US20090325542A1 - Method and system for authenticating a party to a transaction - Google Patents

Method and system for authenticating a party to a transaction Download PDF

Info

Publication number
US20090325542A1
US20090325542A1 US12/104,593 US10459308A US2009325542A1 US 20090325542 A1 US20090325542 A1 US 20090325542A1 US 10459308 A US10459308 A US 10459308A US 2009325542 A1 US2009325542 A1 US 2009325542A1
Authority
US
United States
Prior art keywords
presenter
authentication
phone
merchant
account
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Abandoned
Application number
US12/104,593
Inventor
David Wentker
Michael Lindelsee
Olivier Brand
James Dimmick
Tribhuwan A. Singh Grewal
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Visa USA Inc
Original Assignee
Visa USA Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Visa USA Inc filed Critical Visa USA Inc
Priority to US12/104,593 priority Critical patent/US20090325542A1/en
Assigned to VISA U.S.A. INC. reassignment VISA U.S.A. INC. ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: LINDELSEE, MICHAEL, WENTKER, DAVID, BRAND, OLIVIER, GREWAL, TRIBHUWAN A. SINGH, DIMMICK, JAMES
Publication of US20090325542A1 publication Critical patent/US20090325542A1/en
Abandoned legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F7/00Methods or arrangements for processing data by operating upon the order or content of the data handled
    • G06F7/02Comparing digital values
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/083Network architectures or network communication protocols for network security for authentication of entities using passwords
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F15/00Digital computers in general; Data processing equipment in general
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • G06F21/33User authentication using certificates
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/385Payment protocols; Details thereof using an alias or single-use codes
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/386Payment protocols; Details thereof using messaging services or messaging apps
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/40Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q30/00Commerce
    • G06Q30/06Buying, selling or leasing transactions
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/04Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0407Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the identity of one or more communicating identities is hidden
    • H04L63/0421Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/04Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0884Network architectures or network communication protocols for network security for authentication of entities by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2103Challenge-response
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2115Third party

Definitions

  • each party typically wants to authenticate the identity and/or the data relating to the other party to avoid fraud.
  • Transactions initiated and conducted from a remote communication device can be riskier than face-to-face transactions, because conventional face-to-face authentication procedures cannot be performed. For example, it is not possible to check a picture on a consumer's driver's license when conducting a remote transaction.
  • a system for authenticating the identity and profile data of an individual such as a consumer during a remote transaction would be desirable.
  • the authenticating system would desirably be easy to implement and use, would require a minimal investment of resources, and would provide a high level of interoperability between the system's participants.
  • Another problem that is associated with transactions generally is that merchants often receive payment card information during purchase transactions. If a merchant is not honest, a consumer's payment information could be compromised.
  • Other embodiments of the invention are directed to the use of alias identifiers to initiate transactions such as payment transactions so that merchants do not retain consumer payment information.
  • Embodiments of the invention solve the above problems and other problems individually and collectively.
  • Embodiments of the invention include methods and systems for authenticating the identity of an individual and validating the profile data of the individual (“a presenter”) who presents himself or herself to another party (“an acceptor”) as having a certain identity and having certain corresponding profile data.
  • a presenter who presents himself or herself to another party
  • an acceptor an acceptor
  • embodiments of the invention are not limited to remote transactions, embodiments of the invention can be advantageously used in remote transactions where a face-to-face authentication procedure is difficult to perform.
  • Embodiments of the invention also allow a trusted party to authenticate a presenter's identity and profile data. Other capabilities such as profile data provisioning and profile updating can also be performed.
  • One embodiment is directed to a method comprising: a) receiving an alias identifier (e.g., a telephone number) from a phone, wherein the alias identifier is associated with an account identifier (e.g., a payment card account number) for an account of a presenter (e.g., a consumer who possess the payment card); b) determining an associated trusted party (e.g., a bank that issued the payment card) using the alias identifier; c) sending a verification request message to the trusted party after determining the associated trusted party, where the verification request message requests information regarding whether the trusted party or the presenter participates in an authentication program; and d) receiving a verification response message, wherein the verification response message indicates whether the trusted party or the presenter participates in the authentication program.
  • an alias identifier e.g., a telephone number
  • an account identifier e.g., a payment card account number
  • a presenter e.g., a consumer
  • Another embodiment of the invention is directed to a method of using a phone, the method comprising: a) providing an alias identifier associated with an account identifier associated with an account of a presenter; b) receiving an authentication request message after providing the alias identifier; and c) sending an authentication response message after receiving the authentication request message.
  • Another embodiment of the invention is directed to a phone comprising a processor, and a computer readable medium.
  • the computer readable medium comprises: a) code for providing an alias identifier associated with an account identifier associated with an account of a presenter; b) code for receiving an authentication request message after providing the alias identifier; and c) code for sending an authentication response message after receiving the authentication request message.
  • FIG. 1 shows a block diagram of a system according to one embodiment of the invention.
  • FIG. 2 shows another block diagram of a system according to another embodiment of the invention.
  • FIG. 3 shows another block diagram of another system according to another embodiment of the invention.
  • FIG. 4 shows a flow diagram illustrating a registration process embodiment that can occur before a payment transaction.
  • FIG. 5 shows a flow diagram illustrating a registration process embodiment that can occur during a payment transaction.
  • FIG. 6 shows a flow diagram illustrating a process embodiment for initiating a payment transaction.
  • FIG. 7 shows a flow diagram illustrating an authentication process embodiment.
  • FIG. 8 shows a flow diagram illustrating a payment authorization process embodiment.
  • FIG. 9( a ) shows a block diagram illustrating components in a phone.
  • FIG. 9( b ) shows components that may be in a typical payment card.
  • FIG. 10 shows a block diagram of components in a computer apparatus.
  • Embodiments of the present invention provide for methods and systems for authenticating the identity and validating the profile data of an individual (“a presenter”) who presents himself or herself to another party (“an acceptor”) as having a certain identity and having certain corresponding profile data.
  • a consumer may be an example of a presenter.
  • the acceptor can be a service provider, a government agency, a merchant, or any other entity that my need to authenticate the identity of the presenter before proceeding with a transaction.
  • Authentication of identity can refer to verifying the identity of a presenting party who purports to be a certain individual.
  • Validating profile data can refer to validating that profile data provided by a presenter is actually associated with the presenter.
  • Other capabilities such as profile data provisioning and profile updating can also be performed in embodiments of the invention. These functions can be performed individually or in any combination with each other.
  • Embodiments of the invention can be advantageously used to conduct remote transactions where traditional face-to-face authentication procedures are difficult to perform.
  • a consumer who is calling a merchant to make a purchase using a credit card may be authenticated before the transaction proceeds.
  • An issuer of the credit card may authenticate the consumer and the consumer's profile data before the transaction is concluded.
  • An issuer can be a bank, credit union, or other institution that can open an account on behalf of a consumer so that the consumer can conduct transactions using the account.
  • this information may be subsequently sent to the merchant.
  • the merchant may then proceed with the transaction knowing that the issuer has authenticated the consumer and the consumer's data.
  • the issuer of the credit card if the issuer of the credit card authenticates the consumer and the consumer's data, the issuer may bear the risk if the transaction is later determined to be fraudulent.
  • merchants and issuers can have greater confidence that the transactions being conducted are authentic.
  • Access Control Server An access control server can provide issuers with the ability to authenticate presenters (e.g., consumers, cardholders) during a transaction such as a remote or face-to-face purchase transaction.
  • DS Directory Server—A directory server can be used to route messages containing enrolment and authentication information between a merchant plug-in (MPI) and issuers ACS'.
  • IVR Interactive Voice Response unit—An interactive voice response unit can include phone technology that allows a computer apparatus to detect voice and touch tones via a normal phone call.
  • SMS Short Message Service—A short message service can include messages that are sent to and from mobile phones.
  • Typical SMS messages can allow users to send up to 160 characters per message
  • MPI Merchant Plug-In—A merchant plug-in can be a component that operates in an acquirer domain in some embodiments. In the online environment, it performs various authentication functions on behalf of the merchant. Such functions include determining whether authentication is available for a card number, and validating a digital signature in an authentication message.
