Authenticating voice transactions using payment cards

Abstract

Systems and techniques for authenticating voice transactions using a payment card are disclosed. An example system can include a purchasing application executing on a smart digital device and a payment card. The purchasing application can receive an item purchase request for an available item via an audio input device of the smart digital device. The received item purchase request can be transmitted to an application server or the like, and in response, a list of merchants offering the available items and each merchant's price for the available item can be received. The list can be presented on a smart digital device display for selection of at least one of the merchants selling the item. The payment card can be inserted into a near field communication (NFC) field of the smart digital device to provide a signal including encrypted data.

Description

[Technical field]

[0001] (Related Applications) This application claims priority to U.S. Patent Application No. 16 / 504,987, entitled "Authentication of Voice Transactions Using Payment Cards," filed on July 8, 2019, the contents of which are incorporated herein by reference in their entirety. [Background technology]

[0002] A Smart Digital Assistant (SDA) is a device that has a speaker, a microphone, Internet access, and the ability to recognize and perform tasks in response to voice commands within the vicinity of the smart digital assistant. In response to voice commands, the SDAs can perform a variety of tasks, such as presenting news items and current weather, playing music, and communicating with friends and family.

[0003] However, while many interactions with the cloud go through SDAs equipped with voice recognition, authentication is almost nonexistent. Furthermore, while most SDAs allow guest access and attempt to distinguish the guest's voice from that of authorized users, there is no reliable authentication that an authorized user has provided a command recognized by the SDA.

[0004] It would be useful if a user could authenticate themselves to an SDA without having to provide unfettered access to their account and without having to speak a password out loud or have a similarly inconvenient way of authenticating themselves to the SDA. Summary of the Invention [Means for solving the problem]

[0005] An example of a disclosed method includes, in response to receiving, via the smart digital device, a voice request for the purchase of the requested item, providing, via an output device of the smart digital device, a list of available items for purchase that substantially match the requested item. The output device of the smart digital device is at least one of a display or a speaker. The list of available items for purchase is output via the output device. An item to be purchased is selected from the list of available items for purchase. Encrypted data from a payment card may be received via a near field communication interface of the smart digital device. The encrypted data is generated by a cryptographic algorithm using an encryption key. The encryption key may be stored in a memory of the payment card or may be generated based on a master key and a counter value stored in the memory of the payment card. The encrypted data is forwarded in a request to an application server. The request includes a request to confirm that the encrypted data is associated with a payment card authorized to purchase the selected item to be purchased. A confirmation that a purchase transaction for the selected item to be purchased has been authorized may be received. An indication of receipt of the purchase transaction confirmation may be output on the output device.

[0006] Another method is disclosed in which a request for an item for purchase is received from a smart digital device. A query may be generated to locate the item for purchase at a plurality of merchant websites. The query may be sent to the plurality of merchant websites. A merchant response is received from each merchant website in response to the query. Each merchant website responds with a merchant response including the price of the purchase item offered for sale by the respective merchant website. The merchant responses are aggregated into an aggregated list of the purchase items. The aggregated list is sent to the smart digital device. A verification request is received from the smart digital device. The verification request may include the purchase item selected from the aggregated list and an authentication instruction including encrypted data generated by the payment card based on an encryption algorithm and an encryption key. The encryption key may be generated based on a master key and a counter value stored in a memory of the payment card. Upon successful verification of the payment card, a purchase transaction is completed with the respective merchant for the purchase item selected from the aggregated list.

[0007] Also disclosed is a system including a payment card and a purchasing application stored and executable on the smart digital device. The purchasing application may include programming code that, when executed, provides a user interface. The payment card may include logic circuitry, a payment card near field communication device, and a payment card memory device. The payment card memory device stores a payment card identifier, a master key, and a counter value. The purchasing application is operable to perform further functions, including receiving an item purchase request including a purchasable item. The purchasing application transmits the received item purchase request for confirmation and receives a list of merchants offering the purchasable item. The purchasing application presents the list of merchants in a user interface and receives, via the user interface, a selection of at least one of the merchants selling the purchasable item. A prompt is presented via the user interface requesting insertion of the payment card in proximity to the near field communication device of the smart digital device. A payment card signal may be received that includes encrypted data generated by the payment card using a cryptographic algorithm and a cryptographic key. The encrypted data includes a payment card identifier, and the cryptographic key may be generated based on a master key and a counter value stored in the payment card memory device. A confirmation request including the payment card identifier may be transmitted for authentication. In response to the authentication, a purchase transaction confirmation may be received. An indication of receipt of the purchase transaction confirmation may be output via a user interface. [Brief description of the drawings]

[0008] [Figure 1] 1 illustrates an example implementation of a system for authenticating a voice-based transaction as described herein. [Figure 2A] FIG. 1 shows a schematic diagram of an exemplary payment card having a fixed chip suitable for use with the systems and processes described herein. [Figure 2B] 2B shows a more detailed view of an example of a fixed chip of the example payment card of FIG. 2A. [Diagram 3]2A and 2B show an example of data flow for authorizing a voice-based transaction in a system, such as the exemplary system shown in FIG. 1 and the payment card details of FIGS. 2A and 2B. [Figure 4] 2C is a flow chart of another example of authenticating a voice-based transaction in a system, such as the example system shown in FIG. 1 and the payment card details of FIGS. 2A and 2B. [Diagram 5] An example of a computer architecture suitable for implementing the examples shown in FIGS. 1-4 is shown. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] The examples disclosed herein provide authentication techniques and apparatus that allow for authentication of purchase requests by audio input to a smart digital device. By inserting a payment card as described herein within range of a near field communication device connected to the smart digital device, the authenticity of the voice input as an authorized user of the payment card can be verified. As a result of the techniques and apparatus described herein, audio input purchase requests are more secure and eliminate the deficiencies of conventional smart digital assistant devices.

[0010] With general reference to the notation and nomenclature used herein, one or more portions of the following detailed description may be presented in terms of program procedures executed on a computer or network of computers. These procedure descriptions and representations are used by those skilled in the art to most effectively convey the substance of their work to others skilled in the art. A procedure is herein, and generally, conceived to be a self-consistent sequence of operations leading to a desired result. These operations are operations requiring physical manipulations of physical quantities. Usually, though not necessarily, these quantities take the form of electrical, magnetic, or optical signals capable of being stored, transferred, combined, compared, and otherwise manipulated. It is sometimes convenient, primarily for reasons of common usage, to refer to these signals as bits, values, elements, symbols, characters, terms, numbers, or the like. It should be noted, however, that all of these and similar terms are to be associated with the appropriate physical quantities and are merely convenient labels applied to these quantities.

[0011] Further, these operations are often referred to in terms such as adding or comparing, which are commonly associated with mental operations performed by a human operator. However, no such capability of a human operator is necessary, or desirable in most cases, in any of the operations described herein forming part of one or more of the embodiments. Rather, these operations are machine operations. Useful machines for performing the operations of the various embodiments include digital computers selectively activated or configured by a computer program stored therein and written in accordance with the teachings herein, and / or include apparatus or digital computers specially constructed for the required purposes. Various embodiments also relate to apparatus or systems for performing these operations. These apparatus may be specially constructed for the required purposes. The required structure for these various machines will be apparent from the description given.

