US20060195367A1 - Payment system and method for use in an electronic commerce system - Google Patents
Payment system and method for use in an electronic commerce system Download PDFInfo
- Publication number
- US20060195367A1 US20060195367A1 US11/404,841 US40484106A US2006195367A1 US 20060195367 A1 US20060195367 A1 US 20060195367A1 US 40484106 A US40484106 A US 40484106A US 2006195367 A1 US2006195367 A1 US 2006195367A1
- Authority
- US
- United States
- Prior art keywords
- agent
- merchant
- customer
- key
- consumer
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Abandoned
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q30/00—Commerce
- G06Q30/06—Buying, selling or leasing transactions
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/02—Payment architectures, schemes or protocols involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
- G06Q20/027—Payment architectures, schemes or protocols involving a neutral party, e.g. certification authority, notary or trusted third party [TTP] involving a payment switch or gateway
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/08—Payment architectures
- G06Q20/085—Payment architectures involving remote charge determination or related payment systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/08—Payment architectures
- G06Q20/085—Payment architectures involving remote charge determination or related payment systems
- G06Q20/0855—Payment architectures involving remote charge determination or related payment systems involving a third party
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/08—Payment architectures
- G06Q20/10—Payment architectures specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/08—Payment architectures
- G06Q20/10—Payment architectures specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
- G06Q20/102—Bill distribution or payments
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/08—Payment architectures
- G06Q20/10—Payment architectures specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
- G06Q20/105—Payment architectures specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems involving programming of a portable memory device, e.g. IC cards, "electronic purses"
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/08—Payment architectures
- G06Q20/10—Payment architectures specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
- G06Q20/108—Remote banking, e.g. home banking
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/08—Payment architectures
- G06Q20/20—Point-of-sale [POS] network systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/08—Payment architectures
- G06Q20/20—Point-of-sale [POS] network systems
- G06Q20/204—Point-of-sale [POS] network systems comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/36—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes
- G06Q20/367—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/36—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes
- G06Q20/367—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes
- G06Q20/3672—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes initialising or reloading thereof
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/36—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes
- G06Q20/367—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes
- G06Q20/3674—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes involving authentication
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
- G06Q20/3821—Electronic credentials
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q20/401—Transaction verification
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q30/00—Commerce
- G06Q30/06—Buying, selling or leasing transactions
- G06Q30/0601—Electronic shopping [e-shopping]
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q30/00—Commerce
- G06Q30/06—Buying, selling or leasing transactions
- G06Q30/0601—Electronic shopping [e-shopping]
- G06Q30/0613—Third-party assisted
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q40/00—Finance; Insurance; Tax strategies; Processing of corporate or income taxes
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q40/00—Finance; Insurance; Tax strategies; Processing of corporate or income taxes
- G06Q40/03—Credit; Loans; Processing thereof
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q50/00—Systems or methods specially adapted for specific business sectors, e.g. utilities or tourism
- G06Q50/10—Services
- G06Q50/18—Legal services; Handling legal documents
- G06Q50/188—Electronic negotiation
Definitions
- the present invention relates to a payment system and method for an electronic commerce system, and more particularly to a payment system and method utilising at least a customer agent and a merchant agent, at least an account manager associated with said agents for administration of customer accounts and merchant accounts, and at least a mediating trusted agent associated with said at least one account manager and merchant agent for checking transactions, for purchases made by a customer from a merchant.
- Some existing systems provide only handling of payments, i.e so called payment systems, some systems provide full transaction services, and other systems provide some transaction services together with payment services.
- Transactions and payments in such electronic commerce systems are done over a communication network such as the public switched telephone network, cellular phone systems, the Internet, or an intranet etc. Small payment transactions are denoted micro payments.
- the goods, such as documents, pictures, software, stock market information, etc. are purchased by a customer via a webbrowser from a merchant over the Internet.
- Micro payment may be considered as one transaction per merchant site while as a plurality of transactions in other cases.
- the current business model for micro payments is still not well understood and different solutions aim for different models.
- the MiniPay is a lightweight system and probably quite cheap regarding operating costs and it is user friendly.
- FIG. 1 A general description of a prior art account based system is described with reference to FIG. 1 .
- a merchant 100 displays the goods for sale, e.g on a web page, at step 0 .
- a customer 101 orders goods at step 1 .
- the customer 101 sends a payment order to its account manager 102 .
- the payment is transferred to a value acquirer 103 at step 3 .
- the merchant 100 is notified of the payment completion by the value acquirer 102 at step 4 and the goods are finally delivered.
- a micro payment system such as the IBM MiniPay system includes a plurality of necessary features in order to operate properly.
- the Minipay provides desired click and pay features for the order and payment of the goods.
- an easy way for establishment of the link between the goods and the payment system, and the use of the system from the customer's as well as the merchant's point of view has to be provided.
- the usefulness of the payment system increases if it is adaptable to several accounting systems like Telco's billing systems and banking accounts. It must be possible to do business in multi-operator environment.
- the system must be scalable, i.e adaptable for a few users as well as for millions of users with costs growing not more than linearly.
- Micro payment systems have to provide limited information volume and processing overheads for the transactions. Among the required processing tasks are customer authentication, authorization, and currency exchange rate calculations. Most of the above mentioned features are solved by the MiniPay system.
- MiniPay system and other prior art payment systems are less good solutions to the problem of interoperator transactions, and complex clearing procedures of transactions within an operator and between operators.
- a main problem in digital cash systems and in some account based systems is double spending, which occurs when customers are involved in several transactions simultaneously.
- Customer integrity is a further problem in electronic commerce systems, i.e merchants can utilise customer consumption patterns in undesired ways. Authentication, authorisation of the customer, and the handling of encryption keys are important features in a payment system.
- PKI Public Key Infrastructure
- Certificates exist in various formats and flavours, such as the X.509 standard.
- the merchants on the Internet does not have enough or easy tools to prohibit fraudulent consumers from ordering goods that they do not want to pay for.
- the merchant cannot know if the goods reached the consumer or not.
- Another object of the present invention is to provide a payment system not disclosing the customer's identity during a trading session.
- a further object of the present invention is to enable interoperator transactions.
- Another objective is to guarantee the payment to the merchant.
- Another object is to provide the customer with spending control.
- Still another object of the present invention is to provide a scalable payment system.
- Yet another object of the present invention is to support a plurality of currencies.
- a more specific object of the invention is to provide a method for secure delivery of electronic products over a communications network.
- FIG. 1 is a block diagram showing a network configuration of a prior art electronic payment system for use in electronic commerce
- FIG. 2 is a block diagram showing a network configuration of an electronic payment system according to the invention for use in electronic commerce, illustrating the initiation and continuation of a trading session;
- FIG. 3 is a block diagram showing a network configuration of an electronic payment system according to the invention for use in electronic commerce, illustrating the conclusion of the trading session;
- FIG. 4 is a block diagram showing a network configuration of an electronic payment system for use in electronic commerce, illustrating a method for secure delivery of electronic products over a communications network according to the invention.
- a payment system for use in an electronic commerce system for reducing the transfer and processing costs for each purchase made by a customer or consumer from a merchant comprises at least a merchant agent 200 , such as a server or computer system operated by a merchant, a customer agent 201 , such as a PC, PDA, Mobile or workstation operated by a customer, at least an account manager 202 provided by an operator associated with said agents for administration of customer accounts and merchant accounts, and at least a mediating trusted agent or a so called value acquirer 203 provided by the operator or another operator associated with the at least one account manager 202 and merchant agent 200 for checking transactions during a trading session.
- a merchant agent 200 such as a server or computer system operated by a merchant
- a customer agent 201 such as a PC, PDA, Mobile or workstation operated by a customer
- an account manager 202 provided by an operator associated with said agents for administration of customer accounts and merchant accounts
- at least a mediating trusted agent or a so called value acquirer 203 provided by the operator or another operator associated
- the customer agent(s) 201 and merchant agent(s) 200 , the account manager(s) 202 , and the mediating trusted agent(s) 203 are interconnected by for example an electronic communication network, such as the Internet, an intranet, a public switched telephone network, and/or a mobile telephone network, an optical network, or a combination thereof, or another kind of communication network.
