US6205437B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Open network payment system for providing for real-time authorization of payment and purchase transactions
Assignee: DATA RETURN MANAGED SERVICES LLC
•
Filing: 1998-03-02
•
Granted: 2001-03-20
•
Expires: 2018-03-02
Abstract
Abstract A complete system for the purchasing of goods or information over a computer network is presented. Merchant computers on the network maintain databases of digital advertisements that are accessed by buyer computers. In response to user inquiries, buyer computers retrieve and display digital advertisements from merchant computers. A digital advertisement can further include a program that is interpreted by a buyer's computer. The buyer computers include a means for a user to purchase the product described by a digital advertisement. If a user has not specified a means of payment at the time of purchase, it can be requested after a purchase transaction is initiated. A network payment system performs payment order authorization in a network with untrusted switching, transmission, and host components. Payment orders are backed by accounts in an external financial system network, and the payment system obtains account authorizations from this external network in real-time. Payment orders are signed with authenticators that can be based on any combination of a secret function of the payment order parameters, a single-use transaction identifier, or a specified network address.
Inventors
- 👤 David K. Gifford
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-24 09:28
CPC Classifications
G; G06; G06Q; G06Q20/00; G06Q20/02; G06Q20/023; G06Q10/00; G06Q10/08; G06Q10/087; G06Q20/027; G06Q20/04; G06Q20/08; G06Q20/085; G06Q20/10; G06Q20/12; G06Q20/38; G06Q20/385; G06Q20/40; G06Q20/401; G06Q30/00; G06Q30/02; G06Q30/0241; G06Q30/0251; G06Q30/0253; G06Q30/0277; G06Q30/06; G06Q30/0601; G06Q30/0609; G07; G07F; G07F7/00
Claims Analysis
Total Claims: 48
Claim 1
Independent Claim
311 words
An open network payment system for providing for real-time authorization of payment transactions by a financial authorization network external to the network payment system, comprising: a plurality of client computers; and a payment computer; the client computers and the payment computer being interconnected by a public packet switched communications network; each one of the client computers being programmed to construct a payment request message specifying a payment amount to be transferred from a sender to a beneficiary, and to cause the payment request message to be transmitted to the payment computer over the public packet switched communications network; the payment computer being programmed to cause a message to be transmitted into the financial authorization network external to the public packet switched communications network, in order to verify that the sender has adequate funds or credit having real monetary, to receive an authorization from the financial authorization network in response to the message, and to transmit an authorization message to the client computer over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network; at least one of the payment request message and the authorization message comprising at least one digital signature of components that include components derived from the at least one message, at least one of which digital signatures protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the at least one message, at least one of which digital signatures protects the at least one message from all replay attacks that result in loss of value, and at least one of which digital signatures is verified based on a principal-specific or source-specific public key.
Claim 2
Dependent Claim
311 words
An open network payment system for providing for real-time authorization of payment transactions by a financial authorization network external to the network payment system, comprising: a plurality of client computers; and a payment computer; the client computers and the payment computer being interconnected by a public packet switched communications network; each one of the client computers being programmed to construct a payment request message specifying a payment amount to be transferred from a sender to a beneficiary, and to cause the payment request message to be transmitted to the payment computer over the public packet switched communications network; the payment computer being programmed to cause a message to be transmitted into the financial authorization network external to the public packet switched communications network, in order to verify that the sender has adequate funds or credit having real monetary, to receive an authorization from the financial authorization network in response to the message, and to transmit an authorization message to the client computer over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network; at least one of the payment request message and the authorization message comprising at least one digital signature of components that include components derived from the at least one message, at least one of which digital signatures protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the at least one message, at least one of which digital signatures protects the at least one message from all replay attacks that result in loss of value, and at least one of which digital signatures is verified based on a principal-specific or source-specific public key.
Claim 3
Dependent Claim
34 words
The network payment system of claim 1 wherein the authorization message comprises an authenticator proving that the payment computer originated the authorization message and is capable of validation without use of a secret key.
