Patent ID: 11861601
Assignee: nan
Field: IT methods for management (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 0:
1. A system for securing electronic payments, the system comprising:
one or more computer servers comprising:
one or more processors; and
a memory storing computer code instructions, the computer code instructions, when executed by the one or more processors, cause the one or more computer servers to:
provide a session identifier (ID) and a URL of an iFrame to an electronic commerce (e-commerce) host server for forwarding to a computing device responsive to the computing device initiating an e-commerce transaction on an information resource, the URL specific to a payment session identified by the session ID, wherein the system for securing electronic payments is different from the e-commerce host server;
receive a request for the iFrame from the computing device responsive to the e-commerce host server forwarding the URL and the session ID to the computing device, the request for the iFrame including the URL of the iFrame and a first instance of the session ID;
provide, upon validating the first instance of the session ID, the iFrame to the computing device for embedding within a payment page provided by the e-commerce host server to the computing device, the iFrame configured to receive user payment data and transmit the user payment data to the system without the payment page and a domain of the payment page having access to the user payment data, and the iFrame including software instructions, which when executed by the computing device, cause the computing device to:
display a user interface for input of user payment data;
encrypt the user payment data when input via the user interface; and
send the encrypted user payment data to the one or more processors;

receive the user payment data encrypted by the computing device upon execution of the software instructions included with the iFrame and a second instance of the session ID from the iFrame; and
provide, upon validating the second instance of the session ID, a one-time token (OTT) to the computing device for use to initiate payment pre-authorization, the OTT associated with the session ID and indicative of the user payment data.