- an electronic communication network such as the Internet, an intranet, a public switched telephone network, and/or a mobile telephone network, an optical network, or a combination thereof, or another kind of communication network.
- the main function of the account manager 202 is to administer the customer accounts and trading records, and to create and forward billing records to external billing systems, such as banks, telecommunication operators, credit card firms etc.
- a merchant or the merchant agent is associated like customers to the account manager 202 ; the difference is in the relation to the mediating trusted agent 203 .
- the mediating trusted agent or value acquirer 203 is a part of the payment system of the merchant's operator.
- the function of the value acquirer 203 is to handling a deposit, described later, check the transaction records when trading sessions are terminated, and deliver the transaction records to the appropriate account managers of the customer and merchant, respectively.
- Sessionidentity AccountManagerIdentity.Sequencenumber1
- the SessionIdentity is valid through the complete session.
- a relation between a customer agent 201 and a merchant agent 200 when the customer orders goods is denoted a transaction.
- Each transaction is given an identity when it is generated by the account manager 202 according to the following pseudo expression.
- TransactionIdentity SessionIdentity.Sequencenumber2
- the TransactionIdentity is generated by the account manager 202 when the customer agent 201 informs about a purchase. Further, the TransactionIdentity is valid through the complete transaction.
- a method of payment of goods in an electronic commerce system is divided into two phases: an initiation phase illustrated in FIG. 2 , including steps regarding the initiation and continuation of a trading session; and a conclusion phase illustrated in FIG. 3 , including steps regarding the conclusion of a trading session.
- All involved parties are given an asymmetric key pair at registration and algorithms like RSA or DSA are likely to be used. Further, all communication except between the customer and the merchant is carried out on secure channels like SSL or IPSec.
- a normal GET URL message is used to download a web page and a normal response to the GET URL is performed at step 0 , i.e a web page with prices and information associated for proceeding with the transaction.
- the merchant agent 200 receives an order of goods/service from the customer agent 201 .
- the customer account manager 202 receives an initiation message sent from the customer agent 201 , wherein the message includes data for registration of the customer agent 201 , and order information with the size of the purchase.
- the initiation message further comprises the amount of the deposit, a transaction identity, the identity of the merchant and the identity of the merchant's operator for locating a proper mediating trusted agent 203 .
- the customer account manager 202 provides the customer agent 201 with account data during a trading session being established between the customer agent 201 and the merchant agent 200 over the network.
- the customer account manager 202 amends and forwards the initiation message to the mediating trusted agent 203 for registration of the customer, and delivering of a deposit.
- the amended initiation message comprises the deposit in the customer currency, a customer identifier, the transaction identity, and the identity of the merchant.
- the mediating trusted agent 203 sends an information message including the deposit to the merchant agent 200 .
- the information message comprises the deposit in the currency of the merchant, a trading session identity, and the customer identifier.
- the trading session is now ready to start.
- the merchant acknowledges the customer and the associated deposit to the mediating trusted agent 203 .
- the mediating trusted agent 203 acknowledges the customer and the associated deposit to the customer account manager 202 .
- the acknowledge includes the current exchange rate and that the customer account manager 202 forwards the exchange rate to the customer agent 201 .
- a clearing procedure is initiated by the merchant 200 . If the deposit is consumed and a subsequent purchase attempt is made it will be treated as an initial purchase attempt and a new transaction is initiated. However, a plurality of purchase orders can be executed within the limit of a single deposit.
- the trading session can be stopped by instructions from the customer agent 201 or the merchant agent 202 or after a timer expiry, which may be agreed upon at the initiation.
- the merchant agent 200 receives a trading session terminate message sent by the customer agent 201 or a timeout.
- the customer account manager 202 receives a signed customer transaction record sent by the customer agent 201 , the customer account manager 202 sends the customer transaction record to the mediating trusted agent 203 and the merchant agent 200 sends a signed merchant transaction record to the mediating trusted agent 203 .
- the mediating trusted agent 203 compares and evaluates the transaction records, resulting in clearing information.
- the mediating trusted agent 203 sends the clearing information to the customer account manager 202 and a merchant account manager 204 , respectively.
- the customer account manager 202 and a merchant account manager 204 respectively, send the clearing information to the customer agent 201 and the merchant agent 200 , in this embodiment of the invention. This is, however, not necessary and can be optional.
- the transaction records are processed to a withdrawal record and a deposit record, respectively, which are stored.
- the withdrawal record is sent to a customer billing system 205 and the deposit record is sent to a merchant billing system 206 .
- the trading session may comprise a good number of single purchases, thereby reducing the transfer and processing costs for each purchase as most of the required transfer and processing are performed at one instant for a large number of purchases. This is especially important for the costly chores, such as authentication/authorization and secure money transfer but also for the currency exchange rate conversion.
- the method would allow the consumer to receive a currency exchange table (together with a lifespan stamp) from her own bank and keep it stored on her device or terminal (PC).
- the application that enables transactions can then look for a local table in the consumer's device (PC) first and provide price information in her consumer's device in real time.
- the application can also alert the consumer if the validity of the table has expired or if no such table exists. If a valid table exists with the relevant currency value, it is used throughout the whole session.
- the device checks if a valid currency table exists (if not, the device contacts the bank and requests a valid currency table);
- the consumer decides to purchase the product. It sends a request to her financial institution including the amount of the deposit in her own currency.
- the financial institution converts the deposit currency to the merchant's currency and forwards it to the merchant's financial institution
- the consumer's financial institution converts the remainder of the deposit to the consumer's currency.
- the customer identity is not disclosed by the payment system, not even to the trusted mediating agent.
- the merchant will only have access to a temporary customer identity and the customer public key, which is not traceable via the payment system.
- the merchant must of course know the IP address of the customer but one may assume that the customer has a dynamic IP address and it is not traceable without some effort.
- the contents of the purchase(s) are hidden for the banks, i.e the mediating trusted agent or the account manager, because the purchase list is encrypted. Only a hash of the purchase list is visible, so that the mediating trusted agent can compare and verify that the both lists received from the parties are equal. A hash cannot be reversed in order to receive the purchase list.
- both the merchant and the merchant's operator have secured their payment from the customer's side.
- secure channels like SSL or IPSec are used with sufficient strength in the encryption algorithms and the associated keys. The same applies between the merchant and the mediating trusted agent.
- the PKI(Private Key Infrastructure) is reduced to a minimum, because a customer/merchant needs only to know the public keys of its clients.
- the difficult part is the operator's knowledge of other operators' public key.
- Other knowledge of public keys is only temporary.
- the proposed solution assumes that the PKI infrastructure is placed in a particular topology.
- Zone 1 Englobes Financial Institutions (FI) on permanent trust relationships.
- a common certificate authority (CA) issues FI certificates.
- Zone 2 Englobes FIs and their customers on permanent trust relationships. The FI issues certificates.
- Zone 3 Same as Zone 2. (since a customer/consumer and a merchant both are customers from the FI's point of view).
- Zone 4 Non PKI ruled zone that exists during a shopping session
- the consumer will ask its FI to prepare a temporary certificate on behalf of itself.
- the temporary certificate contains only the consumer's public key (and relevant cryptographic information) and a session ID (used to track the session data to the involved parties).
- the FI will sign it (using the certificate issued by the CA common to its and the merchants FI) and deliver it to the merchant's FI.
- the merchant's FI checks the signature for validity, decrypts the information, signs it (using the certificate issued by itself—trusted by its customer, the merchant) and forwards it to the merchant.
- the merchant now possesses a cryptographic valid certificate that contains the necessary data to perform cryptographic enhanced operations without revealing the other party's identity.
- the reversed process is initiated by the merchant to make its certificate available to the consumer.
