WO2000077748A1 - Mecanismes d'acces et de paiement pour services web - Google Patents

Mecanismes d'acces et de paiement pour services web Download PDF

Info

Publication number
WO2000077748A1
WO2000077748A1 PCT/US2000/015641 US0015641W WO0077748A1 WO 2000077748 A1 WO2000077748 A1 WO 2000077748A1 US 0015641 W US0015641 W US 0015641W WO 0077748 A1 WO0077748 A1 WO 0077748A1
Authority
WO
WIPO (PCT)
Prior art keywords
client
payment
account
access
web services
Prior art date
Application number
PCT/US2000/015641
Other languages
English (en)
Inventor
Viswanath Vadlamani
Original Assignee
Sun Microsystems, Inc.
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Sun Microsystems, Inc. filed Critical Sun Microsystems, Inc.
Priority to EP00939631A priority Critical patent/EP1192606A1/fr
Priority to AU54691/00A priority patent/AU5469100A/en
Publication of WO2000077748A1 publication Critical patent/WO2000077748A1/fr

Links

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/0866—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means by active credit-cards adapted therefor
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/342—Cards defining paid or billed services or quantities
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/36—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes
    • G06Q20/363—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes with the personal data of a user
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F17/00—Coin-freed apparatus for hiring articles; Coin-freed facilities or services
    • G07F17/0014—Coin-freed apparatus for hiring articles; Coin-freed facilities or services for vending, access and use of specific services not covered anywhere else in G07F17/00
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F17/00—Coin-freed apparatus for hiring articles; Coin-freed facilities or services
    • G07F17/16—Coin-freed apparatus for hiring articles; Coin-freed facilities or services for devices exhibiting advertisements, announcements, pictures or the like
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/02—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by keys or other credit registering devices
    • G07F7/025—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by keys or other credit registering devices by means, e.g. cards, providing billing information at the time of purchase, e.g. identification of seller or purchaser, quantity of goods delivered or to be delivered

