CA2353308A1 - Electronic transaction system and method - Google Patents

Electronic transaction system and method Download PDF

Info

Publication number
CA2353308A1
CA2353308A1 CA 2353308 CA2353308A CA2353308A1 CA 2353308 A1 CA2353308 A1 CA 2353308A1 CA 2353308 CA2353308 CA 2353308 CA 2353308 A CA2353308 A CA 2353308A CA 2353308 A1 CA2353308 A1 CA 2353308A1
Authority
CA
Canada
Prior art keywords
domain
financial
merchant
consumer
consumers
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Abandoned
Application number
CA 2353308
Other languages
French (fr)
Inventor
Denis Cancellera
Christopher Reid
Original Assignee
OLIVER, JAKEL
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by OLIVER, JAKEL filed Critical OLIVER, JAKEL
Priority to CA 2353308 priority Critical patent/CA2353308A1/en
Publication of CA2353308A1 publication Critical patent/CA2353308A1/en
Abandoned legal-status Critical Current

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/083Network architectures or network communication protocols for network security for authentication of entities using passwords
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2463/00Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
    • H04L2463/102Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying security measure for e-commerce

Abstract

An electronic transaction system and method. The system, leveraging existing online or fixed infrastructure, includes a financial transaction facilitation domain, located at the existing infrastructure's financial transaction facilitation end, a consumer domain located at the existing infrastructure's consumer end and a merchant domain located at the existing infrastructure's merchant end, the merchant domain having a merchant integrator for integration with the consumer domain and the financial transaction facilitation domain. The financial transaction facilitation domain, brokering financial transactions, includes a purchasing server having an authenticated registration processor for authenticating merchants and consumers registering with the system, a transaction broker for managing financial transactions of registered consumers and merchants and a consumer/merchant authenticator for authenticating consumers and merchants involved in financial transactions. The consumer domain include, a digital wallet for storing financial information, a digital wallet password for unlocking the digital wallet and a consumer agent for securely processing financial transactions between the consumer domain and the financial transaction facilitation domain, using financial information stored within the digital wallet.

