Multi-point authentication for payment transactions
View Patent ↗Authentication includes receiving an indication of physical possession of a payment card by a merchant and receiving a purchase request for an authorization of an exchange from the payment account of the cardholder to the merchant. Authentication includes assigning a randomized transaction identifier to the request for the authorization of the exchange. The method also includes transmitting the request for the authorization of the exchange from the payment account of the cardholder to the merchant and receiving the assigned randomized transaction identifier and a randomized authentication identifier associated with the randomized transaction identifier from a payment association, the payment association determining whether the request for the authorization of the exchange is valid. Authentication includes transmitting a copy of the randomized authentication identifier to the mobile device and receiving validation that the transmitted copy of the randomized authentication identifier from the mobile device matches the randomized authentication identifier.
1. A method, comprising:
receiving, by a point-of-sale (POS) terminal, a first indication that a payment account of a cardholder is associated with a mobile device of the cardholder;
receiving, by the POS terminal, after receiving the first indication, a second indication of physical possession of a payment card by a merchant;
receiving, by the POS terminal, a purchase request for an authorization of an exchange of funds from the payment account of the cardholder to the merchant;
assigning, by the POS terminal, a randomized transaction identifier to the request for the authorization of the exchange of funds;
transmitting, by the POS terminal, the request for the authorization of the exchange of funds from the payment account of the cardholder to the merchant;
receiving, by the POS terminal, the assigned randomized transaction identifier and a randomized authentication identifier associated with the randomized transaction identifier from a payment association, the payment association determining whether the request for the authorization of the exchange of funds is valid;
transmitting, by the POS terminal, a copy of the randomized authentication identifier to the mobile device; and
receiving, by the POS terminal, validation that the transmitted copy of the randomized authentication identifier to the mobile device matches the randomized authentication identifier.
2. The method of claim 1 , wherein receiving the second indication of physical possession of the payment card includes:
reading the payment card by swiping a magnetic stripe on the payment card.
3. The method of claim 1 , wherein receiving the second indication of physical possession of the payment card includes:
reading a computer chip embedded in the payment card; and
receiving a personal identification number (PIN) corresponding to the payment card.
4. The method of claim 1 , further comprising: completing a transaction in response to validation that the transmitted copy of the randomized authentication identifier matches the randomized authentication identifier.
5. The method of claim 1 , wherein the POS terminal is a physical POS terminal.
6. The method of claim 5 , wherein the physical POS terminal is an electronic POS (EPOS) terminal.
7. The method of claim 1 , wherein the POS terminal is a computer-based POS terminal.
8. The method of claim 1 , wherein the mobile device is locked to a biometric scan of the cardholder.
9. The method of claim 1 , wherein transmitting the copy of the randomized authentication identifier through the mobile device, is transmitted visually.
10. The method of claim 1 , wherein transmitting the copy of the randomized authentication identifier through the mobile device, is transmitted aurally.