GB2383876A

GB2383876A - Distributed transaction processing system

Info

Publication number: GB2383876A
Application number: GB0121143A
Authority: GB
Inventors: Stevenson Phillips
Original assignee: SP AGENCY Ltd
Current assignee: SP AGENCY Ltd
Priority date: 2001-08-31
Filing date: 2001-08-31
Publication date: 2003-07-09
Anticipated expiration: 2021-08-31
Also published as: GB0121143D0; GB2383876B

Abstract

The transaction processing system is used with a transaction card on which a card ID and transaction record are stored. The card may be a prepayment card and the transaction record may include the monetary amount outstanding. The system includes a PC 20, a web server 46 and a database server 62 which holds records 47. These include a card ID field 76 and a transaction record field 78. Transaction requests containing the charge and ID and transaction record read from the card are transmitted by the PC 20 to the web server 46 which in turn forwards a transaction request containing similar information to the database server 62 for validation against a database record 74. Upon validation, transaction field 78 is updated, a transaction confirmation is passed from the database server 62 to the web server 46, and from the latter to the PC 20 which modifies the transaction record on the card. Lack of congruence between the card and database record results in card suspension.

Description

Distributed Transaction Processing System Background to the Invention The present invention relates to a distributed transaction processing system of the type that allows a user to authorise financial transactions from a remote computer system.

Distributed transaction processing systems are the backbone of e-commerce. Typically, validating a transaction over the internet will involve submitting credit or debit card details over a secure connection.

Such distributed transaction processing systems ordinarily involve three components. The first is a computer system or PC, the second is a commercially operated web server and the third is a database server operated by the card issuer.

A number of internet security scares in recent times have sapped public confidence in e-commerce. Many people are reluctant to consign their card details to the internet, even over a secure connection. It is unlikely that they will be persuaded to do so in the face of statistics that show four out of every ten card-absent, i. e. remote, credit card transactions to be fraudulent.

Fraudulent credit card transactions are relatively easy to do, because in card-absent transactions, the fraudulent user needs only to know the personal details of the cardholder and the credit card number.

Verification of the validity of the transaction is limited to ensuring that these details, as submitted by the user, match those on a database maintained by the credit card issuer. The fraudulent user need not be in

possession of the card. The same card number can be used again and again for fraudulent transactions until the credit limit is reached or until the legitimate user puts a stop to its use.

Summary of the Invention The present invention provides a distributed transaction processing system that overcomes a number of the difficulties described above.

Accordingly, the present invention provides a transaction processing system for use with a transaction card having stored thereon information including a card ID and a transaction record, the transaction processing system including a computer system, a network server and a database server, the database server comprising a database including a plurality of records, each record including at least a card ID field and a transaction record field, the transaction processing system being adapted to operate as follows: in the computer system, to receive from a user a user transaction request identifying a transaction to be undertaken and a charge associated with it and, in response, to transmit to a network server a system transaction request identifying the transaction and the charge associated with it and including the card ID and transaction record read from the card ; in the network server, to receive the system transaction request and, in response, to transmit to a database server a server transaction request including the charge associated with that transaction, the card ID and the transaction record; in the database server, to receive the server transaction request and, in response, to validate the server transaction request against one of the database

records, to transmit to the network server a server transaction confirmation and to modify the content of the transaction record field of the database record against which the server transaction was validated, using information included in the server transaction request; in the network server, to receive the server transaction confirmation and, in response, to process the transaction and to transmit to the computer system a system transaction confirmation; and in the computer system, to receive the system transaction confirmation and, in response, to modify the modifiable transaction record using information included in the system transaction request or the system transaction confirmation and to write the modified transaction record to the card, the modified content of the transaction record field of the database record against which the server transaction was validated and the modified transaction record written to the card being congruent.

