US 2003/0069792 A1Published application

System and method for effecting secure online payment using a client payment card

AssigneeSmarttrust Systems Oy

InventorHenrik Blumenthal

Life of this patent

Estimating the term…

Loading patent…

Abstract

Payment using a payment card for goods and/or services ordered online via an information network such as the Internet is implemented in a notably secure manner without the need to transmit the client's payment card number over the data transmission network. A separate confirmation for effecting the payment for an order is requested from the client. The information to be confirmed is transmitted to the terminal device of the client, such as a mobile station, by means of which the client confirms the order by digitally signing the confirmation request. The digitally signed confirmation and the electronic identity information associated with the client are then returned to the payment service equipment, which verifies the client's identity, checks the validity of the client's payment card, and then transmits the necessary payment information to the payment system.

Claims35

Dependent claims

Payment service equipment operable for completing online payment transactions using a client payment card, comprising:

a first access interface for connection to a payment system;
a second access interface for connection to an authentication system;
a third access interface for connection to a telecommunication network;
a certificate database for storing certificates associated with clients;
a service provider database for storing information relating to registered service providers from which the clients can purchase goods and services in online transactions;
a client database for storing information relating to the clients, said information relating to the clients comprising, for each client, at least one of a client mobile number and information relating to the payment card of the each client;
a transaction database for storing information relating to the payment transactions;
a verification database for storing a listing of suspicious payment cards;
a generation block for generating billing tickets associated with the payment transactions;
a telecommunication block for sending and receiving a confirmation of order associated with a payment transaction;
an identification block for identifying a client based on an electronic identity and digital signature of the client;
an information retrieval block for determining payment card information for the clients;
and
a fourth access interface for connection between the payment service equipment and the mobile communication network.

11 more elements

A method for secure online payment in a telecommunication system that includes a mobile communication network, a telecommunication network, a payment terminal device connected to the mobile communication network and that includes a smart card, a display terminal device connected to one of the mobile communication network and the telecommunication network, a trusted third party, a payment system, a service provider, and an authentication system, said method comprising the steps of:

generating and issuing, by the trusted third party, a certificate associated with a client;
selecting, and thereby ordering from the service provider by the client, one of a product and a service using the terminal display device via one of the telecommunication network and the mobile communication network;
using one of a payment card of the client and client payment card information to pay for the ordered one of a product and a service;
generating, by payment service equipment, a billing ticket associated with the ordered one of a product and a service;
sending a confirmation of order associated with the ordered one of a product and a service to the payment terminal device of the client via the mobile communication network for receipt by the client;
at least one of digitally signing and encrypting the received confirmation of order using the payment terminal device of the client;
sending the at least one of digitally signed and encrypted confirmation of order and electronic identity information associated with the client from the payment terminal device of the client to the payment service equipment via the mobile communication network;
identifying the client at the payment service equipment based on the at least one of the digital signature and the encryption of the confirmation of order sent from the payment terminal device of the client;
retrieving a number of the client payment card based on the at least one of the digital signature and the encryption of the confirmation of order sent from the payment terminal device of the client to the payment service equipment;
and
verifying a right of use of the client payment card and, if the verification is successful, accepting payment for the ordered at least one of goods and services.

8 more elements

A method for secure online payment in a telecommunication system that includes a telecommunication network, a terminal device connected to the telecommunication network and to which is attached a card reader for receiving a smart card, a trusted third party, a payment system, a service provider, and an authentication system, said method comprising the steps of:

generating and issuing, by the trusted third party, a certificate associated with a client;
selecting, and thereby ordering from the service provider by the client, one of a product and a service using the terminal display device via the telecommunication network;
using one of a payment card of the client and client payment card information to pay for the ordered one of a product and a service;
generating, by payment service equipment, a billing ticket associated with the ordered one of a product and a service;
sending a confirmation of order associated with the ordered one of a product and service to the terminal device of the client via the telecommunication network;
at least one of signing and encrypting the received confirmation of order using the smart card in the card reader attached to the terminal device of the client;
sending the at least one of signed and encrypted confirmation of order and electronic identity information associated with the client from the terminal device to the payment service equipment via the telecommunication network;
identifying the client at the payment service equipment based on the at least one of the digital signature and the encryption of the confirmation of order sent from the terminal device of the client;
retrieving a number of the client payment card based on the at least one of the digital signature and the encryption of the confirmation of order sent from the terminal device of the client to the payment service equipment;
and
verifying a right of use of the client payment card and, if the verification is successful, accepting payment for the ordered at least one of goods and services.

8 more elements

Dependencies are inferred from the claim text.

Facts

Application: 10/201,182Filed 22 Jul 2002
Priority: FI 2000013524 Jan 2000
Published: 10 Apr 2003
Term ends: Not estimatedThe source records don’t support an estimate.

Classification7 codes

G06Q 20/02
Payment architectures, schemes or protocols: involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
G06Q 20/04
Payment architectures, schemes or protocols: payment circuits
G06Q 20/20
Payment architectures: point-of-sale [POS] network systems
G06Q 20/24
Payment schemes or models: credit schemes, i.e. "pay after"

Family

Application10/201,182Continuation · filed 22 Jul 2002
US 2003/0069792 A1This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key