Digital active advertising

1. An open network payment system for providing for real time authorization of payment transactions, comprising:

a plurality of client computers; and

a payment computer;

the client computers and the payment computer being interconnected by a public packet switched communications network;

each one of the client computers being programmed to construct a payment request message specifying a payment amount to be transferred from a sender to a beneficiary, and to cause the payment request message to be transmitted to the payment computer over the public packet switched communications network;

the payment computer being programmed to verify that the sender has adequate funds or credit having real monetary value, and to transmit an authorization message to the client computer over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network;

at least one of the payment request message and the authorization message comprising at least one digital signature of components that include components derived from the at least one message, at least one of which digital signatures protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the at least one message, at least one of which digital signatures protects the at least one message from all replay attacks that result in loss of value, and at least one of which digital signatures is verified based on a principal-specific or source-specific public key.

2. The network payment system of claim 1 wherein the authorization message comprises an authenticator proving that the payment computer originated the authorization message and is capable of validation without use of a secret key.

3. The network payment system of claim 1 wherein the at least one signature comprises one signature that protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the at least one message, protects the at least one message from replay attack, and is computed based on a principal-specific or source-specific secret key.

4. The network payment system of claim 1 wherein the payment computer is programmed to cause information pertaining to the payment request message and authorization to be recorded.

5. A method of providing for real-time authorization of purchase transactions in a public packet switched communications network interconnecting a plurality of client computers and a payment computer, and comprising the steps of:

constructing a payment request message at one of the client computers specifying a payment amount to be transferred from a sender to a beneficiary, and causing the payment request message to be transmitted to the payment computer over the public packet switched communications network; and

verifying, at the payment computer, that the sender has adequate funds or credit having real monetary value, and transmitting an authorization message from the payment computer to the client computer over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network;

at least one of the payment request message and the authorization message comprising at least one digital signature of components that include components derived from the at least one message, at least one of which digital signatures protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the at least one message, at least one of which digital signatures protects the at least one message from all replay attacks that result in loss of value, and at least one of which digital signatures is verified based on a principal-specific or source-specific public key.

6. The method of claim 5 wherein the authorization message comprises an authenticator proving that the payment computer originated the authorization message and is capable of validation without use of a secret key.

7. A payment computer for use in providing real-time authorization of payment transactions, the payment computer being programmed to receive, over a public packet switched communications network, a payment request message specifying a payment amount to be transferred from the sender to the beneficiary, the payment computer further being programmed to authenticate the payment request message, to verify that the sender has adequate funds or credit having real monetary value, and to transmit an authorization message over the public packet switched communications network, the authorization message comprising an authenticator proving that the payment computer originated the authorization message, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network;

at least one of the payment request message and the authorization message comprising at least one digital signature of components that include components derived from the at least one message, at least one of which digital signatures protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the at least one message, at least one of which digital signatures protects the at least one message from all replay attacks that result in loss of value, and at least one of which digital signatures is verified based on a principal-specific or source-specific public key.

8. The payment computer of claim 7 wherein the authorization message comprises an authenticator proving that the payment computer originated the authorization message and is capable of validation without use of a secret key.

9. The method of claim 5 further comprising the step of causing information pertaining to the payment request message and authorization to be recorded.

10. An open network payment system for providing for real-time authorization of payment transactions, comprising:

a plurality of client computers; and

a payment computer;

the client computers and the payment computer being interconnected by a public packet switched communications network;

each one of the client computers being programmed to construct a payment request message specifying a payment amount to be transferred from a sender to a beneficiary, and to cause the payment request message to be transmitted to the payment computer over the public packet switched communications network;

the payment computer being programmed to verify that the sender has adequate funds or credit having real monetary value, and to transmit an authorization message to the client computer over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network;

the authorization message comprising at least one digital signature of components that include components derived from the authorization message, at least one of which digital signatures protects the authorization message from forgery, at least one of which digital signatures protects the authorization message from all replay attacks that result in loss of value; and

the authorization message comprising an authenticator proving that the payment computer originated the authorization message and being capable of validation without use of a secret key.

11. The network payment system of claim 10 wherein the authenticator is a digital signature.

12. The network payment system of claim 10 wherein the payment computer is programmed to cause information pertaining to the payment request message and authorization to be recorded.

