# US 10,482,465 B2 · Method and system for hosted order page/silent order post plus fraud detection > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,482,465 B2 - Document ID: US10482465B2 - Status: Granted - Kind: B2 - Application number: 15/465,463 - Filed: 2017-03-21 - Published: 2017-07-06 - Granted: 2019-11-19 - Earliest claimed: 2011-07-15 - Assignees: Visa International Service Association - Applicants: Visa International Service Association - Inventors: Lisa Anderson; Sonny Truong - Web page: https://patentgrep.com/patent/US10482465B2 ## CPC - G06Q 20/4016: {involving fraud or risk level assessment in transaction processing} - G06Q 20/027: {involving a payment switch or gateway} - G06Q 20/085: {involving remote charge determination or related payment systems} - G06Q 20/0855: {involving a third party} - G06Q 20/12: specially adapted for electronic shopping systems - G06Q 30/0185: {Product, service or business identity fraud} - G06Q 30/06: Buying, selling or leasing transactions - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract Generally, embodiments of the invention are directed to methods, computer readable medium, servers and systems for enabling merchants to use hosted order pages (HOPs) and/or silent order posts (SOPs) and thereby avoid handling payment information and the costs associated Payment Card Industry (PCI) compliance, while at the same time utilize third-party fraud detection screens and thereby avoid costs associated with fraudulent transactions. ## Claims ### Claim 1 A computer-implemented method, comprising performing by a merchant service computer system: obtaining, by a payment service executing on the merchant service computer system, order information from a merchant server via a post from a user device, the order information including information about an item in a purchase transaction involving a user and a merchant; receiving, by the payment service, a merchant-generated one-way hash of the order information as part of the post from the user device, wherein the merchant-generated one-way hash is generated using a hashing technique specified by the merchant service computer system; generating, by the payment service, a one-way hash of the order information using the order information and the hashing technique; comparing, by the payment service, the received merchant-generated one-way hash of the order information to the generated one-way hash of the order information to verify that the order information is authentic; upon verifying that the order information is authentic, providing, by the payment service, a hosted order page on behalf of the merchant, wherein the hosted order page is presented to the user via the user device; obtaining, by the payment service via the hosted order page from the user device, payment information from the user on behalf of the merchant; transmitting, from the payment service to fraud detection services, a transmission including both the order information obtained from the merchant server and the payment information obtained from the user device; receiving, at the payment service from the fraud detection services, an approve or deny indication indicating whether the purchase transaction is approved or denied based on a fraud risk for the purchase transaction determined using the payment information of the user and the order information; if the purchase transaction is denied, displaying, by the payment service, a transaction denied page on the hosted order page; and if the purchase transaction is approved, sending, by the payment service, the purchase transaction along with the payment information to a payment processing server. ### Claim 2 (depends on 1) The computer-implemented method of claim 1 wherein the post from which the order information is obtained is an HTML POST. ### Claim 3 (depends on 1) The computer-implemented method of claim 1 wherein the post is sent by the user device to the merchant service computer system when the user device is redirected from the merchant server. ### Claim 4 (depends on 1) The computer-implemented method of claim 1 wherein the order information includes at least one of a purchase amount, a sales tax amount, a shipping address, shipping and handling costs, a billing address, and an email address. ### Claim 5 (depends on 1) The computer-implemented method of claim 1 further comprising: obtaining order-page configurations designated by the merchant, wherein the hosted order page is provided in accordance with the order-page configurations. ### Claim 6 (depends on 1) The computer-implemented method of claim 1, wherein the fraud detection services execute on the merchant service computer system. ### Claim 7 (depends on 1) The computer-implemented method of claim 1, further comprising: determining that the merchant server enabled fraud detection services for the purchase transaction prior to evaluating the payment information and the order information. ### Claim 8 (depends on 1) The computer-implemented method of claim 1, wherein the merchant is not required to comply with requirements of Payment Card Industry (PCI). ### Claim 9 (depends on 1) The computer-implemented method of claim 1, wherein the transmission is transmitted via Secure Sockets Layer (SSL) communication protocol. ### Claim 10 A system, comprising: a processor; and a memory device storing instructions for implementing a payment service executing on a merchant service computer system, wherein the instructions, when executed by the processor, cause the processor to: obtain order information from a merchant server via a post from a user device, the order information including information about an item in a purchase transaction involving a user and a merchant; receive a merchant-generated one-way hash of the order information as part of the post from the user device, wherein the merchant-generated one-way hash is generated using a hashing technique specified by the merchant service computer system; generate a one-way hash of the order information using the order information and the hashing technique; compare the received merchant-generated one-way hash of the order information to the generated one-way hash of the order information to verify that the order information is authentic; upon verifying that the order information is authentic, provide a hosted order page on behalf of the merchant, wherein the hosted order page is presented to the user via the user device; obtain, via the hosted order page from the user device, payment information from the user on behalf of the merchant; transmit, to fraud detection services, a transmission including both the order information obtained from the merchant server and the payment information obtained from the user device; receive, from the fraud detection services, an approve or deny indication indicating whether the purchase transaction is approved or denied based on a fraud risk for the purchase transaction determined using the payment information of the user and the order information; if the purchase transaction is denied, display a transaction denied page on the hosted order page; and if the purchase transaction is approved, send the purchase transaction along with the payment information to a payment processing server. ### Claim 11 (depends on 10) The system of claim 10, wherein the post from which the order information is obtained is an HTML POST. ### Claim 12 (depends on 10) The system of claim 10, wherein the post is sent by the user device to the merchant service computer system when the user device is redirected from the merchant server. ### Claim 13 (depends on 10) The system of claim 10, wherein the order information includes at least one of a purchase amount, a sales tax amount, a shipping address, shipping and handling costs, a billing address, and an email address. ### Claim 14 (depends on 10) The system of claim 10, wherein the instructions, when executed by the processor, further cause the processor to: obtain order-page configurations designated by the merchant, wherein the hosted order page is provided in accordance with the order-page configurations. ### Claim 15 (depends on 10) The system of claim 10, wherein the fraud detection services execute on the merchant service computer system. ### Claim 16 (depends on 10) The system of claim 10, wherein the instructions, when executed by the processor, further cause the processor to: determine that the merchant server enabled fraud detection services for the purchase transaction prior to evaluating the payment information and the order information. ### Claim 17 (depends on 10) The system of claim 10, wherein the merchant is not required to comply with requirements of Payment Card Industry (PCI). ### Claim 18 (depends on 10) The system of claim 10, wherein the transmission is transmitted via Secure Sockets Layer (SSL) communication protocol.