TL;DR: In this article, an architecture and system uses a smart card for payment of goods and/or services purchased on-line over the Internet, where a client server on a client terminal controls the interaction with a consumer and interfaces to a card reader which accepts the consumer's smart card.
Abstract: An architecture and system uses a smart card for payment of goods and/or services purchased on-line over the Internet A client server on a client terminal controls the interaction with a consumer and interfaces to a card reader which accepts the consumer's smart card A payment server on the Internet includes a computer and terminals that contain security cards to handle the transaction, data store and collection Also connected over the Internet is a merchant server advertising the goods and/or services offered by a merchant for sale on a web site The merchant contracts with an acquirer to accept smart card payments for goods and/or services purchased over the Internet A consumer uses his smart card at the client terminal in order to purchase goods and/or services from the remote merchant server The Internet provides the routing functionality between the client terminal, merchant server and payment server The client terminal emulates a security card in interacting with the smart card, and the responses received are grouped together and sent as a draw request message to the payment server The payment server then emulates the smart card in an interaction with the security card The security card delivers the expected smart card signature to the payment server and/or on to the client terminal or merchant server to reduce message traffic between the entities on the network The comparison of the smart card signature to an expected value can occur at any location Encryption is used for security
TL;DR: In this paper, a system and method for allowing a parent to control the use of an ancillary credit or debit transaction card which is issued to a child is presented, where a central computer communicates with an issuer computer having a data base containing account information and spending limits for the transaction card.
Abstract: A system and method for allowing a parent to control the use of an ancillary credit or debit transaction card which is issued to a child. A central computer communicates with an issuer computer having a data base containing account information and spending limits for the transaction card and the parent can set a spending limit for the ancillary card given to the child. When the child presents the ancillary transaction card to a merchant in payment of merchandise, the merchant swipes the card and contacts a central computer for card authorization. If the credit limit of the ancillary card holder has been exceeded according to the data base, a method of contacting the parent is transmitted to the central computer. The central computer initiates contact with the parent via two-way communications, for example, two way pager, cellular telephone, or other personal communication service, and queries the parent whether to authorize the transaction by increasing the spending limit of the ancillary cardholder or refusal of the transaction. The parent responds to the central computer via the two-way communications device, and the central computer forwards an approval/refusal code to the merchant. In this manner, a parent can control the maximum transaction card spending by a child.
TL;DR: In this paper, a data-processing method by which one or more prepaid satellite spending cards are configured and linked to a cardholder's host credit card or card account such that a predetermined available spending capacity of each satellite card is selectively determined by the cardholder of the host card, is deducted from the available balance of the card or account and limits the total amount of the satellite card's total spending capacity.
Abstract: A data-processing method by which one or more prepaid satellite spending cards are configured and linked to a cardholder's host credit card or card account such that a predetermined available spending capacity of each satellite card is selectively determined by the cardholder of the host credit card, is deducted from the available balance of the host card or card account and limits the total spending capacity of the satellite card. The main cardholder may also remotely selectively increase the available spending capacity of the one or more satellite cards by deducting the desired additional spending capacity of each satellite card from the available balance of the host credit card as a purchase against the host card account.
TL;DR: A smart card personalization system maintains a database containing card issuer data format templates, card applications, card operating system commands, and personalization equipment specifications and provides a centralized interface of inputs and outputs to a card issuing process which dynamically adjusts to changes in the issuing process as mentioned in this paper.
Abstract: A smart card personalization system maintains a database containing card issuer data format templates, card applications, card operating system commands, and personalization equipment specifications and provides a centralized interface of inputs and outputs to a card issuing process which dynamically adjusts to changes in the issuing process to easily permit a card issuer to change the formats, card applications, card operating systems and/or personalization equipment (130) in a card issuing process. The system interfaces to any card issuer management system (150), manages the transfer of cardholder data and card applications to the particular personalization equipment used, and maintains statistics for real-time and off-line inquiries to support critical management and reporting functions. Furthermore, the system works with a variety of security methodologies to prevent fraud.
TL;DR: In this paper, a telepayment system for bill payment is described. But the telepay system does not require a personal identification number (PIN) to authenticate payment transactions and can be used without the requirement of a PIN.
