Granted Patent B2

US 12,206,675 · App. 18/411,018 · Granted Jan 21, 2025

Inventors: Andrew John Bruno Naumann Zu Koenigsbrueck (Princeton, NJ); Ali Chamseddine (London, GB); Cory Howard Siddens (Mountain View, CA); Benjamin Scott Boding (Mountain View, CA)

Assignee: Visa International Service Association

H04L63/102G06F21/10

Abstract

Claims (60)

1. A method comprising:

receiving, by a server computer from a requesting device, a request for access to a resource to a user device, the request comprising access data;

determining, by the server computer, an access score based on the access data;

identifying a first threshold value corresponding to access requests that should be approved;

identifying a second threshold value corresponding to access requests that should be declined;

comparing the access score to the first threshold value and the second threshold value; and

determining that the access score exceeds the first threshold value and the second threshold value;

generating, by the server computer, an access indicator based on the access score;

preparing, by the server computer, an authorization request message comprising the access indicator; and

transmitting, by the server computer to an authorization computer, the authorization request message comprising the access indicator,

wherein the authorization computer approves or declines the access to the resource to the user device based on the access indicator comprised in the authorization request message.

2. The method of claim 1 , wherein the access indicator comprises a flag indicating that the server computer has approved the access request.

3. The method of claim 1 , further comprising:

receiving, by the server computer from an authentication computer, authentication data.

4. The method of claim 3 , wherein the server computer further uses at least a subset of the authentication data for determining the access score.

5. The method of claim 3 , wherein: the authorization computer further uses the authentication data for determining whether to approve or decline the access to the resource.

6. The method of claim 3 , wherein: the authentication data comprises an authentication code indicating an authentication result and an authentication cryptogram; and

the authorization request message further comprises the authentication code and the authentication cryptogram.

7. The method of claim 3 , wherein: the authentication data comprises supplemental data; and

the authorization request message further comprises the supplemental data.

8. The method of claim 3 , further comprising:

analyzing, by the server computer, the access data in comparison to a plurality of exemptions, wherein if one or more of the plurality of exemptions applies to the access data, authorization is not required; and

based on the access data, determining, by the server computer, that no exemptions apply to the access request.

9. The method of claim 1 , wherein the access indicator is transmitted in an open data field of the authorization request message.

10. The method of claim 1 , further comprising:

analyzing, by the server computer, the access data in comparison to a plurality of exemptions, wherein if one or more of the plurality of exemptions applies to the access data, authorization is not required;

based on the access data, determining, by the server computer, that one or more exemptions apply to the access request; and

based on the determination, transmitting the authorization request message without executing authorization operations.

11. A server computer comprising:

a processor; and

a non-transitory computer-readable medium coupled to the processor, the non-transitory computer-readable medium comprising code, executable by the processor, to implement operations comprising:

determining an access score based on access data obtained from a request for access to a resource to a user device;

identifying a first threshold value corresponding to access requests that should be approved;

identifying a second threshold value corresponding to access requests that should be declined;

comparing the access score to the first threshold value and the second threshold value; and

determining that the access score exceeds the first threshold value and the second threshold value;

generating an access indicator based on the access score;

preparing an authorization request message comprising the access indicator; and

transmitting, to an authorization computer, the authorization request message comprising the access indicator,

wherein the authorization computer approves or declines the access to the resource to the user device based on the access indicator comprised in the authorization request message.

12. The server computer of claim 11 , the operations further comprising:

receiving authentication data, wherein the server computer further uses at least a subset of the authentication data for determining the access score.

13. The server computer of claim 12 , wherein the server computer further uses at least a subset of the authentication data for determining the access score.

14. A method comprising:

receiving, by a server computer from a requesting device, a request for access to a resource to a user device, the request comprising access data;

transmitting, by the server computer to an authentication computer, an authentication request message comprising at least a subset of the access data;

receiving, by the server computer from the authentication computer, an authentication response message comprising authentication data corresponding to a level of authentication of the user device by the authentication computer, wherein the authentication computer generated the authentication data based on the access data;

determining, by the server computer, an access score based on the authentication data and the access data;

analyzing, by the server computer, the access data in comparison to a plurality of exemptions, wherein if one or more of the plurality of exemptions applies to the access data, authorization is not required; and

based on the access data, determining, by the server computer, that no exemptions apply to the access request; and

determining, by the server computer based on the access score, whether to transmit an authorization request message to an authorization computer.

15. The method of claim 14 , further comprising:

generating an access indicator based on the access score; and

transmitting the access indicator to the authorization computer,

wherein the authorization computer approves or declines the access to the resource based on the access indicator.

16. The method of claim 15 , wherein the access indicator is transmitted in an open data field of the authorization request message.

17. The method of claim 15 , wherein the access indicator comprises a flag indicating that the server computer has approved the access request.

18. The method of claim 15 , further comprising:

transmitting the access score to the authorization computer,

wherein the authorization computer approves or declines the access to the resource based on the access score.

Continuity (3)

References Cited (23)