Secure universal two-step payment authorization system

A financial institution subsystem in communication with a commercial entity subsystem, the financial institution subsystem comprising:

• at least one processor component;
• at least one memory component;
• and
• at least one communications component, wherein the financial institution subsystem is configured to:
• receive from the commercial entity subsystem a request for payment authorization, the request containing at least an encrypted digital representation of a commerce credential for the requested payment transaction, the commerce credential containing no payment credentials usable in any other future transactions;
• after the receiving, retrieve a payment credential from the memory component using the encrypted digital representation received from the commercial entity subsystem;
• after the retrieving, process the requested payment authorization;
• and
• after the processing, send an approval-or-denial reply regarding the payment authorization request to the commercial entity subsystem.

A financial institution subsystem in communication with a commercial entity subsystem, the financial institution subsystem comprising:

• at least one processor component;
• at least one memory component;
• and
• at least one communications component, wherein the financial institution subsystem is configured to:
• receive from the commercial entity subsystem a request for payment authorization, the request containing at least an encrypted digital representation of a commerce credential for the requested payment transaction, the commerce credential containing no payment credentials usable in any other future transactions;
• after the receiving, recover a payment credential from the encrypted digital representation received from the commercial entity subsystem;
• after the retrieval, process the requested payment authorization;
• and
• after the processing, send an approval-or-denial reply regarding the payment authorization request to the commercial entity subsystem.

A method comprising:

• receiving at a financial institution subsystem a request for payment authorization, the request containing at least an encrypted digital representation of a commerce credential for the requested payment transaction, the commerce credential containing no payment credentials usable in any other future transactions;
• after the receiving, retrieving a payment credential at financial institution subsystem using the encrypted digital representation received from the commercial entity subsystem;
• after the retrieving, processing the requested payment authorization at the financial institution subsystem;
• and
• after the processing, sending an approval-or-denial reply regarding the payment authorization request from the financial institution subsystem to the commercial entity subsystem.