System and method for performing secure credit card purchases

[0002] 1. Field of the Invention

[0003] This invention relates to a system and method of performing secure credit card purchases in connection with remote commercial transactions, wherein a credit card holder does not have to reveal their credit card number to a merchant or a mechanism controlled by the merchant in order to accomplish a purchase, and wherein the merchant is still assured of the necessary credit verifications and approvals prior to authorizing and/or completing a credit card transaction, thereby increasing overall security by minimizing any access to credit card numbers without having to substantially modify or deviate from existing, accepted credit card transaction practices.

[0004] 2. Description of the Related Art

[0005] The utilization of credit and debit cards to conduct transactions is ever increasing. This is especially the case with remote or “mail-order” transactions wherein merchants desire to be assured of a payment prior to shipping a product. For example, recent years have seen a substantial increase in the popularity of televised shopping networks to further supplement the popularity of catalogue type sales. Moreover, the increasing use and popularity of distributed computer networks such as the internet has also contributed to the dramatic increase in the number of remote commercial transactions conducted every day.

[0006] One primary reason associated with the rapid growth of remote commercial transactions is the ability of a merchant to reach an almost limitless number of potential customers at a substantially insignificant cost and with little or no operating overhead since an actual store is not required. Additionally, such sales techniques permit customers to view the products and services in a greatly expanded marketplace, representing a great number of vendors, without extensive travel and without foregoing the privacy and convenience of their home or other predetermined computer site in some cases. Simply put, a telephone or like communication avenue is all that is needed to place the consumer in contact with the merchant and complete the transaction.

[0007] The vast increase in popularity of remote commercial transactions conducted over the telephone or internet is further facilitated by the relatively simple protocols and procedures necessary to conduct such transactions. In particular, in order to complete a valid transaction, a merchant need not physically see the customer or the credit card, but must merely accept and enter a customer's credit card account number and an expiration date thereof to obtain authorization. This same convenience, however, is the primary disadvantage and/or problem associated with conducting commerce in the manners set forth above. Specifically, there is a great reluctance on the part of the customer to transmit the credit card account information, including the credit card number, because of the proliferation of fraud, and a well recognized lack of security directed to the protection of such account information. Indeed, it has been established that security and privacy concerns are realistic due to the fact that credit card account data is easily readable or interceptable by unauthorized parties, and can be readily used for all types of remote transactions with minimal risk of being physically caught. In fact, unscrupulous individuals have many ways of gaining access to a consumer's legitimate remote transactions and thereby obtaining the credit card information. This information can be obtained from old credit card receipts or even from the unauthorized notation and use of the information by merchants or their employees after a legitimate transaction is made. Naturally, the latter is the most difficult to prevent utilizing known methods and systems unless a consumer is willing to completely forego the use of a credit card for purchases.

[0008] In the case of computerized remote transactions, as messages, including account data or other confidential information, move across the internet, they can easily pass through numerous computers, any one of which can be utilized to copy such confidential information or data, thereby leading to a further risk of potential fraud when conducting such transactions. Presently, some companies currently seek to address such security and privacy concerns by the employment of encryption programs and techniques. To this end there is an extensive facility associated with both public and private encryption schemes being deployed in order to guard the private or secured information being transmitted across the internet or like world wide networks. Unfortunately, however, even with such encryption techniques, the account information must usually still ultimately be transmitted to a third party who did not previously have access to that information previously. Even some more sophisticated systems which seek to interpose a separate computer or encryption entity between the consumer and the merchant so as to obtain authorization and forward it to the merchant, that information must still be made available to and/or transmitted to that third party, thereby leaving open an avenue for fraud or theft. Further, such encryption techniques, even if minimally effective for computerized remote transactions, are not truly useable for other conventional types of remote transactions, or even normal in person transactions.