Definitions

  • the present invention relates generally to computer systems and more particularly to the access and payment mechanisms for web services.
  • ISP's Internet service providers
  • a customer opens such an account by contacting an ISP via a computer connection or a telephone connection, a cable connection or a wireless connection.
  • the customer is required to provide user identification (ID) information and to select a password.
  • the ISP may then transmit certain data and software to be downloaded onto the customer's machine.
  • ID user identification
  • ISP's generally provide two types of payment schemes for customers.
  • the first type of payment scheme a customer is given an unlimited quantity of access to the
  • the customer is billed at periodic intervals, such as once a month or once a year.
  • the customer is either sent a bill requesting payment or may be assessed a credit card charge for the costs of Internet access provided by the ISP.
  • a customer is charged on a per usage basis.
  • the ISP monitors usage of the Internet services by the customer and calculates costs based upon the quantity of usage by the customer. These costs are then either billed to the customer or reflected in a credit card charge that is assessed to the customer. For example, the customer may be charged in a current month for the Internet usage in a previous month.
  • Such conventional ISP account and payment schemes do not work well for some customers.
  • the present invention provides an approach to providing web services that is well-adapted for a variety of different types of users, including mobile users.
  • the present invention allows a user to create an account on the fly at the time of tendering payment for the account.
  • the account is authorized for a quantity of access to web services commensurate with the payment.
  • a user may customize the quantity of access to the needs of the user by adjusting the size of the payment.
  • the value of the account is debited based upon usage until no value remains.
  • the user may have a number of different options for paying for the account.
  • the user may furnish a credit card number so as to pay for the account via credit card.
  • the user may pay for the account using a debit card or bank card.
  • the user may use a digital cash mechanism to pay for the account.
  • the user may have a smart card that transfers electronic currency tokens to pay for the account.
  • the present invention also provides a variable cost, one time payment scheme.
  • a client presents a payment mechanism, such as a credit card, to the provider of web services at the time at which the client wishes to use the web services.
  • the payment mechanism is authenticated, and the client is preauthorized to use up to a maximum amount of web services during the ensuing session of access to the web services.
  • the credit card provided by the client may be authenticated and preauthorization may occur for a maximum charge that may be assessed to cover the cost of the ensuing session.
  • a client might be preauthorized to consume up to $100.00 of web services during the ensuing session.
  • the client is granted access to the web services, and the usage of the web services by the client are monitored.
  • a charge is assessed to cover the cost associated with the usage of the web services during the session by the client. This charge is applied to the payment mechanism that the client presented.
  • This one time approach provides a convenient mechanism for users to charge for one time access to web services, such as Internet services. The user is charged based upon the extent of usage of the web services and, hence, does not pay an excessive amount for the one time usage of the web services. The provider of the web services is ensured that it will receive payment for the use of the web services as the payment mechanism has already been presented by the user.
  • a computer network includes a provider of web services.
  • a payment is received from a customer for a fixed quantity of access to the web services provided by the provider.
  • the customer lacks an account with the provider, but an account is created for the customer in response to receiving the payment.
  • the account is allocated the fixed quantity of access to the web services that were paid for by the customer.
  • the customer is permitted to access the web services via the account, and the fixed quantity of access to the web services that is allocated to the account is debited in response to usage by the customer.
  • the web services may be provided as part of the Internet, on an intranet or on an extranet.
  • a payment is received from a smart card of a customer for a fixed quantity of web services in a computing environment.
  • An account is created for the customer in response to receiving the payment.
  • the account is authorized for the fixed quantity of web services for which payment was received.
  • Web services are then provided to the customer via the account.
  • a method is practiced in a computing environment where an Internet service provider provides access to the Internet.
  • the client is prompted for payment for access to the Internet via a web site.
  • the payment is received from the client for a fixed quantity of Internet access.
  • An account is opened for the client in response to receiving the payment.
  • the account is authorized for a fixed quantity of Internet access.
  • a computer system includes a payment module for receiving payments from a client for web services.
  • a computer system also includes a web services provider for providing web services to the clients.
  • a provider creates an account for each client upon receiving payment from the client.
  • Each account is authorized a fixed quantity of web services based upon payment by the client.
  • the computer system additionally includes a usage monitor for debiting the quantity of web services authorized for each account based upon usage of the account by the clients.
  • a method is practiced in a computing environment that includes a web server for providing web services to a client.
  • the method concerns obtaining payment from the client to cover charges for using the web services.
  • information is received from the client regarding a payment mechanism for providing payment to cover the charges for using the web services.
  • the client is granted access to the web services provided by the web server.
  • a cumulative charge to be assessed to the client for a single session of access to the web services is calculated and payment for the cumulative charge is obtained from the payment mechanism.
  • the payment mechanism may be, for example, a credit card, a debit card, a smart card or other digital cash mechanism.
  • an Internet service provider provides Internet services to a client.
  • Information regarding a credit card account is provided, and the credit card account is preauthorized for a maximum charge.
  • Usage of the Internet services by a client is monitored to calculate the total time used by the client.
  • a charge is then assessed to the credit card account based on the total time used by the client.
  • a payment mechanism of a client is preauthorized for a maximum payment for a single session of usage of web services. As the client uses the web services, the charges that have been accrued for using the web services are determined. When the charges that have been accrued reach the maximum amount for which the payment mechanism is preauthorized, access by the client to the web services is terminated.
  • a computer system in a computing environment includes a web services provider for providing web services to at least one client.
  • the computer system also includes a preauthorization component for preauthorizing use of a payment mechanism to cover expenses associated with a subsequent session of use of the web services.
  • the computer system additionally includes a usage monitor for monitoring usage of the web services during the session and for assessing a charge to the payment mechanism of the client for the expenses.
  • FIGURE 1 A depicts a computing environment that is suitable for practicing the illustrative embodiment.
  • FIGURE 1 B depicts a computing environment wherein a client uses multiple client devices at multiple login sites in practicing the illustrative embodiment.
  • FIGURE 2 depicts a block diagram of components of the client device of Figures lA and lB.
  • FIGURE 3 depicts a logical diagram of components of the web server of Figures lA and IB.
  • FIGURE 4 depicts the format of a database that holds account information.
  • FIGURE 5 depicts an example of the front side of a smart card that may be used with the illustrative embodiment.
  • FIGURE 6 depicts an example of the rear side of a smart card that may be used with the illustrative embodiment.
  • FIGURE 7A is a flow chart depicting steps that may be performed to receive payment to create an account for Internet services.
  • FIGURE 7B depicts an example of a user interface that may be provided to prompt a client for payment in creating an account.
  • FIGURE 8 is a flow chart that illustrates the steps that are performed for a client to gain access to Internet services provided by an ISP.
  • FIGURE 9 is a flow chart illustrating the steps that are performed by a client to login to the web server in the illustrative embodiment.
  • FIGURE 10 is a flow chart illustrating the steps that are performed to monitor client usage of an account.
