Smartcard internet authorization system

Abstract

A system and method are disclosed for conducting electronic commerce such as a virtual purchase transaction with an on-line merchant. A user is provided with an intelligent token, such as a smart card containing a digital certificate. The intelligent token suitably authenticates with a wallet server on a network that conducts all or portions of the transaction on behalf of the user with out requiring changes to the merchant's server. The wallet server interacts with a security server of a selected financial service to provide authentication of the transaction. Upon authentication, the digital wallet pre-fills forms which are transmitted to the merchant who contacts the security server for validation of the forms and upon validation, completes the transaction with the user.

1 . A method comprising:
 receiving, at a wallet server for authorizing a transaction between a merchant and a user using a transaction account, a payment authorization request, wherein said payment authorization request is associated with said transaction, and wherein said payment authorization request includes first transaction account information;   receiving, by said wallet server, said second transaction account information including a digital certificate uniquely identifying said transaction account;   sending, by said wallet server, an authentication request for said transaction to a security server of a financial institution, wherein said authentication request includes said second transaction account information;   receiving, by said wallet server, an authentication for said transaction from said security server;   completing, by said wallet server, an authorization form for said transaction; and   transmitting, by said wallet server, said authorization form to a merchant server, wherein said merchant server is associated with said merchant,   wherein said merchant server requests authorization of said authorization form from said security server,   wherein said security server authenticates said authorization form using said second transaction account information,   wherein said merchant server receives an authorization request authentication from said security server, and   wherein said merchant server completes said transaction and receives value from an account of said user.   
     
     
         2 . The method of  claim 1 , wherein said request includes purchase information, charge information and transaction account identifying information. 
     
     
         3 . The method of  claim 1 , wherein said wallet server further comprises a digital wallet server. 
     
     
         4 . The method of  claim 1 , wherein said account reader system is a smart card reader system. 
     
     
         5 . The method of  claim 1 , wherein said wallet server comprises a hardware server. 
     
     
         6 . The method of  claim 1 , wherein said payment authorization request further includes a selection of a financial institution. 
     
     
         7 . The method of  claim 1 , wherein said payment authorization request is received via a network. 
     
     
         8 . The method of  claim 1 , further comprising prompting, by said wallet server, said user to initiate an interface between an account reader system and a transaction account device. 
     
     
         9 . The method of  claim 8 , wherein said account reader system reads said transaction account to acquire said second transaction account information and sends said second transaction account information to said wallet server. 
     
     
         10 . A system comprising:
 a tangible, non-transitory memory communicating with a wallet server,   the tangible, non-transitory memory having instructions stored thereon that, in response to execution by the wallet server, cause the wallet server to perform operations comprising:
 receiving, at a wallet server for authorizing a transaction between a merchant and a user using a transaction account, a payment authorization request, wherein said payment authorization request is associated with said transaction, and wherein said payment authorization request includes first transaction account information; 
 receiving, by said wallet server, said second transaction account information including a digital certificate uniquely identifying said transaction account; 
 sending, by said wallet server, an authentication request for said transaction to a security server of a financial institution, wherein said authentication request includes said second transaction account information; 
 receiving, by said wallet server, an authentication for said transaction from said security server; 
   completing, by said wallet server, an authorization form for said transaction; and   transmitting, by said wallet server, said authorization form to a merchant server, wherein said merchant server is associated with said merchant,   wherein said merchant server requests authorization of said authorization form from said security server,   wherein said security server authenticates said authorization form using said second transaction account information,   wherein said merchant server receives an authorization request authentication from said security server, and   wherein said merchant server completes said transaction and receives value from an account of said user.   
     
     
         11 . A non-transitory tangible computer-readable medium having computer-executable instructions stored thereon that, if executed by at least one of a wallet server, a card reader system, a merchant server, or a security server, cause at least one of said wallet server, said card reader system, said merchant server, or said security server to perform operations comprising:
 receiving, at a wallet server for authorizing a transaction between a merchant and a user using a transaction account, a payment authorization request, wherein said payment authorization request is associated with said transaction, and wherein said payment authorization request includes first transaction account information;   receiving, by said wallet server, said second transaction account information including a digital certificate uniquely identifying said transaction account;   sending, by said wallet server, an authentication request for said transaction to a security server of a financial institution, wherein said authentication request includes said second transaction account information;   receiving, by said wallet server, an authentication for said transaction from said security server;   completing, by said wallet server, an authorization form for said transaction; and   transmitting, by said wallet server, said authorization form to a merchant server, wherein said merchant server is associated with said merchant,   wherein said merchant server requests authorization of said authorization form from said security server,   wherein said security server authenticates said authorization form using said second transaction account information,   wherein said merchant server receives an authorization request authentication from said security server, and   wherein said merchant server completes said transaction and receives value from an account of said user.