Patent Grant
8175938
The present invention relates generally to commerce automation. More particularly, the present invention relates to a method and system for facilitating merchant-initiated online payments.
Electronic commerce (“e-commerce”) has been increasing in popularity as more people are becoming accustomed to purchasing products online via the Internet. Such purchases can be facilitated through the use of a third-party, online payment service, such as the PayPal® online payment service, provided by PayPal® of San Jose, Calif. One problem with existing online payment services is that the customer must navigate away from the merchant's website to make a payment. For example, the customer must login to the payment service provider's website for each online payment the customer makes. The extra time spent logging into and navigating the payment service provider's website to make a payment is inconvenient, particularly when the purchase involves a small amount of money.
The present invention is illustrated by way of example, and not by way of limitation, in the figures of the accompanying drawings, in which like references indicate similar elements, and in which:
A method and system for facilitating merchant-initiated online payments are described. In the following description, for purposes of explanation, numerous specific details are set forth in order to provide a thorough understanding of the present invention. It will be evident, however, to one skilled in the art that the present invention may be practiced without these specific details.
The present invention provides several advantages over prior payment methods and systems. In particular, the present invention provides a customer with a simpler and faster way to transact with merchants. According to one embodiment of the present invention, a customer initiates a merchant-initiated payment relationship with a merchant by navigating a series of web pages and providing the necessary information to establish the payment relationship. Once the payment relationship is in place, the customer can purchase goods and/or services from the merchant with the ease and simplicity of a single click to authorize a payment. Other features and advantages of the present invention will be apparent from the detailed description that follows.
The merchant server 30 executes Internet server software including, but not limited to, web server software and Application Program Interface (API) server software. The web server software executing on merchant server 30 serves web pages to web clients, such as a web browser executing on client 26. The web pages provide an interface to a virtual store that customers can browse with the web browser software. While browsing the virtual store, customers can select items to purchase. The merchant server 30 temporarily stores items selected for purchase, which can be accessed for checkout by selecting a link to a virtual shopping cart.
The payment service provider's server 32 is connected to the client PC 26 and the merchant server 30 via the Internet 28. Like the merchant server 30, the payment service provider's server 32 also executes Internet server software including, but not limited to, web server software and API server software. For one embodiment of the present invention, to process a payment for the customer's selected items, the merchant server 30 interacts with the payment service provider's server 32 via an API protocol. For example, the API server software provides a programmatic interface allowing the merchant server 30 and the payment service provider's server 32 to communicate using standardized API calls. According to one embodiment of the present invention, a software development kit may be provided to each merchant that offers its customers the option to pay via the payment service provider. Consequently, before a customer enters into a payment relationship with a merchant, the merchant will generally already have established a relationship of its own with the payment service provider, and the merchant will have integrated the API functionality into its merchant server 30 to communicate with the payment service provider's server 32.
Entering into a Merchant-Initiated Payment Relationship
For purposes of the invention, a merchant is any person or entity that is set up to receive payments in exchange for goods or services. For example, a merchant may include any seller, vendor, retailer, or person initiating an auction for goods or services. Once a customer has established an account, or signed up, with the merchant 36 and has selected goods and/or services to purchase, the customer may be presented with several payment options. For example, if the customer has a pre-existing merchant-initiated payment relationship with the merchant, the customer may be presented with the option to make a payment via the payment service provider using a merchant-initiated payment, the details of which will be described in detail below. However, if the customer does not yet have an existing merchant-initiated payment relationship with the merchant, the customer will be presented with an option to establish a merchant-initiated payment relationship with the merchant by selecting a “sign-up” button or link, directing the customer to the website of the payment service provider.
For one embodiment of the present invention, the communication between the merchant server 30 and the payment service provider server 32 is via API calls with standardized variables. For example, when the customer selects to establish a merchant-initiated payment relationship with the merchant 38 by clicking a “sign-up” link on the merchant's website, an API call is made from the merchant server 30 to the payment service provider server 32, requesting the establishment of a merchant-initiated payment relationship. In connection with the request, one or more data items may be communicated to the payment service provider server 32. The data items may include, but are not limited to the following:
For one embodiment of the invention, the merchant server 30 may encrypt the data items before communicating the data items to the payment service provider's server 32. Additionally, for security reasons, the merchant server 30 may digitally sign the message associated with the API call so that the payment service provider's server 32 can verify the authenticity of the message when it is received.
