Personal token read system and method
A system for facilitating secure transactions between a purchaser and a vendor is provided. The system might include a purchaser token data capture device for reading token data into the system, an encryption module for encrypting the token data and a network based vendor input form for communicating the encrypted token data to the vendor. The system might further include a purchaser terminal for routing the encrypted token data to a transaction processing network or a vendor for providing payment and confirmation to the vendor of an authorized token.
1. A method for facilitating secure transactions between a purchaser and a vendor, comprising:
the vendor providing a purchasing form to the purchaser via a communication network for bank card information, wherein the bank card information comprises a primary account number (PAN) and a bank identification number (BIN);
the vendor receiving the form from the purchaser with the bank card information populated therein, wherein a portion of the PAN is encrypted with a first encryption key and wherein a portion of the BIN is encrypted with a second encryption key; and
the vendor sending the encrypted bank card information to a gateway that routes the bank card information to a selected institution.
2. The method of claim 1 , wherein the PIN and BIN are entered and encrypted at a purchaser data capture device, wherein the purchaser data capture device forwards the encrypted PIN and encrypted BIN to a purchaser terminal, and wherein the purchaser terminal sends the populated form to the vendor.
3. The method of claim 2 , wherein the encrypted PIN and encrypted BIN are transparent to the vendor.
4. The method of claim 2 , wherein the first encryption key is based on the purchaser terminal's ID.
5. The method of claim 4 , wherein the second encryption key is based on the vendor's ID.
6. The method of claim 5 , wherein the first encryption key is the purchaser's terminal ID and wherein the second encryption key is the vendor's ID.
7. The method of claim 2 , wherein the bank card information is populated in the form after the purchaser swipes the bank card at the purchaser data capture device.
8. The method of claim 1 , wherein the gateway decrypts the encrypted BIN prior to routing the bank card information to the selected institution.
9. The method of claim 8 , wherein the gateway routes the decrypted BIN to the selected institution.
10. The method of claim 8 , wherein the gateway:
decrypts the encrypted BIN to determine an appropriate routing institution;
reencrypts the decrypted BIN; and
routes the reencrypted BIN to the selected institution.
11. A method for conducting Internet transactions between a purchaser and a vendor, comprising:
the vendor providing html pages to the purchaser, the html pages including catalog pages or shopping cart pages and a purchase form for bank card information to enable the purchaser to purchase goods or services from the vendor via the Internet, wherein the bank card information comprises a primary account number (PAN) and a bank identification number (BIN);
the vendor receiving the form from the purchaser with the bank card information populated therein, wherein a portion of the PAN is encrypted with a first encryption key and wherein a portion of the BIN is encrypted with a second encryption key; and
the vendor sending the encrypted bank card information to a gateway that routes the bank card information to a selected institution.
12. The method of claim 11 , wherein the PIN and BIN are entered and encrypted at a purchaser data capture device, wherein the purchaser data capture device forwards the encrypted PIN and encrypted BIN to a purchaser terminal, and wherein the purchaser terminal sends the populated form to the vendor.
13. The method of claim 12 , wherein the encrypted PIN and encrypted BIN are transparent to the vendor.
14. The method of claim 12 , wherein the bank card information is populated in the form after the purchaser swipes the bank card at the purchaser data capture device.
15. The method of claim 11 , wherein the gateway decrypts the encrypted BIN prior to routing the bank card information to the selected institution.
16. The method of claim 15 , wherein the gateway routes the decrypted BIN to the selected institution.
17. The method of claim 15 , wherein the gateway:
decrypts the encrypted BIN to determine an appropriate routing institution;
reencrypts the decrypted BIN; and
routes the reencrypted BIN to the selected institution.
18. The method of claim 17 , wherein the gateway does not have access to the first encryption key used to encrypt the PAN.
19. The method of claim 12 , wherein the first encryption key is based on the purchaser terminal's ID.
20. The method of claim 19 , wherein the second encryption key is based on the vendor's ID.
21. The method of claim 20 , wherein the first encryption key is the purchaser's terminal ID and wherein the second encryption key is the vendor's ID.
22. The method of claim 11 , wherein the populated form comprises unencrypted bank card information, the PIN encrypted with the first encryption key, and the BIN encrypted with the second encryption key.