Online card present transaction

• US 8,484,134 B2
• Filed: 09/24/2007
• Issued: 07/09/2013
• Est. Priority Date: 03/15/2001
• Status: Expired due to Fees

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Hussain, Sohail M, Hobson, Carol Lee
• Primary Examiner(s): KUCAB, JAMIE R
• Application Number:
  US11/860,338
• Publication Number:
  US 20080010220A1
• Time in Patent Office: 2,115 Days
• Field of Search: 705/67
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]

Abstract

An online card-present transaction system facilitates card-present type transactions with a merchant over a public network. A host system is configured to accept authentication data from a user via an authentication device. The host system, after authenticating a user is configured to retrieve the user'"'"'s account information from a user database system and translate a user account number into a temporary transaction number. The temporary transaction number is then transmitted directly from the host system to the merchant, thereby eliminating the need for the user to send to the merchant over the internet, the user'"'"'s transaction account number.

Claims

1. A system comprising:

a merchant computer processor for receiving online card present transactions,

a tangible, non-transitory memory configured to communicate with the processor,

said tangible, non-transitory memory having instructions stored thereon that, in response to execution by said processor, cause said processor to perform operations comprising;

detecting, by said merchant computer processor, a presence of a smart card reader communicating with a client computer;

presenting, by said merchant computer processor, said client computer with a payment option for using a smart card for payment in response to said detection of said smart card reader;

receiving, by said merchant computer processor, a selection of said payment option;

redirecting, by said merchant computer processor, said client computer to a website of a host computer in response to said selection;

receiving, by said merchant computer processor, account information from said host computer over an authenticated communication channel; and

facilitating, by said merchant computer processor, a transaction using said account information.

2. The system of claim 1, wherein the account information includes a secondary transaction account code.

3. The system of claim 1, wherein said host computer is programmed to prompt said client computer to insert a smart card into said smart card reader.

4. The system of claim 1, wherein said host computer is programmed to receive a digital certificate from said smart card.

5. The system of claim 1, wherein said host computer performs operations comprising:

generating, by said host computer, a secondary transaction account code,

associating, by said host computer, said secondary transaction account code with a primary account code; and

communicating, by said host computer, said secondary transaction account code to said client computer.

6. A computer-based method comprising:

detecting, by a merchant computer for conducting a transaction, a presence of a smart card reader communicating with a client computer;

presenting, by said merchant computer, said client computer with a payment option for using a smart card for payment in response to said detection of said smart card reader;

receiving, by said merchant computer, a selection of said payment option;

redirecting, by said merchant computer, said client computer to a website of a host computer in response to said selection;

receiving, by said merchant computer, account information from said host computer over an authenticated communication channel; and

facilitating, by said merchant computer, a transaction using said account information.

7. The method of claim 6, wherein said account information includes a secondary transaction account code.

8. The method of claim 6, wherein said host computer prompts said client computer to insert a smart card into said smart card reader.

9. The method of claim 6, wherein said host computer receives a digital certificate from said smart card.

10. The method of claim 6, wherein said host computer generates a secondary transaction account code, associates said secondary transaction account code with a primary account code and communicates said secondary transaction account code to said client computer.

11. The method of claim 6, wherein said account information includes a secondary transaction account code, and wherein said secondary transaction account code is valid for a single purchase transaction.

12. The method of claim 6, wherein said host computer further transmits a challenge string to said client computer.

13. The method of claim 12, wherein said challenge string prompts to insert said smart card into said smart card reader.

14. The method of claim 13, wherein said smart card stores a digital certificate.

15. The method of claim 6, wherein said host computer receives a copy of a digital certificate from said client computer.

16. The method of claim 6, wherein said host computer receives a signed challenge string from said client computer.

17. The method of claim 16, wherein said challenge string is signed to create a signed challenge string.

18. The method of claim 14, wherein said digital certificate is accessed in response to entry of a Personal Identification Number (PIN).

19. The method of claim 6, wherein said host computer authenticates said smart card using at least one of a copy of a digital certificate and a signed challenge string.

20. An article of manufacture including a non-transitory, tangible computer readable medium having instructions stored thereon that, in response to execution by a merchant computer for conducting a transaction, cause said merchant computer to perform operations comprising:

detecting, by said merchant computer, a presence of a smart card reader communicating with a client computer;

presenting, by said merchant computer, said client computer with a payment option for using a smart card for payment in response to said detection of said smart card reader;

receiving, by said merchant computer, a selection of said payment option;

redirecting, by said merchant computer, said client computer to a website of a host computer in response to said selection;

receiving, by said merchant computer, account information from said host computer over an authenticated communication channel; and

facilitating, by said merchant computer, a transaction using said account information.