[0012] Reference is now made to the drawings, wherein like reference numerals are used to refer to like elements throughout. In the following description, for purposes of explanation, numerous specific details are set forth in order to provide a thorough understanding thereof. It will be apparent, however, that the novel embodiments may be practiced without these specific details. In other instances, well-known structures and devices are shown in block diagram form in order to facilitate the description. The intention is to cover all modifications, equivalents, and alternatives within the scope of the claims.

[0013] 1 is a schematic diagram of an example system 100 consistent with disclosed examples. System 100 can include a data network 140, a service provider 120, a smart digital device 110, a payment card 105, and one or more merchant servers 131, 133, 135.

[0014] The payment card 105 may include logic circuitry, a payment card near field communication (NFC) device, and a memory device (as shown in more detail with reference to Figures 2A and 2B). In one example, the payment card 105 may lack a permanent power source, such as a battery.

[0015] The data network 140 can be operable to exchange data and communications. For example, the data network 140 can be at least one of a cellular network, a wide area network, the Internet, or a combination of various networks that facilitate the exchange of data and communications between the smart digital device 110, the merchant servers 131, 133, 135, and the service provider 120.

[0016] The service provider 120 may include a provider network 123, an authentication server 126, an application server 125, a temporary data storage 127, and a provider data storage 128. The service provider 120 servers and the provider network 123 may be connected to the smart digital device 110 via a data network 140. The authentication server 126 and the application server 125 may be connected to the smart digital device 110 via the data network 140. In a particular example, the service provider 120 may be a financial institution. In other examples, the service provider 120 may be a third party entity or the like that maintains a trust relationship or other form of trust that allows the third party entity to authenticate the payment card 105 to the smart digital device 110. The temporary data storage 127 may be connected to the application server 125 and may be operable to store, for example, item purchase requests and other information for a predetermined time or until the occurrence of an event, such as purchase or transaction cancellation. For example, the application server 125 may be operable to provide an instance of a purchasing application (e.g., 114) to a smart digital device (e.g., 110) that requests a copy of the purchasing application. The instance of the purchasing application (e.g., 114) may be stored in the provider data storage 128 of the service provider 120 or in other storage device (not shown).

[0017] The merchant servers 131, 133, 135 may be provided by a merchant or a third party on behalf of a merchant and may be operable to provide items and services for purchase by a user via online transactions with a device such as, for example, a smart digital device 110 or other computing device such as, for example, a smartphone, tablet, computer, etc.

[0018] The smart digital device 110 represents any type of network-enabled smart digital device, such as Amazon Alexa®, Google Home®, etc. The smart digital device 110 includes a smart digital device (SDD) processor 113, an audio input device 103 (e.g., a microphone, etc.), an input / output device 119 (e.g., a touch screen display, a keyboard, a keypad, a non-touch display, a button, a gesture-recognition-enabled device, a line-of-sight reader, a camera, a combination of devices, etc.), a speaker 108, a smart digital device memory 111 that stores programming code, a communication system 115, a communication interface (Inter) 112, and a near-field communication device 150 / 150A. The communication interface 112 can be operable to provide a communication interface for the near-field communication device 150 / 150A, or may include a near-field communication device communication interface.

[0019] The audio input device 103 may be, for example, a microphone or other device that allows for the conversion of sound or audio into an electrical signal. For example, the audio input device 103 may be a micro-electro-mechanical transducer device, etc. The speaker 108 may be an audio output device that outputs audio generated by the smart digital device 110 (e.g., music, talk show content, movie audio, synthetic human speech (e.g., in response to questions posed to the smart digital device by a user using speech or text input via the input / output device 119), prompts for input, questions for further information or confirmation, etc.

[0020] The communication system 115 may include various radio frequency and / or optical receivers and / or transmitters, for example, under the control of the processor 113. For example, the communication system 115 may include a Wi-Fi transceiver (i.e., 802.11x), a Bluetooth transceiver, a cellular transceiver, or similar radio frequency transceiver. Additionally, the communication system may include an optical receiver and / or transmitter, for example, an infrared (IR) frequency photodetector, or the like. The communication system 115 may be connected to one or more antennas (not shown) that enable reception and transmission of data by and from the smart digital device 110. The communication system 115 may be connected to the communication interface 112.

[0021] The communications interface 112 may include couplings for connecting devices and providing power to the smart digital appliance 110 via a Universal Serial Bus (USB) connector, micro USB, or other standard or proprietary connector.

[0022] The near field communication device 150 can be connected to the smart digital device 110 using a wired or wireless connection. For example, the near field communication device 150 can be connected to the communication interface 112 via a wired connection. The communication interface 112 can be connected to a processor 113 that can determine how to route data or power received via the communication interface 112 connection. Alternatively, if the near field communication device 150 is connected to the smart digital device 110 via a wireless connection, the communication system 115 can pair with the near field communication device 150 using a Bluetooth transceiver or the like. Alternatively, the smart digital device 110 can include a near field communication device (e.g., 150A) that is integrated within the smart digital device 110 and does not require equipment (e.g., 150) external to the smart digital device.

[0023] In one example, the smart digital device memory 111 of the smart digital device 110, in addition to storing programming code, includes an instance of a purchasing application 114. The purchasing application 114 may be a computer application that, when executed by the processor 113, may represent any type of computer application that allows a user to provide payment information and complete a transaction. For example, the purchasing application 114 may enable a user of the smart digital device 110 to select and purchase goods, products, and / or services via the communication system 115. In one embodiment, the purchasing application 114 may be a web-based application accessed using a web browser (not shown). For example, in a web-based application, the web browser may access a merchant's website and / or a progressive web application provided by the merchant.

[0024] As shown, the purchasing application 114 can utilize a transaction identifier 116. As described in more detail herein, the purchasing application 114 can be software, hardware, and / or a combination of software and hardware that allows a user to pay for a transaction initiated by voice input into the smart digital device 110. The transaction identifier 116 can be a unique identifier associated with a given transaction performed with a merchant and / or a merchant server (e.g., 131, 133, or 135) associated with the merchant. For example, the transaction identifier 116 can be a unique alphanumeric identifier, a unique session alphanumeric identifier, a file, etc. The transaction identifier 116 can be generated by the purchasing application 114.

[0025] The purchasing application 114 may include programming code that provides a user interface 118. When the programming code that provides the user interface 118 is executed, the user interface 118 is operable to receive input from, and provide output to, the input / output device 119. For example, inputs and outputs related to selecting and purchasing goods, products, and / or services may be received by, and output from, the user interface 118.

