, the user'"'"'s transaction account number.

Claims

1. A merchant computer for receiving online card present transactions, said merchant computer configured to:

detect a presence of a smart card reader connected to a client computer by a merchant computer;

present said client computer with a payment option for using a smart card for payment in response to said detection of said smart card reader;

receive a selection of said payment option;

redirect said client computer to a website of a host computer in response to said detection, wherein said host computer is configured to;

prompt to insert a smart card into said smart card reader;

receive a digital certificate from said smart card;

generate a secondary transaction account code based on authentication of said digital certificate, wherein said secondary transaction account code is valid for a single purchase transaction;

associate said secondary transaction account code with a primary account code; and

,

communicate said secondary transaction account code to said client computer, wherein said client computer submits a payment request based on said secondary transaction account code;

and,

receive account information including said secondary transaction account code from said host computer over said authenticated communication channel, wherein said account information and said secondary transaction account code facilitates completion of a transaction.

2. The system of claim 1, wherein said host computer is further configured to transmit a challenge string to said client computer.

3. The system of claim 2, wherein said challenge string prompts to insert said smart card into said smart card reader.

4. The system of claim 3, wherein said smart card stores said digital certificate.

5. The system of claim 1, wherein said host computer is further configured to receive a copy of said digital certificate from said client computer.

6. The system of claim 1, wherein said host computer is further configured to receive a signed challenge string from said client computer.

7. The system of claim 6, wherein said challenge string is signed to create said signed challenge string.

8. The system of claim 5, wherein said digital certificate is accessed in response to entry of a Personal Identification Number (PIN).

9. The system of claim 1, wherein said host computer is further configured to authenticate said smart card using a signed challenge string.

10. The system of claim 1, wherein said host computer is further configured to authenticate said smart card using a copy of said digital certificate.

11. The system of claim 1, wherein said host computer is further configured to:

transmit a challenge string to said client computer, wherein said challenge string prompts to insert said smart card into said smart card reader, wherein said smart card stores a digital certificate;

receive a copy of said digital certificate and a signed challenge string from said client computer, wherein said challenge string is signed to create said signed challenge string and said digital certificate is accessed in response to entry of a Personal Identification Number (PIN); and

,

authenticate said smart card using said signed challenge string and said copy of said digital certificate.

12. The system of claim 1, wherein said host is further configured to generate said secondary transaction account code by receiving an encrypted host computer signature.

13. The system of claim 12, wherein said host is further configured to generate said secondary transaction account code by decrypting said encrypted host computer signature to determine that said account information originated with said host computer.

14. The system of claim 1, wherein said merchant computer is further configured to establish an authenticated communication channel.

15. The system of claim 1, wherein said merchant computer is further configured to receive a host computer token over a first communication channel.

16. The system of claim 15, wherein said host computer token identifies said host computer.

17. The system of claim 1, wherein said merchant computer is further configured to communicate to said host computer over a second communication channel to confirm a said host computer token was issued by said host computer.

18. The system of claim 1, wherein said merchant computer is further configured to:

establish an authenticated communication channel;

receive a host computer token over a first communication channel, wherein said token identifies said host computer; and

communicate to said host computer over a second communication channel to confirm that said token was issued by said host computer.