After the customer has selected to establish a merchant-initiated payment relationship 38 with the merchant, the customer is redirected to a payment relationship initiation web page 40 hosted by the payment service provider's server 32. If, for example, the customer has a pre-existing account with the payment service provider, the customer may be asked to verify his identity by submitting the user credentials (e.g., username and/or password) associated with the customer's existing account. However, if the customer does not have a pre-existing account with the payment service provider, the customer may be asked to provide a username and password, as well as other information, to establish an account and to identify the customer as the holder of the account with the payment service provider.
In either case, the customer is presented with information about the merchant 42 and the terms of the merchant-initiated payment relationship agreement with the payment service provider. For example, the terms of the agreement may be directly related to the data items communicated from the merchant server 30 to the payment service provider server 32. The terms may include the name of the payee to which payments will be made on behalf of the customer and the exact nature of the goods and/or service for which the customer authorizes the payment service provider to make payments. In addition, the agreement terms may include a default maximum or minimum amount that the customer authorizes to be paid to the merchant over a particular time period. For example, the agreement underlying the payment relationship may dictate that the payment service provider, on behalf of the customer, is authorized to pay merchant-initiated payment requests for a particular dollar amount per month. If the customer agrees with the terms of the agreement, the customer may indicate so, by clicking on a particular link, or button. In response, the customer may be presented with a web page confirming the establishment of the merchant-initiated payment relationship 44.
As will be discussed in greater detail below, the customer may be presented with the option to add, delete or customize funding sources 46 for the merchant-initiated payment relationship. For example, the customer may be given the option to add a new account (e.g., bank account or credit card account) to the customer's virtual wallet. In addition, the customer may be presented with the option to customize the terms 48 of the payment relationship.
Authentication or Verification of Customer's Online Wallet Account
For one embodiment of the present invention, the merchant may process a test transaction against a customer's account (e.g., the customer's online wallet) during the establishment of the merchant-initiated payment relationship, or alternatively, at later time, for example, when the customer requests a payment. For example, for one embodiment of the invention, the merchant server 30 may communicate a test amount variable to the payment service provider server 32 along with a request to establish a merchant-initiated payment relationship. The payment service provider server 32 receives the test amount variable, and processes a verification payment using the payment service model. As a verification payment, the payment is processed for test purposes only, and not actually charged to the customer's account.
For one embodiment of the invention, the payment service provider server 32 communicates a response to the merchant server 30 indicating whether or not the test amount was successfully processed. For example, the response may be binary in nature, indicating a simple “yes” or “no.” For one embodiment of the invention, if the test amount failed for some reason, an explanation for the failure is communicated to the merchant server 30 along with the response. For example, if the test fails because the customer's account has been restricted, or if the test amount exceeds the customer's available funds, or for any other reason, an explanation indicating the reason for the failure may be included in the response to the merchant server 30.
One advantage of the account verification procedure is that it allows a merchant to receive a simple binary response, for example, success or failure. This reduces the complexity of the logic required by other more complicated fraud scoring models. Additionally, in contrast to some credit card account verification procedures, a successful verification of the test amount is not synonymous with a guarantee of payment. The verification procedure is time sensitive in the sense that success or failure depends on the status of the customer's account at the time the test is run.
API for Making Merchant-Initiated Payment Requests
After a customer has established a merchant-initiated payment relationship with a particular merchant, the customer can transact with the merchant with the simple click of a button or link. For example, once a customer has selected one or more goods and/or services to purchase from a merchant's online store, the customer may select a link to pay via the payment service provider, using the established merchant-initiated payment relationship.
When the customer selects the link to use the merchant-initiated payment method, the merchant server 30 makes an API call to the payment service provider server 32 requesting a payment 52. For one embodiment of the invention, the request may include a number of data items related to the transaction. For example, for one embodiment of the invention, the data items may include, but not be limited to:
For one embodiment of the invention, the merchant server 30 may encrypt the data items related to the transaction before communicating the data items to the payment service provider's server 32. Additionally, for security reasons, the merchant server 30 may digitally sign the message associated with the API call so that the payment service provider's server 32 can verify the authenticity of the message when it is received.
In response to the payment request, the payment service provider server 32 validates and processes the request 54. For one embodiment of the invention, the payment service provider server 32 performs several validation routines when it receives a payment request. For example, the payment service provider server 32 may validate the variables passed in by the merchant server 30 to ensure that all the required data has been received and is in the proper format. In addition, the payment service provider server 32 may ensure that the payment request is within the scope of the merchant-initiated payment relationship. For example, the payment service provider server 32 may ensure that the amount billed does not exceed a maximum amount that the customer has authorized for merchant-initiated payments under a merchant-initiated payment relationship with that particular merchant.
