System and method for performing an electronic financial transaction

• US 6,098,053 A
• Filed: 01/26/1999
• Issued: 08/01/2000
• Est. Priority Date: 01/28/1998
• Status: Expired due to Term

• Current Assignee: Citibank (South Dakota) NA (Citigroup Incorporated)
• Original Assignee: Citibank (South Dakota) NA (Citigroup Incorporated)
• Inventors: Slater, Alan
• Primary Examiner(s): MacDonald, Allen R.
• Assistant Examiner(s): Thompson, Jr., Forest
• Application Number:
  US09/237,739
• Time in Patent Office: 553 Days
• Field of Search: 705/44, 705/35, 364/479.02, 380/23
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/0425 the cheque being electronic only
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code

Abstract

A system and method for performing an on-line ATM/POS transaction utilizing checking or savings account funds over a public access network is disclosed. The invention comprises creating an electronic financial transaction instruction comprising card information and security information that are encrypted for secure transmission over the public access network. The card information identifies a checking or savings account number of a purchaser. The security information identifies a personal identification number associated with the identified account number that authorizes the use of the account number in an on-line ATM/POS transaction. The financial transaction instruction is decrypted by a financial institution and reformatted to form a transaction request suitable for transmission over an on-line ATM/POS transaction system. The transaction request is then processed like a typical ATM or merchant POS on-line ATM/POS transaction. As such, approval and settlement of the financial transaction instruction is obtained in real time. Thus, the present invention provides an on-line ATM/POS transaction capability utilizing checking or savings account funds from a public access network, such as the Internet or electronic mail.

Claims

1. A method of performing a financial transaction between a purchaser and a merchant, comprising:

under control of a service provider having a direct connection to an on-line ATM/POS transaction system,

receiving via a first public access network an electronic financial transaction instruction initiated by the purchaser to make a purchase over the first public access network from the merchant, the financial transaction instruction comprising encrypted card information, encrypted security information and transaction amount information each suitable for use in an on-line ATM/POS transaction, wherein the card information and security information are encrypted according to ATM/POS transaction system standards, the card information including card number data and the security information including personal identification number data;

retrieving the card number data from the financial transaction instruction, wherein the card number data is associated with a checking or savings account in purchaser'"'"'s bank for funding the financial transaction;

retrieving the personal identification number data, wherein the personal identification number data is associated with the card number data to identify the purchaser and authorize use of the card number data; and

retrieving the transaction amount information;

generating a transaction request in a format for processing in the on-line ATM/POS transaction system using the card information, the security information and the transaction amount information; and

forwarding the transaction request via the on-line ATM/POS transaction system to the purchaser'"'"'s bank for authorization of the financial transaction between the purchaser and the merchant.

2. A method of performing a financial transaction as recited in claim 1, wherein the received financial transaction instruction further comprises a first secure mechanism having at least a first level of protection comprising performing an operation on the financial transaction instruction to provide verification of the identity of the purchaser and the integrity of the financial transaction instruction while leaving all of the financial transaction instruction in the clear except for the encrypted card information and the encrypted security information.

3. A method of performing a financial transaction as recited in claim 2, wherein the first level of protection comprises digitally signing the financial transaction instruction with the digital signature of the purchaser.

4. A method of performing a financial transaction as recited in claim 2, wherein the first level of protection comprises appending a digital certificate of the purchaser to the financial transaction instruction.

5. A method of performing a financial transaction as recited in claim 2, wherein the first secure mechanism further comprises a second level of protection including encrypting the financial transaction instruction for secure transmission over the first public access network.

6. A method of performing a financial transaction as recited in claim 5, wherein the encrypting the financial transaction for the second level of protection comprises encrypting in a manner decryptable by the merchant.

7. A method of performing a financial transaction as recited in claim 5, wherein the encrypting the financial transaction for the second level of protection comprises encrypting in a manner decryptable by the service provider.

8. A method of performing a financial transaction as recited in claim 5, further comprising the service provider decrypting and verifying the financial transaction instruction.

9. A method of performing a financial transaction as recited in claim 8, further comprising transmitting to the merchant an authorization message indicating the approval status of the transaction request.

10. A method of performing a financial transaction as recited in claim 2, wherein the first public access network is the Internet.

11. A method of performing a financial transaction as recited in claim 10, wherein the Internet protocol is the World Wide Web.