This system has a number of advantages over the conventional transaction processing systems described above. One advantage is that the transaction card need not be a credit or debit card. Preferably it is a prepaid or pay-as-you-go card. Another advantage is that, because a transaction record is maintained both on the card and in the issued card database, multiple fraudulent uses are much more difficult to achieve unless the fraudulent user has possession of the card. In addition, any legitimate use of the card after a fraudulent use will show that the card has been used fraudulently, because the transaction records will not match, enabling the card to be suspended immediately. Similarly, an attempted fraudulent use after a legitimate use that is unknown to the fraudulent user will have the same result.

The present invention also extends to the component parts of the distributed transaction processing system. In particular, the present invention also provides a computer system for use with a transaction card having stored thereon information including a card ID and a transaction record, the computer system being adapted to operate as follows: to receive from a user a user transaction request identifying a transaction to be undertaken and a charge associated with it and, in response, to transmit to a network server a system transaction request identifying the transaction and the charge associated with it and including the card ID and transaction record read from the card; and to receive a system transaction confirmation from the network server and, in response, to modify the modifiable transaction record using information included in the system transaction request or the system transaction confirmation and to write the modified transaction record to the card.

The present invention further provides a network server for processing transactions validated by a transaction card having stored thereon information including a card ID and a transaction record, the network server being adapted to operate as follows: to receive from a computer system a system transaction request identifying a transaction and a charge associated with it and including a card ID and a transaction record read from a transaction card and, in response, to transmit to a database server a server transaction request including the charge associated with that transaction, the card ID and the transaction record ; and

to receive from the database server a server transaction confirmation and, in response, to process the transaction and to transmit to the computer system a system transaction confirmation.

The present invention further provides a database server for authorising transactions validated by a transaction card having stored thereon information including a card ID and a transaction record, the database server comprising a database including a plurality of records, each record including at least a card ID field and a transaction record field, and being adapted to operate as follows: to receive from a network server a server transaction request including the charge associated with the transaction and a card ID and a transaction record read from a transaction card and, in response, to validate the server transaction request against one of the database records; to transmit to the network server a server transaction confirmation and to modify the content of the transaction record field of the database record against which the server transaction was validated, using information included in the server transaction request.

The network server may be a web server.

Preferably, the server transaction request is validated against one of the database records by determining that the card ID and the transaction record included in the server transaction request match the card ID and transaction record fields of the database record, and the modified content of the transaction record field of the database record against which the server transaction was

validated and the modified transaction record written to the card are identical.

In a straightforward implementation of the present invention, the transaction record is simply an amount remaining chargeable against the card and the modified transaction record is equal to the unmodified transaction record less the charge associated with the transaction.

In that case, preferably the server transaction request is validated against one of the database records by determining that the card ID and the transaction record included in the server transaction request match the card ID and transaction record fields of the database record and by determining that the charge associated with the transaction is no greater than the amount remaining chargeable against the card, and the modified content of the transaction record field of the database record against which the server transaction was validated and the modified transaction record written to the card are identical.

The present invention extends to methods of operating the transaction processing system and its components. In particular, the present invention provides a method of operating a computer system in conjunction with a transaction card having stored thereon information including a card ID and a transaction record, the method comprising: receiving from a user a user transaction request identifying a transaction to be undertaken and a charge associated with it and, in response, transmitting to a network server a system transaction request identifying the transaction and the charge associated with it and

including the card ID and transaction record read from the card; and receiving a system transaction confirmation from the network server and, in response, modifying the modifiable transaction record using information included in the system transaction request or the system transaction confirmation and writing the modified transaction record to the card.

The present invention further provides a method of operating a network server to process transactions validated by a transaction card having stored thereon information including a card ID and a transaction record, the method comprising: receiving from a computer system a system transaction request identifying a transaction and a charge associated with it and including a card'10 and a transaction record read from a transaction card and, in response, transmitting to a database server a server transaction request including the charge associated with that transaction, the card ID and the transaction record; and receiving from the database server a server transaction confirmation and, in response, processing the transaction and transmitting to the computer system a system transaction confirmation.

