Patent ID: 11941616
Assignee: nan
Field: IT methods for management (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 10:
11. A method comprising:
providing, by a digital payment processing system, a session identifier (ID) and a URL of an iFrame to an e-commerce host server over a secure communication link for forwarding to a computing device responsive to the computing device initiating an e-commerce transaction on an information resource, the URL specific to a payment session identified by the session ID;
receiving, by the digital payment processing system, from the computing device, the URL and a first instance of the session ID;
validating, by the digital payment processing system, the first instance of the session ID, responsive to receiving the URL and the first instance of the session ID;
providing, by the digital payment processing system, upon validating the first instance of the session ID, the iFrame to the computing device for embedding within a payment page provided by the commerce host server to the computing device, the iFrame and the payment page hosted by different domains, and the iFrame including software instructions, which when executed by the computing device, cause:
displaying, by the computing device executing the software instructions of the iFrame, a user interface for input of user payment data;
encrypting, by the computing device executing the software instructions of the iFrame, with an encryption key provided by the software instructions of the iFrame, the user payment data when input via the user interface; and
sending, by the computing device executing the software instructions of the iFrame, the encrypted user payment data to the digital payment processing system;

receiving, by the digital payment processing system, the user payment data encrypted by the computing device upon execution of the software instructions included with the iFrame and a second instance of the session ID from the iFrame;
providing, by the digital payment processing system, upon validating the second instance of the session ID, a one-time token (OTT) to the computing device for use to initiate payment pre-authorization, the OTT associated with the session ID and indicative of the user payment data;
validating, by the digital payment processing system, upon receiving a payment pre-authorization request from the e-commerce host server including an instance of the OTT, the instance of the OTT;
obtaining, by the digital payment processing system, upon validating the instance of the OTT, payment pre-authorization from a payment provider system using the user payment data; and
providing, by the digital payment processing system, an indication of the payment pre-authorization to the e-commerce host server for forwarding to the computing device, the payment pre-authorization allowing the computing device to finalize the e-commerce transaction.