[0009] Based on the above, there is an obvious need in the field of art associated with remote commercial transactions for a system and method of performing secure credit card purchases of goods and services which truly reduces the risk of potential fraud and theft by eliminating outside access to a consumer's private credit card information without requiring complex encryption equipment or significantly altering the ease and convenience of current transaction techniques. Further, such a system and method should also be effective for use in conventional, “in person” transactions as well, thereby providing an added measure of security and minimizing the hazards associated with the passing on of account information by unscrupulous merchants. Also, such a system should provide limits to potential loss or liability in a manner which does not impede the transaction.

[0010] The present invention is directed towards a system and method of performing secure credit card purchases, wherein payment for goods or services purchased is efficiently accomplished while eliminating the necessity of disclosure or dissemination of a consumers specific credit card number or other account data which the customer or other individual may wish to maintain in confidence. The system and method of the present invention incorporates the advantage of consummating the purchase by the customer through the selection of any one of a plurality of predetermined payment categories. Collectively, the payment categories represent a variety of methods for accomplishing payment for a fixed transaction, a multiple transaction and/or a repeating transaction.

[0011] One embodiment of the system and method of the present invention comprises a customer receiving information, including specific data necessary for the purchase of any given product or service. This promotional information generated by the merchant can be received by any of a plurality of conventional means including advertisements, catalogues, computer network connections, direct person to person customer and merchant contact, telephone solicitation, mail orders, television sales, etc. Once the customer has identified the product or services which he/she wishes to purchase, the customer contacts and supplies a custodial authorizing entity with the requisite information concerning both the identification of a specific credit card or debit card account and a requested payment category. Additionally, security against unauthorized use of confidential account data may also preferably include information relating to the merchant's identification and/or location.

[0012] The custodial authorizing entity is preferably defined as the entity which has or has been assigned the custodial responsibility for the financial account data of a customer's credit card account, including a previous knowledge of the credit card number and other information such as credit limits, payment history, available credit amounts and other information which will determine the status of a given credit card account in terms of authorizing a requested payment for a current purchase.

[0013] As part of the security system for accomplishing a commercial transaction utilizing credit card or debit card payment, the custodial authorizing entity includes sufficient facilities, preferably including a processing computer or like applicable hardware for the generation of an exclusive transaction code. The transaction code is to be used in substitution for the credit card number and when utilized as authorized, will issue the merchant a credit approval, and will accomplish payment for the goods or services desired in the normal fashion normally associated with a credit or debit card transaction, without the publication or dissemination of an identifying credit card number for a specific customer's account to any entity that is not already aware of that information.

[0014] Further, a feature of the transaction code is its ability to indicate any one of preferably a plurality of predetermined payment categories which may be either requested by the customer or automatically chosen by the custodial authorizing entity based on the type of account or the type of purchase or other commercial transaction involved. Each of the payment categories are reflective of a different type of payment desired or required to consummate the intended purchase. More specifically, the plurality of payment categories may include a single transaction involving a specific dollar amount for a purchase within a specific time period, such as twenty four hours, during which authorization of the purchase remains valid. Alternately, a single transaction may be involved wherein a maximum limit or a dollar amount is determined above which the purchase will become invalidated and further wherein a fixed period of time is preferably established for maintaining authorization of such purchase. Other alternatives would involve one or more of the categories coded to define multiple transactions involving a maximum dollar amount for purchases, as well as a fixed period of time for authorization of such purchases, and/or a repeating transaction wherein payments may be automatically accessed by a merchant over a predetermined or unspecified time interval (such as every thirty days) for a specific dollar amount or a maximum dollar amount limit. Also, limits solely as to a specific merchant or a given time period can be effectively established for which the transaction code is valid.

[0015] A further feature of the present invention to be described in greater details hereinafter, is the requirement that the transaction code, once received by the customer is transmitted to the merchant by the customer or a person specifically authorized by the customer. Only minimal contact by the merchant and the custodial authorizing entity is provided for purposes of the merchant verifying the validity of the transaction code utilizing a conventional process electronically or otherwise similar to the verification of a credit card number normally offered to a merchant for the purchase of goods or services. There is, therefore, no disclosure, publication or other dissemination of the specific credit card number of a given customer account beyond those entities who already know the information, and the transaction code is transmitted exclusively to the customer by the custodial authorizing entity who has the ability to better identify whether the customer is properly authorized to use the account. Moreover, the transaction code, once given out by the customer, only has a limited usefulness, thereby limiting the risk of misuse and minimizing the potential losses to be experienced by the credit card company and/or the account holder.