After validating the request, the payment service provider server 32 processes the request. For one embodiment of the invention, the payment service provider server 32 performs several routines when processing the request. For example, the payment service provider server 32 may analyze or calculate a shipping profile and/or tax profile for the transaction. Additionally, the payment service provider server 32 may perform a funding source analysis to select the proper funding source for the transaction. For example, the customer may have selected a preferred funding source for the particular merchant-initiated payment relationship. If so, the payment service provider server 32 may attempt to process the transaction using the preferred funding source before falling back to a default funding source.
For one embodiment of the invention, the payment service provider server 32 always attempts to process the transaction with funds held in an account with the payment service provider (e.g., an internally held account), and only uses a customer-selected preferred or secondary account (e.g., an externally linked account, such as a bank or credit card account) if there are insufficient funds in the internally held account. For one embodiment of the invention, the payment service provider server 32 will continue attempting to process the payment if the transaction is unsuccessful using one or more accounts. For example, the payment service provider server 32 will proceed to use accounts, in a default order, or an order specified by the customer, to attempt processing the transaction until it has been unsuccessful with every account in the customer's virtual wallet. At that time, the payment service provider server 32 will communicate a failure message to the merchant server 30 via an API call. The API call may specify the reason for the failure.
In an alternative embodiment, the payment service provider server will report a failure to the merchant server 30 after a first attempt to process the transaction has failed. The message to the merchant server 30 may indicate a reason for the failure, and the merchant server 30 may request a second attempt using a different account, or combination of accounts in the virtual wallet.
In any case, the response communicated to the merchant server 30 is synchronous in nature. In addition to a synchronous response, the payment service provider server 32 may communicate an asynchronous response. For example, an instant payment notification (IPN) may be communicated to the merchant server 30 at a later time if, for example, the synchronous response was not communicated due to a network problem, or, if there was a delay in processing the payment using a particular account.
Another advantage of the API is the ease with which it can be implemented by a third party. For example, for one embodiment of the invention, a third-party may implement the API to provide payment processing on behalf of the merchant. The API allows the third party to seamlessly integrate payment processing for the merchant with limited work and adaptation from the merchant.
Selection of the Funding Source for Payments
One of the advantages of the present invention is that the customer is provided with significant flexibility in customizing funding sources for payments on a per merchant basis. For example, for each merchant-initiated payment relationship the customer enters into, the customer has the ability to customize the funding source to be used for paying that particular merchant. This flexibility allows the customer to 1) select different funding sources for different merchants, 2) select preferred funding sources for particular merchants, and/or 3) disable funding sources for particular merchants.
For one embodiment of the invention, the customer-may be presented with a funding source customization web page, such as the example web page 60 illustrated in
The funding source customization web page 62 allows the customer to select a preferred funding source (e.g., bank, credit card, or other account) from which payments should be processed for transactions with the merchant that are associated with the merchant-initiated payment relationship. In addition, the customer may disable certain funding sources for a particular merchant-initiated payment relationship. For one embodiment of the invention, the customer is given the option of ranking or ordering all the accounts in the customer's virtual wallet. Furthermore, for one embodiment, the payment service provider server 32 may select a certain account as the default account and always attempt to use this default account first.
Customer's Customization of the Merchant Agreement
One advantage of the present invention is the control that the customer is provided in relation to customizing the payment relationship. For example, not only can the customer control the funding sources on a per merchant basis, as described above, but the customer is also given the ability to set maximum payment amounts on a per merchant basis. For example, the customer may set a maximum payment amount that a particular merchant can charge under a merchant-initiated payment relationship.
For one embodiment of the invention, the customer may be presented with a payment relationship customization web page 62, such as the example web page illustrated in
For one embodiment of the present invention, the customer is able to set maximum payment amounts on a monthly basis per merchant-initiated relationship, as illustrated in
For one embodiment of the invention, each merchant determines whether the customer should have control over setting any maximum amounts. For example, as illustrated in
Merchant Notifications
Another advantage of the present invention is the merchant notifications that are communicated asynchronously from the payment service provider's server to each merchant server 30. For example, as illustrated in
Using one of a variety of standardized protocols, the API communications module 66 receives API messages from a merchant server. The API messages may include any number of pre-defined data items, such as those in the charts shown above with respect to the description of
For example, for one embodiment of the invention the API communications module includes an authentication and encryption module 74 that may authenticate and decrypt the message. For example, the authentication and encryption module 74 may check a digital signature included with the message to determine whether the message is from a trusted source, such as a merchant server with a proper digital signature key. Next, the authentication and encryption module 74 may decrypt the message, if the merchant server that sent the message originally encrypted it.
