# US 12,182,810 B2 · Detailing secure service provider transactions > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,182,810 B2 - Document ID: US12182810B2 - Status: Granted - Kind: B2 - Application number: 17/848,114 - Filed: 2022-06-23 - Published: 2022-10-13 - Granted: 2024-12-31 - Earliest claimed: 2017-09-29 - Assignees: Apple Inc. - Applicants: Apple Inc. - Inventors: Chunlai Ma; Eric J. Gray; Fei Gao; David L. Neumann; Xinyu Zhao - Web page: https://patentgrep.com/patent/US12182810B2 ## CPC - G06Q 20/401: {Transaction verification} - G06Q 20/00: Payment architectures, schemes or protocols (apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12) - G06Q 20/047: {using payment protocols involving electronic receipts} - G06Q 20/322: {Aspects of commerce using mobile devices [M-devices]} - G06Q 20/3821: {Electronic credentials} - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract A customer interfacing with a credential manager may be enabled to request and obtain securely from the credential manager additional details related to a service transaction previously effected between the customer and a service provider using a customer transaction credential managed by the credential manager. To obtain such a detailed customer receipt for presentation to a customer, the credential manager may provide an authenticatable customer receipt request to the service provider that may include certain information indicative of an active session between the credential manager and an authenticated customer and/or certain information indicative of a trusted relationship between the credential manager and service provider. When a request is authenticated, the service provider may provide a detailed customer receipt to the credential manager in a format that may be presented to the customer but that may not be used by the credential manager to easily access details conveyed by the receipt. ## Claims ### Claim 1 A computer-implemented method, comprising: receiving, by a credential manager subsystem device and from a client device, user authentication data for logging the client device into the credential manager subsystem device and client device data identifying a type of the client device; establishing, by the credential manager subsystem device, an active session with the client device upon authenticating the user authentication data; transmitting, by the credential manager subsystem device, first transaction information corresponding to a service transaction to the client device, the first transaction information identifying an aggregated value associated with the service transaction; receiving, by the credential manager subsystem device and from the client device, transaction selection data corresponding to the service transaction; and during the active session: communicating, by the credential manager subsystem device and to a remote service provider subsystem device, a customer receipt request including the client device data; populating, by the service provider subsystem device, a web container with an image file comprising second transaction information that visually identifies a plurality of values corresponding to at least two transactions of a plurality of transactions that comprise the service transaction, a resolution of the image file being determined by the client device data, and the image file being configured to be inaccessible to the credential manager subsystem device; transmitting, by the service provider subsystem device, a web location identifier associated with the web container of the remote service provider subsystem device; receiving, at the credential manager subsystem device and from the remote service provider subsystem device, the web location identifier associated with the web container of the remote service provider subsystem device; transmitting, by the credential manager subsystem device and to the client device, the web location identifier associated with the web container of the remote service provider subsystem device; and displaying, by the client device, the image file comprising second transaction information as an overlay, at the resolution, over the first information in a user interface of the client device. ### Claim 2 (depends on 1) The computer-implemented method of claim 1, wherein the web container is further configured to store second transaction information indicative of a service transaction descriptor that is different form the first transaction information, and wherein the service transaction descriptor comprises at least one of: a description of a service provider product associated with the service transaction; or a time associated with the service transaction. ### Claim 3 (depends on 1) The computer-implemented method of claim 1, wherein the second transaction information is further indicative of a service transaction value amount of the service transaction. ### Claim 4 (depends on 1) The computer-implemented method of claim 1, further comprising providing, by the credential manager subsystem device, the second transaction information to the client device. ### Claim 5 (depends on 4) The computer-implemented method of claim 4, further comprising deleting the second transaction information from the credential manager subsystem device after the providing. ### Claim 6 (depends on 1) The computer-implemented method of claim 1, wherein the second transaction information is a sum of at least two service transactions. ### Claim 7 (depends on 1) The computer-implemented method of claim 1, wherein the customer receipt request comprises an aggregated transaction identifier and the user authentication data. ### Claim 8 (depends on 7) The computer-implemented method of claim 7, further comprising authenticating the user authentication data. ### Claim 9 (depends on 7) The computer-implemented method of claim 7, wherein the user authentication data is indicative of a shared secret between the remote service provider subsystem device and the credential manager subsystem device. ### Claim 10 (depends on 7) The computer-implemented method of claim 7, wherein: the user authentication data is indicative of a type of the client device that initiated the customer receipt request at the credential manager subsystem device; and the second transaction information comprises an image in a format based at least in part on the type of the client device indicated by the user authentication data. ### Claim 11 (depends on 7) The computer-implemented method of claim 7, wherein the user