Method and apparatus for streamlined digital wallet transactions
A method includes maintaining a digital wallet in a computer, and receiving a request for a transaction. The computer may receive and verify user authentication data, and then allow the user to access any payment card account in the digital wallet without requiring additional user authentication, regardless of the account selected for the transaction by the user. In some embodiments, cryptogram generation may be performed with an EMV server in association with the digital wallet, to enhance the level of security assurance for merchants, issuers and users.
1. A method comprising:
maintaining a digital wallet in a computer, the digital wallet storing a plurality of payment account entries associated with a user of the digital wallet, each of said payment account entries corresponding to a respective payment account that belongs to said user;
receiving a request for a transaction;
receiving and verifying, by the computer, user authentication data regarding the user and the requested transaction;
verifying, by the computer, authentication of a device used by the user to initiate the transaction, said verifying authentication of the device including verification of a hash result calculated over identification data stored in the device, said identification data including at least one serial number assigned to a hardware or software component of the device; and
in response to verifying the user authentication data, allowing the user to access any one of said payment accounts without requiring further user authentication.
2. The method of claim 1 , further comprising:
setting a user authentication status flag to a “valid” state in the computer to indicate that the computer has verified the received user authentication data; wherein the computer does not receive a user authentication status flag value from said device used by the user.
3. The method of claim 1 , wherein the device used by the user is a personal computer, a laptop computer, a tablet computer or a smartphone.
4. The method of claim 1 , wherein the user is not required to perform more than one authentication task for the transaction.
5. The method of claim 1 , wherein the user authentication data includes or is derived from a PIN (personal identification number) entered by the user.
6. The method of claim 1 , wherein the user authentication data includes or is derived from biometric data generated by interaction with the user.
7. The method of claim 1 , wherein the computer is operated by or on behalf of a wallet service provider.
8. A method comprising:
maintaining a digital wallet in a server computer, the server computer operated by or on behalf of a wallet service provider, said server computer configured to store digital wallets for users supported by the wallet service provider, said server computer further configured to respond to service requests from client devices;
receiving a request for a transaction using a payment account represented in the digital wallet;
receiving and verifying, by the server computer, authentication data for the requested transaction; and
in response to verifying the authentication data by the server computer, triggering by the server computer generation of a cryptogram for the transaction, said cryptogram generated in accordance with an EMV standard.
9. The method of claim 8 , wherein the cryptogram is generated in the server computer.
10. The method of claim 8 , wherein the server computer is a wallet services computer, said wallet services computer being a first server computer, and the cryptogram is generated in a second server computer that is in communication with the wallet services computer, said second server computer different from the first server computer.
11. The method of claim 8 , wherein the transaction is an e-commerce transaction.
12. The method of claim 11 , wherein:
the verified authentication data includes user authentication data; and
the user is not required to perform more than one authentication task for the transaction.
13. An apparatus comprising:
a processor; and
a memory in communication with said processor and storing program instructions, said processor operative with the program instructions to perform functions as follows:
maintaining a digital wallet, the digital wallet storing a plurality of payment account entries associated with a user of the digital wallet, each of said payment account entries corresponding to a respective payment account that belongs to said user, the digital wallet stored in one of a plurality of partitions maintained in a server computer;
receiving a request for a transaction;
receiving and verifying user authentication data regarding the user and the requested transaction;
verifying authentication of a device used by the user to initiate the transaction, said verifying authentication of the device including verifying a result computed by the device based in part on a challenge issued to the device by the server computer; and
in response to verifying the user authentication data, allowing the user to access any one of said payment accounts without requiring further user authentication;
wherein the processor is further operative with the program instructions to:
set a consumer authentication status flag to a “valid” state to indicate that the processor has verified the received user authentication data; wherein the processor does not receive a consumer authentication status flag value from said device used by the user.