Using confidential information to prepare a request and to suggest offers without revealing confidential information

• US 9,317,849 B2
• Filed: 11/09/2011
• Issued: 04/19/2016
• Est. Priority Date: 01/19/2001
• Status: Expired due to Term

• Current Assignee: Mastercard Mobile Transactions Solutions, Inc. (MasterCard Incorporated)
• Original Assignee: Mastercard Mobile Transactions Solutions, Inc. (MasterCard Incorporated)
• Inventors: Pitroda, Satyan G., Desai, Mehul
• Primary Examiner(s): Coppola, Jacob C.
• Application Number:
  US13/292,836
• Publication Number:
  US 20120109672A1
• Time in Patent Office: 1,623 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/045 using payment protocols involving tickets
• CPC Class Codes: G06Q 20/047 using payment protocols involving electronic receipts
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/145 Payments according to the detected use or quantity
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 : Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 : Identity check for transactions
• CPC Class Codes: G06Q 20/42 : Confirmation, e.g. check or permission by the legal debtor of payment
• CPC Class Codes: G06Q 2220/00 : Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/06 : Buying, selling or leasing transactions
• CPC Class Codes: G16H 10/60 : for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16Z 99/00 : Subject matter not provided for in other main groups of this subclass
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 : for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0838 : using one-time-passwords

Abstract

Methods and systems are provided for supporting electronic transactions, including transactions that are provided with per-user, per-device and per-domain security across domains of multiple service providers.

Claims

1. A method of suggesting a vendor offer comprising:

registering an electronic transaction device;

receiving from the electronic transaction device transaction information for at least one transaction conducted via the transaction device through a portion of a plurality of vendor accounts;

receiving from the electronic transaction device and storing on a non-transient computer readable medium user information designated as confidential at a transaction service provider, wherein the confidential information comprises a plurality of user accounts, the received transactional information comprising a total, date, and vendor for the plurality of accounts, and personal information for the user;

retrieving over a network connecting the transaction service provider with a plurality of vendors associated with the plurality of vendor accounts transaction data for a portion of the plurality of vendor accounts;

comparing the received transaction information with the retrieved transaction data;

communicating certain stored user information selected by the user without identifying the user over a network with a plurality of vendors, wherein vendor information for at least one of the plurality of vendors is accessible by the transaction service provider from a database that includes service or product information for at least a portion of the plurality of vendors, and in response receiving one or more offers from at least one of the plurality of vendors;

suggesting a transaction for at least one of the one or more offers to the user based at least in part on the received user information; and

presenting the at least one suggested offer to the user.

2. The method of claim 1, wherein presenting the at least one suggested offer to a user includes presenting the at least one suggested offer to a consumer performing a transaction through a point of sale system.

3. The method of claim 2, wherein the consumer is performing the transaction via an electronic transaction device.

4. The method of claim 3, further comprising receiving a request to perform a transaction for the suggested offer at the transaction service provider.

5. The method of claim 4, further comprising in response to receiving the request, transferring by the transaction service provider an electronic representation of authentication-based trust established between the vendor and the transaction service provider to the electronic transaction device and an electronic representation of authentication-based trust established between the electronic transaction device and the transaction service provider to the vendor.

6. The method of claim 5, further comprising securing a transaction for the accepted offer by the transaction service provider authenticating the transaction via a three-dimensional security protocol that comprises separate authentication protocols for each of the user, the electronic transaction device and the vendor.

7. The method of claim 2, wherein the consumer is performing the transaction via a conventional plastic transaction card.

8. A method of suggesting a service institution offer comprising:

registering an electronic transaction device;

receiving from the electronic transaction device transaction information for at least one transaction conducted via the transaction device through a portion of a plurality of service institution accounts;

receiving from the electronic transaction device and storing on a non-transient computer readable medium user information designated as confidential at a transaction service provider, wherein the confidential information comprises a plurality of user accounts, the received transactional information comprising a total, date, and service institution for the plurality of accounts, and personal information for the user;

retrieving over a network connecting the transaction service provider with a plurality of service institutions associated with the plurality of service institution accounts transaction data for a portion of the plurality of vendor accounts;

comparing the received transaction information with the retrieved transaction data;

communicating certain stored user information selected by the user without identifying the user over a network with a plurality of service institutions, wherein service institution information for at least one of the plurality of service institutions is accessible by the transaction service provider from a database that includes service or product information for at least a portion of the plurality of service institutions and in response receiving one or more offers from at least one of the plurality of service institutions;

suggesting a transaction for at least one of the one or more offers to the user based at least in part on the received user information; and

presenting the at least one suggested offer to the user.

9. The method of claim 8, wherein presenting the at least one suggested offer to a user includes presenting the at least one suggested offer to a consumer performing a transaction through a point of sale system.

10. The method of claim 9, wherein the consumer is performing the transaction via an electronic transaction device.

11. The method of claim 10, further comprising receiving a request to perform a transaction for the suggested offer at the transaction service provider.

12. The method of claim 11, further comprising in response to receiving the request, transferring by the transaction service provider an electronic representation of authentication-based trust established between the service institution and the transaction service provider to the electronic transaction device and an electronic representation of authentication-based trust established between the electronic transaction device and the transaction service provider to the service institution.

13. The method of claim 12, further comprising securing a transaction for the accepted offer by the transaction service provider authenticating the transaction via a three-dimensional security protocol that comprises separate authentication protocols for each of the user, the electronic transaction device and the vendor.

14. The method of claim 9, wherein the consumer is performing the transaction via a conventional plastic transaction card.