  • FIGURE 11 depicts a flow chart of the steps that are performed in using the web services in the illustrative embodiment.
  • FIGURE 12 is a flow chart that illustrates the steps that are performed to preauthorize a payment mechanism.
  • FIGURES 13A and 13B illustrate examples of web pages that may be presented to obtain payment mechanism information from the client.
  • FIGURE 14 is a flow chart illustrating the steps that are performed to authenticate a credit card payment mechanism.
  • FIGURE 15 is a flow chart illustrating the steps that are performed to monitor usage of web services by a client.
  • the illustrative embodiment, consistent with the principles of the present invention may create accounts upon demand from a client.
  • the accounts enable the clients to gain access to Internet services that are provided by an Internet service provider (ISP).
  • ISP Internet service provider
  • the value of the account i.e. the extent of Internet access provided by the account
  • the value of each account is debited based upon usage of the account.
  • the account is below a threshold amount or has negligible value, the account is disabled such that the client assigned the account is no longer able to gain access to the Internet via the account.
  • the client has the ability to customize the quantity of Internet access that the client desires. For example, if the client desires to have one hour of Internet access, the client may pay for one hours of Internet access and open an account that is authorized for one hour of Internet access.
  • the client may pay for the account in a number of different ways.
  • the client may provide a credit card number so as to pay for the account by charging the payment to the credit card.
  • the client may pay for the account via a digital cash mechanism.
  • the client may pay for the account using a debit card or bank card.
  • the client may also pay for the account by using a smart card.
  • the smart card may transfer electronic currency tokens to furnish payment for the account.
  • the ISP may provide a user interface for accepting payment from the client. This user interface may take the form of a web page.
  • the web page may request the user to select a form of payment and provide requisite information to insure that the payment is realized.
  • the illustrative embodiment provides the user with a great deal of flexibility as to payment mechanisms.
  • the illustrative embodiment provides an approach to Internet access that is well suited for mobile users.
  • the mobile users may choose the quantity of access that meets their anticipated needs.
  • the client may access the account from multiple login sites and from multiple machines. The account is debited based upon the usage such that the full value of the account is used by the client as opposed to being wasted.
  • the illustrative embodiment also provides a useful approach for a mobile client.
  • the mobile client need not be concerned about which device the mobile client is using to gain access to the Internet services.
  • the mobile client need not be concerned with the location from which the client seeks to gain access to Internet services.
  • the mobile client needs to simply contact a given web site or call a designated ISP telephone number to gain access to the Internet services.
  • the illustrative embodiment also provides a variable cost, one time payment mechanism for covering the cost to a client for accessing web services provided by a web service provider.
  • a web service provider ISP
  • the payment mechanism employed in the illustrative embodiment is "variable cost" in that the cost assessed to the client for accessing the Internet services varies depending upon the extent of usage of the Internet services by the client.
  • the payment mechanism is a "one time” mechanism in that the client separately pays for each session of usage of the Internet services.
  • the charge assessed to the client for a session of usage of the Internet services is based upon the quantity of usage by the client; hence, the client does not pay excessive charges for resources the client does not consume.
  • a session of usage of the Internet services begins by the client accessing a web site that requests payment mechanism information from the client.
  • the requested information may include the nature of the payment mechanism that is to be used and particulars regarding the payment mechanism.
  • the payment mechanisms may include, for instance, credit cards, debit cards, smart cards and digital cash mechanisms.
  • the client may be requested to identify the type of payment mechanism used (e.g. whether a smart card or a credit is being used).
  • the client proposes to use a credit card.
  • the client may then be asked to identify which credit card the client intends to use.
  • the client may be prompted to provide the credit card number, expiration date and the name that is on the card.
  • the ISP utilizes the payment mechanism information to authenticate that the payment mechanism is valid and can be used to cover the cost of the ensuing session of usage of the Internet services by the client.
  • the ISP preauthorizes a maximum charge amount for the payment mechanism.
  • an ISP may preauthorize that a client may use the credit card of the client as a payment mechanism for up to $100.00 of charges during a single session of usage of the Internet services.
  • the client may be given access to the Internet services provided by the ISP.
  • a monitoring mechanism is employed to monitor usage by the client. This monitoring mechanism tabulates the charges associated with usage of the Internet services on an ongoing basis. Moreover, the monitoring mechanism ensures that the cumulative accmed charges for the client during the current session of usage of the Internet services does not exceed the maximum amount for which the payment mechanism is preauthorized. The monitoring mechanism may terminate access to the Internet services when the maximum amount of charges is reached. In order to help clarify the discussion below, it is helpful to define a few terms.
  • Internet service provider provides Internet access to client.
  • Web services are services that are provided by a provider over a network, such as the Internet, an intranet or an extranet, that adopts the TCP/IP protocol suite or another suitable network protocol.
  • Internet services are services provided by an ISP over the Internet.
  • a primary example of Internet services is access to the Internet.
  • a “web server” is a server that provides web services.
  • the web server is part of a network, such as the Internet, an intranet or an extranet.
  • An “intranet” is a private network that uses Internet-like software and provides Internet-like services.
  • An “extranet” is a private Internet-like network that provides secure areas for access by selected external parties.
  • FIG. 1A depicts a computing environment 10 that is suitable for practicing the illustrative embodiment.
  • a client uses a client device 12 to contact a web server 14 that is part of a network 16.
  • the client has a payment mechanism 15 for paying for the cost of using the web services provided by the web server 14.
  • the payment mechanism may take many forms, including a credit card, a debit card, a bank card, a smart card, a digital cash mechanism or a secured token device that holds electronic currency tokens.
  • the web server 14 is part of the Internet. Nevertheless, those skilled in the art will appreciate that the web server 14 may also be part of an intranet, an extranet or another computer network.
  • the present invention is not limited to being practiced within the Internet but also works with other networks and other networks that employ connectionless protocols.
  • the client device 12 may be any of a number of different types of devices.
  • the client device 12 may be a desktop computer system, a laptop computer system or even a palmtop computer system.
  • the client device 12 may be a network computer, an intelligent television set, a pager or other device that is able to communicate with the web server 14 and create an appropriate connection.
  • the client device 12 may access the web server 14 by using a dial-up network program or by creating a connection via a web browser.
  • Figure IB depicts an example wherein the client is a mobile client.
  • the client uses different devices 12A, 12B and 12C at different respective sites 13 A, 13B and 13C to communicate with the web server 14 within the IP network 16.
  • the illustrative embodiment accommodates the clients using the different devices 12 A, 12B and 12C.
  • the client devices may in general be any devices that can interface with the network.
  • the illustrative embodiment accommodates the client logging in from the different respective sites 13 A, 13B and 13C.
  • the client just needs to have a web browser and must be able to provide the user ID and password in order to gain access to the web services provided by the web server 14.
  • FIG. 2 depicts the client device 12 in more detail.
  • the client device 12 is a computer system.
  • the client device 12 shown in Figure 2 includes a central processing unit (CPU) 17 for executing computer program instructions and overseeing operation of the client device.
  • the client device 12 of Figure 2 includes a video display 19, a keyboard 18 and a mouse 20.
  • the client device may include a smart card reader 21 for facilitating communications between the client device 12 and a smart card, which acts as the payment mechanism 15.
