Secure remote transaction framework using dynamic secure checkout element

Patent metadata

Field	Value
Publication number	US-12481980-B2
Application number	US-201916448777-A
Country	US
Kind code	B2
Filing date	Jun 21, 2019
Priority date	Jun 22, 2018
Publication date	Nov 25, 2025
Grant date	Nov 25, 2025

Abstract

Embodiments of the invention are directed to systems and methods of providing secure remote transaction (SRT) transactions. In some embodiments, a resource provider is able to embed a checkout element into a webpage that it hosts. The checkout element enables interaction between a user that has accessed the webpage and an initiator application server located remotely in order to complete a transaction while preventing the resource provider from gaining access to sensitive information. In some embodiments, the user's information may be determined by an initiator server and populated into the checkout element.

First claim

What is claimed is:

1 . A method comprising:
presenting, on a browser application executing on a client device, a webpage related to at least one product provided by a resource provider, wherein the webpage is hosted by the resource provider; embedding a checkout element managed by a secure remote server in the webpage hosted by the resource provider; instantiating the checkout element upon the browser application loading the webpage related to the at least one product, the instantiating comprising presenting the checkout element including one or more fields embedded in the webpage on the browser application while browsing for the at least one product,
wherein a memory of the client device is accessible by the checkout element managed by the secure remote server, the one or more fields of the checkout element are populated using cookies retrieved from the memory of the client device by the checkout element, the checkout element comprising an application that is separate from the webpage;
identifying, via the checkout element, information indicating an identity of a user of the client device, wherein the resource provider is prevented from accessing the information obtained by the checkout element from the client device, and wherein the information is obtained via an authentication decision, the authentication decision generated by a facilitator application installed on the client device that uses biometric information of the user, the facilitator application obtaining, via an associated voice scanning hardware of the client device or fingerprint scanning sensors of the client device, the biometric information of the user; transmitting the information indicating the identity of the user to the secure remote server; receiving, from the secure remote server and via the checkout element, a number of accounts associated with the user, wherein credentials for one of the number of accounts are populated in at least one of the one or more fields of the checkout element; presenting an option to change the credentials for one of the number of accounts to another one of the number of accounts to the user within the checkout element via the client device; transmitting a selection of an account from the number of accounts to the secure remote server; receiving, from the secure remote server and via the checkout element, a token to be used to complete a transaction, the token generated by the secure remote server in response to receiving the selection of the account, the token associated with the account, and the token being specific to the resource provider; and providing, via the checkout element to the resource provider, the token.

2 . The method of claim 1 , wherein the number of accounts associated with the user is determined by contacting one or more processing networks.

3 . The method of claim 1 , wherein the secure remote server is an initiator application server.

4 . The method of claim 1 , wherein the secure remote server is a secure remote transaction (SRT) server.

5 . A client device comprising:
a processor; and a memory including instructions that, when executed with the processor, cause the client device to, at least:
present, on a browser application executing on a client device, a webpage related to at least one product provided by a resource provider, wherein the webpage is hosted by the resource provider;
embed a checkout element managed by a secure remote server in the webpage hosted by the resource provider;
instantiate the checkout element upon the browser application loading the webpage related to the at least one product, instantiating comprising presenting the checkout element including one or more fields embedded in the webpage on the browser application while browsing for the at least one product,
wherein a memory of the client device is accessible by the checkout element managed by the secure remote server, the one or more fields of the checkout element are populated using cookies retrieved from the memory of the client device by the checkout element, the checkout element comprising an application that is separate from the webpage;

identify, via the checkout element, information indicating an identity of a user of the client device, wherein the resource provider is prevented from accessing the information obtained by the checkout element, and wherein the information is obtained via an authentication decision from the client device, the authentication decision generated by a facilitator application installed on the client device that uses biometric information of the user, the facilitator application obtaining, via an associated voice scanning hardware of the client device or fingerprint scanning sensors of the client device, the biometric information of the user;
transmit the information indicating the identity of the user to the secure remote server;
receive, from the secure remote server and via the checkout element, a number of accounts associated with the user, wherein credentials for one of the number of accounts are populated in at least one of the one or more fields of the checkout element;
present an option to change the credentials for one of the number of accounts to another one of the number of the accounts to the user within the checkout element;
transmit a selection of an account from the number of accounts to the secure remote server;
receive, from the secure remote server and via the checkout element, a token to be used to complete a transaction, the token generated by the secure remote server in response to receiving the selection of the account, the token associated with the account, and the token being specific to the resource provider; and
provide, via the checkout element to the resource provider, the token.

6 . The client device of claim 5 , wherein the facilitator application is selected by the user from a number of facilitator applications installed on the client device.

7 . The client device of claim 5 , wherein the instructions further cause the client device to:
launch the facilitator application to authenticate the user; and generate the authentication decision upon authenticating the user.

8 . The client device of claim 7 , wherein the facilitator application is provided a number of transaction details upon its launch.

9 . The client device of claim 5 , wherein the facilitator application is launched via an application programming interface associated with the facilitator application.

10 . The client device of claim 5 , wherein the token is a limited-use token that can only be used to complete the transaction.

Assignees

• Visa Int Service Ass

Inventors

• Chitalia Jalpesh
• Ansari Ansar
• Carvalho Kevin
• Purves Thomas
• Kannembath Manoj

Classifications

• G06Q20/4014

  Identity check for transactions · CPC title

• G06Q20/3227

  using secure elements embedded in M-devices · CPC title

• G06Q20/3821

  Electronic credentials · CPC title

• G07G1/0009

  Details of the software in the checkout register, electronic cash register [ECR] or point of sale terminal [POS] · CPC title

• G06Q20/12

  specially adapted for electronic shopping systems · CPC title