The present invention further provides a method of operating'a database server to authorise transactions validated by a transaction card having stored thereon information including a card ID and a transaction record, the database server comprising a database including a plurality of records, each record including at least a card ID field and a transaction record field, method comprising:

receiving from a network server a server transaction request including the charge associated with the transaction and a card ID and a transaction record read from a transaction card and, in response, validating the server transaction request against one of the database records; transmitting to the network server a server transaction confirmation and modifying the content of the transaction record field of the database record against which the server transaction was validated, using information included in the server transaction request.

The present invention further provides a method of operating a transaction processing system in conjunction with a transaction card having stored thereon information including a card ID and a transaction record, the transaction processing system including a computer system, a network server and a database server, the database server comprising a database including a plurality of records, each record including at least a card ID field and a transaction record field, the method comprising : in the computer system, receiving from a user a user transaction request identifying a transaction to be undertaken and a charge associated with it and, in response, transmitting to a network server a system transaction request identifying the transaction and the charge associated with it and including the card ID and transaction record read from the card; in the network server, receiving the system transaction request and, in response, transmitting to a database server a server transaction request including the charge associated with that transaction, the card ID and the transaction record;

in the database server, receiving the server transaction request and, in response, validating the server transaction request against one of the database records, transmitting to the network server a server transaction confirmation and modifying the content of the transaction record field of the database record against which the server transaction was validated, using information included in the server transaction request; in the network server, receiving the server transaction confirmation and, in response, processing the transaction and transmitting to the computer system a system transaction confirmation; and in the computer system, receiving the system transaction confirmation and, in response, modifying the modifiable transaction record using information included in the system transaction request or the system transaction confirmation and writing the modified transaction record to the card, the modified content of the transaction record field of the database record against which the server transaction was validated and the modified transaction record written to the card being congruent.

The present invention also extends to computer program products for operating the components of the transaction processing system. In particular, the present invention provides a computer program product for a computer system, the computer program product comprising computer program code means for: receiving from a user a user transaction request identifying a transaction to be undertaken and a charge associated with it and, in response, transmitting to a network server a system transaction request identifying the transaction and the charge associated with it and

including a card ID and a transaction record read from a transaction card; and receiving a system transaction confirmation from the network server and, in response, modifying the transaction record using information included in the system transaction request or the system transaction confirmation and writing the modified transaction record to the card.

The present invention further provides a computer program product for a network server, the computer program product comprising computer program code means for: receiving from a computer system a system transaction request identifying a transaction and a charge associated with it and including a card ID and a transaction record read from a transaction card and, in response, transmitting to a database server a server transaction request including the charge associated with that transaction, the card ID and the transaction record; and receiving from the database server a server transaction confirmation and, in response, processing the transaction and transmitting to the computer system a server transaction confirmation.

The present invention further provides a computer program product for a database server, the computer program product comprising computer program code means for: defining a database including a plurality of records, each record including at least a card ID field and a transaction record field; receiving from a network server a server transaction request including the charge associated with that transaction and a card ID and a transaction record read from a transaction card and, in response, validating the

server transaction request against one of the database records; and transmitting to the network server a server transaction confirmation and modifying the content of the transaction record field of the database record against which the server transaction was validated, using information included in the server transaction request.

Brief Description of the Drawings The present invention will now be described with reference to the accompanying drawings, in which : figure 1 shows an internet cash card; figure 2 is a schematic of a distributed transaction processing system for use with the internet cash card of figure 1; and figure 3 is a flowchart of the operation of the system of figure 2.

Detailed Description of the Invention The distributed transaction processing system of the present invention consists of four basic components. The first is a transaction card 10 that stores information including a card ID 12 and a transaction record 14. The transaction record 14 is designed to add an extra dimension of security to transactions validated by the transaction card 10. In its preferred form, the transaction record 14 is an amount remaining chargeable against the card 10, that amount being reduced as the card 10 is used to validate transactions. The card 10 also includes a download memory 13 onto which web pages or other internet downloads can be stored.