  • the smart card may comply with the ISO-7816 standard or the EMV integrated circuit card specification.
  • the smart card preferably complies with the JavaCard 2.1 specification as defined by Sun Microsystems, Inc. of Palo Alto, California.
  • JavaCard 2.1 requires that the smart card be capable of running programs written in the JavaTM programming language.
  • Java is a trademark or registered trademark of Sun Microsystems, Inc. in the United States and other countries.
  • the smart card need not run the Java programming language to practice the present invention; rather the smart card may alternatively mn programs written in different programming languages.
  • the client device 12 may also include a magnetic card reader 23 for reading magnetic cards. Still further, the client device 12 may include a modem 32, such as a conventional data modem, a cable modem or a wireless modem. The client device 12 may have a network adapter for connecting the client device with a local area network.
  • the client device 12 may include primary storage 22 as well as secondary storage 24.
  • the primary storage 22 and secondary storage 24 may be realized using a number of well-known storage devices and computer-readable mediums.
  • the primary storage 22 may hold support for dial-up networking 26 and a web browser 28.
  • the depiction of the client device 12 in Figure 2 is intended to be merely illustrative and not limiting of the present invention. Configurations that differ from the configuration depicted in Figure 2 may be utilized. For example, different peripheral devices may be utilized and not all of the components shown in Figure 2 are required to practice the present invention.
  • the client device 12 may lack a network adapter 30, smart card reader 21, magnetic card reader 23, mouse 20 or modem 32.
  • the client device 12 may include components such as loud speakers, pointing devices, or a digital scanner, for instance.
  • FIG. 3 depicts the major logical components of the web server 14.
  • the web server 14 may be implemented as a dedicated server computer system or as a shared computer system in which a web server process runs.
  • the web server 14 need not be implemented on a single computer system but rather may be implemented as a distributed system.
  • the web server 14 includes programs and data that form web server support 40.
  • the web server support 40 includes support for protocols, such as the TCP/IP protocol suite, a markup language, such as HTML, a transfer protocol like HTTP, the Java programming language and other support necessary for the web server 14 to facilitate Internet access.
  • the web server support 40 may furnish a number of HTML documents that are forwarded to clients to provide user interface information.
  • the web server 14 may also include a payment module 42.
  • the payment module 42 is responsible for obtaining payment mechanism information from the client and for interacting with any third-party authentication mechanisms to ensure that the payment mechanism provided by the client is authentic and preauthorized for a sufficient maximum amount.
  • a time usage monitor 44 is provided in the web server 14 to monitor usage of the Internet services. Creation of Accounts on Demand
  • the web server 14 may create a number of different accounts to facilitate users using accounts on the fly. These accounts may be all associated with a fixed quantity of web services, or the accounts may be associated with different quantities of web services. For example, some accounts may be associated with ten dollars worth of services, whereas other accounts may be associated with five dollars of services. Similarly, accounts may be associated with five hours, ten hours and fifteen hours of service.
  • the quantity of services associated with an account may be expressed as a value of time, monetary value or as a value of another metric. Those skilled in the art will appreciate other methods may be used to quantify amounts of service or web access.
  • the database 42 holds information regarding each account, including the quantity of service associated with the account.
  • Figure 4 shows an example of the database 42.
  • the database 42 includes an entry 50 for each account.
  • An account number or account identifier 52 is associated with each account.
  • the value of this account number 52 is stored within the database 42 for each account.
  • Information regarding the time that has been consumed 54 on the account is also stored in the database.
  • Information regarding the time that is left 56 in the account is also stored within the database 42.
  • account ABC was originally allocated three hours of Internet access. An hour of the three hours has been consumed and two hours remain.
  • a record of the total time purchased and the time used may be kept in the database 42.
  • a record of the total time purchased and the time remaining may be kept in the database 42.
  • Each client may be provided with a smart card or other secure token device which has computer components, such as microprocessor and a storage embedded into it.
  • the smart card may comply with the ISO-7816 standard or the EMV integrated circuit card specification.
  • the smart card complies with the JavaCard 2.1 specification as defined by Sun Microsystems, Inc.
  • the JavaCard 2.1 specification requires that the secure token device be capable of running programs written in the Java programming language. Those skilled in the art will appreciate that the smart card need not run the Java programming language to practice the present invention.
  • FIG 5 shows the front side of a smart card 66
  • Figure 6 shows the rear side of the smart card.
  • the front side of the smart card 66 includes a number of electrical contact 70 that are used for electrical communications with a microprocessor that is embedded within the smart card.
  • the smart card 66 includes a substrate 68 of a suitable material, such as plastic, that forms the core of the smart card.
  • An embossing area 72 may be provided on the front side to be signed by the holder of the smart card or to hold other textual information.
  • the rear surface of the smart card (see Figure 6) may include a magnetic strip 74 to hold information that is readable by a magnetic strip reader.
  • the smart card may hold electronic currency tokens that are used for payment to obtain an account on behalf of the client that holds the smart card.
  • Figure 7A depicts the steps that are performed to realize payment in the illustrative embodiment.
  • a client contacts a payment web site (step 71 in Figure 7A).
  • the client may be provided with a given telephone number, such as a toll free number, that the client may call to gain access to the payment web site.
  • a URL for the site may be made known to the client.
  • the payment web site may be furnished by the web server 14.
  • the payment web site may include HTML or XML documents that may be displayed in response to the client contacting the web server 14.
  • the client is prompted for payment (step 73 in Figure 7A).
  • This may take the form of a web page that requests the selection of payment options and payment information.
  • Figure 7B shows and example of a window 80 that holds the contents of a web page in the client area 82.
  • the client area 82 displays text to 84 that prompts the client to choose a payment option.
  • additional web pages may be displayed to obtain the requisite information to realize payment via the chosen payment option. For example, if the user chooses the credit card option, the user may be requested to enter a credit card number, an expiration date and some personal information.
  • Payment is then received (step 75 in Figure 7A) with respect to a credit card or bank card payment, receiving the payment includes authorizing the credit card, debit card or bank card in assessing the appropriate payment via the mechanisms used for that type of card. If the client chooses to pay via digital cash or smart card, an electronic currency or an electronic transfer of funds must occur in order for payment to be received. With the smart card, this may constitute transfer of electronic currency tokens from the client's smart card over the network to the web server.
  • an account is created for the quantity of services for which payment was received (step 76 in Figure 7A).
  • the account is created on demand or "on the fly.” In other words, the account does not pre-exist but rather is created in response to receipt of payment from a client.
  • the fixed quantity of services associated with the account depends upon the amount paid by the client.
  • the client is provided with a user identification (ID) and an initial password for the account (step 78 in Figure 7A). The user ID and password will be requested from the client when the client seeks to use the account to gain access to Internet services.
  • Figure 8 provides an overview of the steps that are performed for a client to utilize Internet services in the illustrative embodiment.
  • the client contacts the web server 14 (step 90 in Figure 8). As mentioned above, this contact may be achieved using dial-up networking software 26 from the client device 12 or by placing a call and using a web browser 28.
  • the client then performs the necessary steps for login (step 92 in Figure 8).
  • Figure 9 provides a flow chart of the steps that are performed during login.
  • the login begins with a web server prompting the client for a user ID (step 100 in Figure 9).
