Secure electronic commerce

• US 7,949,605 B2
• Filed: 02/22/2002
• Issued: 05/24/2011
• Est. Priority Date: 02/23/2001
• Status: Expired due to Fees

• Current Assignee: Riavera Corp.
• Original Assignee: Mark Itwaru
• Inventors: Itwaru, Mark
• Primary Examiner(s): Hewitt, II; Calvin L
• Assistant Examiner(s): Su; Emile
• Application Number:
  US10/081,265
• Publication Number:
  US 20020162027A1
• Time in Patent Office: 3,378 Days
• Field of Search: 705/64, 705 50- 79
• US Class Current: 705/52
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 30/0613 Third-party assisted
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2517 using port numbers
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/329 : in the application layer [OSI layer 7]

Abstract

Secure transactions are achieved over a public network by using a private network to handle the sensitive information of the transaction. When a client requests a product from a vendor server over a public network, the vendor server notifies a facilitation server on the public network. This results in the client receiving a set of computer readable instructions from the facilitation server. The set of instructions provide access instructions to a transaction server system on the private network so that sensitive transaction information is sent to the transaction server system on the private network rather than over the public Internet. Where the sensitive information is credit card information, the transaction server system may obtain authorization for the transaction from a financial institution and then notify the vendor accordingly. Where the sensitive information is the identity of a user of the client, the transaction server may selectively authorize the transaction without the vendor being apprised of the identity of a user of the client. Secure communications may also be achieved by sending sensitive communications over the private network.

Claims

1. A method for enhancing security of network transactions, comprising:

receiving information relating to a pending transaction over a secure link, said information including access information for a data product, and a purchase amount;

determining an appropriate chargeable telephone number based upon said purchase amount;

storing a transaction identifier, said telephone number, and said access information; and

returning said transaction identifier and said telephone number over said secure link.

2. The method of claim 1 further comprising:

receiving a telephone call made to said telephone number from a caller;

during said call, receiving caller identity information;

during said call, receiving said transaction identifier;

storing said caller identity information with said transaction identifier;

providing said access information to said data product to said caller.

3. The method of claim 2 wherein said telephone number is a flat rate number.

4. The method of claim 2 wherein said telephone number is a fixed charge per minute number and wherein said determining further comprises determining a number of minutes based on said purchase amount and storing said number of minutes.

5. The method of claim 1 wherein said secure link is a data network link.

6. The method of claim 1 wherein said access information comprises a URL and a password.

7. The method of claim 1 wherein said receiving comprises receiving said transaction identifier.

8. The method of claim 1 wherein said receiving, said determining, said storing, and said returning are undertaken at a transaction server system.

9. The method of claim 8 wherein said receiving is receiving from a facilitation server and said returning is returning to said facilitation server.

10. The method of claim 2 wherein said caller identity information comprises at least one of a caller line identification (CLID) and a calling party name display (CPND).

11. A method for enhancing security of network transactions, comprising:

receiving, over a public Internet, information relating to a pending transaction between a vendor server and a client;

sending a message addressed to said client over said public Internet with a set of computer readable instructions having transaction-specific information, said set of computer readable instructions comprising access instructions for connecting said client to a transaction server system on a private network such that sensitive information relating to said transaction is directed to said transaction server system;

wherein said message is a transaction message and further comprising, prior to said sending said transaction message, sending a set-up message addressed to said client over said public Internet with a set of computer executable instructions for determining resources of said client for connecting to said private network;

further comprising receiving from said client over said public Internet an indication of resources of said client and provisioning said set of computer readable instructions based, in part, on said indication of resources, and

wherein said indication of resources indicates said client lacks a modem and wherein said provisioning comprises provisioning said set of computer readable instructions so as to cause a display of said client to display said access instructions and said transaction identifier.