Abstract: Method and apparatus for processing payment transactions using debit card numbers without the requirement of a personal identification number (PIN) is disclosed. A telepay system of the present invention provides an interface between a standard touchtone telephone and at least one debit card network such that real-time bill payment transactions may be effected using a keypad of the telephone. The telepay system includes an interactive voice response unit for prompting a payor to enter an access code, account number, debit card number and payment amount and for informing the user of the status of the transaction. Real-time processing of transactions is provided through use of debit card networks, rather than the Automated Clearing House. The telepay system is also capable of performing settlement functions and processing inquiries by payees of the system regarding previously processed transactions.
TL;DR: In this article, a method and apparatus for executing a transaction using a credit card includes the steps of maintaining a credit account associated with the credit card, the account having a credit limit and a transaction balance indicative of an aggregate of previously authorized transaction amounts in a predetermined period.
Abstract: A method and apparatus for executing a transaction using a credit card includes the steps of: maintaining a credit card account associated with the credit card, the credit card account having a credit limit and a transaction balance indicative of an aggregate of previously authorized transaction amounts in a predetermined period; maintaining a cash account associated with the credit card, the cash account having a cash balance; receiving a request for authorization for a new transaction amount against the credit card account in exchange for goods or services; and authorizing the requested transaction amount when the aggregate of the credit limit and cash balance less the transaction balance exceeds the requested transaction amount.
TL;DR: In this paper, an unattended banking machine such as an ATM machine has a payment acceptor for accepting payment from the machine user and for determining the amount of payment from a user.
Abstract: An unattended banking machine such as an ATM machine has a payment acceptor for accepting payment from the machine user and for determining the amount of payment from the user. A calculator determines the transactional difference between the amount of the transaction and the payment by the user. In ATM machines service fees may be charged to the ATM user for issuing a money order or for a wire transfer that are not in even multiples of the smallest denomination of the currency being dispensed by the ATM machine. The preferred cash dispenser has only bills of different denominations and no coins. To pay the transactional difference without the use of very small denomination currency and/or coins the transactional difference is divided into a cash payment portion which is dispensed in bills from the machine's cash dispenser. The remainder of the transactional payment is paid electronically to the ATM user either on a card, such as a smart card, or into the user's ATM account as an electronic remainder payment portion. The ATM machine includes a card reader and card writer to add the electronic payment portion to the balance on the card. The ATM machine may perform a number of other transactions such as cashing a check, paying a bill, and purchasing an item.
TL;DR: In this paper, a cellular telephone is used to automatically inquire of an information center (IC) of the credit card company whether the credit can be gained, based on input of a code number by the credit payer and the stored information read out from the credit IC card.
Abstract: On a credit IC card (1), issuing by a credit card company, brought by a credit payer (13) with him/her is stored at least personal information for identifying a credit card company, a card number and a credit payer. Based on input of a code number by the credit payer (13) and the stored information read out from the credit IC card (1), a cellular telephone (3) is used to automatically inquire of an information center (24) of the credit card company whether the credit can be gained. This can therefore eliminates complication involved by payment using the credit IC card (1) and ensures smooth use of the credit IC card (1), with the cost performance being increased to spread the expensive credit IC card (1).
TL;DR: Because they can store and protect relatively large amounts of data, smartcards are being used in a number of ways around the world, replacing a wallets contents bit by bit.
Abstract: The worldwide boom in smartcard deployment is accelerating their evolution. What can be found in a typical wallet?, In all likelihood, bills and coins, a variety of credit cards, a driver's license, a transit pass, a voter registration card, a library card, a video rental card, insurance cards, frequent flyer and car rental cards, a telephone charge card. By the end of the century, all of these documents might be replaced by just two or three smartcards. Because they can store and protect relatively large amounts of data, smartcards are being used in a number of ways around the world, replacing a wallet's contents bit by bit. Stored value cards were in place last year (1996) in Atlanta, Ga., at Olympic venues, standing in for coins and bills. A health card identifying the holder's insurance provider and account number has been issued to every citizen of Germany, and plans are in place to add such medical information as the name of the holder's doctor, blood type, allergic reactions, medications, next of kin, and instructions in case of emergency. Smart social security cards in Spain interface with a kiosk system that can provide updated information on benefits and eligibility, as well as pertinent job opportunities. Today, most smartcards handle a single application, but will realize their true value when a single card can address multiple applications.
TL;DR: In this article, the credit card information management system checks the creditability of a credit card intended to be used for purchase of goods or service by using the card information owned by member stores of credit companies.
