IP Library Granted Patent US 9,135,621
Granted Patent B2
US 9,135,621 · App. 13/887,082 · Granted Sep 15, 2015

Methods and systems for performing authentication in consumer transactions

Inventors: Douglas Fisher (Mountain View, CA); Benedicto H. Dominguez (San Bruno, CA); Timothy Mu-chu Lee (San Jose, CA)
Assignee: Visa International Service Association
G06Q20/382G06Q20/24G06Q20/341G06Q20/40G06Q20/4014G06Q30/06G07F7/1008
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,135,621
App. No.
13/887,082
Granted
Sep 15, 2015
Kind
B2
Abstract

The method for authenticating a mail order or telephone order transaction according to the present invention includes receiving authentication information from a cardholder, providing authentication information to an issuer, and determining whether the authentication information is valid. If the authentication information is valid, the issuer informs the merchant that the transaction is valid. In an embodiment, the issuer may not supply a personal assurance message and/or other confidential cardholder information previously supplied by the cardholder in response to the authentication information.

Claims (56)

1. A method comprising:

prior to receiving transaction type information indicative of a type of transaction engaged in between a consumer and a merchant, performing an enrollment process including:

receiving consumer registration information including a financial account identifier;

determining whether the financial account identifier is within a registered range;

upon determining that the financial account identifier is not within the registered range, terminating the enrollment process; and

upon determining that the financial account identifier is within the registered range, initializing a consumer record in an account holder file, wherein initializing the consumer record comprises:

prompting the consumer for additional authentication information used to authenticate the consumer during subsequent purchase transactions, wherein the additional authentication information includes a password and a hint question and response pair,

receiving the additional authentication information, and

storing the additional authentication information in the account holder file;

receiving, at an authentication system, transaction type information indicative of the type of transaction engaged in between the consumer and the merchant;

determining, at the authentication system, the type of transaction engaged in between the consumer and the merchant based on the received transaction type information;

communicating, from the authentication system, an authentication prompt based on the type of transaction engaged in between the consumer and the merchant;

in response to communicating an authentication prompt, receiving, at the authentication system, authentication information for authenticating the consumer; and

authenticating the consumer based on the received authentication information.

2. The method of claim 1 , wherein the transaction type information indicates whether the transaction is a card-not-present transaction, and determining the type of transaction engaged in between the consumer and the merchant includes determining whether the type of transaction is a card-not-present transaction.

3. The method of claim 1 , wherein communicating an authentication prompt based on the type of transaction engaged in between the consumer and the merchant includes:

determining sensitive consumer information from enrollment information associated with the consumer and previously supplied by the consumer;

generating an authentication prompt that excludes the sensitive consumer information; and

communicating the authentication prompt that excludes the sensitive consumer information.

4. The method of claim 3 , wherein the sensitive consumer information includes a personal assurance message.

5. The method of claim 1 , further comprising:

upon determining that the financial account identifier is within the registered range, verifying an identity of the consumer.

6. The method of claim 1 , further comprising, prior to communicating an authentication prompt based on the type of transaction engaged in between the consumer and the merchant, performing an enrollment confirmation process including:

receiving a financial account identifier associated with the consumer and the transaction type information indicative of a type of transaction engaged in between a consumer and a merchant;

determining whether the financial account identifier is within a registered range;

upon determining that the financial account identifier is not within the registered range, communicating, to the merchant system, information indicating that the consumer is not registered; and

upon determining that the financial account identifier is within the registered range, determining whether the financial account identifier is enrolled.

7. The method of claim 1 , wherein authenticating the consumer includes determining whether the received authentication information is correct, and the method further comprises:

in response to determining that the received authentication information is correct:

digitally signing a receipt for the transaction resulting in a signed receipt; and

communicating the signed receipt to a merchant system associated with the merchant.

8. The method of claim 1 , further comprising, after authenticating the consumer, authorizing a financial account associated with the consumer, wherein authorizing a financial account associated with the consumer includes communicating an authorization message including a financial amount associated with the transaction to a payment network.

9. A method comprising:

communicating, from a merchant system associated with a merchant to an authentication system, transaction type information indicative of a type of transaction engaged in between a consumer and the merchant;

receiving, at the merchant system, an authentication prompt based on the type of transaction engaged in between the consumer and the merchant;

determining, at the merchant system, authentication information for authenticating the consumer; and

communicating, from the merchant system to the authentication system and in response to the authentication prompt, the authentication information for the consumer, wherein receiving the authentication prompt based on the type of transaction engaged in between the consumer and the merchant includes:

receiving an authentication prompt that excludes sensitive consumer information from enrollment information previously provided by the consumer to the authentication system; and

communicating the authentication prompt that excludes sensitive consumer information to the merchant, wherein communicating the authentication prompt that excludes sensitive consumer information to the merchant includes displaying an issuer-branded window to the merchant that prompts for authentication information and excludes the sensitive consumer information.

10. The method of claim 9 , wherein the authentication information for authenticating the consumer includes a dynamic passcode, a static passcode, biometrics, a sound, sound biometrics, a business identification, a country code, a card account number, a card expiration date, a consumer name, issuer-specific authentication data, a billing address, a shipping address, a social security number, a telephone number, an account balance, a transaction history, and/or a driver's license number.

11. The method of claim 9 , further comprising performing an enrollment confirmation process including:

determining a financial account identifier associated with the consumer;

communicating an enrollment confirmation request including the financial account identifier to the authentication system;

receiving a response indicative of whether the financial account identifier is enrolled; and

communicating enrollment confirmation information to the merchant based on whether the financial account identifier is enrolled.

12. The method of claim 11 , wherein the transaction type information indicative of a type of transaction engaged in between a consumer and the merchant is communicated to the authentication system with the enrollment confirmation request.

13. The method of claim 11 , wherein the response indicative of whether the financial account identifier is enrolled is tailored based on the type of transaction engaged in between the consumer and the merchant.

14. The method of claim 9 , further comprising:

receiving, at the merchant system and in response to communicating the authentication information for the consumer, a digitally signed receipt;

verifying the digitally signed receipt; and

determining that the consumer is authenticated upon verifying the digitally signed receipt.

15. The method of claim 9 , further comprising:

prior to communicating transaction type information indicative of a type of transaction engaged in between a consumer and the merchant, determining items for purchase by the consumer as part of the transaction resulting in a total price for the items; and

in response to determining that the consumer is authenticated, authorizing the total price with an acquirer or issuer.

16. The method of claim 9 , further comprising:

prior to communicating transaction type information indicative of a type of transaction engaged in between a consumer and the merchant, performing an enrollment confirmation process.

Continuity (3)
Continuation 11681704 · Mar 2, 2007
Provisional Application 60778282 · Mar 2, 2006
Related Publication 20130317989A1 · Nov 28, 2013