[0016] Accordingly, it is an object of the present invention to provide a system and attendant method for performing remote commercial transactions utilizing credit cards, which maximizes the security of the transaction and limits the potential liability to be experienced from a fraudulent transaction.

[0017] Yet another object of the present invention is to provide a secure system and method for establishing credit card purchases which eliminate the disclosure or dissemination of the actual credit card number to anyone other than a custodial authorizing entity which normally has custodial responsibilities for account information including the previously established credit card number.

[0018] It is another object of the present invention to provide a system and method of establishing secure credit card purchases through the generation of a transaction code which renders it extremely difficult or impossible to access or infiltrate a customer's credit card account by unauthorized means.

[0019] It is yet another object of the present invention to provide a secure method of completing a remote commercial transaction which eliminates the need to convey actual account information to a merchant, but which allows the merchant to conduct a normal verification of information needed to consummate a given purchase.

[0020] It is also an object of the present invention to provide a system and attendant method of accomplishing secure credit card purchases which eliminates the need to disclose or disseminate a given credit card number while providing the customer with the versatility of choosing any one of a plurality of predetermined payment categories.

[0021] It is yet another feature of the present invention to provide a system and method of accomplishing secure credit card payments having the versatility of allowing the customer to select any one of a plurality of payment categories which are indicative of a variance in the amount of a purchase as well as the time in which authorization for such payment is valid.

[0022] These and other objects, features and advantages of the present invention will become more clear when the drawings as well as the detailed description are taken into consideration.

[0023] For a fuller understanding of the nature of the present invention, reference should be had to the following detailed description taken in connection with the accompanying drawings in which:

[0024] FIG. 1 is a schematic representation of a flow chart showing various steps involved in the performance of the system and method of the present invention for the secure credit card purchasing;

[0025] FIG. 2 is a schematic representation similar to that of FIG. 1 wherein customer to merchant contact is accomplished by conventional facilities such as television; and

[0026] FIG. 3 is a schematic representation similar that of FIG. 2 wherein customer to merchant contact is established either by phone or in person.

[0027] Like reference numerals refer to like parts throughout the several views of the drawings.

[0028] As shown in the accompanying Figures, the present invention is directed towards a system and method for accomplishing secure credit card purchases. Moreover, these purchases can be “in person”, but preferably include remote commercial transactions such as mail order, purchases over the internet, television solicitations, telephone solicitations, etc. Security is establish by virtue of the elimination of the need to disclose an active credit card number and expiration date to the merchant or any other party other than the original credit card company, issuing bank or like financial institution which already has custodial responsibilities for the financial or account data associated with a given customer's credit card account.

[0029] More specifically and with reference to FIG. 1 the system as well as an attendant method is preferably instigated by the customer viewing a product, identifying a desired amount for a transaction and/or receiving promotional information as at 10, either in person or by any of the electronic or more conventional techniques which will be described in greater detail with reference to FIGS. 2 through 3. Once the customer reviews the product or promotional information and has sufficient information, such as including price, product or service identification, payment requirement, etc., regarding the remote commercial transaction to be conducted, the customer contacts, either by computer, telephone or in person, a custodial authorizing entity as at 12. The custodial authorizing entity may herein be defined as comprising that entity or institution which has or has been designated by the entity which has custodial responsibility for the financial data and security of a given credit card account of a customer. As set forth above such custodial authorizing entity can be represented by the credit card company issuing a credit card to a given customer or alternately can be represented by a bank or other financial institution serving to sponsor a credit card or debit card to the extent of processing the debits and credit associated therewith. The authorizing entity's custodial responsibilities of course includes the previous knowledge and/or storage of the credit card number serving to identify a specific customer's credit card account. Once contacted, the customer then supplies appropriate identification data to inform the custodial authorizing entity of a specific customer's credit card account as at 14. In addition, the customer will supply the custodial authorizing entity with additional required information needed to consummate the purchase as well as ensure the security of the account in order to prevent its unauthorized use. Such additional information may preferably include the identification of the merchant or merchants involved, when such information is deemed necessary, and a requested one of a plurality of predetermined payment categories to facilitate consummation of the purchase of the products or services desired. Such predetermined plurality of payment categories will be discussed in greater detail hereinafter.