Abstract: The credit card information management system checks the creditability of a credit card intended to be used for purchase of goods or service by using the card information owned by member stores of credit companies. A host computer of the card management center outputs information regarding the validity or invalidity of a credit card of a customer member of a credit company as card information, a transmission facility wirelessly transmits digital data of the card information. A receiving facility of a member store receives radio signals of the card information and checks whether or not there is any missing of data. If any missing occurs, a transfer of the missed data is requested to the host computer. A terminal computer extracts only the card information necessary for one's own store from the data outputted by the host computer and data outputted in response to the transfer request and stores the same in memory, and the terminal computer outputs judgement of validity or invalidity of a credit card inputted into a card reader.
TL;DR: In this article, a system for rejecting second and subsequent copies of an informationally equivalent card or badge asserted into a client/server system by processing only those cards having transaction histories recorded thereon by comparison matching a history recorded in a central repository and then rewriting the history on the card and in the repository.
Abstract: A system for rejecting second and subsequent copies of an informationally-equivalent card or badge asserted into a client/server system by processing only those cards having transaction histories recorded thereon by comparison matching a history recorded in a central repository and then rewriting the history on the card and in the repository. The rewritten histories include the current transaction. Counterfeit cards, informationally equivalent to the original card prior to the transaction update of the original card, will be rejected when asserted into the system since their histories mismatch that recorded in the repository.
TL;DR: It is hoped that this book will go some way to explain what has been achieved to date and what still needs to be done in the smart card arena.
Abstract: The last few years have seen the most dynamic changes in payment card technology since the first magnetic stripe cards were introduced in the late 1960s. Microchip technology has transformed the way in which banks and other financial institutions look to offer their services. It provides cardholders with the ability to store and carry an unprecedented amount of information and processing capability in their pockets while enhancing security. The challenge for all players within the smart card arena will be to work together to provide end users with the appropriate chip technology. It is hoped that this book will go some way to explain what has been achieved to date and what still needs to be done.
TL;DR: In this article, the authors present a secure smart credit card system having the same basic dimensions of a standard credit card, which includes an intelligent micro-memory module and power supply, and, upon physical engagement to the main body, may be programmed to initiate a "key" protocol to open or lock access to the functions of the main Body, communicating with the main CPU upon physical insertion into the body, thereby initiating or preventing functioning of electronically programed features.
Abstract: A secure, smart credit card system having the same basic dimensions of a standard credit card. The preferred embodiment of the present invention includes a main body having situated thereon a main central processing unit (CPU). A portion of the main body has formed therein a space or slot for accepting a key unit, which is configured to engage the main body in the formed space or slot, the joined pieces maintaining the same basic dimensions of a standard credit card. The key unit may include an intelligent micro-memory module and power supply, and, upon physical engagement to the main body, may be programmed to initiate a "key" protocol to open or lock access to the functions of the main body, communicating with the main CPU upon physical insertion into the main body, thereby initiating or preventing functioning of electronically programed features of the main CPU. The key unit may further include a ROM memory for encoding data and/or a security code in memory, which code may be communicated to the main CPU, upon sliding insertion of the display into the display slot formed in the main body. Additionally, an LCD on the key unit may display the only indication of the credit card number of the card, so that without said LCD display "key" and ROM data and security codes properly inserted into the main body, the body of the card (and the key unit) each individually is merely a blank with no value to a thief.
TL;DR: In this paper, a ticketless system for processing information for issuing of an airplane ticket or the like by using an IC card is presented, which includes a coupon ticket issuing module for recording coupon ticket issue information onto a distribution source card to enable plural use of the distribution sources card.
Abstract: A ticketless system for processing information for issuance of an airplane ticket or the like by using an IC card. The ticketless system includes a coupon ticket issuing module for recording coupon ticket issue information onto a distribution source card to enable plural use of the distribution source card. A coupon ticket moving module records coupon ticket movement information which moves a part of the coupon ticket of the distribution source card to a distribution destination card and enables the coupon ticket movement information to be used with the distribution destination card. A use processing module processes a use such as a reservation, a ticket issuance, a check-in, or a boarding by using the distribution source card or distribution destination card. In addition, a temporary card issuing module issues a temporary card in which a name of the user is not registered on the ticketless system and which is temporarily used. When the tempory card is employed, the coupon ticket moving module records coupon ticket movement information which moves a part of the coupon ticket of the distribution source card to the temporary card and enables the moved part of the coupon ticket to be used by the temporary card.