[0026] In a simple operational example, a user (e.g., 107) can use a purchasing application 114 to select one or more items and / or services from a list or menu for purchase via audio input (e.g., 109) or touch (not shown) to an input / output device 119. Once the user has selected the desired items and / or services, the user can encounter an interface via the purchasing application 114 for completing the transaction (e.g., a cart page, a checkout page, etc.). Advantageously, the purchasing application 114 can facilitate authentication of the audio input 109 (e.g., payment) using a payment card 105. For example, the purchasing application 114 can output a prompt on a display device to complete authentication of the audio input 109. For example, a prompt, e.g., an audio prompt, a text prompt presented on a display screen, a vibration, etc., may instruct the user to tap the smart digital device 110 with the payment card 105 or move the payment card 105 in close proximity to the smart digital device 110, thereby bringing the payment card 105 into sufficient proximity with the near field communication field 157 of the near field communication device 150 / 150A of the smart digital device 110 to enable data transfer (e.g., NFC data transfer, Bluetooth data transfer, etc.) between the chip 106 of the payment card 105 and the near field communication device 150 / 150A of the smart digital device 110. In some examples, the smart digital device 110 can activate the near field communication device 150 / 150A via an application program interface (API). In one example, the smart digital device 110 activates the near field communication device 150 / 150A via an API call in response to a user 107 tapping or placing a payment card 105 in proximity to the near field communication device 150 / 150A of the smart digital device 110.Additionally and / or alternatively, the smart digital device 110 may wake up the near field communication device 150 / 150A based on periodically polling the near field communication device 150 / 150A after receiving an audio input 109 or after generating a prompt to place a payment card within range of the near field communication device 150 / 150A. Additional details and examples are described with reference to Figures 3 and 4.

[0027] It may be useful to provide details of a payment card by discussing FIGS. 2A and 2B. In the example of FIGS. 2A and 2B, payment card 200 may comprise a dual interface contactless payment card. For example, payment card 200 may include a substrate 210, which may include a single layer or one or more laminated layers of plastic, metal, and other materials. Exemplary substrate materials include polyvinyl chloride, polyvinyl chloride acetate, acrylonitrile butadiene styrene, polycarbonate, polyester, anodized titanium, palladium, gold, carbon, paper, and biodegradable materials. In some examples, payment card 200 may have physical characteristics that conform to the ID-1 format of the ISO / IEC 7810 standard, and the payment card may otherwise conform to the ISO / IEC 14443 standard. However, it will be understood that payment card 200 according to the present disclosure may have a variety of characteristics, and the present disclosure does not require that the payment card be implemented in a payment card.

[0028] The payment card 200 may also include identification information 215 displayed on the front and / or back of the card that identifies an authorized user of the payment card 200, a service provider name 205, and a contact pad 220. The contact pad 220 may be configured to establish contact with other communication devices, such as a user device, a smart phone, a laptop, desktop or tablet computer, etc. The payment card 200 may include processing circuitry, an antenna, and other components, which are not shown in FIG. 2A but are described in more detail with reference to FIG. 2B. These components may be located behind the contact pad 220 or elsewhere on the substrate 2101. The payment card 200 may also include a magnetic strip or tape, which may be located on the back of the card (not shown).

[0029] 2B, below (and connected to) the contact pads 220 may be processing circuitry 225 for processing and storing information, which includes a microprocessor 230 and memory 235. It will be appreciated that processing circuitry 225 may house additional components, including processors, memory, error and parity / CRC checkers, data encoders, anti-collision algorithms, controllers, command decoders, security primitives, and anti-tamper hardware, as necessary to perform the functions described herein.

[0030] The memory 235 may be a read-only memory, a write-once read multiple memory, or a read / write memory, e.g., RAM, ROM, EEPROM, and the payment card 200 may include one or more of these memories. Read-only memory may be factory programmable as read-only or one-time programmable. One-time programmability offers the opportunity to write once and then read many times. Write-once read multiple memory is programmable at some point after the memory chip leaves the factory. Once the memory 235 is programmed, it cannot be rewritten, but it can be read many times.

[0031] The memory 235 may be operable to store one or more applets 240, one or more counters 245, and a payment card account identifier 250. The one or more applets 240 may each be associated with one or more service provider applications (e.g., provided by the service provider 120 of FIG. 1) and include one or more software applications operable to run, for example, a Java Card applet, on one or more payment cards. According to one example, each applet may store a username of a user associated with a payment card account for accessing the associated service provider application.

[0032] The one or more counters 245 may include a numeric counter sufficient to store an integer. For example, the payment card 200 may include a username 242, an encryption key 243, and counter 245 information that may be transformed by the microprocessor 230 using a cryptographic algorithm to generate the encryption key 243, including a dynamic password, that may be used by the service provider's authentication server 126 of FIG. 1 to authenticate a transaction via the smart digital device 110. For example, the microprocessor 230 may use values ​​from the payment card account identifier 250, the encryption key 243, and the counter 245 to generate an encryption key, including a dynamic password, that may be used with the username in the cryptographic processing functions provided by the microprocessor 230 to authenticate a purchase transaction made via the smart digital device 110. Examples of encryption key generation techniques are described in U.S. Patent Application Serial No. 16 / 205,119, filed November 29, 2018, the entire contents of which are incorporated herein by reference in their entirety. In one example, the dynamic password is associated with the counter. In such an example, the dynamic password advantageously reflects the cardholder's previous behavior. For example, a counter-based dynamic password can reflect the number of times a user has used a payment card to obtain a particular service from the service provider 120, which is a knowledge factor that is virtually impossible for a malicious third party to ascertain. For example, the number of times a payment card has been used may be stored in a secure memory of the payment card as the value of a counter 245, and the counter value can be incremented each time the payment card is used in a transaction.

[0033] The payment card account identifier 250 may include a unique alphanumeric identifier assigned to the user of the payment card 200 and / or one or more keys that can be used together to distinguish the user of the payment card from other payment card users. In some examples, the payment card account identifier 250 may include information that identifies both the customer and the account assigned to the customer, and can further identify the payment card associated with the customer's account. According to some embodiments, the username 242 can be derived from one or more combinations of the payment card account identifier 250 and / or one or more encryption keys 243.

[0034] Although the microprocessor 230 and memory 235 elements in the above examples have been described with reference to the contact pad 220, the disclosure is not so limited, and it will be appreciated that these elements may be implemented outside of the contact pad 220 or as additional elements in addition to the microprocessor 230 and memory 235 elements located within the contact pad 220.

[0035] In some examples, the payment card 200 may include one or more antennas 255. The one or more antennas may be located within the payment card 200 around the processing circuitry of the contact pad 220. For example, the one or more antennas 255 may be integrated with the circuitry 225, or the one or more antennas may be used with an external booster coil. As another example, the one or more antennas may be external to the contact pad 220 and the circuitry 225. The circuitry 225 of the payment card 200 may include one or more communication interfaces 237, such as a radio frequency identification (RFID) chip 238, operable to communicate with a smart digital device (e.g., 110 of FIG. 1) in compliance with ISO / IEC 14443, via one or more short-range wireless communication protocols, such as near field communication (NFC), EMV standards, etc. In some examples, the RFID chip 238 may be referred to as a payment card near field communication device. Although NFC is used as an exemplary communication protocol, the present disclosure is equally applicable to other types of wireless communication, such as EMV standards, Bluetooth, and / or Wi-Fi.

