Granted Patent B2

US 12,380,431 · App. 17/750,718 · Granted Aug 5, 2025

Inventors: Vijin Venugopalan (Singapore, SG); Aishwarya Namjoshi (Mumbai, IN); Saket Bhardwaj (Mumbai, IN)

Assignee: Mastercard International Incorporated

G06Q20/3674G06Q20/401G06Q20/409H04L63/0838

Abstract

Claims (104)

1. A method, comprising:

receiving at a payment network validation server from a payment terminal device:

transaction data corresponding to a payment transaction that has been initiated through contactless communication between a payor device and the payment terminal device; and

chip data corresponding to an integrated circuit chip that is implemented within a payment card associated with the payment transaction;

receiving at the payment network validation server from the payor device:

a request for initiating payor authentication; and

a first set of data associated with the payment transaction;

responding, by the payment network validation server, to the request for initiating payor authentication by:

generating a first one-time-password (OTP); and

transmitting to an issuer server associated with the payment card:

the first OTP; and

the first set of data associated with the payment transaction;

thereafter receiving, at the payment network validation server from the payor device, a second set of data associated with the payment transaction, the second set of data comprising a second OTP; and

transmitting, by the payment network validation server, an authentication decision to the issuer server, wherein the authentication decision is based on:

a first validation decision based on a comparison between (i) data from the transaction data and chip data received by the payment network validation server from the payment terminal device; and (ii) data from the first set of data received by the payment network validation server from the payor device; and

a second validation decision based on a comparison between the first OTP generated by the payment network validation server and the second OTP received by the payment network validation server from the payor device, wherein

the payment network validation server is configured for independent network communication with the payor device via a data network and the payment terminal device via an acquirer server.

2. The method as claimed in claim 1 , wherein the issuer server is configured for independent network communication with the payor device distinct from network communication with the payment network validation server; and

wherein the issuer server is configured to:

implement the payment transaction in response to determining that the authentication decision is a positive authentication decision; and

reject the payment transaction in response to determining that the authentication decision is a negative authentication decision.

3. The method as claimed in claim 1 , wherein receiving at the payment network validation server from the payment terminal device comprises:

receiving at the acquirer server from the payment terminal device the transaction data and the chip data, wherein the acquirer server is configured for network communication with the payment network validation server; and

transmitting from the acquirer server to the payment network validation server the transaction data and the chip data, wherein:

the acquirer server is configured for independent network communication with the payment network validation server distinct from network communication with the payor device; and

wherein:

the transaction data received at the payment network validation server from the payment terminal device comprises any one or more of a merchant identifier associated with an intended payee, a merchant category code associated with a payee, a currency associated with the payment transaction, and a payee name; and

the chip data comprises a chip identifier associated with the payment card.

4. The method as claimed in claim 1 , wherein:

the first set of data received from the payor device includes any one or more of a payor digital wallet identifier, a payor digital wallet name, a payment card identifier associated with the payment card, a transaction amount and merchant data; and

the transaction amount and the merchant data have been received at the payor device from the payment terminal device.

5. The method as claimed in claim 4 , wherein the merchant data received at the payor device from the payment terminal device comprises any one or more of a merchant identifier associated with an intended payee, a merchant category code associated with a payee, a currency associated with the payment transaction, and a payee name.

6. The method as claimed in claim 1 , wherein:

the second OTP has been transmitted to the payor device from the issuer server over a first communication network of a first type; and

wherein the second set of data is received from the payor device over a second communication network of a second type, wherein the second type is different from the first type.

7. The method as claimed in claim 6 , wherein:

the first communication network comprises a public switched terminal network; and

the second communication network comprises an internet protocol based data network.

8. The method as claimed in claim 1 , wherein:

the authentication decision is a positive authentication decision in response to each of the first validation decision and the second validation decision comprising a positive match; or

the authentication decision is a negative authentication decision in response to either of the first validation decision and the second validation decision comprising a match failure.

9. A system for authentication of a contactless communication protocol based digital wallet payment transaction, comprising a processor implemented payment network validation server, wherein the processor implemented payment network validation server is configured to:

receive first network communication via an acquirer server from a payment terminal device comprising:

transaction data corresponding to a payment transaction that has been initiated through contactless communication between a payor device and the payment terminal device; and

chip data corresponding to an integrated circuit chip that is implemented within a payment card associated with the payment transaction;

receive second network communication via a data network from the payor device comprising:

a request for initiating payor authentication; and

a first set of data associated with the payment transaction, wherein the payment network validations server is configured to receive the first network communication and second network communications on distinct network paths;

respond to the request for initiating payor authentication by:

generating a first one-time-password (OTP); and

transmitting to an issuer server associated with the payment card:

the first OTP; and

the first set of data associated with the payment transaction;

thereafter receive from the payor device a second set of data associated with the payment transaction, the second set of data comprising a second OTP; and

transmit an authentication decision to the issuer server, wherein the authentication decision is based on:

a first validation decision based on a comparison between (i) data from the transaction data and chip data received by the payment network validation server from the payment terminal device and (ii) data from the first set of data received by the payment network validation server from the payor device; and

a second validation decision based on a comparison between the first OTP generated by the payment network validation server and the second OTP received by the payment network validation server from the payor device.

