# US 12,008,527 B2 · Systems, methods, and computer program products providing an identity-storing browser > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,008,527 B2 - Document ID: US12008527B2 - Status: Granted - Kind: B2 - Application number: 17/404,508 - Filed: 2021-08-17 - Published: 2021-12-09 - Granted: 2024-06-11 - Earliest claimed: 2018-09-28 - Applicants: Paypal, Inc. - Inventors: Phanendra Mallampalli; Sriram Ramakrishnan; Frank Anthony Nuzzi - Web page: https://patentgrep.com/patent/US12008527B2 ## CPC - G06Q 20/0855: {involving a third party} - G07G 1/0009: {Details of the software in the checkout register, electronic cash register [ECR] or point of sale terminal [POS]} - G06Q 20/12: specially adapted for electronic shopping systems - G06Q 20/3821: {Electronic credentials} - G06Q 20/389: {Keeping log of transactions for guaranteeing non-repudiation of a transaction} - G06Q 20/4012: {Verifying personal identification numbers [PIN]} - G06Q 20/40145: {Biometric identity checks} - H04L 9/0637: {Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]} - H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)} - H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD} - H04L 9/50: {using hash chains, e.g. blockchains or hash trees} - H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G07G: REGISTERING THE RECEIPT OF CASH, VALUABLES, OR TOKENS - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method includes: communicating data from a browser, operating on a computing device, to an electronic shopping cart during a transaction; receiving user-authenticating data from a user interface of the computing device; decrypting secure user data stored to the computing device; authenticating a user based on the user-authenticating data and the decrypted secure user data; in response to authenticating the user, transmitting an indication of payment from the browser to the electronic shopping cart; processing the transaction after transmitting the indication of payment; and recording the transaction in a blockchain stored on the computing device. ## Claims ### Claim 1 A system, comprising: a browser server comprising: one or more hardware processors; and one or more non-transitory machine-readable storage media storing instructions that, when executed by the one or more hardware processors, cause the one or more hardware processors to perform operations comprising: storing secure user data of a user, wherein the stored secure user data is encrypted; receiving purchase information during a transaction between a browser client application of a user device of the user and an electronic shopping cart application of a merchant server; performing a secure handshake with the electronic shopping cart application of the merchant server over a network during the transaction, wherein the secure handshake is an agreed-upon protocol-based handshake operation; determining, based on the secure handshake, that the browser server is linked with the electronic shopping cart application through one or more shared application programming interfaces as a part of the agreed-upon protocol-based handshake operation, wherein the agreed-upon protocol-based handshake operation enables the transaction to be continued without the browser server transmitting, to the electronic shopping cart application, user information of the user that is otherwise required by the electronic shopping cart application for conducting the transaction with the user; receiving user-authenticating data of the user from the browser client application; authenticating the user, wherein authenticating the user further comprises: retrieving the encrypted secure user data of the user; decrypting the encrypted secure user data using the user-authenticating data; based on authenticating the user, transmitting an indication of payment associated with the transaction to the electronic shopping cart application; and recording the transaction in a blockchain. ### Claim 2 (depends on 1) The system of claim 1, wherein the instructions, when executed by the one or more hardware processors, further cause the one or more hardware processors to further perform operations comprising: processing the transaction after the user has been authenticated. ### Claim 3 (depends on 1) The system of claim 1, wherein the instructions, when executed by the one or more hardware processors, further cause the one or more hardware processors to further perform operations comprising: initiating the transaction using the one or more agreed-upon protocol-based handshake operations with the electronic shopping cart application, wherein the agreed-upon protocol-based handshake operations cause the browser server and the electronic shopping cart application to identify each other based on a pre-established contractual relationship or a pre-established technical relationship. ### Claim 4 (depends on 1) The system of claim 1, wherein the instructions, when executed by the one or more hardware processors, further cause the one or more hardware processors to further perform operations comprising: storing the secure user data on a device encrypted by the user-authenticating data. ### Claim 5 (depends on 1) The system of claim 1, wherein the secure user data is stored in a block of the blockchain. ### Claim 6 (depends on 1) The system of claim 1, wherein the secure user data is encrypted by a key associated with the browser server. ### Claim 7 (depends on 2) The system of claim 2, wherein the agreed-upon protocol-based handshake operation further indicates that an amount of the transaction is to be made by the browser server to an account associated with the electronic shopping cart application regardless of an identity of the user. ### Claim 8 (depends on 1) The system of claim 1, wherein the electronic shopping cart application and the browser server are maintained by different entities. ### Claim 9 A method, comprising: storing, by a browser server, secure user data of a user, wherein the stored secure user data is encrypted; receiving, by the browser server, purchase information during an electronic transaction between a browser client application of a user device of the user and an electronic shopping