Systems and methods to authorize transactions based on securely accessing data tracked via mobile devices

Patent metadata

Field	Value
Publication number	US-2016307196-A1
Application number	US-201615092297-A
Country	US
Kind code	A1
Filing date	Apr 6, 2016
Priority date	Apr 15, 2015
Publication date	Oct 20, 2016
Grant date	—

Abstract

Systems and methods to process an authorization request related to mobile data stored by a mobile application in an account hosted on a server and accessed via an access token obtained via the mobile device during a registration session with a portal of an authorization processing system that stores an item associating with an account identifier. The access token is stored in a data warehouse in association with an account identifier registered during the registration session. In response to an authorization request containing the account identifier is determined by the authorization processing system to have satisfied a first set of conditions specified in the item associated with the account identifier, the portal is instructed to use the access token to communicate with the server to determine whether a second set of conditions identified by the item are met by the mobile data stored in the account hosted on the server that is separately operated from the authorization processing system.

First claim

What is claimed is:

1 . A method, comprising:
receiving, from a mobile device and in a communication portal coupled with a processing system, a registration communication having an account identifier, wherein
the mobile device has installed therein a mobile application that generates mobile data and communicates the mobile data to a server separate from the communication portal, and
the server stores the mobile data in an account of a user of the mobile application;
transmitting, from the communication portal a message configured to redirect the mobile device to the server, wherein in response to the message configured to redirect the mobile device to the server, the mobile device is configured to
sign into the server using a credential of the account of the user of the mobile application;
obtain from the server an access token that is different from the credential; and
provide the access token to the communication portal;
storing, by the communication portal in a data warehouse, data associating the account identifier with the access token, wherein the data warehouse further stores data associating the account identifier with an item related to the mobile data stored in the server that is separate from the data warehouse; receiving, from a terminal and in the processing system, an authorization request including the account identifier; in response to a determination that the item associated with the account identifier in the data warehouse is relevant to the authorization request that includes the account identifier,
retrieving, by the communication portal from the data warehouse, the access token associated with the account identifier in the data warehouse;
accessing, by the communication portal using the access token, the mobile data stored in the account of the user of the mobile application in the server; and
generating, by the processing system, an authorization response to the authorization request based at least in part on the item associated with the account identifier in the data warehouse and the mobile data on the server accessed using the access token.

2 . The method of claim 1 , wherein the mobile device is further configured to provide the account identifier to the terminal to generate the authorization request.

3 . The method of claim 1 , wherein the account identifier is provided from the mobile device to the terminal via near field communication.

4 . The method of claim 2 , wherein the account identifier identifies a second account controlled by a computer separate from the server having the account storing the mobile data.

5 . The method of claim 4 , wherein the second account controlled by the computer hosts resources to be used in a transaction requested by the authorization request.

6 . The method of claim 5 , wherein the processing system is configured in a network in communication with the computer controlling the second account hosting the resources; and the authorization response is generated further based on authorization communications between the processing system and the computer.

7 . The method of claim 5 , wherein the item identifies a first set of conditions; and the authorization request is determined to be relevant to the mobile data stored in the server in response to a determination that the authorization request meets the first set of conditions.

8 . The method of claim 7 , wherein the item identifies a second set of conditions; and an amount of the resources requested in the second account controlled by the computer separate from the server is adjusted in response to a determination that the mobile data satisfies the second set of conditions.

9 . The method of claim 8 , wherein the accessing, by the communication portal using the access token, the mobile data stored in the account of the user of the mobile application in the server includes:
transmitting a query from the communication portal to the server, the query identifying the second set of conditions; and receiving a response to the query from the server identifying whether or not the second set of conditions are satisfied by the mobile data identified by the access token.

10 . The method of claim 8 , wherein the accessing, by the communication portal using the access token, the mobile data stored in the account of the user of the mobile application in the server includes receiving, by the communication portal using the access token, the mobile data from the server.

11 . The method of claim 8 , further comprising:
identifying an amount of resources based the accessing of the mobile data using the access token; and providing, by the processing system, the amount of resources to the user of the mobile application.

12 . The method of claim 1 , wherein the mobile data includes data tracking health related activities of the user of the mobile application.

13 . A non-transitory computer storage medium storing instructions configured to instruct a computing apparatus to perform a method, the method comprising:
storing, in a data warehouse, data associating an offer with a payment account and associating the payment account with a mobile application running in a mobile device; monitoring, by a transaction handler coupled with the data warehouse, payment transactions in the payment account made in an electronic payment processing network; detecting, by the transaction handler based on the monitoring, a message related to authorization of a payment transaction in the payment account in the electronic payment processing network; in response to the message being detected and authorization of the payment transaction being processed in the electronic payment processing network,
establishing, by a portal coupled with the transaction handler, a communication channel with the mobile application running in the mobile device, where the mobile device tracks health related data of user of the mobile device;
determining, via the communication channel, whether or not a predetermined requirement of the offer is satisfied by the health related data in the mobile device;
identifying a level of a benefit the offer based on a result of the determining whether the predetermined requirement of the offer is satisfied by the health related data in the mobile device; and
providing, by the transaction handler, the benefit of the offer to the payment transaction via the electronic payment processing network.

14 . A system, comprising:
a mobile device running a mobile application configured to generate mobile data of a user of the mobile application; a server in communication with the mobile device to store the mobile data in a first account of the user; a data warehouse storing data associating
an account identifier of a second account,
a first set of transaction requirements, and
a second set of non-transaction requirements;
a communication portal configured to receive, in a registration session from the mobile device, an account identifier of a second account, wherein the communication portal is configured to obtain, from the mobile device during the registration session, an access token to the first account on the server, and store in the data warehouse data associating the account identifier of the second account and the access token to the first account; and a transaction handler configured in an electronic payment processing network to monitor payment transactions in the electronic payment processing network and detect a first transaction in the second account that satisfies the first set of transaction requirements, wherein in response to the first transaction being detected by the transaction handler,

Assignees

• Visa Int Service Ass

Inventors

• Achhra Santosh Lachhman
• Swords Sonny
• Paykis Sergey Alex

Classifications

• G06F21/335

  for accessing specific resources, e.g. using Kerberos tickets · CPC title

• G06Q20/3821

  Electronic credentials · CPC title

• G06Q20/40

  Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists · CPC title

• G06Q20/322

  Aspects of commerce using mobile devices [M-devices] · CPC title

• G06F21/6245

  Protecting personal data, e.g. for financial or medical purposes · CPC title