Smartcard internet authorization system

Abstract

A system and method are disclosed for conducting electronic commerce such as a virtual purchase transaction with an on-line merchant. A user is provided with an intelligent token, such as a smart card containing a digital certificate. The intelligent token suitably authenticates with a wallet server on a network that conducts all or portions of the transaction on behalf of the user with out requiring changes to the merchant's server. The wallet server interacts with a security server of a selected financial service to provide authentication of the transaction. Upon authentication, the digital wallet pre-fills forms which are transmitted to the merchant who contacts the security server for validation of the forms and upon validation, completes the transaction with the user.

1 - 11 . (canceled) 
     
     
         12 . A method, comprising:
 a wallet server receiving a request from a user to initiate payment to a merchant for a transaction, wherein the wallet server maintains personal information about the user;   in response to the request, the wallet server providing the personal information to a merchant server of the merchant, wherein the merchant server uses the personal information to query an issuing entity for authorization of the transaction;   the wallet server receiving, from the issuing entity, transaction information for authorizing the transaction; and   the wallet server obtaining a signature of the transaction information from a smart card issued to the user by the issuing entity.   
     
     
         13 . The method of  claim 12 , further comprising:
 the wallet server receiving an identity certificate from the smart card, wherein the identity certificate is usable to verify the signature.   
     
     
         14 . The method of  claim 12 , wherein the wallet server provides the personal information to the merchant in response to an insertion of the smart card into a reader, and wherein the transaction is an on-line transaction. 
     
     
         15 . The method of  claim 12 , wherein the obtaining includes:
 the wallet server issuing a challenge to the user;   the wallet server receiving a response corresponding to the challenge; and   the wallet server interfacing with a security server to authenticate the transaction.   
     
     
         16 . The method of  claim 12 , further comprising:
 the wallet server presenting an interface to the user, wherein the interface permits selection of a wallet associated with the user; and   the wallet server receiving an indication of the selection.   
     
     
         17 . The method of  claim 12 , wherein the signature is usable by the issuing entity to authorize a merchant to debit an account associated with the smart card. 
     
     
         18 . The method of  claim 12 , wherein the smart card is in compliance with a Europay MasterCard Visa (EMV) protocol.