SYSTEM AND METHOD HAVING INCREASED SECURITY USING SIMPLE MAIL TRANSFER PROTOCOL EMAILS VERIFIED BY SPF AND DKIM PROCESSES
A system and method to facilitate transactions between a customer and a vendor utilizing an advertising campaign reaching a plurality of potential customers is provided. The method includes receiving a request from the vendor for a bulk token for use in the advertising campaign, generating the bulk token, transmitting the bulk token to the vendor to embed into the advertising campaign associated with a mailto link, the bulk token being sent as part of the advertising campaign to at least one of the plurality of potential customer, receiving a reply SMTP email from a customer from the plurality of potential customers indicating a request for a transaction responsive to the advertising campaign by selecting the mailto link, decoding the bulk token to verify the transaction, performing an SPF and DKIM validation of the received SMTP email to validate the transaction, and processing the verified and validated transaction.
Latest SWOOP IP HOLDINGS LLC Patents:
This application is a continuation of U.S. patent application Ser. No. 16/430,140 filed Jun. 3, 2019, which is a continuation of U.S. patent application Ser. No. 14/461,008 filed Aug. 15, 2014, now U.S. Pat. No. 10,311,406 issued on Jun. 4, 2019, which claims the benefit of U.S. Provisional Application No. 61/866,068, filed Aug. 15, 2013, which are incorporated by reference as if fully set forth.
FIELD OF INVENTIONThe present invention is related to e-commerce.
BACKGROUNDSystems that use email to complete financial transactions have a range of technical issues that distinguish them from the issues in technology based in web URL financial transactions. In email-based systems, such as that disclosed in U.S. Pat. No. 8,775,263 entitled System and Method for Email-Based E-Commerce, the contents of which is incorporated herein, customers receive email messages with offers and the customer may make purchases directly by generating a reply email and sending it. Upon receiving this email a system authenticates the email and processes the payment. For businesses working in email-based transactions, the goal is to make email transactions easier than web-based URL transactions. The objective is to make a streamlined experience for the end customer (the person making the purchase, donation, or sending money). Additionally, the vendor may prefer to have a tool that is simple and easy to use. Both the customer and the vendor may desire an uncomplicated experience that streamlines the process of purchasing.
Users of online services increasingly accept certain norms and expectations when using different arenas within the online experience. One of these is the divide between the email account and the website. Even if the email account is viewed in a webpage, users perceive their email client as a personal space where they read private messages and correspond in a secure way. When they visit web pages to view information, people generally understand that they are viewing information that is public. For example, if they comment on an article, video or advertisement they generally understand that comment may being viewed by others. This perception of privacy may not be founded in reality given the nature of online monitoring, but these expectations have helped from consumer habits.
In a customer's email account, they expect to receive messages from people they know and with whom they have initiated a correspondence. Generally speaking, email advertisements are seen as an unwelcome, or at least are an impersonal form of message. In the instances where advertising is requested by a customer, these are still not seen as emails one may actually respond to or be in a correspondence with. Some of these advertising emails tell the recipient not to reply. These emails may be opportunities for organizations to place URL hyperlinks that may drive the customer to their sites. Removing the consumer from the email client is a missed opportunity to immediately close a deal. A system that allows an organization to correspond with a customer through emails without having to visit a webpage would be welcome in the market place. If the customers receiving these emails have the ability to forward them onto their friends and share them with other customers, this may be a great convenience to both customers and vendors.
In the development of the email payment gateway one challenge is the identification and classification of a consumer. A consumer may have a payment method on file, or may be a new customer. A consumer without a payment method on file may first be directed to a system where that payment method may be selected. A consumer with a payment method may not need to be directed to this system. For the email commerce system, email service provider or vendor, providing this variation in behavior may require that emails be managed and often segmented between those that are registered with the email payment gateway and those consumers who are not. This organizational burden often outweighs the benefits of the tool. A system that does not require email lists to be segmented but still provides payment collection instructions for new users and uses the configured payment method for existing users would be welcome by vendors who need a more convenient way to use the email payment gateway.