[0030] Once the appropriate information has been received from the customer as indicated at 16, the custodial authorizing entity verifies the credit card status and account identification of the customer to determine the viability of the account in terms of dollar amount limits, payment history, available credit balance, etc. If the accessed credit card account is not in good standing, the custodial authorizing entity will permanently or temporarily terminate the transaction as at 18 and/or communicate to the customer directly as at 18′ by any applicable means for purposes of informing the customer of the unacceptable status of the accessed credit card account. If the credit card account is in good standing, based at least in part on the requested payment category, (amount of payment), the custodial authorizing entity generates a transaction code as at 20. The transaction code is used in substitution for the specific credit card number which would normally identify a customer's credit card account and would allow access thereto by any entity having possession of the credit card number whether or not such possession was authorized or unauthorized. More specifically, the transaction code is pre-coded to be indicative of a specific credit card account, preferably a merchant or merchants identification and a designated payment category, selected from the plurality of predetermined payment categories as set forth above. Once generated, the transaction code is communicated exclusively to the authorized and verified customer by the custodial authorizing entity as at 22, wherein the system and method of the present invention preferably restricts communication between the custodial authorizing entity and the merchant except to conduct a normal verification as will be explained.

[0031] The verified customer thereafter and preferably within a time limit to be determined by the customer and pre-coded in association with the transaction code, will directly or through an authorized representative communicate the transaction code to the merchant as at 24. The system and method of the preferred embodiment of the present invention contemplates that only the verified customer will transmit the generated transaction code to the merchant in the case of a remote commercial transaction, thereby limiting knowledge of the transaction code to those parties having a need to know. Of course, however, as the transaction code will generally have a limited value as defined by the verified customer when obtained, the verified customer may designate an agent or other entity to act as the customer on his/her behalf, with the amount of potential liability to be experienced by such a transaction to be limited to the amount defined by the verified customer when obtaining the transaction code.

[0032] At this point the purchase is consummated at least from the customer standpoint in that the customer has previously established the acceptable status of the account. Therefore the customer feels free to disclose the transaction code to the merchant or merchants instead of the actual credit card number as at 22, 24 and is relatively unconcerned if the transaction code is published or otherwise disseminated to unauthorized entities. In a preferred embodiment wherein a merchant identifier is pre-coded in association with the transaction code, the pre-coding of the transaction code will prohibit an unauthorized use due at least in part to the fact that the merchant is specifically identified and any attempt to use the transaction code other than by the identified merchant will be prohibited. In addition, the merchant is prevented from “overcharging” or “extending” the purchase by fixing the dollar amount to satisfy the specific cost or limit of the purchase as well as a specific time limit or time parameters in which the authorization for payment is valid. Such information, as set forth above, is communicated by the requested and subsequently designated payment category as set forth above. Restricted communication between the merchant and the custodial authorizing entity as at 26 is permitted exclusively for purposes of verification of the transaction code in a manner, which may utilize, at least to some extent, conventional facilities for the verification of a credit card number by most merchants or like commercial establishments. As a result, the merchant also has a desired verification as to the validity of a transaction and can effectively make arrangements to be paid by the credit card company.

[0033] If for some reason the transaction code is refused verification, the customer may be informed directly by the merchant as at 28 and or the transaction may be terminated as at 30. Assuming verification of the transaction code by the custodial authorizing entity, the merchant proceeds to consummate the purchase and send the order, as at 32, in the case of a remote commercial transaction.

