Patent ID: 8768854
Filing Date: 2014-07-01
Classification: G06Q,H04L

Abstract:
1. A method, implemented at least in part by a financial institution system, for implementing a secure protocol for transactions, the method comprising: receiving, by the financial institution system from a customer using the secure protocol, a first communication comprising information regarding a transaction to be conducted between a merchant and the customer; receiving, by the financial institution system from the merchant using the secure protocol, an eighth communication comprising information regarding the transaction to be conducted between the merchant and the customer; in response to at least one of the first and eighth communication, sending, by the financial institution system to the merchant using the secure protocol, a second communication comprising a confirmation request to the merchant regarding the transaction; in response to at least one of the first and eighth communication, sending, by the financial institution system to the customer using the secure protocol, a seventh communication comprising a confirmation request to the customer regarding the transaction; receiving, by the financial institution system from the customer using the secure protocol, a third communication comprising information indicating the customer confirms the transaction; receiving, by the financial institution system using the secure protocol, a fourth communication comprising information indicating the merchant confirms the transaction; processing, by the financial institution system, the transaction, wherein customer financial information used in processing the transaction is located solely at the financial institution system, and wherein the secure protocol does not communicate the customer financial information to the merchant, or to the customer; sending, by the financial institution system to the customer using the secure protocol, a fifth communication comprising results of the processing; and sending, by the financial institution system to the merchant using the secure protocol, a sixth communication comprising results of the processing; wherein communications between the financial institution system and the customer are encrypted with a single-use customer session key, and wherein communications between the financial institution system and the merchant are encrypted with a single-use merchant session key; wherein it is not possible for any of the financial institution system, the merchant, and the customer to repudiate the transaction; and wherein communications to and from the merchant are performed, at least in part, via a merchant device associated with the merchant, and wherein communications to and from the customer are performed, at least in part, via a customer device associated with the customer.