Claim 4
Dependent Claim
65 words
The network payment system of claim 1 wherein the at least one signature comprises one signature that protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the at least one message, protects the at least one message from replay attack, and is computed based on a principal-specific or source-specific secret key.
Claim 5
Dependent Claim
27 words
The network payment system of claim 1 wherein the payment computer is programmed to cause information pertaining to the payment request message and authorization to be recorded.
Claim 6
Independent Claim
292 words
A method of providing for real-time authorization of purchase transactions by a financial authorization network external to a public packet switched communications network interconnecting a plurality of client computers and a payment computer, and comprising the steps of: constructing a payment request message at one of the client computers specifying a payment amount to be transferred from a sender to a beneficiary, and causing the payment request message to be transmitted to the payment computer over the public packet switched communications network; and causing a message to be transmitted into the financial authorization network external to the public packet switched communications network, in order to verify that the sender has adequate funds or credit having real monetary value, receiving, at the payment computer, an authorization from the financial authorization network, and transmitting an authorization message from the payment computer to the client computer over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network; at least one of the payment request message and the authorization message comprising at least one digital signature of components that include components derived from the at least one message, at least one of which digital signatures protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the at least one message, at least one of which digital signatures protects the at least one message from all replay attacks that result in loss of value, and at least one of which digital signatures is verified based on a principal-specific or source-specific public key.
Claim 7
Independent Claim
292 words
A method of providing for real-time authorization of purchase transactions by a financial authorization network external to a public packet switched communications network interconnecting a plurality of client computers and a payment computer, and comprising the steps of: constructing a payment request message at one of the client computers specifying a payment amount to be transferred from a sender to a beneficiary, and causing the payment request message to be transmitted to the payment computer over the public packet switched communications network; and causing a message to be transmitted into the financial authorization network external to the public packet switched communications network, in order to verify that the sender has adequate funds or credit having real monetary value, receiving, at the payment computer, an authorization from the financial authorization network, and transmitting an authorization message from the payment computer to the client computer over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network; at least one of the payment request message and the authorization message comprising at least one digital signature of components that include components derived from the at least one message, at least one of which digital signatures protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the at least one message, at least one of which digital signatures protects the at least one message from all replay attacks that result in loss of value, and at least one of which digital signatures is verified based on a principal-specific or source-specific public key.
Claim 8
Dependent Claim
32 words
The method of claim 5 wherein the authorization message comprises an authenticator proving that the payment computer originated the authorization message and is capable of validation without use of a secret key.
Claim 9
Dependent Claim
284 words
A payment computer for use in providing real-time authorization of payment transactions by a financial authorization network external to the network payment system, the payment computer being programmed to receive, over a public packet switched communications network, a payment request message specifying a payment amount to be transferred from the sender to the beneficiary, the payment computer further being programmed to authenticate the payment request message, to cause a message to be transmitted into a financial authorization network external to the network payment system, in order to verify that the sender has adequate finds or credit having real monetary value, to receive an authorization from the financial authorization network in response to the message, and to transmit an authorization message over the public packet switched communications network, the authorization message comprising an authenticator proving that the payment computer originated the authorization message, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network; at least one of the payment request message and the authorization message comprising at least one digital signature of components that include components derived from the at least one message, at least one of which digital signatures protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the at least one message, at least one of which digital signatures protects the at least one message from all replay attacks that result in loss of value, and at least one of which digital signatures is verified based on a principal-specific or source-specific public key.
Claim 10
Dependent Claim
284 words
A payment computer for use in providing real-time authorization of payment transactions by a financial authorization network external to the network payment system, the payment computer being programmed to receive, over a public packet switched communications network, a payment request message specifying a payment amount to be transferred from the sender to the beneficiary, the payment computer further being programmed to authenticate the payment request message, to cause a message to be transmitted into a financial authorization network external to the network payment system, in order to verify that the sender has adequate finds or credit having real monetary value, to receive an authorization from the financial authorization network in response to the message, and to transmit an authorization message over the public packet switched communications network, the authorization message comprising an authenticator proving that the payment computer originated the authorization message, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network; at least one of the payment request message and the authorization message comprising at least one digital signature of components that include components derived from the at least one message, at least one of which digital signatures protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the at least one message, at least one of which digital signatures protects the at least one message from all replay attacks that result in loss of value, and at least one of which digital signatures is verified based on a principal-specific or source-specific public key.