TL;DR: In this paper, a quantity of traveler's checks having a total value are sold to a buyer and an account identifier is received from the buyer, a lock is placed against the identified account for a lock value of at least a portion of the total value.
Abstract: A quantity of traveler's checks having a total value are sold to a buyer. An account identifier is received from the buyer. A lock is placed against the identified account for a lock value of at least a portion of the total value. The lock value and a credit card account number are communicated to a credit card clearing house (606) and an authorization that a lock equal to the lock value has been placed against the credit card account is then received from the credit card clearing house (612). Information identifying the credit card account of the buyer of each traveler's check, the traveler's check issuer obtains payment on the check. The identifed account is debited. A predetermined value based on the value of the cashed traveler's check is communicated to the credit card clearing house.
TL;DR: In this article, a credit card validation unit is used to transmit to the credit card company computer a purchase amount, a creditcard number and a purchase token comprising both the purchase amount and credit card number which are encrypted using the user's personal identification code as a key.
Abstract: A method and apparatus for credit card purchase authorization includes using a credit card validation unit to transmit to a credit card company computer a purchase amount, a credit card number and a purchase token comprising both the purchase amount and credit card number which are encrypted using the user's personal identification code as a key. The transmission can be made by a wireless communications device, such as a cellular telephone or PCS communications device. The credit card company computer creates a test token by encrypting the received credit card number and purchase amount using a stored user's personal identification code number as a key. The test token is then compared to the purchase token. If the test token corresponds to the purchase token, the purchase is considered to be authorized.
TL;DR: In this paper, a smart card that stores a first and a second pointer, the second pointer being used to indicate an update of the first pointer, is used for recovering and thus possibly completing interrupted smart card transactions.
Abstract: A method of recovering and thus possibly completing interrupted smart card transactions includes providing a smart card that stores a first and a second pointer, the second pointer being used to indicate an update of the first pointer. In the case of an interruption of a smart card transaction, these pointers are be used to indicate whether a change of a card balance has taken place by the equality of the values of these pointers.
TL;DR: In this paper, a system for increasing the value of an electronic payment card is presented, which includes a security module arranged for authentication of the card and an authorizing device for authorizing a value increase transaction to the card.
Abstract: A system for increasing the value of an electronic payment card. The system comprises, e.g., a security module arranged for authentication of the card, and an authorizing device for authorizing a value increase transaction to the card. The system is arranged for sending a value increase message to the card, upon which the value stored in memory in the card is increased, if the card has been found to be authentic and the value increase transaction thereof has been authorized. The system also has memory, in which identification data of the card is stored and, linked thereto, data relating to the authorization of the value increase of the card. If a value increase transaction is interrupted after authorization for the transaction had been given, a restore transaction occurs. In the restore transaction, the authenticity of the card is checked and the value increase transaction occurs on the basis of the authorization information previously stored in the system memory during the value increase transaction. Hence, through the system, interrupted value increase transactions may be recovered without the need for a new authorization.
TL;DR: In this article, a system and method for controlling and monitoring credit card transactions of a vending machine that dispenses and/or encodes prepaid cards is presented, where the system reads magnetically stored information from a credit card or debit card, receives an authorization amount for a transaction from credit verification source or determines whether a selected prepaid amount is below a maximum allowed transaction amount, and stores transaction information.
Abstract: A system and method for controlling and monitoring credit card transactions of a vending machine that dispenses and/or encodes prepaid cards. The system reads magnetically stored information from a credit card or debit card, receives an authorization amount for a transaction from a credit verification source or determines whether a selected prepaid amount is below a maximum allowed transaction amount, and stores transaction information. The system also controls the vending of the use of a general purpose computer and peripheral devices.
TL;DR: In this article, a communication control software application is used in a user communication device having a processor and associated memory, and a messaging application initiates communications to transmit or receive electronic mail.
Abstract: A communication control software application is used in a user communication device having a processor and associated memory. The processor controls a display and a user input device. A communications terminal transmits and receives electronic mail. The communication control software application includes a phone application stored in the memory, the phone application including a business card database storing plural business cards. Each business card identifies characteristics of a particular card provider who electronic mail is to be sent to or received from. One or more of the business cards includes an associated business card agent defined by an agent software routine controlling how electronic mail is communicated between the user and the particular provider. A messaging application initiates communications to transmit or receive electronic mail. The phone application and the messaging application determining if a business card agent is associated with a business card of a provider to whom electronic mail is to be sent or is received from by the phone dialer application, and in response thereto implement the agent software routine to control how the electronic mail is communicated.