- This procedure also eliminates the need for the merchant/consumer to check Certification Revocation Lists (CRLs) for the validity of certificates.
- CTLs Certification Revocation Lists
- the payment system according to the invention is adaptable to several account systems, because of an API in the account manager.
- the system assumes a multioperator environment, it is scalable, the number of supported currencies is only limited by the operator's willingness to sign agreements with other operators.
- the customer agent is a mobile phone communicating with a merchant over a mobile telephone network and/or a public switched network and/or an Internet Protocol network.
- each client has a relation with a trusted party, i.e. bank or other operator.
- This party may be a common party or two different parties, in a latter case, having a relation with each other, like international banks.
- Each client and trusted party have software components installed, which support this feature.
- a Public Key Infrastructure (PKI) is implemented, preferably organised and maintained by the trusted party.
- the merchant and consumer have access to each other's certificates.
- a new party is introduced, namely the trusted party.
- This party is however not any new actor in the field of trading.
- the role for the trusted party is to ensure that information sent between clients in the system is correct.
- a transaction may take place when a consumer has received information about a product from a merchant.
- the information may contain whatever the merchant want. To support this feature, only a product identity and a product description are needed.
- a method for secure delivery of electronic goods i.e an electronic or digital product such as software or a computer program product etc.
- the goods are delivered over a communications network such as the Internet.
- the consumer chooses a product, and initiates the purchasing process by sending a signed order to the merchant, which will be the evidence that the consumer really ordered the product (sign (order) C ).
- the consumer will have to read and accept the product description before he orders a product.
- the merchant acknowledges that the customer agrees to purchase the product as described in the initial product offer.
- the consumer will send a consumer generated ciphering key (K 1 ) to the trusted party, which acts as an intermediary, signing it and passing it along to the merchant.
- K 1 consumer generated ciphering key
- the merchant can send the product to the consumer (sign([prod] K2 , prodID) M ).
- the complete package of the digital product and product identity is signed and sent to the consumer. This signature ensures the authenticity of the product, which is essential in the case of software to be installed on the consumer's hardware (HW).
- the digital product is sent ciphered with a key (K 2 ) generated by the merchant. This means that the consumer can not open the content without the K 2 key.
- the consumer client When the product package is received, the consumer client will do a check on received material in order to verify the correctness (transferring errors, wrong product etc). The signatures of the product and product description will be checked and that they concerns the same product. If it appears to be correct, the consumer sends an acknowledge to the merchant in a signed message (sign(accept, unique) C ) with a unique identifier time-stamped (to avoid reproducing problems). If the secure delivery is implemented together with an electronic payment scheme, the money is transferred to the merchant at this stage.
- the merchant When the merchant receives the acceptance message from the consumer, it will initiate the last message in the procedure, which is the transfer of the ciphering key K 2 to the consumer([K 2 ] K1 ). To avoid unauthorized access to the sent goods, the K 2 key is ciphered with the consumer's K 1 key.
- the goods do not reach the consumer, due to bad connections, loss of packages etc.
- a check is done to evaluate the status of the received product.
- a re-sending can be ordered automatically. If the re-sending is not successful, the purchase is aborted. Without the (sign(accept, unique) C ) message from the consumer the merchant can not claim payment for the product.
- the goods do not fulfil the consumer expectations Normally there are no realistic legal possibilities to revoke the purchase.
- the consumer has a big advantage, namely the merchant-signed product description. If the consumer's view is that the description does not give an accurate description of the received product, the consumer can escalate the controversy to (for example) the National Board for Consumer Policies (NBCP).
- the consumer sends the product (sign([prod] K2 , prodID) M ) and the product description (sign(prod.desc) M ) to the NBCP.
- the NBCP requests the key (K 2 ) for decrypting the product from the trusted party. Since the product and the product description are signed and tied to each other by the product id, the consumer can't send false information to the NBCP.
Abstract
A method and system of payment of goods and services in an electronic commerce system, reduces the transfer and processing costs for each purchase made by a customer from a merchant; using a customer agent, a merchant agent, an account manager associated with the agents for administration of customer accounts and merchant accounts, and a mediating trusted agent associated with one of the account manager and merchant agent for checking transactions during a trading session. The customer agent and merchant agent, account manager, and mediating trusted agent are interconnected by an electronic communication network.
Description
- The present invention relates to a payment system and method for an electronic commerce system, and more particularly to a payment system and method utilising at least a customer agent and a merchant agent, at least an account manager associated with said agents for administration of customer accounts and merchant accounts, and at least a mediating trusted agent associated with said at least one account manager and merchant agent for checking transactions, for purchases made by a customer from a merchant.
- Different kinds of electronic commerce systems and associated payment systems are provided. Some existing systems provide only handling of payments, i.e so called payment systems, some systems provide full transaction services, and other systems provide some transaction services together with payment services.
- Transactions and payments in such electronic commerce systems are done over a communication network such as the public switched telephone network, cellular phone systems, the Internet, or an intranet etc. Small payment transactions are denoted micro payments. The goods, such as documents, pictures, software, stock market information, etc., are purchased by a customer via a webbrowser from a merchant over the Internet.
- Crucial for all existing micro payment schemes is a very low transaction cost, i.e the transaction cost must be at least a magnitude smaller than the price of the goods. The low prices of the goods imply a lower expectation of the security level compared to “full” price systems.
- Further, other requirements on payment systems is low price, fast and reliable transfer, and to provide customer integrity.
- For every transaction, money has to be transferred from a customer account to a merchant account. Micro payment may be considered as one transaction per merchant site while as a plurality of transactions in other cases. The current business model for micro payments is still not well understood and different solutions aim for different models.
- There are two basic concepts and a number of different solutions for each concept on the market. On the one hand DigiCash, CyberCoin and Millicent are well-known digital cash solutions representing the first concept and on the other hand IBM's MiniPay is an account based solution, wherein real money is transferred between different accounts, representing the second concept.
- The MiniPay is a lightweight system and probably quite cheap regarding operating costs and it is user friendly.
- A general description of a prior art account based system is described with reference to
FIG. 1 . - According to a generic payment system as shown in
FIG. 1 , amerchant 100 displays the goods for sale, e.g on a web page, atstep 0. Acustomer 101 orders goods atstep 1. Atstep 2, thecustomer 101 sends a payment order to itsaccount manager 102. The payment is transferred to a value acquirer 103 atstep 3. Themerchant 100 is notified of the payment completion by the value acquirer 102 atstep 4 and the goods are finally delivered. - A micro payment system such as the IBM MiniPay system includes a plurality of necessary features in order to operate properly. When a purchasable item is presented on a customer's browser, the Minipay provides desired click and pay features for the order and payment of the goods. Further, an easy way for establishment of the link between the goods and the payment system, and the use of the system from the customer's as well as the merchant's point of view has to be provided. The usefulness of the payment system increases if it is adaptable to several accounting systems like Telco's billing systems and banking accounts. It must be possible to do business in multi-operator environment. The system must be scalable, i.e adaptable for a few users as well as for millions of users with costs growing not more than linearly. For the purpose of distribution the system has to run on standard hardware, such as PCs and workstations. The value of the goods for sale in a micro payment environment is quite low and, consequently, the security measures should be in harmony with these values. Micro payment systems have to provide limited information volume and processing overheads for the transactions. Among the required processing tasks are customer authentication, authorization, and currency exchange rate calculations. Most of the above mentioned features are solved by the MiniPay system.
- However, a problem with the MiniPay system and other prior art payment systems is less good solutions to the problem of interoperator transactions, and complex clearing procedures of transactions within an operator and between operators.
- Another problem is that prior art payment systems only support a single or a pair of currencies and it is not possible to add new currencies. A consumer expects to buy from merchants scattered around the globe. Thus, there is minimal chance that a consumer buys a product from a merchant using the same currency as in its own country. As much as a consumer expects to pay in its own currency, a merchant expects to be paid in its own.