Description

I
Electronic Transaction System and Method Field of the Invention s The present invention relates to financial transactions, and more particularly to an electronic transaction system and method.
Background of the Invention io Potential online consumers have been vary of shopping online largely due to an unease regarding the provision of personal information over the Internet. Typically, with existing e-Commerce systems financial information is centrally stored, providing an opportunity for a single unauthorized person to is gain access to a large volume of customer information.
Existing systems provide merchant sites with an ability to procure user information from the system, thereby allouving merchant impersonation attacks and unauthorized use of user account;>. Credit card fraud has grown ao exponentially over the past several years, spawning the need for newer, more secure methods and cards.
Financial transactions over the Internet that use centrally stored detailed transaction records are open to intrusive data mining techniques that Zs are subject to potential misuse, either by unscrupulous merchants or by unauthorized persons. Existing methods do not provide users with purchase authorization requests or acknowledgements, allowing access without requiring persona identification.
3o Typically, customers using existing systems have to register with the merchant's site, providing required personal information each time that makes the process tedious and complex. Existing methods attempt to perform banking duties, but are ill equipped to do so since financial management is a highly specialized environment. Consumers typically have to use their personal credit card account to make purchases, undesirable for security reasons and limiting in that other forms of payment, such as "electronic cash", are unavailable.
s For the foregoing reasons, there is a reed for an improved financial transaction method.
Summary of the Invention io The present invention is directed to an electronic transaction system and method. The system, leveraging existing online or fixed infrastructure, includes a financial transaction facilitation domain, located at the existing infrastructure's financial transaction facilitation end, a consumer domain is located at the existing infrastructure's consumer end and a merchant domain located at the existing infrastructure's merchant end, the merchant domain having a merchant integrator for integration with the consumer domain and the financial transaction facilitation domain.
ao The financial transaction facilitation domain, brokering financial transactions, includes a purchasing server having an authenticated registration processor for authenticating merchants and consumers registering with the system, a transaction broker for managing financial transactions of registered consumers and merchants and a consumerlmerchant authenticator as for authenticating consumers and merchants involved in financial transactions.
The consumer domain includes a digital wallet for storing financial information, a digital wallet password for unlocking the digital wallet and a 3o consumer agent for securely processing financial transactions between the consumer domain and the financial transaction facilitation domain, using financial information stored within the digital walllet.
In an aspect of the present invention, the system further includes one or more financial institutions integrated into the system to facilitate transactions.
s The invention provides advantages to all parties involved in transactions. First, by limiting the sharing of financial information to the consumer and his or her financial institution, the consumer avoids having to provide confidential financial information online. Second, financial institutions' revenues are increased due to additional debit transaction fees and their io losses due to fraud decreased.
As well, the merchant is alleviated from having to store consumer's financial information in their computer systems, thereby reducing overhead and avoiding the potential disaster of unscrupulous individuals gaining access is to confidential customer information.
For consumers, in addition to removing the need to give out financial information directly to the merchant, they haven the convenience of having a single card/account that is completely portable and usable for all bricks and zo mortar or e-commerce financial transaction applications.
Other aspects and features of the present invention will become apparent to those ordinarily skilled in the art upon review of the following description of specific embodiments of the invention in conjunction with the 2s accompanying figures.
Brief Description of the Drawings These and other features, aspects, and advantages of the present 3o invention will become better understood with regard to the following description, appended claims, and accompanying drawings where:
Figure 1 is an overview of an electronic; transaction system according to the present invention.
Detailed Description of the Presently Preferred Embodiment As shown in Figure 1, the present invention is directed to an electronic s transaction system and method. The system, leveraging existing online or fixed infrastructure, includes a financial tran;>action facilitation domain 12, located at the existing infrastructure's financial transaction facilitation end, a consumer domain 14 located at the existing infrastructure's consumer end and a merchant domain 16 located at the existing infrastructure's merchant to end, the merchant domain having a merchant integrator 32 for integration with the consumer domain and the financial transaction facilitation domain:
The financial transaction facilitation domain 12, brokering financial transactions, includes a purchasing server 18 having an authenticated is registration processor 20 for authenticating merchants and consumers registering with the system, a transaction broker 22 for managing financial transactions of registered consumers and merchants and a consumerlmerchant authenticator 24 for authenticating consumers and merchants involved in financial transactions.
The consumer domain 14 includes a digital wallet 26 for storing financial information, a digital wallet password 28 for unlocking the digital wallet and a consumer agent 30 for securely processing financial transactions between the consumer domain 14 and the financial transaction facilitation 2s domain 12, using financial information stored within the digital wallet 26.
The existing infrastructure's consumer end can include wired or wireless devices.
3o A typical scenario involving the use of the invention would see a user browsing a merchant's website, shopping for items in a normal fashion, such as placing items in a shopping cart and checking out. The consumer can then select the invention as a method of payment from a list of payment methods presented by the merchant.
The user is prompted for a card number, and in an embodiment of the present invention, if the merchant has setup non-impersonation authentication s the user is prompted for a non-impersonation password. The merchant then forwards a digitally signed and encrypted purchase request containing the purchase details and the users ID and non-impersonation password.
The financial transaction facilitation domain provides the merchant with io a list of preferred shipping addresses, which they can display to the user.
After selecting a shipping method, the user asks the merchant to process the purchase. The facilitation domain verifies that the merchant is a valid merchant and verifies that the user is a valid user. The facilitation domain then looks up the location of the agent and provides the user with purchase details, is presenting the purchase to the user and asking for verification. If the purchase is verified, the agent asks the user for their digital wallet password and loads their digital wallet. The agent then steps the user through the purchase.
After the user has selected a method of payment, the agent 2o communicates securely with the facilitation domain to complete the transaction with appropriate financial institutions. The facilitation domain acts as a broker, never handling "cash" flow into or out of accounts; instead transferring funds from the user's account to the merchant's account without storing any of the user's account information. The facilitation domain only Zs uses the account information for the duration of the transaction, subsequently erasing it from memory.
If any errors occur during the transaction, the facilitation domain notifies both the merchant and the agent <appropriately and attempts to 3o reconcile any problems. Communicating with the agent and merchant and prompting for alternative action, the facilitation domain reconciles problems such as an agent being turned off, insufficient funds, financial institution unavailable and network connection lost.

