Secured integration of third-party logic in electronic transaction processing

Patent metadata

Field	Value
Publication number	US-2024152885-A1
Application number	US-202318379918-A
Country	US
Kind code	A1
Filing date	Oct 13, 2023
Priority date	Nov 30, 2020
Publication date	May 9, 2024
Grant date	—

Abstract

Methods and systems are presented for providing a framework to securely integrate third-party logic into electronic transaction processing workflow. Third-party programming code that implements different third-party logic may be obtained and stored in a repository. A transaction processing request is received from a third-party server, and an instance of a transaction processing module is instantiated within an operating runtime environment to process a transaction according to a workflow. When the instance of the transaction processing module has reached an interruption point, the instance of the transaction processing module is suspended, and a third-party programming code is executed within an isolated runtime environment. The third-party programming code is configured to provide an output value based on attributes of the transaction. The instance of the transaction processing module then determines whether to authorize or deny the transaction based in part on the output value.

First claim

1 . (canceled)

2 . A system, comprising:
one or more hardware processors; a data storage storing a plurality of programming codes corresponding to a plurality of third-party entities, wherein each programming code in the plurality of programming codes comprises logic that is provided by a corresponding third-party entity; and a non-transitory memory storing instructions that, when executed by the one or more hardware processors, cause the one or more hardware processors to perform operations comprising:
receiving an electronic transaction request from a device;
initiating a transaction processing workflow within a first runtime environment for processing an electronic transaction associated with the electronic transaction request;
obtaining, via a user interface on the device and based on the transaction processing workflow, transaction data associated with the electronic transaction;
selecting, from the plurality of programming codes stored in the data storage, a particular programming code for the electronic transaction based on at least one of the electronic transaction request or the transaction data;
suspending the transaction processing workflow;
while the transaction workflow is suspended, executing the particular programming code in a second runtime environment, wherein the second runtime environment is isolated from the first runtime environment;
providing, to the second runtime environment executing the particular programming code via an application programming interface, at least a portion of the transaction data, wherein the particular programming code is configured to generate an output value based on the at least the portion of the transaction data;
obtaining the output value generated by the particular programming code executed in the second runtime environment;
resuming the transaction processing workflow; and
processing the electronic transaction according to the transaction processing workflow and based at least in part on the output value.

3 . The system of claim 2 , wherein the electronic transaction request is received based on a redirection of the device from a third-party entity user interface to the user interface.

4 . The system of claim 2 , wherein the suspending the transaction processing workflow is in response to detecting that the transaction processing workflow has reached an interruption point.

5 . The system of claim 2 , wherein the second running environment is a secured environment having limited access to resources associated with the system.

6 . The system of claim 2 , wherein the operations further comprise:
allocating, from a computer memory associated with the second runtime environment, a first portion of the computer memory for the executing the particular programming code, wherein the particular programming code is restricted from accessing a second portion of the computer memory.

7 . The system of claim 2 , wherein the output value indicates whether to authorize or deny the electronic transaction request.

8 . The system of claim 2 , wherein the operations further comprise:
analyzing the plurality of programming codes before storing the plurality of programming codes in the data storage.

9 . A method, comprising:
initiating, by a computer system, a transaction processing workflow within a first runtime environment based on an electronic transaction request received from a device; selecting, from a plurality of programming codes stored in a data storage, a particular programming code for an electronic transaction associated with the electronic transaction request based on data associated with the electronic transaction request, wherein each programming code in the plurality of programming codes comprises logic that is provided by a corresponding entity; obtaining, via a user interface on the device and based on the transaction processing workflow, transaction data associated with an electronic transaction; in response to detecting that the transaction processing workflow has reached an interruption point, executing, by the computer system, the particular programming code in a second runtime environment, wherein the second runtime environment is isolated from the first runtime environment; providing, to the second runtime environment executing the particular programming code via an application programming interface, at least a portion of the transaction data, wherein the particular programming code is configured to generate an output value based on the at least the portion of the transaction data; obtaining the output value generated by the particular programming code executed in the second runtime environment; resuming, by the computer system, the transaction processing workflow; and processing, by the computer system, the electronic transaction according to the transaction processing workflow and based at least in part on the output value.

10 . The method of claim 9 , wherein the electronic transaction is an electronic payment transaction, and wherein the transaction data comprises payment data associated with a funding instrument.

11 . The method of claim 9 , wherein the electronic transaction is an authentication transaction, and wherein the transaction data comprises personal credential data.

12 . The method of claim 9 , further comprising restricting the particular programming code from transmitting data to the computer system outside of the second runtime environment.

13 . The method of claim 9 , further comprising:
monitoring the executing of the particular programming code within the second runtime environment; detecting a function call made by the particular programming code; and determining whether the function call is associated with a restricted activity.

14 . The method of claim 13 , further comprising:
aborting the executing of the particular programming code in response to determining that the function call is associated with the restricted activity.

15 . The method of claim 9 , wherein the processing the electronic transaction is further based on the transaction data.

16 . A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause a machine to perform operations comprising:
receiving an electronic transaction request in association with an electronic transaction conducted via a device; initiating a transaction processing workflow within a first runtime environment for processing the electronic transaction; obtaining, via a user interface on the device and based on the transaction processing workflow, transaction data associated with the electronic transaction; selecting, from a plurality of programming codes stored in a data storage, a particular programming code for the electronic transaction based on at least one of the electronic transaction request or the transaction data, wherein each programming code in the plurality of programming codes comprises logic that is provided by a corresponding entity; executing the particular programming code in a second runtime environment, wherein the second runtime environment is isolated from the first runtime environment; providing, to the second runtime environment executing the particular programming code executed in the second runtime environment via an application programming interface, at least a portion of the transaction data, wherein the particular programming code is configured to generate an output value based on the at least the portion of the transaction data; obtaining the output value generated by the particular programming code executed in the second runtime environment; and

Assignees

• Paypal Inc

Inventors

• Wong Shek Hei
• Ho Chun Kiat
• Lu Li Wei

Classifications

• G06Q20/0855 Primary

  involving a third party · CPC title

• G06F21/554

  involving event detection and direct action · CPC title

• G06Q20/102

  Bill distribution or payments · CPC title

• G06Q20/40145

  Biometric identity checks · CPC title

• G06Q20/4016

  involving fraud or risk level assessment in transaction processing · CPC title