TL;DR: In this article, the authors propose an Internet accessing system which allows automatic user login onto the Internet with the use of two cards and card readers, one card contains information about an Internet access point telephone number, the ID number of the user, and the password of user.
Abstract: An Internet accessing system which allows automatic user login onto the Internet with the use of two cards and card readers. One card contains information about an Internet access point telephone number, the ID number of the user, and the password of the user. The second card contains information about the URL designating the location of the desired startup homepage. Upon insertion of the cards into the card readers, the user is automatically logged onto the Internet.
TL;DR: In this paper, an electronic transaction processing system performing a deposit and/or a withdrawal of digital cash between a customer and a banking facility includes a customer money card storing digital cash of the customer, a bank money card and an escrow card storing transaction information with respect to a transaction with digital money between the customer and the banking facility.
Abstract: An electronic transaction processing system performing a deposit and/or a withdrawal of digital cash between a customer and a banking facility includes a customer money card storing digital cash of the customer, a bank money card storing digital cash of the banking facility and an escrow card storing transaction information with respect to a transaction with digital cash between the customer and the banking facility. A transaction is processed by renewing digital cash stored in the customer money card and in the bank money card in response to the amount of the transaction, and transaction processing is performed after storing each balance information of digital cash stored in the customer money card and in the bank money card and the amount of the transaction in the escrow card.
TL;DR: In this article, the characteristics of active card holders with the greatest propensity to revolve (i.e., pay interest) were identified using two quantitative techniques more commonly associated with credit risk management or credit scoring.
Abstract: All major credit card issuers, to a greater or lesser extent, are holding a portfolio consisting of three types of credit card holder: (i) non-active card holders; (ii) non-interest paying active card holders; and (iii) interest paying active card holders. This article, using two quantitative techniques more commonly associated with credit risk management or credit scoring, is concerned with identifying the characteristics of active card holders with the greatest propensity to revolve (i.e. pay interest). The sample consists of 27,681 bank credit card holders who had held and used their card in the 14 month sample period. Data was available on 313 socio-demographic and behavioural variables for which, a priori, there was good reason to include so as to discriminate between users who paid interest on their outstanding balances (i.e. revolvers) and those who did not. The main result of this research is that the most important discriminating variables are derived from the card holder's behaviour (i.e. cash a...
TL;DR: In this article, the anonymous use of and payment for, as well as collection of statistics, fee-based services, in particular Near-VOD services, employing a single chip card that can be used for all service providers.
Abstract: Anonymous use of and payment for, as well as collection of statistics, fee-based services, in particular Near-VOD services, employing a single chip card that can be used for all service providers. The chip card is used for paying for fee-based services of different service providers. Storage of usage-related data for collection of statistics and for payment for fee-based services as well as an authorization check is provided on the chip card. When an amount of money is loaded onto the chip card, these data are read and transmitted to a central office for the purpose of collecting statistics relating to the usage of individual services and crediting the individual service providers while, at the same time, guaranteeing anonymity of the individual customer-specific data.
TL;DR: In this paper, the authors proposed to improve the operability of a security management system by providing a security key with a signal output device outputting a security code and a security processing part executing and permitting a function when the security code signal is inputted and this signal is a valid security code.
Abstract: PROBLEM TO BE SOLVED: To improve the operability of a security management preventing computer illegal use by providing a security key with a signal output device outputting a security code and providing a security management processing part executing and permitting a function when a security code signal is inputted and this signal is a valid security code on a computer main body. SOLUTION: This device is provided with a security key 101, a switch 102, a security code generator 103, a signal output device 104, a small-sized battery 105, a security code signal 106, a computer 110, a CPU 111, a signal input device 112, a memory 113, an input/output device 114, an external storage 115, a security control processing part 116 and a file 117. Unique codes are preliminarily stored in a read only memory, etc., provided on a security code generator 103 and these codes are generated as security codes.
TL;DR: In this paper, a system for implementing electronic payment with a tamper resistant microprocessor card (230) is presented, which generates joint signatures under a joint digital signature scheme which derives its secret signature key from secret values (240, 250) contributed by different parties such as user, bank and service provider of electronic commerce.