[0036] As described above, the payment card 200 may be built on a software platform operable on a smart card or other device, such as, for example, JavaCard, that includes program code, processing power, and memory. In some examples, an applet may be added to the contactless payment card to generate one-time passwords (OTPs) for multi-factor authentication (MFA) in various mobile application-type use cases. The applet 240 may be configured to generate a Near Field Communication (NDEF) message including a cryptographically secure OTP encoded as an NDEF text tag in response to one or more requests, such as a Near Field Data Exchange (NDEF) request, from a reader, such as an NFC reader. The contactless payment card's functionality is thus configured to authenticate voice purchase requests made by users authorized to make the requested purchases and complete electronic transactions, as described below with reference to Figures 3 and 4.

[0037] FIG. 3 illustrates an example of data flow for authorizing a voice-based transaction in a system, such as the example system shown in FIG.

[0038] The exchange of data in the data flow of system 300 may occur between several devices and / or components, as described with reference to Figures 1, 2A, and 2B. Thus, the description of Figure 3 may refer to the devices and components shown in Figures 1-2B. In the example of Figure 3, each of smart digital device 310, payment card 320, data network 330, merchant website or portal 335, application server 340, and authentication server 350 may be connected to exchange data to facilitate the completion of an authenticated purchase transaction with merchant website or portal 335.

[0039] For example, the smart digital device 310 includes a smart digital device processor (not shown in this example) that may be similar to the smart digital device processor 113 described above with reference to FIG. 1. At A, an audio input 302 can be generated by a user (e.g., 107 in FIG. 1). The smart digital device processor can receive the audio input 302 via an audio input device of the smart digital device. At B, the audio input 302 can be used to generate an item purchase request that can include an available item. For example, the user 107 in FIG. 1 can speak the phrase "Order a 40 pound bag of [brand name] dog food" as the audio input 302 to the smart digital device 310. A voice input device such as a microphone receives the audio input 302. The audio input 302 can be processed using, for example, known natural language speech-to-text conversion, natural language processing, or the like. For example, a voice recognition system such as Cortana®, Siri®, and Alexa® or other natural language processing application can provide an appropriate voice input conversion to generate the item purchase request 312.

[0040] The processor of the smart digital device 310 transmits the received item purchase request 312 to the application server 340 over the data network 330. At C, the application server 340 can process the received item purchase request 312 to generate a search query. In a detailed example, in response to receiving the item purchase request from the smart digital device over the data network, the application server 340 can generate a query to locate the item to be purchased at a number of merchant websites (or merchant portals) 335. The merchant websites or portals 335 can be connected to the application server over the data network 330. For example, the application server 340 can be operative to access the merchant websites 335 over the data network 330 and can receive results (D) of a search 342 with the generated query for the item included in the item purchase request. For example, in response to the query, the application server 340 can receive a merchant response to the query from an individual merchant server of the multiple merchant servers. For example, the individual merchant server can respond with a merchant response including the price of the item to be purchased offered for sale by the individual merchant server. The merchant website or portal 335 can return search results to the application server as items found at various merchants 334. The application server 340 can aggregate the merchant responses by populating an aggregated list of purchase items at D, for example according to the merchant identifier, payment card identifier, etc. in the item purchase request. The application server 340 sends the populated aggregated list of merchants 344 to the smart digital device 310.

[0041] At E, the smart digital device 310 can receive a result from the application server 340 over the data network indicating the number of vendors offering the purchasable item. In response, the application server 340 can be operable to generate an aggregated list of vendors 344 that can offer the purchasable item using the items found on the various vendor websites or portals. In one example, the list of vendors 344 can include each vendor's price for the purchasable item. In another example, the list of vendors 344 can include the vendor name and the price for the purchasable item from the vendor.

[0042] The smart digital device 310 receives the merchant list 344 from the application server 340 at E. The smart digital device processor can present the merchant list 344 on a display device of the smart digital device 310 (F). Alternatively or additionally, the application server 340 can have information related to the mobile device, such as the mobile device phone number, or other information related to the mobile device. Using the information related to the mobile device, the application server can send an SMS message or cause an application, such as an instance of a purchasing application 114 executing on the mobile device, to present the merchant list 344 on a display device of the mobile device (not shown). In one example, the mobile device can connect to the smart digital device 310 via, for example, Bluetooth or Wi-Fi, and provide commands to the smart digital device 310.

[0043] In this example, at F, the presented merchant list 344 may be accompanied by a prompt for the user to insert a payment card to authenticate and approve the purchase transaction. Alternatively or additionally, in response to the presentation of the merchant list, the smart digital device processor may receive a selection of at least one of the merchants selling the purchasable item via voice input received by a microphone or through other user input device. The received selection indicates that the user desires to complete a purchase transaction for the purchasable item from the selected merchant. In response to the selection, a prompt requesting the insertion of a payment card into the near field communication device of the smart digital device may be presented on the display device or output as a synthesized audio prompt via the speaker. For example, the smart digital device processor may have a number of predefined prompts or commands stored in memory that can be output to the display device, the speaker, or both.

[0044] In response to the prompt, the user can bring the payment card 320 within range of the electric field of an NFC device inside or connected to the smart digital device 310 (e.g., by tapping the payment card 320 against or near the smart digital device 310). The payment card 320 can, for example, be tapped against the smart digital device 310 or placed in sufficient proximity to the smart digital device 310. In one example, the smart digital device can receive a payment card signal 325 from the payment card. For example, the payment card 320 can detect the electric field and respond by emitting a payment card signal 325 via a payment card near field communication device (not shown in this example). The payment card signal 325 can include encrypted data or information. For example, the payment card 320 can transmit the payment card signal 325 to the smart digital device 310 in response to the detected electric field, including a payment card identifier associated with the issuer of the payment card 320 and an account associated with the payment card 320. The payment card identifier may be encrypted by a cryptographic algorithm executed on the payment card 320. The issuer of the payment card 320 may be a service provider (e.g., service provider 120 of FIG. 1), an entity associated with the service provider, etc.

[0045] At G, a payment card signal 325 can be received via near field communication of the smart digital device 310. In one example, the payment card signal 325 may include encrypted data generated by the payment card using a cryptographic algorithm and a cryptographic key. The cryptographic key stored in a memory (not shown in this example) of the payment card 320 may be generated by a logic circuit or processor within the payment card 320 based on, for example, a master key and a counter value (e.g., obtained from the counter 245 of FIG. 2B) stored in the memory of the payment card 320. For example, the payment card 320 is operable to detect an electric field output by a near field communication device (not shown in this example) of the smart digital device 310. The logic circuit or processor of the payment card 320 can retrieve a payment card identifier from a memory device of the payment card 320. The logic circuit using a cryptographic algorithm such as SHA-264 used in payment card technology can encrypt the payment card identifier and generate a payment card signal including the encrypted payment card identifier.

