Method and apparatus for communicating state information in an electronic transaction message

• US 7,707,117 B1
• Filed: 03/24/2003
• Issued: 04/27/2010
• Est. Priority Date: 03/24/2003
• Status: Active Grant

• Current Assignee: Cybersource Corporation (Visa, Inc.)
• Original Assignee: Cybersource Corporation (Visa, Inc.)
• Inventors: Ford, Robert John, Jimenez, Michael Pe, Wright, William A.
• Primary Examiner(s): Fischer; Andrew J.
• Assistant Examiner(s): KUCAB, JAMIE R
• Application Number:
  US10/396,211
• Time in Patent Office: 2,591 Days
• Field of Search: 705/57, 705/64, 726/26
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/38 Payment protocols; Details thereof
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/389 Keeping log of transactions for guaranteeing non-repudiation of a transaction
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

A method and apparatus are disclosed for communicating state information in an electronic message. First data representing a state of an electronic transaction is encoded, to result in creating an encoded message element that is impractical for a recipient to decode. For example, steganographic invisibility encoding may be used. The encoded message element is sent as part of a first message associated with the transaction. A second message associated with the transaction is received, and the third message includes the encoded message element. The encoded message element is decoded, to result in recovering the state of the transaction, which is used in processing the second message. As a result, large volumes of state information are sent to clients for local, transitory storage, precluding the need for a large state data store on the server side.

Claims

1. A method of communicating state information in an electronic message, the method comprising the computer-implemented steps of:

a transaction processor receiving a first request message of a transaction;

the transaction processor encoding first data representing a state of the transaction to result in creating an encoded message element that is impractical for a recipient to decode;

the transaction processor sending the encoded message element as part of a first response message associated with the transaction;

the transaction processor receiving a second request message associated with the transaction and responsive to the first response message, wherein the second request message includes the encoded message element; and

the transaction processor recovering the state of the transaction by decoding the encoded message element,

wherein the encoding step comprises steganographically encoding the first data in second data, and

wherein the first response message is a credit card authorization response, and the second request message is a credit card billing request associated with the credit card authorization response.

2. A method as recited in claim 1, wherein the encoding step comprises steganographically encoding the first data in second data, wherein a first length of the first data is related to a second length of the second data by a ratio that is sufficient to hide the first data.

3. A method as recited in claim 1, wherein the encoding step comprises steganographically encoding the first data in randomly selected second data.

4. A method as recited in claim 1, wherein the encoding step comprises steganographically encoding the first data in second data using an encoding algorithm that is selected from a fixed plurality of encoding algorithms, and wherein the encoded message element further comprises an identifier of the selected encoding algorithm.

5. A method as recited in claim 1, wherein the encoding step comprises steganographically encoding the first data in second data using an encoding algorithm that is selected from a first plurality of encoding algorithms, wherein the encoded message element further comprises an identifier of the selected encoding algorithm, and wherein the first plurality of encoding algorithms is periodically changed by selecting new encoding algorithms from among a second plurality of encoding algorithms.

6. A method as recited in claim 1, wherein the sending step comprises sending the encoded message element as part of a reply message associated with the transaction, without storing the state.

7. A method as recited in claim 1, wherein the step of receiving the second request message comprises receiving the second request message associated with the transaction, wherein the second request message includes the encoded message element in unmodified form.

8. A method as recited in claim 1, further comprising the steps of using the decoded state in processing the second request message, and repeating the preceding steps until completing processing of a transaction that is associated with the first request message, first response message, and second request message.

9. A method as recited in claim 1, wherein the first response message conforms to an XML-based protocol.

10. A method as recited in claim 1, wherein the encoding step is performed in response to receiving a credit card authorization request message and receiving a credit card authorization code.

11. A method as recited in claim 1, further comprising the steps of:

receiving the second request message;

temporarily storing the encoded message element;

performing an e-commerce transaction with a customer; and

creating and sending a third response message that includes the encoded message element in unmodified form.

12. A method as recited in claim 1, wherein the step of encoding first data comprises the steps of:

breaking the first data into one or more grains;

generating a distractor set;

disguising the grains to appear indistinguishable from the distractors;

determining a steganographic encoding ratio;

generating a placement map to determine the sequence and location of grains in the distractor mix;

generating an identifier that uniquely identifies values used in the preceding steps to enable later decoding of the first data; and

hiding the encoded packet in the electronic message.