  • the merchant plug-in may be embodied by suitable hardware and/or software that are accessible to a merchant.
  • MSISDN Mobile Subscriber ISDN Number—A mobile subscriber ISDN (integrated services digital network) number can be a consumer's telephone number.
  • Unstructured Supplementary Service Data has a capability built into the GSM (global system for mobile communications) standard for support of the transmission of information over the channels of the GSM network. USSD provides session-based communication capability, thereby enabling a variety of applications.
  • WAP Wireless Application Protocol—WAP browsers can provide all of the basic services of a PC (personal computer) based web browser, and can be simplified to operate within the restrictions of a mobile phone.
  • Remote transactions can be conducted through communications methods including, but not limited to, mobile or land-line voice calls, Short Message Service (SMS) messages, etc.
  • SMS Short Message Service
  • Various data transfer protocols e.g.: TCP/IP
  • Remote transactions can be initiated from devices including, but not limited to, mobile phones, smartphones, Internet-connected computers or terminals, personal digital assistants (PDAs), etc.
  • PDAs personal digital assistants
  • Embodiments of the invention are not limited to the use of mobile phones and remote transactions. Embodiments of the invention may also include the use of various communication devices, payment channels, and authentication channels. Some examples of communication devices, payment channels, and authentication channels are provided below.
  • Browsing channel/ Payment channel Consumer authentication environment/device or mechanism channel
  • a consumer browsing a The consumer enters his The consumer can be authenticated merchant's Web site using a or her phone number on a using an inbound IVR call, via a personal computer such as a Web page on a merchant's client application running on a desktop or laptop computer.
  • Web site using his or her mobile or stationary device E.g., a consumer purchases a personal computer. operated by the consumer, or via portable music device on the any other suitable channel/process Internet. implemented by the consumer's issuer or other entity.
  • Mail order/telephone order The merchant's call As above. (MOTO). centre agent obtains the E.g., a consumer purchases a consumer's phone number pizza by calling a restaurant.
  • IVR Internet Protocol
  • automated service e.g., E.g., a consumer purchases via IVR
  • Face-to-face a merchant enters The merchant initiates the As above. payment details into a point of transaction from the sale (POS) terminal such as a merchant's mobile phone. phone).
  • POS point of transaction
  • the merchant E.g., a consumer pays a plumber may separately enter the for services rendered in a consumer's CVV-2 number face-to-face transaction. on the back of the consumer's payment card for card present status.
  • Face-to-face a consumer enters The consumer initiates As above. payment details into a mobile the transaction from phone or the like). his or her mobile phone E.g., a consumer paying a plumber The consumer finishes by for service rendered in a entering the merchant's face-to-face transaction. phone number and payment amount into the consumer's mobile phone.
  • an alias identifier is received.
  • the alias identifier is associated with an account identifier such (as an account number) for an account of the presenter (e.g., a consumer).
  • the alias identifier can be a phone number and the account identifier can be an account number such as a credit card account number.
  • an associated trusted party is determined using the alias identifier.
  • the trusted party may be an issuer that issued the credit card account number to the presenter.
  • a verification request message can then be sent to the trusted party after determining the associated trusted party.
  • the verification request message requests verification that the trusted party or the presenter participates in an authentication program. For example, it may request verification that one or both of the presenter and the trusted party participate in the authentication program.
  • a verification response message is received. The verification response message indicates whether the trusted party or the presenter participates in the authentication program.
  • an authentication request message may be sent to a communication device (e.g., a phone) operated by the consumer.
  • the consumer may then initiate the sending of an authentication response message which authenticates the consumer.
  • the consumer may proceed with the intended transaction.
  • the transaction may be a purchase transaction, a money transfer, etc.
  • FIG. 1 shows a system according to one embodiment of the invention.
  • the system in FIG. 1 can be used to conduct remote transactions, such as those that occur over the Internet or using a telephone (e.g., a mobile phone).
  • a telephone e.g., a mobile phone
  • the components of the system can be characterized as being within a presenter domain, an interoperability domain, and a trusted party domain. In other embodiments of the invention, the components in the system may be present in other types of domains or different domains.
  • a system according to an embodiment of the invention may include any number or combination of components in a single domain or any suitable combination of domains.
  • an authentication system may include the components shown in the interoperability domain and the issuer/trusted party domain.
  • FIG. 1 shows a presenter 21 in communication with a merchant 22 .
  • the merchant 22 may provide a Web page interface 23 , which may be coupled to an issuer look-up system 24 .
  • the issuer look-up system 24 may be operatively coupled to a merchant plug-in (MPI) 28 , a directory server 27 , and access control server 25 , a presenter file database 26 , as well as a challenge interface 29 .
  • MPI merchant plug-in
  • the presenter domain includes the presenter 21 and the merchant 22 .
  • the presenter 21 can be a user, individual, or consumer whose identity is being authenticated and/or whose data are being validated or provisioned.
  • the merchant 22 is an example of an acceptor and can be a party with whom the presenter 21 is attempting to transact.
  • the presenter 21 can access the authentication system via the merchant 22 or directly using a communication device such as a mobile phone or a computer apparatus.
  • the data authentication system can run an authentication program, and can include a trusted party or components operated by a trusted party.
  • the trusted party can be the entity that authenticates the presenter's identity and validates, provisions, or updates data relating to the presenter 21 .
  • the trusted party can be a bank, a credit or debit card issuing bank, or a credit or debit card service organization (e.g., Visa).
  • the bank can be the issuing bank of a credit card that is used by this presenter.
  • the presenter 21 can be a customer of the bank.
  • the trusted party can have an established relationship with the presenter 21 and therefore can have the presenter's profile data, which can be used to authenticate the presenter 21 .
  • the presenter profile data may include the presenter's social security number, birthday, account number, shipping address, preferences, etc.
  • the trusted party may own or operate an access control server 25 (ACS), which can be a computer apparatus which, among other things, controls access to the authentication program, performs the requested data services, and provides digitally signed notifications to acceptors regarding the authentication services.
  • ACS access control server 25
  • Multiple trusted parties may share an ACS or it may be associated with a single trusted party.
  • a trusted party may have multiple access control servers, each associated with a subset of the presenters.
  • a “server” is typically a powerful computer or cluster of computers.
  • a server may be a large mainframe, a minicomputer cluster, or a group of servers functioning as a unit.
  • a server may be a database server coupled to a Web server.
  • a server can behave as a single computer, which services the requests of one or more client computers or portable electronic devices.
  • the presenter file database 26 can be a database that is managed by or associated with the trusted party. It can store information relating to presenters that are successfully enrolled in the authentication program. Such information includes identifiers such as program identity numbers and account numbers, profile data, and passwords.
  • the interoperability domain also includes a directory server 27 .
  • the interoperability domain may include components used by both the trusted party and the acceptor in some embodiments.
  • the directory server 27 can determine whether a presenter can utilize the data authentication services.
  • the directory server 27 can be operated by a service organization such as Visa.
  • the respective relationship between the presenter, trusted party, and acceptor within the data authentication services system allows a wide range of possible services to be provided. Examples of such services include: identity authentication, profile validation, profile data provisioning, and profile data updating.
  • profile validation operates to validate the address of a presenter
  • profile data updating operates to update the account information of a presenter.
  • the authentication system can be used in non-payment and in payment related transactions between the presenter 21 and the merchant 22 .
  • additional operations such as authorization of debits and credits from financial accounts may also be performed.
  • Additional systems such as issuer authorization and settlement systems may also be used.
  • the presenter 21 registers with a trusted party to participate in the authentication program.
  • the trusted party can provide or assign the presenter 21 with a program identity number (or other alias identifier) and an authenticating password, token, or other authenticating element.
  • An authenticating password, token, or other authenticating element allows trusted party to authenticate the identity of the presenter 21 since only trusted party and presenter 21 know the password, token, or other authenticating element.
  • the alias identifier and/or authentication element may be related to a communication device (e.g., a phone) in some way.
  • the alias identifier may be a phone number and the authentication element may be a SIM card number for the phone.
  • a program identity number is a number that identifies presenters who are properly enrolled to use the authentication program.