If a hostile attacker manages to penetirate a consumer domain, they would still require both the persona identification password and the digital wallet password to make unauthorized use of a consumer's account s The system provides a consumer with a more familiar financial transaction environment than existing online methods. In providing an increased level of comfort to the consumer, rnerchants can benefit from an increase in business.
io The merchant is alleviated from having to store consumer's financial information in their computer systems, thereby reducing overhead and avoiding the potential disaster of unscrupulous individuals gaining access to confidential customer information. Consumers do not have to be concerned is that they may be providing financial information to unscrupulous or careless vendors, since the invention provides a high level of assurance that the merchants are duly authorized by the system.
Since the consumer receives a purchase authorization, purchases by 2o additional cardholders such as children can be monitored andlor declined by the primary cardholder. Since the only password used online is the persona verification password, which is incapable of providing access to a digital wallet, the invention minimizes risks such as the growing problem of "identity theft".
2s In an embodiment of the present invention, the system further includes one or more financial institutions 32 integrated into the system to facilitate transactions.
so In an embodiment of the present invention, the purchasing server 18 further includes a real-time data miner 34 for providing information valuable to the merchant, yet still protecting consumer priv<~cy.

Although the present invention has been described in considerable detail with reference to certain preferred embodiments thereof, other versions are possible. Therefore, the spirit and scope of the appended claims should not be limited to the description of the preferred embodiments contained s herein.

Claims (15)

1. An electronic transaction system, leveraging existing online or fixed infrastructure, comprising:
a financial transaction facilitation domain located at the existing infrastructure's financial transaction facilitation end, the financial transaction facilitation domain brokering financial transactions includes a purchasing server having:
an authenticated registration processor for authenticating merchants and consumers registering with the system;
a transaction broker for managing financial transactions of registered consumers and merchants; and a consumer/merchant authenticator for authenticating consumers and merchants involved in financial transactions;
a consumer domain located at the existing infrastructure's consumer end, the consumer domain including:
a digital wallet for storing financial information;
a digital wallet password for unlocking the digital wallet; and a consumer agent for securely processing financial transactions between the consumer domain and the financial transaction facilitation domain using financial information stored within the digital wallet;
and a merchant domain located at the existing infrastructure's merchant end, the merchant domain having a merchant integrator for integration with the consumer domain and the financial transaction facilitation domain.
2. The system according to claim 1, wherein one or more financial institutions are integrated into the system to facilitate transactions.
3. The system according to claim 1, wherein the financial transaction facilitation domain further includes a real-time data miner for providing information valuable to the merchant, yet still protecting consumer privacy.
4. The system according to claim 1, wherein the purchasing server further includes a persona identifier that verifies a user-supplied persona identity verification password before a purchase request can be initiated, providing an additional layer of security.
5. The system according to claim 4, wherein the persona identifier is lightweight to minimize overhead.
6. The system according to claim 1, wherein the consumer can select a payment choice from a plurality of payment choices.
7. The system according to claim 1, wherein the digital wallet can further include:
a purchase history;
a preferred shipping method; and a process for enabling consumers to pre-itemize transactions, including line items and totals, prior to downloading them to their accounting programs.
8. The system according to claim 1, wherein a merchant can provide a refund.
9. The system according to claim 1, wherein a merchant can view a report.
10. The system according to claim 9, wherein a report can include:
demographic statistics purchasing statistics business strategy tips; and purchase receipts.
11.The system according to claim 1, wherein a merchant can download a transaction log.
12. The system according to claim 1, wherein a merchant can download a list of preferred shipping addresses for a given user.
13. The system according to claim 1, wherein a consumer can view purchase records.
14. The system according to claim 1, wherein a financial transaction can be completed at a bricks-and-mortar merchant location by swiping an account card.
15. An electronic transaction method, leveraging existing online or fixed infrastructure, comprising the steps of:
registering merchants and consumers to provide a secure financial transaction environment;
storing user financial information locally with the user using a private digital agent in a secure manner; and brokering financial transactions of registered consumers and merchants by:
authenticating consumers and merchants involved in financial transactions; and processing financial transactions between a consumer and a merchant in a secure manner using the stored user financial information.
CA 2353308 2001-07-18 2001-07-18 Electronic transaction system and method Abandoned CA2353308A1 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CA 2353308 CA2353308A1 (en) 2001-07-18 2001-07-18 Electronic transaction system and method