Claim 11
Dependent Claim
33 words
The payment computer of claim 7 wherein the authorization message comprises an authenticator proving that the payment computer originated the authorization message and is capable of validation without use of a secret key.
Claim 12
Dependent Claim
23 words
The method of claim 5 further comprising the step of causing information pertaining to the payment request message and authorization to be recorded.
Claim 13
Dependent Claim
286 words
An open network payment system for providing for real-time authorization of payment transactions by a financial authorization network external to the network payment system, comprising: a plurality of client computers; and a payment computer; the client computers and the payment computer being interconnected by a public packet switched communications network; each one of the client computers being programmed to construct a payment request message specifying a payment amount to be transferred from a sender to a beneficiary, and to cause the payment request message to be transmitted to the payment computer over the public packet switched communications network; the payment computer being programmed to cause a message to be transmitted into the financial authorization network external to the public packet switched communications network, in order to verify that the sender has adequate funds or credit having real monetary value, to receive an authorization from the financial authorization network in response to the message, and to transmit an authorization message to the client computer over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network; the authorization message comprising at least one digital signature of components that include components derived from the authorization message, at least one of which digital signatures protects the authorization message from forgery, at least one of which digital signatures protects the authorization message from all replay attacks that result in loss of value; and the authorization message comprising an authenticator proving that the payment computer originated the authorization message and being capable of validation without use of a secret key.
Claim 14
Dependent Claim
286 words
An open network payment system for providing for real-time authorization of payment transactions by a financial authorization network external to the network payment system, comprising: a plurality of client computers; and a payment computer; the client computers and the payment computer being interconnected by a public packet switched communications network; each one of the client computers being programmed to construct a payment request message specifying a payment amount to be transferred from a sender to a beneficiary, and to cause the payment request message to be transmitted to the payment computer over the public packet switched communications network; the payment computer being programmed to cause a message to be transmitted into the financial authorization network external to the public packet switched communications network, in order to verify that the sender has adequate funds or credit having real monetary value, to receive an authorization from the financial authorization network in response to the message, and to transmit an authorization message to the client computer over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network; the authorization message comprising at least one digital signature of components that include components derived from the authorization message, at least one of which digital signatures protects the authorization message from forgery, at least one of which digital signatures protects the authorization message from all replay attacks that result in loss of value; and the authorization message comprising an authenticator proving that the payment computer originated the authorization message and being capable of validation without use of a secret key.
Claim 15
Dependent Claim
14 words
The network payment system of claim 10 wherein the authenticator is a digital signature.
Claim 16
Dependent Claim
27 words
The network payment system of claim 10 wherein the payment computer is programmed to cause information pertaining to the payment request message and authorization to be recorded.
Claim 17
Independent Claim
272 words
A method of providing for real-time authorization of purchase transactions by a financial authorization network external to a public packet switched communications network interconnecting a plurality of client computers and a payment computer, and comprising the steps of: constructing a payment request message at one of the client computers specifying a payment amount to be transferred from a sender to a beneficiary, and causing the payment request message to be transmitted to the payment computer over the public packet switched communications network; and causing a message to be transmitted into the financial authorization network external to the public packet switched communications network, in order to verify that the sender has adequate funds or credit having real monetary value, receiving, at the payment computer, an authorization from the financial authorization system in response to the message, and transmitting an authorization message from the payment computer to the client computer over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network; the authorization message comprising at least one digital signature of components that include components derived from the authorization message, at least one of which digital signatures protects the authorization message from forgery, and at least one of which digital signatures protects the authorization message from all replay attacks that result in loss of value; and the authorization message comprising an authenticator proving that the payment computer originated the authorization message and being capable of validation without use of a secret key.
