Merchant system facilitating an online card present transaction

• US 7,873,580 B2
• Filed: 02/23/2009
• Issued: 01/18/2011
• Est. Priority Date: 03/15/2001
• Status: Expired due to Fees

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Hussain, Sohail M., Hobson, Carol Lee
• Primary Examiner(s): Fischer, Andrew J.
• Assistant Examiner(s): KUCAB, JAMIE R
• Application Number:
  US12/390,912
• Publication Number:
  US 20090157557A1
• Time in Patent Office: 694 Days
• Field of Search: 705/67, 380/52, 726/9, 713/159
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]

Abstract

An online card-present transaction system facilitates card-present type transactions with a merchant over a public network. A host system is configured to accept authentication data from a user via an authentication device. The host system, after authenticating a user is configured to retrieve the user'"'"'s account information from a user database system and translate a user account number into a temporary transaction number. The temporary transaction number is then transmitted directly from the host system to the merchant, thereby eliminating the need for the user to send to the merchant over the internet, the user'"'"'s transaction account number.

Claims

1. A system comprising a merchant computer for receiving online card present transactions and a host computer,

said merchant computer programmed to:

detect a presence of a smart card reader connected to a client computer by a merchant computer;

present said client computer with a payment option for using a smart card for payment in response to said detection of said smart card reader;

receive a selection of said payment option;

redirect said client computer to a website of a host computer in response to said detection; and

receive account information including a secondary transaction account code from said host computer over an authenticated communication channel, wherein said account information and said secondary transaction account code facilitates completion of a transaction;

said host computer programmed to;

prompt to insert a smart card into said smart card reader;

receive a digital certificate from said smart card;

generate said secondary transaction account code based on authentication of said digital certificate, wherein said secondary transaction account code is valid for a single purchase transaction;

associate said secondary transaction account code with a primary account code; and

communicate said secondary transaction account code to said client computer, wherein said client computer submits a payment request based on said secondary transaction account code.

2. The system of claim 1, wherein said host computer is further programmed to transmit a challenge string to said client computer.

3. The system of claim 2, wherein said challenge string prompts to insert said smart card into said smart card reader.

4. The system of claim 3, wherein said smart card stores said digital certificate.

5. The system of claim 1, wherein said host computer is further programmed to receive a copy of said digital certificate from said client computer.

6. The system of claim 1, wherein said host computer is further programmed to receive a signed challenge string from said client computer.

7. The system of claim 6, wherein said challenge string is signed to create said signed challenge string.

8. The system of claim 5, wherein said digital certificate is accessed in response to entry of a Personal Identification Number (PIN).

9. The system of claim 1, wherein said host computer is further programmed to authenticate said smart card using a signed challenge string.

10. The system of claim 1, wherein said host computer is further programmed to authenticate said smart card using a copy of said digital certificate.

11. The system of claim 1, wherein said host computer is further programmed to:

transmit a challenge string to said client computer, wherein said challenge string prompts to insert said smart card into said smart card reader, wherein said smart card stores a digital certificate;

receive a copy of said digital certificate and a signed challenge string from said client computer, wherein said challenge string is signed to create said signed challenge string and said digital certificate is accessed in response to entry of a Personal Identification Number (PIN); and

,

authenticate said smart card using said signed challenge string and said copy of said digital certificate.

12. The system of claim 1, wherein said host is further programmed to generate said secondary transaction account code by receiving an encrypted host computer signature.

13. The system of claim 12, wherein said host is further programmed to generate said secondary transaction account code by decrypting said encrypted host computer signature to determine that said account information originated with said host computer.

14. The system of claim 1, wherein said merchant computer is further programmed to establish an authenticated communication channel.

15. The system of claim 1, wherein said merchant computer is further programmed to receive a host computer token over a first communication channel.

16. The system of claim 15, wherein said host computer token identifies said host computer.

17. The system of claim 1, wherein said merchant computer is further programmed to communicate to said host computer over a second communication channel to confirm a said host computer token was issued by said host computer.

18. The system of claim 1, wherein said merchant computer is further programmed to:

establish an authenticated communication channel;

receive a host computer token over a first communication channel, wherein said token identifies said host computer; and

communicate to said host computer over a second communication channel to confirm that said token was issued by said host computer.