The second component of the distributed transaction processing system is a computer system or PC 20. The PC 20 includes a microprocessor 22 that connects to a system

bus 24. The system bus 24 connects the microprocessor 22 to a card interface 26, a plurality of additional peripheral interfaces 28 and a system memory 30. The peripheral interfaces 28 connect to a user interface 32, including a mouse 34, a keyboard 36 and a display 38, and other peripherals, such as a hard disk drive 40 and a printer 42. The card interface 26 is used for read/write operations on the transaction card. The system bus also connects to an internet interface 44 that is used to establish a connection with a web server 46.

The third component of the distributed transaction processing system is the web server 46. The web server 46 includes a microprocessor 48 that connects to a system bus 50. The system bus 50 connects the microprocessor 48 to a plurality of peripheral interfaces 52, a system memory 54 and an internet interface 55. The peripheral interfaces 52 connect to a virtual memory 56, such as a hard disk drive, on which a plurality of web pages 58 published by the web server are stored. The system bus also connects to a network interface 60 that is used to establish a connection with a database server 62.

The fourth component of the distributed transaction processing system is the database server 62. The database server 62 includes a microprocessor 64 that connects to a system bus 66. The system bus 66 connects the microprocessor 64 to a plurality of peripheral interfaces 68, a system memory 70 and a network interface 71. The peripheral interfaces 68 connect to a virtual memory 72, such as a hard disk drive, on which a plurality of database records 74 are stored. Each database record 74 includes at least two fields, a card ID field 76 and a transaction record field 78. The database is maintained by a card issuer and is populated with details of all

issued transaction cards. The transaction record in this embodiment of the invention is the amount remaining chargeable against the card. The transaction processing protocol described below ensures that the transaction record field and the transaction record stored on the relevant card, whilst continually updated as transactions take place, remain synchronised.

A user purchases a transaction card 10 from a card issuer. So, for example, the user pays f. 50 for a f. 50 transaction card. The card 10 is therefore a pre-paid or pay-as-you-go card. The purchase price of the card 10 is redeemable only against transactions validated by it.

When the card 10 is given to the user, it has stored upon it an unique card ID 12 and, as the transaction record 14, the amount remaining chargeable against the card 10.

The card 10 may be a write-enabled optical disk, a SIM card or any other kind of card that is both convenient to carry and capable of being re-written. The information 12,14 stored on the card 10 is preferably encrypted using any secure encryption technique.

The transaction card 10 is used to validate web-based transactions via the local PC 20 and requires transaction card-enabled software to be running both on the local PC 20 and on the web server 46. For example, the web server 46 may be supporting a site that retails consumer products. The site will support the selection of consumer products by a remote user, acting through the agency of browser software on the local PC 20, and the issue of a purchase instruction from the local PC to the web server.

The purchase instruction is issued in response to a user transaction request that arrives from a user via the user interface 32. That transaction request may simply be a mouse click on a"purchase"button displayed in the

browser window, but it nonetheless identifies a transaction to be undertaken and in so doing also identifies a charge associated with it, because each specific transaction request will have an unique charge associated with it.

In response to the receipt of the user transaction request, the PC 20 executes the code associated with the "purchase" button and in so doing transmits to the web server 46 via the internet interface 44 a system transaction request. The PC 20 also transmits to the web server 46 the card ID 12 and transaction record 14, i. e. the amount remaining chargeable, read from the card 10 via the card interface 26. Other details may also be transmitted, such as the issue date of the card and the user's personal details. Especially useful to include is an unique PIN or password that is known only to the legitimate user and the database server. This represents a further security enhancement. All these details are securely encrypted before transmission, either by the browser software or because they are encrypted on the card in any case or both. Therefore, the system transaction request identifies the transaction and the charge associated with it and includes the card ID 12 and transaction record 14 read from the card 10 via the card interface 26.

The web server 46 receives the system transaction request from the PC 20 via its own internet interface 55. To determine whether the transaction requested is to continue, the web server 46 must query the database server 62 to obtain authorisation. Therefore, in response to the receipt of the system transaction request, the web server 46 transmits to the database server 62 via the network interface 60 a server transaction request that

includes the relevant details for authorisation purposes.

