| 摘要 |
<p>PURPOSE: A method, systems, and a program, are provided to perform electronic transactions that includes the feature of a "thin" consumer's wallet by adding an issuer gateway and moving the credit/debit card authorization function from the merchant to the issuer. CONSTITUTION: A four-party protocol method includes the step of sending from a consumer's computer(202) a start messages(220) over an internet network to a merchant's computer(204). The merchant's computer then replies to the consumer's computer with a merchant message including a wallet initiation message(222), a merchant digital signature, and a digital certificate from an acquiring bank(208). The wallet initiation message includes a payment amount, an order description, a timestamp, and a nonce. This starts a consumer's wallet program in the consumer's computer in response to the wallet initiation message. The consumer's computer then sends a message(224) over the internet network including some consumer identity and authentication information, such as a user id and user password, plus the merchant message, to an issuer gateway(214) operating on behalf of an issuing bank(212). The issuer gateway verifies the merchant's signature to prove that the consumer is dealing with the actual merchant and validates the merchant's certificate and the acquirer's certificate to prove that the merchant and issuer share a common financial arrangement. The issuer gateway then verifies that the consumer's account is active and has sufficient funds and/or credit to support the payment amount.</p> |