[0046] The verification request 314 may be generated by the processor or logic of the payment card 320 (H). The verification request 314 may include the payment card identifier, the generated encryption key, and other information, such as encryption data, if appropriate. For example, the verification request 314 may include a vendor from an aggregated vendor list, among other information selections of the item for purchase, and an authentication instruction. The authentication instruction may include, for example, the payment card identifier and an indication (e.g., bit settings, code values, etc.) that the payment card identifier was obtained in response to the insertion of the payment card into a near field wireless communication field associated with the smart digital device 310. In another example, the encryption data may be generated by the payment card based on a cryptographic algorithm and a diversified key. For example, the diversified key stored in the memory of the payment card 320 and in the logic or processor within the payment card may generate the diversified key based on a master key and a counter value stored in the memory of the payment card 320. The verification request 314 may be transmitted to the authentication server 350 for authentication of the payment card 320.

[0047] In one example, which may be optional, at HH, instead of the confirmation request 314 being sent directly to the authentication server 350, the confirmation request 314 may be sent to the application server 340. The application server 340 may be operable to process the confirmation request 314. For example, the application server 340 may be operable to extract the encrypted authentication indication from the confirmation request 314 and forward the encrypted authentication indication extracted from the confirmation request 314 to the authentication server 350. The authentication server 350 may process the authentication information, and in response, the authentication server 350 may forward an authorization indication 315 to the application server 340 indicating that the payment card number is authorized to complete the purchase transaction.

[0048] The authentication server 350 is operable to perform various functions, including authentication functions. For example, at I, the authentication server 350 is operable to receive a verification request 314. In this example, the verification request 314 may include an item for purchase selected from an aggregated merchant list and an authentication instruction that validates that the payment card is linked to the item purchase request. Of course, the verification request 314 may include the authentication instruction, additional information such as the name of an authorized user of the payment card, an encryption key, and some data regarding the merchant and the item to be purchased. The authentication instruction may include encrypted data generated by the payment card based on an encryption algorithm and a variant key, which is stored in the memory of the payment card and is generated based on a master key and a counter value stored in the memory of the payment card 320. For example, the authentication instruction may be encrypted before being included in the verification request 314.

[0049] The smart digital device 310 may receive a purchase transaction confirmation 352 from the authentication server 350. The purchase transaction confirmation 352 indicates successful validation of the payment card 320 using the information in the received validation request 314. In response to receipt of the purchase transaction confirmation 352 by the smart digital device 310, a purchase transaction may be completed (i.e., completed transaction 353) (J) with an individual merchant via a selected merchant website or portal 355 for the item for purchase selected from the aggregated list.

[0050] Additionally, in response to receipt of the purchase transaction confirmation 352 by the smart digital device 310, the smart digital device 310 may output an indication of receipt of the purchase transaction confirmation 352 via an output device, such as a display device, a speaker, or both, of the smart digital device 310 (K).

[0051] In other examples, a user (e.g., 107 in FIG. 1) may initiate multiple item purchase requests for different or similar items. The system 300 can, for example, queue the multiple purchase requests for later action by an authorized user of a payment card. Such an example is where a user only needs to authorize one purchase for multiple purchases made at different times throughout a period of time (e.g., an hour, a day, a week, etc.). A process for managing and acting on multiple purchase requests is described with reference to FIG. 4.

[0052] Process 400 can be performed by a system such as system 100 shown and described with reference to Figure 1. For example, in process 400, an application server (e.g., 125) can cooperate with a temporary data storage (e.g., temporary data storage 127 of Figure 1) to perform multiple functions.

[0053] The application server (e.g., 125 of FIG. 1 or 340 of FIG. 3) may be operable to perform additional functions (e.g., process 400 shown in FIG. 4). For example, at 410, the application server 340 may be operable to aggregate the received item purchase request with other item purchase requests in a group of item purchase requests. The group of item purchase requests may be stored (420) in a temporary data storage (e.g., temporary data storage 127 of FIG. 1). In an example where a group of item purchase requests is received, the application server (e.g., 125) may forward a list of all items in the group of item purchase requests to the smart digital device (e.g., 110 of FIG. 1). In response to forwarding the list, at 430, the application server may receive from the smart digital device a request to complete a purchase transaction for at least one item purchase request in the group of item purchase requests received by the application server. The request to complete a purchase transaction may be sent, for example, as part of a confirmation request 314 of FIG. 3 or as part of a completed transaction of FIG. 3. At 440, a list of all items in the group of item purchase requests may be transferred to the smart digital device.

[0054] The smart digital device may also cooperate with the application server to perform functions. For example, in response to receiving a list of all items in a group of items in a purchase request, the list of all items may be presented on a display device of the smart digital device (450). The smart digital device may receive input selecting one or more of the items in the list for purchase. In response to selecting one or more of the items in the list to complete a purchase transaction, a prompt may be generated by the smart digital device to introduce a payment card into the field of a near field communication device of the smart device (460). When the payment card is introduced into the field of the near field communication device of the smart device, the smart digital device may receive an encrypted payment card identifier via the near field communication device (470). Using the encrypted payment card identifier, the smart digital device may request authorization from the application server to complete the purchase transaction for the selected one or more items (480).

[0055] 5 illustrates an example of an exemplary computer architecture 500 suitable for implementing the various examples described above. In one example, computer architecture 500 may incorporate elements that may typically be used to implement a server or network platform when appropriately programmed as part of system 100. In another example, computer architecture 500 may incorporate any elements that may typically be used to implement a smart digital or computing device that may be implemented as part of system 100.

[0056] Computer architecture 500 may include various common computer elements, such as one or more processors, multi-core processors, co-processors, memory units, chipsets, controllers, peripherals, interfaces, oscillators, timing devices, video cards, audio cards, multimedia input / output (I / O) components, power supplies, etc. However, these examples are not limited to implementation by computer architecture 500.

[0057] 5, computer architecture 500 includes a processing unit 504, a system memory 506, and a system bus 508. The processing unit 504 can be any of various commercially available processors or multiple processors.

[0058] The system bus 508 provides an interface from the system memory 506 to system components including, but not limited to, the processor 504. The system bus 508 may be any of several types of bus structures that may further interconnect to a memory bus (with or without a memory controller), a peripheral bus, and a local bus using any of a variety of commercially available bus architectures. Interface adapters may connect to the system bus 508 through a slot architecture. Examples of slot architectures include, but are not limited to, Accelerated Graphics Port (AGP), CardBus, (Enhanced) Industry Standard Architecture ((E)ISA), MicroChannel Architecture (MCA), NuBus, Peripheral Component Interconnect (Enhanced) (PCI(X)), PCI Express, Personal Computer Memory Card International Association (PCMCIA), and the like.

[0059] The computer architecture 500 may include or be implemented in a variety of articles of manufacture. The articles of manufacture may include a computer-readable storage medium for storing logic. Examples of computer-readable storage media may include any tangible medium capable of storing electronic data, including volatile or non-volatile memory, removable or non-removable memory, erasable or non-erasable memory, and writable or re-writable memory. Examples of logic may include executable computer program instructions implemented using any suitable type of code, such as source code, compiled code, interpreted code, executable code, static code, dynamic code, object-oriented code, visual code, and the like. Examples may be implemented, at least in part, as instructions contained in a non-transitory computer-readable recording medium, which may be read and executed by one or more processors to enable performance of the operations described herein.

