# US 10,373,141 B1 · Method and system for controlling certificate based open payment transactions

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,373,141 B1
- Document ID: US10373141B1
- Status: Granted
- Kind: B1
- Application number: 15/895,934
- Filed: 2018-02-13
- Granted: 2019-08-06
- Earliest claimed: 1999-06-11
- Assignees: Citicorp Credit Services, Inc. (USA)
- Applicants: Citicorp Credit Services, Inc. (USA)
- Inventors: Joseph C. Kawan; Ronald King-Hang Chu; Charles Golvin; Peter Tompkins
- Web page: https://patentgrep.com/patent/US10373141B1

## CPC

- G06Q 20/145: {Payments according to the detected use or quantity}
- G06F 21/105: {Arrangements for software license management or administration, e.g. for managing licenses at corporate level}
- G06F 21/121: {Restricting unauthorised execution of programs}
- G06Q 20/02: involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
- G06Q 20/04: Payment circuits
- G06Q 20/10: specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
- G06Q 20/102: {Bill distribution or payments}
- G06Q 20/12: specially adapted for electronic shopping systems
- G06Q 20/38215: {Use of certificates or encrypted proofs of transaction rights}
- G06Q 20/3829: {involving key management}
- G06Q 20/405: {Establishing or using transaction specific rules}
- G06Q 40/00: Finance; Insurance; Tax strategies; Processing of corporate or income taxes
- G06F 21/107: {License processing; Key processing}
- G06Q 2220/18: Licensing
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

Methods and systems for controlling certificate-based open payment transactions involving a merchant and a customer utilizing various types of networks and terminals. Prior to accessing a merchant POS terminal or, for example, a merchant website, a customer obtains a certificate from a service provider (SP), such as a bank, certifying his identification (ID) and his relevant financial information, in a form that is understandable by the SP. The SP is capable of performing multiple functions. For example, the SP is capable of acting as a certificate authority when it issues the customer's certificates, an authenticator when it receives private-key encrypted certificates from the customers to be decrypted using the corresponding public-key, and an authorizing authority when it checks the value available in a customer' chosen payment account against the requested purchase or transfer amount.

## Claims

### Claim 1

A method comprising:
presenting, by a computer, an amount due in response to a user's product selection;
accessing, by the computer, a programmable memory device associated with the user, wherein the programmable memory device comprising an identifying certificate for identifying the user;
retrieving, by the computer, the identifying certificate from the programmable memory device;
generating, by the computer, a graphical user interface including one or more accounts to be debited;
receiving, by the computer, a selected account for payment of the amount due;
attaching, by the computer, transaction information including a deposit account to the identifying certificate and the selected account;
signing, by the computer, the identifying certificate, the selected account, and the transaction information with a digital signature;
transmitting, by the computer, the identifying certificate, the selected account, the transaction information, and the digital signature to a server; and
receiving, by the computer from the server, an authorization message for payment authorization, wherein the server authorizes the payment by decrypting and authenticating the digital signature, authorizing the identifying certificate, and determining the selected account has sufficient funds to pay the amount due.

### Claim 2 (depends on 1)

The method of claim 1, further comprising:
requesting, by the computer, biometric identifying information including fingerprint from the user when the amount due satisfies a threshold.

### Claim 3 (depends on 1)

The method of claim 1, further comprising:
receiving, by the computer, personal identification number (PIN) associated with the programmable memory device.

### Claim 4 (depends on 1)

The method of claim 1, wherein the identifying certificate is issued by the server and includes the server's digital signature by encryption via public key cryptography.

### Claim 5 (depends on 1)

The method of claim 1, wherein the one or more accounts are account identifiers only readable by the user.

### Claim 6 (depends on 1)

The method of claim 1, wherein the computer is a point of sale terminal operated by a merchant.

### Claim 7 (depends on 1)

The method of claim 1, wherein the programmable memory device is a smart card.

### Claim 8 (depends on 1)

The method of claim 1, wherein the authorization message includes a digital signature signed by the server.

### Claim 9 (depends on 1)

The method of claim 1, wherein the server deposits the amount due into the depositing account of a merchant and posts debit to the selected account of the user.

### Claim 10 (depends on 1)

The method of claim 1, wherein the server authorizes the payment by interacting with a third party financial institution that maintains the user's selected account.

### Claim 11

A system comprises:
a programmable memory device associated with a user comprising an identifying certificate for identifying the user;
a server;
a computer connected to the server via a network, and comprising a processor configured to:
present an amount due in response to a user's product selection;
access a programmable memory device associated with the user, wherein the programmable memory device comprising an identifying certificate for identifying the user;
retrieve the identifying certificate from the programmable memory device;
generate a graphical user interface including one or more accounts to be debited;
receive a selected account for payment of the amount due;
attach transaction information including a deposit account to the identifying certificate and the selected account;
sign the identifying certificate, the selected account, and the transaction information with a digital signature;
transmit the identifying certificate, the selected account, the transaction information, and the digital signature to a server; and
receive, from the server, an authorization message for payment authorization, wherein the server authorizes the payment by decrypting and authenticating the digital signature, authorizing the identifying certificate, and determining the selected account has sufficient funds to pay the amount due.

### Claim 12 (depends on 11)

The system of claim 11, wherein the processor is further configured to:
request biometric identifying information including fingerprint from the user when the amount due satisfies a threshold.

### Claim 13 (depends on 11)

The system of claim 11, wherein the processor is further configured to:
receive personal identification number (PIN) associated with the programmable memory device.

### Claim 14 (depends on 11)

The system of claim 11, wherein the identifying certificate is issued by the server and includes the server's digital signature by encryption via public key cryptography.

### Claim 15 (depends on 11)

The system of claim 11, wherein the one or more accounts are account identifiers only readable by the user.

### Claim 16 (depends on 11)

The system of claim 11, wherein the computer is a point of sale terminal operated by a merchant.

### Claim 17 (depends on 11)

The system of claim 11, wherein the programmable memory device is a smart card.

### Claim 18 (depends on 11)

The system of claim 11, wherein the authorization message includes a digital signature signed by the server.

### Claim 19 (depends on 11)

The system of claim 11, wherein the server deposits the amount due into the depositing account of a merchant and posts debit to the selected account of the user.

### Claim 20 (depends on 11)

The system of claim 11, wherein the server authorizes the payment by interacting with a third party financial institution that maintains the user's selected account.