Systems and methods for performing transactions using active authentication

Patent metadata

Field	Value
Publication number	US-11443290-B2
Application number	US-202017035260-A
Country	US
Kind code	B2
Filing date	Sep 28, 2020
Priority date	Mar 15, 2011
Publication date	Sep 13, 2022
Grant date	Sep 13, 2022

Abstract

A system and method for performing a transaction at a point of sale (“POS”) device includes a user device providing data indicative of a financial transaction. The data includes parameters that define the financial transaction, for example merchant name or type, transaction amount, etc. The financial institution creates an active authentication key for use in the financial transaction. Upon receiving a transaction request from the point of sale device, the financial institution can analyze the active authentication key and the parameters to determine if the transaction request should be approved.

First claim

What is claimed is:

1. A method of performing a transaction at a point of sale (POS) device, comprising:
connecting, via a first computer processor associated with a financial institution, with a second computing device being associated with a user being remote from the first computer processor;
receiving, at the first computer processor, data indicative of a financial transaction from the second computing device, the data comprising parameters associated with the financial transaction;
generating, using a random number generator associated with the first computer processor, a single-use authentication key associated with the financial transaction, wherein the single-use authentication key is unique for the financial transaction at the POS device and is valid for a limited period of time;
storing, in data storage associated with the financial institution, the single-use authentication key and the data indicative of the financial transaction;
sending, from the first computer processor, the single-use authentication key to the second computing device;
extracting, by the POS device, at least a portion of the single-use authentication key, an internet protocol (IP) address for the POS device, and a merchant identifier (ID) associated with the merchant;
transmitting, by the POS device and via a network in direct communication with the financial institution, the at least a portion of the single-use authentication key, the IP address, and the merchant ID to the financial institution along with a transaction request associated with the POS device;
receiving, at the first computer processor, the transaction request from the POS device;
comparing, via the first computer processor, the transaction request with the data indicative of the financial transaction and the stored single-use authentication key; and
either:
approving, with the first computer processor, the transaction request when the transaction request complies with the parameters; or
declining, with the first computer processor, the transaction when the transaction request does not comply with the parameters.

2. The method of claim 1 , wherein the parameters comprise at least one of a merchant type associated with the financial transaction, a specific merchant, or a location of the specific merchant associated with the financial transaction.

3. The method of claim 1 , wherein the parameters comprise at least one of a period of time during which the financial transaction is to be completed, a maximum authorized transaction amount, a transaction amount associated with the financial transaction, or a source of the transaction, the source comprising one of a debit transaction or a credit transaction.

4. The method of claim 1 , wherein the single-use authentication key comprises a string of digits having a first portion and a second portion, the first portion being associated with and identifying the financial institution, the second portion being a substantially random string generated by the random number generator.

5. The method of claim 1 , wherein the single-use authentication key comprises a string of digits having a first portion, a second portion, and a third portion, the first portion being associated with and identifying the financial institution, the second portion being associated with and identifying an account associated with a user of the second computing device, and the third portion being a substantially random string generated by the random number generator.

6. The method of claim 1 , further comprising:
receiving, at the first computer processor, a merchant identifier with the transaction request from the POS device;
comparing, with the first computer processor, the merchant identifier with pre-stored identifiers for approved merchants; and
declining, with the first computer processor, the financial transaction when the merchant identifier does not match the pre-stored identifiers.

7. The method of claim 6 , wherein the merchant identifier comprises an Internet Protocol (IP) address associated with the POS device.

8. The method of claim 1 , further comprising sending, from the first computer processor, a validation request to the second computing device seeking approval of the transaction request.

9. A system for approving a transaction request from a point of sale (POS) device, the system comprising:
one or more processors associated with a financial institution; and
memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, causes the system to:
connect with a second computing device remote from the one or more processors associated with the financial institution, the second computing device being associated with a user;
receive data indicative of a financial transaction from the second computing device, the data comprising parameters associated with the financial transaction;
generate, using a random number generator associated with the one or more processors, a single-use authentication key associated with the financial transaction, wherein the single-use authentication key is unique for the financial transaction at the POS device and valid for a limited period of time;
store the single-use authentication key and the data indicative of the financial transaction;
send the single-use authentication key to the second computing device;
extract at least a portion of the single-use authentication key, an internet protocol (IP) address for the POS device, and a merchant identifier (ID) associated with the merchant;
receive, via a network in direct communication with the financial institution, a transaction request from the POS device, the transaction request comprising the the at least a portion of the single-use authentication key, the IP address, and the merchant ID;
compare the transaction request with the data indicative of the financial transaction and the stored single-use authentication key; and
either:
approve the transaction request when the transaction request complies with the parameters; or
decline the transaction request when the transaction request does not comply with the parameters.

10. The system of claim 9 , wherein the parameters comprise at least one of a merchant type associated with the financial transaction, a specific merchant, or a location of the specific merchant associated with the financial transaction.

11. The system of claim 9 , wherein the parameters comprise at least one of a period of time during which the financial transaction is to be completed, a maximum authorized transaction amount, a transaction amount associated with the financial transaction, or a source of the financial transaction, the source comprising one of a debit transaction or a credit transaction.

12. The system of claim 9 , wherein the single-use authentication key comprises a string of digits having a first portion and a second portion, the first portion being associated with and identifying the financial institution, the second portion being a substantially random string.

13. The system of claim 9 , wherein the single-use authentication key comprises a string of digits having a first portion and a second portion, the first portion being associated with and identifying the financial institution, the second portion being associated with and identifying an account associated with a user of the second computing device.

14. The system of claim 9 , wherein the instructions are further configured to cause the system to:
receive a merchant identifier with the transaction request from the POS device;
compare the merchant identifier with pre-stored identifiers for approved merch

Assignees

• Capital One Services Llc

Inventors

• Wolfs Rudolph Christian
• Pinski David Aaron

Classifications

• G06Q20/20

  Point-of-sale [POS] network systems · CPC title

• G06Q20/18 Primary

  involving self-service terminals [SST], vending machines, kiosks or multimedia terminals · CPC title

• G06Q20/3278

  RFID or NFC payments by means of M-devices · CPC title

• G06Q20/325

  using wireless networks · CPC title

• G06Q20/40

  Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists · CPC title