Claim 18
Independent Claim
272 words
A method of providing for real-time authorization of purchase transactions by a financial authorization network external to a public packet switched communications network interconnecting a plurality of client computers and a payment computer, and comprising the steps of: constructing a payment request message at one of the client computers specifying a payment amount to be transferred from a sender to a beneficiary, and causing the payment request message to be transmitted to the payment computer over the public packet switched communications network; and causing a message to be transmitted into the financial authorization network external to the public packet switched communications network, in order to verify that the sender has adequate funds or credit having real monetary value, receiving, at the payment computer, an authorization from the financial authorization system in response to the message, and transmitting an authorization message from the payment computer to the client computer over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network; the authorization message comprising at least one digital signature of components that include components derived from the authorization message, at least one of which digital signatures protects the authorization message from forgery, and at least one of which digital signatures protects the authorization message from all replay attacks that result in loss of value; and the authorization message comprising an authenticator proving that the payment computer originated the authorization message and being capable of validation without use of a secret key.
Claim 19
Dependent Claim
12 words
The method of claim 13 wherein the authenticator is a digital signature.
Claim 20
Dependent Claim
23 words
The method of claim 13 further comprising the step of causing information pertaining to the payment request message and authorization to be recorded.
Claim 21
Dependent Claim
32 words
The network payment system of claim 4 wherein the payment computer is programmed to cause the information pertaining to the payment request message and authorization to be recorded in a settlement database.
Claim 22
Dependent Claim
22 words
The method of claim 9 wherein the information pertaining to the payment request message and authorization is recorded in a settlement database.
Claim 23
Dependent Claim
32 words
The network payment system of claim 12 wherein the payment computer is programmed to cause the information pertaining to the payment request message and authorization to be recorded in a settlement database.
Claim 24
Dependent Claim
22 words
The method of claim 15 wherein the information pertaining to the payment request message and authorization is recorded in a settlement database.
Claim 25
Dependent Claim
32 words
The open network payment system of claim 1 wherein the payment request message comprises the at least one digital signature of components that include components derived from the at least one message.
Claim 26
Dependent Claim
29 words
The method of claim 5 wherein the payment request message comprises the at least one digital signature of components that include components derived from the at least one message.
Claim 27
Dependent Claim
30 words
The payment computer of claim 7 wherein the payment request message comprises the at least one digital signature of components that include components derived from the at least one message.
Claim 28
Dependent Claim
323 words
An open network payment system for providing for real-time authorization of payment transactions by a financial authorization network external to the network payment system, comprising: a plurality of client computers; and a payment computer; the client computers and the payment computer being interconnected by a public packet switched communications network; each one of the client computers being programmed to construct a payment request message specifying a payment amount to be transferred from a sender to a beneficiary, and to cause the payment request message to be transmitted to the payment computer in at least one message over the public packet switched communications network; the payment computer being programmed to receive the payment request message and to cause an authorization request to be transmitted into the financial authorization network external to the public packet switched communications network, in order to verify that the sender has adequate funds or credit having real monetary value, to receive an authorization from the financial authorization network, in response to the authorization request, and to transmit an authorization message to the client computer as at least one message over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay attack; at least one of the payment request message and the authorization message comprising at least one encrypted digest of components that include components derived from the at least one message, at least one of which encrypted digests protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the components of the at least one message, at least one of which encrypted digests protects the at least one message from all replay attacks that result in loss of value, and at least one of which encrypted digests is verified based on a principal-specific or source-specific public key.
Claim 29
Dependent Claim
323 words
An open network payment system for providing for real-time authorization of payment transactions by a financial authorization network external to the network payment system, comprising: a plurality of client computers; and a payment computer; the client computers and the payment computer being interconnected by a public packet switched communications network; each one of the client computers being programmed to construct a payment request message specifying a payment amount to be transferred from a sender to a beneficiary, and to cause the payment request message to be transmitted to the payment computer in at least one message over the public packet switched communications network; the payment computer being programmed to receive the payment request message and to cause an authorization request to be transmitted into the financial authorization network external to the public packet switched communications network, in order to verify that the sender has adequate funds or credit having real monetary value, to receive an authorization from the financial authorization network, in response to the authorization request, and to transmit an authorization message to the client computer as at least one message over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay attack; at least one of the payment request message and the authorization message comprising at least one encrypted digest of components that include components derived from the at least one message, at least one of which encrypted digests protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the components of the at least one message, at least one of which encrypted digests protects the at least one message from all replay attacks that result in loss of value, and at least one of which encrypted digests is verified based on a principal-specific or source-specific public key.
