Systems and methods for monitoring authentication of transactions to payment networks

Patent metadata

Field	Value
Publication number	US-9972011-B2
Application number	US-201514825587-A
Country	US
Kind code	B2
Filing date	Aug 13, 2015
Priority date	Aug 13, 2015
Publication date	May 15, 2018
Grant date	May 15, 2018

Abstract

Systems and methods for use in monitoring authentication messaging associated with payment account transactions are disclosed. One exemplary method includes monitoring authentication messaging from a merchant plug-in (MPI) associated with at least one merchant. The authentication messaging is related to one or more consumers attempting transactions to payment accounts at the at least one merchant. The exemplary method further includes, for each authentication message received from the MPI, transmitting the authentication message to an access control server (ACS) when an issuer associated with the payment account at issue is a participant in an authentication service, monitoring, by the computing device, response messaging from the ACS, each response message associated with a transaction and generated in response to an authentication messages from the MPI, and generating, by the computing device, at least one flag, when a condition associated with the authentication messages and/or the response messages is abnormal.

First claim

What is claimed is:

1. A computer-implemented method for use in monitoring authentication messages in a payment network, the method comprising:
monitoring, by a computing device, authentication messaging from a merchant plug-in (MPI) associated with at least one merchant, the authentication messaging related to one or more consumers attempting transactions to payment accounts at the at least one merchant;
for each authentication message received from the MPI, transmitting the authentication message to an access control server (ACS) when an issuer associated with the payment account at issue is a participant in an authentication service;
monitoring, by the computing device, response messaging from the ACS, each response message associated with a transaction and generated in response to an authentication message from the MPI;
generating, by the computing device, at least one flag, when a condition associated with the authentication messaging and/or the response messaging is abnormal.

2. The method of claim 1 , wherein the abnormal condition comprises the authentication messaging from the MPI including no message within a defined interval.

3. The method of claim 1 , wherein the abnormal condition comprises a latency defined by the authentication messaging from the MPI failing to satisfy a predefined threshold.

4. The method of claim 1 , wherein the abnormal condition comprises the response messaging from the ACS including no message within a defined interval.

5. The method of claim 1 , wherein the abnormal condition comprises a latency defined by the response messaging from the ACS failing to satisfy a predefined threshold.

6. The method of claim 1 , wherein the abnormal condition comprises the response messaging defining a pattern, the pattern including at least one of: more than 10 consecutive verified response messages without a non-verified response message and/or more than 5 consecutive non-verified response messages without a verified response message.

7. The method of claim 1 , further comprising transmitting the at least one flag to a communication device associated with an analyst user associated with the payment network; and
wherein the at least one flag includes an identifier of the MPI and/or the ACS, a time stamp, and an indication of the abnormal condition upon which the flag was generated.

8. The method of claim 7 , further comprising appending the at least one flag to a log, stored in a directory server, associated with the MPI and/or the ACS.

9. The method of claim 8 , wherein the at least one flag includes a severity rating, based on said abnormal condition.

10. A system for authenticating consumers as part of card-not-present transactions to a payment network, the system comprising:
a directory server coupled to a merchant plug-in (MPI) and configured to receive authentication messaging from the MPI related to authentication of consumers, the authentication messaging associated with payment account transactions; and
a compliance engine coupled to a data structure and configured, by executable instructions, to:
generate and append to a log in the data structure a flag when no authentication message has been received from the MPI in a first defined interval;
generate and append to the log in the data structure a flag when a latency defined by the authentication messaging received from the MPI fails to satisfy a defined first threshold; and
transmit the generated flag(s) to a user associated with the directory server, whereby the user is able to take action in view of the generated flag(s).

11. The system of claim 10 , wherein the compliance engine is incorporated into the directory server.

12. The system of claim 11 , wherein the compliance engine is further configured to generate a report, based on said log, for the MPI after a report interval.

13. The system of claim 10 , wherein the compliance engine is configured to transmit the generated flag(s) to the user, in real time, or near-real time, when the flag(s) includes a high severity rating, but not when the flag(s) includes a low severity rating.

14. The system of claim 10 , wherein the directory server is further coupled to an access control server (ACS) and configured to receive response messaging from the ACS related to authentication of the consumers, the response messaging associated with the payment account transactions; and
wherein the compliance engine is further configured to:
generate and append to the log in the data structure a flag when the response messaging from the ACS includes no messages within a second defined interval;
generate and append to the log in the data structure a flag when the response messaging received from the ACS fails to satisfy a second defined threshold; and
generate and append to the log in the data structure a flag when a verified and/or non-verified indicator pattern of the response messaging received from the ACS defines an abnormal pattern.

15. The system of claim 14 , wherein the transmitted flag(s) includes an identifier associated with the MPI and/or the ACS, which caused the flag(s) to be generated.

16. A system for authenticating consumers as part of card-not-present transactions to a payment network, the system comprising:
a directory server coupled to an access control server (ACS) and configured to receive response messaging from the ACS related to authentication of consumers, the response messaging associated with payment account transactions; and
a compliance engine configured, by executable instructions, to:
generate a flag when no response message has been received from the ACS in a first defined interval;
generate a flag when latency defined by the response messaging received from the ACS is greater than a predefined threshold; and
append the generated flag(s) to a log in memory associated with the compliance engine.

17. The system of claim 16 , wherein the compliance engine is further configured to transmit the generated flag(s) to a user associated with the directory server.

18. The system of claim 17 , wherein the directory server is configured to receive messaging from multiple ACS's related to authentication of multiple different consumers; and
wherein the generated flag(s) includes an identifier for a particular one of the ACS's which caused the flag(s) to be generated.

19. The system of claim 16 , wherein the compliance engine is further configured to generate a flag when the messaging received from the ACS defines an abnormal verified and/or non-verified pattern.

20. The system of claim 16 , wherein the compliance engine is implemented in a computing device separate from the directory server.

Assignees

• Mastercard International Inc

Inventors

• Hey Mark
• Mallepally Anand
• Baker Paul

Classifications

• G06Q20/405 Primary

  Establishing or using transaction specific rules · CPC title

• G06Q20/4016

  involving fraud or risk level assessment in transaction processing · CPC title