These details include at least the charge associated with the transaction, the card ID 12 and the transaction record 14. They may include other details received from the PC, such as the issue date of the card and the user's personal details. The database transaction request is securely encrypted.

The database server 62 must validate the server transaction request against the database records 74. The database server 62 receives the server transaction request from the network server 46 via its network interface 71. In response to the receipt of the server transaction request, the database server decrypts the information contained within it and compares the decrypted information with the database records 74. This comparison includes a comparison of the card ID 12 and transaction record 14 and, if the system is so designed, the user's PIN or password and/or personal details. If one of the database records 74 matches the decrypted information in all relevant respects, the server transaction is validated. If not, the transaction is invalidated.

Once the transaction has been validated, the database server 62 updates the transaction record field 78 of the database record 74 against which the transaction was validated. In this preferred embodiment, where the transaction record 14 is the amount remaining chargeable against the card 10, this involves subtracting from the content of the transaction record field 78 the charge associated with the validated transaction and writing the difference back into the transaction record field 70.

Next, the database server 62 transmits to the web server

46 via the network interface 71 a server transaction confirmation.

The web server 46 receives via its network interface 60 the server transaction confirmation from the database server 62. In response, it processes the authorised transaction. This may involve issuing an instruction to an inventory system. It then transmits to the PC 20 via the internet interface 55 a system transaction confirmation.

The PC 20 receives the system transaction confirmation from the network server 46 via its internet interface 44.

In response, the transaction card-enabled browser software updates the transaction record 14 of the card 10. In this preferred embodiment, where the transaction record 14 is the amount remaining chargeable against the card 10, this involves subtracting from the transaction record 14 the charge associated with the transaction and writing the difference back into the transaction record 14. This ensures that the transaction record 14 on the card 10 and the transaction record field 78 of the relevant database record 74 remain congruent; identical in this case.

It will be seen from the above description that the transaction processing system of the present invention has considerable merit as compared with credit card transactions. Firstly, the card is not a credit card and has a finite spending limit. Secondly, if more than one person tries to validate transactions using the card, this will show up as a lack of congruency in the card transaction record 14 and the database transaction record 78 and the card can immediately be suspended.

Claims

Claims 1. A computer system for use with a transaction card having stored thereon information including a card ID and a transaction record, the computer system being adapted to operate as follows: to receive from a user a user transaction request identifying a transaction to be undertaken and a charge associated with it and, in response, to transmit to a network server a system transaction request identifying the transaction and the charge associated with it and including the card ID and transaction record read from the card ; and to receive a system transaction confirmation from the network server and, in response, to modify the modifiable transaction record using information included in the system transaction request or the system transaction confirmation and to write the modified transaction record to the card.
2. A computer system according to claim 1 in which the transaction record is an amount remaining chargeable against the card and the modified transaction record is equal to the unmodified transaction record less the charge associated with the transaction.
3. A network server for processing transactions validated by a transaction card having stored thereon information including a card ID and a transaction record, the network server being adapted to operate as follows: to receive from a computer system a system transaction request identifying a transaction and a charge associated with it and including a card ID and a transaction record read from a transaction card and, in response, to transmit to a database server a server

<Desc/Clms Page number 18>

transaction request including the charge associated with that transaction, the card ID and the transaction record; and to receive from the database server a server transaction confirmation and, in response, to process the transaction and to transmit to the computer system a system transaction confirmation.
4. A network server according to claim 3 in which the transaction record is an amount remaining chargeable against the card.
5. A network server according to claim 3 or claim 4 which is a web server.
6. A database server for authorising transactions validated by a transaction card having stored thereon information including a card ID and a transaction record, the database server comprising a database including a plurality of records, each record including at least a card ID field and a transaction record field, and being adapted to operate as follows: to receive from a network server a server transaction request including the charge associated with the transaction and a card ID and a transaction record read from a transaction card and, in response, to validate the server transaction request against one of the database records ; to transmit to the network server a server transaction confirmation and to modify the content of the transaction record field of the database record against which the server transaction was validated, using information included in the server transaction request.

