Method and system for secure mobile payment transactions
A method for facilitating the widespread use of the PIN-Debit payment method for Internet “eCommerce” and mobile payments sales which requires little or no change for the cardholders, merchants, debit networks and card issuers based primarily on the introduction of a layer of middleware and wherein the Debit Networks and Issuing Banks may customize the implementation of the services based on individual strategy and cardholder preferences.
1. A method for processing a secure mobile payment transaction conducted at a location operated by a merchant comprising the steps of:
receiving at a web server of a mobile wallet system from a consumer in connection with a registration event that is completed prior to the secure mobile payment transaction, a plurality of payment account numbers, the plurality of payment account numbers received at the mobile wallet system and associated with a mobile device of the consumer, the mobile wallet system comprising:
a transaction gateway for receiving and processing payment transactions,
the web server having a network interface for receiving and processing messages received from Internet sources in connection with the registration event,
a messaging server having a network interface for communicating with the mobile device, and
a settings database for storing settings from one or more of a merchant, an issuer, a payment network, a payment acquirer, and an e-commerce gateway;
in connection with the secure mobile payment transaction, which is initiated after the registration event, the mobile wallet system receiving at the transaction gateway mobile payment data from a point-of-sale device at the location operated by a merchant, the mobile payment data comprising a mobile payment account number transmitted to the point-of-sale device at the location operated by the merchant from the mobile device of the consumer;
transmitting, from the mobile wallet system to the mobile device, an approval request;
receiving, at the mobile wallet system from the mobile device of the consumer, a secure token associated with a mobile PIN, the secure token permitting the mobile PIN to be maintained securely on the mobile device, the secure token indicating the consumer has approved the secure mobile payment transaction;
in association with the secure mobile payment transaction, the mobile wallet system analyzing the mobile payment data received from the point-of-sale device at the location operated by the merchant to identify the mobile payment data as comprising the mobile payment account number;
upon identifying the mobile payment data as comprising the mobile payment account number,
determining, based on a selection from the consumer, a specified payment account number from the plurality of payment account numbers received in connection with the registration event,
substituting the specified payment account number for the mobile payment account number,
transmitting the mobile payment data comprising the specified payment account number to a secure payment network for processing; and
after transmitting the mobile payment data to the secure payment network for processing, the mobile wallet system transmitting a payment confirmation to the point-of-sale device at the location operated by the merchant.
2. The method of claim 1 , wherein the mobile wallet system generates the secure token and the mobile PIN in connection with the registration event.
3. The method of claim 1 , wherein the point-of-sale device at the location operated by the merchant is one of a merchant mobile device or a hosting computer.