12. A method of performing a financial transaction as recited in claim 10, wherein the Internet protocol is electronic mail.

13. A method of performing a financial transaction as recited in claim 2, further comprising receiving merchant payment instructions appended to the financial transaction instruction.

14. A method of performing a financial transaction as recited in claim 13, wherein the received financial transaction instruction further comprises a second secure mechanism that protects the security of the financial transaction instruction for transmission over a second public access network, wherein the second secure mechanism provides verification of the identity of the merchant and the integrity of the financial transaction instruction.

15. A method of performing a financial transaction as recited in claim 14, wherein the second secure mechanism provides at least a third level of protection comprising performing an operation on the financial transaction instruction to provide verification of the identity of the merchant and the integrity of the financial transaction instruction while leaving all of the financial transaction instruction in the clear except for the encrypted card information and security information.

16. A method of performing a financial transaction as recited in claim 15, wherein the third level of protection comprises digitally signing the financial transaction instruction with the digital signature of the merchant.

17. A method of performing a financial transaction as recited in claim 15, wherein the third level of protection comprises appending a digital certificate of the merchant to the financial transaction instruction.

18. A method of performing a financial transaction as recited in claim 15, wherein the second secure mechanism further includes a second type of protection comprising encrypting the financial transaction instruction for secure transmission over the second public access network.

19. A method of performing a financial transaction as recited in claim 18, wherein encrypting the financial transaction for the second type of protection comprises encrypting in a manner decryptable by a financial institution providing access to the on-line ATM/POS transaction system.

20. A method of performing a financial transaction as recited in claim 18, further comprising decrypting the financial transaction instruction.

21. A method of performing a financial transaction as recited in claim 18, further comprising transmitting to the merchant an authorization message indicating the approval status of the transaction request.

22. A method of performing a financial transaction as recited in claim 14, wherein the second secure mechanism comprises encrypting the financial transaction instruction.

23. A method of performing a financial transaction between a purchaser and a merchant, comprising:

under control of a purchaser computer connected through a first public access network to the merchant to make a purchase from the merchant,

generating an electronic financial transaction instruction for the purchaser to make a purchase over the first public access network from the merchant, the financial transaction instruction comprising card information, security information and transaction amount information each suitable for use in an on-line ATM/POS transaction, wherein the card information and security information are encrypted according to ATM/POS transaction system standards;

including card number data with the card information, wherein the card number data is associated with a checking or savings account in purchaser'"'"'s bank for funding the on-line ATM/POS transaction;

including personal identification number data with the security information, wherein the personal identification number data is associated with the card number data to identify the purchaser and authorize use of the card number data; and

protecting the security of the financial transaction instruction for transmission over the first public access network by utilizing a first secure mechanism, wherein the first secure mechanism comprises a first level of protection and a second level of protection, wherein the first level of protection comprises performing an operation on the financial transaction instruction to provide verification of the identity of the purchaser and the integrity of the financial transaction instruction while leaving all of the financial transaction instruction in the clear except for the encrypted card information and security information, and wherein the second level of protection comprises encrypting the financial transaction instruction for secure transmission over the first public access network,

under control of a service provider having a direct connection to the on-line ATM/POS transaction system,

receiving the financial transaction instruction;

retrieving the card information, the security information and the transaction amount information;

generating a transaction request in a format for processing in the on-line ATM/POS transaction system using the card information, the security information and the transaction amount information; and

forwarding the transaction request via the on-line ATM/POS transaction system to the purchaser'"'"'s bank for authorization of the financial transaction between the purchaser and the merchant.

24. A method of performing a financial transaction as recited in claim 23, wherein creating the financial transaction instruction is performed on a personal computer external from the on-line ATM/POS transaction system.

25. A method of performing a financial transaction as recited in claim 24, wherein the first public access network is the Internet.

26. A method of performing a financial transaction as recited in claim 25, wherein the Internet protocol is the World Wide Web.

27. A method of performing a financial transaction as recited in claim 25, wherein the Internet protocol is electronic mail.

28. A method of performing a financial transaction as recited in claim 24, wherein the first level of protection comprises digitally signing the financial transaction instruction with the digital signature of the purchaser.

29. A method of performing a financial transaction as recited in claim 24, wherein the first level of protection comprises appending a digital certificate of the purchaser to the financial transaction instruction.