- A main problem in digital cash systems and in some account based systems is double spending, which occurs when customers are involved in several transactions simultaneously. Customer integrity is a further problem in electronic commerce systems, i.e merchants can utilise customer consumption patterns in undesired ways. Authentication, authorisation of the customer, and the handling of encryption keys are important features in a payment system.
- PKI (Public Key Infrastructure) is a system(s) using certificates or electronic ID cards for obtaining secure transactions and customer integrity. Certificates exist in various formats and flavours, such as the X.509 standard.
- One of the most difficult items in electronic commerce today is how to secure the transportation of digital goods between trading parties. There are several aspects where it might be an advantage to have a mechanism that can protect the involved parties both from a legal and a reliability perspective. Usually, today's trading/payment schemes do not cover this at all, or badly.
- Three major problems can be identified as blockers for trading with digital goods over the Internet:
- 1. Acceptance of Delivery
- The consumer does not have sufficient tools to handle acceptance of delivery in case of digital goods. Most often, merchandise has to be accepted as it arrives through the Internet to the consumer's computer. There are no legal possibilities to complain if it was erroneous or completely wrong.
- 2. Fraudulent Consumers/Non-repudiation
- The merchants on the Internet does not have enough or easy tools to prohibit fraudulent consumers from ordering goods that they do not want to pay for. The merchant cannot know if the goods reached the consumer or not.
- 3. Unauthorized access of goods
- In some trading situations, either the consumer or the merchant (sometimes both) does not want to reveal the good for any outsiders. Within the Internet environment, it will always be possible to catch plain text information between two parties.
- It is an object of the present invention to provide an improved electronic payment system for use in an electronic commerce system and a method thereof, which reduces the transfer and processing costs for each purchase by a customer from a merchant in the commerce system.
- Another object of the present invention is to provide a payment system not disclosing the customer's identity during a trading session.
- It is still another object of the present invention to provide secure transactions between a customer and a merchant in order to protect the customer's accounts and its account manager from abuse.
- It is a further object of the present invention to prevent double spending of the customer.
- It is yet another object of the invention to provide and reduce the authentication procedure to a minimum.
- It is still a further object of the present invention to provide a payment system adaptable to several accounting systems.
- A further object of the present invention is to enable interoperator transactions.
- Another objective is to guarantee the payment to the merchant.
- Another object is to provide the customer with spending control.
- Still another object of the present invention is to provide a scalable payment system.
- Yet another object of the present invention is to support a plurality of currencies.
- These objects are accomplished by a payment system and method according to the invention as claimed.
- A more specific object of the invention is to provide a method for secure delivery of electronic products over a communications network.
- In order to explain the invention in more detail and the advantages and features of the invention a preferred embodiment will be described in detail below, reference being made to the accompanying drawings, in which
-
FIG. 1 is a block diagram showing a network configuration of a prior art electronic payment system for use in electronic commerce; -
FIG. 2 is a block diagram showing a network configuration of an electronic payment system according to the invention for use in electronic commerce, illustrating the initiation and continuation of a trading session; -
FIG. 3 is a block diagram showing a network configuration of an electronic payment system according to the invention for use in electronic commerce, illustrating the conclusion of the trading session; and -
FIG. 4 is a block diagram showing a network configuration of an electronic payment system for use in electronic commerce, illustrating a method for secure delivery of electronic products over a communications network according to the invention. - With reference to
FIGS. 2 and 3 , a payment system for use in an electronic commerce system for reducing the transfer and processing costs for each purchase made by a customer or consumer from a merchant, comprises at least amerchant agent 200, such as a server or computer system operated by a merchant, acustomer agent 201, such as a PC, PDA, Mobile or workstation operated by a customer, at least anaccount manager 202 provided by an operator associated with said agents for administration of customer accounts and merchant accounts, and at least a mediating trusted agent or a so calledvalue acquirer 203 provided by the operator or another operator associated with the at least oneaccount manager 202 andmerchant agent 200 for checking transactions during a trading session. - The customer agent(s) 201 and merchant agent(s) 200, the account manager(s) 202, and the mediating trusted agent(s) 203 are interconnected by for example an electronic communication network, such as the Internet, an intranet, a public switched telephone network, and/or a mobile telephone network, an optical network, or a combination thereof, or another kind of communication network.
- The main function of the
account manager 202 is to administer the customer accounts and trading records, and to create and forward billing records to external billing systems, such as banks, telecommunication operators, credit card firms etc. A merchant or the merchant agent is associated like customers to theaccount manager 202; the difference is in the relation to the mediating trustedagent 203. - The mediating trusted agent or
value acquirer 203 is a part of the payment system of the merchant's operator. The function of thevalue acquirer 203 is to handling a deposit, described later, check the transaction records when trading sessions are terminated, and deliver the transaction records to the appropriate account managers of the customer and merchant, respectively. - A relation between a
customer 201 and anaccount manager 202 when the customer is logged-on to the account manager is denoted a session. Each session is given an identity generated by theaccount manager 202 according to the following illustrative pseudo code expression:
Sessionidentity=AccountManagerIdentity.Sequencenumber1 - The SessionIdentity is valid through the complete session.
- A relation between a
customer agent 201 and amerchant agent 200 when the customer orders goods is denoted a transaction. Each transaction is given an identity when it is generated by theaccount manager 202 according to the following pseudo expression.
TransactionIdentity=SessionIdentity.Sequencenumber2 - The TransactionIdentity is generated by the
account manager 202 when thecustomer agent 201 informs about a purchase. Further, the TransactionIdentity is valid through the complete transaction. - A method of payment of goods in an electronic commerce system according to the invention is divided into two phases: an initiation phase illustrated in
FIG. 2 , including steps regarding the initiation and continuation of a trading session; and a conclusion phase illustrated inFIG. 3 , including steps regarding the conclusion of a trading session. - Hence, in the following description, the payment system is only partly disclosed. Some well-known features such as the initial contacts between a customer and a merchant and the registrations and other system entities are not described in detail so as not to make the present invention unclear.
- All involved parties are given an asymmetric key pair at registration and algorithms like RSA or DSA are likely to be used. Further, all communication except between the customer and the merchant is carried out on secure channels like SSL or IPSec.
- In the initiation phase, a normal GET URL message is used to download a web page and a normal response to the GET URL is performed at
step 0, i.e a web page with prices and information associated for proceeding with the transaction. Themerchant agent 200 receives an order of goods/service from thecustomer agent 201. Thecustomer account manager 202 receives an initiation message sent from thecustomer agent 201, wherein the message includes data for registration of thecustomer agent 201, and order information with the size of the purchase. The initiation message further comprises the amount of the deposit, a transaction identity, the identity of the merchant and the identity of the merchant's operator for locating a proper mediating trustedagent 203. - Further, the
customer account manager 202 provides thecustomer agent 201 with account data during a trading session being established between thecustomer agent 201 and themerchant agent 200 over the network. Thecustomer account manager 202 amends and forwards the initiation message to the mediating trustedagent 203 for registration of the customer, and delivering of a deposit. The amended initiation message comprises the deposit in the customer currency, a customer identifier, the transaction identity, and the identity of the merchant. - The mediating
trusted agent 203 sends an information message including the deposit to themerchant agent 200. The information message comprises the deposit in the currency of the merchant, a trading session identity, and the customer identifier. The trading session is now ready to start. - After the mediating trusted
agent 203 has sent an information message, the merchant acknowledges the customer and the associated deposit to the mediating trustedagent 203. - The mediating
trusted agent 203 acknowledges the customer and the associated deposit to thecustomer account manager 202. - The acknowledge includes the current exchange rate and that the
customer account manager 202 forwards the exchange rate to thecustomer agent 201. - When the
customer account manager 202 amends and forwards the initiation message to the mediating trustedagent 203 the customer is also vouched for. - When the value of at least one purchase amounts to the value of the deposit, a clearing procedure is initiated by the
merchant 200. If the deposit is consumed and a subsequent purchase attempt is made it will be treated as an initial purchase attempt and a new transaction is initiated. However, a plurality of purchase orders can be executed within the limit of a single deposit. - Additionally, the trading session can be stopped by instructions from the
customer agent 201 or themerchant agent 202 or after a timer expiry, which may be agreed upon at the initiation. - Thus, in order to stop or terminate the trading session the
merchant agent 200 receives a trading session terminate message sent by thecustomer agent 201 or a timeout. - During the conclusion phase the
customer account manager 202 receives a signed customer transaction record sent by thecustomer agent 201, thecustomer account manager 202 sends the customer transaction record to the mediating trustedagent 203 and themerchant agent 200 sends a signed merchant transaction record to the mediating trustedagent 203. - Further, the mediating trusted
agent 203 compares and evaluates the transaction records, resulting in clearing information. The mediatingtrusted agent 203 sends the clearing information to thecustomer account manager 202 and amerchant account manager 204, respectively. - Finally, the
customer account manager 202 and amerchant account manager 204, respectively, send the clearing information to thecustomer agent 201 and themerchant agent 200, in this embodiment of the invention. This is, however, not necessary and can be optional. Based on the clearing information, the transaction records are processed to a withdrawal record and a deposit record, respectively, which are stored. The withdrawal record is sent to acustomer billing system 205 and the deposit record is sent to amerchant billing system 206. - The trading session may comprise a good number of single purchases, thereby reducing the transfer and processing costs for each purchase as most of the required transfer and processing are performed at one instant for a large number of purchases. This is especially important for the costly chores, such as authentication/authorization and secure money transfer but also for the currency exchange rate conversion.