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CA 2353308 CA2353308A1 (en) 2001-07-18 2001-07-18 Electronic transaction system and method

Publications (1)

Publication Number Publication Date
CA2353308A1 true CA2353308A1 (en) 2003-01-18

Family

ID=4169521

Family Applications (1)

Application Number Title Priority Date Filing Date
CA 2353308 Abandoned CA2353308A1 (en) 2001-07-18 2001-07-18 Electronic transaction system and method

Country Status (1)

Country Link
CA (1) CA2353308A1 (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2007027154A1 (en) * 2005-08-31 2007-03-08 Encentuate Pte Ltd Fortified authentication on multiple computers using collaborative agents
GB2512613A (en) * 2013-04-03 2014-10-08 Cloudzync Ltd Secure communications system

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2007027154A1 (en) * 2005-08-31 2007-03-08 Encentuate Pte Ltd Fortified authentication on multiple computers using collaborative agents
US7617523B2 (en) 2005-08-31 2009-11-10 International Business Machines Corporation Fortified authentication on multiple computers using collaborative agents
GB2512613A (en) * 2013-04-03 2014-10-08 Cloudzync Ltd Secure communications system

Similar Documents

Publication Publication Date Title
EP2156397B1 (en) Secure payment card transactions
EP1153375B1 (en) Credit card system and method
JP4846154B2 (en) Method and system for secure authentication settlement in a computer network
US8046261B2 (en) EMV transaction in mobile terminals
US8756150B2 (en) Credit card system and method
US9053471B2 (en) Apparatus and method for conducting securing financial transactions
US20020184500A1 (en) System and method for secure entry and authentication of consumer-centric information
US20020194128A1 (en) System and method for secure reverse payment
US20070198410A1 (en) Credit fraud prevention systems and methods
US20010051924A1 (en) On-line based financial services method and system utilizing biometrically secured transactions for issuing credit
JP2003527714A (en) Electronic transaction system and method
JP2004527861A (en) Method for conducting secure cashless payment transactions and cashless payment system
US7849005B2 (en) Electronic funds transfer method
US8055545B2 (en) Apparatus and method for conducting secure financial transactions
US20090055323A1 (en) System and method for providing custom personal identification numbers at point of sale
US20030187784A1 (en) System and method for mid-stream purchase of products and services
CN106330888A (en) Method and device for ensuring security of Internet online payment
US20030110133A1 (en) Automated digital rights management and payment system with embedded content
JP2001337925A (en) User authentication device and business transaction system using it
US20030221110A1 (en) Method of disposable command encoding (DCE) for security and anonymity protection in information system operations
CA2353308A1 (en) Electronic transaction system and method
Rizvi et al. Smart Cards: The Future Gate
JP2002352172A (en) Method and device for electronic commercial transaction
JP2002074225A (en) Terminal of affiliated store of card settlement, card settlement service system, and card validity judging method in card settlement
Hansmann et al. Smart Cards and e-business

Legal Events

Date Code Title Description
FZDE Dead