13. A method of providing for real-time authorization of purchase transactions in a public packet switched communications network interconnecting a plurality of client computers and a payment computer, and comprising the steps of:

constructing a payment request message at one of the client computers specifying a payment amount to be transferred from a sender to a beneficiary, and causing the payment request message to be transmitted to the payment computer over the public packet switched communications network; and

verifying, at the payment computer, that the sender has adequate funds or credit having real monetary value, and transmitting an authorization message from the payment computer to the client computer over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network;

the authorization message comprising at least one digital signature of components that include components derived from the authorization message, at least one of which digital signatures protects the authorization message from forgery, and at least one of which digital signatures protects the authorization message from all replay attacks that result in loss of value; and

the authorization message comprising an authenticator proving that the payment computer originated the authorization message and being capable of validation without use of a secret key.

14. The method of claim 13 wherein the authenticator is a digital signature.

15. The method of claim 13 further comprising the step of causing information pertaining to the payment request message and authorization to be recorded.

16. The network payment system of claim 4 wherein the payment computer is programmed to cause the information pertaining to the payment request message and authorization to be recorded in a settlement database.

17. The method of claim 9 wherein the information pertaining to the payment request message and authorization is recorded in a settlement database.

18. The network payment system of claim 12 wherein the payment computer is programmed to cause the information pertaining to the payment request message and authorization to be recorded in a settlement database.

19. The method of claim 15 wherein the information pertaining to the payment request message and authorization is recorded in a settlement database.

20. The open network payment system of claim 1 wherein the payment request message comprises the at least one digital signature of components that include components derived from the at least one message.

21. The method of claim 5 wherein the payment request message comprises the at least one digital signature of components that include components derived from the at least one message.

22. The payment computer of claim 7 wherein the payment request message comprises the at least one digital signature of components that include components derived from the at least one message.

23. An open network payment system for providing for real-time authorization of payment transactions, comprising:

a plurality of client computers; and

a payment computer;

the client computers and the payment computer being interconnected by a public packet switched communications network;

each one of the client computers being programmed to construct a payment request message specifying a payment amount to be transferred from a sender to a beneficiary, and to cause the payment request message to be transmitted to the payment computer over the public packet switched communications network;

the payment computer being programmed to verify that the sender has adequate funds or credit having real monetary value, and to transmit an authorization message to the client computer over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network;

at least one of the payment request message and the authorization message comprising at least one digital signature of components that include components derived from the at least one message, at least one of which digital signatures protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the at least one message, at least one of which digital signatures protects the at least one message from all replay attacks that result in loss of value, and at least one of which digital signatures is computed based on a principal-specific or source-specific secret key.

24. The open network payment system of claim 23 wherein the payment request message comprises the at least one digital signature of components that include components derived from the at least one message.

25. A method of providing for real-time authorization of purchase transactions in a public packet switched communications network interconnecting a plurality of client computers and a payment computer, and comprising the steps of:

constructing a payment request message at one of the client computers specifying a payment amount to be transferred from a sender to a beneficiary, and causing the payment request message to be transmitted to the payment computer over the public packet switched communications network; and

verifying, at the payment computer, that the sender has adequate funds or credit having real monetary value, and transmitting an authorization message from the payment computer to the client computer over the public packet switched communications network, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network;

at least one of the payment request message and the authorization message comprising at least one digital signature of components that include components derived from the at least one message, at least one of which digital signatures protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the at least one message, at least one of which digital signatures protects the at least one message from all replay attacks that result in loss of value, and at least one of which digital signatures is computed based on a principal-specific or source-specific secret key.

26. The method of claim 25 wherein the payment request message comprises the at least one digital signature of components that include components derived from the at least one message.

27. A payment computer for use in providing real-time authorization of payment transactions, the payment computer being programmed to receive, over a public packet switched communications network, a payment request message specifying a payment amount to be transferred from the sender to the beneficiary, the payment computer further being programmed to authenticate the payment request message, to verify that the sender has adequate funds or credit having real monetary value, and to transmit an authorization message over the public packet switched communications network, the authorization message comprising an authenticator proving that the payment computer originated the authorization message, conditioned on at least one message transmitted over the public packet switched communications network in connection with the real-time authorization not being a replay of a message previously transmitted over the public packet switched communications network;

at least one of the payment request message and the authorization message comprising at least one digital signature of components that include components derived from the at least one message, at least one of which digital signatures protects the at least one message from forgery, including authenticating an identity of one of a plurality of principals as an originator of the at least one message, at least one of which digital signatures protects the at least one message from all replay attacks that result in loss of value, and at least one of which digital signatures is computed based on a principal-specific or source-specific secret key.

28. The payment computer of claim 27 wherein the payment request message comprises the at least one digital signature of components that include components derived from the at least one message.