| 摘要 |
Embodiments of the invention include methods, systems, and computer-readable media for processing transactions involving sensitive information, such as a credit card number. Embodiments include a first server authenticating a second server based on a security token and determining whether the security token is expired. Based on the results, the first server may request a transaction token associated with sensitive information. The first server may encrypt the transaction token using a public key of the second server. The first server may send the encrypted transaction token as a parameter to a URL, wherein the URL is configured to cause a browser on a client to send, to the second server, a request for the page and the encrypted transaction token. |
| 主权项 |
1. A method comprising:
receiving, at a first server from a browser on a client, a request to access a web page, the web page including one or more elements for receiving sensitive information when the web page is displayed in the browser; generating, at the first server, a security token, the security token including information for determining whether the security token is expired, the generating the security token comprising using a public key of a second server to encrypt the information for determining whether the security token is expired; and sending, from the first server to the client, the web page, the security token being embedded in the web page, the web page including embedded executable code configured to run within the browser on the client, wherein the embedded executable code, when executed on the client, is operable to generate an inline frame within the web page and cause the browser to send the sensitive information and the security token to the second server via the inline frame. |
