Data security for transactions with secure offer system

Patent metadata

Field	Value
Publication number	US-11880834-B2
Application number	US-202117378069-A
Country	US
Kind code	B2
Filing date	Jul 16, 2021
Priority date	Jul 17, 2020
Publication date	Jan 23, 2024
Grant date	Jan 23, 2024

Abstract

Examples described herein include systems, methods, instructions, and other implementations for data security with integrated promotion systems. In one example, account security system receives a checkout communication that includes data describing a validated checkout system of a merchant system, where the checkout communication does not include a purchase promotion option. A client token is transmitted in response to an authentication that the checkout communication is from the validated checkout system, and an account communication including the client token and secure client information is received from a client device. A plurality of promotion options associated with the secure transaction is transmitted in response to the account communication, and a promotion selection for the secure transaction is received from the client device and not from the merchant system.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
receiving, at an account security system including one or more processors, a checkout communication associated with a secure transaction, wherein the secure transaction involves a merchant system and a client device, wherein the checkout communication includes data describing a validated checkout system of the merchant system, wherein the checkout communication includes a set of input parameters, and wherein the checkout communication does not include a purchase promotion option;
automatically transmitting a client token in real-time, wherein when the client token is received at the client device, the client token is used by the client device to verify the merchant system;
receiving an account communication including the client token and secure client information, wherein the secure client information is not received from the merchant system;
transmitting a JavaScript Object Notation (JSON) communication, wherein when the JSON communication is transmitted in response to the account communication, the JSON communication is sent to a secure web service associated with the account security system, and wherein the JSON communication includes the set of input parameters for a promotion lookup;
receiving, by the account security system, a JSON response includes data for a plurality of promotion options based on the set of input parameters;
dynamically filtering, by the account security system, the plurality of promotion options to select filtered available offers from the plurality of promotion options based on the account communication;
automatically transmitting the filtered available offers in response to the account communication;
receiving, at the account security system, a promotion selection for the secure transaction, wherein the promotion selection is not received from the merchant system.

2. The computer-implemented method of claim 1 further comprising facilitating settlement of the secure transaction independent of terms associated with the promotion selection, wherein the terms are not communicated to the merchant system; and
facilitating payment by a customer in accordance with the terms associated with the promotion selection.

3. The computer-implemented method of claim 1 further comprising:
processing the checkout communication to authenticate that the checkout communication is from the validated checkout system;
generating the client token in response to an authentication that the checkout communication is from the validated checkout system;
generating a tokenized client account number in response to the account communication; and
transmitting the tokenized client account number, wherein the tokenized client account number allows the merchant system to process the secure transaction without access to the secure client information.

4. The computer-implemented method of claim 1 , wherein when the checkout communication is received from the merchant system, the checkout communication does not include the secure client information.

5. The computer-implemented method of claim 1 further comprising:
identifying, using the account communication, the set of input parameters for the promotion lookup, wherein the set of input parameters comprises an industry identifier;
performing the promotion lookup to identify the plurality of promotion options from a database; and
wherein the plurality of promotion options include a set of industry promotions associated with the industry identifier.

6. The computer-implemented method of claim 5 wherein the set of input parameters further comprises one or more of a merchant identifier, an account number, a purchase amount, and a client identifier.

7. The method of claim 1 , wherein verifying the merchant system by the client device includes confirming at the client device that the checkout communication is from the validated checkout system of the merchant system.

8. The computer-implemented method of claim 1 , wherein the filtered available offers are selected from the plurality of promotion options based on a purchase amount in the account communication.

9. The computer-implemented method of claim 1 , wherein the set of input parameters includes an industry identifier from the merchant system and sensitive client data from the client device, wherein the merchant system is isolated from the sensitive client data.

10. A system comprising:
one or more processors; and
one or more non-transitory machine-readable storage media containing instructions that, when executed on the one or more processors, cause the one or more processors to perform operations including:
receiving, at an account security system including the one or more processors, a checkout communication associated with a secure transaction, wherein the secure transaction involves a merchant system and a client device, wherein the checkout communication includes data describing a validated checkout system of the merchant system, wherein the checkout communication includes a set of input parameters, and wherein the checkout communication does not include a purchase promotion option;
automatically transmitting a client token in real-time, wherein when the client token is received at the client device, the client token is used by the client device to verify the merchant system;
receiving an account communication including the client token and secure client information, wherein the secure client information is not received from the merchant system;
transmitting a JavaScript Object Notation (JSON) communication, wherein when the JSON communication is transmitted in response to the account communication, the JSON communication is sent to a secure web service associated with the account security system, and wherein the JSON communication includes the set of input parameters for a promotion lookup;
receiving, by the account security system, a JSON response includes data for a plurality of promotion options based on the set of input parameters;
dynamically filtering, by the account security system, the plurality of promotion options to select filtered available offers from the plurality of promotion options based on the account communication;
automatically transmitting the filtered available offers in response to the account communication;
receiving, at the account security system, a promotion selection for the secure transaction, wherein the promotion selection is not received from the merchant system.

11. The system of claim 10 further comprising facilitating settlement of the secure transaction independent of terms associated with the promotion selection, wherein the terms are not communicated to the merchant system; and
facilitating payment by a customer in accordance with the terms associated with the promotion selection.

12. The system of claim 10 further comprising:
processing the checkout communication to authenticate that the checkout communication is from the validated checkout system;
generating the client token in response to an authentication that the checkout communication is from the validated checkout system;
generating a tokenized client account number in response to the account communication; and
transmitting the tokenized client account number, wherein the tokenized client account number allows the merchant system to process the secure transaction without access to the secure client information.

13. The system of claim 10 , wherein when the checkout communication is received from the merchant system, the checkout communication does not include the secure client information.

14. The system of claim 10 further comprising:
ide

Assignees

• Synchrony Bank

Inventors

• Bernert Deborah
• Young Taylor
• Schmidt Jonathan M
• Schultz Gregory
• Neidermeyer Jay
• Urbansky Craig
• Ravi Viveka Vardhan
• Divecha Tushar

Classifications

• G06Q20/387 Primary

  Payment using discounts or coupons (relating to marketing G06Q30/02) · CPC title

• G06Q20/401

  Transaction verification · CPC title

• G06Q30/0239

  Online discounts or incentives · CPC title

• G07F17/0035

  Participation in a loyalty or discount scheme (data processing for shopping and discounts G06Q30/00) · CPC title

• G06Q20/204

  comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit · CPC title