Claim 30
Dependent Claim
32 words
The open network payment system of claim 23 wherein the payment request message comprises the at least one encrypted digest of components that include components derived from the at least one message.
Claim 31
Independent Claim
311 words
A method of providing for real-time authorization of purchase transactions by a financial authorization network external to a public packet switched communications network interconnecting a plurality of client computers and a payment computer, and comprising the steps of: constructing a payment request message at one of the client computers specifying a payment amount to be transferred from a sender to a beneficiary, and causing the payment request message to be transmitted to the payment computer in at least one message over the public packet switched communications network; and receiving, at the payment computer, the payment request message, and causing an authorization request to be transmitted into the financial authorization network external to the public packet switched communications network, in order to verify that the sender has adequate funds or credit having real monetary value, receiving, at the payment computer, an authorization from the financial authorization network, in response to the authorization request, and transmitting an authorization message from the payment computer to the client computer as at least one message over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay attack; at least one of the payment request message and the authorization message comprising at least one encrypted digest of components that include components derived from the at least one message, at least one of which encrypted digests protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the components of the at least one message, at least one of which digital signatures protects the at least one message from all replay attacks that result in loss of value, and at least one of which digital signatures is verified based on a principal-specific or source-specific public key.
Claim 32
Independent Claim
311 words
A method of providing for real-time authorization of purchase transactions by a financial authorization network external to a public packet switched communications network interconnecting a plurality of client computers and a payment computer, and comprising the steps of: constructing a payment request message at one of the client computers specifying a payment amount to be transferred from a sender to a beneficiary, and causing the payment request message to be transmitted to the payment computer in at least one message over the public packet switched communications network; and receiving, at the payment computer, the payment request message, and causing an authorization request to be transmitted into the financial authorization network external to the public packet switched communications network, in order to verify that the sender has adequate funds or credit having real monetary value, receiving, at the payment computer, an authorization from the financial authorization network, in response to the authorization request, and transmitting an authorization message from the payment computer to the client computer as at least one message over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay attack; at least one of the payment request message and the authorization message comprising at least one encrypted digest of components that include components derived from the at least one message, at least one of which encrypted digests protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the components of the at least one message, at least one of which digital signatures protects the at least one message from all replay attacks that result in loss of value, and at least one of which digital signatures is verified based on a principal-specific or source-specific public key.
Claim 33
Dependent Claim
29 words
The method of claim 25 wherein the payment request message comprises the at least one digital signature of components that include components derived from the at least one message.
Claim 34
Dependent Claim
312 words
An open network payment system for providing for real-time authorization of payment transactions by a financial authorization network external to the network payment system, comprising: a plurality of client computers; and a payment computer; the client computers and the payment computer being interconnected by a public packet switched communications network; each one of the client computers being programmed to construct a payment request message specifying a payment amount to be transferred from a sender to a beneficiary, and to cause the payment request message to be transmitted to the payment computer over the public packet switched communications network; the payment computer being programmed to cause a message to be transmitted into the financial authorization network external to the public packet switched communications network, in order to verify that the sender has adequate funds or credit having real monetary value, to receive an authorization from the financial authorization network in response to the message, and to transmit an authorization message to the client computer over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network; at least one of the payment request message and the authorization message comprising at least one digital signature of components that include components derived from the at least one message, at least one of which digital signatures protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the at least one message, at least one of which digital signatures protects the at least one message from all replay attacks that result in loss of value, and at least one of which digital signatures is computed based on a principal-specific or source-specific secret key.