  • the web server may generate web pages that request the user ID.
  • the web page may also request that the client provide a password (see step 106 in Figure 9).
  • a separate web page may prompt the client for the password after the user ID has been received and validated.
  • the web server 14 performs steps to determine whether the user ID is valid (step 104 in Figure 9).
  • the web server may contain a list of valid user IDs within the database 34 or another storage mechanism. If the user ID is not valid, access to the Internet via the account is denied (step 112 in Figure 9). In contrast, if the user ID is valid (as checked in step 104 in Figure 9), the client prompted for a password (step 106 in Figure 9).
  • the password is received by the web server (step 108 in Figure 9), and the web server performs steps to determine whether the password is valid or not (step 110 in Figure 9).
  • the web server 14 holds a list of the user IDs and associated passwords. It makes certain that the password that is entered and received is that which is stored by the web server. If the password is not valid, the client is denied access to the Internet services via an account (step 112 in Figure 9). If the password is valid, the client is granted access to the Internet services via an account (step 114 in Figure 9).
  • Figure 10 depicts the steps that are performed to monitor usage of the Internet services by a client (see step 96 in Figure 8). As was mentioned above, the web server 14 maintains the database 42 to monitor the time used and the time remaining for a given account. The steps shown in Figure 10 are performed at periodic intervals such as once a minute or once every five minutes.
  • the time used for the account is incremented (step 130 in Figure 10).
  • the time left or remaining for the account is decremented for the same quantity. For example, if the steps are performed every five minutes, in step 130 of Figure 10, the time used is incremented by 5 minutes and in step 132 of Figure 10, the time remaining is decremented by 5 minutes.
  • the time usage monitor 44 (see Figure 3) of the web server 14 then checks whether there is any time remaining for the account in step 134, Figure 10. If there is not any time left, the client is advised and services are terminated (step 136 in Figure 10). Otherwise, there is time remaining and the monitoring process continues.
  • time usage monitor 44 need not wait until no time remains on the account but rather may wait until the account is below a given threshold and give the client warnings. Alternatively, the time usage monitor may actually allow the time to go to slightly negative value and then terminate service at that point. Those skilled in the art will have known a number of different alternatives that may be provided for monitoring such usage. As was mentioned above, the usage need not be monitored purely as a value of time but also may be monitored as a monetary value or as another metric. Eventually, the client completes usage of the services (step 98 in Figure 8). The client may subsequently again use the services provided by the web server 14 if time remains on the given account.
  • Figure 11 depicts the steps that are performed for a client to access and use the Internet services provided by an ISP with the variable cost, one time access and payment mechanism of the illustrative embodiment.
  • the ISP i.e. the web server 14 of the ISP
  • Figure 12 depicts the steps that are performed to preauthorize a client.
  • the preauthorization begins with the client calling a phone number that is provided by the ISP for variable cost, one time access to the Internet services provided by the ISP (step 160 in Figure 12). This may be, for example, a toll free number.
  • the ISP then sends a form to the client to request payment information (step 162 in Figure 12).
  • the form may be implemented as one or more HTML documents that are forwarded over an Internet connection from the web server 14 to the client device 12.
  • the web browser 28 on the client device renders the web pages so that they are visible to the client.
  • Figure 7B is an example of an initial web page that may be provided to the client to request payment mechanism information. After selecting a payment option, the client may be presented with additional web pages that obtain further information regarding the selected payment option.
  • Figure 13A shows an example of a web page 176 that may be presented when the user selects the credit card option. This web page includes section 178 that includes text and radio buttons for selecting which variety of credit card the client wishes to use.
  • Figure 13B shows an example of an additional web page 180 that includes sections 182, 184 and 186 in the client area 181.
  • This web page 180 obtains information regarding the client's credit card.
  • Section 182 includes a text box in which the client is requested to enter the credit card account number.
  • Section 184 includes a text box in which the client is requested to enter the expiration date for the credit card and
  • section 186 includes a text box in which the client is requested to enter the client name as it appears on the credit card.
  • the client uses these forms to provide the requested payment mechanism information and to forward the payment mechanism information to the web server 14 of the ISP (step 164 in Figure 12).
  • This payment mechanism information is used in authenticating that the payment mechanism is valid and may be used to cover the charges to be assessed to the client for using the Internet services provided by the ISP (step 166 in Figure 12).
  • FIG 14 shows an example of the steps that are performed when the payment mechanism is a credit card.
  • the ISP checks whether the credit card number that has been provided by the client is a valid credit card number (step 190 in Figure 14). Only selected account numbers are valid for given credit card types. For example, a MasterCard account may have a predetermined number of digits and may have an acceptable subset of values. Moreover, the credit card number must represent an existing credit card account. If the credit card number is not valid, the payment mechanism is not authenticated, and the client is denied access to the Internet services provided by the ISP (step 200 in Figure 14).
  • the ISP may check whether the account has expired or if there is a stop or other impediment associated with the account.
  • Account numbers may be associated with accounts that have only a finite lifetime. After the expiration of the defined lifetime, the account may expire. Similarly, accounts may expire because a user has canceled the account or the user has failed to make sufficient payments so as to keep the account alive. Furthermore, stops may be placed on an account where a user is delinquent in payments or if unusual activity has occurred on an account. A stop may also be placed on an account where a user has reported that a credit card is missing or that a theft has occurred. If the account has expired or if the account has a stop on it (step 192 in Figure 14), the client may be denied access to the Internet services provided by the ISP (step 200 in Figure 14).
  • the ISP may check whether the name provided by the client matches the records stored by the ISP as the cardholder of record for the account (see step 194 in Figure 14). If the name does not match the records, the client is denied access to the Internet services provided by the ISP (step 200 in Figure 14).
  • the ISP may require that the credit available on the credit card be at least a minimal amount before the client will be preauthorized.
  • the ISP checks whether the account has sufficient available credit. If the account lacks sufficient available credit, the client will be denied access to the Internet services provided by the ISP (step 200 in Figure 14). If, however, sufficient credit is available, the client is granted access to the Internet services provided by the ISP up to a predetermined maximum amount. The maximum amount may be fixed for all clients or may be based upon the amount of available credit (see step 198 in Figure 14).
  • steps 190, 192, 194 and 196 in Figure 14 is merely illustrative and not intended to be limiting of the present invention. Different orderings of these steps may be used in practicing the present invention. If the payment mechanism provided by the client is preauthorized, the client is granted access to the Internet services provided by the ISP and the time usage monitor 44 of the web server 14 is used to monitor usage of the Internet services by the client (step 152 in Figure 11).
  • Figure 15 is a flow chart illustrating the steps that are performed by the time usage monitor 44 in monitoring usage by the client.
  • the time used during a session by the client is incremented at predetermined time intervals (step 202 in Figure 15).
  • a check is made to determine whether the client has reached the preauthorized maximum amount of charges based upon the usage thus far (step 204 in Figure 15). If the client has reached or exceeded the maximum, the client is denied further access to the Internet services provided by the ISP (step 206 in Figure 15).
  • a charge is assessed to the client based upon the usage during the session (step 154 in Figure 11).
  • the client may be "done” when the client has reached the maximum preauthorized amount or when the client has chosen to terminate a session.
  • the charge is assessed using the payment mechanism that was preauthorized and presented by the client.