Currently, a vendor using the email payment gateway requires a system that creates a distinct and separate email token for each individual customer. The information within the email correspondence is targeted to a specific user. In email marketing, this limits the behavior of all the participants.
A payment or purchase email that is designed so that an e-commerce system may identify that the email returned to the system is from either a registered customer, and therefore automatically processes a payment, or from a non-registered user, and responds to the customer in an alternative manner, would be a welcome change for a vendor and would create a streamlined user experience for customers.
SUMMARYThe system and methods described herein authenticates a customer for an e-commerce transaction through the use of bulk tokens. DKIM/SPF confirms the source of the outgoing server, thereby facilitating expanded functionality and more convenient use of the email payment gateway for customers. The e-commerce system may use bulk tokens and uses email targeted tokens and URL hyperlinks as secondary systems.
This system described herein may be accessible to vendors and customers to allow for a singular solution to the complexity of email checkout—while improving security mechanisms. The incoming email address from a purchase request may be used as the user identifier. An URL-targeted token may not be associated with a specific email address and may be forwarded and used by other members.
A method implemented in an e-commerce system to facilitate transactions between a customer and a vendor is disclosed herein. The method comprising receiving a request for a bulk token for use in an advertising campaign. Generating a bulk token, wherein the bulk token includes at least a type field and amount field, and does not include an email field. Transmitting the bulk token to a vendor server. Receiving a reply email, wherein the reply email includes the bulk token. Decoding the bulk token. The e-commerce system may further perform a Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) validation and process the transaction, on a condition that the SPF and DKIM validations are approved.
A method implemented in a vendor system for transactions between a customer and a vendor facilitated by an e-commerce system, is disclosed herein. The method including transmitting, by a transmitter, a request for a bulk token for use in an advertising campaign; receiving, by a receiver, the bulk token, wherein the bulk token includes at least a type field and amount field, and does not include an email field; transmitting, by a transmitter, a plurality of advertisement emails to a list of recipients, wherein the list of recipients includes registered and non-registered individuals, the advertisement emails including a mailto hyperlink that includes the bulk token; receiving, by the receiver, a notification message, wherein the notification message includes a confirmation that a transaction has been processed based on one of the transmitted plurality of advertisement emails; and executing an order for a customer in response to the received notification message.
When used herein, the term “email-targeted token” may refer to a token associated with a specific email address.
When used herein, the term “URL-targeted token” may refer to token not associated with a specific email address and that may be forwarded and used by other members. URL-targeted tokens may be forwarded between individuals, it may be used by any member, and there is a built-in path for nonmembers to be directed to a URL at which they may complete a transaction.
The methods and system described herein may be configured to shift the identification from using an email address embedded within the outgoing offer email to an email address verified with a SPF and DKIM. The methods and system described herein may allow for a single email token to be used for any number of recipients.
The methods and system described herein may allow for one email token to be used for both registered and non-registered users, which may reduce or eliminate the need for segmentation of lists before sending campaigns.
An email payment gateway may enable vendors to email customers. Those customers may register with the e-commerce system, thereby allowing the vendor and the customers to perform transactions via the email payment gateway. Customers that are not yet registered may receive a separate email with URL web links that drive them to a “signup page”, which permits the customers to enter the information necessary to become registered customers. In this scenario, registered customers receive emails with mailto hyperlinks allowing checkout by email. These mailto hyperlinks may be associated with products or services offered by the vendor. When the mailto hyperlink is selected, a customer device may then automatically generate a confirmation email that includes an email targeted token. To confirm the payment, this response email is sent to the e-commerce system where the email may be authenticated and the token decoded. These tokens may identify the customer via a customer email address embedded in the token. In one example, a token may be associated with the recipient email and the confirmation may compare the email address associated with the reply with an email embedded or associated with the received token.
As described in greater detail hereafter, the e-commerce system may be able to use “sharable” tokens; that is, tokens that may be shared among multiple potential customers. In this scenario, vendors may use these sharable tokens for their offers. These shareable tokens (e.g. bulk tokens) may be forwarded along to other individuals who may use the token to purchase goods. In this scenario, the token may not be targeted to an email address of the recipient. These sharable tokens are included in the offers, and the response emails from the customer(s) are authenticated through a check of DKIM-SPF.