Claim 35
Dependent Claim
312 words
An open network payment system for providing for real-time authorization of payment transactions by a financial authorization network external to the network payment system, comprising: a plurality of client computers; and a payment computer; the client computers and the payment computer being interconnected by a public packet switched communications network; each one of the client computers being programmed to construct a payment request message specifying a payment amount to be transferred from a sender to a beneficiary, and to cause the payment request message to be transmitted to the payment computer over the public packet switched communications network; the payment computer being programmed to cause a message to be transmitted into the financial authorization network external to the public packet switched communications network, in order to verify that the sender has adequate funds or credit having real monetary value, to receive an authorization from the financial authorization network in response to the message, and to transmit an authorization message to the client computer over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network; at least one of the payment request message and the authorization message comprising at least one digital signature of components that include components derived from the at least one message, at least one of which digital signatures protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the at least one message, at least one of which digital signatures protects the at least one message from all replay attacks that result in loss of value, and at least one of which digital signatures is computed based on a principal-specific or source-specific secret key.
Claim 36
Dependent Claim
29 words
The open network payment system of claim 27 wherein the payment request message comprises the at least one digital signature of components that include components derived from the message.
Claim 37
Independent Claim
297 words
A method of providing for real-time authorization of purchase transactions by a financial authorization network external to a public packet switched communications network interconnecting a plurality of client computers and a payment computer, and comprising the steps of: constructing a payment request message at one of the client computers specifying a payment amount to be transferred from a sender to a beneficiary, and causing the payment request message to be transmitted to the payment computer over the public packet switched communications network; and causing a message to be transmitted into the financial authorization network external to the public packet switched communications network, in order to verify that the sender has adequate funds or credit having real monetary value, receiving, at the payment computer, an authorization from the financial authorization system in response to the message, and transmitting an authorization message from the payment computer to the client computer over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network; at least one of the payment request message and the authorization message comprising at least one digital signature of components that include components derived from the at least one message, at least one of which digital signatures protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the at least one message, at least one of which digital signatures protects the at least one message from all replay attacks that result in loss of value, and at least one of which digital signatures is computed based on a principal-specific or source-specific secret key.
Claim 38
Independent Claim
297 words
A method of providing for real-time authorization of purchase transactions by a financial authorization network external to a public packet switched communications network interconnecting a plurality of client computers and a payment computer, and comprising the steps of: constructing a payment request message at one of the client computers specifying a payment amount to be transferred from a sender to a beneficiary, and causing the payment request message to be transmitted to the payment computer over the public packet switched communications network; and causing a message to be transmitted into the financial authorization network external to the public packet switched communications network, in order to verify that the sender has adequate funds or credit having real monetary value, receiving, at the payment computer, an authorization from the financial authorization system in response to the message, and transmitting an authorization message from the payment computer to the client computer over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network; at least one of the payment request message and the authorization message comprising at least one digital signature of components that include components derived from the at least one message, at least one of which digital signatures protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the at least one message, at least one of which digital signatures protects the at least one message from all replay attacks that result in loss of value, and at least one of which digital signatures is computed based on a principal-specific or source-specific secret key.
Claim 39
Dependent Claim
28 words
The method of claim 29 wherein the payment request message comprises the at least one digital signature of components that include components derived from the payment request message.
Claim 40
Dependent Claim
290 words
A payment computer for use in providing real-time authorization of payment transactions by a financial authorization network external to the network payment system, the payment computer being programmed to receive, over a public packet switched communications network, a payment request message specifying a payment amount to be transferred from the sender to the beneficiary, the payment computer further being programmed to authenticate the payment request message, to cause a message to be transmitted into a financial authorization network external to the network payment system, in order to verify that the sender has adequate finds or credit having real monetary value, to receive an authorization from the financial authorization network in response to the message transmitted into the financial authorization network, and to transmit an authorization message over the public packet switched communications network, the authorization message comprising an authenticator proving that the payment computer originated the authorization message, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network; at least one of the payment request message and the authorization message comprising at least one digital signature of components that include components derived from the at least one message, at least one of which digital signatures protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the at least one message, at least one of which digital signatures protects the at least one message from all replay attacks that result in loss of value, and at least one of which digital signatures is computed based on a principal-specific or source-specific secret key.
