System and Method for Securely Authorizing and Distributing Stored-Value Card Data

Abstract

A computerized system and method for securely authorizing and distributing stored-value card data over a communications network is provided. The method allows for storing in the database a plurality of records comprising stored-value card data for each stored-value card as well as information identifying a plurality of trusted sources of stored-value card activation requests and/or a plurality of trusted communications networks for transmitting stored-value card activation requests. A transmitting step allows for a requesting terminal to transmit over a communications network a request to change the status of a stored-value card. The central processor then determines whether the requesting terminal and/or the communications network is a trusted source. Based on whether the requesting terminal or communications network is a trusted source or trusted communications network, the request can be processed and the card can be activated. A method for establishing a list of trusted sources and trusted communications networks is also provided.

1 - 60 . (canceled) 
     
     
         61 . A computer-implemented method for processing a stored-value card transaction request in a card data management system having a central processor in communication with a plurality of point-of-sale terminals over a communications network, each of the one or more terminals having a unique terminal identifier and being associated with a location and a prepaid card merchant, the central processor being in communication with a database having stored therein a plurality of card records, each card record containing data associated with a stored-value card distributed to a prepaid card merchant for further distribution to purchasers at a location controlled by the prepaid card merchant, the method comprising:
 receiving the stored-value card transaction request from a requesting terminal, the requesting terminal being one of the plurality of point-of-sale terminals, the transaction request comprising a requesting terminal identifier, a card identifier assigned to a stored value card, and information indicative of a requested transaction type;   determining if the requesting terminal is authorized to request the requested transaction type for the stored value card;   responsive to a determination that the requesting terminal is authorized to request the requested transaction type, initiating the requested transaction; and   transmitting a request response to the requesting terminal.   
     
     
         62 . A computer-implemented method according to  claim 61  wherein the requested transaction type is one of the group consisting of card activation, card value incrementation, card deactivation, and card value redemption. 
     
     
         63 . A computer-implemented method according to  claim 61  further comprising the action of:
 associating in the database a set of authorized terminal identifiers with the stored-value card. 
 
     
     
         64 . A computer-implemented method according to  claim 63  wherein the action of determining if the requesting terminal is authorized comprises the action of:
 comparing the requesting terminal identifier to the set of authorized terminal identifiers. 
 
     
     
         65 . A computer-implemented method according to  claim 63  further comprising the actions of:
 determining criteria for authorizing terminals to request transactions for the stored value card; and 
 assembling the set of authorized terminal identifiers based on the criteria for authorizing. 
 
     
     
         66 . A computer-implemented method according to  claim 65  wherein the criteria for authorizing include at least one of the set consisting of a terminal location requirement, a terminal ownership requirement, and terminal affiliation with a particular merchant 
     
     
         67 . A computer-implemented method according to  claim 63  further comprising the actions of:
 associating in the database a set of one or more authorized transaction types with each authorized terminal identifier. 
 
     
     
         68 . A computer-implemented method according to  claim 67  wherein the action of determining if the requesting terminal is authorized further comprises the actions of:
 comparing the requesting terminal identifier to the set of authorized terminal identifiers; and 
 responsive to a determination that the requesting terminal identifier matches an authorized terminal identifier, comparing the requested transaction type to the set of authorized transaction types associated with the authorized terminal identifier. 
 
     
     
         69 . A computer-implemented method according to  claim 61  wherein the stored-value card transaction is a card value redemption transaction and the transaction request further comprises a purchase amount. 
     
     
         70 . A computer-implemented method according to  claim 69  wherein the card record data includes a stored value for the stored-value card and the action of initiating the requested transaction comprises:
 determining from the database the stored value associated with the stored-value card; 
 determining whether the purchase amount exceeds the stored value; and 
 responsive to a determination that the purchase amount does not exceed the stored value, subtracting the purchase amount from the stored value. 
 
     
     
         71 . A computer-implemented method according to  claim 69  further comprising:
 responsive to a determination that the purchase amount exceeds the stored value, setting the stored value to zero. 
 
     
     
         72 . A system for processing a request for a stored-value card transaction for a stored-value card, the transaction request being submitted by a retailer using a point-of-sale terminal that is one of a plurality of terminals capable of communicating over a network, each terminal having a unique terminal identifier and being associated with one of a plurality of merchants, the stored-value card transaction request comprising a unique card identifier for the particular stored value card, the terminal identifier of the point-of-sale terminal, and information indicative of a requested transaction type, the system comprising:
 a central processor in communication with the network, the central processor being adapted to receive the transaction request from the point-of-sale terminal;   a database in communication with the central processor, the database having stored therein a plurality of stored-value card records, each comprising a unique card identifier associated with a stored-value card distributed to one of the plurality of merchants;   an associating module in the central processor configured for associating, in the database, a set of authorized terminal identifiers with each stored-value card record;   a transaction authorization module in the central processor configured for determining, based on information in the transaction request and the database, whether the requesting terminal is authorized to request the requested transaction type; and   at least one transaction processing module in the central processor configured for processing the requested transaction responsive to a determination by the transaction authorization module that the requesting terminal is authorized to request the requested transaction type.   
     
