Cardless challenge systems and methods

Patent metadata

Field	Value
Publication number	US-12567046-B2
Application number	US-202217946440-A
Country	US
Kind code	B2
Filing date	Sep 16, 2022
Priority date	Jun 25, 2007
Publication date	Mar 3, 2026
Grant date	Mar 3, 2026

Abstract

Systems, methods, and apparatus for handling and/or authorizing payment requests by a consumer for a transaction are provided. Challenge questions may be presented from the non-merchant to the consumer after receiving the payment information, thereby allowing a judicious determination of when to ask such challenge questions and allowing complex and probative questions. The time limit for such challenge questions may advantageously be unconstrained, while still preserving security. Also, a risk analysis may be started prior to the consumer submitting payment information, thus allowing an efficient and complex risk analysis. Information about an access device used by the consumer may be obtained at the non-merchant from the access device with code sent to the access device from the merchant, and the device information may be used in the risk analysis.

First claim

What is claimed is:

1 . A method for authorizing a transaction between a consumer and a merchant, the method comprising:
receiving, at a non-merchant server from an access device used by the consumer, collected device information about the access device and payment information, after the consumer selects a first payment option on a checkout page during a checkout process with a merchant server during the transaction, the access device comprising a processor and a non-transitory computer readable medium comprising programming code executable by the processor that causes the access device to display the checkout page including the first payment option and a second payment option, wherein the first payment option is linked to the non-merchant server and the second payment option is linked to the merchant server, and the non-transitory computer readable medium in the access device also comprising programming code executable by the processor for transmitting the collected device information and the payment information to the non-merchant server in response to a selection of the first payment option by the consumer; receiving, by the non-merchant server from the merchant server, transaction information; determining, by the non-merchant server, a risk of the transaction using the transaction information, the device information, and the payment information; and after determining the risk of the transaction, processing, by the non-merchant server, the transaction using the payment information and the transaction information.

2 . The method of claim 1 , further comprising, after determining the risk of the transaction:
sending, to the consumer from the non-merchant server, a challenge question; and receiving, at the non-merchant server from the consumer, a challenge answer to the challenge question.

3 . The method of claim 1 , wherein processing the transaction comprises transmitting an authorization request message for the transaction to an issuer computer.

4 . The method of claim 1 , wherein the collected device information and the payment information are received by the non-merchant server from the access device along with a correlation ID.

5 . The method of claim 4 , wherein the transaction information is received by the non-merchant server from the merchant server along with the correlation ID.

6 . The method of claim 5 , wherein the collected device information and the payment information are received by the non-merchant server in a first message from the access device, and the transaction information is received by the non-merchant server in a second message from the merchant server, and wherein the method further comprises:
correlating the first message and the second message using the correlation ID.

7 . The method of claim 1 , wherein the device information comprises an IP address of the access device or information about an access device type.

8 . The method of claim 1 , wherein the access device is a personal computer.

9 . The method of claim 1 , further comprising:
comparing, by the non-merchant server, the device information with other device information in a database to determine the risk of the transaction.

10 . The method of claim 1 , wherein the payment information comprises a payment account number.

11 . The method of claim 1 , wherein the transaction is a payment transaction.

12 . The method of claim 1 , wherein the transaction information comprises a merchant identifier.

13 . A system comprising:
a non-merchant server comprising,
a first processor, and
a computer-readable medium coupled to the first processor, the first computer-readable medium comprising code, executable by the first processor to implement a method comprising:
receiving, from an access device used by a consumer, collected device information about the access device and payment information, after the consumer selects a first payment option on a checkout page during a checkout process with a merchant server during a transaction, receiving, from the merchant server, transaction information, determining a risk of the transaction using the transaction information, the device information, and the payment information, and after determining the risk of the transaction, processing the transaction using the payment information and the transaction information; and the access device, the access device comprising a second processor and programming executable by the second processor that causes the access device to display the checkout page including the first payment option and a second payment option, wherein the first payment option is linked to the non-merchant server and the second payment option is linked to the merchant server, and the access device also comprising programming executable by the second processor for transmitting the collected device information and the payment information to the non-merchant server in response to a selection of the first payment option by the consumer.

14 . The system of claim 13 , wherein the method further comprises:
after determining the risk of the transaction: sending, to the consumer from the non-merchant server, a challenge question; and receiving, at the non-merchant server from the consumer, a challenge answer to the challenge question.

15 . The system of claim 13 , wherein processing the transaction comprises transmitting an authorization request message for the transaction to an issuer computer.

16 . The system of claim 13 , wherein the transaction information is received by the non-merchant server from the merchant server along with a correlation ID.

17 . The system of claim 16 , wherein the collected device information and the payment information are received by the non-merchant server in a first message from the access device, and the transaction information is received by the non-merchant server in a second message from the merchant server, and wherein the method further comprises:
correlating the first message and the second message using the correlation ID.

18 . The system of claim 13 , wherein the method further comprises:
comparing, by the non-merchant server, the device information with other device information in a database to determine the risk of the transaction.

19 . The system of claim 13 , wherein the device information comprises operating system information about the access device.

Assignees

• Visa Usa Inc

Inventors

• Carlson Mark
• Keshan Surendra
• Faith Patrick

Classifications

• G06Q20/385

  using an alias or single-use codes · CPC title

• G06Q20/00

  Payment architectures, schemes or protocols (apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12) · CPC title

• G06Q20/4016

  involving fraud or risk level assessment in transaction processing · CPC title

• G06Q20/322

  Aspects of commerce using mobile devices [M-devices] · CPC title

• G06Q20/027

  involving a payment switch or gateway · CPC title