SMS and social media dual authorization, management oversight, and non-password security in email based e-commerce

Patent metadata

Field	Value
Publication number	US-10346846-B2
Application number	US-201514695917-A
Country	US
Kind code	B2
Filing date	Apr 24, 2015
Priority date	Apr 24, 2014
Publication date	Jul 9, 2019
Grant date	Jul 9, 2019

Abstract

An email-based e-commerce system is disclosed with additional features for added security. The system may include security features for email based e-commerce providing added assurance to customers of a higher level of protection than generally required. These security features enhance the password reset function without requiring a password, generate confirmations on outside messaging systems and implement an oversight management tool for authorizing transactions. The methods and apparatus described herein may enhance security by designing a system that can confirm payments through a separate non-email based media. The e-commerce system may send alerts or requests for confirmation in a variety of media to ensure a secure payment process. The methods and apparatus described herein may expand the list of individuals that may request or approve payments based on a single account registered by a single credit card holder. A single user may receive requests from registered sub-customers for payments by email.

First claim

What is claimed is:

1. A method for improving security of an e-commerce transaction utilizing Simple Mail Transfer Protocol (SMTP), the method comprising:
transmitting an offer email for the e-commerce transaction to a sub-customer via SMTP, wherein the email contains a token and a mailto link;
receiving a response email that is generated in response to a user clicking the mailto link in the offer email, wherein the response email contains the token;
decoding the token to determine and a full-customer associated with the sub-customer;
on a condition that the full customer is determined, authorizing, by the full customer, the sub-customer to perform the e-commerce transaction by:
sending a confirmation request message to the full-customer associated with the sub-customer, wherein the confirmation request message is one or more of: a text message, a multi-media message, an SMTP email message and a social media post, and
receiving a confirmation response message from the full-customer associated with the sub-customer, wherein the confirmation response message is one or more of: a text message, a multi-media message, an, SMTP email message and a social media post; and
on a condition that the e-commerce transaction is authorized by the full customer, processing a payment for the e-commerce transaction.

2. The method of claim 1 further comprising: sending a notification of successful transaction to the full-customer.

3. The method of claim 1 further comprising: sending a notification of successful transaction to the sub-customer.

4. The method of claim 1 , wherein an email notification is sent to the sub-customer indicating the e-commerce transaction was cancelled on a condition that the full-customer cancels the e-commerce transaction.

5. A method for improving security of an e-commerce transaction utilizing Simple Mail Transfer Protocol (SMTP), the method comprising:
receiving a purchase request via an SMTP email from a sub-customer, the SMTP email including at least one token generated by a third party vendor;
determining a full-customer associated with the sub-customer by decoding the at least one token;
transmitting a confirmation request message to the full customer, via one or more of: text message, a multi-media message, an SMTP email message and a social media message;
receiving a confirmation confirm message, from the full customer, via one or more of: text message, a multi-media message, an SMTP email message and a social media message, wherein the confirmation message is a single word;
processing the payment in response to receiving the confirmation confirm message; and
transmitting a notification of successful transaction to the third party vendor.

6. The method of claim 5 , wherein an initial email offer is received via an email.

7. The method of claim 5 , further comprising identifying a required confirmation message format for the full customer.

8. The method of claim 1 , wherein the token is programmed to collect additional information from the full-customer and sub-customer so as to associate the full-customer with the sub-customer and meet the condition for processing of the payment.

9. The method of claim 1 , wherein the confirmation confirm message is a single word.

10. The method of claim 6 , wherein an account may be locked on a condition that the customer sends a predetermined word as the confirmation confirm message, wherein the predetermined word is lock.

11. The method of claim 5 , wherein an account may be locked on a condition that the customer sends a predetermined word as the confirmation confirm message, wherein the predetermined word is lock.

12. A method improving security of an e-commerce transaction without requiring password authentication that utilizes Simple Mail Transfer Protocol (SMTP), the method comprising;
registering an account with a payment server via a web page;
receiving an authentication request, wherein the authentication request includes an authentication Uniform Resource Location (URL);
transmitting a new authentication token to a customer;
accessing a second webpage associated with the authentication URL;
receiving an authentication confirmation message; and
invalidating any authentication tokens associated with the customer other than the new token.

13. The method of claim 12 , wherein the customer is authenticated after selecting the URL in the authentication request.

14. The method of claim 12 , wherein the customer provides answers to at least one security question when registering the account.

15. The method of claim 12 , wherein the customer is prompted to enter at least part of a credit card information.

16. The method of claim 12 , wherein the customer is authenticated using a short message service (SMS) message.

17. The method of claim 12 , wherein the customer is authenticated using a multimedia service (MMS) message.

18. The method of claim 12 , wherein the authentication confirmation message is a second SMTP email message.

19. The method .of claim 12 , wherein the authentication request is a social media post.

20. The method of claim 12 , wherein the authentication confirmation message is a social media post.

Assignees

• @Pay Ip Holdings Llc
• Swoop Ip Holdings Llc

Inventors

• Kassemi James
• Holcomb Lawrence Glen
• Killoran Jr John P
• Killoran Patrick

Classifications

• G06Q20/425

  using two different networks, one for transaction and one for security confirmation · CPC title

• G06Q20/3255

  using mobile network messaging services for payment, e.g. SMS · CPC title

• G06Q10/107

  Computer-aided management of electronic mailing [e-mailing] · CPC title

• G06Q20/405 Primary

  Establishing or using transaction specific rules · CPC title

• G06Q20/10

  specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems · CPC title