  • the program identity number or alias identifiers generally, may be linked to an account identifier such as an account number associated with the presenter 21 .
  • a program identity number can include any suitable type of number.
  • An exemplary program identify number may include a random number or a number issued out of a series of numbers.
  • a program identity number can be a phone number. This is convenient in the case where the presenter 21 is interacting with the authentication system by voice or a Short Message Service (SMS) message using a telephone with that phone number.
  • SMS Short Message Service
  • the program identity number may be used in place of the presenter's account number when conducting a transaction.
  • the identity number can generally correspond to a communications device or communications service address or identifier (e.g., a phone number, an e-mail address, etc.). If a telephone number is used as an identity number, the system may use a service such as automatic number identification (ANI) service to automatically determine the presenter's phone number. Alternatively, the presenter 21 may be asked to provide his phone number using his voice or by manually inputting the phone number into his phone.
  • ANI automatic number identification
  • the identity number may include additional information, such as at least part of an account identifier (e.g., an account number) or acceptor identification number.
  • an account identifier e.g., an account number
  • acceptor identification number e.g., the additional information
  • the additional information could be the credit card issuer's Bank Identification Number (BIN), which corresponds to the first six digits of the card account number. This additional identifying information is useful when multiple accounts or acceptors might be associated with a given presenter identity number.
  • BIN Bank Identification Number
  • the presenter 21 can present the trusted party with enrollment data, authentication data, and profile data. These types of data can be used to verify the presenter's identity so that the trusted party can authenticate the presenter 21 and determine if the presenter is participating in the authentication program. Authentication data can be used to authenticate the presenter during a subsequent transaction. Examples of authentication data can include passwords, unique data in chip cards, biometric data, etc. It should be understood that various types of authentication data can be used. If such data is not already on file with the trusted party, profile data can be used to validate and/or provision profile data during a subsequent transaction.
  • the presenter enrollment process can occur in a variety of ways. For instance, the enrollment process can take place online, in a person-to-person interaction, a telephone conversation, or through the mail. In an exemplary online enrollment process, a presenter can visit an enrollment Web site to provide suitable information to obtain a program identity number (or other alias identifier) and an authenticating element. In some embodiments, enrollment can also be automatically initiated the first time an un-enrolled presenter attempts to perform a transaction.
  • the data authentication program can be used in a variety of situations where an acceptor such as the merchant 22 wants to authenticate a presenter 21 .
  • an acceptor such as the merchant 22 wants to authenticate a presenter 21 .
  • the presenter 21 can visit a government Web site (which is an example of an acceptor Web site) in order to fill out an application for a small business license.
  • Various government agencies offer online services through their Web sites.
  • a government agency wants to confirm information (e.g., a name, address, etc.) entered by the presenter 21 .
  • Embodiments of the invention can also operate in a similar manner for a payment example. For instance, the following example describes operation of the data authentication program where a customer calls a merchant 22 and places an order, and then plans to pay for the order with his credit card.
  • the presenter 21 initiates the transaction by calling the merchant 22 to place an order for a good or service.
  • the presenter 21 can interact with the merchant 22 using an SMS message, through Internet using a Web browser or e-mail, etc. Additionally, the customer and the merchant could interact face-to-face.
  • the presenter 21 After placing the order, the presenter 21 provides an identity number, such as a cellular phone number, possibly augmented with additional identification information such as a BIN (bank identification number) and/or an additional identifier, to the merchant 22 .
  • This information can be provided to the merchant 22 , instead of the presenter's 21 account number.
  • the identity number, or portions of the identity number, such as a cellular phone number, can also be automatically determined using systems such as ANI (automatic number identification) rather than being manually provided by the presenter 21 .
  • the merchant 22 After receiving the identity number, the merchant 22 enters it into the data authentication system (assuming the presenter 21 does not provide it directly to the authentication system).
  • the merchant 22 may interface with the authentication system through the use of a Web page interface 23 or through some other means. For instance, the merchant 22 may enter the identity number into the Web page interface 23 . In other embodiments the presenter 21 could enter the identity number directly into the system via the Web page interface 23 or through some other interface.
  • the issuer look-up system 24 receives the identity number and determines the issuer that is associated with the identity number. Once the relevant issuer is determined, the issuer look-up system 24 electronically sends the identity number to the issuer. The issuer maintains a presenter file database 26 which is used to convert the identity number to an account number. The account number and the identity number are then forwarded to the merchant plug-in (MPI) 28 by the issuer look-up system 24 .
  • MPI merchant plug-in
  • the merchant plug-in (MPI) 28 checks to see if the presenter 21 is participating in the data authentication program.
  • a two-phase process is used to check to see if the presenter 21 participates in the authentication program.
  • the directory server 27 (DS) and the access control server (ACS) 25 are queried.
  • the directory server 27 receives the identity number and determines if the issuer associated with the identity number is participating in the data authentication program.
  • the presenter 21 can use the data authentication program if the issuer is willing to authenticate the identity of the presenter 21 and to provide data services relating to the presenter.
  • the access control server (ACS) 25 determines if the presenter 21 is enrolled with the authentication program and if the device type (for example, a cellular phone) associated with the identity number is supported by the authentication system.
  • the device type for example, a cellular phone
  • the merchant 22 can decide to either terminate the transaction or to proceed in some other manner. If the issuer participates in the authentication program, but the presenter 21 is not enrolled, then the presenter 21 may be presented with an opportunity to enroll in the data authentication program.
  • the access control server (ACS) 25 If the issuer and the presenter 21 are participating in the data authentication program, and if the device associated with the identity number is capable of being used in program, then the access control server (ACS) 25 generates a remote authentication request message, which is sent to the merchant plug-in (MPI) 28 (e.g., if the MPI is hosted by an acquirer or other trusted party).
  • MPI merchant plug-in
  • the merchant (MPI) 28 then issues an authentication challenge to the presenter 21 via the challenge interface 29 .
  • it associates the presenter's payment card number with the identity number. If the identity number corresponds to a cellular phone, the phone number is extracted from the identity number and used to send an authentication challenge to the presenter's phone.
  • An Unstructured Supplementary Service Data (USSD) protocol may be used to send an authentication challenge to the customer's cellular phone using a challenge interface module 29 .
  • USB Unstructured Supplementary Service Data
  • the authentication challenge might be an SMS message, an automated pre-recorded phone call, or an interactive chat message.
  • the presenter 21 upon receiving the authentication challenge, responds with the predetermined authentication data. For example, if the authentication challenge is issued via an SMS message, the presenter 21 may send a response SMS message including a password. If the authentication challenge is by phone call, the presenter 21 may use a phone keypad or may use his voice to provide the password. Other types of authentication data, such as biometric data, chip card data, etc. could alternatively be used.
  • transaction data e.g., card data including a card account number and expiration data
  • the issuer's access control server (ACS) 25 validates the authentication data and reports the result of the validation to the merchant plug-in (MPI) 28 .
  • the merchant plug-in (MPI) 28 then informs the merchant 22 of the result of the verification, for example, through the Web page interface 23 . If the verification was successful, the merchant 22 can be provided with the presenter's account identifier (e.g., account number) or a portion thereof. The issuer can then be informed of the transaction details and the transaction may proceed to completion.
  • messages may be sent to the presenter's device (e.g., a phone) corresponding to the identity number and the merchant 22 , using the Web interface 23 .
  • a message may be sent to the presenter's phone using the presenter's phone number, indicating that the presenter 21 was properly authenticated and that the transaction was successfully completed. It should be understood that all messages described in FIG. 1 can be encrypted to increase the level of security.
  • Embodiments of the invention can also be implemented such that the presenter 21 and the merchant 22 are transacting in person.
  • the merchant 22 can interact with the system by providing an identity number associated with the merchant 22 , rather than the presenter 21 .
  • the merchant 22 could also provide the identity number of the presenter 21 to the system.
  • the presenter 21 can receive an authentication challenge on his own device and could respond with authentication data as described above.
  • the presenter 21 could interact with the system by providing the merchant's identity number and the payment amount for the transaction.
  • the presenter 21 could have a number of payment cards (e.g., more than two credit cards).
