Secure communication of payment information to merchants using a verification token
Disclosed are apparatuses, systems, and methods pertaining to the secure communication of payment information from portable consumer devices, such as credit cards, to online merchants using verification tokens.
1. A method initiating a payment transaction, the method comprising:
presenting, from a merchant server comprising a data processor and a computer readable medium comprising computer code, a website portal providing various web pages that enable a user to select at least one product or service for purchase to a computer, the computer code directing the data processor in the merchant server to create an active purchase session for the user that is actively pursuing a purchase transaction;
receiving, by the merchant server, one or more messages directly from a validation entity, the one or more messages including data including data representative of at least a portion of identification information of a portable consumer device obtained from a verification token, after the validation entity has determined that one or more validation tests pertaining to the verification token are passed;
correlating, by the merchant server, the data received in the one or more messages from the validation entity to the active purchase session; and
initiating the payment transaction using at least some of the data received in the one or more messages.
2. The method of claim 1 , wherein the portable consumer device is in the form of a card and the verification token comprises a card reader.
3. The method of claim 1 , wherein the one or more messages comprise a merchant identifier associated with the merchant server.
4. The method of claim 3 , wherein the one or more messages comprise a transaction identifier associated with the purchase transaction.
5. The method of claim 4 , wherein the merchant identifier and the transaction identifier are encrypted in the one or more messages.
6. The method of claim 1 , wherein the computer is a mobile phone.
7. The method of claim 1 , wherein the one or more messages comprise a merchant identifier associated with the merchant server, the merchant identifier being a URL or a URID.
8. The method of claim 1 wherein the one or more messages comprise a merchant identifier associated with the merchant server, the merchant identifier being stored on the portable consumer device and being received through the verification token.
9. A merchant server comprising:
a data processor; and
a computer readable medium coupled to the processor, wherein the computer readable medium comprises code, executable by the processor, for implementing a method comprising
presenting, from the merchant server, a website portal providing various web pages that enable a user to select at least one product or service for purchase to a computer, the code directing the data processor to create an active purchase session for the user that is actively pursuing a purchase transaction;
receiving, by the merchant server, one or more messages directly from a validation entity, the one or more messages including data including data representative of at least a portion of identification information of a portable consumer device obtained from a verification token, after the validation entity has determined that one or more validation tests pertaining to the verification token are passed;
correlating, by the merchant server, the data received in the one or more messages from the validation entity to the active purchase session; and
initiating a payment transaction using at least some of the data received in the one or more messages.
10. The merchant server of claim 9 , wherein the portable consumer device is in the form of a card and the verification token comprises a card reader.
11. The merchant server of claim 9 , wherein the one or more messages comprise a merchant identifier associated with the merchant server.
12. The merchant server of claim 11 , wherein the one or more messages comprise a transaction identifier associated with the purchase transaction.
13. The merchant server of claim 12 , wherein the merchant identifier and the transaction identifier are encrypted in the one more messages.
14. The merchant server of claim 9 , wherein the computer is a mobile phone.
15. The merchant server of claim 9 , wherein the one or more messages comprise a merchant identifier associated with the merchant server, the merchant identifier being a URL or a URID.
16. The merchant server of claim 9 , wherein the one or more messages comprise a merchant identifier associated with the merchant server, the merchant identifier being stored on the portable consumer device and being received through the verification token.
17. The merchant server of claim 9 wherein the identification information is stored in the verification token.