Method and system for a secure registration

Patent metadata

Field	Value
Publication number	US-10339506-B2
Application number	US-201414224969-A
Country	US
Kind code	B2
Filing date	Mar 25, 2014
Priority date	Mar 25, 2013
Publication date	Jul 2, 2019
Grant date	Jul 2, 2019

Abstract

Methods and apparatus for secure registration to enable transactions between a first user and a vendor that is facilitated by a payment server are disclosed. The method may comprise storing a form soliciting customer information including a plurality of fields, wherein at least one of the plurality of fields is associated with an attribute. The method including receiving a copy of the form including customer data in all of the plurality of fields and transmitting a first subset of the customer data based on the attribute associated with the first subset of the customer data. The method including receiving a token in response to the transmission of the first subset of customer data and transmitting the token and a second subset of the customer data, wherein the second subset is based on the attribute associated with the second subset of customer data.

First claim

What is claimed is:

1. A method for improving security of an e-commerce system, the method comprising:
storing, by an authorized domain server, a form soliciting customer information including a plurality of fields and a first token, wherein at least one of the plurality of fields is associated with a first attribute;
receiving, by the authorized domain server a copy of the form including customer data in all of the plurality of fields via an email sent from a sender email address;
validating, by the authorization domain server, a customer based on the first token and the sender email address, wherein the first token is valid for a specified duration;
on a condition that the customer is validated, transmitting, by the authorized domain server, a first subset of the customer data based on the attribute associated with the first subset of the customer data to a secure information processing server;
generating, by the secure information processing server, a second token in response to receiving the first subset of the customer data from the authorization domain server, wherein the second token is generated by decoding the first subset of the customer data and corresponding attribute such that the first subset of the customer data includes customer data that is associated with the first attribute;
receiving, by the authorization domain server, the second token from the secure information processing server;
authenticating, by the authorization domain server, the customer based on the second token and the sender email address; and
on a condition that the customer is authenticated, transmitting, by the authorization domain server, the second token and a second subset of the customer data to a vendor server, wherein the second subset includes additional information not contained in the first subset.

2. The method of claim 1 , further comprising transmitting the form to a website operated by the vendor.

3. The method of claim 1 , wherein at least one of the plurality of fields is not associated with an attribute.

4. The method of claim 1 , wherein the copy of the form is received via an email message.

5. The method of claim 1 , wherein the copy of the form is received via an HTTP transmission.

6. A system for improving security of an e-commerce system, the system comprising:
a memory that stores a form soliciting customer information including a plurality of fields and a first token, wherein at least one of the plurality of fields is associated with a first attribute;
a communication interface communicatively coupled to a user device, a vendor system and a secure information processing server via network; and
a processor communicatively coupled to the memory and the communication interface;
wherein the processor:
receives, using the communication interface, a copy of the form including customer data in all of the plurality of fields via an email sent from a sender email address, validates a customer based on the first token and the sender email address, wherein the first token is valid for a specified duration,
on a condition that the customer is validated, transmits, using the communication interface, a first subset of the customer data based on the attribute associated with the first subset of the customer data to the secure information processing server,
receives, using the communication interface, a second token from secure information processing server, wherein the second token is generated by the information processing decoding the first subset of the customer data and corresponding attribute such that the first subset of the customer data includes customer data that is associated with the first attribute,
authenticates, by the authorization domain server, the customer based on the second token and the sender email address, and
on a condition that the customer is authenticated, transmits, using the communication interface, the second token and a second subset of the customer data to a vendor server such that second token is transmitted during a valid duration of the form as determined by the first token, wherein the second subset includes additional information not contained in the first subset.

7. The system of claim 6 , wherein the transmitter is further configured to transmit the form to a website operated by the vendor.

8. The system of claim 6 , wherein at least one of the plurality of fields is not associated with an attribute.

9. The system of claim 6 , wherein the copy of the form is received via an email message.

10. The system of claim 6 , wherein the copy of the form is received via an HTTP transmission.

Assignees

• @Pay Ip Holdings Llc
• Swoop Ip Holdings Llc

Inventors

• Kassemi James
• Holcomb Lawrence Glen

Classifications

• G06Q20/322

  Aspects of commerce using mobile devices [M-devices] · CPC title

• G06Q20/3829

  involving key management · CPC title

• G06Q20/388

  using mutual authentication without cards, e.g. challenge-response · CPC title

• G06Q20/0855

  involving a third party · CPC title

• G06Q20/38215

  Use of certificates or encrypted proofs of transaction rights · CPC title