Landscapes

  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Theoretical Computer Science (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Finance (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

Cette invention permet de créer, à sa demande, un compte d'accès à des services Web pour un client. La création du compte a lieu lors de la soumission du paiement par le client. La quantité des services Web autorisée pour le compte en question dépend directement de la somme du paiement. Le client peut utiliser un certain nombre de mécanismes de paiement différents pour alimenter le compte. Le compte est débité, en fonction de l'utilisation, jusqu'à ce que sa valeur soit inférieure à un seuil prédéterminé. Les services Web fournis peuvent être des services Internet fournis par des fournisseurs de services Internet (ISP). Un élément de préautorisation peut être prévu pour autoriser préalablement le client, une première fois et à un coût variable, à avoir accès aux services Web. Le client présente cet élément de préautorisation avec un mécanisme de paiement. L'élément de préautorisation confirme que le mécanisme de paiement est authentique et que sa capacité de paiement est suffisante pour couvrir les dépenses d'utilisation des services Web par le client. L'utilisation des services Web par le client est suivie et des frais accompagnent le mécanisme de paiement du client, en vue de couvrir les dépenses d'utilisation des services Web par le client.
PCT/US2000/015641 1999-06-10 2000-06-07 Mecanismes d'acces et de paiement pour services web WO2000077748A1 (fr)

Priority Applications (2)

Application Number Priority Date Filing Date Title
EP00939631A EP1192606A1 (fr) 1999-06-10 2000-06-07 Mecanismes d'acces et de paiement pour services web
AU54691/00A AU5469100A (en) 1999-06-10 2000-06-07 Access and payment mechanisms for web services

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
US32970999A 1999-06-10 1999-06-10
US32981399A 1999-06-10 1999-06-10
US09/329,709 1999-06-10
US09/329,813 1999-06-10

Publications (1)

Publication Number Publication Date
WO2000077748A1 true WO2000077748A1 (fr) 2000-12-21

Family

ID=26986926

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2000/015641 WO2000077748A1 (fr) 1999-06-10 2000-06-07 Mecanismes d'acces et de paiement pour services web

Country Status (3)

Country Link
EP (1) EP1192606A1 (fr)
AU (1) AU5469100A (fr)
WO (1) WO2000077748A1 (fr)

