Visa International Service Association

Virgil M Davis

Suzanne C Cutino

Margaret Reid

Steve R Hoffman

Steven John Pringle

Michael J Berg

Janet T Roth

Frederick Sidney Conklin

Fredrick Sidney Conklin

A system loads, authenticates and uses a virtual smart card for payment of goods and/or services purchased on-line over the Internet. An online purchase and load (OPAL) server includes a virtual smart card data base that has a record of information for each smart card that it represents for a user at the behest of an issuer. The server includes a smart card emulator that emulates a smart card by using the card data base and a hardware security module. The emulator interacts with a pseudo card reader module in the server that imitates a physical card reader. The server also includes a client code module that interacts with the pseudo card reader and a remote payment or load server. A pass-through client terminal presents a user interface and passes information between the OPAL server and a merchant server, and between the OPAL server and a bank server.

Internet payment, authentication and loading system using virtual smart card

A system loads, authenticates and uses a virtual smart card for payment of goods and/or services purchased on-line over the Internet. An online purchase and load (OPAL) server includes a virtual smart card data base that has a record of information for each smart card that it represents for a user at the behest of an issuer. The server includes a smart card emulator that emulates a smart card by using the card data base and a hardware security module. The emulator interacts with a pseudo card reader module in the server that imitates a physical card reader. The server also includes a client code module that interacts with the pseudo card reader and a remote payment or load server. A pass-through client terminal presents a user interface and passes information between the OPAL server and a merchant server, and between the OPAL server and a bank server. The Internet provides the routing functionality between the client terminal and the various servers. A merchant advertises goods on a web site. A user uses the client terminal to purchase goods and/or services from the remote merchant server. The payment server processes, confirms and replies to the merchant server. The payment server is also used to authenticate the holder of a virtual card who wishes to redeem loyalty points from a merchant. To load value, the client terminal requests a load from a user account at the bank server. The load server processes, confirms and replies to the bank server.

Secure activation of stored value cards at a point of distribution uses a portable activation secure application module (ASAM) within the card dispensing machine to activate each card. Each card has a standard user mode and a security user mode. In the standard user mode the card is activated and ready for use. In the security user mode the card is not active and cannot be used to make a purchase. An issuer supplies an issuer activation key to a card supplier who produces a security code which is stored on a stored value card. Cards are supplied to the issuer in security user mode, and stored in a dispensing machine. The issuer activation key is also relayed to the dispensing machine and stored on the ASAM. Upon purchase by a customer, the issuer activation key is used within the machine by the ASAM to reproduce the security code and to activate a card. An activation control counter (ACC) is stored within the ASAM and is decremented for every attempt at activation of a card. ASAMs are maintained in the field using a dial-up connection to a central computer with a control secure application module (CSAM), or using a field secure application module (FSAM) that is created at a central location using the CSAM. Each FSAM is able to update a limited number of ASAMs. A hierarchy of keys is used by the CSAM, the FSAMs and ASAMs to ensure security.

Card activation at point of distribution

An architecture and system uses a smart card for payment of goods and/or services purchased on-line over the Internet. A client server on a client terminal controls the interaction with a consumer and interfaces to a card reader which accepts the consumer's smart card. A payment server on the Internet includes a computer and terminals that contain security cards to handle the transaction, data store and collection. Also connected over the Internet is a merchant server advertising the goods and/or services offered by a merchant for sale on a web site. The merchant contracts with an acquirer to accept smart card payments for goods and/or services purchased over the Internet. A consumer uses his smart card at the client terminal in order to purchase goods and/or services from the remote merchant server. The Internet provides the routing functionality between the client terminal, merchant server and payment server. The client terminal emulates a security card in interacting with the smart card, and the responses received are grouped together and sent as a draw request message to the payment server. The payment server then emulates the smart card in an interaction with the security card. The security card delivers the expected smart card signature to the payment server and/or on to the client terminal or merchant server to reduce message traffic between the entities on the network. The comparison of the smart card signature to an expected value can occur at any location. Encryption is used for security.

Internet payment system using smart card

An architecture and system loads and uses a smart card for payment of goods and/or services purchased on-line over the Internet. A client module on a client terminal controls the interaction with a consumer and interfaces to a card reader which accepts the consumer's smart card and allows loading and debiting of the card. Debiting works in conjunction with a merchant server and a payment server. Loading works in conjunction with a bank server and a load server. The Internet provides the routing functionality between the client terminal and the various servers. A payment server on the Internet includes a computer and a security module (or a security card in a terminal) to handle the transaction, data store and collection. A merchant server advertises the goods and/or services offered by a merchant for sale on a web site. The merchant contracts with an acquirer to accept smart card payments for goods and/or services purchased over the Internet. A consumer uses his smart card at the client terminal in order to purchase goods and/or services from the remote merchant server. The client terminal sends a draw request to the payment server. The payment server processes, confirms and replies to the merchant server (optionally by way of the client terminal). To load value, the client terminal requests a load from a user account at the bank server. A load request is sent from the card to the load server which processes, confirms and replies to the bank server (optionally by way of the client terminal). The bank transfers loaded funds to the card issuer for later settlement for a merchant from whom the user purchases goods with value on the card.

Growing community of inventors

Los Altos, CA, United States of America

Virgil M Davis