Method and system for multi-modal transaction authentication
This invention relates to systems and methods for authenticating transactions using a mobile device based primarily on the introduction of a layer of middleware and wherein the Payment Networks, Merchants, Issuing Banks, Credit Reporting Bureaus, Insurance Companies, Healthcare Providers may customize the implementation of the services based on individual strategy and consumer preferences.
1. A computer-implemented method for processing a secure mobile payment transaction conducted at a location of a merchant comprising:
receiving, from a point-of-sale device at the location of a merchant, a set of data transmitted from a mobile device of a consumer, the set of data including mobile payment data that is associated with the secure mobile payment transaction and additional data of the consumer;
analyzing the set of data received from the point-of-sale device to determine if additional authentication is required to complete the secure mobile payment transaction;
sending, by a secure payment computing device, an authentication request from the secure payment computing device to the mobile device upon determining that the additional authentication is required to complete the secure mobile payment transaction;
receiving, at the secure payment computing device from the mobile device, an authentication response, the authentication response comprising biometric-related information obtained via capture by the mobile device;
completing the additional authentication based on the biometric-related information captured by the mobile device matching previously stored information;
in response to completing the additional authentication, transmitting at least a portion of the mobile payment data to a secure payment network for processing; and
after transmitting the mobile payment data to the secure payment network for processing, transmitting a payment confirmation to the point-of-sale device at the location of the merchant.
2. The computer-implemented method defined in claim 1 wherein the additional data comprises address or location information.
3. The computer-implemented method defined in claim 1 wherein the authentication response is sent on a different communication link than the set of data transmitted from the mobile device.
4. The computer-implemented method defined in claim 1 wherein the biometric-related information indicates that a user has approved the secure mobile payment transaction.
5. The computer-implemented method defined in claim 1 wherein the biometric-related information comprises at least one or more fingerprint biometric factors corresponding to a fingerprint captured contemporaneously when a user touches a position on a user interface of the mobile device.
6. The computer-implemented method defined in claim 5 wherein the fingerprint factors are received by a biometric signal handler of the mobile device and validated on the mobile device by comparing the one or more fingerprint biometric factors to previously registered fingerprint biometric factors stored on a file system or secure element of the mobile device, wherein a first fingerprint biometric factor is captured when a registered user's first finger touches a position of the user interface.
7. The computer-implemented method of claim 1 further comprising determining rules and settings that establish criteria used in authenticating the payment transaction.
8. The computer-implemented method of claim 7 wherein the criteria include a prescribed biometric correlation sequence.
9. The computer-implemented method of claim 1 wherein analyzing the set of data received from the point-of-sale device to determine if additional authentication is required to complete the secure mobile payment transaction comprises accessing configuration settings to determine criteria for authorizing the secure payment transaction.
10. A network environment for processing a secure mobile payment transaction conducted at a location of a merchant comprising:
a secure payment computing device having
a web server having a network interface for receiving and processing information received from Internet sources;
a transaction gateway for receiving and processing payment transactions;
a messaging server having a network interface for communicating with a mobile device, and
a database for storing settings from one or more of a merchant, an issuer, a payment network, a payment acquirer, and an e-commerce gateway;
a first system communicably coupled to the secure payment computing device, wherein the first system is operable to analyze a set of data received from a point-of-sale device to determine if additional authentication is required to complete the secure mobile payment transaction;
wherein, upon determining that the additional authentication is required to complete the secure mobile payment transaction, the secure payment system is operable to
send an authentication request from a secure payment computing device to the mobile device,
receive an authentication response, the authentication response comprising biometric-related information obtained via capture by the mobile device,
complete the additional authentication based on the biometric-related information captured by the mobile device matching previously stored information,
in response to completing the additional authentication, transmitting at least a portion of mobile payment data to a secure payment network for processing, and
wherein after transmitting the mobile payment data to the secure payment network for processing, the first system is operable to transmit a payment confirmation to the point-of-sale device at the location of the merchant.
11. The network environment defined in claim 10 wherein the set of data comprises address or location information.
12. The network environment defined in claim 10 wherein the authentication response is sent on a different communication link than the set of data transmitted from the mobile device.
13. The network environment defined in claim 10 wherein the biometric-related information indicates that a user has approved the secure mobile payment transaction.
14. The network environment defined in claim 10 wherein the biometric-related information comprises at least one or more fingerprint biometric factors corresponding to a fingerprint captured contemporaneously when a user touches a position on a user interface of the mobile device.
15. The network environment defined in claim 14 wherein the fingerprint factors are received by a biometric signal handler of the mobile device and validated on the mobile device by comparing the one or more fingerprint biometric factors to previously registered fingerprint biometric factors stored on a file system or secure element of the mobile device, wherein a first fingerprint biometric factor is captured when a registered user's first finger touches a position of the user interface.
16. The network environment of claim 10 wherein the first system determines whether additional authentication is required to complete the secure mobile payment transaction based on rules and settings that establish criteria used in authenticating the payment transaction.
17. The network environment of claim 16 wherein the criteria include a prescribed biometric correlation sequence.
18. A non-transitory computer readable storage medium storing instructions, which when executed by a computer processing system, causes the computer processing system to perform operations for processing a secure mobile payment transaction conducted at a location of a merchant, the operations comprising:
receiving, from a point-of-sale device at the location of a merchant, a set of data transmitted from a mobile device of a consumer, the set of data including mobile payment data that is associated with the secure mobile payment transaction and additional data of the consumer;
analyzing the set of data received from the point-of-sale device to determine if additional authentication is required to complete the secure mobile payment transaction;
sending, by a secure payment computing device, an authentication request from the secure payment computing device to the mobile device upon determining that the additional authentication is required to complete the secure mobile payment transaction;
receiving, at the secure payment computing device from the mobile device, an authentication response, the authentication response comprising biometric-related information obtained via capture by the mobile device;
completing the additional authentication based on the biometric-related information captured by the mobile device matching previously stored information;
in response to completing the additional authentication, transmitting at least a portion of the mobile payment data to a secure payment network for processing; and
after transmitting the mobile payment data to the secure payment network for processing, transmitting a payment confirmation to the point-of-sale device at the location of the merchant.
19. The non-transitory computer readable storage medium defined in claim 18 wherein the biometric-related information indicates that a user has approved the secure mobile payment transaction.
20. The non-transitory computer readable storage medium of claim 18 wherein analyzing the set of data received from the point-of-sale device to determine if additional authentication is required to complete the secure mobile payment transaction comprises accessing configuration settings to determine criteria for authorizing the secure payment transaction.