Claim 41
Dependent Claim
290 words
A payment computer for use in providing real-time authorization of payment transactions by a financial authorization network external to the network payment system, the payment computer being programmed to receive, over a public packet switched communications network, a payment request message specifying a payment amount to be transferred from the sender to the beneficiary, the payment computer further being programmed to authenticate the payment request message, to cause a message to be transmitted into a financial authorization network external to the network payment system, in order to verify that the sender has adequate finds or credit having real monetary value, to receive an authorization from the financial authorization network in response to the message transmitted into the financial authorization network, and to transmit an authorization message over the public packet switched communications network, the authorization message comprising an authenticator proving that the payment computer originated the authorization message, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network; at least one of the payment request message and the authorization message comprising at least one digital signature of components that include components derived from the at least one message, at least one of which digital signatures protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the at least one message, at least one of which digital signatures protects the at least one message from all replay attacks that result in loss of value, and at least one of which digital signatures is computed based on a principal-specific or source-specific secret key.
Claim 42
Dependent Claim
28 words
The method of claim 31 wherein the payment request message comprises the at least one digital signature of components that include components derived from the payment request message.
Claim 43
Dependent Claim
335 words
An open network payment system for providing for real-time authorization of payment transactions by a financial authorization network external to the network payment system, comprising: a plurality of client computers; and a payment computer; the client computers and the payment computer being interconnected by a public packet switched communications network; each one of the client computers being programmed to construct a payment request message specifying a payment amount to be transferred from a sender to a beneficiary, and to cause the payment request message to be transmitted to the payment computer in at least one message over the public packet switched communications network; the payment computer being programmed to receive the payment request message and to cause an authorization request to be transmitted into the financial authorization network external to the public packet switched communications network, in order to verify that the sender has adequate funds or credit having real monetary value, to receive an authorization from the financial authorization network, in response to the authorization request, and to transmit an authorization response to the client computer as at least one message over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay attack; at least one of the messages transmitted over the public packet switched communications network comprising at least one encrypted digest of components that include components derived from the at least one of the messages, at least one of which encrypted digests protects components of the at least one of the messages from forgery, including authenticating an identity of one of a plurality of principals as an originator of the components of the at least one of the messages, at least one of which encrypted digests protects the at least one of the messages from all replay attacks that result in loss of value, and at least one of which encrypted digests is computed based on a principal-specific or source-specific secret key.
Claim 44
Dependent Claim
335 words
An open network payment system for providing for real-time authorization of payment transactions by a financial authorization network external to the network payment system, comprising: a plurality of client computers; and a payment computer; the client computers and the payment computer being interconnected by a public packet switched communications network; each one of the client computers being programmed to construct a payment request message specifying a payment amount to be transferred from a sender to a beneficiary, and to cause the payment request message to be transmitted to the payment computer in at least one message over the public packet switched communications network; the payment computer being programmed to receive the payment request message and to cause an authorization request to be transmitted into the financial authorization network external to the public packet switched communications network, in order to verify that the sender has adequate funds or credit having real monetary value, to receive an authorization from the financial authorization network, in response to the authorization request, and to transmit an authorization response to the client computer as at least one message over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay attack; at least one of the messages transmitted over the public packet switched communications network comprising at least one encrypted digest of components that include components derived from the at least one of the messages, at least one of which encrypted digests protects components of the at least one of the messages from forgery, including authenticating an identity of one of a plurality of principals as an originator of the components of the at least one of the messages, at least one of which encrypted digests protects the at least one of the messages from all replay attacks that result in loss of value, and at least one of which encrypted digests is computed based on a principal-specific or source-specific secret key.
Claim 45
Dependent Claim
31 words
The open network payment system of claim 33 wherein the payment request message comprises the at least one encrypted digest of components that include components derived from the payment request message.
