Method and system to facilitate securely processing a payment for an online transaction

Abstract

A computer-implemented method, to facilitate processing a payment for an online transaction, includes, responsive to receiving secure transaction data from a merchant server, using a payment processor to generate a transaction data identifier to identify the transaction data. The payment processor communicates the transaction data identifier to the merchant server. In response to receiving a request to process a payment, including the transaction data identifier, the payment processor requests user credentials from a user. Upon receiving user credentials from the user, the payment processor verifies the user credentials. The payment processor processes the payment and generates a payment identifier to identify payment data associated with the payment. The payment processor communicates the payment identifier to the merchant server. Upon receiving a request for payment data, including the payment identifier, over a secure communication channel from the merchant server, the payment processor communicates the payment data to the merchant server.

1 . A computer-implemented method to facilitate processing a payment for an online transaction, the method including:
 receiving, by a payment processor system, transaction data from a merchant server via a secure communication protocol;   generating, by the payment processor system based on the transaction data, a transaction data identifier that identifies the transaction data;   communicating, by the payment processor system via the secure communication protocol, the transaction data identifier to the merchant server;   receiving, by the payment processor system, a request to process a payment from a user device, the request including the transaction data identifier;   in response to receiving the request to process the payment, requesting, by the payment processor system, user credentials from a user of the user device to verify the identity of the user;   receiving the user credentials from the user device; and   in response to verifying the identity of the user, processing the payment using an account associated with the user credentials received from the user by sending payment from the account associated with the user credentials to a merchant account of a merchant associated with the merchant server.   
     
     
         2 . The method of  claim 1 , wherein the secure communication protocol is such that the transaction data is encrypted with a public key of a first public-private key pair associated with the payment processor system and digitally signed with a private key of a second public-private key pair associated with the merchant server and is such that the transaction data identifier is digitally signed by the payment processor system with a private key of the first public-private key pair. 
     
     
         3 . The method of  claim 2 , further comprising:
 decrypting the transaction data with the private key of the first public-private key pair; and   verifying the transaction data by authenticating the digital signature of the transaction data with the public key of the second public-private key pair.   
     
     
         4 . The method of  claim 1 , wherein the secure communication protocol is such that the transaction data and the transaction data identifier are communicated via a secure communication channel between the merchant server and the payment processor system. 
     
     
         5 . The method of  claim 1 , further comprising communicating, by the payment processor system, the transaction data to the user device in response to the transaction data identifier being included in the request received from the user device. 
     
     
         6 . The method of  claim 1 , further comprising:
 generating, by the payment processor system, a payment identifier that identifies payment data associated with the payment; and   communicating, by the payment processor system, the payment identifier to the merchant server.   
     
     
         7 . The method of  claim 6 , further comprising communicating the payment identifier to the merchant server via the secure communication protocol. 
     
     
         8 . The method of  claim 6 , further comprising:
 receiving, by the payment processor system, the payment identifier from the merchant server; and   communicating, by the payment processor system, the payment data to the merchant server in response to receiving the payment identifier from the merchant server.   
     
     
         9 . A payment processor system comprising:
 one or more computer-readable storage media configured to have instructions stored thereon; and   one or more processors communicatively coupled to the one or more computer-readable storage media and configured to, in response to execution of the instructions stored on the one or more computer-readable storage media, cause the payment processor system to perform operations, the operations comprising:
 generating, by the payment processor system based on transaction data received from a merchant server via a secure communication protocol, a transaction data identifier that identifies the transaction data; 
 communicating, by the payment processor system via the secure communication protocol, the transaction data identifier to the merchant server; 
 receiving, by the payment processor system, a request to process a payment from a user device, the request including the transaction data identifier; 
 in response to receiving from a user device a request to process a payment that includes the transaction data identifier, requesting, by the payment processor system, user credentials from a user of the user device to verify the identity of the user; and 
 in response to receiving the user credentials and verifying the identity of the user based on the user credentials, processing the payment using an account associated with the user credentials received from the user by sending payment from the account associated with the user credentials to a merchant account of a merchant associated with the merchant server. 
   
     
     
         10 . The payment processing system of  claim 9 , wherein the secure communication protocol is such that the transaction data is encrypted with a public key of a first public-private key pair associated with the payment processor system and digitally signed with a private key of a second public-private key pair associated with the merchant server and is such that the transaction data identifier is digitally signed by the payment processor system with a private key of the first public-private key pair. 
     
     
         11 . The payment processing system of  claim 10 , the operations further comprising:
 decrypting the transaction data with the private key of the first public-private key pair; and   verifying the transaction data by authenticating the digital signature of the transaction data with the public key of the second public-private key pair.   
     
     
         12 . The payment processing system of  claim 9 , wherein the secure communication protocol is such that the transaction data and the transaction data identifier are communicated via a secure communication channel between the merchant server and the payment processor system. 
     
     
         13 . The payment processing system of  claim 9 , the operations further comprising communicating, by the payment processor system, the transaction data to the user device in response to the transaction data identifier being included in the request received from the user device. 
     
     
         14 . The payment processing system of  claim 9 , the operations further comprising:
 generating, by the payment processor system, a payment identifier that identifies payment data associated with the payment; and   communicating, by the payment processor system, the payment identifier to the merchant server.   
     
     
         15 . The payment processing system of  claim 14 , the operations further comprising communicating the payment identifier to the merchant server via the secure communication protocol. 
     
     
         16 . The payment processing system of  claim 14 , the operations further comprising communicating, by the payment processor system, the payment data to the merchant server in response to receiving the payment identifier from the merchant server. 
     
     
         17 . One or more non-transitory computer-readable storage media configured to have instructions stored thereon that, in response to execution by one or more processors, cause a payment processor system to perform operations, the operations comprising:
 generating, by the payment processor system based on transaction data received from a merchant server via a secure communication protocol, a transaction data identifier that identifies the transaction data;   communicating, by the payment processor system via the secure communication protocol, the transaction data identifier to the merchant server;   receiving, by the payment processor system, a request to process a payment from a user device, the request including the transaction data identifier;   in response to receiving from a user device a request to process a payment that includes the transaction data identifier:   requesting, by the payment processor system, user credentials from a user of the user device to verify the identity of the user; and   communicating, by the payment processor system, the transaction data to the user device in response to the transaction data identifier being included in the request received from the user device; and   in response to receiving the user credentials and verifying the identity of the user based on the user credentials, processing the payment using an account associated with the user credentials received from the user by sending payment from the account associated with the user credentials to a merchant account of a merchant associated with the merchant server.   
     
     
         18 . The one or more non-transitory computer-readable storage media of  claim 17 , the operations further comprising:
 generating, by the payment processor system, a payment identifier that identifies payment data associated with the payment; and   communicating, by the payment processor system, the payment identifier to the merchant server.   
     
     
         19 . The one or more non-transitory computer-readable storage media of  claim 18 , the operations further comprising communicating the payment identifier to the merchant server via the secure communication protocol. 
     
     
         20 . The one or more non-transitory computer-readable storage media of  claim 18 , the operations further comprising communicating, by the payment processor system, the payment data to the merchant server in response to receiving the payment identifier from the merchant server.