30. A method of performing a financial transaction as recited in claim 24, further comprising the service provider transmitting to the merchant an authorization message indicating the approval status of the transaction request.

31. A method of performing a financial transaction between a purchaser and a merchant, comprising:

under control of a purchaser computer connected through a first public access network to the merchant to make a purchase from the merchant,

generating an electronic purchaser payment instruction for the purchaser to make a purchase over the first public access network from the merchant, the purchaser payment instruction comprising card information, security information and transaction amount information each suitable for use in an on-line ATM/POS transaction, wherein the card information and security information are encrypted according to ATM/POS transaction system standards;

including card number data with the card information, wherein the card number data is associated with a checking or savings account in purchaser'"'"'s bank for funding the on-line ATM/POS transaction;

including personal identification number data with the security information, wherein the personal identification number data is associated with the card number data to identify the purchaser and authorize use of the card number data;

protecting the security of the purchaser payment instruction for transmission over the first public access network by utilizing a first secure mechanism, wherein the first secure mechanism comprises a first level of protection and a second level of protection, wherein the first level of protection comprises performing an operation on the purchaser payment instruction to provide verification of the identity of the purchaser and the integrity of the purchaser payment instruction while leaving all of the purchaser payment instruction in the clear except for the encrypted card information and security information, and wherein the second level of protection comprises encrypting the purchaser payment instruction for secure transmission over the first public access network;

under control of the merchant,

appending merchant payment instructions to the purchaser payment instruction to form a financial transaction instruction; and

protecting the security of the financial transaction instruction for transmission over a second public access network by utilizing a second secure mechanism, wherein the second secure mechanism provides verification of the identity of the merchant and the integrity of the financial transaction instruction;

under control of a service provider having a direct connection to the on-line ATM/POS transaction system,

receiving the financial transaction instruction;

retrieving the card information, the security information and the transaction amount information;

generating a transaction request in a format for processing in the on-line ATM/POS transaction system using the card information, the security information and the transaction amount information;

forwarding the transaction request via the on-line ATM/POS transaction system to the purchaser'"'"'s bank for authorization;

receiving a response message from the purchaser'"'"'s bank indicating an approval or denial of the transaction request;

generating an authorization message based on the indicated approval or denial in the response message; and

forwarding the authorization message to the merchant, over the first public access network, that notifies the merchant of the approval or denial of the financial transaction.

32. A method of performing a financial transaction as recited in claim 31, wherein the first public access network and the second public access network are both the Internet.

33. A method of performing a financial transaction as recited in claim 32, wherein the Internet protocol is the World Wide Web.

34. A method of performing a financial transaction as recited in claim 32, wherein the Internet protocol is electronic mail.

35. A method of performing a financial transaction as recited in claim 31, wherein the first level of protection comprises digitally signing the financial transaction instruction with the digital signature of the purchaser.

36. A method of performing a financial transaction as recited in claim 31, wherein the first level of protection comprises appending a digital certificate of the purchaser to the financial transaction instruction.

37. A method of performing a financial transaction as recited in claim 31, wherein the second secure mechanism provides at least a third level of protection comprising performing an operation on the financial transaction instruction to provide verification of the identity of the merchant and the integrity of the financial transaction instruction while leaving all of the financial transaction instruction in the clear except for the encrypted card information and security information.

38. A method of performing a financial transaction as recited in claim 37, wherein the third level of protection comprises digitally signing the financial transaction instruction with the digital signature of the merchant.

39. A method of performing a financial transaction as recited in claim 37, wherein the third level of protection comprises appending a digital certificate of the merchant to the financial transaction instruction.

40. A method of performing a financial transaction as recited in claim 37, wherein the second secure mechanism further includes a fourth level of protection comprising encrypting the financial transaction instruction for secure transmission over the second public access network.

41. A method of performing a financial transaction as recited in claim 40, wherein the encrypting the financial transaction for the fourth level of protection comprises encrypting in a manner decryptable by a financial institution providing access to the on-line ATM/POS transaction system.

42. A method of performing a financial transaction as recited in claim 31, wherein the second secure mechanism comprises encrypting the financial transaction instruction.