[0034] FIGS. 3 and 4 are representative of the versatility of the system and method of the present invention wherein the customer 54 may receive the aforementioned promotional information from the merchant 56 by any appropriate means such as television solicitation as at 58, phone solicitation as at 60 and/or personal solicitation as at 62. Once the customer receives the promotional information, which may include the viewing of the product itself, or in advance if a general estimate as to the ultimate cost of an anticipate purchase(s) can be made prior to viewing promotional information, the customer contacts the custodial authorizing entity 64 by any appropriate electronic or conventional facilities such as direct phone to phone contact as at 66 and 66′ or direct computer contact as at 42′, 45′. Once the customer's authorization is confirmed, details of the anticipated transaction are established so as to determine a payment category, and the a transaction code is issued to the customer. The customer, either directly or through a representative, can then utilize the transaction code to consummate a transaction within the defined parameters of the payment category. Moreover, the merchant 56, through a conventional, yet restricted communication with the custodial authorizing entity 64 by any of a plurality of conventional or electronic methods using computer to computer linking as at 44′, 45′ or by telephone transmission as at 56′, 66′, can obtain a verification and subsequent payment utilizing the transaction code only.

[0035] As emphasized above, an important feature of the present invention is the ability of the customer to request a desired or a required payment category and the ability of the custodial authorizing entity 64 and/or a processing computer 45 of the custodial authorizing entity to issue a transaction code in accordance with the payment category. The payment categories, may be collectively defined as a variety of different types of transactions. Such transactions may include a single transaction for a specific amount of a purchase to be consummated. Alternatively, the payment category may include a single transaction defined by a single purchase having a maximum limit amount, wherein the specific or precise cost of the purchase has not been determined for a variety of reasons, and as such, the customer desires to set a maximum amount for which the single transaction may be made. Accordingly, with such a payment category, the exact amount may not be known in advance, but the customer is assured of not paying over the specifically designated maximum limit. In addition, the transactions are preferably, but not necessarily, authorized to be conducted only over a fixed life period of time, such as within twenty four hours, thereby ensuring that an outstanding transaction code does not remain valid if not used as generally intended. This limited time period can, of course be varied or omitted depending upon the wishes of the customer and/or the policies of the custodial authorizing entity. Also, these or any other payment category transactions may include a specific merchant identification to further restrict use of the transaction code.

[0036] The payment category may also include a multi-transaction authorization wherein more than one purchase may be made from one or a plurality of different merchants, each of which may or may not be identified by the customer and pre-coded in association with the transaction code, and wherein a total cost of the plurality of purchases may not exceed a maximum limit amount. This transaction can also be limited to having to take place within a predetermined, designated fixed life span, such as but not limited to twenty four hours. Accordingly, in some instances wherein a customer, or an agent of the customer, such as a child, guardian, or care giver, must make a number of transactions or purchases which are authorized by the customer, the customer may designate a maximum amount which can be spent utilizing a particular transaction code within a predetermined period of time, and/or can designate that only one merchant, whether designated or not, can use the transaction code.

[0037] As yet another alternative, the payment category may include a repeating transaction for a specific amount to be paid in each of a fixed number of intervals. For example, the customer may which to join a gym or receive services or products over a fixed number of payment intervals, such as every thirty days. Accordingly, the merchant will be authorized to charge the credit card account designated by the corresponding transaction code a fixed monthly payment. Similarly, a repeating transaction for a stated minimum interval such as every thirty days may be authorized for a specific amount for an unspecified number of intervals wherein the merchant will be authorized to continuously obtain payment on a “monthly” basis until the customer decides to cancel such authorization. Also, a more open ended transaction wherein charges may be performed until cancelled and with or without other limiting criteria may also be provided.

[0038] Since many modifications, variations and changes in detail can be made to the described preferred embodiment of the invention, it is intended that all matters in the foregoing description and shown in the accompanying drawings be interpreted as illustrative and not in a limiting sense. Thus, the scope of the invention should be determined by the appended claims and their legal equivalents.

[0039] Now that the invention has been described,