Systems and methods for direct electronic communication of consumer information
A method for submission of payment transaction requests from a point of sale (POS) terminal to a financial institution includes reading payment information from a payment vehicle, reading financial institution routing information from the payment vehicle, reading a payment vehicle certificate from the payment vehicle, requesting consumer authentication information from a consumer, and submitting a payment transaction request to the financial institution using the financial institution routing information, a POS terminal certificate, and the payment vehicle certificate. An authentication certificate for submission of payment transaction requests from a point of sale (POS) terminal to a financial institution may be generated by receiving a request for an authentication certificate from a requestor, the request comprising a requestor ID and one or more capabilities of the requestor, verifying the requestor ID, generating an authentication certificate for the requestor, and returning the generated authentication certificate to the requestor.
1. A method of direct submission of payment transaction requests from a point of sale (POS) terminal to a transaction server of a financial institution, the method comprising:
receiving, by the transaction server and directly from the POS terminal over a computer network, a payment transaction request including payment information, a POS terminal certificate, and a payment vehicle certificate; and
processing, by the transaction server, the payment transaction request according to the received payment information.
2. The method of claim 1 , further comprising:
receiving, by the transaction server, a request for a financial institution certificate from an authentication service; and
transmitting, by the transaction server, the financial institution certificate to the authentication service for validation.
3. The method of claim 1 , further comprising:
declining, by the transaction server, the payment transaction request based on the payment transaction request violating at least one capability of a merchant associated with the POS terminal certificate, the at least one capability of the merchant associated with the POS terminal certificate being encoded in the POS terminal certificate.
4. The method of claim 1 , further comprising:
declining, by the transaction server, the payment transaction request based on the payment transaction request violating at least one capability of a consumer associated with a consumer certificate, the at least one capability of the consumer associated with the consumer certificate being encoded in the consumer certificate.
5. The method of claim 1 , further comprising:
transmitting, by the transaction server, at least one of the POS terminal certificate and the payment vehicle certificate to an authentication service for validation; and
receiving, by the transaction server, a POS terminal certificate validation or a payment vehicle certificate validation from the authentication service.
6. The method of claim 5 , further comprising:
cancelling, by the transaction server, the payment transaction request when the authentication service returns a certificate validation error.
7. The method of claim 5 , wherein the POS terminal certificate stores data defining one or more capabilities of a merchant associated with the POS terminal, and wherein the payment vehicle certificate stores data defining one or more capabilities of a consumer associated with the payment vehicle.
8. A transaction server of a financial institution, the transaction server comprising:
a memory configured to store instructions; and
a processor configured to execute the instructions to perform operations comprising:
receiving, directly from a point of sale (POS) terminal over a computer network, a payment transaction request including payment information, a POS terminal certificate, and a payment vehicle certificate; and
processing the payment transaction request according to the received payment information.
9. The transaction server of claim 8 , wherein the operations further comprise:
receiving a request for a financial institution certificate from an authentication service; and
transmitting the financial institution certificate to the authentication service for validation.
10. The transaction server of claim 8 , wherein the operations further comprise:
declining the payment transaction request based on the payment transaction request violating at least one capability of a merchant associated with the POS terminal certificate, the at least one capability of the merchant associated with the POS terminal certificate being encoded in the POS terminal certificate.
11. The transaction server of claim 8 , wherein the operations further comprise:
receiving a request for a financial institution certificate from an authentication service; and
transmitting the financial institution certificate to the authentication service for validation.
12. The transaction server of claim 8 , wherein the operations further comprise:
declining the payment transaction request based on the payment transaction request violating at least one capability of a consumer associated with a consumer certificate, the at least one capability of the consumer associated with the consumer certificate being encoded in the consumer certificate.
13. The transaction server of claim 8 , wherein the operations further comprise:
transmitting at least one of the POS terminal certificate and the payment vehicle certificate to an authentication service for validation; and
receiving a POS terminal certificate validation or a payment vehicle certificate validation from the authentication service.
14. The transaction server of claim 13 , wherein the operations further comprise:
cancelling the payment transaction request when the authentication service returns a certificate validation error.
15. A non-transitory computer-readable medium storing instructions that, when executed by a processor of a transaction server of a financial institution, cause the transaction server to perform operations comprising:
receiving, directly from a point of sale (POS) terminal over a computer network, a payment transaction request including payment information, a POS terminal certificate, and a payment vehicle certificate; and
processing the payment transaction request according to the received payment information.
16. The non-transitory computer-readable medium of claim 15 , wherein the operations further comprise:
receiving a request for a financial institution certificate from an authentication service; and
transmitting the financial institution certificate to the authentication service for validation.
17. The non-transitory computer-readable medium of claim 15 , wherein the operations further comprise:
declining the payment transaction request based on the payment transaction request violating at least one capability of a merchant associated with the POS terminal certificate, the at least one capability of the merchant associated with the POS terminal certificate being encoded in the POS terminal certificate.
18. The non-transitory computer-readable medium of claim 15 , wherein the operations further comprise:
receiving a request for a financial institution certificate from an authentication service; and
transmitting the financial institution certificate to the authentication service for validation.
19. The non-transitory computer-readable medium of claim 15 , wherein the operations further comprise:
declining the payment transaction request based on the payment transaction request violating at least one capability of a consumer associated with a consumer certificate, the at least one capability of the consumer associated with the consumer certificate being encoded in the consumer certificate.
20. The non-transitory computer-readable medium of claim 15 , wherein the operations further comprise:
transmitting at least one of the POS terminal certificate and the payment vehicle certificate to an authentication service for validation; and
receiving a POS terminal certificate validation or a payment vehicle certificate validation from the authentication service.