13. A method as recited in claim 1, wherein the step of encoding first data comprises the steps of:

granularizing the first data into a grain sequence;

determining, based on a number of grains in the grain sequence, an encoding ratio;

providing the grain sequence to a resemblance mask to result in generating a semblance sequence;

generating the second data as a distractor sequence having a number of distractors greater than the number of grains based on the encoding ratio;

generating a placement map that specifies where to place the grains of the grain sequence among the distractors in the distractor sequence;

encoding the first data by arranging the grains of the grain sequence among the distractors of the distractor sequence as specified by the placement map; and

placing the first data in the electronic message.

14. A method of communicating state information relating to an electronic commerce transaction that is performed among a merchant and a transaction processor, the method comprising the computer-implemented steps of:

a transaction processor receiving a first request message associated with the electronic commerce transaction from a merchant;

the transaction processor creating and storing first data representing a state of the electronic commerce transaction;

the transaction processor steganographically encoding the first data in second data to result in creating an encoded message element;

the transaction processor communicating the encoded message element to the merchant as part of a second response message associated with the electronic commerce transaction;

the transaction processor receiving a third request message from the merchant associated with the electronic commerce transaction and responsive to the second response message, wherein the third request message includes the encoded message element;

the transaction processor recovering the state of the electronic commerce transaction by decoding the encoded message element; and

the transaction processor using the recovered state in processing the third request message,

wherein the second response message is a credit card authorization response, and the third request message is a credit card billing request associated with the credit card authorization response.

15. A computer-readable medium carrying one or more sequences of instructions for communicating state information in an electronic message, which instructions, when executed by one or more processors, cause the one or more processors to carry out:

encoding first data representing a state of an electronic commerce transaction to result in creating an encoded message element that is impractical for a recipient to decode;

sending the encoded message element as part of a first response message associated with the electronic commerce transaction;

receiving a second request message associated with the electronic commerce transaction and responsive to the first response message, wherein the second request message includes the encoded message element; and

recovering the state of the electronic commerce transaction by decoding the encoded message element,

wherein the encoding step comprises steganographically encoding the first data in second data, and

wherein the first response message is a credit card authorization response, and the second request message is a credit card billing request associated with the credit card authorization response.

16. An apparatus for communicating state information in an electronic message, comprising:

a network interface that is coupled to the data network for receiving one or more packet flows therefrom;

a processor;

one or more stored sequences of instructions which, when executed by the processor, cause the processor to carry out;

encoding first data representing a state of an electronic customer-merchant transaction to result in creating an encoded message element that is impractical for a recipient to decode;

sending the encoded message element as part of a first response message associated with the transaction;

receiving a second request message associated with the same transaction and responsive to the first response message, wherein the second request message includes the encoded message element; and

recovering the state of the transaction by decoding the encoded message element,

wherein the encoding step comprises steganographically encoding the first data in second data, and

wherein the first response message is a credit card authorization response, and the second request message is a credit card billing request associated with the credit card authorization response.

17. An apparatus as recited in claim 16, wherein encoding first data comprises:

encoding the first data steganographically in randomly selected second data.

18. An apparatus as recited in claim 16, wherein encoding first data comprises:

encoding the first data steganographically in second data using an encoding algorithm that is selected from a fixed plurality of encoding algorithms, and wherein the encoded message element further comprises an identifier of the selected encoding algorithm.

19. An apparatus as recited in claim 16, wherein encoding first data comprises:

encoding the first data steganographically in second data using an encoding algorithm that is selected from a first plurality of encoding algorithms, wherein the encoded message element further comprises an identifier of the selected encoding algorithm, and wherein the first plurality of encoding algorithms is periodically changed by selecting new encoding algorithms from among a second plurality of encoding algorithms.

20. An apparatus as recited in claim 16, wherein sending the encoded message element comprises:

sending the encoded message element as part of a reply message associated with the transaction, without storing the state.

21. An apparatus as recited in claim 16, wherein the one or more sequences of instructions, when executed by the processor, cause the processor further to carry out:

using the decoded state in processing the second request message; and

repeating the preceding steps until completing processing of a transaction that is associated with the first request message, first response message, and second request message.

22. An apparatus as recited in claim 16, wherein the one or more sequences of instructions, when executed by the processor, cause the processor further to carry out:

receiving the second request message;

storing temporarily the encoded message element;

performing an e-commerce transaction with a customer; and

creating and sending a third response message that includes the encoded message element in unmodified form.