10. The system of claim 9 , wherein the issuer server is configured to:

implement the payment transaction in response to determining that the authentication decision is a positive authentication decision; and

reject the payment transaction in response to determining that the authentication decision is a negative authentication decision.

11. The system of claim 9 , wherein:

the transaction data received at the payment network validation server from the payment terminal device comprises any one or more of a merchant identifier associated with an intended payee, a merchant category code associated with a payee, a currency associated with the payment transaction, and a payee name;

the chip data comprises a chip identifier associated with the payment card.

12. The system of claim 9 , wherein:

the first set of data received from the payor device includes any one or more of a payor digital wallet identifier, a payor digital wallet name, a payment card identifier associated with the payment card, a transaction amount and merchant data; and

the transaction amount and the merchant data have been received at the payor device from the payment terminal device.

13. The system of claim 9 , wherein:

the second OTP has been transmitted to the payor device from the issuer server over a first communication network of a first type; and

wherein the second set of data is received from the payor device over a second communication network of a second type, wherein the second type is different from the first type.

14. The system of claim 9 , wherein:

the authentication decision is a positive authentication decision in response to each of the first validation decision and the second validation decision comprising a positive match; or

the authentication decision is a negative authentication decision in response to either of the first validation decision and the second validation decision comprising a match failure.

15. A computer program product for authentication of a contactless communication protocol based digital wallet payment transaction, comprising a non-transitory computer readable medium having a computer readable program code embodied therein, the computer readable program code comprising instructions for implementing within a payment network validation server, the steps of:

receiving from a payment terminal device via an acquirer server:

transaction data corresponding to a payment transaction that has been initiated through contactless communication between a payor device and the payment terminal device; and

chip data corresponding to an integrated circuit chip that is implemented within a payment card associated with the payment transaction;

receiving from the payor device via a data network:

a request for initiating payor authentication; and

a first set of data associated with the payment transaction;

responding to the request for initiating payor authentication by:

generating a first one-time-password (OTP); and

transmitting to an issuer server associated with the payment card:

the first OTP; and

the first set of data associated with the payment transaction;

thereafter receiving from the payor device a second set of data associated with the payment transaction, the second set of data comprising a second OTP; and

transmitting an authentication decision to the issuer server, wherein the authentication decision is based on:

a first validation decision based on a comparison between (i) data from the transaction data and chip data received by the payment network validation server from the payment terminal device and (ii) data from the first set of data received by the payment network validation server from the payor device; and

a second validation decision based on a comparison between the first OTP generated by the payment network validation server and the second OTP received by the payment network validation server from the payor device, wherein

the payment network validation server is configured to receive the chip data and the transaction data received from the payment terminal device and the request and the first set of data received from the payor device on independent network paths.

16. The computer program product of claim 15 , wherein the issuer server is configured to:

implement the payment transaction in response to determining that the authentication decision is a positive authentication decision; and

reject the payment transaction in response to determining that the authentication decision is a negative authentication decision.

17. The computer program product of claim 15 , wherein:

the transaction data received at the payment network validation server from the payment terminal device comprises any one or more of a merchant identifier associated with an intended payee, a merchant category code associated with a payee, a currency associated with the payment transaction, and a payee name;

the chip data comprises a chip identifier associated with the payment card.

18. The computer program product of claim 15 , wherein:

the first set of data received from the payor device includes any one or more of a payor digital wallet identifier, a payor digital wallet name, a payment card identifier associated with the payment card, a transaction amount and merchant data; and

the transaction amount and the merchant data have been received at the payor device from the payment terminal device.

19. The computer program product of claim 15 , wherein:

the second OTP has been transmitted to the payor device from the issuer server over a first communication network of a first type; and

wherein the second set of data is received from the payor device over a second communication network of a second type, wherein the second type is different from the first type.

20. The computer program product of claim 15 , wherein:

the authentication decision is a positive authentication decision in response to each of the first validation decision and the second validation decision comprising a positive match; or

the authentication decision is a negative authentication decision in response to either of the first validation decision and the second validation decision comprising a match failure.

Assignments (1)

Priority Claims (1)

Continuity (1)

References Cited (165)