Intelligent authentication

Patent metadata

Field	Value
Publication number	US-9799031-B2
Application number	US-201213718538-A
Country	US
Kind code	B2
Filing date	Dec 18, 2012
Priority date	Jun 30, 2009
Publication date	Oct 24, 2017
Grant date	Oct 24, 2017

Abstract

Systems and methods for intelligently authenticating payment transactions are disclosed. A user initiates a payment transaction to purchases goods or services from a merchant. The merchant sends a payment initiation request to a server computer in communication with a payment processing network and an issuer. The server computer queries various databases to determine one or more available communication channels that may be used as authentication channels by the issuer. The server computer also determines one or more communication channels, available for use by a mobile device of the user, that may be used as authentication channels to authenticate the payment transaction. The user is provided with a list of available/eligible authentication channels. User selects one of the authentication channels and the issuer is notified of the selection. The issuer uses the selected authentication channel to communicate with the user and authenticate the payment transaction.

First claim

What is claimed is:

1. A method for selecting an authentication channel and authenticating a payment transaction via the authentication channel, the method comprising:
receiving an authentication request for a payment transaction from a server computer;
determining a set of authentication channels available to the authorizing entity;
determining, from the authentication request, a mobile device to be associated with the payment transaction and one or more capabilities associated with the mobile device;
determining a set of authentication channels available to the mobile device associated with the payment transaction based on the one or more capabilities determined to be associated with the mobile device;
identifying a subset of authentication channels including authentication channels in both the set of authentication channels available to the authorizing entity and the set of authentication channels available to the mobile device associated with the payment transaction;
providing the subset of authentication channels to the mobile device;
receiving, from the mobile device, a selected authentication channel from the subset of authentication channels after selection of the selected authentication channel via a graphical user interface of the mobile device;
initiating communication with the mobile device via the selected authentication channel;
initiating communication with the authorization entity via the selected authentication channel; and
routing, via the selected authentication channel, an authentication response from the mobile device to the authorization entity, such that the payment transaction is authenticated by the authorization entity in response to receiving the authentication response from the mobile device.

2. The method of claim 1 , further comprising:
generating an authorization response message when the payment transaction is authenticated; and
sending the authorization response message to a payment processing network.

3. The method of claim 1 , further comprising:
receiving an authorization request message from a payment processing network, wherein the authorization request message includes a transaction amount, an account number, an expiration date, and verification values corresponding to the payment transaction.

4. The method of claim 1 , further comprising:
communicating with the mobile device when a user associated with the mobile device conducts an enrollment process prior to the payment transaction.

5. The method of claim 4 , wherein the user provides one or more accounts numbers and information about the mobile device during the enrollment process.

6. The method of claim 5 , further comprising:
identifying, from the mobile device information, a type of the mobile device; and
determining, based at least in part on the type of mobile device, at least one capability of the mobile device in using various communication channels.

7. The method of claim 5 , wherein the user further provides aliases for each of the one or more account numbers.

8. The method of claim 5 , wherein information provided by the user during the enrollment process is stored in one or more databases accessible by a payment processing network.

9. The method of claim 1 , further comprising:
setting criteria for authenticating the payment transaction based on the type or amount of the transaction.

10. The method of claim 9 , further comprising:
determining whether the payment transaction is above a predetermined threshold; and
if the payment transaction is above the predetermined threshold, determining one or more types of communication channels to be used as authentication channels for authenticating the payment transaction.

11. A computer comprising:
a processor;
a memory element comprising code, executable by the processor, for implementing a method comprising:
receiving an authentication request for a payment transaction from a server computer;
determining, from the authentication request, a mobile device to be associated with the payment transaction and one or more capabilities associated with the mobile device;
identifying a set of authentication channels available to an authorizing entity and available to the mobile device associated with the payment transaction based on the one or more capabilities determined to be associated with the mobile device;
providing the set of authentication channels to the mobile device;
receiving a selected authentication channel from the mobile device for authentication of the payment transaction;
establishing a first communication session with the mobile device via the selected authentication channel;
establishing a second communication session with the authorizing entity;
routing the authentication request to the mobile device via the first communication session; and

routing an authentication response from the mobile device to the authorizing entity via the first communication session and the second communication session.

12. The computer of claim 11 , wherein the method further comprises:
generating an authorization response message when the payment transaction is authenticated; and
sending the authorization response message to a payment processing network.

13. The computer of claim 11 , wherein the method further comprises:
receiving an authorization request message from a payment processing network, wherein the authorization request message includes a transaction amount, an account number, an expiration date, and verification values corresponding to the payment transaction.

14. The computer of claim 11 , wherein the method further comprises:
communicating with the mobile device when a user conducts an enrollment process prior to the payment transaction.

15. The computer of claim 14 , wherein the user provides one or more accounts numbers and information about the mobile device during the enrollment process.

16. The computer of claim 15 , wherein the mobile device information includes the type of the mobile device and capability of the mobile device in using various communication channels.

17. The computer of claim 15 , wherein the user further provides aliases for each of the one or more account numbers.

18. The computer of claim 15 , wherein information provided by the user during the enrollment process is stored in one or more databases accessible by a payment processing network.

19. The computer of claim 11 , wherein the method further comprises:
setting criteria for authenticating the payment transaction based on the type or amount of the transaction.

20. The computer of claim 19 , wherein the method further comprises:
determining whether the payment transaction is above a predetermined threshold; and
if the payment transaction is above the predetermined threshold, determining one or more types of communication channels to be used as authentication channels for authenticating the payment transaction.

21. The method of claim 6 , wherein the list of authentication channels available includes the various communication channels that the mobile device is determined to be capable of using.

Assignees

• Visa Int Service Ass

Inventors

• Trifiletti Greg
• Brand Olivier
• Lindelsee Mike
• Dimmick James
• Wentker Dave

Classifications

• G06Q20/401 Primary

  Transaction verification · CPC title

• G06Q20/20

  Point-of-sale [POS] network systems · CPC title

• G06Q20/322

  Aspects of commerce using mobile devices [M-devices] · CPC title

• G06Q20/325

  using wireless networks · CPC title

• G06Q20/32

  using wireless devices · CPC title