Granted Patent B2

US 12,602,687 · App. 18/625,143 · Granted Apr 14, 2026

Inventors: Simon Phillips (York, GB); Alan Johnson (Maldon, GB); Michael John Cowen (London, GB)

Assignee: Mastercard International Incorporated

G06Q20/401G07B15/00G07C9/00309G07C9/00563G07C9/00571G07C9/00904G07C9/10G07C9/25G07C9/27

Abstract

Claims (51)

1 . A system, comprising:

an access manager, comprising:

at least one processor; and

at least one memory including computer program code;

wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the access manager at least to:

receive, via a network, a payment authorization request from an access device to provide access control based on user information;

perform a lookup process based on the payment authorization request;

determine eligibility for access based on the user information in the payment authorization request; and

in response to determining the user information is eligible for access, forward the payment authorization request to an acquirer for the eligible user information; and

the acquirer, wherein the acquirer is configured to:

receive the payment authorization request from the access manager;

generate a cryptogram based on the payment authorization request; and

forward the payment authorization request, the payment authorization request including the cryptogram, to a payment processing entity or an issuer entity;

wherein the computer program code is further configured to, with the at least one processor, cause the access manager at least to:

receive a response to the payment authorization request from the acquirer, wherein the response to the payment authorization request is generated based on validation of the cryptogram; and

transmit, via the network, the response to the payment authorization request to the access device.

2 . The system of claim 1 , wherein the payment authorization request comprises a zero-value or low-value payment authorization request.

3 . The system of claim 1 , wherein the response comprises one of: a payment authorization response approving the access, a payment authorization response restricting the access, and another message.

4 . The system of claim 1 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, further cause the access manager to:

in response to determining the user information is ineligible for access, deny the access for the user information.

5 . The system of claim 1 , wherein:

the system further comprises the access device; and

the acquirer is further configured to:

perform a payment authorization process based on the payment authorization request;

generate the response to the payment authorization request; and

transmit the response to the payment authorization request to the access manager.

6 . The system of claim 1 , wherein:

the system further comprises the access device and the payment processing entity; and

the payment processing entity is configured to:

receive the payment authorization request from the access manager via the acquirer;

perform a payment authorization process based on the payment authorization request including validating the cryptogram;

generate the response to the payment authorization request based on the validation of the cryptogram; and

transmit the response to the payment authorization request to the access manager via the acquirer.

7 . The system of claim 1 , wherein:

the system further comprises the access device, the payment processing entity, and the issuer entity; and

the issuer entity is configured to:

receive the payment authorization request from the access manager via the acquirer and the payment processing entity;

perform a payment authorization process based on the payment authorization request including validating the cryptogram;

generate the response to the payment authorization request based on the validation of the cryptogram; and

transmit the response to the payment authorization request to the access manager via the payment processing entity and the acquirer.

8 . The system of claim 1 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, further cause the access manager to:

send a notification to an account holder associated with the user information to inform the account holder of an attempt to gain access.

9 . The system of claim 8 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, further cause the access manager to:

receive a message from the account holder in response to the notification.

10 . The system of claim 1 , wherein the acquirer is further configured to:

generate the cryptogram using public key cryptography.

11 . The system of claim 5 , wherein the acquirer is further configured to:

perform the payment authorization process based on the payment authorization request including validating the cryptogram using one or more keys previously received from an issuer entity.

12 . The system of claim 7 , wherein:

the acquirer is further configured to generate the cryptogram using a token number associated with a user account, and

the payment processing entity is further configured to validate the cryptogram including retrieving card record information from a database and determining whether a payment card associated with card record information is valid or in good standing.

Assignments (1)

Continuity (2)

References Cited (54)