Gift Card Transfer Security

Patent metadata

Field	Value
Publication number	US-2017193503-A1
Application number	US-201615383921-A
Country	US
Kind code	A1
Filing date	Dec 19, 2016
Priority date	Dec 31, 2015
Publication date	Jul 6, 2017
Grant date	—

Abstract

Techniques for securing electronic gift cards transferrable over a network are discussed hereon. The system may include one or more servers configured to: associate a balance value with the gift card; receive a request for the balance value from a device via the network; in response to receiving the request for the balance value: verify whether the device is eligible to receive the balance value based on merchant verification data received from the device; and in response to determining that the device is ineligible to receive the balance value, withhold the balance value from the device.

First claim

That which is claimed:

1 . A system for securing electronic gift cards transferrable over a network, comprising:
one or more servers configured to:
associate a balance value with the gift card;
receive a request for the balance value from a device via the network;
in response to receiving the request for the balance value:
verify whether the device is eligible to receive the balance value based on merchant verification data received from the device; and
in response to determining that the device is ineligible to receive the balance value, withhold the balance value from the device.

2 . The system of claim 1 , wherein the one or more servers configured to withhold the balance value from the device includes the one or more servers being configured to provide a zero or invalid balance value to the device via the network.

3 . The system of claim 1 , wherein the one or more servers are further configured to, in response to determining that the device is eligible to receive the balance value, provide the balance value to the device via the network.

4 . The system of claim 1 , wherein the one or more servers are further configured to, determine the device is an ineligible exchange server in response to verifying that the device is ineligible to receive the balance value.

5 . The system of claim 1 , wherein:
the merchant verification data includes a merchant identifier received from the device; and the one or more servers configured to verify whether the device is eligible to receive the balance value based on merchant verification data includes the one or more servers being configured to compare the received merchant identifier with a stored merchant identifier associated with the gift card.

6 . The system of claim 1 , wherein:
the merchant verification data includes a password received from the device; and the one or more servers configured to verify whether the device is eligible to receive the balance value based on merchant verification data includes the one or more servers being configured to compare the received password with a stored cryptographically secure hash of a password associated with the gift card.

7 . The system of claim 1 , wherein:
the merchant verification data includes encrypted verification data received from the device; and the one or more servers configured to verify whether the device is eligible to receive the balance value based on merchant verification data includes the one or more servers being configured to:
generate decrypted verification data based on decrypting the encrypted verification data with a public key associated with the gift card; and
compare the decrypted verification data with stored verification data, wherein the decrypted verification data matches the stored verification data when the encrypted verification data was generated by the device using a private key pair of the public key associated with the gift card.

8 . The system of claim 1 , wherein:
the one or more servers are further configured to generate an application programming interface (API) token and provide the API token to eligible devices for receiving the balance value; the one or more servers configured to verify whether the device is eligible to receive the balance value based on merchant verification data includes the one or more servers being configured to:
receive the merchant verification data from the device; and
compare the received merchant verification data with the API token.

9 . The system of claim 1 , wherein the one or more servers configured to verify whether the device is eligible to receive the balance value based on merchant verification data includes the one or more servers being configured to:
receive location data from the device, wherein the location data is generated based on at least one of a global positioning system (GPS) or a cloud-based location service; and compare the received location data with stored location data for eligible devices for receiving the balance value.

10 . The system of claim 1 , wherein the one or more servers configured to verify whether the device is eligible to receive the balance value based on merchant verification data includes the one or more servers being configured to:
determine a redemption deadline; and determine the device is ineligible to receive the balance value in response to determining that the redemption deadline has elapsed.

Assignees

• Groupon Inc

Inventors

• Oppenheim Kyle

Classifications

• G06Q20/401 Primary

  Transaction verification · CPC title

• G06Q20/34

  using cards, e.g. integrated circuit [IC] cards or magnetic cards · CPC title

• G06Q20/4015 Primary

  using location information · CPC title

• G06Q20/387 Primary

  Payment using discounts or coupons (relating to marketing G06Q30/02) · CPC title