[0060] The system memory 506 may include various types of computer readable storage media in the form of one or more high speed memory units such as read only memory (ROM), random access memory (RAM), dynamic RAM (DRAM), double data rate DRAM (DDRAM), synchronous DRAM (SDRAM), static RAM (SRAM), programmable ROM (PROM), erasable programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), flash memory, polymer memory such as ferroelectric polymer memory, ovonic memory, phase change or ferroelectric memory, silicon oxide nitride oxide silicon (SONOS) memory, magnetic or optical cards, arrays of devices such as redundant array of independent disks (RAID) drives, solid state memory devices (e.g., USB memory, solid state drive (SSD)), and other types of storage media suitable for storing information. In the illustrated embodiment shown in FIG. 5, the system memory 506 may include non-volatile memory 500 and / or volatile memory 502. The non-volatile memory 5010 may store a basic input / output system (BIOS).

[0061] The computer 502 may include various types of computer-readable storage media in the form of one or more low-speed memory units, including an internal hard disk drive (HDD) 514 (or optionally an external hard disk drive (HDD) 513), a magnetic floppy disk drive (FDD) 516 that reads from or writes to a removable magnetic disk 518, and an optical disk drive 520 that reads from or writes to a removable optical disk 522 (e.g., a CD-ROM or DVD). The HDD 514 or 513, FDD 516, and optical disk drive 520 may be connected to the system bus 508 by a HDD interface 524, a FDD interface 526, and an optical drive interface 528, respectively. The HDD interface 824 for an external drive implementation may include at least one or both of Universal Serial Bus (USB) and IEEE 1394 interface technologies.

[0062] The drives and associated computer-readable media provide volatile and / or nonvolatile storage of data, data structures, computer-executable instructions, etc. For example, a number of computer program modules may be stored in the drives and memory 510, 512, including an operating system 530, one or more application programs 532, other program modules 534, and program data 536. In one example, the one or more application programs 532, other program modules 534, and program data 536 may include, for example, various applications and / or components of computer architecture 500. In various embodiments, the one or more application programs 532, other program modules 534, and program data 536 may include, for example, various applications and / or components of system 100, such as operating system 112, account application 113, authentication application 114, other applications 115, access application 116, and / or management application 123. At least one computer-readable storage medium may contain instructions that, when executed, cause the system to perform any of the computer-implemented methods and processes described herein.

[0063] Optionally, when configured as a mobile device, smart digital appliance, laptop, etc., the computer architecture 500 may include additional devices that allow data input and output to a user. For example, a user may input commands and information to the computer 502 via one or more wired / wireless optional input devices, such as a keypad 538 and a tactile input device, such as a touch screen 540. Other input devices may include microphones, infrared (IR) remote controls, radio frequency (RF) remote controls, game pads, stylus pens, near field communication devices, dongles, fingerprint readers, gloves, graphic tablets, joysticks, keyboards, retina readers, touch screens (e.g., capacitive, resistive, etc.), trackballs, track pads, sensors, styluses, etc. These and other input devices are often connected to the processing unit 504 via an optional interface 542 coupled to the system bus 508, but may be connected by other interfaces, such as a parallel port, an IEEE 1394 serial port, a game port, a USB port, an IR interface, etc.

[0064] Another optional element may be a display 544, which may be an organic light emitting diode (OLED), light emitting display (LED), or other type of display device, which is connected to the system bus 508 via an interface, such as, for example, an optional video adapter 546. The display 544 may be internal or external to the computer 502. In addition to the display 544, computers typically include other peripheral output devices, such as speakers, printers, etc., which may be connected to the system bus 508 via an optional interface 542.

[0065] The computer 502 may operate in a networked environment using logical connections via wired and / or wireless communication to one or more remote computers, such as a remote computer 548. The remote computer 548 may be a workstation, a server computer, a router, a personal computer, a portable computer, a microprocessor-based entertainment device, a peer device, or other common network node, and typically includes many or all of the elements described relative to the computer 502, although for simplicity, only a remote memory / storage device 559 is shown. The logical connections shown include wired / wireless connections to a local area network (LAN) 552 and / or larger networks, e.g., a wide area network (WAN) 554. Such LAN and WAN networking environments are commonplace in offices and businesses, facilitating enterprise-wide computer networks, such as intranets. All of these may connect to a global communications network, e.g., the Internet.

[0066] When used in a LAN networking environment, the computer 502 is connected to the LAN 552 through a wired and / or wireless communication network interface or adapter 556. The adapter 556 may facilitate wired and / or wireless communication to the LAN 552, which may include a wireless access point disposed thereon for communicating with the wireless functionality of the adapter 556.

[0067] When used in a WAN networking environment, the computer 502 may include a modem 558 or have other means for establishing communications over the WAN 554, such as connected to a communications server on the WAN 554 or via the Internet. The modem 558 may be internal or external, a wired and / or wireless device, and connects to the system bus 508 via an interface 542. In a networked environment, program modules depicted relative to the computer 502, or portions thereof, may be stored in a remote memory / storage device 559. It will be appreciated that the network connections shown are exemplary and other means of establishing a communications link between the computers may be used.

[0068] The computer 502 is operable to communicate with wired and wireless devices or entities using the IEEE 802 family of standards, such as wireless devices operatively arranged for wireless communication (e.g., IEEE 802.11 wireless modulation technology). This includes at least Wi-Fi (or Wireless Fidelity), WiMax, Bluetooth wireless technologies, and the like. Thus, communication can be a predefined structure, similar to a traditional network, or simply ad-hoc communication between at least two devices. A Wi-Fi network provides secure, reliable, and fast wireless connectivity using wireless technologies called IEEE 802.11x (a, b, g, n, and the like). A Wi-Fi network may be used to connect computers to each other, to the Internet, and to wired networks (using IEEE 802.3 related media and functions). Wireless technologies can be connected to the computer 502, for example, via one or more transceivers (not shown) in the interface 542 or the communication interface 556, which facilitate the use of Wi-Fi, WiMax, Bluetooth wireless technologies, and the like.

[0069] The various elements of the apparatus previously described with reference to Figures 1-5 may be implemented using various hardware elements, software elements, or a combination of both. Examples of hardware elements may include devices, logic devices, components, processors, microprocessors, circuits, processors, circuit elements (e.g., transistors, resistors, capacitors, inductors, etc.), integrated circuits, application specific integrated circuits (ASICs), programmable logic devices (PLDs), digital signal processors (DSPs), field programmable gate arrays (FPGAs), memory units, logic gates, registers, semiconductor devices, chips, microchips, chipsets, etc. Examples of software elements may include software components, programs, applications, computer programs, application programs, system programs, software development programs, machine programs, operating system software, middleware, firmware, software modules, routines, subroutines, functions, methods, procedures, software interfaces, application program interfaces (APIs), instruction sets, computational code, computer code, code segments, computer code segments, words, values, symbols, or any combination thereof. However, the decision of whether an example is implemented using hardware and / or software elements may vary according to any number of factors, such as required computational speeds, power levels, thermal tolerances, processing cycle budgets, input data rates, output data rates, memory resources, data bus speeds, and other design or performance constraints, as desired for a given implementation.