The customer device 150 may be, for example, a cellular phone, a smartphone, a desktop computer, a laptop computer, a tablet computer, or any other appropriate computing device. The customer device 150 includes a processor 151, memory 152, a communications unit 153, a display unit 154, a web browser unit 155 that may communicate data to/from the web server module(s) in the vendor server 120 and e-commerce system 140, an URL based email client 156, and a non-URL based email client 157. The web browser unit 155 may include and/or communicate with one or more sub-modules that perform functionality such as rendering HTML (including but not limited to HTMLS), rendering raster and/or vector graphics, executing JAVASCRIPT, and/or rendering multimedia content.
Alternatively or additionally, the web browser unit 155 may implement Rich Internet Application (RIA) and/or multimedia technologies such as ADOBE FLASH and/or other technologies compatible with Internet based communications. The web browser unit 155 may implement RIA and/or multimedia technologies using one or web browser plug-in modules (e.g., ADOBE FLASH), and/or using one or more sub-modules within the web browser unit 155 itself. The web browser unit 155 may display data on one or more display devices that are included in, or connected to, the customer device 150, such as a liquid crystal display (LCD) display or monitor. The customer device 150 may receive input from the user of the customer device 150 from input devices (not depicted) that are included in, or connected to, the customer device 150, such as a keyboard, a mouse, a microphone or a touch screen, and provide data that indicates the input to the web browser unit 155.
The vendor server 120 may include an HTTP server module 121, an order execution unit 122, a processor 124, memory 125, a communications unit 126, and an email client 127.
The HTTP server module 121 provides a website that may be accessed by a customer device 150. The HTTP server module 121 may implement the HTTP protocol, and may communicate Hypertext Markup Language (HTML) pages and related data from the website to/from the customer device 150 using HTTP. The vendor server 120 may be connected to one or more private or public networks (such as the Internet), via which the HTTP server module 121 communicates with devices such as the customer device 150. The HTTP server module 121 may generate one or more web pages and may communicate the web pages to the customer device 150, and may receive responsive information from the customer device 150.
The HTTP server module 121 may be, for example, an NGINX server, an APACHE HTTP server, a SUN-ONE Web Server, a MICROSOFT INTERNET Information Services (IIS) server, and/or may be based on any other appropriate HTTP server technology. The vendor server 120 may also include one or more additional components or modules (not depicted), such as one or more load balancers, firewall devices, routers, switches, and devices that handle power backup and data redundancy.
The order execution unit 122 is configured to receive instructions from received messages and executes orders on behalf of the vendor server 1220.
The memory 125 may be configured to store information associated with e-commerce transactions. This may include inventory information, information used to generate web pages, customer information, and other e-commerce data.
The communications unit 126 may be configured to transmit/receive communications via the communication network 110 or other inputs/outputs.
The email client 127 may access and manage the vendor's email.
The e-commerce system 140 may include a token generator 141, an interfaces module 142, a purchase execution module 143, a message execution module 144, a database module 145, a token decoder 146, a DKIM/SPF Check module 147, a notification HTTP module 148, an email interface module 149, an account management unit 158 and a security module 159. While only one vendor server 120 is shown communicating with the e-commerce system 140, this is shown as an example only. The e-commerce system 140 may communicate with an internal or external email service provider 180 and an internal or external payment processing system 190. The E-commerce system 140 may communicate with multiple vendor servers 120. Similarly, vendors may register with the e-commerce system 140. The e-commerce system 140 may provide the vendor server 120 with a public key and private key to be used in token transaction in accordance with the methods described herein. When a transaction is attempted (e.g. for invoices and payments), the e-commerce system 140 decodes the token, authenticates the sender of the email, which may allow the transaction to be processed. While the e-commerce system 140 is depicted as a separate entity in
The token generator 141 may generate tokens for use in e-commerce transactions. Tokens may be encrypted or plain text strings which contain information to perform a transaction when sent to the e-commerce system(s) 140. A token may be one or multiple encrypted strings, files, passwords, cyphers, plain text or other data which may contain information used to perform or authenticate a transaction. While
-
- a) private-key: The private key provided by the e-commerce system 140.