  • the presenter 21 could be presented with a list of primary account numbers to select from.
  • the presenter's current phone number may correspond to a default primary account number so that when the presenter 21 conducts a transaction with the phone number, the default primary account number is eventually used to conduct the transaction.
  • the list of primary account numbers may be presented to the presenter 21 and the presenter 21 chooses the account number to be used in the transaction, prior to conducting a transaction. In this case, there may be no default account number associated with the phone number.
  • FIG. 2 shows a block diagram of another system according to another embodiment of the invention. Message flows are also shown. Some of the components in FIG. 2 are similar to some of the components in FIG. 1 .
  • FIG. 2 additionally shows a mobile phone 40 in communication with a merchant's call center 42 , as well as an interface element 60 that is coupled to a Telco (telephone company) 58 interface, which is in turn coupled to a virtual cardholder redirect module 56 .
  • Telco telephone company
  • An issuer 12 and acquirer 14 are also specifically shown in FIG. 2 .
  • a presenter 21 initiates a purchase transaction with a merchant 22 using a credit card (or some other payment device).
  • a credit card or some other payment device.
  • a credit card transaction is described in detail, the transaction could alternatively be conducted with a stored value card, a debit card, a contactless phone, a smart card, etc.
  • the presenter 21 uses his mobile phone 40 to call the merchant's call center 42 (step 1 ).
  • the presenter 21 then provides (e.g., by voice, entering a phone number into phone 40 , etc.) an alias identifier such as an identity number, which may include some or all of the phone number associated with the mobile phone 40 .
  • Additional identifier information may include the BIN (bank identification number) associated with a credit card number of the credit card held by the presenter 21 , etc.
  • Another type of alias identifier may be a nickname or other alias assigned by the presenter 21 to the particular credit card being used.
  • the merchant 22 can then enter one or more of the alias identifiers into the merchant Web page interface 23 (step 2 ).
  • the merchant plug-in (MPI) 28 receives the alias identifier, and it is sent to the directory server (DS) 48 in a verification request message (VE Req(m)) (step 3 ).
  • the directory server 48 queries the access control server 25 (step 3 ) in order to determine whether authentication is available for the presenter 21 .
  • the verification request message (VE Req(m)) includes an alias identifier such as the phone number of the mobile phone 40 .
  • the access control server (ACS) 25 responds by sending a verification response (VE Res(m)) message (step 4 ) to the merchant plug-in (MPI) 28 by passing the message through the directory server 48 .
  • the merchant plug-in (MPI) 28 sends a payment authentication request message (PA Req(m)) to the access control server (ACS) 25 through the directory server (DS) 48 (step 5 ).
  • the access control server (ACS) 25 then generates a mobile authentication request message (step 6 ), which is passed to a telephone company (Telco) interface 58 via a virtual cardholder redirect module 56 .
  • the directory server (DS) 48 re-associates the presenter's credit card number with his phone number, and contacts an interface element 60 that is accessible to the presenter 21 via the Telco interface 58 (steps 6 and 7 ).
  • the interface element 60 could include a user interface on the mobile phone 40 , or it could include a user interface on a device other than the mobile phone 40 .
  • the authentication request message is then sent to the presenter 21 prompting the presenter 21 to respond with a pre-determined password or other authentication data (step 7 ).
  • step 8 the card number associated with the credit card being used is reattached to the authentication data and the supplemented response message is sent to the issuer's access control server (ACS) 25 via the Telco interface 58 .
  • step 9 after receiving the authentication response message including the password from the presenter 21 , the issuer 12 validates the password. After the issuer 12 validates the password, it sends the payment authentication response (PA Res(m)) message to the merchant plug-in (MPI) 28 (step 9 ).
  • PA Res(m) payment authentication response
  • the payer authentication response (PA Res(m)) message may include additional information (e.g., shipping address, contact information such as e-mail address, preferences, etc.) about the presenter 21 .
  • additional information e.g., shipping address, contact information such as e-mail address, preferences, etc.
  • the shipping address of the presenter 21 may be sent from the issuer's ACS 25 to the merchant plug-in (MPI) 28 .
  • the merchant 22 advantageously need not retain such additional information.
  • any suitable information that was previously collected by the issuer 12 may be sent to the merchant 22 after a transaction is initiated by the presenter 21 .
  • step 10 an employee of the merchant 22 is informed of the result of the authentication process using the Web page interface 23 .
  • step 11 a response message 11 is sent to the merchant's acquirer 14 from the merchant plug-in (MPI) 28 .
  • the acquirer 30 completes the transaction by sending messages (step 12 ) to both the presenter 21 via the Telco interface 58 and the merchant 22 via the web interface 23 .
  • a presenter 21 can interact with a merchant's website via the Web page interface 23 without going through the merchant's call centre 42 .
  • the presenter 21 can enter his identity number into a “payment page” and would subsequently receive an authentication challenge on the interface element 60 .
  • the process flow shown in FIG. 2 has a number of advantages.
  • the presenter 21 is properly authenticated in a quick and efficient manner, even though the merchant 22 never sees or possesses the actual account number of the credit card that the presenter 21 is using. This provides additional security for the presenter 21 , since some merchants or employees of merchants could fraudulently use payment account numbers of presenters.
  • FIG. 3 Another block diagram of a system according to another embodiment of the invention is shown in FIG. 3 .
  • the system includes a mobile phone 72 that is in a presenter domain.
  • a merchant plug-in interface 74 is in an acquirer domain, and is in communication with a transaction initiation component 84 in the acquirer domain.
  • a directory server 76 and a reporting server 78 are in an interoperability domain, and an access control server 80 and a registration server 82 are in an issuer domain.
  • a mobile authentication component 86 and a mobile registration component 88 can work in the acquirer domain, the interoperability domain, and the issuer domain in this embodiment.
  • the mobile phone 72 can alternatively be any suitable communication device that can send and/or receive data (e.g., a fixed phone, PC on Internet, etc.).
  • a consumer or presenter can initiate transactions based on a mobile phone number, a mobile phone number plus a check digit(s), or some other suitable alias identifier.
  • the alias identifier can be used as a substitute for a payment account number.
  • the consumer may also use his mobile phone, or mobile number/alias in order to initiate a transaction, and/or to authenticate the transaction.
  • the consumer may also use his mobile phone to register with the authentication program.
  • the transaction initiation component 84 can allow a merchant to initiate a payment process.
  • the transaction initiation component 84 may be in the form of any suitable combination of hardware and software. In some cases, it may be present in hardware operated by a merchant (e.g., in or connected to a POS terminal).
  • the transaction initiation component 84 can communicate with the merchant plug-in (MPI) 74 in the same way that a Web page communicates with a standard MPI in the Internet environment.
  • MPI merchant plug-in
  • the presenter's payment card number is advantageously not provided to the merchant when the transaction is initiated.
  • the transaction is instead initiated on the basis of the presenter's phone number/alias, or other identifier, with a mobile transaction indicator.
  • the transaction initiation component 84 can facilitate a range of transaction initiation scenarios.
  • the scenarios can be divided into those that allow the consumer's mobile number to be automatically passed to the merchant plug-in (MPI) 74 , and those that allow the consumer's mobile number to be manually input.
  • the mobile phone number may be automatically passed to the merchant plug-in (MPI) 74 using IVR, USSD, SMS, or WAP.
  • the phone number may be manually input into the system. For instance, it may be manually input into the authentication system by a call centre agent at a PC, a mobile merchant using his mobile phone as an acceptance device, etc.
  • the transaction initiation component 84 can also provide a backwards communication channel to the merchant in order to inform the presenter of the status of the transaction.
  • the merchant plug-in (MPI) 74 can perform a number of functions. For example, it can facilitate transaction processing on the basis of a mobile number, without the use of a card number. It can also facilitate the inclusion of a mobile channel/device identifier in a verification message, thereby prompting the issuer to authenticate the transaction via a mobile channel. It can also provide backwards communication to the merchant in order to allow for the on-line enrollment of new presenters with their respective issuers.
