Method and system for hosted order page/silent order post plus fraud detection

Patent metadata

Field	Value
Publication number	US-9639828-B2
Application number	US-201213549187-A
Country	US
Kind code	B2
Filing date	Jul 13, 2012
Priority date	Jul 15, 2011
Publication date	May 2, 2017
Grant date	May 2, 2017

Abstract

Generally, embodiments of the invention are directed to methods, computer readable media, servers and systems for enabling merchants to use hosted order pages (HOPs) and/or silent order posts (SOPs) and thereby avoid handling payment information and the costs associated Payment Card Industry (PCI) compliance, while at the same time utilize third-party fraud detection screens and thereby avoid costs associated with fraudulent transactions.

First claim

What is claimed is:

1. A method, comprising performing by a merchant service computer system:
obtaining, by a payment service executing on the merchant service computer system, order information from a merchant server via a post from a user device, the post being sent by the user device to the merchant service computer system when the user device is redirected from the merchant server, the order information including information about an item in a purchase transaction involving a user and a merchant;
providing, by the payment service, a hosted order page on behalf of the merchant, wherein the hosted order page is presented to the user via the user device;
obtaining, by the payment service via the hosted order page from the user device, payment information from the user on behalf of the merchant;
transmitting, from the payment service to a transaction service executing on the merchant service computer system, a transmission including both the order information obtained from the merchant server and the payment information obtained from the user device;
receiving, at the transaction service, the transmission including both the order information obtained from the merchant server and the payment information obtained from the user device;
prior to sending the purchase transaction to a payment processing server:
evaluating, by the transaction service, the payment information including a payment account number of the user and the order information including an item description, a shipping instruction and a user request to determine fraud risk for the purchase transaction, wherein the evaluating includes:
applying, by the transaction service, a plurality of fraud detection algorithms to the payment information and the order information to determine the fraud risk associated with the purchase transaction;
determining, by the transaction service, the fraud risk for the purchase transaction based on the payment information and the order information;
determining, by the transaction service, to approve or deny the transaction based on the determined fraud risk;
transmitting, by the transaction service to the payment service, an approve or deny indication indicating whether the transaction is approved or denied based on the fraud risk;

if the transaction is denied, displaying, by the payment service, a transaction denied page on the hosted order page; and
if the transaction is approved, sending, by the merchant service computer system, the purchase transaction along with the payment information to the payment processing server.

2. The computer-implemented method of claim 1 wherein the post from which the order information is obtained is an HTML POST.

3. The method of claim 1 wherein the order information further includes at least one of a purchase amount, a sales tax amount, a shipping address, shipping and handling costs, a billing address, and an email address.

4. The method of claim 1 further comprising:
obtaining order-page configurations designated by the merchant, wherein the hosted order page is provided in accordance with the order-page configurations.

5. The method of claim 1 , further comprising:
prior to providing the order page on behalf of the merchant:
receiving, by the payment service, a merchant-generated one-way hash of the order information as part of the post from the user device, wherein the merchant-generated one-way hash is generated using a hashing technique specified by the merchant service computer system;
generating, by the payment service, a one-way hash of the order information using the order information and the hashing technique; and
comparing, by the payment service, the received merchant-generated one-way hash of the order information to the generated one-way hash of the order information to verify that the order information is authentic.

6. A system, comprising:
a processor; and
a memory device including instructions including a first set of instructions for implementing a payment service executing on a merchant service computer system and a second set of instructions for implementing a transaction service executing on the merchant service computer system, wherein the instructions, when executed by the processor, cause the processor to:
receive, by the payment service, order information from a merchant server via a redirect through a user device, the order information including information about an item in a purchase transaction involving a user and a merchant;
receive, by the payment service, payment information from the user device of the user who is engaging in the purchase transaction with the merchant;
transmit, by the payment service to the transaction service, a transmission including both the order information received from the merchant server and the payment information received from the user device, wherein the payment information bypasses the merchant server;
receive, at the transaction service, the transmission including both the order information received from the merchant server and the payment information received from the user device;
prior to sending the purchase transaction to a payment processing server,
evaluate, by the transaction service, the payment information and the order information including an item description, a shipping instruction and a user request to determine fraud risk for the purchase transaction, wherein evaluating includes:
applying, by the transaction service, a plurality of fraud detection algorithms to the payment information and the order information to determine the fraud risk associated with the purchase transaction;

determine, by the transaction service, the fraud risk for the purchase transaction based on the payment information and the order information;
determine, by the transaction service, to approve or deny the transaction based on the determined fraud risk;
transmit, by the transaction service to the payment service, an approve or deny indication indicating whether the transaction is approved or denied based on the fraud risk;
if the transaction is denied, display, by the payment service, a transaction denied page on the user device; and

if the transaction is approved, send, by the payment service, the purchase transaction along with the payment information to the payment processing server.

7. The system of claim 6 wherein the order information is provided from the user device to the payment service via a post.

8. The system of claim 7 wherein the post is an HTML POST.

9. The system of claim 6 wherein the order information further includes at least one of a purchase amount, a sales tax amount, a shipping address, shipping and handling costs, a billing address, and an email address.

10. The system of claim 6 wherein the instructions, when executed by the processor, further cause the processor to receive payment information by:
providing a hosted order page on behalf of the merchant, the hosted order page displaying at least a portion of the order information, the hosted order page comprising a payment information entry section for collecting the payment information from the user.

11. The system of claim 10 wherein the instructions, when executed by the processor, further cause the processor to:
obtain order-page configurations from the merchant, wherein the hosted order page is presented in accordance with the order-page configurations.

12. The method of claim 1 , further comprising:
determining that the merchant server enabled fraud detection services for the purchase transaction prior to evaluating the payment information and the order information.

13. The method of claim 1 , wherein the merchant is not required to comply with req

Assignees

• Anderson Lisa
• Truong Sonny
• Visa Int Service Ass

Inventors

• Anderson Lisa
• Truong Sonny

Classifications

• G06Q20/085

  involving remote charge determination or related payment systems · CPC title

• G06Q30/0185

  Product, service or business identity fraud · CPC title

• G06Q20/12

  specially adapted for electronic shopping systems · CPC title

• G06Q20/027 Primary

  involving a payment switch or gateway · CPC title

• G06Q30/06

  Buying, selling or leasing transactions · CPC title