- b) public-key: e-commerce system's 140 public key, provided by the e-commerce system 140.
- c) partner-id: The partner ID given provided by the e-commerce system 140.
- d) environment: The environment the vendor wants to generate buttons for. This distinguishes whether the token is being used in a testing environment or in the live environment (and running real transactions).
- e) config: The path to a configuration file in yml format. This may hold a default set of information, e.g., private_key, public_key, partner_id, and other information—so they don't have to be entered separately each time a token is generated. The configure field may also contain information specific to an offer or a customer if multiple tokens are being generated with similar components.
- f) type: The type of token to generate (e.g. bulk, email-targeted, etc.). There are multiple types of tokens that a token generator may generate and decode. For example, site tokens may be used for website transactions, email tokens for two-click email payments, and universal tokens for email validations.
- g) card: The card token associated with the recipient of this token. When a customer is registered with the e-commerce system 140, the vendor receives a credit card token—a unique identifier that references the specific card associated with that customer and vendor. When the vendor is generating a token to submit to e-commerce system 140, they may include the card token as a customer identifier.
- h) email: The email associated with the receipt of this token.
- i) URL: The Signup URL the recipient should go to if customer doesn't have payment information registered with e-commerce system 140.
- j) amount: The amount a user should be charged for the transaction the token is generated for.
- k) user-data: Data to pass back as a reference. This data may include custom data that the vendor may want to pass through the e-commerce system 140 and receive back when a transaction has completed. It may include an item reference number or SKU, customer address, or other piece of data that is not required by e-commerce system 140 to complete a transaction, but that the vendor wants associated with that transaction.
- l) expires: Expiration date for token, integer value of seconds since epoch.
- m) header-user-agent: The HTTP_USER_AGENT from the request header. HTTP headers are sent as part of a request from a customer's web browser unit 155 for a piece of information. These headers define the parameters that the web browser unit 155 is expecting to get back. The user-agent is the identifier of the software that is submitting the request—typically the identifier of the web browser unit 155 that is requesting the content.
- n) header-accept-language: The HTTP_ACCEPT_LANGUAGE from the request header. The accept-language is the acceptable language for the response—e.g. the language in which the web browser unit 155 is requesting the content be sent back.
- o) header-accept-charset: The HTTP_ACCEPT_CHARSET from the request header. The accept-charset is the character sets that are acceptable for the response—e.g. the character set in which the web browser unit 155 is requesting the content be sent back.
- p) ip-address: The IP address of the token recipient.
In one example, a bulk token may omit the card and email fields, allowing for the tokens to be shared. Additionally, or alternatively, a bulk token may include the card field and/or email field but the e-commerce system 140 may be configured to ignore those fields and/or other fields based on the type field.
The interfaces module 142 serves as an interface to databases within the e-commerce system 140.
The purchase execution module 143 facilitates the execution of purchases between a customer and a vendor.
The message execution module 144 is configured to analyze received messages and communicate with the token decoder 146 to determine if the received message is valid and to identify the request embedded in the message (e.g. request for purchase of goods.) If the token decoder 146 indicates the token is valid, the message execution module 144 may then access the account management unit 158 to verify a transaction.
The database module 145 serves as a database to store information that may be accessed by the e-commerce system 140.
The token decoder 146 may be configured to decode tokens received from external sources, such as a vendor server 120 or a customer device 150.
The DomainKeys Identified Mail (DKIM)/Sender Policy Framework (SPF) check module 147 serves to authenticate received emails, using DKIM and/or SPF protocols. For example, SPF allows a domain owner to add a file or record on the server that the recipient server cross-checks. Similarly DKIM may be used to embed information within the email.
