Multi-commerce channel wallet for authenticated transactions
A phone-based electronic wallet providing authenticated transactions across multiple channels of commerce. The electronic wallet may be used for point-of-sale payments, remote mobile payments and/or web-based payments, and may use authentication tools such as offline PINs, SecureCode PINs and/or online PINs.
1. A method for eliminating the need for an authentication pop-up window during an authentication process of an electronic transaction between a cardholder and a merchant over a payment network, the cardholder using a mobile device having an electronic wallet application that enables entry by the cardholder of authentication credentials within the electronic wallet application, and that is in communication with a merchant plug-in via an electronic wallet API, the method being carried-out by the merchant plug-in and comprising the steps of:
receiving, by the merchant plug-in, a cardholder authentication request from the electronic wallet application via the electronic wallet API;
sending, by the merchant plug-in, a payer authentication request to an access control server device;
receiving, by the merchant plug-in, cardholder authenticating criteria in HTML markup from the access control server device and in response to the payer authentication request;
extracting, by the merchant plug-in, the cardholder authenticating criteria from the HTML markup;
translating, by the merchant plug-in, the cardholder authenticating criteria from the HTML markup into a protocol compatible with the electronic wallet API;
sending, by the merchant plug-in, the translated authenticating criteria to the electronic wallet application via the electronic wallet API;
receiving, by the merchant plug-in, from the electronic wallet API, cardholder authentication credentials entered by the cardholder via an interface of the electronic wallet application;
translating, by the merchant plug-in, the cardholder authentication credentials into a format for communication by the merchant plug-in to the access control server device using a HTTP POST command; and
sending, by the merchant plug-in, the translated cardholder authentication credentials to the access control server device for validation.
2. The method according to claim 1 , further comprising the steps of:
receiving, by the merchant plug-in, from the access control server device, an authentication response of validation of the authentication credentials of the cardholder; and
sending, by the merchant plug-in, the authentication response to the electronic wallet application via the electronic wallet API.
3. The method according to claim 1 , further comprising the step of receiving, by the merchant plug-in, an access server device identification from a directory server device.
4. A system for authenticating an identity of a cardholder during authentication of an electronic transaction between a cardholder and a merchant over a payment network, the cardholder using a mobile device having an electronic wallet application that enables entry by the cardholder of authentication credentials via an interface of the electronic wallet application, the electronic wallet application being in communication with a merchant plug-in vial an electronic wallet API, the system comprising:
a directory server device including at least one processor configured for verification of enrollment of a payment card of the cardholder in an authentication program;
an access control server device in communication with the directory server device, the access control server device including at least one processor containing cardholder authenticating criteria associated with the payment card; and
a merchant plug-in in communication with the directory server device, the access control server device and the cardholder mobile device, wherein the merchant plug-in including at least one processor;
wherein the merchant plug-in, in response to receipt of a cardholder authentication request from the electronic wallet application:
sends a payer authentication request to the access control server device;
receives cardholder authenticating criteria in HTML markup from the access control server device and in response to the payer authentication request;
extracts the cardholder authenticating criteria from the HTML markup;
translates the cardholder authenticating criteria from the HTML markup into a protocol compatible with the electronic wallet API;
sends the translated authenticating criteria to the electronic wallet application via the electronic wallet API;
receives, from the electronic wallet API, cardholder authentication credentials entered by the cardholder via an interface of the electronic wallet application;
translates the cardholder authentication credentials into a format for communication by the merchant plug-in to the access control server device using a HTTP POST command; and
sends the translated cardholder authentication credentials to the access control server device for validation.
5. The system according to claim 4 , wherein the merchant plug-in further receives, from the access control server device, an authentication response of validation of the cardholder authentication credentials, and sends the authentication response to the electronic wallet application via the electronic wallet API.