# US 2018/0025342 A1 · Online mobile payment system and method using authentication codes > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0025342 A1 - Document ID: US20180025342A1 - Status: Published application - Kind: A1 - Application number: 15/657,175 - Filed: 2017-07-23 - Published: 2018-01-25 - Earliest claimed: 2016-07-23 - Assignees: Vray Inc. - Inventors: Jack Shauh; Andrew Vinh Banh - Web page: https://patentgrep.com/patent/US20180025342A1 ## CPC - G06Q 20/322: {Aspects of commerce using mobile devices [M-devices]} - G06Q 20/325: {using wireless networks} - G06Q 20/12: specially adapted for electronic shopping systems - G06Q 20/38: Payment protocols; Details thereof - G06Q 20/4012: {Verifying personal identification numbers [PIN]} - G06Q 20/40145: {Biometric identity checks} - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract A mobile payment method includes the steps of making an online purchase at an online store with payment information being received by a web browsing capable device. The web browsing capable device connects to a server and a payment request including a VID is sent to the server. The server verifies the VID. A mobile payment device is connected to the server. A token request is sent to the mobile device upon verification of the VID. A token response is sent to the server. Information is archived to a database and a cookie associated with the VID is created. The cookie with associated VID is archived. A payment response is sent to the web browsing capable device. An authorization request is sent to the online store, and the online store authorizes the transaction with a payment network. ## Claims ### Claim 1 A mobile payment method comprising the steps of: providing a web browsing capable device; providing a mobile payment device having mobile payment capability; providing a server connectable to the web browsing capable device and the mobile payment device; a user using the web browsing capable device in communication with the Internet to make an online purchase at an online store and receiving payment information including a server address; connecting the web browsing capable device to the server using the server address; inputting a VID into the web browsing capable device; sending a payment request including the VID from the web browsing capable device to the server; the server verifying the VID; connecting the mobile payment device to the server and sending a token request from the server to the mobile device upon verification of the VID; sending a token response from the mobile device to the server; archiving information to a database and creating a cookie associated with the VID, archiving the cookie with associated VID in the database; sending payment response including created cookie associated with the VID to the web browsing capable device from the server; sending authorization request to the online store from the web browsing capable device; and the online store authorizing the transaction with a payment network. ### Claim 2 (depends on 1) A method as claimed in claim 1 wherein the step of connecting the web browsing capable device to the server includes the web browsing capable device using HTTP CORS (Cross-Origin Resource Sharing) to set up a HTTPS session with the server using the address of the server received in the payment information. ### Claim 3 (depends on 1) A method as claimed in claim 1 wherein the step of the server verifying information included in the payment request includes the steps of: determining if the VID is valid; sending a request from the server to the web browsing capable device to enter a valid VID for re-verification if the VID was determined to be invalid; verifying if shipping information included in the payment request matches an archived shipping address or billing address in the database corresponding to the VID, if the VID is determined to be valid; and generating a random code by the server to be entered by the user on one of the mobile device and the web browsing capable device if the shipping information is not valid. ### Claim 4 (depends on 1) A method as claimed in claim 1 further including the steps of: using the web browsing capable device in communication with the Internet to make a second online purchase and receiving second payment information including the server address to initiate a second transaction; inputting the VID into the web browsing capable device; sending a second payment request including the VID and the created cookie associated therewith from the web browsing capable device to the server; the server verifying information included in the second payment request; connecting the mobile payment device to the server and sending a second token request from the server to the mobile device upon verification of the information included in the second payment request; sending a second token response from the mobile device to the server upon authorization by the user; archiving information received to the database and updating the created cookie; sending second payment response including updated cookie to the web browsing capable device from the server; sending authorization request to the online store from the web browsing capable device; and the online store authorizing the transaction with a payment network. ### Claim 5 (depends on 4) A method as claimed in claim 4 wherein the step of the server verifying information included in the payment request includes the steps of: determining if the VID is valid; sending a request from the server to the to enter a valid VID for re-verification if the VID was determined to be invalid; verifying if the created cookie is valid if the VID was determined to be valid, meaning the cookie has been archived in the database that contains the validated VID and there is no public cookie; and generating a random code by the server to be entered by the user on one of the mobile device and the web browsing capable device if the created cookie is not valid. ### Claim 6 (depends on 1) A method as claimed in claim 1 wherein the step of the mobile device receiving payment information includes the step of the mobile device displaying a payment description for the user to check, and prompting the user to authorize the transaction. ### Claim 7 (depends on 6) A method as claimed in claim 6 wherein the step of authorizing the transaction includes the user using one of a PIN and biometric information. ### Claim 8 A mobile payment method comprising the steps of: providing a web browsing capable device; providing a mobile payment device having mobile payment capability; providing a server connectable to the web browsing capable device and the mobile payment device; a user using the web browsing capable device in communication with the Internet to make an online purchase at an online store and receiving payment information including an address for the server to initiate a transaction; connecting the web browsing capable device to the server using the address provided in the payment information, including sending a cookie from the web browsing capable device to the server, the cookie previously received by the web capable device from the server during a previous transaction and associated with a VID; inputting the VID into the web browsing capable device associated with the cookie; sending a payment request including the VID and the cookie from the web browsing capable device to the server; the server verifying the VID and cookie included in the payment request; connecting the mobile payment device to the server and sending a token request from the server to the mobile device upon verification of the VID and cookie included in the payment request; sending a token response from the mobile device to the server upon authorization by the user; archiving information received to a database and updating the cookie if the token response is a success; sending payment response including updated cookie to the web browsing capable device from the server; sending authorization request to the online store from the web browsing capable device; and the online store authorizing the transaction with a payment network. ### Claim 9 (depends on 8) A method as claimed in claim 8 wherein the step of connecting the web browsing capable device to the server includes the web browsing capable device using HTTP CORS (Cross-Origin Resource Sharing) to set up a HTTPS session with the server using the address of the server received in the payment information. ### Claim 10 (depends on 8) A method as claimed in claim 8 wherein the step of the server verifying VID and cookie included in the payment request includes the steps of: determining if the VID is valid; sending a request from the server to the to enter a valid VID for re-verification if the VID was determined to be invalid; verifying if the cookie is valid if the VID was determined to be valid, meaning the cookie has been archived in the database that contains the validated VID with a time stamp of a last previously successful token response and there is no public cookie; and generating a random code by the server to be entered by the user on one of the mobile device and the web browsing capable device if the cookie is not valid. ### Claim 11 (depends on 8) A method as claimed in claim 8 wherein the step of the mobile device receiving payment information includes the step of the mobile device displaying a payment description for the user to check, and prompting the user to authorize the transaction. ### Claim 12 (depends on 11) A method as claimed in claim 11 wherein the step of authorizing the transaction includes the user using one of a PIN and biometric information.