System, method and article of manufacture for secure network electronic payment and credit collection

• US 5,987,140 A
• Filed: 04/26/1996
• Issued: 11/16/1999
• Est. Priority Date: 04/26/1996
• Status: Expired due to Term

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Inventors: Nadig, Deepak S., Rowney, Kevin Thomas Bartholomew
• Primary Examiner(s): GREGORY, BERNARR E
• Application Number:
  US08/639,909
• Time in Patent Office: 1,299 Days
• Field of Search: 380/9, 380/23, 380/24, 380/25, 380/48, 380/49, 380/50, 380/59, 380/28, 380/30, 705/26, 705/27, 705/35, 705/39, 705/40, 705/44, 395/186, 395/187.01
• US Class Current: 705/79
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

Secure transmission of data is provided between a plurality of computer systems over a public communication system, such as the Internet. Secure transmission of data is provided from a customer computer system to a merchant computer system, and for the further secure transmission of data from the merchant computer system to a payment gateway computer system. The payment gateway system evaluates the information and returns authorization or denial of credit via a secure transmission to the merchant which is communicated to the customer by the merchant.

Claims

1. A method for initiating secure communication between a customer computer and a merchant computer connected to a network for receiving and transmitting a payment transaction, comprising the steps of:

(a) establishing a communication between said customer computer and said merchant computer via said network;

(b) identifying an encryption algorithm and a decryption algorithm utilized by said customer computer and said merchant computer;

(c) transmitting an encrypted payment transaction from said customer computer to said merchant computer;

(d) receiving said encrypted payment transaction at said merchant computer and decrypting said encrypted payment transaction utilizing said decryption algorithm; and

(e) reformatting said payment transaction to substantially comply with a third party secure protocol for further payment processing.

2. The method as recited in claim 1, including the step of utilizing the Internet for transmitting information between said customer computer and said merchant computer.

3. The method as recited in claim 1, including the step of transmitting said payment transaction from said merchant computer to a third computer for authorizing or denying credit in said further payment processing.

4. The method as recited in claim 1, wherein said secure third party protocol is a protocol specified by one or more credit associations.

5. A method for initiating secure communication between a first and a second computer connected to a network for receiving and transmitting a payment transaction, comprising the steps of:

(a) obtaining client information for use in said secure communication between said first and said second computer;

(b) establishing a communication between said first and said second computer via said network; and

(c) reformatting said client information into said payment transaction which substantially complies with a third party secure protocol for further payment processing.

6. The method as recited in claim 5, including:

(d) transmitting an encrypted payment transaction from said first computer to said second computer;

(e) receiving said encrypted payment transaction at said second computer and decrypting said encrypted payment utilizing a decryption algorithm; and

(f) performing further payment processing on said payment transaction.

7. The method as recited in claim 5, wherein said client information is obtained via a telephone, fax machine or electronic mail.

8. The method as recited in claim 7, wherein said client information is obtained via a secure general purpose protocol.

9. The method as recited in claim 5, wherein an electronic signature is utilized to authenticate processing of said payment transaction.

10. The method as recited in claim 5, further comprising reversing one or more previous payment transactions.

11. The method as recited in claim 5, wherein said first computer is a merchant computer and said second computer is a gateway computer.

12. Apparatus for initiating payment processing in a customer computer and a merchant computer under the control of software connected to a network for receiving and transmitting a payment transaction, comprising:

(a) means for establishing a communication between said customer computer and said merchant computer via said network;

(b) means for identifying an encryption algorithm and a decryption algorithm utilized by said customer computer and said merchant computer;

(c) means for transmitting an encrypted payment transaction from said customer computer to said second computer;

(d) means for receiving said encrypted payment transaction at said merchant computer and decrypting said encrypted payment transaction utilizing said decryption algorithm; and

(e) means for reformatting said payment transaction to substantially comply with a secure third party protocol for further payment processing.

13. The apparatus as recited in claim 12, including means for utilizing the Internet for transmitting information between said customer computer and said merchant computer.