Cited By (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6574604B1 (en) * 1996-05-13 2003-06-03 Van Rijn Percy Internet message system
EP1320214A1 (fr) * 2001-12-12 2003-06-18 Markport Limited Gestion de comptes unifiée pour accès à un réseau de données
EP1360629A2 (fr) * 2001-01-17 2003-11-12 Benik Hovsepian Systeme et procede d'acces electronique prepaye
WO2004105315A1 (fr) * 2003-05-26 2004-12-02 Huawei Technologies Co., Ltd Procede general de facturation
EP1519332A1 (fr) * 2003-09-26 2005-03-30 AT&T Corp. Méthode et système pour la réception de contenu numérique utilisant une carte prépayée de contenu numérique
FR2870656A1 (fr) * 2004-05-18 2005-11-25 France Telecom Procede de paiement anonyme et securise sur internet et mobiles
EP1770589A1 (fr) * 2005-09-29 2007-04-04 Research In Motion Limited Système et procédé d'enregistrement d'entités pour des services de signature numérique de code
EP1770588A1 (fr) * 2005-09-29 2007-04-04 Research In Motion Limited Système et procédé de fourniture de services de signature numérique de code.
EP1770587A1 (fr) * 2005-09-29 2007-04-04 Research In Motion Limited Génération à distance d'empreinte par fonction de hachage dans un système et procédé de fourniture de services de signature numérique de code
EP1770586A1 (fr) * 2005-09-29 2007-04-04 Research In Motion Limited Gestion de comptes dans un système et procédé de fourniture de services de signature numérique de code
EP1801724A3 (fr) * 2005-12-21 2008-07-09 Francotyp-Postalia GmbH Procédé et dispositif pour fournir des services liés à la sécurité par un module de sécurité d'une machine d'affranchissement
US7797545B2 (en) 2005-09-29 2010-09-14 Research In Motion Limited System and method for registering entities for code signing services
US8340289B2 (en) 2005-09-29 2012-12-25 Research In Motion Limited System and method for providing an indication of randomness quality of random number data generated by a random data service
US8352315B2 (en) 2009-05-04 2013-01-08 Visa International Service Association Pre-authorization of a transaction using predictive modeling

Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO1996039668A1 (fr) * 1995-06-06 1996-12-12 Interactive Media Works, L.L.C. Procedes de promotion et d'assistance relative a des produits via internet
WO1996041286A1 (fr) * 1995-06-07 1996-12-19 Mastercard International, Inc. Systeme et procede pour effectuer des transactions electroniques sur un reseau d'ordinateurs
WO1997014118A2 (fr) * 1995-10-10 1997-04-17 Suntek Software Corporation Reseau informatique permettant a des utilisateurs individuels d'acceder au reseau internet
WO1998025237A1 (fr) * 1996-12-06 1998-06-11 American Express Travel Related Services Company, Inc. Procedes et appareil destines a regenerer un compte a transaction preprovisionne
US5768521A (en) * 1994-05-16 1998-06-16 Intel Corporation General purpose metering mechanism for distribution of electronic information
WO1998030013A1 (fr) * 1996-12-31 1998-07-09 Walker Asset Management L.P. Procedes et systemes pour relier un appelant a un fournisseur de donnees
US5812765A (en) * 1996-03-22 1998-09-22 Axxs Technologies Corporation Multi-media remote data access terminals and system
DE19748353A1 (de) * 1997-11-03 1999-05-20 Pipeline Online Com Systems Gm Nutzungssystem für Informationsdienste
WO1999056254A1 (fr) * 1998-04-24 1999-11-04 Claridge Trading One (Proprietary) Limited Acces a prepaiement pour reseau d'informations

Patent Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5768521A (en) * 1994-05-16 1998-06-16 Intel Corporation General purpose metering mechanism for distribution of electronic information
WO1996039668A1 (fr) * 1995-06-06 1996-12-12 Interactive Media Works, L.L.C. Procedes de promotion et d'assistance relative a des produits via internet
WO1996041286A1 (fr) * 1995-06-07 1996-12-19 Mastercard International, Inc. Systeme et procede pour effectuer des transactions electroniques sur un reseau d'ordinateurs
WO1997014118A2 (fr) * 1995-10-10 1997-04-17 Suntek Software Corporation Reseau informatique permettant a des utilisateurs individuels d'acceder au reseau internet
US5812765A (en) * 1996-03-22 1998-09-22 Axxs Technologies Corporation Multi-media remote data access terminals and system
WO1998025237A1 (fr) * 1996-12-06 1998-06-11 American Express Travel Related Services Company, Inc. Procedes et appareil destines a regenerer un compte a transaction preprovisionne
WO1998030013A1 (fr) * 1996-12-31 1998-07-09 Walker Asset Management L.P. Procedes et systemes pour relier un appelant a un fournisseur de donnees
DE19748353A1 (de) * 1997-11-03 1999-05-20 Pipeline Online Com Systems Gm Nutzungssystem für Informationsdienste
WO1999056254A1 (fr) * 1998-04-24 1999-11-04 Claridge Trading One (Proprietary) Limited Acces a prepaiement pour reseau d'informations