  • the directory server (DS) 76 also provides a number of functions. It can map mobile numbers and/or other alias identifiers to BINs (bank identification numbers) and can allow authentication requests to be routed to the relevant issuers. The mobile numbers and/or alias identifiers and/or BIN numbers can be updated from the access control server (ACS) 80 (and vice-versa) if the consumer wishes to change his card, phone number or alias identifier. Also, in conjunction with the transaction initiation component 84 and the merchant plug-in (MPI) 74 , the directory server (DS) 76 is able to facilitate the on-line enrollment of new presenters with relevant issuers.
  • BINs bank identification numbers
  • the reporting server 78 provides reports. It can also record mobile numbers and/or alias identifiers.
  • the access control server (ACS) 80 can perform a number of functions. For example, upon receiving an identified transaction, it can initiate the sending of an authentication request message via the mobile authentication component 86 to the mobile phone 72 . Upon receiving a positive authentication response message, the access control server (ACS) 80 can convert the presenter's mobile phone number into the presenter's registered PAN (primary account number).
  • the mobile authentication component 87 provides a bi-directional mobile channel between the presenter and the access control server (ACS) 80 for transaction authentication.
  • the bi-directional channel may include may include IVR, WAP, or a client application that is loaded onto the presenter's mobile phone 72 .
  • the registration server 82 provides a registration function and contains a mobile phone number and/or alias field for such data.
  • the mobile registration component 88 provides a bi-directional mobile channel between the presenter and the registration server 82 .
  • This channel is used to register the presenter in the authentication program, and is used to ensure that the presenter's registered mobile phone 72 is correct.
  • Example mobile channels may include IVR, WAP, or a client application that is loaded onto the presenter's mobile phone. Note that the channel may be the same as, or based on, the mobile authentication component 86 .
  • FIG. 4 shows a process flow where a presenter registers with the data authentication program prior initiating a payment transaction.
  • a presenter can register a specific account over a mobile channel.
  • a presenter registers an account associated with an issuer with the issuer's authentication program using his mobile phone 72 .
  • the mobile phone 72 may communicate with the issuer's mobile registration component 88 (step 101 ).
  • the mobile registration component 88 translates and forwards the incoming registration request to the issuer's registration server 82 (step 102 ).
  • the issuer registration server 82 checks to see if an MSISDN for the mobile phone 72 was passed through a mobile channel (step 103 ).
  • the issuer's registration server 82 requests further account data including an MSISDN from the presenter by sending the request to the mobile registration component 88 (step A- 1 ).
  • the mobile registration component 88 then adapts the request based on the mobile channel and presenter's device capabilities and sends it to the presenter's mobile phone 72 (step A- 2 ).
  • the presenter uses the mobile phone 72 , the presenter then sends back the account data and MSISDN to the mobile registration component 88 (step A- 3 ).
  • the mobile registration component 88 then translates and forwards the account data and MSISDN to the issuer's registration server 82 (step A- 4 ).
  • the issuer's registration server 82 sends a registration confirmation request to the mobile registration component 88 (step A- 5 ).
  • the mobile registration component 88 adapts the request based on a messaging mobile channel (e.g. SMS, USSD) and presenter's device capabilities and sends it to the presenter's mobile phone 72 (step A- 6 ).
  • the presenter receives the confirmation requests, accepts it and communicates it back to the mobile registration component 88 (step A- 7 ).
  • the mobile registration component 88 translates and forwards the confirmation response to the issuer's registration server 82 (step A- 8 ).
  • the issuer's registration server 82 then updates the pending presenter's registration status (step A- 9 ).
  • the mobile registration component 88 adapts the notification based on the mobile channel and presenter's device capabilities and sends it to the presenter's mobile phone 72 (step 114 ).
  • the issuer's registration server 82 then updates the access control server 80 with some of the presenter's account data (step 115 ).
  • the presenter's registration has failed.
  • the issuer's registration server 82 sends a registration notification error to the mobile registration component 88 (step B- 1 ).
  • the mobile registration component 88 adapts the error message based on the mobile channel and presenter's device capabilities and sends it to the presenter's mobile phone 72 (step B- 2 ).
  • the merchant plug-in (MPI) 74 then requests the issuer's participation status by passing the collected account data to the directory server 76 (step 208 ). After receiving this information, the directory server 76 checks the issuer's registration status (step 209 ). The directory server 76 then sends back the issuer's registration status to the merchant plug-in (MPI) 74 (step 210 ). The merchant plug-in (MPI) 74 checks the issuer's registration status (step 211 ).
  • the merchant plug-in (MPI) 74 routes a presenter registration request to the directory server 76 (step 212 ).
  • the BIN and telephone number are then passed to the issuer to properly register the presenter.
  • the directory server 76 then routes the presenter registration request to the access control server (ACS) 80 (step 213 ).
  • the access control server (ACS) 80 routes the presenter registration request to the issuer's registration server 82 (step 214 ).
  • the issuer's registration server 82 then sends a presenter registration request to the mobile registration component 58 (step 215 ).
  • the mobile registration component 88 adapts the request based on a mobile channel and presenter's device capabilities and sends it to the presenter's mobile phone 72 (step 216 ).
  • the presenter registration process in FIG. 4 can then be executed (step 217 ).
  • the payment transaction is authenticated according to the process in FIG. 7 , which is described in further detail below (step 218 ).
  • FIG. 6 shows a flow diagram for a process where a presenter initiates a payment transaction.
  • the process starts when a presenter decides to initiate a payment transaction with a merchant/acquirer over a mobile channel. It can end when the payment transaction is successfully initiated over a mobile channel (not yet authenticated). This process also has alternative paths where exceptions and errors can be taken in account.
  • the presenter initiates a payment transaction using his/her mobile phone 72 via the transaction initiation component 84 (step 301 ).
  • the transaction initiation component 84 translates and forwards the payment initiation request to the merchant plug-in (MPI) (step 302 ).
  • the merchant plug-in (MPI) verifies that the MSISDN (mobile telephone number) was passed through the mobile channel (step 303 ).
  • the merchant plug-in (MPI) 64 then sends a verify enrollment request (VE req) message to the directory server 76 (step 304 ). After receiving this message, the directory server 76 queries the access control server (ACS) 76 for presenter's enrollment status (step 305 ).
  • ACS access control server
  • the access control server (ACS) 76 returns the presenter enrollment status to the directory server (DS) 76 (step 306 ).
  • the directory server 76 returns the verify enrollment response (VE res) message to the merchant plug-in (MPI) 74 (step 307 ).
  • the presenter may start the registration process that is described in FIG. 5 (register during payment transaction).
  • FIG. 7 shows a process where a presenter has initiated a payment transaction that needs to be authenticated. The process starts when a presenter has initiated a payment transaction and is ready to be authenticated to finalize the transaction. After authentication, authorization can take place.
  • the merchant plug-in (MPI) 74 sends a payer authentication request (PA req) message to the access control server 80 (step 401 ).
  • the access control server 80 then sends an authentication request (there may be more than one account identifiers associated with the MSISDN) to the mobile authentication component 86 (step 402 ).
  • the mobile authentication component 86 adapts the request based on a mobile channel and presenter's device capabilities and sends it to the presenter's mobile phone 72 (step 403 ).
  • the presenter uses the requested authentication data (e.g., a password) and sends back a response including the authentication data to the mobile authentication component 86 (step 404 ).
  • the mobile authentication channel translates and forwards the response and passes it to the access control server (ACS) 80 for validation (step 405 ).
  • the access control server (ACS) 80 receives the authentication response, and checks the received authentication data (step 406 ).
  • the access control server (ACS) 80 then sends back the payer authentication response (PA Res) message to the merchant plug-in (MPI) 74 (step 407 ).
  • the merchant plug-in (MPI) 74 checks the authentication response message (step 408 ).
  • step 4 B- 1 the merchant plug-in (MPI) 74 then sends a payment pending notification message to the mobile authentication component 86 (step 409 ).
  • the mobile authentication component 86 adapts the notification based on a mobile channel and the presenter's device capabilities and sends it to the presenter's mobile phone 410 .
  • an authorize payment transaction process as shown in FIG. 8 (and as described in further detail below) is executed (step 411 ).
