Methods and systems for performing authentication in consumer transactions
The method for authenticating a mail order or telephone order transaction according to the present invention includes receiving authentication information from a cardholder, providing authentication information to an issuer, and determining whether the authentication information is valid. If the authentication information is valid, the issuer informs the merchant that the transaction is valid. In an embodiment, the issuer may not supply a personal assurance message and/or other confidential cardholder information previously supplied by the cardholder in response to the authentication information.
1. A method comprising:
receiving, at an authentication system, transaction type information indicative of a type of transaction engaged in between a consumer and a merchant;
determining, at the authentication system, the type of transaction engaged in between the consumer and the merchant based on the received transaction type information;
communicating, from the authentication system, an authentication prompt for authenticating an identity of the consumer based on the type of transaction engaged in between the consumer and the merchant;
in response to communicating an authentication prompt, receiving, at the authentication system, authentication information for authenticating the consumer; and
authenticating the consumer based on the received authentication information.
2. The method of claim 1 , wherein the transaction type information indicates whether the transaction is a card-not-present transaction, and determining the type of transaction engaged in between the consumer and the merchant includes determining whether the type of transaction is a card-not-present transaction.
3. The method of claim 1 , wherein communicating an authentication prompt based on the type of transaction engaged in between the consumer and the merchant includes:
determining sensitive consumer information from enrollment information associated with the consumer and previously supplied by the consumer;
generating an authentication prompt that excludes the sensitive consumer information; and
communicating the authentication prompt that excludes the sensitive consumer information.
4. The method of claim 3 , wherein the sensitive consumer information includes a personal assurance message.
5. The method of claim 1 , wherein the authentication information comprises a biometric.
6. The method of claim 1 , wherein after determining the type of transaction, disabling a function in the authentication system.
7. The method of claim 1 , wherein after determining the type of transaction, disabling a risk mitigation function in the authentication system.
8. The method of claim 1 wherein the authentication prompt does not contain sensitive cardholder information.
9. An authentication system, configured to
receive, at the authentication system, transaction type information indicative of a type of transaction engaged in between a consumer and a merchant;
determine, at the authentication system, the type of transaction engaged in between the consumer and the merchant based on the received transaction type information;
communicate, from the authentication system, an authentication prompt for authenticating an identity of the consumer based on the type of transaction engaged in between the consumer and the merchant;
in response to communicating an authentication prompt, receive, at the authentication system, authentication information for authenticating the consumer; and
authenticate the consumer based on the received authentication information.
10. The authentication system of claim 9 , wherein the transaction type information indicates whether the transaction is a card-not-present transaction, and determining the type of transaction engaged in between the consumer and the merchant includes determining whether the type of transaction is a card-not-present transaction.
11. The authentication system of claim 9 , wherein the system is further configured to
determine sensitive consumer information from enrollment information associated with the consumer and previously supplied by the consumer;
generate an authentication prompt that excludes the sensitive consumer information; and
communicate the authentication prompt that excludes the sensitive consumer information.
12. The authentication system of claim 11 , wherein the sensitive consumer information includes a personal assurance message.
13. The authentication system of claim 9 , wherein the authentication information comprises a biometric.
14. The authentication system of claim 9 , wherein the authentication system is further configured to disable a function in the authentication system.
15. The authentication system of claim 9 , wherein the authentication system is further configured to disable a risk mitigation function in the authentication system.
16. The authentication system of claim 9 , wherein the authentication prompt does not contain sensitive cardholder information.
17. The method according to claim 1 , wherein in response to the type of transaction being a card-not-present transaction, the authentication prompt excludes sensitive consumer information.
18. The method according to claim 17 , wherein sensitive consumer information includes one of a personal assurance message and a consumer password.