Abstract: The present invention is a system for implementing electronic payment with a tamper resistant microprocessor card (230). The microprocessor card (230) generates joint signatures under a joint digital signature scheme which derives its secret signature key from secret values (240, 250) contributes by different parties such as user, bank and service provider of electronic commerce. The joint signature is used to certify (260) the payment among other information. It follows that no one party has complete knowledge of the secret signature keys (240, 250) of the other parties; therefore, the use of joint digital signature in conjuction with microprocessor card (230) provides unprecedented security. The present invention also defines a protocol including payment, deposit, withdrawal and account opening (200) in providing added protection against potential security attacks. Above all, the protocol also supports off-line payment transactions, thus allowing transaction to be conducted scalably and economically over various forms of electronic networks, including unsecured ones.
TL;DR: In this paper, a data processing system has a reader device adapted to read information residing on a first type of storage article (such as a floppy diskette), and a holder is provided which is substantially identical in size and shape to the first storage article, but allows the reader device to read a card which bears machine-readable information, such as a credit card.
Abstract: A data processing system has a reader device adapted to read information residing on a first type of storage article (such as a floppy diskette), and a holder is provided which is substantially identical in size and shape to the first type of storage article, but allows the reader device to read a card which bears machine-readable information, such as a credit card. The holder can have a slot therein for receiving the card, which is aligned within the holder to position a portion of the information medium at an access area of the holder. The machine-readable information can be, for example, encoded on a magnetic strip on the card. The system allows network-based transactions which read from the card as well as write to it.
TL;DR: In this paper, a virtual prepaid credit card is connected to a server containing a database of serial numbers which reference the customers remaining prepaid credits and the validity dates of the credit cards.
Abstract: The method includes the following stages: - a user of a virtual prepaid credit card is connected to a server containing a database of serial numbers which reference the customers remaining prepaid credits and the validity dates of the credit cards. The user is authenticated by the server by sending it a authentication sequence, and the server sends this sequence to a security processor which has the capacity for verification of the sequence. Once the sequence is validated the processor transmits to the server a user authorisation. After receipt of this authorisation the server acknowledges the user request, to the credit limit remaining on the card and for the valid date of it. The method is characterised in that at the time of a user request, the server sends to the processor, in addition to the authentication sequence, a version number which is associated with each card. This version number is incremented when there is zero credit on the card or when the card has expired, and this number is stored in the server database. The processor recalculates the authentication sequence, which is dependent on the version number, before verifying the cards validity.
TL;DR: In this article, a method and a system for achieving mediation of settlement between a payment recipient (A, B) selling, or increasing the credit value of stored value cards or electronic payment chips, and other vendors of the services that the card is used to pay for.
Abstract: A method and a system for achieving mediation of settlement between a payment recipient (A, B) selling, or increasing the credit value of stored value cards or electronic payment chips, and other vendors of the services that the card is used to pay for. The method entails that the seller (A, B) of a card or a card credit increase transfers the sales income to the income accounts (AIK, BIK) of an accounting system (KS), where the credit reduction records (R1, R2, R3 ..., Rn) in the use vending machines (P, BS, TA) when the card is used, are also transferred via connection lines (FL) to the accounting system (KS), where these records constitute a settlement basis from the income accounts (AIK, BIK) of the seller of cards or increase of card credit, and to the accounts (R1K, R2K, R3K ..., RnK) of different vendors of use vending machine services. The card or chip may contain an identification of the person or authority having received payment, and an identification of country or currency affiliation.
TL;DR: In this paper, a card holder who owns a payment card purchases merchandise from a seller via online communications through a network, he transmits order data relative to the purchase to the seller, that order data including parts relevant to respective ones of parties other than the card holder, e.g. a seller, a card manager, and a delivery service company, and which parts are encrypted by the terminal of the payment card holder using respective common cryptokeys which are effective only between card holder and the respective other parties.
Abstract: When a card holder who owns a payment card purchases merchandise from a seller via online communications through a network, he transmits order data relative to the purchase to the seller, that order data including parts relevant to respective ones of parties other than the card holder, e.g. the seller, a card manager, and a delivery service company, and which parts are encrypted by the terminal of the card holder using respective common cryptokeys which are effective only between the card holder and the respective other parties. The data is transmitted through the terminal of the seller to the terminals of the other parties. The other parties, on receipt of the transmitted data, decrypt that part of the data relevant to them using the relevant common cryptokeys.