14. The apparatus as recited in claim 12, including means for transmitting said payment transaction from said merchant computer to a third computer for authorizing or denying credit in said further payment processing.

15. An apparatus for initiating a secure communication between a first and a second computer connected to a network for receiving and transmitting a payment transaction, comprising:

(a) communication hardware utilized by a client to communicate information for use in said secure communication between said first and said second computer;

(b) the first computer under the control of software which establishes said secure communication between said first and said second computer via said network; and

(c) the first computer under the control of software which reformats said payment transaction to substantially comply with a third party secure protocol for further payment processing.

16. The apparatus as recited in claim 15, wherein said first computer is a merchant computer and said second computer is a gateway computer.

17. A computer program embodied on a computer-readable medium for effecting purchase transactions by a customer system at a merchant system and effecting payment for said transactions by a payment system, comprising:

(a) a code segment for controlling secure communication of a purchase request from said customer system to said merchant system using a first communication method, including providing payment information from said customer system to said merchant system;

(b) a code segment for controlling secure processing of said payment information by said merchant system to reformat said payment information into a payment authorization request and securely transmit said payment authorization request from said merchant system to said payment system using a second communication method;

(c) a code segment for controlling the secure processing of said payment authorization request by said payment system to generate a payment authorization response authorizing said purchase and securely transmit said payment authorization response to said merchant system using the second communication method pursuant to which said merchant system fills said purchase request;

(d) a code segment for controlling the secure processing of said payment authorization response by said merchant system to generate a payment capture request and securely transmit said payment capture request to said payment system using the second communication method;

(e) a code segment for controlling the secure processing of said payment capture request by said payment system to generate a payment capture response authorizing payment and transmit said payment capture response to said merchant system using the second communication method; and

(f) a code segment for controlling the secure processing of said payment capture response by said merchant system to effect payment to the merchant system for filling said purchase request.

18. A computer program embodied on a computer-readable medium as recited in claim 17, wherein said secure protocol is a protocol specified by one or more credit associations.

19. A computer program embodied on a computer-readable medium as recited in claim 17, wherein said payment authorization request is generated by reformatting said payment information to substantially comply with a third party secure protocol.

20. A computer program embodied on a computer-readable medium as recited in claim 17, wherein said secure communication between said customer system and said merchant system is transmitted over a first communications system, and wherein said payment authorization request, said payment authorization response, said payment capture request, and said payment capture response are transmitted between said merchant system and said payment system over a second communications system.

21. A computer program embodied on a computer-readable medium as recited in claim 20, wherein said first communications system is a public network system, and wherein said second communications system is a private communications system.

22. A computer program embodied on a computer-readable medium for initiating payment processing in a customer and a merchant computer under the control of software, said customer and said merchant computer connected to a network for receiving and transmitting a payment transaction, comprising:

(a) a code segment for establishing a communication between said customer computer and said merchant computer via said network;

(b) a code segment for identifying an encryption algorithm and a decryption algorithm utilized by said customer computer and said merchant computer;

(c) a code segment for transmitting an encrypted payment transaction from said customer computer to said merchant computer;

(d) a code segment for receiving said encrypted payment transaction at said merchant computer and decrypting said encrypted payment transaction utilizing said decryption algorithm; and

(e) a code segment for reformatting said payment transaction to substantially comply with a secure protocol for further payment processing.

23. A computer program embodied on a computer-readable medium for effecting one or more purchase requests by a merchant computer system and payment for said purchase requests by a payment computer system, comprising:

(a) a code segment controlling communication between a customer computer system and said merchant computer system for effecting said purchase requests, including providing payment information from said customer computer system to said merchant computer system;

(b) a code segment reformatting said payment information to substantially comply with a third party protocol; and

(c) a code segment controlling secure communication between said merchant computer system and said payment computer system for effecting operation on said payment information by said merchant computer system to obtain authorization information from said payment computer system to said merchant computer system pursuant to which said merchant computer system completes said purchase requests.