Granted Patent B2

US 12,235,939 · App. 17/669,128 · Granted Feb 25, 2025

Inventors: Mark Allen Nelsen (Oakland, CA); Craig O'Connell (San Mateo, CA); Karl Newland (Foster City, CA); Douglas Fisher (Mountain View, CA)

Assignee: VISA INTERNATIONAL SERVICE ASSOCIATION

G06F21/31G06Q20/3224G06Q20/40G06Q20/4016

Abstract

Claims (45)

1. A method comprising:

receiving, by an authorization server computer, a modified transaction authentication request message formatted according to a second International Organization for Standardization (ISO) 8583 message format from a server computing device, wherein the server computing device generates the modified authentication request message based upon a transaction authentication request message formatted according to a first Hypertext Transfer Protocol (HTTP) message format from a computing device of a user, and wherein the server computing device generates and transmits the modified authentication request message by:

receiving, at the server computing device from the computing device of the user, during a transaction with a merchant server computer, over a communications network, the transaction authentication request message for the transaction in the HTTP message format comprising HTTP fields, the transaction authentication request message including both authentication information and authorization information comprising a device identifier of the computing device of the user, a merchant identifier, a merchant location, a card verification value, and a transaction amount;

translating, by the server computing device, the transaction authentication request message to the ISO 8583 message format comprising ISO 8583 fields, by

(i) extracting, using an information collection submodule in the server computing device, the authentication information and the authorization information from the transaction authentication request message in the Hypertext Transfer Protocol (HTTP) message format,

(ii) accessing, using a format conversion submodule in the server computing device, correlations between the ISO 8583 fields and the HTTP fields from a message format database, and

iii) based on the field correlations, generating, using a message generation submodule in the server computing device, the modified transaction authentication request message by inserting the authentication information and the authorization information collected using the information collection submodule and one or more of a geolocation value that identifies a geographic location of the computing device of the user, a feature identifier that identifies characteristics of the computing device of the user, or a network address of the computing device of the user into the ISO 8583 fields to form the modified transaction authentication request message, and

transmitting, by the server computing device to the authorization server computer, the modified transaction authentication request message in the ISO 8583 message format; and

initiating, by the authorization server computer, an authentication process with the user using the computing device.

2. The method of claim 1 , further comprising:

generating, by the authorization server computer, an authentication response message formatted according to the second message format; and

sending, by the authorization server computer, the authentication response message to the server computing device, wherein the server computing device generates a modified authentication response message formatted according to the first message format.

3. The method of claim 1 , wherein the modified authentication request message comprises a risk assessment value.

4. The method of claim 1 , further comprising:

generating, by the authorization server computer, a challenge request message in the ISO 8583 message format requesting authentication of the user;

transmitting, by the authorization server computer to the server computing device, the challenge request message; and

receiving, by the authorization server computer from the server computing device, a modified challenge response message in the ISO 8583 message format, wherein the server computing device sent a modified challenge request message in the HTTP message format to the computing device of the user and converted a received challenge response message in the HTTP message format to the modified challenge response message in the ISO 8583 message format.

5. The method of claim 1 , further comprising:

determining, by the authorization server computer, based on receiving the modified authentication request message, an authorization result;

generating, by the authorization server computer, an authorization response message in the ISO 8583 message format comprising the authorization result; and

transmitting, by the authorization server computer to the server computing device, the authorization response message in the ISO 8583 format.

6. An authorization server computer comprising:

a set of one or more processors; and

a non-transitory computer readable storage medium coupled with the set of processors and storing instructions that, when executed by the set of processors, causes the set of processors to perform a method comprising:

receiving a modified transaction authentication request message formatted according to a second International Organization for Standardization (ISO) 8583 message format from a server computing device, wherein the server computing device generates the modified transaction authentication request message based upon a transaction authentication request message formatted according to a first Hypertext Transfer Protocol (HTTP) message format from a computing device of a user, and wherein the server computing device generates and transmits the modified transaction authentication request message by:

receiving, from the computing device of the user, during a transaction with a merchant server computer, over a communications network, the transaction authentication request message for the transaction in the HTTP message format comprising HTTP fields, the transaction authentication request message including both authentication information and authorization information comprising a device identifier of the computing device of the user, a merchant identifier, a merchant location, a card verification value, and a transaction amount;

translating the transaction authentication request message to the ISO 8583 message format comprising ISO 8583 fields, by

(i) extracting, using an information collection submodule in the server computing device, the authentication information and the authorization information from the transaction authentication request message in the Hypertext Transfer Protocol (HTTP) message format,

(ii) accessing, using a format conversion submodule in the server computing device, correlations between the ISO 8583 fields and the HTTP fields from a message format database, and

(iii) based on the field correlations, generating, using a message generation submodule in the server computing device, the modified transaction authentication request message by inserting the authentication information and the authorization information collected using the information collection submodule and one or more of a geolocation value that identifies a geographic location of the computing device of the user, a feature identifier that identifies characteristics of the computing device of the user, or a network address of the computing device of the user into the ISO 8583 fields to form the modified transaction authentication request message, and

transmitting, to an authorization computer, the modified transaction authentication request message in the ISO 8583 message format; and

initiating an authentication process with the user using the computing device.

7. The authorization server computer of claim 6 , further comprising:

generating a transaction authentication response message formatted according to the second message format; and

sending the transaction authentication response message to the server computing device, wherein the server computing device generates a modified transaction authentication response message formatted according to the first message format.

8. The authorization server computer of claim 6 , wherein the modified transaction authentication request message comprises a risk assessment value.

9. The authorization server computer of claim 6 , the method further comprising:

generating a challenge request message in the ISO 8583 message format requesting authentication of the user;

transmitting, to the server computing device, the challenge request message; and

receiving, from the server computing device, a modified challenge response message in the ISO 8583 message format, wherein the server computing device sent a modified challenge request message in the HTTP message format to the user computing device of the user and converted a received challenge response message in the HTTP message format to the modified challenge response message in the ISO 8583 message format.

10. The authorization server computer of claim 6 , the method further comprising:

determining, based on receiving the modified transaction authentication request message, an authorization result;

generating an authorization response message in the ISO 8583 message format comprising the authorization result; and

transmitting, to the server computing device, the authorization response message in the ISO 8583 format.

11. The authorization server computer of claim 6 , wherein the authorization server computer is an issuer computer that issued an account of the user.

Continuity (3)

References Cited (41)