Smart Card Application System and Method

Abstract

A smart card application system and method are disclosed. A method includes controlling access to first restricted data stored at a database server of a transaction processing system. The first restricted data is associated with a commercial transaction. Access to the first restricted data is granted upon receipt of a first merchant code associated with a first merchant and a first user identification code associated with a smart card.

1 . A method comprising:
 controlling access to first restricted data stored at a database of a transaction processing system, the first restricted data associated with a commercial transaction;   wherein access to the first restricted data is selectively granted upon:
 receipt of a first merchant code associated with a first merchant; and 
 receipt of a first user identification code associated with a smart card. 
   
     
     
         2 . The method of  claim 1 , wherein access to the first restricted data is denied prior to receipt of the first merchant code and the first user identification code. 
     
     
         3 . The method of  claim 1 , wherein the first merchant code comprises a digital certificate. 
     
     
         4 . The method of  claim 1 , wherein the first restricted data comprises a purchasing restriction associated with the first user identification code. 
     
     
         5 . The method of  claim 4 , wherein access to the purchasing restriction is selectively granted to the first merchant upon receipt of the first merchant code and the first user identification code. 
     
     
         6 . The method of  claim 5 , wherein the first merchant limits a transaction value associated with the commercial transaction based at least in part on the purchasing restriction. 
     
     
         7 . The method of  claim 1 , further comprising granting access by a second merchant to second restricted data that is stored in the database, wherein access to the second restricted data is granted upon receipt of a second merchant code associated with the second merchant. 
     
     
         8 . The method of  claim 7 , wherein the first merchant code is uniquely associated with the first merchant and the second merchant code is uniquely associated with the second merchant, and wherein the first merchant is prevented from accessing the second restricted data. 
     
     
         9 . A transaction processing system comprising:
 a central database server comprising a processor coupled to a memory, the central database server to control access to first restricted data that is associated with a commercial transaction between a first merchant and a first user;   wherein access to the first restricted data is granted upon receipt by the central database server of:
 a first merchant identifier associated with the first merchant; and 
 a first user identification code stored at a smart card. 
   
     
     
         10 . The transaction processing system of  claim 9 , further comprising a smart card terminal, the smart card terminal to receive the first user identification code from the smart card and to transmit the first user identification code to the central database server. 
     
     
         11 . The apparatus of  claim 9 , wherein completion of the commercial transaction is denied until the first merchant identifier has been verified by the transaction processing system. 
     
     
         12 . The apparatus of  claim 9 , wherein the central database server comprises a plurality of database servers and wherein the first restricted data resides in one of the plurality of database servers. 
     
     
         13 . The apparatus of  claim 9 , wherein upon receipt by the central database server of a second merchant identifier associated with a second merchant, access to the first restricted data is denied to the second merchant. 
     
     
         14 . The apparatus of  claim 9 , wherein an access permission list stored at the smart card comprises a plurality of merchant identifiers including a second merchant identifier associated with a second merchant, wherein upon receipt of the second merchant identifier and the first user identification code, access to the first restricted data is granted to the second merchant. 
     
     
         15 . The apparatus of  claim 9 , wherein access to second restricted data is provided to the first merchant upon receipt at the central database server of a second user identification code that is associated with the second restricted data. 
     
     
         16 . A computer-readable medium storing processor-executable instructions that, when executed by a processor, cause the processor to:
 selectively grant access to restricted data stored at a database server, the restricted data associated with one or more commercial transactions between a merchant and a user, wherein access to the restricted data is granted by the processor upon receiving:   a merchant identifier associated with the merchant; and   a user identification code read from a smart card associated with the user.   
     
     
         17 . The computer-readable medium of  claim 16 , wherein access to the restricted data is restricted to a predetermined time period. 
     
     
         18 . The computer-readable medium of  claim 16 , wherein the database server is located externally to the smart card. 
     
     
         19 . The computer-readable medium of  claim 16 , wherein the merchant identifier comprises a caller identification (ID) that is associated with the merchant. 
     
     
         20 . The computer-readable medium of  claim 16 , wherein the restricted data comprises a user charge account, and wherein the one or more commercial transactions are prevented from being completed until access to the restricted data is granted to the merchant.