43. A financial transaction system, comprising:

an electronic financial transaction instruction in a first secured format initiated by a purchaser to make a purchase from a merchant over an electronic public access network, said financial transaction instruction comprising encrypted card information and security information, wherein said card information comprises identification of a checking or savings account held by said purchaser to be debited in said financial transaction and wherein said security information comprises a personal identification number known by said purchaser to authorize the use of said card information in said on-line ATM/POS transaction, and wherein said first secured format is a format that enables secure transmission over the first public access network of said financial transaction instruction to guarantee the identity of said purchaser and the integrity of said financial transaction instruction; and

a service provider connected to an on-line ATM/POS transaction system and connected to the first public access network, the service provider receiving the financial transaction instruction over the first public access network and generating a transaction request in a format for processing in the on-line ATM/POS transaction system using the card information, the security information and the transaction amount information, the service provider forwarding the transaction request via the on-line ATM/POS transaction system to the purchaser'"'"'s bank for authorization and receiving a response message from the purchaser'"'"'s bank indicating an approval or denial of the transaction request, the service provider generating an authorization message based on the indicated approval or denial in the response message and forwarding the authorization message to the merchant, over the first public access network, that notifies the merchant of the approval or denial of the financial transaction.

44. A method of performing a financial transaction, comprising:

accessing by a purchaser via a first public access network a site of a merchant;

generating a purchaser payment instruction, by the purchaser via the public access network, to order a purchase from the merchant, the purchase payment instruction including an exchange of a transaction amount between the purchaser and the merchant;

attaching card information from a memory of a purchaser'"'"'s card to the purchaser payment instruction, the card information including purchaser account information associated with a purchaser'"'"'s account at a purchaser'"'"'s bank to be debited by the transaction amount;

attaching a personal identification number known by the purchaser to the purchaser payment instruction, the personal identification number associated with the account information to authorize the use of the account information;

encrypting the card information and the personal identification number using an encryption standard compatible with a format for processing in an ATM/POS transaction system;

applying a first secure mechanism to the purchaser payment instruction, the first secure mechanism enabling secure transmission over the first public access network of the purchaser payment instruction to guarantee the identity of the purchaser and the integrity of the purchaser payment instruction;

receiving the purchaser payment instruction by the merchant;

appending a merchant payment instruction to the purchaser payment instruction to form a financial transaction instruction, the merchant payment instruction including merchant account information associated with a merchant'"'"'s account at a merchant'"'"'s bank to be credited by the transaction amount;

applying a second secure mechanism to the financial transaction instruction, the second secure mechanism enabling secure transmission over a second public access network of the financial transaction instruction to guarantee the identity of the merchant and the integrity of the financial transaction instruction;

receiving the financial transaction instruction at a service provider via the second public access network, the service provider having a connection with the on-line ATM/POS transaction system;

retrieving, by the service provider, the card information, the security information and the transaction amount;

generating, by the service provider, a transaction request in a format for processing in the on-line ATM/POS transaction system using the card information, the security information and the transaction amount;

forwarding, by the service provider, the transaction request to the purchaser'"'"'s bank via the on-line ATM/POS transaction system for authorization;

receiving, by the service provider, a response message from the purchaser'"'"'s bank indicating an approval or denial of the transaction request;

generating, by the service provider, an authorization message based on the indicated approval or denial in the response message; and

forwarding, by the service provider, the authorization message to the merchant, over the first public access network, that notifies the merchant of the approval or denial of the financial transaction.

45. The method of claim 44, wherein the first public access network and the second public access network are both the Internet.

46. The method of claim 44, wherein the first secure mechanism comprises a first level of protection and a second level of protection, wherein the first level of protection comprises a security method selected from the group consisting of applying a digital signature of the purchaser to the purchaser payment instruction and appending a digital certificate of the purchaser to the purchaser payment instruction, and wherein the second level of protection comprises applying a first encryption format to the purchaser payment instruction, where the first encryption format is decryptable by the purchaser and the service provider.

47. The method of claim 44, wherein the second secure mechanism comprises a third level of protection and a fourth level of protection, wherein the third level of protection comprises a security method selected from the group consisting of applying a digital signature of the merchant to the financial transaction instruction and appending a digital certificate of the purchaser to the financial transaction instruction, and wherein the fourth level of protection comprises applying a second encryption format to the financial transaction instruction, where the second encryption format is decryptable by the merchant and the service provider.