  • Alternative Flow A in FIG. 7 can occur when a presenter is not authenticated.
  • the access control server (ACS) 80 may re-issue the authentication request to the presenter via the mobile authentication component 86 or may notify the presenter that the number of authentication attempts is reached. If the number of authentication attempts have been reached, the merchant plug-in (MPI) sends an “authentication attempts limit reached” type of notification to the mobile authentication component 86 (step 4 C- 1 ). The mobile authentication component 86 adapts the notification based on a mobile channel and presenter's device capabilities and sends it to the presenter's mobile phone 72 (step 4 C- 2 ). If the number of authentication attempts have not been reached, then the process may proceed back to step 402 , and may continue until the number of authentication attempts have been reached.
  • MPI merchant plug-in
  • FIG. 8 can describe a process where an authenticated payment transaction needs to be authorized. Authorization can be immediate or differed. The process starts when a presenter has authenticated a payment transaction. The process ends when the payment authorization is successful.
  • the merchant plug-in (MPI) sends a payment authorization request to an authorization system 70 (step 501 ).
  • the authorization system 70 processes the payment authorization (step 502 ).
  • the authorization system 70 then communicates the payment authorization response to the access control server (ACS) 80 (step 503 ).
  • the access control server (ACS) 80 communicates the payment authorization response to the merchant plug-in (MPI) 74 (step 504 ).
  • the merchant plug-in (MPI) 74 then checks the payment authorization response (step 505 ).
  • the merchant plug-in (MPI) 74 sends a payment accepted notification message to the mobile authentication component 86 (step 506 ).
  • the mobile authentication component 86 adapts the notification based on a mobile channel and presenter's device capabilities, and sends it to the presenter's mobile phone 72 (step 507 ).
  • the merchant plug in (MPI) 74 sends a payment declined notification message to the mobile authentication component (steps 5 A- 1 and 5 A- 2 ).
  • the mobile authentication component adapts the notification based on a mobile channel and presenter's device capabilities and sends it to the presenter's mobile phone 72 .
  • FIGS. 9-10 show block diagrams of portable computer devices and subsystems that may be present in computer apparatuses that are used in systems according to embodiments of the invention.
  • a presenter may have a payment card such as a credit card and a phone or other communication device, to receive authentication challenges.
  • the presenter may use a phone to conduct payment transactions and can use the phone to provide both payment data and to act as an interface for an authentication challenge.
  • Cards and phones are examples of portable consumer devices and embodiments of the invention are not limited to these specific portable consumer devices.
  • Exemplary portable consumer devices may be in any suitable form.
  • suitable portable consumer devices can be hand-held and compact so that they can fit into a consumer's wallet and/or pocket (e.g., pocket-sized). They may include smart cards, ordinary credit or debit cards (with a magnetic strip and without a microprocessor), keychain devices (such as the SpeedpassTM commercially available from Exxon-Mobil Corp.), etc.
  • Other examples of portable consumer devices include cellular phones, personal digital assistants (PDAs), pagers, payment cards, security cards, access cards, smart media, transponders, and the like.
  • the portable consumer devices can also be debit devices (e.g., a debit card), credit devices (e.g., a credit card), or stored value devices (e.g., a stored value card).
  • An exemplary portable consumer device in the form of a phone 32 ′ may comprise a computer readable medium and a body as shown in FIG. 9( a ).
  • FIG. 9( a ) shows a number of components, and the portable consumer devices according to embodiments of the invention may comprise any suitable combination or subset of such components.
  • the computer readable medium 32 ( b ) may be present within the body 32 ( h ), or may be detachable from it.
  • the body 32 ( h ) may be in the form a plastic substrate, housing, or other structure.
  • the computer readable medium 32 ( b ) may be a memory that stores data and may be in any suitable form including a magnetic stripe, a memory chip, uniquely derived keys, encryption algorithms, etc.
  • the memory also preferably stores information such as financial information, transit information (e.g., as in a subway or train pass), access information (e.g., as in access badges), etc.
  • Financial information may include information such as bank account information, bank identification number (BIN), credit or debit card number information, account balance information, expiration date, consumer information such as name, date of birth, etc. Any of this information may be transmitted by the phone 32 ′.
  • Information in the memory may also be in the form of data tracks that are traditionally associated with credits cards.
  • Such tracks include Track 1 and Track 2.
  • Track 1 International Air Transport Association
  • Track 2 (“American Banking Association”) is currently most commonly used. This is the track that is read by ATMs and credit card checkers.
  • the ABA American Banking Association designed the specifications of this track and all world banks must abide by it. It contains the cardholder's account, encrypted PIN, plus other discretionary data.
  • the computer readable medium 32 ( b ), or memory, may comprise code for performing any of the above-described steps in any suitable order.
  • the computer readable medium 32 ( b ) may comprise a) code for providing an alias identifier associated with an account identifier associated with an account of a presenter; b) code for receiving an authentication request message after providing the alias identifier; and c) code for sending an authentication response message after receiving the authentication request message.
  • the phone 32 ′ may further include a contactless element 32 ( g ), which may include a semiconductor chip (or other data storage element) with an associated wireless transfer (e.g., data transmission) element, such as an antenna.
  • Contactless element 32 ( g ) is associated with (e.g., embedded within) phone 32 ′ and data or control instructions transmitted via a cellular network may be applied to contactless element 32 ( g ) by means of a contactless element interface (not shown).
  • the contactless element interface functions to permit the exchange of data and/or control instructions between the mobile device circuitry (and hence the cellular network) and an optional contactless element 32 ( g ).
  • Contactless element 32 ( g ) is capable of transferring and receiving data using a near field communications (“NFC”) capability (or near field communications medium) typically in accordance with a standardized protocol or data transfer mechanism (e.g., ISO 14443/NFC).
  • NFC near field communications
  • Near field communications capability is a short-range communications capability, such as RFID, BluetoothTM, infra-red, or other data transfer capability that can be used to exchange data between the phone 32 ′ and an interrogation device.
  • the phone 32 ′ is capable of communicating and transferring data and/or control instructions via both cellular network and near field communications capability.
  • the phone 32 ′ may also include a processor 32 ( c ) (e.g., a microprocessor) for processing the functions of the phone 32 ′ and a display 32 ( d ) to allow a consumer to see phone numbers and other information and messages.
  • the phone 32 ′ may further include input elements 32 ( e ) to allow a consumer (or presenter) to input information into the device, a speaker 32 ( f ) to allow the consumer to hear voice communication, music, etc., and a microphone 32 ( i ) to allow the consumer to transmit her voice through the phone 32 ′.
  • the phone 32 ′ may also include an antenna 32 ( a ) for wireless data transfer (e.g., data transmission).
  • the presenter or consumer may use a portable consumer device in the form of a debit, credit, or smartcard.
  • the portable consumer device in the form of a card may also optionally have a feature such as a magnetic strip.
  • Such devices can operate in either a contact or contactless mode.
  • FIG. 9( a ) shows a plastic substrate 32 ( m ).
  • a contactless element 32 ( o ) for interfacing with an access device such as a point of sale terminal may be present on or embedded within the plastic substrate 32 ( m ).
  • Consumer information 32 ( p ) such as an account number, expiration date, and consumer name may be printed or embossed on the card.
  • a magnetic stripe 32 ( n ) may also be on the plastic substrate 32 ( m ).
  • the card 32 ′′ may include both a magnetic stripe 32 ( n ) and a contactless element 32 ( o ). In other embodiments, both the magnetic stripe 32 ( n ) and the contactless element 32 ( o ) may be in the card 32 ′′. In other embodiments, either the magnetic stripe 32 ( n ) or the contactless element 32 ( o ) may be present in the card 32 ′′.
  • FIGS. 1-3 may operate using one or more computer apparatuses to facilitate the functions described herein. Any of the elements in the Figures may use any suitable number of subsystems to facilitate the functions described herein. Examples of such subsystems or components are shown in FIG. 10 .
  • the subsystems shown in FIG. 10 are interconnected via a system bus 775 . Additional subsystems such as a printer 774 , keyboard 778 , fixed disk 779 (or other memory comprising computer readable media), monitor 776 , which is coupled to display adapter 782 , and others are shown.