The notification HTTP module 148 delivers notices of events to external systems, such as an HTTP endpoint the vendor configures to update their internal database when a transaction is executed.
An email interface module 149 may be configured to parse emails for action by the e-commerce system.
The account management unit 158 is configured to manage accounts registered with the e-commerce system 140. A customer or vendor, wishing to complete a transaction with an e-commerce system 140 may register his/her email address and payment information with the e-commerce system 140. The account management unit 158 may be configured to store a customer registry and vendor registry.
The security module 159 may be configured to perform additional security measures to prevent unauthorized access to the system or fraud.
The email service provider (ESP) 180 may be associated with the vendor server 120, the e-commerce system 140, or may be a third party entity. The email service provider 180 may be configured to provide email marketing services. The email service provider 180 may further be configured to provide tracking information showing the status of email sent to each member of an address list. The email service provider 180 may further be configured to segment an address list into interest groups or categories to send targeted information. The email service provider 180 may also parse messages based on the secondary system of email targeted tokens. The ESP 180 may also be configured to send trigger emails based on responses from the vendor or customer behavior. The email service provider 180 may further be configured to create or use templates generated by the e-commerce system 140 for sending to contacts and/or the use of templates pre-made, email service provider 180 may include a user interface that allows a user to manually adjust the template or it may be integrated with external sources (e.g. vendor server 120 or e-commerce system 140). The email service provider 180 may comprise a send engine, which allows vendors to distribute their message to the customers. The ESP 180 may further include a tool for generating mailto hyperlinks, graphic buttons, and tokens. The email service provider 180 may be configured to customize dynamically the content of emails that are sent out, to tailor personalized information and mailto hyperlinks.
The banking server 160 may be controlled by a third party system bank. The e-commerce system 140 may communicate with the banking server 160 to verify that the customer has adequate funds or credit for the requested purchase. For example, the banking server 160 may be a controlled by VISA, AMERICAN EXPRESS, MASTERCARD or any other bank or banking or financial network that a customer may use for online payment. The banking server 160 may be may be an interface for a centralized or decentralized virtual currency system or protocol such as frequent flyer miles, “reward” points, or Bitcoin.
The email-based e-commerce system 140 may allow vendors to send advertising emails with a mailto-hyperlink associated with a specific product offer and select the mailto-hyperlink and generate a response email by selecting the mailto-hyperlink. This response email contains a token and is addressed to the e-commerce system 140. Once sent, this response email confirms the customer's purchase of the product by parsing the information in the token. The e-commerce system 140 processes the payment and notifies the vendor and the customer. The e-commerce system 140 may comprises a token generator, components for processing the tokens and a components for processing the payments and a system for notifying the vendor server 120 of the transaction details.
Referring back to the example system in
While the example system shown in
The vendor server 120 may receive these tokens and integrate them into each of the emails associated with the email campaign, for example, using a button with a mailto hyperlink that includes the token (step 203). The email may include multiple products/offers; each product or offer may be associated with an embedded mailto hyperlink, or may be included as a group within one mailto hyperlink. These mailto hyperlinks may wrap, be contained or be referenced by an image such as a button depending on the receiving email client. The vendor server 120 may then send out each of the emails, including the bulk tokens, in the email campaign to the intended recipients (step 204). This list need not be segmented; registered and non-registered users get the same email.
A customer, using a customer device 150 may select a mailto hyperlink embedded in the emails, this will automatically generate a response email, that may be sent using the customer device 150 (step 205). The response email may include the bulk token and be addressed to the e-commerce system 140. As described above, the token is located in the body field, however, this is as an example only, and the token may be located in other fields of the email. To the customer, the target address of the response email may appear to be directed to the vendor server 120, however, it may be directed to the e-commerce system 140. The location of the e-commerce system may be contained in a third party such as an email service provider, email client or hosting entity. The e-commerce system 140 may receive the response email and perform a DKIM/SPF check to authenticate the sender of the email (step 206). Based on the result of the DKIM/SPF check, the e-commerce system may continue processing the email (step 207).
