RFID-enabled payment authentication
Authentication method and systems using RFID-enabled payment cards are disclosed herein where a server receives a request corresponding to authorization of a payment associated with a payment card from an electronic terminal. The server identifies an electronic device of a user associated with the payment card. The server then transmits an instruction to the electronic device to cause an RFID reader of the electronic device to determine whether an RFID tag corresponding to the payment card is located within a predetermined proximity to the electronic device. When the payment card is located within the predetermined proximity, the server executes a first authentication protocol. Moreover, when the payment card is not located within the predetermined proximity, the server executes a second authentication protocol, wherein the second authentication protocol is more restrictive than the first authentication protocol.
1. A method comprising:
in response to receiving, from au electronic terminal, an authorization request corresponding to authorization of a payment associated with a payment card in communication with the electronic terminal, identifying, by a server, a mobile device of a user associated with the payment card; transmitting, by the server, an instruction to the mobile device to cause a radio frequency identification (RFID) reader of the mobile device to monitor within range of the RFID reader and generate a signal based on the monitoring; receiving a communication from the mobile device indicative of the signal from the RFID reader;
determining whether an RFID tag disposed on or in the payment card is located within a predetermined proximity to the mobile device based on the communication;
when the payment card is determined to be located within the predetermined proximity to the mobile device, executing, by the server, a first authentication protocol; and
when the payment card is determined not to be located within the predetermined proximity to the mobile device, executing, by the server, a second authentication protocol comprising transmitting an authentication prompt to the mobile device requesting the user to enter an authentication response.
2. The method of claim 1 , further comprising:
transmitting, by the server, a second authorization request to a payment facilitation server, wherein execution of the first or the second authentication protocol is dependent upon whether the payment facilitation server approves the second authorization request.
3. The method of claim 1 , wherein at least one of the first authentication protocol and the second authentication protocol comprises:
transmitting, by the server, a notification to any electronic device associated with the user, the notification corresponding to the authorization request.
4. The method of claim 3 , wherein the notification comprises at least one of a payment amount, a location of the electronic terminal, and a timestamp associated with the authorization request.
5. The method of claim 1 , wherein the first authentication protocol comprises:
transmitting, by the server, an authentication prompt to the electronic terminal requesting the user to enter an authentication response.
6. The method of claim 1 , wherein the second authentication protocol is a two-factor authentication method.
7. The method of claim 1 , wherein the second authentication protocol comprises:
causing, by the server, the mobile device to identify whether a second electronic device known to be associated with the user is within the predetermined proximity to the mobile device.
8. The method of claim 7 , wherein the second electronic device is a wearable device.
9. The method of claim 7 , wherein the mobile device uses at least one of RFID communication, beacon transmitters, and GPS transmission.
10. The method of claim 1 , wherein the server communicates with the mobile device via a mobile application installed onto the mobile device.
11. A system comprising:
an electronic terminal configured to initiate an authorization request associated with a payment card of a user;
a RFID tag disposed on or in the payment card, wherein the RFID tag stores RFID identification information and comprises an antenna layer configured to communicate with a RFID reader of a mobile device of the user, and wherein the mobile device is associated with the payment card; and
a server in communication with the electronic terminal, the server configured to:
in response to receiving, from the electronic terminal, the authorization request to authorize payment via the payment card, identify the mobile device of the user associated with the payment card;
transmit an instruction to the mobile device to cause the RFID reader of the mobile device to detect the RFID tag in proximity to the RFID reader and transmit, using the mobile device, the RFID identification information of the RFID t to the server;
determine, based on the RFID identification information, whether the RFID tag is located within a predetermined proximity to the mobile device;
in response to determining that the payment card is located within the predetermined proximity to the mobile device, execute a first authentication protocol; and
in response to determining that the payment card is not located within the predetermined proximity to the mobile device, execute a second authentication protocol comprising transmitting an authentication prompt to the electronic device requesting the user to enter an authentication response.
12. The system of claim 11 , wherein the server is further configured to:
transmit a second authorization request to a payment facilitation server, wherein execution of the first or the second authentication protocol is dependent upon whether the payment facilitation server approves the second authorization request.
13. The system of claim 11 , wherein at least one of the first authentication protocol and the second authentication protocol comprises the server transmitting a notification to any electronic device associated with the user, the notification corresponding to the authorization request.
14. The system of claim 13 , wherein the notification comprises at least one of a payment amount, a location of the electronic terminal, and a timestamp associated with the authorization request.
15. The system of claim 11 , wherein the second authentication protocol comprises:
transmitting, by the server, an authentication prompt to the electronic terminal requesting the user to enter an authentication response.
16. The system of claim 11 , wherein the second authentication protocol is a two-factor authentication method.
17. The system of claim 11 , wherein the second authentication protocol comprises:
causing, by the server, the mobile device to identify whether a second electronic device known to be associated with the user is within the predetermined proximity to the mobile device.
18. The system of claim 17 , wherein the second electronic device is a wearable device.
19. The system of claim 17 , wherein the mobile device uses at least one of RFID communication, beacon transmitters, and GPS transmission.
20. The system of claim 11 , wherein the server is configured to transmit the instruction to a software package operating on the mobile device.
21. The method of claim 1 , comprising receiving the authentication response via the mobile device and authorizing the payment.