Systems and methods for processing metadata statements in payment flows

Patent metadata

Field	Value
Publication number	US-10332115-B2
Application number	US-201615066738-A
Country	US
Kind code	B2
Filing date	Mar 10, 2016
Priority date	Mar 10, 2016
Publication date	Jun 25, 2019
Grant date	Jun 25, 2019

Abstract

A system may receive a transaction request for a transaction using a transaction authorization protocol. The transaction request may include a transaction amount and may also be associated with a transaction account. The system may transmit a request to authenticate a user associated with the transaction account. The request to authenticate uses the transaction authorization protocol. The system may also receive an authentication message using the transaction authorization protocol. The authentication message may comprise authentication metadata that indicates an authentication type and/or an authentication outcome. The authentication type may include biometric authentication techniques.

First claim

What is claimed is:

1. A method comprising:
receiving, by a computer system and from a client device of a user, an authorization request for a financial transaction using a financial transaction authorization protocol,
wherein the authorization request includes a financial transaction amount, and
wherein the authorization request is associated with a financial transaction account;
transmitting, by the computer system and using the financial transaction authorization protocol, an authentication request to authenticate the user associated with the financial transaction account;
receiving, by the computer system using the financial transaction authorization protocol and from an authenticator server, an authentication message lacking biometric data that is retained at the authenticator server,
wherein the authentication message comprises authentication metadata that indicates an authentication type, statistics with rates about an authentication technique and an authentication outcome conducted by the authenticator server, and
wherein the authentication type includes a biometric authentication of biometric data; and
determining, by the computer system and based on the authentication message, a result of the authorization request for the financial transaction.

2. The method of claim 1 , wherein the authentication type comprises a cardholder verification method (CVM).

3. The method of claim 1 , wherein the authentication type comprises a consumer device cardholder verification method (CDCVM).

4. The method of claim 1 , wherein the statistics with rates comprise at least one of a false match rate, a false acceptance rate, a false non-match rate, a false artifact acceptance rate, a false rejection rate, a detection error tradeoff, an equal error rate, a failure to enrollee rate, or a failure to capture rate.

5. The method of claim 1 , wherein the authentication metadata indicates a successful authentication of the user associated with the financial transaction account.

6. The method of claim 1 , wherein the result includes authorizing the financial transaction in response to the authentication metadata indicating a successful authentication outcome.

7. The method of claim 1 , wherein the biometric authentication comprises at least one of a fingerprint authentication, a facial authentication, or a vocal authentication.

8. A computer-based system, comprising:
a processor; and
a tangible, non-transitory memory configured to communicate with the processor, the tangible, non-transitory memory having instructions stored thereon that, in response to execution by the processor, cause the processor to perform operations comprising:
receiving, by the processor and from a client device of a user, an authorization request for a financial transaction using a financial transaction authorization protocol,
wherein the authorization request includes a financial transaction amount, and
wherein the authorization request is associated with a financial transaction account;
transmitting, by the processor and using the financial transaction authorization protocol, an authentication request to authenticate the user associated with the financial transaction account;
receiving, by the processor using the financial transaction authorization protocol and from an authenticator server, an authentication message lacking biometric data that is retained at the authenticator server,
wherein the authentication message comprises authentication metadata that indicates an authentication type, statistics with rates about an authentication technique and an authentication outcome conducted by the authenticator server, and
wherein the authentication type includes a biometric authentication of biometric data; and
determining, by the processor and based on the authentication message, a result of the authorization request for the financial transaction.

9. The method of claim 1 , wherein the financial transaction authorization protocol includes at least one of host-card emulation, or SafeKey® 3-D Secure®.

10. The computer-based system of claim 8 , wherein the authentication type comprises a consumer device cardholder verification method (CDCVM).

11. The computer-based system of claim 8 , wherein the statistics with rates comprise at least one of a false match rate, a false acceptance rate, a false non-match rate, a false artifact acceptance rate, a false rejection rate, a detection error tradeoff, an equal error rate, a failure to enrollee rate, or a failure to capture rate.

12. The computer-based system of claim 8 , wherein the authentication metadata indicates an unsuccessful authentication outcome of the user associated with the financial transaction account.

13. The computer-based system of claim 12 , wherein the result includes declining the financial transaction in response to the authentication metadata indicating the unsuccessful authentication outcome.

14. The computer-based system of claim 8 , wherein the biometric authentication comprises at least one of a fingerprint authentication, a facial authentication, or a vocal authentication.

15. An article of manufacture including a non-transitory, tangible computer readable storage medium having instructions stored thereon that, in response to execution by a processor, cause the processor to perform operations comprising:
receiving, by the processor and from a client device of a user, an authorization request for a financial transaction using a financial transaction authorization protocol,
wherein the authorization request includes a financial transaction amount, and
wherein the authorization request is associated with a financial transaction account;
transmitting, by the processor and using the financial transaction authorization protocol, an authentication request to authenticate the user associated with the financial transaction account;
receiving, by the processor using the financial transaction authorization protocol and from an authenticator server, an authentication message lacking biometric data that is retained at the authenticator server,
wherein the authentication message comprises authentication metadata that indicates an authentication type, statistics with rates about an authentication technique and an authentication outcome conducted by the authenticator server, and
wherein the authentication type includes a biometric authentication of biometric data; and
determining, by the processor and based on the authentication message, a result of the authorization request for the financial transaction.

16. The article of claim 15 , wherein the authentication type comprises a consumer device cardholder verification method (CDCVM).

17. The article of claim 15 , wherein the statistics with rates comprise at least one of a false match rate, a false acceptance rate, a false non-match rate, a false artifact acceptance rate, a false rejection rate, a detection error tradeoff, an equal error rate, a failure to enrollee rate, or a failure to capture rate.

18. The article of claim 15 , wherein the authentication metadata indicates a successful authentication of the user associated with the financial transaction account.

19. The article of claim 15 , wherein the result includes authorizing the financial transaction in response to the authentication metadata indicating a successful authentication outcome.

20. The article of claim 15 , wherein the biometric authentication comprises at least one of a fingerprint authentication, a facial authentication, or a vocal authentication.

Assignees

• American Express Travel Related Services Co Inc

Inventors

• Donovan Michael
• Lupton Jonathan
• Mardikar Upendra

Classifications

• G06Q20/405

  Establishing or using transaction specific rules · CPC title

• G06Q20/40145 Primary

  Biometric identity checks · CPC title

• G06Q20/409

  Device specific authentication in transaction processing · CPC title