Secure mobile remote payments

Patent metadata

Field	Value
Publication number	US-2016260084-A1
Application number	US-201615063212-A
Country	US
Kind code	A1
Filing date	Mar 7, 2016
Priority date	Mar 6, 2015
Publication date	Sep 8, 2016
Grant date	—

Abstract

Provided are systems and methods for conducting secure remote transactions between mobile devices and merchants.

First claim

What is claimed is:

1 . A method for processing a checkout transaction, comprising:
receiving, at a server, a request to initiate a checkout transaction; generating a request token including information identifying the checkout transaction; receiving a verification token encrypted with a key of the server; and providing checkout resources to a merchant for use by the merchant to complete the transaction if the verification token is validated by the server.

2 . The method of claim 1 , further comprising:
receiving, at the server, a request to authorize the checkout transaction, the request received prior to providing checkout resources to the merchant.

3 . The method of claim 1 , wherein the request to initiate a checkout transaction is received from a merchant server.

4 . The method of claim 3 , wherein the merchant server is in communication with a merchant application on a mobile device of a user, where the checkout transaction involves a transaction between the user and a merchant associated with the merchant server and the merchant application.

5 . The method of claim 1 , wherein the request to initiate a checkout transaction includes information identifying a merchant application initiating the checkout transaction and information identifying an initial transaction amount.

6 . The method of claim 5 , wherein the request to initiate a checkout transaction further includes information identifying at least a first item to be purchased.

7 . The method of claim 1 , further comprising:
encrypting the request token with a key associated with the server.

8 . The method of claim 1 , wherein the verification token is received from a wallet proxy server.

9 . The method of claim 1 , further comprising:
generating the verification token; and transmitting the verification token to a wallet server proxy for transmission to a wallet application on a mobile device.

10 . The method of claim 9 , wherein the verification token is generated upon receipt of a payment token associated with a payment instrument selected by a user of the mobile device.

11 . The method of claim 10 , wherein the checkout resources include information associated with the payment token.

12 . The method of claim 11 , wherein the checkout resources further include information identifying a transaction amount.

13 . The method of claim 12 , wherein the transaction amount is at least one of: (i) the same as the initial transaction amount, and (ii) an amount different than the initial transaction amount.

14 . A method for operating a mobile device to conduct a transaction with a merchant, comprising:
transmitting a transaction initiation request message to a merchant server associated with a mobile application of the mobile device; receiving, from the merchant server, a request token and, based at least in part on the request token, performing a cardholder validation method to validate a user of the mobile device; transmitting, to a wallet proxy server, a token associated with a payment device to be used in the transaction; receiving, from a wallet proxy server, an authorize checkout request message; validating the authorize checkout request message using a key shared with the wallet proxy server; and transmitting a checkout confirmation to the merchant server.

15 . The method of claim 14 , wherein the mobile device does not store actual payment credentials.

Assignees

• Mastercard International Inc

Inventors

• Main Jonathan J
• Fabyshev Igor
• Oza Chintan
• Wang Alan

Classifications

• G06Q20/322

  Aspects of commerce using mobile devices [M-devices] · CPC title

• G06Q20/3674

  involving authentication · CPC title

• G06Q20/204

  comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit · CPC title

• G06Q2220/00

  Business processing using cryptography · CPC title

• G06Q20/227

  characterised in that multiple accounts are available, e.g. to the payer · CPC title