Next, a data verification module 76 may verify the data items included in the message. For example, if the message is a request to establish a merchant-initiated payment relationship, then the data verification module 76 may verify that the request includes all of the data items required for such a request. Furthermore, the data verification module 76 may verify that the data items received with the request are of the proper type and format. For example, the data verification module 76 may check a data item to determine whether it is a number or character, and whether it has the proper length. If a data field is invalid for any reason, the API communications module 66 may reject the message and/or send a reply message notifying the sender of the original message that one or more data items were invalid.
For one embodiment of the present invention, the merchant-initiated payment relationship management module 68 manages the formation and administration of merchant-initiated payment relationships and accounts to which each relationship is linked. For example, the management module 68 processes requests to establish new merchant-initiated payment relationships, and links each established relationship to the account of a payment service provider account holder. For example, as illustrated in
In addition, for one embodiment of the invention, the management module 68 includes a funding source customization module 80 and a payment customization module 82. The funding source customization module 80 allows a user to customize a funding source for a particular merchant-initiated payment relationship. For example, for one embodiment of the invention, the funding source customization module 80 facilitates the adding and deleting of funding sources for a user account or merchant-initiated payment relationship. Furthermore, the funding source customization module 80 may facilitate the presentation of funding sources to a user, and the reception of funding source selections from the user, including a preferred funding source (e.g., a particular bank account or credit card account) selected by a user. Consequently, when a payment request is received under a particular merchant-initiated payment relationship and processed, the payment processing module 70 will attempt to use funding sources in the order specified by the user.
For one embodiment of the invention, the management module also includes a payment customization module 82. The payment customization module facilitates the customization of terms of the merchant-initiated payment relationships. For example, the payment customization module 82 provides the logic to present users with the option of setting maximum payment amounts. For one embodiment of the invention, the payment customization module customizes the payment relationship on a per merchant basis, by providing the user with the ability to set a maximum payment amount per transaction, or a maximum payment amount for a predetermined period of time (e.g., maximum total payments per a given month). Additionally, the payment customization module may provide the user with the ability to limit the total number of payment requests that are processed for a particular merchant in a given time period. For example, the user may be able to limit a merchant to making one payment request per month.
Prior to processing a payment in connection with a payment request, the payment processing module 70 may perform a verification process to verify that the user has properly authorized a payment in connection with the particular terms of a payment request. For example, the authorization verification module 84 of the payment processing module 70 may verify that the payment processor has been properly authorized by the user to make a payment in connection with the payment request. In addition to checking or verifying payment limits set by the user using the payment customization module 82, the authorization verification module 84 may verify that the particular product or service associated with the payment request received from the merchant is a product or service that has been authorized for merchant-initiated payments under the merchant-initiated payment relationship.
The exemplary computer system 300 includes a processor 302 (e.g., a central processing unit (CPU) a graphics processing unit (GPU) or both), a main memory 304 and a static memory 306, which communicate with each other via a bus 308. The computer system 300 may further include a video display unit 310 (e.g., a liquid crystal display (LCD) or a cathode ray tube (CRT)). The computer system 300 also includes an alphanumeric input device 312 (e.g., a keyboard), a cursor control device 314 (e.g., a mouse), a disk drive unit 316, a signal generation device 318 (e.g., a speaker) and a network interface device 320.
The disk drive unit 316 includes a machine-readable medium 322 on which is stored one or more sets of instructions (e.g., software 324) embodying any one or more of the methodologies or functions described herein. The software 324 may also reside, completely or at least partially, within the main memory 304 and/or within the processor 302 during execution thereof by the computer system 300, the main memory 304 and the processor 302 also constituting machine-readable media. The software 324 may further be transmitted or received over a network 326 via the network interface device 320.