Whether or not the DKIM and SPF validations succeed, the e-commerce system 140 may determine that an email is received from a non-registered customer (step 701). This may be based on, for example, the email address of the customer or information embedded in the email including the token. If this is the case, the e-commerce system 140 may determine that an SPF/DKIM check is not applicable (step 702). The e-commerce system 140 may send an email to the non-registered customer with an URL hyperlink for a web checkout (step 703). The non-registered customer may select the URL hyperlink in the email which directs the non-registered customer to a webpage based on the URL (step 704). The non-registered customer may then complete a web checkout on the webpage (step 705). By completing the web checkout, the non-registered customer may be registered with the e-commerce system 140, either automatically or by selecting an option. The payment may then be process (step 706). And the order or donation may be executed (step 707).
The e-commerce system 140 performs an SPF/DKIM check on the email, to check for valid DKIM signatures and SPF records (step 708). These are used to detect whether incoming messages have been mimicked. A mimicked message may be an email message that appears to have been sent by a user, but was sent by another user. This may often be seen in spam messages appearing to be from a known source. Based on the authentication procedure, the e-commerce system 140 may confirm, reject, or accept the authentication.
In one scenario, after the SPF/DKIM check, the e-commerce system 140 may determine that a confirmation of the sender is needed (step 710). The confirmation may be requested, for example, based on user preferences, or if the e-commerce system 140 requests additional information. The e-commerce system may determine a confirmation is needed when the DKIM is Undefined and the SPF is either Pass or Undefined (step 711). In this scenario, the e-commerce system 140 may generate a confirmation email message that includes a mailto hyperlink with an email targeted token to confirm the identity via an email message (step 712). In this instance, the email targeted token may be integrated as a secondary system for a two-click experience within the email client. When the customer receives the email, they select the hyperlink and generate a response email that they send back to the e-commerce system (step 713). When the e-commerce system 140 receives the response to the confirmation email message the e-commerce system 104 authenticates the customer, based on the email address this message was sent from and the email address embedded within the email-targeted token (step 714). If this is confirmed as a YES (step 716) then the e-commerce system 140 may decode the token and processes the payment and send notifications to the customer and vendor server (step 717). The e-commerce system 140 may then execute the order (step 718). If the email targeted token arrives back at the e-commerce system 140 and is not recognized as a registered and confirmed as a NO (step 715), then the e-commerce system may send the customer an email with a URL hyperlink driving them to a signup and web checkout page. This web checkout may be located on the e-commerce system 140 or integrated with an API on the vendor server 120 or it may be on a third party system.
In another scenario, the e-commerce system 140 may reject the email (step 720). This may occur when the DKIM Fails and the SPF either comes up Failed, Undefined or Passes OR the SPF Fails and the DKIM is Undefined or Pass (step 721). In this situation, the e-commerce system 140 may not confirm the outgoing email server of the received email message. The e-commerce system 140 may generate a response email addressed to the customer that includes a URL hyperlink for the messages categorized as Reject (step 722). (
In the third scenario, the e-commerce system 140 accepts the response (step 730) email and is able to successfully authenticate a registered user. For example, this may occur when the vendor server 120 generates an email and requests a bulk token from the e-commerce system and embeds it in a mailto hyperlink in the advertising email. Each mailto hyperlink is associated with an offer. The email is sent to the list of customers. When a customer activates the mailto hyperlink a response email is generated with the bulk token and that email is addressed to the email e-commerce system 140. The customer sends the response email. Once the email is sent the DKIM/SPF process begins. If the e-commerce system 140 determines that the received email is from a registered customer and both the DKIM and SPF are present and valid, the received message may be categorized and processed as an Accept by the e-commerce system 140 (step 731). The token is decoded and the customer's payment processed (step 732) and then the order is executed (step 733).
In an alternative embodiment where any customer sending a message that is categorized as either Non-registered, Confirm or a Reject may all receive an email response that drives them to a URL. This may be a preference of the vendor or may be in response to other environmental indicators such as the rate of Confirmations, Rejections and Acceptances the system is currently detecting.