  • Peripherals and input/output (I/O) devices which couple to I/O controller 771 , can be connected to the computer system by any number of means known in the art, such as serial port 777 .
  • serial port 777 or external interface 781 can be used to connect the computer apparatus to a wide area network such as the Internet, a mouse input device, or a scanner.
  • the interconnection via system bus allows the central processor 773 to communicate with each subsystem and to control the execution of instructions from system memory 772 or the fixed disk 779 , as well as the exchange of information between subsystems.
  • the system memory 772 and/or the fixed disk 779 may embody a computer readable medium. Any of these elements may be present in the previously described features.
  • the previously described directory server and access control server may have one or more of these components shown in FIG. 10 .
  • a computer readable medium may comprise code for performing any of the functions described above.
  • the previously described directory server may comprise a computer readable medium comprising: a) code for providing an alias identifier associated with an account identifier associated with an account of a presenter; b) code for receiving an authentication request message after providing the alias identifier; and c) code for sending an authentication response message after receiving the authentication request message.
  • the directory server may also have a processor coupled to the computer readable medium, where the processor executes instructions embodied by computer code on the computer readable medium.

Abstract

One embodiment of the invention is directed to a method including receiving an alias identifier associated with an account associated with a presenter, determining an associated trusted party using the alias identifier, sending a verification request message to the trusted party after determining the associated trusted party, and receiving a verification response message

Description

  • This application is a continuation application of U.S. patent application Ser. No. 12/104,186, which is a non-provisional of and claims the benefit of U.S. Patent Application No. 60/912,406, filed on Apr. 17, 2007, which is herein incorporated by reference in its entirety for all purposes.
  • BACKGROUND
  • During a transaction (a payment or non-payment transaction) between two parties, each party typically wants to authenticate the identity and/or the data relating to the other party to avoid fraud.
  • Transactions initiated and conducted from a remote communication device can be riskier than face-to-face transactions, because conventional face-to-face authentication procedures cannot be performed. For example, it is not possible to check a picture on a consumer's driver's license when conducting a remote transaction.
  • In view of the foregoing, a system for authenticating the identity and profile data of an individual such as a consumer during a remote transaction would be desirable. The authenticating system would desirably be easy to implement and use, would require a minimal investment of resources, and would provide a high level of interoperability between the system's participants.
  • Another problem that is associated with transactions generally is that merchants often receive payment card information during purchase transactions. If a merchant is not honest, a consumer's payment information could be compromised. Other embodiments of the invention are directed to the use of alias identifiers to initiate transactions such as payment transactions so that merchants do not retain consumer payment information.
  • Embodiments of the invention solve the above problems and other problems individually and collectively.
  • BRIEF SUMMARY
  • Embodiments of the invention include methods and systems for authenticating the identity of an individual and validating the profile data of the individual (“a presenter”) who presents himself or herself to another party (“an acceptor”) as having a certain identity and having certain corresponding profile data. Although embodiments of the invention are not limited to remote transactions, embodiments of the invention can be advantageously used in remote transactions where a face-to-face authentication procedure is difficult to perform. Embodiments of the invention also allow a trusted party to authenticate a presenter's identity and profile data. Other capabilities such as profile data provisioning and profile updating can also be performed.
  • One embodiment is directed to a method comprising: a) receiving an alias identifier (e.g., a telephone number) from a phone, wherein the alias identifier is associated with an account identifier (e.g., a payment card account number) for an account of a presenter (e.g., a consumer who possess the payment card); b) determining an associated trusted party (e.g., a bank that issued the payment card) using the alias identifier; c) sending a verification request message to the trusted party after determining the associated trusted party, where the verification request message requests information regarding whether the trusted party or the presenter participates in an authentication program; and d) receiving a verification response message, wherein the verification response message indicates whether the trusted party or the presenter participates in the authentication program.
  • Another embodiment of the invention is directed to a method of using a phone, the method comprising: a) providing an alias identifier associated with an account identifier associated with an account of a presenter; b) receiving an authentication request message after providing the alias identifier; and c) sending an authentication response message after receiving the authentication request message.
  • Another embodiment of the invention is directed to a phone comprising a processor, and a computer readable medium. The computer readable medium comprises: a) code for providing an alias identifier associated with an account identifier associated with an account of a presenter; b) code for receiving an authentication request message after providing the alias identifier; and c) code for sending an authentication response message after receiving the authentication request message.
  • These and other embodiments of the invention are described in further detail below with reference to the Figures and Detailed Description.
  • BRIEF DESCRIPTION OF THE DRAWINGS
  • FIG. 1 shows a block diagram of a system according to one embodiment of the invention.
  • FIG. 2 shows another block diagram of a system according to another embodiment of the invention.
  • FIG. 3 shows another block diagram of another system according to another embodiment of the invention.
  • FIG. 4 shows a flow diagram illustrating a registration process embodiment that can occur before a payment transaction.
  • FIG. 5 shows a flow diagram illustrating a registration process embodiment that can occur during a payment transaction.
  • FIG. 6 shows a flow diagram illustrating a process embodiment for initiating a payment transaction.
  • FIG. 7 shows a flow diagram illustrating an authentication process embodiment.
  • FIG. 8 shows a flow diagram illustrating a payment authorization process embodiment.
  • FIG. 9( a) shows a block diagram illustrating components in a phone.
  • FIG. 9( b) shows components that may be in a typical payment card.
  • FIG. 10 shows a block diagram of components in a computer apparatus.
  • In the Figures, like numerals designate like elements and the descriptions of like elements may not be repeated in some cases.
  • DETAILED DESCRIPTION
  • Embodiments of the present invention provide for methods and systems for authenticating the identity and validating the profile data of an individual (“a presenter”) who presents himself or herself to another party (“an acceptor”) as having a certain identity and having certain corresponding profile data. A consumer may be an example of a presenter. The acceptor can be a service provider, a government agency, a merchant, or any other entity that my need to authenticate the identity of the presenter before proceeding with a transaction. Authentication of identity can refer to verifying the identity of a presenting party who purports to be a certain individual. Validating profile data can refer to validating that profile data provided by a presenter is actually associated with the presenter. Other capabilities such as profile data provisioning and profile updating can also be performed in embodiments of the invention. These functions can be performed individually or in any combination with each other. Embodiments of the invention can be advantageously used to conduct remote transactions where traditional face-to-face authentication procedures are difficult to perform.
  • Illustratively, in one embodiment of the invention, a consumer who is calling a merchant to make a purchase using a credit card may be authenticated before the transaction proceeds. An issuer of the credit card may authenticate the consumer and the consumer's profile data before the transaction is concluded. (An issuer can be a bank, credit union, or other institution that can open an account on behalf of a consumer so that the consumer can conduct transactions using the account.) After the consumer and the consumer's data are authenticated, this information may be subsequently sent to the merchant. The merchant may then proceed with the transaction knowing that the issuer has authenticated the consumer and the consumer's data. In some instances, if the issuer of the credit card authenticates the consumer and the consumer's data, the issuer may bear the risk if the transaction is later determined to be fraudulent. Hence, using embodiments of the invention, merchants and issuers can have greater confidence that the transactions being conducted are authentic.
  • Many specific embodiments of the invention are described in detail below. The following acronyms are used in some instances:
  • ACS: Access Control Server—An access control server can provide issuers with the ability to authenticate presenters (e.g., consumers, cardholders) during a transaction such as a remote or face-to-face purchase transaction.
    DS: Directory Server—A directory server can be used to route messages containing enrolment and authentication information between a merchant plug-in (MPI) and issuers ACS'.
    IVR: Interactive Voice Response unit—An interactive voice response unit can include phone technology that allows a computer apparatus to detect voice and touch tones via a normal phone call.
    SMS: Short Message Service—A short message service can include messages that are sent to and from mobile phones. Typical SMS messages can allow users to send up to 160 characters per message
    MPI: Merchant Plug-In—A merchant plug-in can be a component that operates in an acquirer domain in some embodiments. In the online environment, it performs various authentication functions on behalf of the merchant. Such functions include determining whether authentication is available for a card number, and validating a digital signature in an authentication message. The merchant plug-in may be embodied by suitable hardware and/or software that are accessible to a merchant.