     
         73 . A system according to  claim 72  wherein the transaction authorization module is configured to determine whether the requesting terminal is authorized by determining whether the requesting terminal identifier matches an authorized terminal identifier in the set of authorized terminal identifiers. 
     
     
         74 . A system according to  claim 72  wherein the associating module is further configured for associating, in the database, a set of one or more authorized transaction types with each authorized terminal identifier. 
     
     
         75 . A system according to  claim 74  wherein the transaction authorization module is configured to determine whether the requesting terminal is authorized by determining whether the requesting terminal identifier matches an authorized terminal identifier in the set of authorized terminal identifiers, and by comparing the requested transaction type to the set of authorized transaction types associated with the authorized terminal identifier. 
     
     
         76 . A system according to  claim 72  wherein the set of authorized terminal identifiers is based on authorization criteria comprising at least one of the set consisting of a terminal location requirement, a terminal ownership requirement, and terminal affiliation with a particular merchant. 
     
     
         77 . A system according to  claim 72  wherein the at least one transaction processing module includes at least one of the group consisting of a card activation module, a card value incrementation module, a card deactivation module, and a card value redemption module. 
     
     
         78 . A system according to  claim 72  further comprising: a value module adapted to determine and store in the database, in response to a stored-value card transaction, a card value for the stored-value card of the transaction. 
     
     
         79 . A computer program embodied in a computer-readable medium for processing a stored-value card transaction request in a card data management system having a central processor in communication with a plurality of point-of-sale terminals over a communications network, each of the one or more terminals having a unique terminal identifier and being associated with a location and a prepaid card merchant, the central processor being in communication with a database having stored therein a plurality of card records, each card record containing data associated with a stored-value card distributed to a prepaid card merchant for further distribution to purchasers at a location controlled by the prepaid card merchant, the computer program comprising instructions for performing a set of actions comprising:
 receiving the stored-value card transaction request from a requesting terminal, the requesting terminal being one of the plurality of point-of-sale terminals, the transaction request comprising a requesting terminal identifier, a card identifier assigned to a stored value card, and information indicative of a requested transaction type; 
 determining if the requesting terminal is authorized to request the requested transaction type for the stored value card; 
 responsive to a determination that the requesting terminal is authorized to request the requested transaction type, initiating the requested transaction; and 
 transmitting a request response to the requesting terminal. 
 
     
     
         80 . A computer program according to  claim 79  wherein the requested transaction type is one of the group consisting of card activation, card value incrementation, card deactivation, and card value redemption. 
     
     
         81 . A computer program according to  claim 79  wherein the set of actions further comprises: associating in the database a set of authorized terminal identifiers with the stored-value card. 
     
     
         82 . A computer program according to  claim 81  wherein the action of determining if the requesting terminal is authorized comprises the action of: comparing the requesting terminal identifier to the set of authorized terminal identifiers. 
     
     
         83 . A computer program according to  claim 81  wherein the set of actions further comprises:
 determining criteria for authorizing terminals to request transactions for the stored value card; and 
 assembling the set of authorized terminal identifiers based on the criteria for authorizing. 
 
     
     
         84 . A computer program according to  claim 83  wherein the criteria for authorizing include at least one of the set consisting of a terminal location requirement, a terminal ownership requirement, and terminal affiliation with a particular merchant. 
     
     
         85 . A computer program according to  claim 81  wherein the set of actions further comprises:
 associating in the database a set of one or more authorized transaction types with each authorized terminal identifier. 
 
     
     
         86 . A computer program according to  claim 85  wherein the action of determining if the requesting terminal is authorized further comprises the actions of:
 comparing the requesting terminal identifier to the set of authorized terminal identifiers; and 
 responsive to a determination that the requesting terminal identifier matches an authorized terminal identifier, comparing the requested transaction type to the set of authorized transaction types associated with the authorized terminal identifier. 
 
     
     
         87 . A computer program according to  claim 79  wherein the stored-value card transaction is a card value redemption transaction and the transaction request further comprises a purchase amount. 
     
     
         88 . A computer program according to  claim 87  wherein the card record data includes a stored value for the stored-value card and the action of initiating the requested transaction comprises:
 determining from the database the stored value associated with the stored-value card; determining whether the purchase amount exceeds the stored value; and 
 responsive to a determination that the purchase amount does not exceed the stored value, subtracting the purchase amount from the stored value. 
 
     
     
         89 . A computer program according to  claim 88  wherein the action of initiating the requested transaction further comprises:
 responsive to a determination that the purchase amount equals or exceeds the stored value, setting the stored value to zero.