Cited By (25)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6574604B1 (en) * 1996-05-13 2003-06-03 Van Rijn Percy Internet message system
EP1360629A2 (fr) * 2001-01-17 2003-11-12 Benik Hovsepian Systeme et procede d'acces electronique prepaye
EP1360629A4 (fr) * 2001-01-17 2005-02-16 Benik Hovsepian Systeme et procede d'acces electronique prepaye
EP1320214A1 (fr) * 2001-12-12 2003-06-18 Markport Limited Gestion de comptes unifiée pour accès à un réseau de données
US7313230B2 (en) 2003-05-26 2007-12-25 Huawei Technologies Co., Ltd. General charging method
WO2004105315A1 (fr) * 2003-05-26 2004-12-02 Huawei Technologies Co., Ltd Procede general de facturation
US7590228B2 (en) 2003-05-26 2009-09-15 Huawei Technologies Co., Ltd. General charging method
EP1519332A1 (fr) * 2003-09-26 2005-03-30 AT&T Corp. Méthode et système pour la réception de contenu numérique utilisant une carte prépayée de contenu numérique
FR2870656A1 (fr) * 2004-05-18 2005-11-25 France Telecom Procede de paiement anonyme et securise sur internet et mobiles
WO2005124708A1 (fr) 2004-05-18 2005-12-29 France Telecom Procede de paiement anonyme et securise sur internet et mobiles
US7630927B2 (en) 2004-05-18 2009-12-08 France Telecom Anonymous and secure internet payment method and mobile devices
US9077524B2 (en) 2005-09-29 2015-07-07 Blackberry Limited System and method for providing an indication of randomness quality of random number data generated by a random data service
EP1770587A1 (fr) * 2005-09-29 2007-04-04 Research In Motion Limited Génération à distance d'empreinte par fonction de hachage dans un système et procédé de fourniture de services de signature numérique de code
EP1770586A1 (fr) * 2005-09-29 2007-04-04 Research In Motion Limited Gestion de comptes dans un système et procédé de fourniture de services de signature numérique de code
EP1770589A1 (fr) * 2005-09-29 2007-04-04 Research In Motion Limited Système et procédé d'enregistrement d'entités pour des services de signature numérique de code
EP1770588A1 (fr) * 2005-09-29 2007-04-04 Research In Motion Limited Système et procédé de fourniture de services de signature numérique de code.
US7797545B2 (en) 2005-09-29 2010-09-14 Research In Motion Limited System and method for registering entities for code signing services
US8340289B2 (en) 2005-09-29 2012-12-25 Research In Motion Limited System and method for providing an indication of randomness quality of random number data generated by a random data service
EP1801724A3 (fr) * 2005-12-21 2008-07-09 Francotyp-Postalia GmbH Procédé et dispositif pour fournir des services liés à la sécurité par un module de sécurité d'une machine d'affranchissement
US8682801B2 (en) 2005-12-21 2014-03-25 Francotyp-Postalia Gmbh Method and arrangement for provision of security relevant services via a security module of a franking machine
US8352315B2 (en) 2009-05-04 2013-01-08 Visa International Service Association Pre-authorization of a transaction using predictive modeling
US9489674B2 (en) 2009-05-04 2016-11-08 Visa International Service Association Frequency-based transaction prediction and processing
US9727868B2 (en) 2009-05-04 2017-08-08 Visa International Service Association Determining targeted incentives based on consumer transaction history
US9773246B2 (en) 2009-05-04 2017-09-26 Visa International Service Association Pre-authorization of a transaction using predictive modeling
US9984379B2 (en) 2009-05-04 2018-05-29 Visa International Service Association Determining targeted incentives based on consumer transaction history

Also Published As

Publication number Publication date
AU5469100A (en) 2001-01-02
EP1192606A1 (fr) 2002-04-03

Similar Documents

Publication Publication Date Title
US20020161676A1 (en) Prepaid fixed quantity access to web services
US6047268A (en) Method and apparatus for billing for transactions conducted over the internet
Luttge E-charging api: outsource charging to a payment service provider
CN107093067B (zh) 电子货币充值服务器和电子货币充值方法
US7412423B1 (en) Charging system and charging method
EP0926611A2 (fr) Procédé de validation de transactions
US6823318B1 (en) Secure purchases over a computer network
US20050080634A1 (en) Method and network element for paying by a mobile terminal through a communication network
US20040185827A1 (en) System and method for replenishing an account
WO2000077748A1 (fr) Mecanismes d'acces et de paiement pour services web
EP1031106A1 (fr) Procede permettant des activites de detail sur un reseau longue distance
US20080025490A1 (en) Method and System for Providing Long Distance Service
KR20000037471A (ko) 대금 결제 서비스 방법 및 그를 위한 시스템
CN100456712C (zh) 互联网内容付费的实现方法
US20020035479A1 (en) Access contract changing method for automatically changing an access contract between a prepaid contract and a postpaid contract
US20010046283A1 (en) Arrangement for billing or billing authorization using a calling card
WO2002097750A1 (fr) Systeme de micropaiement
CN1689047B (zh) 一种预订销售系统
US20040111364A1 (en) Content charging
US20060031168A1 (en) Method for access to multimedia content and a platform for implementation of the method
US20020054672A1 (en) Method of paying for transactions performed for example on internet
KR100394527B1 (ko) 부가가치통신망을 이용한 전자 지불방법
KR100349578B1 (ko) 유무선 전화망을 이용한 과금 시스템
JP2002083226A (ja) 可搬型記録媒体を利用したインターネット接続システム、及びサービス提供方法、通信用端末、入場管理システム
KR20020026505A (ko) 휴대형 보안장치를 이용한 전자상거래 인증 및ｉｓｐ 결제서비스 방법

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY CA CH CN CR CU CZ DE DK DM DZ EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PL PT RO RU SD SE SG SI SK SL TJ TM TR TT TZ UA UG UZ VN YU ZA ZW

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE BF BJ CF CG CI CM GA GN GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
WWE Wipo information: entry into national phase

Ref document number: 2000939631

Country of ref document: EP

WWP Wipo information: published in national office

Ref document number: 2000939631

Country of ref document: EP

REG Reference to national code

Ref country code: DE

Ref legal event code: 8642

NENP Non-entry into the national phase

Ref country code: JP

WWW Wipo information: withdrawn in national office

Ref document number: 2000939631

Country of ref document: EP