A customer, using a customer device may select a mailto hyperlink embedded in the email (step 805). This will automatically generate a response email that includes a token. The customer may then send this response email to the e-commerce system (step 806). If the user is a non-registered user, the authentication may fail. The e-commerce system 140 may then generate an email with an URL hyperlink (step 807). The e-commerce system 140 may send this email to the email address from which the previous response email was received (step 808). The customer, using a customer device 150 may select the URL hyperlink embedded in the email (step 809). This may open a web page associated with the vendor server 120 (step 810). The customer, using the customer device 150 may then checkout and signup to be a registered user of the e-commerce system 140. The e-commerce system may then process the payment (step 811). After payment is processed, the e-commerce system 140 may notify the customer and/or vendor of the successful transaction (step 812).
The web browser window may include a control area that includes a back button, forward button, refresh button, home button, and address field. The control area may also include one or more additional control elements, such as bookmark page etc. An initiator or responder using a customer device 150 may select the control elements in the control area. The selection may be performed, for example, by clicking a mouse or providing input via keyboard, touch screen, and/or other type of input device. When one of the control elements is selected, the web browser unit 155 may perform an action that corresponds to the selected element. For example, when the refresh button is selected, the web browser unit 155 may refresh the page currently viewed in the web browser window.
The e-commerce system 140 may be configured to use bulk tokens to allows an offer in an email campaign to be forwarded and shared by customers regardless of whether they are registered customers or not.
There may also be non-monetary ways to reply such as “Wrong Amount” or “Already Paid”. The customer receives the email and selects the mailto hyperlink and generates the response email that is sent back to the e-commerce system and the DKIM/SPF process begins, as shown in
The customer, using a customer device 150 may select the mailto hyperlink embedded in the email invoice (step 1908). This may automatically generate a response email which includes the token and is addressed to the e-commerce system 140. The response email may be sent to the e-commerce system 140 (step 1909). The system may then perform its SPF/DKIM check as well as token decode, and in the scenario shown in
As shown in
In a first scenario, user may request a payment (step 2403). The e-commerce system 140 designs an email request (step 2404). An URL token is embedded into the email (step 2405). The email, including the URL token, is sent to the addressed recipient of the email. The URL based token allows users to forward the email to other recipients (2408). Alternatively or additionally, the user may select the mailto hyperlink embedded in the email and send a response email to the e-commerce system 140 (Step 2407). The e-commerce system 140 may then perform the SPF/DKIM authorization, shown e.g. in
In another scenario, a user may wish to send payment. Similarly, the user may access the tool via web page 2300. The user may complete the information to send a payment (step 2411). The e-commerce system 140 may then determine how to complete the email payment (step 2412). The system may determine that the intended recipient is a non-registered customer (step 2413). In this scenario, the e-commerce system 140 may send an email to the recipients email address with an URL hyperlink (step 2414). The recipient may then select the URL hyperlink embedded in the email and access a registration web page (step 2415). The recipient may then complete a web based form and submit the form to accept payment (step 2416). This may also register the recipient with the e-commerce system 140. The e-commerce system 140 then facilitates transfer of the money (step 2417). Each party is notified of the successful transaction (step 2418).
If the customer is identified as a registered customer (step 2419) then the money may be transferred into the preferred account (step 2420).
As used herein, the term “processor” broadly refers to and is not limited to a single- or multi-core processor, a special purpose processor, a conventional processor, a Graphics Processing Unit (GPU), a digital signal processor (DSP), a plurality of microprocessors, one or more microprocessors in association with a DSP core, a controller, a microcontroller, one or more Application Specific Integrated Circuits (ASICs), one or more Field Programmable Gate Array (FPGA) circuits, any other type of integrated circuit (IC), a system-on-a-chip (SOC), and/or a state machine.
As used to herein, the term “computer-readable medium” broadly refers to and is not limited to a register, a cache memory, a ROM, a semiconductor memory device (such as a D-RAM, S-RAM, or other RAM), a magnetic medium such as a flash memory, a hard disk, a magneto-optical medium, an optical medium such as a CD-ROM, a DVDs, or BLURAY-Disc, or other type of device for electronic data storage.
