Pre-authorization access request screening

1. A method comprising:

receiving, by a server computer from a requesting device, a request for access to a resource to a user device, the request comprising access data;

determining, by the server computer, an access score based on the access data;

generating, by the server computer, an access indicator based on the access score;

transmitting, by the server computer to an authentication computer, an authentication request message comprising at least a subset of the access data;

receiving, by the server computer from the authentication computer, an authentication response message comprising authentication data, wherein the authentication computer generated the authentication data based on at least a subset of the access data;

preparing, by the server computer, an authorization request message comprising the access indicator, wherein the authorization request message further comprises at least a subset of the authentication data, which has been generated by the authentication computer; and

transmitting, by the server computer to an authorization computer, the authorization request message comprising the access indicator,

wherein the authorization computer approves or declines the access to the resource to the user device based on the access indicator comprised in the authorization request message, wherein the authorization computer further uses the authentication data received in the authorization request message for determining whether to approve or decline the access to the resource.

2. The method of claim 1 , wherein the access indicator comprises a flag indicating that the server computer has approved the access request.

3. The method of claim 1 , wherein the server computer further uses at least a subset of the authentication data for determining the access score.

4. The method of claim 1 , wherein:

the authentication data comprises an authentication code indicating an authentication result and an authentication cryptogram; and

the authorization request message further comprises the authentication code and the authentication cryptogram.

5. The method of claim 1 , wherein:

the authentication data comprises supplemental data; and

the authorization request message further comprises the supplemental data.

6. The method of claim 1 , further comprising:

analyzing, by the server computer, the access data in comparison to a plurality of exemptions, wherein if one or more of the plurality of exemptions applies to the access data, authentication is not required; and

based on the access data, determining, by the server computer, that no exemptions apply to the access request.

7. The method of claim 1 , wherein the access indicator is transmitted in an open data field of the authorization request message.

8. The method of claim 1 , further comprising:

identifying a first threshold value corresponding to access requests that should be approved;

identifying a second threshold value corresponding to access requests that should be declined;

comparing the access score to the first threshold value and the second threshold value; and

determining that the access score exceeds the first threshold value and the second threshold value.

9. A method comprising:

receiving, by a server computer from a requesting device, a request for access to a resource to a user device, the request comprising access data;

analyzing, by the server computer, the access data in comparison to a plurality of exemptions, wherein if one or more of the plurality of exemptions applies to the access data, authentication is not required;

based on the access data, determining, by the server computer, that one or more exemptions apply to the access request;

transmitting an authorization request message to an authorization computer, the authorization request message comprising an indication that an exemption, of the plurality of exemptions, has been applied; and

receiving, from the authorization computer, an indication that the exemption has been overridden and authentication is required;

transmitting, by the server computer to an authentication computer, an authentication request message comprising at least a subset of the access data;

receiving, by the server computer from the authentication computer, an authentication response message comprising authentication data corresponding to a level of authentication of the user device by the authentication computer, wherein the authentication computer generated the authentication data based on the access data;

determining, by the server computer, an access score based on the authentication data and the access data; and

determining, by the server computer based on the access score, whether to transmit an updated authorization request message to the authorization computer.

10. The method of claim 9 , further comprising:

generating an access indicator based on the access score; and

transmitting the access indicator to the authorization computer,

wherein the authorization computer approves or declines the access to the resource based on the access indicator.

11. The method of claim 10 , wherein the access indicator is transmitted in an open data field of the authorization request message.

12. The method of claim 10 , wherein the access indicator comprises a flag indicating that the server computer has approved the access request.

13. The method of claim 9 , further comprising:

transmitting the access score to the authorization computer,

wherein the authorization computer approves or declines the access to the resource based on the access score.

14. A server computer comprising:

a processor; and

a non-transitory computer-readable medium coupled to the processor, the non-transitory computer-readable medium comprising code, executable by the processor, to implement a method comprising:

receiving, from a requesting device, a request for access to a resource to a user device, the request comprising access data;

determining an access score based on the access data;

generating an access indicator based on the access score;

transmitting, by the server computer to an authentication computer, an authentication request message comprising at least a subset of the access data; and

receiving, by the server computer from the authentication computer, an authentication response message comprising authentication data, wherein the authentication computer generated the authentication data based on at least a subset of the access data;

preparing an authorization request message comprising the access indicator, wherein the authorization request message further comprises at least a subset of the authentication data, which has been generated by the authentication computer; and

transmitting, to an authorization computer, the authorization request message comprising the access indicator, wherein the authorization computer approves or declines the access to the resource to the user device based on the access indicator comprised in the authorization request message, and wherein the authorization computer further uses the authentication data received in the authorization request message for determining whether to approve or decline the access to the resource.