SMARTCARD INTERNET AUTHORIZATION SYSTEM
A system and method are disclosed for conducting electronic commerce such as a virtual purchase transaction with an on-line merchant. A user is provided with an intelligent token, such as a smart card containing a digital certificate. The intelligent token suitably authenticates with a wallet server on a network that conducts all or portions of the transaction on behalf of the user with out requiring changes to the merchant's server. The wallet server interacts with a security server of a selected financial service to provide authentication of the transaction. Upon authentication, the digital wallet pre-fills forms which are transmitted to the merchant who contacts the security server for validation of the forms and upon validation, completes the transaction with the user.
1 - 11 . (canceled)
12 . A method, comprising:
a wallet server receiving a request from a user to initiate payment to a merchant for a transaction, wherein the wallet server maintains personal information about the user;
in response to the request, the wallet server providing the personal information to a merchant server of the merchant, wherein the merchant server uses the personal information to query an issuing entity for authorization of the transaction;
the wallet server receiving, from the issuing entity, transaction information for authorizing the transaction; and
the wallet server obtaining a signature of the transaction information from a smart card issued to the user by the issuing entity.
13 . The method of claim 12 , further comprising:
the wallet server receiving an identity certificate from the smart card, wherein the identity certificate is usable to verify the signature.
14 . The method of claim 12 , wherein the wallet server provides the personal information to the merchant in response to an insertion of the smart card into a reader, and wherein the transaction is an on-line transaction.
15 . The method of claim 12 , wherein the obtaining includes:
the wallet server issuing a challenge to the user;
the wallet server receiving a response corresponding to the challenge; and
the wallet server interfacing with a security server to authenticate the transaction.
16 . The method of claim 12 , further comprising:
the wallet server presenting an interface to the user, wherein the interface permits selection of a wallet associated with the user; and
the wallet server receiving an indication of the selection.
17 . The method of claim 12 , wherein the signature is usable by the issuing entity to authorize a merchant to debit an account associated with the smart card.
18 . The method of claim 12 , wherein the smart card is in compliance with a Europay MasterCard Visa (EMV) protocol.