<Desc/Clms Page number 19>
7. A database server according to claim 6 in which the transaction record is an amount remaining chargeable against the card and the modified transaction record is equal to the unmodified transaction record less the charge associated with the transaction.
8. A database server according to claim 6 or claim 7 in which the server transaction request is validated against one of the database records by determining that the card ID and the transaction record included in the server transaction request match the card ID and transaction record fields of the database record.
9. A database server according to claim 7 in which the server transaction request is validated against one of the database records by determining that the card ID and the transaction record included in the server transaction request match the card ID and transaction record fields of the database record and by determining that the charge associated with the transaction is no greater than the amount remaining chargeable against the card.
10. A transaction processing system for use with a transaction card having stored thereon information including a card ID and a transaction record, the transaction processing system including a computer system, a network server and a database server, the database server comprising a database including a plurality of records, each record including at least a card ID field and a transaction record field, the transaction processing system being adapted to operate as follows: in the computer system, to receive from a user a user transaction request identifying a transaction to be

<Desc/Clms Page number 20>

undertaken and a charge associated with it and, in response, to transmit (0 a network server a system transaction request identifying the transaction and the charge associated with it and including the card ID and transaction record read from the card; in the network server, to receive the system transaction request and, in response, to transmit to a database server a server transaction request including the charge associated with that transaction, the card ID and the transaction record; in the database server, to receive the server transaction request and, in response, to validate the server transaction request against one of the database records, to transmit to the network server a server transaction confirmation and to modify the content of the transaction record field of the database record against which the server transaction was validated, using information included in the server transaction request; in the network server, to receive the server transaction confirmation and, in response, to process the transaction and to transmit to the computer system a system transaction confirmation; and in the computer system, to receive the system transaction confirmation and, in response, to modify the modifiable transaction record using information included in the system transaction request or the system transaction confirmation and to write the modified transaction record to the card, the modified content of the transaction record field of the database record against which the server transaction was validated and the modified transaction record written to the card being congruent.
11. A transaction processing system according to claim 10 in which the network server is a web server.

<Desc/Clms Page number 21>
12. A transaction processing system according to claim 10 or claim 11 in which the transaction record is an amount remaining chargeable against the card and the modified transaction record is equal to the unmodified transaction record less the charge associated with the transaction.
13. A transaction processing system according to any one of claims 10-12 in which the server transaction request is validated against one of the database records by determining that the card ID and the transaction record included in the server transaction request match the card ID and transaction record fields of the database record and in which the modified content of the transaction record field of the database record against which the server transaction was validated and the modified transaction record written to the card are identical.
14. A transaction processing system according to claim 12 in which the server transaction request is validated against one of the database records by determining that the card ID and the transaction record included in the server transaction request match the card ID and transaction record fields of the database record and by determining that the charge associated with the transaction is no greater than the amount remaining chargeable against the card and in which the modified content of the transaction record field of the database record against which the server transaction was validated and the modified transaction record written to the card are identical.
15. A method of operating a computer system in conjunction with a transaction card having stored thereon

<Desc/Clms Page number 22>

information including a card ID and a transaction record, the method comprising : receiving from a user a user transaction request identifying a transaction to be undertaken and a charge associated with it and, in response, transmitting to a network server a system transaction request identifying the transaction and the charge associated with it and including the card ID and transaction record read from the card; and receiving a system transaction confirmation from the network server and, in response, modifying the modifiable transaction record using information included in the system transaction request or the system transaction confirmation and writing the modified transaction record to the card.
16. A method according to claim 15 in which the transaction record is an amount remaining chargeable against the card and the modified transaction record is equal to the unmodified transaction record less the charge associated with the transaction.
17. A method of operating a network server to process transactions validated by a transaction card having stored thereon information including a card ID and a transaction record, the method comprising: receiving from a computer system a system transaction request identifying a transaction and a charge associated with it and including a card ID and a transaction record read from a transaction card and, in response, transmitting to a database server a server transaction request including the charge associated with that transaction, the card ID and the transaction record; and

