Secure method and system for communicating a list of credit card numbers over a non-secure network

Abstract

A method and system for securely indicating to a customer one or more credit card numbers that a merchant has on file for the customer when communicating with the customer over a non-secure network. The merchant sends a message to the customer that contains only a portion of each of the credit card numbers that are on file with the merchant. The message may also contain a notation explaining which portion of each of the credit card numbers has been extracted. A computer (38) retrieves the credit card numbers on file for the customer in a database (40), constructs the message, and transits the message to a customer location (10) over the Internet network (30) or other non-secure network. The customer can then confirm in a return message that a specific one of the credit card numbers on file with the merchant should be used in charging a transaction. Since only a portion of the credit card number(s) are included in any message transmitted, a third party cannot discover the customer's complete credit card number(s).

Dependencies are inferred from the claim text.