- In an alternative embodiment of the invention, the method would allow the consumer to receive a currency exchange table (together with a lifespan stamp) from her own bank and keep it stored on her device or terminal (PC). The application that enables transactions can then look for a local table in the consumer's device (PC) first and provide price information in her consumer's device in real time. The application can also alert the consumer if the validity of the table has expired or if no such table exists. If a valid table exists with the relevant currency value, it is used throughout the whole session.
- Another important point is that it keeps the trust chain intact, i.e. a consumer is more likely to trust her own bank for currency exchanges than another bank it has no knowledge of. It would also avoid confusions that would come from a consumer buying products from merchants in the same foreign country and having to pay different prices in her own currency because the two merchants have different banks. The flow is as follows:
- 1 Offer is sent from a merchant to the consumer's device;
- 2 The device checks if a valid currency table exists (if not, the device contacts the bank and requests a valid currency table);
- 3 The offer is changed by the device before it is displayed so as to show the price in the consumer's currency;
- 4 The consumer decides to purchase the product. It sends a request to her financial institution including the amount of the deposit in her own currency.
- 5 The financial institution converts the deposit currency to the merchant's currency and forwards it to the merchant's financial institution
- 6 When the shopping session ends, eventual money left unused is returned to the consumer's financial institution on the merchant's currency
- 7 The consumer's financial institution converts the remainder of the deposit to the consumer's currency.
- 8 Session ends.
- The customer identity is not disclosed by the payment system, not even to the trusted mediating agent. The merchant will only have access to a temporary customer identity and the customer public key, which is not traceable via the payment system. The merchant must of course know the IP address of the customer but one may assume that the customer has a dynamic IP address and it is not traceable without some effort. The contents of the purchase(s) are hidden for the banks, i.e the mediating trusted agent or the account manager, because the purchase list is encrypted. Only a hash of the purchase list is visible, so that the mediating trusted agent can compare and verify that the both lists received from the parties are equal. A hash cannot be reversed in order to receive the purchase list.
- On the merchant side, both the merchant and the merchant's operator have secured their payment from the customer's side. In order to protect the customers account and the account manager from abuse, secure channels like SSL or IPSec are used with sufficient strength in the encryption algorithms and the associated keys. The same applies between the merchant and the mediating trusted agent.
- Double spending is impossible since the account manager does not hand out deposits beyond its own credit limit for the customer.
- The PKI(Private Key Infrastructure) is reduced to a minimum, because a customer/merchant needs only to know the public keys of its clients. The difficult part is the operator's knowledge of other operators' public key. Other knowledge of public keys is only temporary.
- With PKI the consumer has a certificate it would show the merchant to ensure privacy, authentication, etc. This privacy is not privacy towards the merchant itself, who could keep track of your shopping patterns or other info on your certificate for future, sometimes malicious, use. Besides, from a merchant perspective, a certificate that the consumer presents should be vouched for by a common trusted party, which means lots of liaisons between many different customer agents around the world.
- The proposed solution assumes that the PKI infrastructure is placed in a particular topology.
- In the topology, 4 zones are identified:
- Zone 1: Englobes Financial Institutions (FI) on permanent trust relationships. A common certificate authority (CA) issues FI certificates.
- Zone 2: Englobes FIs and their customers on permanent trust relationships. The FI issues certificates.
- Zone 3: Same as
Zone 2. (since a customer/consumer and a merchant both are customers from the FI's point of view). - Zone 4: Non PKI ruled zone that exists during a shopping session
- When a shopping session starts certificates should be exchanged between consumers and merchants. Since the certificates issuers are outside each other PKI zone, the FI will act as mediators in this exchange.
- The consumer will ask its FI to prepare a temporary certificate on behalf of itself. The temporary certificate contains only the consumer's public key (and relevant cryptographic information) and a session ID (used to track the session data to the involved parties). The FI will sign it (using the certificate issued by the CA common to its and the merchants FI) and deliver it to the merchant's FI. The merchant's FI checks the signature for validity, decrypts the information, signs it (using the certificate issued by itself—trusted by its customer, the merchant) and forwards it to the merchant.
- The merchant now possesses a cryptographic valid certificate that contains the necessary data to perform cryptographic enhanced operations without revealing the other party's identity.
- The reversed process is initiated by the merchant to make its certificate available to the consumer.
- This procedure also eliminates the need for the merchant/consumer to check Certification Revocation Lists (CRLs) for the validity of certificates. This process can be exhaustive specially if the consumer uses devices with less processing power/restricted bandwidth, e.g. WAP phones.
- The payment system according to the invention is adaptable to several account systems, because of an API in the account manager.
- Further, the system assumes a multioperator environment, it is scalable, the number of supported currencies is only limited by the operator's willingness to sign agreements with other operators.
- Even though numerous characteristics and advantages of the present invention have been set forth in the foregoing description, together with details of the structure, it is to be understood that the disclosure is illustrative only, and changes may be made in detail within the principles of the invention indicated by the broad general meaning of the claims.
- For example, in another embodiment of the invention the customer agent is a mobile phone communicating with a merchant over a mobile telephone network and/or a public switched network and/or an Internet Protocol network.
- In another example, each client (merchant and consumers) has a relation with a trusted party, i.e. bank or other operator. This party may be a common party or two different parties, in a latter case, having a relation with each other, like international banks.
- Each client and trusted party have software components installed, which support this feature.
- A Public Key Infrastructure (PKI) is implemented, preferably organised and maintained by the trusted party. The merchant and consumer have access to each other's certificates.
- In a usual trading situation there are always at least two parties, i.e a consumer and a merchant. In this example a new party is introduced, namely the trusted party. This party is however not any new actor in the field of trading. The role for the trusted party is to ensure that information sent between clients in the system is correct.
- A transaction may take place when a consumer has received information about a product from a merchant. The information may contain whatever the merchant want. To support this feature, only a product identity and a product description are needed.
- In this embodiment of the invention, a method for secure delivery of electronic goods, i.e an electronic or digital product such as software or a computer program product etc., is described. The goods are delivered over a communications network such as the Internet.
- With reference to
FIG. 4 , the consumer chooses a product, and initiates the purchasing process by sending a signed order to the merchant, which will be the evidence that the consumer really ordered the product (sign (order)C). The consumer will have to read and accept the product description before he orders a product. By accepting the order, the merchant acknowledges that the customer agrees to purchase the product as described in the initial product offer. - In parallel to the action above, the consumer will send a consumer generated ciphering key (K1) to the trusted party, which acts as an intermediary, signing it and passing it along to the merchant.