Although the methods and features described above with reference to
Claims
1. A method implemented in an e-commerce system to facilitate transactions between a customer and a vendor, the method comprising:
- receiving, by a receiver, a request for a bulk token for use in an advertising campaign;
- generating, by a processor, a bulk token, wherein the bulk token includes at least a type field and amount field, and does not include an email field;
- transmitting, by a transmitter, the bulk token to a vendor server;
- receiving, by a receiver, a reply email, wherein the reply email includes the bulk token;
- decoding, by the processor, the bulk token;
- performing, by the processor, an Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) validation; and
- processing, by the processor, the transaction, on a condition that the SPF and DKIM validations are approved.
2. The method of claim 1, further comprising:
- transmitting, by the transmitter, a web checkout email message including an URL hyperlink on a condition that the SPF and DKIM validations are rejected.
3. The method of claim 1, further comprising:
- transmitting a confirmation email message including a mailto hyperlink on a condition that the SPF and DKIM validations are classified as ‘Confirm’.
4. The method of claim 1, further comprising determining whether the reply email is sent from a registered or non-registered customer based on an email address from which the reply email was sent.
5. The method of claim 4, further comprising transmitting, by the transmitter, a web checkout email message including an URL hyperlink on a condition that the reply email was sent from a non-registered customer.
6. An e-commerce system to facilitate transactions between a customer and a vendor, the e-commerce system comprising:
- a receiver configured to receive a request for a bulk token for use in an advertising campaign;
- a processor configured to generate a bulk token, wherein the bulk token includes at least a type field and amount field, and does not include an email field;
- a transmitter configured to transmit the bulk token to a vendor server;
- the receiver configured to receive a reply email, wherein the reply email includes the bulk token;
- the processor configured to decode the bulk token;
- the processor configured to perform a Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) validation; and
- the processor configured to process the financial transaction, on a condition that the SPF and DKIM validations are approved.
7. The e-commerce system of claim 6, wherein the transmitter is further configured to transmit a web checkout email message including an URL hyperlink on a condition that the SPF and DKIM validations are rejected.
8. The e-commerce system of claim 6, wherein the transmitter is further configured to transmit a confirmation email message including a mailto hyperlink on a condition that the SPF and DKIM validations are classified as ‘Confirm’.
9. The e-commerce system of claim 6, wherein the processor further configured to determine whether the reply email is sent from a registered or non-registered customer based on the email address from which the reply email was sent.
10. The e-commerce system of claim 9, wherein the transmitter is further configured to transmit a web checkout email message including an URL hyperlink on a condition that the reply email was sent from a non-registered customer.
11. A method implemented in a vendor system for transactions between a customer and a vendor facilitated by an e-commerce system, the method comprising:
- transmitting, by a transmitter, a request for a bulk token for use in an advertising campaign;
- receiving, by a receiver, the bulk token, wherein the bulk token includes at least a type field and amount field, and does not include an email field;
- transmitting, by a transmitter, a plurality of advertisement emails to a list of recipients, wherein the list of recipients includes registered and non-registered individuals, the advertisement emails including a mailto hyperlink that includes the bulk token;
- receiving, by the receiver, a notification message, wherein the notification message includes a confirmation that a transaction has been processed based on one of the transmitted plurality of advertisement emails; and
- executing an order for a customer in response to the received notification message.
12. The method of claim 11, wherein the notification message is received from the e-commerce system.
13. The method of claim 11, wherein the bulk token is received from the e-commerce system.
14. The method of claim 11, wherein the customer is different from bulk token is received from a token generator associated with the vendor system.
15. The method of claim 11, wherein an email address of the customer is different from any emails in the list of recipients.
Type: Application
Filed: Apr 23, 2021
Publication Date: Aug 5, 2021
Applicant: SWOOP IP HOLDINGS LLC (Wilmington, DE)
Inventors: James KASSEMI (Albuquerque, NM), Lawrence Glen HOLCOMB (Albuquerque, NM)
Application Number: 17/239,124