Hosted sensitive data form fields for compliance with security standards

US11301219B2 · kind B2 · utility

Assignee

• PAYPAL, INC. · US

Inventors

• Kyle DeTella · Chicago, US
• Evan Hahn · San Francisco, US
• Eric Mrak · Mill Valley, US
• George Carpenter, V · Southbridge, US
• Thomas Klun · Chicago, US
• John Walter Downey · New York, US
• Rohit Turumella · San Jose, US
• Mickey Reiss · Chicago, US
• Benjamin Mills · San Jose, US

Key dates

• Filing date: Dec 29, 2015
• Grant date: Apr 12, 2022
• Expiry date: Mar 25, 2038

Classification

• Technology area (CPC G): Physics
• CPC primary: G06Q20/34
• WIPO field: IT methods for management
• WIPO sector: Electrical engineering

Abstract

Systems and methods providing, by a third party, input form fields for sensitive data on a web page provided by an organization. A user may request a web page from an organization, such as a merchant's checkout web page, that requires entry of sensitive data. The merchant's checkout web page may include reference to a script file that provides hosted sensitive data form fields. In response to rendering the merchant web page in a web browser of the user, a request to provide sensitive data form fields on the merchant web page may be received. The request may include a call to a function in a scripting file provided by the third party, and the provided file may cause one or more inline frames to be rendered in the web browser, each inline frame including a sensitive data form field. Data entered by the user in the sensitive data form fields may be received by a third party payment processor device.