TWO FACTOR AUTHENTICATION FOR INVOICING PAYMENTS
Methods and systems for authenticating a transaction are described. A user provides a user account and contact information to a merchant, and the merchant transmits this information to a service provider. The service provider generates an access token for the transaction and sends it to the contact information. The service provider also sends a notification to the user account. The user provides the access token to the service provider. The service provider confirms the access token, and processes the payment.
1 . A system, comprising:
a memory storing user account information; and
one or more processors in communication with the memory and operable to:
receive, from a merchant for a transaction, account information for a user account and contact information for a user;
generate an access token for the transaction;
transmit the access token to the contact information;
transmit a notification to the user account;
receive the access token from the user;
confirm that the access token received from the user matches the access token generated; and
process the payment.
2 . The system of claim 1 , wherein the access token is not transmitted to the user account.
3 . The system of claim 1 , wherein the user enters the access token in the notification.
4 . The system of claim 1 , wherein the one or more processors is further operable to transmit the access token to the merchant.
5 . The system of claim 4 , wherein the merchant transmits the access token to the user.
6 . The system of claim 1 , wherein the account information, the contact information, or the access token is communicated to or from the user by voice or in person.
7 . The system of claim 1 , wherein the access token is associated with a particular user, a particular merchant, or both.
8 . The system of claim 1 , wherein the access token is valid for one-time use, a specific number of uses, a predetermined amount of time, or a variable amount of time.
9 . A method for authenticating a transaction, comprising:
receiving, by one or more hardware processors of a service provider, a payment request from a merchant, wherein the payment request includes an account identifier for a user account and contact information for a user;
generating, by the one or more hardware processors, an access token for the payment request;
transmitting, by the one or more hardware processors, the access token to the user at the contact information;
transmitting, by the one or more hardware processors, a notification to the user account;
receiving, by the one or more hardware processors, the access token from the user;
confirming, by the one or more hardware processors, that the access token received from the user matches the access token generated; and
processing, by the one or more hardware processors, the payment request.
10 . The method of claim 9 , wherein the account identifier, the contact information, or the access token is communicated to or from the user by voice or in person.
11 . The method of claim 9 , wherein the access token is valid for a particular transaction, particular user, particular merchant, or any combination thereof.
12 . The method of claim 9 , further comprising transmitting the access token to the merchant and notifying the merchant to provide the access token to the user.
13 . The method of claim 12 , wherein the user compares the access token provided by the merchant with the access token received.
14 . The method of claim 9 , wherein the user enters the access token in the notification.
15 . A non-transitory machine-readable medium comprising instructions which, in response to a computer system, cause the computer system to perform a method comprising:
receiving a payment request from a merchant on a payment method screen provided by a service provider, wherein the payment request includes account information for a user account and contact information for a user;
generating an access token for the payment request;
transmitting the access token to the contact information;
transmitting a notification to the user account;
receiving the access token from the user in the notification;
confirming that the access token received from the user matches the access token generated; and
processing the payment request.
16 . The non-transitory machine-readable medium of claim 15 , wherein the account information, contact information, or access token is communicated to or from the user by voice or in person.
17 . The non-transitory machine-readable medium of claim 15 , wherein the access token is not transmitted to the user account.
18 . The non-transitory machine-readable medium of claim 15 , wherein the access token binds the user to the merchant.
19 . The non-transitory machine-readable medium of claim 15 , wherein the method further comprises transmitting the access token to the merchant.
20 . The non-transitory machine-readable medium of claim 19 , wherein the merchant transmits the access token to the user.