<Desc/Clms Page number 23>

receiving from the database server a server transaction confirmation and, in response, processing the transaction and transmitting to the computer system a system transaction confirmation.
18. A method according to claim 17 in which the transaction record is an amount remaining chargeable against the card.
19. A method according to claim 17 or claim 18 which is a web server.
20. A method of operating a database server to authorise transactions validated by a transaction card having stored thereon information including a card ID and a transaction record, the database server comprising a database including a plurality of records, each record including at least a card ID field and a transaction record field, method comprising: receiving from a network server a server transaction request including the charge associated with the transaction and a card ID and a transaction record read from a transaction card and, in response, validating the server transaction request against one of the database records; transmitting to the network server a server transaction confirmation and modifying the content of the transaction record field of the database record against which the server transaction was validated, using information included in the server transaction request.
21. A method according to claim 20 in which the transaction record is an amount remaining chargeable against the card and the modified transaction record is

<Desc/Clms Page number 24>

equal to the unmodified transaction record less the charge associated with the transaction.
22. A method according to claim 20 or claim 21 in which the server transaction request is validated against one of the database records by determining that the card ID and the transaction record included in the server transaction request match the card ID and transaction record fields of the database record.
23. A method according to claim 21 in which the server transaction request is validated against one of the database records by determining that the card ID and the transaction record included in the server transaction request match the card ID and transaction record fields of the database record and by determining that the charge associated with the transaction is no greater than the amount remaining chargeable against the card.
24. A method of operating a transaction processing system in conjunction with a transaction card having stored thereon information including a card ID and a transaction record, the transaction processing system including a computer system, a network server and a database server, the database server comprising a database including a plurality of records, each record including at least a card ID field and a transaction record field, the method comprising: in the computer system, receiving from a user a user transaction request identifying a transaction to be undertaken and a charge associated with it and, in response, transmitting to a network server a system transaction request identifying the transaction and the charge associated with it and including the card ID and transaction record read from the card;

<Desc/Clms Page number 25>

in the network server, receiving the system transaction request and, in response, transmitting to a database server a server transaction request including the charge associated with that transaction, the card ID and the transaction record; in the database server, receiving the server transaction request and, in response, validating the server transaction request against one of the database records, transmitting to the network server a server transaction confirmation and modifying the content of the transaction record field of the database record against which the server transaction was validated, using information included in the server transaction request; in the network server, receiving the server transaction confirmation and, in response, processing the transaction and transmitting to the computer system a system transaction confirmation; and in the computer system, receiving the system transaction confirmation and, in response, modifying the modifiable transaction record using information included in the system transaction request or the system transaction confirmation and writing the modified transaction record to the card, the modified content of the transaction record field of the database record against which the server transaction was validated and the modified transaction record written to the card being congruent.
25. A method according to claim 24 in which the network server is a web server.
26. A method according to claim 24 or claim 25 in which the transaction record is an amount remaining chargeable against the card and the modified transaction record is

<Desc/Clms Page number 26>

equal to the unmodified transaction record less the charge associated with the transaction.
27. A method according to any one of claims 24-26 in which the server transaction request is validated against one of the database records by determining that the card ID and the transaction record included in the server transaction request match the card ID and transaction record fields of the database record and in which the modified content of the transaction record field of the database record against which the server transaction was validated and the modified transaction record written to the card are identical.
28. A method according to claim 26 in which the server transaction request is validated against one of the database records by determining that the card ID and the transaction record included in the server transaction request match the card ID and transaction record fields of the database record and by determining that the charge associated with the transaction is no greater than the amount remaining chargeable against the card and in which the modified content of the transaction record field of the database record against which the server transaction was validated and the modified transaction record written zo the card are identical.
29. A computer program product for a computer system, the computer program product comprising computer program code means for: receiving from a user a user transaction request identifying a transaction to be undertaken and a charge associated with it and, in response, transmitting to a network server a system transaction request identifying the transaction and the charge associated with it and