Claim 46
Independent Claim
323 words
A method of providing for real-time authorization of purchase transactions by a financial authorization network external to a public packet switched communications network interconnecting a plurality of client computers and a payment computer, and comprising the steps of: constructing a payment request message at one of the client computers specifying a payment amount to be transferred from a sender to a beneficiary, and causing the payment request message to be transmitted to the payment computer in at least one message over the public packet switched communications network; and receiving, at the payment computer, the payment request message, and causing an authorization request to be transmitted into the financial authorization network external to the public packet switched communications network, in order to verify that the sender has adequate funds or credit having real monetary value, receiving, at the payment computer, an authorization from the financial authorization network, in response to the authorization request, and transmitting an authorization response from the payment computer to the client computer as at least one message over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay attack; at least one of the messages transmitted over the public packet switched communications network comprising at least one encrypted digest of components that include components derived from the at least one of the messages, at least one of which encrypted digests protects components of the at least one of the messages from forgery, including authenticating an identity of one of a plurality of principals as an originator of the components of the at least one of the messages, at least one of which encrypted digests protects the at least one of the messages from all replay attacks that result in loss of value, and at least one of which encrypted digests is computed based on a principal-specific or source-specific secret key.
Claim 47
Independent Claim
323 words
A method of providing for real-time authorization of purchase transactions by a financial authorization network external to a public packet switched communications network interconnecting a plurality of client computers and a payment computer, and comprising the steps of: constructing a payment request message at one of the client computers specifying a payment amount to be transferred from a sender to a beneficiary, and causing the payment request message to be transmitted to the payment computer in at least one message over the public packet switched communications network; and receiving, at the payment computer, the payment request message, and causing an authorization request to be transmitted into the financial authorization network external to the public packet switched communications network, in order to verify that the sender has adequate funds or credit having real monetary value, receiving, at the payment computer, an authorization from the financial authorization network, in response to the authorization request, and transmitting an authorization response from the payment computer to the client computer as at least one message over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay attack; at least one of the messages transmitted over the public packet switched communications network comprising at least one encrypted digest of components that include components derived from the at least one of the messages, at least one of which encrypted digests protects components of the at least one of the messages from forgery, including authenticating an identity of one of a plurality of principals as an originator of the components of the at least one of the messages, at least one of which encrypted digests protects the at least one of the messages from all replay attacks that result in loss of value, and at least one of which encrypted digests is computed based on a principal-specific or source-specific secret key.
Claim 48
Dependent Claim
31 words
The open network payment system of claim 35 wherein the payment request message comprises the at least one encrypted digest of components that include components derived from the payment request message.
References Cited (Backward Citations)
US4305059A
Cited
US4529870A
Cited
GB2102606A
Cited
US4578530A
Cited
US4528643A
Cited
US4926480A
Cited
US4759063A
Cited
US4755940A
Cited
US4734858A
Cited
US4734858B1
Cited
EP0172670A2
Cited
US4812628A
Cited
US4759064A
Cited
US4922521A
Cited
US4775935A
Cited
US4799156A
Cited
US4827508A
Cited
US4935870A
Cited
US4795890A
Cited
US4947430A
Cited
US4987593A
Cited
US4891503A
Cited
US5060153A
Cited
US5025373A
Cited
US5594910A
Cited
US5347632A
Cited
US4947028B1
Cited
US4947028A
Cited
US5247575A
Cited
US4949380A
Cited
US4982346A
Cited
US5077607A
Cited
US4992940A
Cited
US4977595A
Cited
US4991210A
Cited
US4996711A
Cited
US5557798A
Cited
US5105184A
Cited
US5105184B1
Cited
US5220501A
Cited
US5276736A
Cited
US5623547A
Cited
WO1991016691A1
Cited
US5351186A
Cited
US5383113A
Cited
EP0542298A2
Cited
WO1993010503A1
Cited
US5305195A
Cited
US5336870A
Cited
US5341429A
Cited
US5351293A
Cited
US5321751A
Cited
US5311594A
Cited
US5535229A
Cited
US5414833A
Cited
US5604802A
Cited
US5724424A
Cited
US5557516A
Cited
US5621797A
Cited
US5642419A
Cited
US5557518A
Cited
US5596643A
Cited
US5596642A
Cited
US5715314A
Cited
US5590197A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2004-03-19 | 2004-09-18 | 2005-03-20 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2008-03-19 | 2008-09-18 | 2009-03-20 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2012-03-19 | 2012-09-18 | 2013-03-20 | $7700.00 | Window Closed / Lapsed |