Email based e-commerce using embedded forms
A method implemented in an e-commerce system to facilitate transactions between a customer and a vendor using embedded forms includes requesting by a vendor system to an e-commerce system to generate an embedded form for use in an SMTP email campaign. The method further includes transmitting emails with embedded forms including at least one token by the vendor system to a customer device. The method further includes rendering the embedded form in email to the customer device and receiving a response email, wherein the response email includes input details requested in the specified input fields and a token; authenticating the response email; decoding the token and processing a transaction based on the customer input details requested in the specified input fields of the embedded form.
1. A device that utilizes Simple Mail Transfer Protocol (SMTP) and Hypertext Transfer Protocol (HTTP) to improve security of an e-commerce transaction, the device comprising:
a communication interface that is communicatively coupled to an e-commerce system and a vendor system; and
a processor that is communicatively coupled to the communication interface,
wherein the processor is configured to:
receive, using the communication interface, an email that includes an interactive embedded form and a token via SMTP from the vendor system, wherein the interactive embedded form is renderable in an email client and includes an input field that enables a customer to enter information not previously contained in the interactive embedded form;
transmit, using the communication interface, additional information to the e-commerce system via HTTP, wherein the additional information is received via the input field of the interactive embedded form;
transmit using the communication interface, a response email to the e-commerce system via SMTP, wherein the response email includes the token and a request to perform the e-commerce transaction; and
receive, using the communication interface via SMTP, a confirmation email from the vendor system that indicates that the response email was authenticated and the e-commerce transaction was successfully processed, wherein the e-commerce transaction is processed by the e-commerce system confirming the additional information that is transmitted via HTTP based on the token that is transmitted via SMTP, wherein the response email is authenticated using at least one of DomainKeys Identified Mail (DKIM) or Sender Policy Framework (SPF).
2. The device of claim 1 , wherein the
interactive embedded form is a web form.
3. The device of claim 2 , wherein the processor is further configured to render the web form by communicating with the vendor system via HTTP.
4. A non-transitory computer readable storage medium that stores instructions for utilizing Simple Mail Transfer Protocol (SMTP) and Hypertext Transfer Protocol (HTTP) to improve security of an e-commerce transaction, the instructions, when executed by a processor, cause the processor to execute a method comprising:
receiving using a communication interface, an email that includes an interactive embedded form and a token via SMTP from a vendor system, wherein the interactive embedded form is renderable in an email client and includes an input field that enables a customer to enter information into the interactive embedded form;
transmitting, using the communication interface, additional information to an e-commerce system via HTTP, wherein the additional information is received via the input field of the interactive embedded form;
transmitting, using the communication interface, a response email the e-commerce transaction to the e-commerce system via SMTP, wherein the response email includes the token and a request to perform the e-commerce transaction; and
receiving, using the communication interface via SMTP, a confirmation email that indicates that the response email was authenticated and the e-commerce transaction was successfully processed, wherein the e-commerce transaction is processed by the e-commerce system confirming the additional information that is transmitted via HTTP based on the token that is transmitted via SMTP, wherein the response email is authenticated using at least one of DomainKeys Identified Mail (DKIM) or Sender Policy Framework (SPF).
5. The non-transitory computer readable
storage medium of claim 4 , wherein the interactive embedded form is a web form.
6. The non-transitory computer readable
storage medium of claim 5 , wherein the instructions further cause the processor to render the web form by communicating with the vendor system via HTTP.
7. A method for improving security of an e-commerce transaction utilizing Simple Mail Transfer Protocol (SMTP) and Hypertext Transfer Protocol (HTTP), the method comprising:
receiving, by a processor, an email that includes an interactive embedded form and a token via SMTP from a vendor system, wherein the interactive embedded form is renderable in an email client and includes an input field that enables a customer to enter additional information into the interactive embedded form;
transmitting, by the processor, the additional information to an e-commerce system via HTTP, wherein the additional information is received via the input field of the interactive embedded form;
transmitting, by the processor, a response email to the e-commerce system via SMTP, wherein the response email includes the token and a request to perform the e-commerce transaction; and
receive, by the processor via SMTP, a confirmation email that indicates that the response email was authenticated and the e-commerce transaction was successfully processed, wherein the e-commerce transaction is processed by the e-commerce system confirming based on the token that is transmitted via SMTP and the additional information that is transmitted via HTTP based on the token that is transmitted via SMTP, wherein the response email is authenticated using at least one of DomainKeys Identified Mail (DKIM) or Sender Policy Framework (SPF).
8. The method of claim 7 , wherein the
interactive embedded form is a web form.
9. The method of claim 8 , wherein the web form is rendered by the processor communicating with the vendor system via HTTP.