[0070] The terms "system" and "component" as used herein are intended to refer to any computer-related entity, whether hardware, a combination of hardware and software, software, or software in execution, an example of which is provided by the exemplary computer architecture 500. For example, a component may be, but is not limited to, a process running on a processor, a processor, a hard disk drive, multiple storage drives (optical and / or magnetic storage media), an object, an executable, a thread of execution, a program, and / or a computer. As an example, both an application running on a server and the server may be a component. One or more components may reside within a process and / or thread of execution, and a component may be localized on one computer and / or distributed among two or more computers. Furthermore, components may be communicatively coupled to each other by various types of communication media to coordinate operations. Coordination may include unidirectional or bidirectional exchange of information. For example, components may communicate information in the form of signals communicated over the communication media. Information may be embodied as signals assigned to various signal lines. In such an assignment, each message is a signal. However, further embodiments may use data messages as an alternative. Such data messages may be transmitted over a variety of connections, examples of which include parallel interfaces, serial interfaces, and bus interfaces.

[0071] It will be appreciated that the exemplary devices depicted in the block diagrams above may represent one functionally descriptive example of many possible implementations. Thus, the division, omission, or inclusion of block functions depicted in the accompanying drawings should not be inferred as necessarily including hardware components, circuits, software, and / or elements for implementing those functions in the division, omission, or embodiment.

[0072] Some examples may be described using the phrase "in one example" or "example," along with derivatives thereof. These terms mean that a particular feature, structure, or characteristic described in connection with that example is included in at least one example. It should be noted that the appearances of the term "in one example" in various places in this specification do not necessarily all refer to the same example. Furthermore, unless otherwise stated, it is recognized that the features described above can be used together in any combination. Any features thus discussed separately can be employed in combination with each other, unless the features are described as not being incompatible with each other.

[0073] By way of general reference to the notation and nomenclature used herein, the detailed descriptions herein may be presented in terms of program procedures executed on a computer or network of computers. These procedural descriptions and representations are used by those skilled in the art to most effectively convey the substance of their work to others skilled in the art.

[0074] A process is herein generally conceived to be a self-consistent sequence of operations leading to a desired result. These operations require physical manipulations of physical quantities. Usually, though not necessarily, these quantities take the form of electrical, magnetic or optical signals capable of being stored, transferred, combined, compared and otherwise manipulated. It is convenient, principally for reasons of common usage, to refer to these signals as bits, values, elements, symbols, characters, terms, numbers, or the like. It should be borne in mind, however, that all of these and similar terms are to be associated with the appropriate physical quantities and are merely convenient labels applied to these quantities.

[0075] Further, the operations performed are often referred to in terms, such as adding or comparing, that are indicative of mental operations performed by a human operator. No such capability of a human operator is necessary, and in most cases is desirable, in any of the operations described herein, which may form part of one or more examples. Rather, the operations are machine operations.

[0076] Some examples may be described using the terms "coupled" and "connected," along with their derivatives. These terms are not necessarily intended as synonyms. For example, some examples may be described using the terms "connected" and / or "coupled" to indicate that two or more elements are in direct physical or electrical contact with each other. However, the term "connected" may mean that two or more elements are not in direct contact with each other, but still cooperate or interact with each other.

[0077] The terms "system" and "component" as used herein are intended to refer to any computer-related entity, either hardware, a combination of hardware and software, software, or software in execution, examples of which are provided by the examples of Figures 1-5. For example, a component may be, but is not limited to, a process running on a processor, a processor, a hard disk drive, multiple storage drives (of optical and / or magnetic storage media), an object, an executable, a thread of execution, a program, and / or a computer. As an example, both an application running on a server or processor and a server or processor may be components. One or more components may reside within a process and / or thread of execution, and components may be localized on one computer and / or distributed among two or more computers. Furthermore, components may be communicatively coupled to one another by various types of communication media to coordinate operations. Coordination may include unidirectional or bidirectional exchange of information. For example, components may communicate information in the form of signals communicated over the communication media. Information may be embodied as signals assigned to various signal lines. In such an assignment, each message is a signal. However, further embodiments may use data messages as an alternative. Such data messages may be transmitted over a variety of connections, examples of which include parallel interfaces, serial interfaces, and bus interfaces.

[0078] Various examples also relate to an apparatus or system for performing these operations. This apparatus may be specially constructed for the required purposes, or selectively activated or reconfigured by a computer program stored in a computer. The procedures presented herein are not inherently related to any particular computer or other apparatus. The required structure for these machines will appear from the description below.

[0079] It is emphasized that the Abstract of the Disclosure is provided to enable the reader to quickly ascertain the nature of the technical disclosure. It is understood that it is not used to interpret or limit the scope or meaning of the claims. In addition, in the above detailed description, various features are grouped together in a single example to streamline the disclosure. This method of disclosure should not be interpreted as reflecting an intention that the claimed examples require more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive subject matter lies in less than all features of a single disclosed example. Thus, the following claims are incorporated into the detailed description, with each claim standing on its own as a separate example. In the appended claims, the terms "including" and "in which" are used as the plain English equivalents of the respective terms "comprising" and "wherein." Additionally, the terms "first," "second," "third," etc. are used merely as labels and are not intended to impose numerical conditions on their subject matter.

[0080] What has been described above includes examples of the disclosed architecture. Of course, it is not possible to describe every conceivable combination of components and / or methodologies, but one of ordinary skill in the art will recognize that many further combinations and rearrangements are possible. Accordingly, the novel architecture is intended to embrace all such alterations, modifications and variations that fall within the spirit and scope of the appended claims.

Claims

1. receiving a voice request from a user via the smart digital device for the purchase of the requested item; receiving, via the smart digital device, a list of available items matching the voice request for purchase of the requested item, the list of available items being aggregated according to a merchant identifier associated with each of the available items; providing, via the smart digital device, a list of available items that substantially match the requested item on an output device of the smart digital device, the output device of the smart digital device including a display or a speaker, or both; outputting the list of items available for purchase via an output device; receiving a selection of an item to purchase from a list of items available for purchase; prompting the user, via the smart digital device, to provide a payment card associated with the user within a predetermined distance of the smart digital device; receiving, by the smart digital device, encrypted data from the payment card via a Near Field Communication (NFC) interface of the smart digital device, the encrypted data being generated by the payment card executing a cryptographic algorithm using a cryptographic key, the cryptographic key being a one-time session key generated by the payment card based on a master key and a counter value stored in a memory of the payment card; transmitting, by the smart digital device, encrypted data in a request to an application server, the request including a request verifying that the encrypted data is associated with an account of a user providing the voice request and is authorized to purchase the selected item to be purchased; receiving, by the smart digital device, a confirmation that the purchase transaction for the selected item has been authorized and that the payment card has been authorized based on the user providing the voice request; outputting, by the smart digital device, an indication of receipt of the purchase transaction confirmation on an output device.

