SECURE IN-LINE PAYMENTS FOR RICH INTERNET APPLICATIONS

摘要

Methods and systems are provided for making secure financial transactions, such as purchase payments, using rich Internet applications (RIA) running an RIA runtime (also referred to as a platform or framework) on the user's smart phone or other mobile device. Embodiments differ from the usual way of re-directing a user from a third-party application and authenticating the user by providing secure in-line payments from a rich Internet application running on an RIA runtime. A system includes: a mobile device executing a rich Internet application running on an RIA runtime; a payment library communicating with the RIA runtime and a service provider, for which the payment library communicates with the service provider to authenticate the rich Internet application; and in response to authentication by the service provider, facilitates secure financial transactions via the rich Internet application.

主权项

1. A system, comprising:
a non-transitory memory storing instructions; one or more hardware processors coupled to the non-transitory memory and configured to read the instructions to cause the system to perform operations comprising:
determining a browser of the client device, wherein the browser is associated with a rich Internet application and a runtime platform;causing the browser to activate the rich Internet application to run on the runtime platform;causing an authentication library of the browser to receive information from the runtime platform;determining the rich Internet application is authentic to secure an in-line transfer with the service provider based at least on the information received by the authentication library from the runtime platform; andcausing a user interface of the system to display a notification that indicates the rich Internet application is authentic to secure the in-line transfer with the service provider, wherein the in-line transfer with the service provider is secure without redirecting the browser to a website of the service provider that requires login information.