<Desc/Clms Page number 27>

including a card ID and a transaction record read from a transaction card; and receiving a system transaction confirmation from the network server and, in response, modifying the transaction record using information included in the system transaction request or the system transaction confirmation and writing the modified transaction record to the card.
30. A computer program product according to claim 29 in which the transaction record is an amount remaining chargeable against the card and the modified transaction record is equal to the unmodified transaction record less the charge associated with the transaction.
31. A computer program product according to claim 29 of claim 30 that is integrated into web browser software.
32. A computer program product for a network server, the computer program product comprising computer program code means for: receiving from a computer system a system transaction request identifying a transaction and a charge associated with it and including a card ID and a transaction record read from a transaction card and, in response, transmitting to a database server a server transaction request including the charge associated with that transaction, the card ID and the transaction record; and receiving from the database server a server transaction confirmation and, in response, processing the transaction and transmitting to the computer system a server transaction confirmation.

<Desc/Clms Page number 28>
33. A computer program product according to claim 32 in which the transaction record is an amount remaining chargeable against the card.
34. A computer program product according to claim 32 or claim 33 for a web server.
35. A computer program product for a database server, the computer program product comprising computer program code means for: defining a database including a plurality of records, each record including at least a card ID field and a transaction record field; receiving from a network server a server transaction request including the charge associated with that transaction and a card ID and a transaction record read from a transaction card and, in response, validating the server transaction request against one of the database records; and transmitting to the network server a server transaction confirmation and modifying the content of the transaction record field of the database record against which the server transaction was validated, using information included in the server transaction request.
36. A computer program product according to claim 35 in which the transaction record is an amount remaining chargeable against the card and the modified transaction record is equal to the unmodified transaction record less the charge associated with the transaction.
37. A computer program product according to claim 35 or claim 36 in which the server transaction request is validated against one of the database records by determining that the card ID and the transaction record

<Desc/Clms Page number 29>

included in the server transaction request match the card ID and transaction record fields of the database record.
38. A computer program product according to claim 36 in which the server transaction request is validated against one of the database records by determining that the card ID and the transaction record included in the server transaction request match the card ID and transaction record fields of the database record and by determining that the charge associated with the transaction is no greater than the amount remaining chargeable against the card.
39. A computer system for use with a transaction card having stored thereon information including a card ID and a transaction record, the computer system being substantially as described herein with reference to the accompanying drawings.
40. A network server for processing transactions validated by a transaction card having stored thereon information including a card ID and a transaction record, the network server being substantially as described herein with reference to the accompanying drawings.
41. A database server for authorising transactions validated by a transaction card having stored thereon information including a card ID and a transaction record, the database server being substantially as described herein with reference to the accompanying drawings.
42. A transaction processing system for use with a transaction card having stored thereon information including a card ID and a transaction record, the transaction processing system being substantially as

<Desc/Clms Page number 30>

described herein with reference to the accompanying drawings.
43. A method of operating a computer system in conjunction with a transaction card having stored thereon information including a card ID and a transaction record, the method being substantially as described herein with reference to the accompanying drawings.
44. A method of operating a network server to process transactions validated by a transaction card having stored thereon information including a card ID and a transaction record, the method being substantially as described herein with reference to the accompanying drawings.
45. A method of operating a database server to authorise transactions validated by a transaction card having stored thereon information including a card ID and a transaction record, the database server comprising a database including a plurality of records, each record including at least a card ID field and a transaction record field, method being substantially as described herein with reference to the accompanying drawings.
46. A method of operating a transaction processing system in conjunction with a transaction card having stored thereon information including a card ID and a transaction record, the transaction processing system including a computer system, a network server and a database server, the database server comprising a database including a plurality of records, each record including at least a card ID field and a transaction record field, the method being substantially as described herein with reference to the accompanying drawings.

<Desc/Clms Page number 31>
47. A computer program product for a computer system, the computer program product being substantially as described herein with reference to the accompanying drawings.
48. A computer program product for a network server, the computer program product being substantially as described herein with reference to the accompanying drawings.
49. A computer program product for a database server, the computer program product being substantially as described herein with reference to the accompanying drawings.