2. 10. The method of claim 1, further comprising the step of receiving a list of identified items available for purchase on the smart digital device for output to an output device of the smart digital device.

3. receiving from the payment card a payment card identifier for an issuer of the payment card and an account associated with the payment card; transmitting, from the smart digital device, a payment card identifier to an authentication server for authentication; 10. The method of claim 1, further comprising the step of: receiving an authentication result from the authentication server in response to transmitting the payment card identifier.

4. accessing a smart digital device account associated with the smart digital device to retrieve an approved payment method associated with the smart digital device account; 2. The method of claim 1, further comprising: in response to inserting a payment card into a near field associated with the smart digital device, determining whether the payment card is an approved payment method associated with the smart digital device account.

5. The method of claim 1 , wherein the selection of the item to purchase is received via at least one of an input on a touch screen display, an input button, or a voice command.

6. a payment card comprising a logic circuit, a payment card near field communication device, and a payment card memory device, the payment card memory device storing a payment card identifier, a master key, and a counter value; a smart digital device including a purchasing application executable by a processor of the smart digital device; At run time, the purchasing application: receiving an item purchase request from a user, the item purchase request including the available items; Transmitting the received item purchase request and payment card identifier for confirmation; receiving a list of merchants offering items available for purchase, the list of merchants being determined based on the payment card identifier; presenting the list of vendors on a display or through a speaker of the smart digital device; receiving, via a user interface, a selection of at least one vendor in a list of vendors selling the item available for purchase; presenting a prompt via a display and / or speaker requesting insertion of a payment card into proximity of a Near Field Communication (NFC) device of the smart digital device; receiving a payment card signal including encrypted data generated by the payment card using a cryptographic algorithm and an encryption key, the encrypted data including a payment card identifier, the encryption key being a one-time session key generated based on a master key and a counter value stored in a payment card memory device; for authentication, transmitting a verification request including encrypted data to authenticate a user associated with the item purchase request; receiving a purchase transaction confirmation authorizing the purchase transaction in response to authentication associated with a payment card provided by a user providing an item purchase request; The system includes programming code configured to output an indication of receipt of a purchase transaction confirmation via a display or a speaker, or both.

7. The system of claim 6 , wherein the list of vendors includes vendor names and prices for items available for purchase from the named vendors.

8. 7. The system of claim 6, wherein the counter value is incremented each time the payment card is used in a transaction.

9. an application server communicatively connected to the purchasing application; The application server generating a query to locate items for purchase at a plurality of merchant servers in response to receiving an item purchase request from the smart digital device over the data network; The ability to send queries to multiple merchant servers; receiving a merchant response from a respective one of the plurality of merchant servers in response to the query, each merchant web site responding with a merchant response, each merchant response including an item identifier and a price for the purchase item offered for sale by the respective merchant server; aggregating each of the merchant responses into a list of aggregators for the purchase associated with the payment card identifier; transmitting the aggregated list to a smart digital device; The system of claim 6 , operable to perform functions including:

10. an authentication server communicatively connected to the application server and the purchasing application; When the application server sends a verification request to the authentication server, Extracting a payment card identifier from the verification request; forwarding the payment card identifier extracted from the verification request to the authentication server; 10. The system of claim 9, operable to receive, from the authentication server, a purchase transaction confirmation that the payment card is authorized to complete the purchase transaction.

11. The application server is receiving a confirmation request from a purchasing application, the confirmation request including an item for purchase selected from an aggregator list and authentication instructions verifying that a payment card is linked to the item purchase request; Upon successful payment card verification, completing the purchase transaction with the individual vendor for the item selected for purchase from the aggregator list; 10. The system of claim 9, operable to perform additional functions including:

12. Payment cards are A function of detecting an electric field emitted by a short-range wireless communication device of a smart digital device; retrieving a payment card identifier from a payment card memory device; The ability to encrypt payment card identifiers; generating, by the logic circuitry, a payment card signal including an encrypted payment card identifier; responding to the detected electric field by emitting a payment card signal via a payment card near field communication device; The system of claim 6 , operable to perform functions including:

13. An application server; a temporary data storage connected to the application server; The application server is aggregating said item purchase request with other item purchase requests within a group of item purchase requests; The ability to store groups of item purchase requests in temporary data storage; receiving a confirmation request to complete a purchase transaction for at least one item purchase request in the group of item purchase requests; the ability to transfer a list of all items in a group of item purchase requests to a smart digital device; The system of claim 6 , further operable to perform additional functions including:

14. The purchasing application is in response to receiving the list of all items in the group of item purchase requests, presenting the list of all items in a user interface provided by the purchasing application; generating a prompt to introduce a payment card into the field of a near field communication device of the smart digital device in response to the selection of one or more items in the list, the prompt being output on an output device of the smart device; receiving an encrypted payment card identifier via a near field communication device of the smart device; using the encrypted payment card identifier to request authorization to complete a purchase transaction for one or more selected items in the list; The system of claim 13 , further operable to perform additional functions including:

15. a memory configured to store instructions; a processor configured to execute the instructions, The instructions, when executed, cause the processor to: Processing a verbal item purchase request received via the input device; generating a prompt to bring a payment card within range of a near field communication (NFC) interface; performing an NFC exchange with a contactless card via the NFC interface; receiving encrypted data from the contactless card via the NFC interface during an NFC exchange; receiving available items matching the verbal item purchase request, the available items being aggregated according to a merchant identifier associated with each of the available items; outputting the items available for purchase via an output device; receiving a selection of items to be purchased from among the items available for purchase; transmitting the encrypted data to an authentication server of the service provider, the authentication server authenticating that the encrypted data is associated with the payment card, the payment card being authenticated to purchase the selected item; receiving, from the service provider's authentication server, confirmation that the purchase transaction associated with the selected item has been authorized; accessing a smart digital device account associated with the smart digital device to retrieve an authorized payment method associated with the smart digital device account; determining that the payment card is one of the authorized payment methods associated with the smart digital device account; completing a purchase transaction for the selected item available for purchase based on the selected item being authenticated and the payment card being one of the authenticated payment methods; Smart digital device.

16. 16. The smart digital device of claim 15, wherein the processor receives the purchasable items from a data store.

17. The processor receiving from the payment card a payment card identifier associated with an issuer of the payment card; 16. The smart digital device of claim 15, wherein the payment card identifier is sent to an authentication server for authorization, the authentication server determining whether to authorize the purchase transaction.

18. 16. The smart digital device of claim 15, wherein the processor prompts the user to insert a payment card into a near field wireless communication field associated with the smart digital device.

19. 16. The smart digital device of claim 15, wherein the selection of the item to purchase is received via at least one of an input on a touch screen display, an input button, or a voice command.

Images