Secure universal two-step payment authorization system

Abstract

A system and methods expedite and make secure payment data entry, and payment and authorization and authorization, for both in-store and online purchases. A mobile app, or widget or browser extension or installed service, on a mobile communication device, generates a barcode to be scanned at a point-of-sale terminal. Optional confirmation is sent to an app, or browser extension or widget or installed service, on a mobile or fixed communication device, to confirm a purchase. An independent app, or browser extension or widget or installed service, on a mobile or fixed communication device, generates a barcode that is sent directly to an online point-of-sale system. The method allows a purchaser to use the same app, or widget or browser extension or installed service, to purchase from any retailer with installed collaborating software.

1 .- 20 . (canceled) 
     
     
         21 . A financial institution subsystem in communication with a commercial entity subsystem, the financial institution subsystem comprising:
 at least one processor component;   at least one memory component; and   at least one communications component, wherein the financial institution subsystem is configured to:   receive from the commercial entity subsystem a request for payment authorization, the request containing at least an encrypted digital representation of a commerce credential for the requested payment transaction, the commerce credential containing no payment credentials usable in any other future transactions;   after the receiving, retrieve a payment credential from the memory component using the encrypted digital representation received from the commercial entity subsystem;   after the retrieving, process the requested payment authorization; and   after the processing, send an approval-or-denial reply regarding the payment authorization request to the commercial entity subsystem.   
     
     
         22 . The financial institution subsystem of  claim 21 , wherein the financial institution subsystem is further configured to communicate with a merchant subsystem, and sends also the approval-or-denial reply to the merchant subsystem, after processing the requested payment authorization. 
     
     
         23 . A financial institution subsystem in communication with a commercial entity subsystem, the financial institution subsystem comprising:
 at least one processor component;   at least one memory component; and   at least one communications component, wherein the financial institution subsystem is configured to:   receive from the commercial entity subsystem a request for payment authorization, the request containing at least an encrypted digital representation of a commerce credential for the requested payment transaction, the commerce credential containing no payment credentials usable in any other future transactions;   after the receiving, recover a payment credential from the encrypted digital representation received from the commercial entity subsystem;   after the retrieval, process the requested payment authorization; and   after the processing, send an approval-or-denial reply regarding the payment authorization request to the commercial entity subsystem.   
     
     
         24 . The financial institution subsystem of  claim 23 , wherein the financial institution subsystem is further configured to communicate with a merchant subsystem, and sends also the approval-or-denial reply to the merchant subsystem, after processing the requested payment authorization. 
     
     
         25 . A method comprising:
 receiving at a financial institution subsystem a request for payment authorization, the request containing at least an encrypted digital representation of a commerce credential for the requested payment transaction, the commerce credential containing no payment credentials usable in any other future transactions;   after the receiving, retrieving a payment credential at financial institution subsystem using the encrypted digital representation received from the commercial entity subsystem;   after the retrieving, processing the requested payment authorization at the financial institution subsystem; and   after the processing, sending an approval-or-denial reply regarding the payment authorization request from the financial institution subsystem to the commercial entity subsystem.   
     
     
         26 . The method of  claim 25 , further comprising:
 the financial institution subsystem sending the approval-or-denial reply also to a merchant subsystem, after processing the requested payment authorization.