cart application of a merchant server; performing, by the browser server, a secure handshake with the electronic shopping cart application of the merchant server over a network during the electronic transaction, wherein the secure handshake is an agreed-upon protocol-based handshake operation; determining, based on the secure handshake, that the browser server is linked with the electronic shopping cart application through one or more shared application programming interfaces as a part of the agreed-upon protocol-based handshake operation, wherein the agreed-upon protocol-based handshake operation enables the electronic transaction to be continued without the browser server transmitting, to the electronic shopping cart application, user information of the user that is otherwise required by the electronic shopping cart application for conducting the electronic transaction with the user; receiving, by the browser server, user-authenticating data of the user from the browser client application; authenticating, by the browser server, the user, wherein authenticating the user further comprises: retrieving the encrypted secure user data of the user; decrypting the encrypted secure user data using the user-authenticating data; based on authenticating the user, transmitting, by the browser server, an indication of payment associated with the electronic transaction to the electronic shopping cart application; and recording the electronic transaction in a blockchain. ### Claim 10 (depends on 9) The method of claim 9, wherein the received user-authenticating data of the user comprises biometric data and a personal identification number (PIN) of the user. ### Claim 11 (depends on 9) The method of claim 9, further comprising: generating, by the browser server, a block of the blockchain, wherein the block of the blockchain comprises an identification of the electronic transaction and an identification of the electronic shopping cart application; and encrypting, by the browser server, the block using a key associated with the browser server. ### Claim 12 (depends on 9) The method of claim 9, wherein the secure user data is stored in a block of the blockchain. ### Claim 13 A non-transitory machine-readable medium having stored thereon machine-readable instructions that, when executed by one or more hardware processors of a browser server, cause the one or more hardware processors to perform operations comprising: storing secure user data of a user, wherein the stored secure user data is encrypted; receiving purchase information during a transaction between a browser client application of a user device of the user and an electronic shopping cart application of a merchant server; performing a secure handshake with the electronic shopping cart application of the merchant server over a network during the transaction, wherein the secure handshake is an agreed-upon protocol-based handshake operation; determining, based on the secure handshake, that the browser server is linked with the electronic shopping cart application through one or more shared application programming interfaces as part of the agreed-upon protocol-based handshake operation, wherein the agreed-upon protocol-based handshake operation enables the transaction to be continued without the browser server transmitting, to the electronic shopping cart application, user information of the user that is otherwise required by the electronic shopping cart application for conducting the transaction with the user; receiving user-authenticating data of the user from the browser client application; authenticating the user, wherein authenticating the user further comprises: retrieving the encrypted secure user data of the user; decrypting the encrypted secure user data using the user-authenticating data; based on authenticating the user, transmitting an indication of payment associated with the transaction to the electronic shopping cart application; and recording the transaction in a blockchain. ### Claim 14 (depends on 13) The non-transitory machine-readable medium of claim 13, wherein the instructions, when executed by the one or more hardware processors, further cause the one or more hardware processors to perform operations comprising: processing the transaction after the user has been authenticated. ### Claim 15 (depends on 13) The non-transitory machine-readable medium of claim 13, wherein the instructions, when executed by the one or more hardware processors, further cause the one or more hardware processors to further perform operations comprising: initiating the transaction using the one or more agreed-upon protocol-based handshake operations with the electronic shopping cart application, wherein the agreed-upon protocol-based handshake operations cause the browser server and the electronic shopping cart application to identify each other based on a pre-established contractual relationship or a pre-established technical relationship. ### Claim 16 (depends on 13) The non-transitory machine-readable medium of claim 13, wherein the instructions, when executed by the one or more hardware processors, further cause the one or more hardware processors to further perform operations comprising: storing the secure user data on a device encrypted by the user-authenticating data. ### Claim 17 (depends on 13) The non-transitory machine-readable medium of claim 13, wherein the secure user data is stored in a block of the blockchain. ### Claim 18 (depends on 16) The non-transitory machine-readable medium of claim 16, wherein the secure user data is encrypted by a key associated with the browser server. ### Claim 19 (depends on 13) The non-transitory machine-readable medium of claim 13, wherein the agreed-upon protocol-based handshake operation further indicates that an amount of the transaction is to be made by the browser server to an account associated with the electronic shopping cart application regardless of an identity of the user. ### Claim 20 (depends on 19) The non-transitory machine-readable medium of claim 19, wherein the agreed-upon protocol-based handshake operation further identifies the electronic shopping cart application and the browser server as trusted entities to each other.