SMS and social media dual authorization, management oversight, and non-password security in email based e-commerce
An email-based e-commerce system is disclosed with additional features for added security. The system may include security features for email based e-commerce providing added assurance to customers of a higher level of protection than generally required. These security features enhance the password reset function without requiring a password, generate confirmations on outside messaging systems and implement an oversight management tool for authorizing transactions. The methods and apparatus described herein may enhance security by designing a system that can confirm payments through a separate non-email based media. The e-commerce system may send alerts or requests for confirmation in a variety of media to ensure a secure payment process. The methods and apparatus described herein may expand the list of individuals that may request or approve payments based on a single account registered by a single credit card holder. A single user may receive requests from registered sub-customers for payments by email.
1. A method for improving security of an e-commerce transaction utilizing Simple Mail Transfer Protocol (SMTP), the method comprising:
transmitting an offer email for the e-commerce transaction to a sub-customer via SMTP, wherein the email contains a token and a mailto link;
receiving a response email that is generated in response to a user clicking the mailto link in the offer email, wherein the response email contains the token;
decoding the token to determine and a full-customer associated with the sub-customer;
on a condition that the full customer is determined, authorizing, by the full customer, the sub-customer to perform the e-commerce transaction by:
sending a confirmation request message to the full-customer associated with the sub-customer, wherein the confirmation request message is one or more of: a text message, a multi-media message, an SMTP email message and a social media post, and
receiving a confirmation response message from the full-customer associated with the sub-customer, wherein the confirmation response message is one or more of: a text message, a multi-media message, an, SMTP email message and a social media post; and
on a condition that the e-commerce transaction is authorized by the full customer, processing a payment for the e-commerce transaction.
2. The method of claim 1 further comprising: sending a notification of successful transaction to the full-customer.
3. The method of claim 1 further comprising: sending a notification of successful transaction to the sub-customer.
4. The method of claim 1 , wherein an email notification is sent to the sub-customer indicating the e-commerce transaction was cancelled on a condition that the full-customer cancels the e-commerce transaction.
5. A method for improving security of an e-commerce transaction utilizing Simple Mail Transfer Protocol (SMTP), the method comprising:
receiving a purchase request via an SMTP email from a sub-customer, the SMTP email including at least one token generated by a third party vendor;
determining a full-customer associated with the sub-customer by decoding the at least one token;
transmitting a confirmation request message to the full customer, via one or more of: text message, a multi-media message, an SMTP email message and a social media message;
receiving a confirmation confirm message, from the full customer, via one or more of: text message, a multi-media message, an SMTP email message and a social media message, wherein the confirmation message is a single word;
processing the payment in response to receiving the confirmation confirm message; and
transmitting a notification of successful transaction to the third party vendor.
6. The method of claim 5 , wherein an initial email offer is received via an email.
7. The method of claim 5 , further comprising identifying a required confirmation message format for the full customer.
8. The method of claim 1 , wherein the token is programmed to collect additional information from the full-customer and sub-customer so as to associate the full-customer with the sub-customer and meet the condition for processing of the payment.
9. The method of claim 1 , wherein the confirmation confirm message is a single word.
10. The method of claim 6 , wherein an account may be locked on a condition that the customer sends a predetermined word as the confirmation confirm message, wherein the predetermined word is lock.
11. The method of claim 5 , wherein an account may be locked on a condition that the customer sends a predetermined word as the confirmation confirm message, wherein the predetermined word is lock.
12. A method improving security of an e-commerce transaction without requiring password authentication that utilizes Simple Mail Transfer Protocol (SMTP), the method comprising;
registering an account with a payment server via a web page;
receiving an authentication request, wherein the authentication request includes an authentication Uniform Resource Location (URL);
transmitting a new authentication token to a customer;
accessing a second webpage associated with the authentication URL;
receiving an authentication confirmation message; and
invalidating any authentication tokens associated with the customer other than the new token.
13. The method of claim 12 , wherein the customer is authenticated after selecting the URL in the authentication request.
14. The method of claim 12 , wherein the customer provides answers to at least one security question when registering the account.
15. The method of claim 12 , wherein the customer is prompted to enter at least part of a credit card information.
16. The method of claim 12 , wherein the customer is authenticated using a short message service (SMS) message.
17. The method of claim 12 , wherein the customer is authenticated using a multimedia service (MMS) message.
18. The method of claim 12 , wherein the authentication confirmation message is a second SMTP email message.
19. The method .of claim 12 , wherein the authentication request is a social media post.
20. The method of claim 12 , wherein the authentication confirmation message is a social media post.