authentication data is indicative of a technique used by the credential manager subsystem device to authenticate a customer of the credential manager subsystem device that initiated the customer receipt request at the credential manager subsystem device. ### Claim 12 (depends on 7) The computer-implemented method of claim 7, wherein the user authentication data is indicative of a time at which the credential manager subsystem device authenticated a customer of the credential manager subsystem device that initiated the customer receipt request. ### Claim 13 A non-transitory computer-readable medium, storing computer-executable instructions that, when executed by one or more processors of a credential manager subsystem device, configure the one or more processors to perform operations comprising: receiving, from a client device, user authentication data for logging the client device into the credential manager subsystem device and client device data identifying a type of the client device; establishing an active session with the client device upon authenticating the user authentication data; transmitting first transaction information corresponding to a service transaction to the client device, the first transaction information identifying an aggregated value associated with the service transaction; receiving, from the client device, transaction selection data corresponding to the service transaction; and during the active session: communicating, to a remote service provider subsystem device, a customer receipt request including the client device data; generating a web container to be populated, by the service provider subsystem device, with an image file comprising second transaction information that visually identifies a plurality of values corresponding to at least two transactions of a plurality of transactions that comprise the service transaction, a resolution of the image file being determined by the client device data, and the image file being configured to be inaccessible to the credential manager subsystem device; receiving, from the remote service provider subsystem device, a web location identifier associated with a web container of the remote service provider subsystem device; and transmitting, to the client device, the web location identifier associated with the web container of the remote service provider subsystem device to the client device for display of the image file comprising second transaction information as an overlay, at the resolution, over the first transaction information in a user interface of the client device. ### Claim 14 (depends on 13) The non-transitory computer-readable medium of claim 13, wherein the web container is further configured to store second transaction information indicative of a service transaction descriptor that is different form the first transaction information, and wherein the service transaction descriptor comprises at least one of: a description of a service provider product associated with the service transaction; or a time associated with the service transaction. ### Claim 15 (depends on 13) The non-transitory computer-readable medium of claim 13, wherein the second transaction information is further indicative of a service transaction value amount of the service transaction. ### Claim 16 (depends on 13) The non-transitory computer-readable medium of claim 13, wherein the operations further comprise providing the second transaction information to the client device. ### Claim 17 (depends on 16) The non-transitory computer-readable medium of claim 16, further comprising deleting the second transaction information from the credential manager subsystem device after the providing. ### Claim 18 A credential manager subsystem device, comprising: memory configured to store computer-executable instructions; and one or more processors configured to access the memory and execute the computer-executable instructions to at least: receive, from a client device, user authentication data for logging the client device into the credential manager subsystem device and client device data identifying a type of the client device; establish an active session with the client device upon authenticating the user authentication data; transmit first transaction information corresponding to a service transaction to the client device, the first transaction information identifying an aggregated value associated with the service transaction; receive, from the client device, transaction selection data corresponding to the service transaction; and during the active session: communicate, to a remote service provider subsystem device, a customer receipt request including the client device data; generating a web container to be populated, by the service provider subsystem device, with an image file comprising second transaction information that visually identifies a plurality of values corresponding to at least two transactions of a plurality of transactions that comprise the service transaction, a resolution of the image file being determined by the client device data, and the image file being configured to be inaccessible to the credential manager subsystem device; receive, from the remote service provider subsystem device, a web location identifier associated with a web container of the remote service provider subsystem device; and transmit, to the client device, the web location identifier associated with the web container of the remote service provider subsystem device to the client device for display of the image file comprising second transaction information as an overlay, at the resolution, over the first transaction information in a user interface of the client device. ### Claim 19 (depends on 18) The credential manager subsystem device of claim 18, wherein the web container is further configured to store second transaction information indicative of a service transaction descriptor that is different form the first transaction information, and wherein the service transaction descriptor comprises at least one of: a description of a service provider product associated with the service transaction; or a time associated with the service transaction. ### Claim 20 (depends on 18) The credential manager subsystem device of claim 18, wherein the computer-executable instructions are further executed to at least: provide the second transaction information to the client device; and delete the second transaction information from the credential manager subsystem device after the providing.