- Upon reception of the signed order, the merchant can send the product to the consumer (sign([prod]K2, prodID)M). The complete package of the digital product and product identity is signed and sent to the consumer. This signature ensures the authenticity of the product, which is essential in the case of software to be installed on the consumer's hardware (HW).
- Furthermore, the digital product is sent ciphered with a key (K2) generated by the merchant. This means that the consumer can not open the content without the K2 key.
- When the product package is received, the consumer client will do a check on received material in order to verify the correctness (transferring errors, wrong product etc). The signatures of the product and product description will be checked and that they concerns the same product. If it appears to be correct, the consumer sends an acknowledge to the merchant in a signed message (sign(accept, unique)C) with a unique identifier time-stamped (to avoid reproducing problems). If the secure delivery is implemented together with an electronic payment scheme, the money is transferred to the merchant at this stage.
- When the merchant receives the acceptance message from the consumer, it will initiate the last message in the procedure, which is the transfer of the ciphering key K2 to the consumer([K2]K1). To avoid unauthorized access to the sent goods, the K2 key is ciphered with the consumer's K1 key.
- Of course this is only the basic principle for a successful trading. A trading transaction can go wrong in several ways:
- The goods do not reach the consumer, due to bad connections, loss of packages etc.
- At
point 4, a check is done to evaluate the status of the received product. A re-sending can be ordered automatically. If the re-sending is not successful, the purchase is aborted. Without the (sign(accept, unique)C) message from the consumer the merchant can not claim payment for the product. - The goods do not fulfil the consumer expectations Normally there are no realistic legal possibilities to revoke the purchase. However, with this system, the consumer has a big advantage, namely the merchant-signed product description. If the consumer's view is that the description does not give an accurate description of the received product, the consumer can escalate the controversy to (for example) the National Board for Consumer Policies (NBCP). The consumer sends the product (sign([prod]K2, prodID)M) and the product description (sign(prod.desc)M) to the NBCP. The NBCP requests the key (K2) for decrypting the product from the trusted party. Since the product and the product description are signed and tied to each other by the product id, the consumer can't send false information to the NBCP.
- This solution solves one of the most annoying problems in the electronic commerce arena with fairly simple methods.
- It is easy to implement at the merchant site, all products may be pre-ciphered and pre-signed, and no real-time ciphering is needed.
- No need for unnecessary transportation via mediators (except for the cipher key K1 that is a very small transfer).
- The use of a verbal product description is most likely acceptable as legal evidence in case of a dispute between the two trading parties. This also means that the system can handle all kinds of digital transfers, such as music, documents, movies, software etc. without any special treatment of the goods depending on its kind.
- It is possible to implement the solution in many of today's electronic payment schemes.
Claims (13)
1-23. (canceled)
24. A method for secure delivery of electronic products over a communications network by an automated merchant agent, comprising the steps of:
receiving and accepting a signed order from a consumer agent;
encrypting the electronic product with a first key;
signing and sending the encrypted electronic product and the product identity to the consumer agent for verification; and
receiving an acceptance message from the consumer and sending the first key to the customer agent for decryption of the electronic product.
25. A method according to claim 24 , wherein before the step of sending the first key to the customer agent, the method comprises the further step of:
receiving a second key from the consumer via a mediating trusted agents, which signs the second key before delivery to the merchant agent.
26. A method according to claim 25 , wherein the first encryption key is encrypted with the second key before the first key is sent to the customer agent.
27. A method according to claim 24 , wherein after the verification of the received electronic product by the customer agent, the method further comprises the step of:
receiving a refusal message from the customer agent; and
initiating a re-sending of the electronic product.
28. An electronically-implemented merchant agent for secure delivery of electronic products over a communications network, comprising electronic circuitry configured to:
receive and accept a signed order from a consumer agent;
encrypt the electronic product with a first key;
electronically sign and send the encrypted electronic product and the product identity to the consumer agent for verification; and
receive an acceptance message from the consumer and send the first key to the customer agent for decryption of the electronic product.
29. An electronically-implemented merchant agent according to claim 28 , wherein before the first key is sent to the customer agent, the electronically-implemented merchant agent is further configured to:
receive a second key from the consumer via a mediating trusted agent for signing the second key before delivery to the merchant agent.
30. An electronically-implemented merchant agent according to claim 29 , wherein the electronically-implemented merchant agent is further configured to:
encrypt the first encryption key with the second key before sending the first key to the customer agent.
31. An electronically-implemented merchant agent according to claim 28 , wherein after the verification of the received electronic product by the customer agent, the electronically-implemented merchant agent is further configured to:
receive a refusal message from the customer agent; and
initiate a re-sending of the electronic product.
32. An electronically-implemented merchant agent for secure delivery of electronic products over a communications network, comprising:
means for receiving and accepting a signed order from a consumer agent;
means for encrypting the electronic product with a first key;
means for electronically signing and sending the encrypted electronic product and the product identity to the consumer agent for verification; and
means for receiving an acceptance message from the consumer and sending the first key to the customer agent for decryption of the electronic product.
33. An electronically-implemented merchant agent according to claim 32 , wherein before the first key is sent to the customer agent, the electronically-implemented merchant agent further comprises:
means for receiving a second key from the consumer via a mediating trusted agent for signing the second key before delivery to the merchant agent.
34. An electronically-implemented merchant agent according to claim 33 , further comprising:
means for encrypting the first encryption key with the second key before sending the first key to the customer agent.
35. An electronically-implemented merchant agent according to claim 32 , wherein after the verification of the received electronic product by the customer agent, the electronically-implemented merchant agent further comprises:
means for receiving a refusal message from the customer agent; and
means for initiating a re-sending of the electronic product.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US11/404,841 US20060195367A1 (en) | 1999-11-23 | 2006-04-17 | Payment system and method for use in an electronic commerce system |
Applications Claiming Priority (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
SE9904258A SE516782C2 (en) | 1999-11-23 | 1999-11-23 | Method of payment of goods in an electronic trading system as well as a payment system |
SE9904258-2 | 1999-11-23 | ||
US09/718,411 US7146342B1 (en) | 1999-11-23 | 2000-11-24 | Payment system and method for use in an electronic commerce system |