While the machine-readable medium 322 is shown in an exemplary embodiment to be a single medium, the term “machine-readable medium” should be taken to include a single medium or multiple media (e.g., a centralized or distributed database, and/or associated caches and servers) that store the one or more sets of instructions. The term “machine-readable medium” shall also be taken to include any medium that is capable of storing, encoding or carrying a set of instructions for execution by the machine and that cause the machine to perform any one or more of the methodologies of the present invention. The term “machine-readable medium” shall accordingly be taken to include, but not be limited to, solid-state memories, optical and magnetic media, and carrier wave signals.
Thus, the present invention provides a method and system for facilitating merchant-initiated online payments. Accordingly, a merchant is provided with the means to “pull” funds from a customer's account with a payment service provider on an as-needed basis, as opposed to a regular schedule as with a subscription-type service. Before the merchant is allowed to “pull” funds from the customer's account, the customer will first indicate that the customer would like to establish the merchant-initiated payment relationship with the merchant, via a series of web pages hosted by the payment service provider. The ability to customize the payment relationship agreement on a per merchant basis provides the customer with a certain level of security and protection. For example, the customer is allowed to set preferred funding sources and set maximum payment amounts (e.g., maximum dollars per month, or per transaction) on a per merchant basis. This customization is advantageous to the customer because it protects the customer from potential funds overdrafts and credit limit overruns. Additionally, the customization feature is beneficial to the merchants because it limits the likelihood of disputes and chargebacks.
Thus, a method and system are provided with reference to specific exemplary embodiments. It will be evident that various modifications and changes may be made to these embodiments without departing from the broader spirit and scope of the invention. Accordingly, the specification and drawings are to be regarded in an illustrative rather than a restrictive sense.
The present application claims the benefit of the filing date of U.S. provisional patent application with Ser. No. 60/562,065, filed Apr. 13, 2004.
| Number | Name | Date | Kind |
|---|---|---|---|
| 5426281 | Abecassis | Jun 1995 | A |
| 5649118 | Carlisle et al. | Jul 1997 | A |
| 5699528 | Hogan | Dec 1997 | A |
| 5778178 | Arunachalam | Jul 1998 | A |
| 5826241 | Stein et al. | Oct 1998 | A |
| 5883810 | Franklin et al. | Mar 1999 | A |
| 5903830 | Joao et al. | May 1999 | A |
| 5903878 | Talati et al. | May 1999 | A |
| 5920847 | Kolling et al. | Jul 1999 | A |
| 5987500 | Arunachalam | Nov 1999 | A |
| 6018724 | Arent | Jan 2000 | A |
| 6047268 | Bartoli et al. | Apr 2000 | A |
| 6205433 | Boesch et al. | Mar 2001 | B1 |
| 6212556 | Arunachalam | Apr 2001 | B1 |
| 6473740 | Cockrill et al. | Oct 2002 | B2 |
| 6901387 | Wells et al. | May 2005 | B2 |
| 6934692 | Duncan | Aug 2005 | B1 |
| 7051001 | Slater | May 2006 | B1 |
| 7627526 | Williams et al. | Dec 2009 | B2 |
| 20020052841 | Guthrie et al. | May 2002 | A1 |
| 20030154139 | Woo | Aug 2003 | A1 |
| 20030163416 | Kitajima | Aug 2003 | A1 |
| 20050177510 | Hilt et al. | Aug 2005 | A1 |
| 20060036544 | Dharam | Feb 2006 | A1 |
| 20070083460 | Bachenheimer | Apr 2007 | A1 |
| 20070244809 | Meeks | Oct 2007 | A1 |
| 20080162366 | Bedier et al. | Jul 2008 | A1 |
| Number | Date | Country |
|---|---|---|
| 2360380 | Sep 2001 | GB |
| 0381240 | Feb 2000 | TW |
| 498250 | Aug 2002 | TW |
| 530230 | May 2003 | TW |
| 532022 | May 2003 | TW |
| 0544605 | Aug 2003 | TW |
| WO-9703410 | Jan 1997 | WO |
| WO-0067219 | Nov 2000 | WO |
| WO-0118720 | Mar 2001 | WO |
| WO-0184454 | Nov 2001 | WO |
| WO-2004079603 | Sep 2004 | WO |
| WO-2005101264 | Oct 2005 | WO |
| WO-2005101264 | Oct 2005 | WO |
| Number | Date | Country | |
|---|---|---|---|
| 20050228750 A1 | Oct 2005 | US |
| Number | Date | Country | |
|---|---|---|---|
| 60562065 | Apr 2004 | US |