US11/404,841 US20060195367A1 (en) | 1999-11-23 | 2006-04-17 | Payment system and method for use in an electronic commerce system |
Related Parent Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US09/718,411 Division US7146342B1 (en) | 1999-11-23 | 2000-11-24 | Payment system and method for use in an electronic commerce system |
Publications (1)
Publication Number | Publication Date |
---|---|
US20060195367A1 true US20060195367A1 (en) | 2006-08-31 |
Family
ID=20417842
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US09/718,411 Expired - Lifetime US7146342B1 (en) | 1999-11-23 | 2000-11-24 | Payment system and method for use in an electronic commerce system |
US11/404,841 Abandoned US20060195367A1 (en) | 1999-11-23 | 2006-04-17 | Payment system and method for use in an electronic commerce system |
Family Applications Before (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US09/718,411 Expired - Lifetime US7146342B1 (en) | 1999-11-23 | 2000-11-24 | Payment system and method for use in an electronic commerce system |
Country Status (6)
Country | Link |
---|---|
US (2) | US7146342B1 (en) |
EP (1) | EP1232459A1 (en) |
JP (1) | JP2003515822A (en) |
AU (1) | AU781647B2 (en) |
SE (1) | SE516782C2 (en) |
WO (1) | WO2001039062A1 (en) |
Cited By (9)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20030115162A1 (en) * | 2001-12-14 | 2003-06-19 | Konick Michael Edward | System and method for mail processing with verified sender identity |
US20060265339A1 (en) * | 2005-05-17 | 2006-11-23 | Faramak Vakil | Secure virtual point of service for 3G wireless networks |
US20080154621A1 (en) * | 2006-12-21 | 2008-06-26 | Ping-Chen Wu | Method for verifying defective material list |
WO2009097130A1 (en) * | 2008-01-30 | 2009-08-06 | Jean Donald C | Method and system for purchase of a product or services using a communication network site |
US20120095912A1 (en) * | 2010-10-15 | 2012-04-19 | Western Union Financial Services, Inc. | Systems and methods for electronic purchase transaction processing |
US20140304169A1 (en) * | 2011-10-31 | 2014-10-09 | Ncr Corporation | Techniques for mobile transaction processing |
US20150302341A1 (en) * | 2014-04-22 | 2015-10-22 | Bank Of America Corporation | System for implementing change condition levels |
US20190205878A1 (en) * | 2008-07-24 | 2019-07-04 | At&T Intellectual Property I, L.P. | Secure payment service and system for interactive voice response (ivr) systems |
CN110310180A (en) * | 2019-07-08 | 2019-10-08 | 湖南共睹互联网科技有限责任公司 | Guarantee method of commerce, device and the storage medium participated in based on eye-witness |
Families Citing this family (27)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP1180748A1 (en) * | 2000-08-18 | 2002-02-20 | Siemens Aktiengesellschaft | Method and system for transmitting an amount of electronic money from a credit memory by WAP |
SG126685A1 (en) * | 2001-11-13 | 2006-11-29 | Singapore Network Services Pte | A payment method for on-line purchases |
IES20020579A2 (en) | 2002-07-12 | 2004-01-14 | Mainline Corporate Holdings | Methods and systems for effecting payment card transactions |
US7844551B1 (en) * | 2003-10-02 | 2010-11-30 | Patent Investments of Texas, LLC | Secure, anonymous authentication for electronic purchasing with dynamic determination of payment pricing and terms and cross vendor transaction resolution |
US8874477B2 (en) | 2005-10-04 | 2014-10-28 | Steven Mark Hoffberg | Multifactorial optimization system and method |
US20070087822A1 (en) * | 2005-10-14 | 2007-04-19 | Leviathan Entertainment, Llc | Financing Options in a Virtual Environment |
US8684265B1 (en) | 2006-05-25 | 2014-04-01 | Sean I. Mcghie | Rewards program website permitting conversion/transfer of non-negotiable credits to entity independent funds |
US8376224B2 (en) | 2006-05-25 | 2013-02-19 | Sean I. Mcghie | Self-service stations for utilizing non-negotiable credits earned from a game of chance |
US7703673B2 (en) | 2006-05-25 | 2010-04-27 | Buchheit Brian K | Web based conversion of non-negotiable credits associated with an entity to entity independent negotiable funds |
US9704174B1 (en) | 2006-05-25 | 2017-07-11 | Sean I. Mcghie | Conversion of loyalty program points to commerce partner points per terms of a mutual agreement |
US8668146B1 (en) | 2006-05-25 | 2014-03-11 | Sean I. Mcghie | Rewards program with payment artifact permitting conversion/transfer of non-negotiable credits to entity independent funds |
US8342399B1 (en) | 2006-05-25 | 2013-01-01 | Mcghie Sean I | Conversion of credits to funds |
US8267315B1 (en) | 2006-05-25 | 2012-09-18 | Mcghie Sean I | Exchange of non-negotiable credits for entity independent funds |
US8162209B2 (en) | 2006-05-25 | 2012-04-24 | Buchheit Brian K | Storefront purchases utilizing non-negotiable credits earned from a game of chance |
US10062062B1 (en) | 2006-05-25 | 2018-08-28 | Jbshbm, Llc | Automated teller machine (ATM) providing money for loyalty points |
US20080114684A1 (en) * | 2006-10-31 | 2008-05-15 | Chuck Foster | Termination of transactions |
US20080114691A1 (en) * | 2006-10-31 | 2008-05-15 | Chuck Foster | Processing transactions |
US8060437B2 (en) | 2006-10-31 | 2011-11-15 | International Funding Partners Llc | Automatic termination of electronic transactions |
US20080103966A1 (en) * | 2006-10-31 | 2008-05-01 | Chuck Foster | System and/or method for dynamic determination of transaction processing fees |
US20080249926A1 (en) * | 2007-04-09 | 2008-10-09 | First Data Corporation | Collection and reserve systems and methods |
US8688570B2 (en) | 2007-04-27 | 2014-04-01 | American Express Travel Related Services Company, Inc. | System and method for performing person-to-person funds transfers via wireless communications |
US8620260B2 (en) | 2007-04-27 | 2013-12-31 | American Express Travel Related Services Company, Inc. | Payment application download to mobile phone and phone personalization |
US8543496B2 (en) | 2007-04-27 | 2013-09-24 | American Express Travel Related Services Company, Inc. | User experience on mobile phone |
US20080270301A1 (en) * | 2007-04-27 | 2008-10-30 | American Express Travel Related Services Co., Inc. | Mobile payment system and method |
JP2010536110A (en) | 2007-08-12 | 2010-11-25 | エルビズリ,サメール | System and method for offsetting invoice debt |
US20090112759A1 (en) * | 2007-10-30 | 2009-04-30 | Chuck Foster | Accumulated transactions |
US20130030897A1 (en) | 2011-07-28 | 2013-01-31 | American Express Travel Related Services Company, Inc. | Systems and methods for generating and using a digital pass |
Citations (17)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5557518A (en) * | 1994-04-28 | 1996-09-17 | Citibank, N.A. | Trusted agents for open electronic commerce |
US5671280A (en) * | 1995-08-30 | 1997-09-23 | Citibank, N.A. | System and method for commercial payments using trusted agents |
US5677955A (en) * | 1995-04-07 | 1997-10-14 | Financial Services Technology Consortium | Electronic funds transfer instruments |
US5745886A (en) * | 1995-06-07 | 1998-04-28 | Citibank, N.A. | Trusted agents for open distribution of electronic money |
US5809144A (en) * | 1995-08-24 | 1998-09-15 | Carnegie Mellon University | Method and apparatus for purchasing and delivering digital goods over a network |
US5897621A (en) * | 1996-06-14 | 1999-04-27 | Cybercash, Inc. | System and method for multi-currency transactions |
US5903652A (en) * | 1996-11-25 | 1999-05-11 | Microsoft Corporation | System and apparatus for monitoring secure information in a computer network |
US6029150A (en) * | 1996-10-04 | 2000-02-22 | Certco, Llc | Payment and transactions in electronic commerce system |
US6047270A (en) * | 1996-08-08 | 2000-04-04 | Joao; Raymond Anthony | Apparatus and method for providing account security |
US6055314A (en) * | 1996-03-22 | 2000-04-25 | Microsoft Corporation | System and method for secure purchase and delivery of video content programs |
US6076078A (en) * | 1996-02-14 | 2000-06-13 | Carnegie Mellon University | Anonymous certified delivery |
US6119227A (en) * | 1995-04-18 | 2000-09-12 | Hewlett-Packard Company | Methods and apparatus for authenticating an originator of a message |
US6223291B1 (en) * | 1999-03-26 | 2001-04-24 | Motorola, Inc. | Secure wireless electronic-commerce system with digital product certificates and digital license certificates |
US6341353B1 (en) * | 1997-04-11 | 2002-01-22 | The Brodia Group | Smart electronic receipt system |
US6385596B1 (en) * | 1998-02-06 | 2002-05-07 | Liquid Audio, Inc. | Secure online music distribution system |
US20040039647A1 (en) * | 2000-07-21 | 2004-02-26 | Alex Roche | Method and apparatus for automated on-line printing service |
US7318047B1 (en) * | 1999-12-29 | 2008-01-08 | Pitney Bowes Inc. | Method and apparatus for providing electronic refunds in an online payment system |
Family Cites Families (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6085168A (en) * | 1997-02-06 | 2000-07-04 | Fujitsu Limited | Electronic commerce settlement system |
EP1062560A1 (en) * | 1998-03-11 | 2000-12-27 | Cha! Technologies, Inc. | Automatically invoked intermediation process for network purchases |
CA2324114A1 (en) | 1998-03-24 | 1999-09-30 | Telcordia Technologies Inc. | A method for using a telephone calling card for business transactions |
SE9801181L (en) * | 1998-04-03 | 1999-10-04 | Telia Ab | Improvements in, or with regard to, telecommunications systems |
-
1999
- 1999-11-23 SE SE9904258A patent/SE516782C2/en not_active IP Right Cessation
-
2000
- 2000-11-23 WO PCT/SE2000/002324 patent/WO2001039062A1/en active IP Right Grant
- 2000-11-23 EP EP00980202A patent/EP1232459A1/en not_active Withdrawn
- 2000-11-23 JP JP2001540656A patent/JP2003515822A/en active Pending
- 2000-11-23 AU AU17496/01A patent/AU781647B2/en not_active Ceased
- 2000-11-24 US US09/718,411 patent/US7146342B1/en not_active Expired - Lifetime
-
2006
- 2006-04-17 US US11/404,841 patent/US20060195367A1/en not_active Abandoned
Patent Citations (17)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5557518A (en) * | 1994-04-28 | 1996-09-17 | Citibank, N.A. | Trusted agents for open electronic commerce |
US5677955A (en) * | 1995-04-07 | 1997-10-14 | Financial Services Technology Consortium | Electronic funds transfer instruments |
US6119227A (en) * | 1995-04-18 | 2000-09-12 | Hewlett-Packard Company | Methods and apparatus for authenticating an originator of a message |
US5745886A (en) * | 1995-06-07 | 1998-04-28 | Citibank, N.A. | Trusted agents for open distribution of electronic money |
US5809144A (en) * | 1995-08-24 | 1998-09-15 | Carnegie Mellon University | Method and apparatus for purchasing and delivering digital goods over a network |
US5671280A (en) * | 1995-08-30 | 1997-09-23 | Citibank, N.A. | System and method for commercial payments using trusted agents |
US6076078A (en) * | 1996-02-14 | 2000-06-13 | Carnegie Mellon University | Anonymous certified delivery |
US6055314A (en) * | 1996-03-22 | 2000-04-25 | Microsoft Corporation | System and method for secure purchase and delivery of video content programs |
US5897621A (en) * | 1996-06-14 | 1999-04-27 | Cybercash, Inc. | System and method for multi-currency transactions |
US6047270A (en) * | 1996-08-08 | 2000-04-04 | Joao; Raymond Anthony | Apparatus and method for providing account security |
US6029150A (en) * | 1996-10-04 | 2000-02-22 | Certco, Llc | Payment and transactions in electronic commerce system |
US5903652A (en) * | 1996-11-25 | 1999-05-11 | Microsoft Corporation | System and apparatus for monitoring secure information in a computer network |
US6341353B1 (en) * | 1997-04-11 | 2002-01-22 | The Brodia Group | Smart electronic receipt system |
US6385596B1 (en) * | 1998-02-06 | 2002-05-07 | Liquid Audio, Inc. | Secure online music distribution system |
US6223291B1 (en) * | 1999-03-26 | 2001-04-24 | Motorola, Inc. | Secure wireless electronic-commerce system with digital product certificates and digital license certificates |
US7318047B1 (en) * | 1999-12-29 | 2008-01-08 | Pitney Bowes Inc. | Method and apparatus for providing electronic refunds in an online payment system |
US20040039647A1 (en) * | 2000-07-21 | 2004-02-26 | Alex Roche | Method and apparatus for automated on-line printing service |
Cited By (13)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20030115162A1 (en) * | 2001-12-14 | 2003-06-19 | Konick Michael Edward | System and method for mail processing with verified sender identity |
US20060265339A1 (en) * | 2005-05-17 | 2006-11-23 | Faramak Vakil | Secure virtual point of service for 3G wireless networks |
US8645282B2 (en) * | 2005-05-17 | 2014-02-04 | Tti Inventions C Llc | Method and apparatus to conduct a commercial transaction over wireless networks |
US20080154621A1 (en) * | 2006-12-21 | 2008-06-26 | Ping-Chen Wu | Method for verifying defective material list |
US8595076B2 (en) * | 2008-01-30 | 2013-11-26 | Donald C. Jean | Method and system for purchase of a product or service using a communication network site |
US20090210315A1 (en) * | 2008-01-30 | 2009-08-20 | Jean Donald C | Method and system for purchase of a product or service using a communication network site |
WO2009097130A1 (en) * | 2008-01-30 | 2009-08-06 | Jean Donald C | Method and system for purchase of a product or services using a communication network site |
US20190205878A1 (en) * | 2008-07-24 | 2019-07-04 | At&T Intellectual Property I, L.P. | Secure payment service and system for interactive voice response (ivr) systems |
US10552835B2 (en) * | 2008-07-24 | 2020-02-04 | At&T Intellectual Property I, L.P. | Secure payment service and system for interactive voice response (IVR) systems |
US20120095912A1 (en) * | 2010-10-15 | 2012-04-19 | Western Union Financial Services, Inc. | Systems and methods for electronic purchase transaction processing |
US20140304169A1 (en) * | 2011-10-31 | 2014-10-09 | Ncr Corporation | Techniques for mobile transaction processing |
US20150302341A1 (en) * | 2014-04-22 | 2015-10-22 | Bank Of America Corporation | System for implementing change condition levels |
CN110310180A (en) * | 2019-07-08 | 2019-10-08 | 湖南共睹互联网科技有限责任公司 | Guarantee method of commerce, device and the storage medium participated in based on eye-witness |
Also Published As
Publication number | Publication date |
---|---|
US7146342B1 (en) | 2006-12-05 |
AU1749601A (en) | 2001-06-04 |
SE9904258L (en) | 2001-05-24 |
WO2001039062A1 (en) | 2001-05-31 |
EP1232459A1 (en) | 2002-08-21 |
SE9904258D0 (en) | 1999-11-23 |
JP2003515822A (en) | 2003-05-07 |
AU781647B2 (en) | 2005-06-02 |
SE516782C2 (en) | 2002-03-05 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US7146342B1 (en) | Payment system and method for use in an electronic commerce system | |
US6138107A (en) | Method and apparatus for providing electronic accounts over a public network | |
AU777762B2 (en) | Electronic transactions and payments system | |
US7120609B1 (en) | System for secure transactions | |
US7478239B1 (en) | Electronic ticket vending system | |
USRE40444E1 (en) | Four-party credit/debit payment protocol | |
US20030069792A1 (en) | System and method for effecting secure online payment using a client payment card | |
RU2301449C2 (en) | Method for realization of multi-factor strict authentication of bank card holder with usage of mobile phone in mobile communication environment during realization of inter-bank financial transactions in international payment system in accordance to 3-d secure specification protocol and the system for realization of aforementioned method | |
US20040059952A1 (en) | Authentication system | |
JPH07234904A (en) | Method for execution of noncash transaction | |
CA2730175A1 (en) | Secure wireless deposit system and method | |
CN103489104A (en) | Security payment method and system | |
JPH10171887A (en) | On-line shopping system | |
US20020174075A1 (en) | System & method for on-line payment | |
KR20020032821A (en) | Electronic commerce system of settlements using radio communication equipment and method thereof | |
JP2002109397A (en) | Electronic commerce method and electronic commerce system | |
KR20020010160A (en) | System & Method for Wireless Electronic Commerce Payment service | |
CN116802661A (en) | Token-based out-of-chain interaction authorization | |
Herzberg | Micropayments | |
KR100458526B1 (en) | System and Method for the wire·wireless complex electronic payment | |
Al-Meaither | Secure electronic payments for Islamic finance | |
Azbel | PayWord Micro-Payment Scheme. Strengths, Weaknesses and Proposed Improvements | |
Ghani | Charging and paying for information on open networks | |
Van Thanh | Mobile E-Commerce on Mobile Phones | |
Watson | Electronic cash and set |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
STCB | Information on status: application discontinuation |
Free format text: ABANDONED -- FAILURE TO RESPOND TO AN OFFICE ACTION |