    MSISDN: Mobile Subscriber ISDN Number—A mobile subscriber ISDN (integrated services digital network) number can be a consumer's telephone number.
    USSD: Unstructured Supplementary Service Data—Unstructured supplementary service data has a capability built into the GSM (global system for mobile communications) standard for support of the transmission of information over the channels of the GSM network. USSD provides session-based communication capability, thereby enabling a variety of applications.
    WAP: Wireless Application Protocol—WAP browsers can provide all of the basic services of a PC (personal computer) based web browser, and can be simplified to operate within the restrictions of a mobile phone.
  • As noted above, embodiments of the invention are especially useful for conducting remote transactions. Remote transactions can be conducted through communications methods including, but not limited to, mobile or land-line voice calls, Short Message Service (SMS) messages, etc. Various data transfer protocols (e.g.: TCP/IP) may also be used. Remote transactions can be initiated from devices including, but not limited to, mobile phones, smartphones, Internet-connected computers or terminals, personal digital assistants (PDAs), etc.
  • Embodiments of the invention are not limited to the use of mobile phones and remote transactions. Embodiments of the invention may also include the use of various communication devices, payment channels, and authentication channels. Some examples of communication devices, payment channels, and authentication channels are provided below.
  • Browsing channel/ Payment channel Consumer authentication
    environment/device or mechanism channel
    A consumer browsing a The consumer enters his The consumer can be authenticated
    merchant's Web site using a or her phone number on a using an inbound IVR call, via a
    personal computer such as a Web page on a merchant's client application running on a
    desktop or laptop computer. Web site using his or her mobile or stationary device
    E.g., a consumer purchases a personal computer. operated by the consumer, or via
    portable music device on the any other suitable channel/process
    Internet. implemented by the consumer's
    issuer or other entity.
    Mail order/telephone order The merchant's call As above.
    (MOTO). centre agent obtains the
    E.g., a consumer purchases a consumer's phone number
    pizza by calling a restaurant. and enters it into a Web
    page on the merchant's
    Web site.
    IVR, or another automated The consumer calls an As above.
    channel such as USSD or SMS. automated service (e.g.,
    E.g., a consumer purchases via IVR), chooses the
    airtime using a phone. payment amount, and enters
    his or her mobile phone
    number.
    Face-to-face (a merchant enters The merchant initiates the As above.
    payment details into a point of transaction from the
    sale (POS) terminal such as a merchant's mobile phone.
    phone). For example, the merchant
    E.g., a consumer pays a plumber may separately enter the
    for services rendered in a consumer's CVV-2 number
    face-to-face transaction. on the back of the consumer's
    payment card for card
    present status.
    Face-to-face (a consumer enters The consumer initiates As above.
    payment details into a mobile the transaction from
    phone or the like). his or her mobile phone
    E.g., a consumer paying a plumber The consumer finishes by
    for service rendered in a entering the merchant's
    face-to-face transaction. phone number and payment
    amount into the consumer's
    mobile phone.
  • Specific embodiments of the invention can now be described with reference to the Figures. In one embodiment, an alias identifier is received. The alias identifier is associated with an account identifier such (as an account number) for an account of the presenter (e.g., a consumer). The alias identifier can be a phone number and the account identifier can be an account number such as a credit card account number. After the alias identifier is received, an associated trusted party is determined using the alias identifier. The trusted party may be an issuer that issued the credit card account number to the presenter.
  • A verification request message can then be sent to the trusted party after determining the associated trusted party. The verification request message requests verification that the trusted party or the presenter participates in an authentication program. For example, it may request verification that one or both of the presenter and the trusted party participate in the authentication program. After the verification request message is sent, a verification response message is received. The verification response message indicates whether the trusted party or the presenter participates in the authentication program.
  • After receiving the verification response message, an authentication request message may be sent to a communication device (e.g., a phone) operated by the consumer. The consumer may then initiate the sending of an authentication response message which authenticates the consumer. After the consumer is authenticated, the consumer may proceed with the intended transaction. The transaction may be a purchase transaction, a money transfer, etc.
  • FIG. 1 shows a system according to one embodiment of the invention. The system in FIG. 1 can be used to conduct remote transactions, such as those that occur over the Internet or using a telephone (e.g., a mobile phone).
  • The components of the system can be characterized as being within a presenter domain, an interoperability domain, and a trusted party domain. In other embodiments of the invention, the components in the system may be present in other types of domains or different domains. A system according to an embodiment of the invention may include any number or combination of components in a single domain or any suitable combination of domains. In the embodiment in FIG. 1, an authentication system may include the components shown in the interoperability domain and the issuer/trusted party domain.
  • FIG. 1 shows a presenter 21 in communication with a merchant 22. The merchant 22 may provide a Web page interface 23, which may be coupled to an issuer look-up system 24. The issuer look-up system 24 may be operatively coupled to a merchant plug-in (MPI) 28, a directory server 27, and access control server 25, a presenter file database 26, as well as a challenge interface 29.
  • In FIG. 1, the presenter domain includes the presenter 21 and the merchant 22. The presenter 21 can be a user, individual, or consumer whose identity is being authenticated and/or whose data are being validated or provisioned. The merchant 22 is an example of an acceptor and can be a party with whom the presenter 21 is attempting to transact. The presenter 21 can access the authentication system via the merchant 22 or directly using a communication device such as a mobile phone or a computer apparatus.
  • The data authentication system can run an authentication program, and can include a trusted party or components operated by a trusted party. The trusted party can be the entity that authenticates the presenter's identity and validates, provisions, or updates data relating to the presenter 21. In some embodiments, the trusted party can be a bank, a credit or debit card issuing bank, or a credit or debit card service organization (e.g., Visa). Illustratively, the bank can be the issuing bank of a credit card that is used by this presenter. The presenter 21 can be a customer of the bank. The trusted party can have an established relationship with the presenter 21 and therefore can have the presenter's profile data, which can be used to authenticate the presenter 21. The presenter profile data may include the presenter's social security number, birthday, account number, shipping address, preferences, etc.
  • The trusted party may own or operate an access control server 25 (ACS), which can be a computer apparatus which, among other things, controls access to the authentication program, performs the requested data services, and provides digitally signed notifications to acceptors regarding the authentication services. Multiple trusted parties may share an ACS or it may be associated with a single trusted party. Alternatively, a trusted party may have multiple access control servers, each associated with a subset of the presenters.
  • As used herein, a “server” is typically a powerful computer or cluster of computers. For example, a server may be a large mainframe, a minicomputer cluster, or a group of servers functioning as a unit. In one example, a server may be a database server coupled to a Web server. Moreover, a server can behave as a single computer, which services the requests of one or more client computers or portable electronic devices.
  • The presenter file database 26 can be a database that is managed by or associated with the trusted party. It can store information relating to presenters that are successfully enrolled in the authentication program. Such information includes identifiers such as program identity numbers and account numbers, profile data, and passwords.
  • The interoperability domain also includes a directory server 27. The interoperability domain may include components used by both the trusted party and the acceptor in some embodiments. The directory server 27 can determine whether a presenter can utilize the data authentication services. In some cases, the directory server 27 can be operated by a service organization such as Visa.
  • The respective relationship between the presenter, trusted party, and acceptor within the data authentication services system allows a wide range of possible services to be provided. Examples of such services include: identity authentication, profile validation, profile data provisioning, and profile data updating. One implementation of profile validation operates to validate the address of a presenter and one implementation of profile data updating operates to update the account information of a presenter.
  • The authentication system can be used in non-payment and in payment related transactions between the presenter 21 and the merchant 22. In payment related transactions, additional operations such as authorization of debits and credits from financial accounts may also be performed. Additional systems such as issuer authorization and settlement systems may also be used.
  • A presenter enrollment process can now be described. In one embodiment, the presenter 21 registers with a trusted party to participate in the authentication program. Upon successful registration, the trusted party can provide or assign the presenter 21 with a program identity number (or other alias identifier) and an authenticating password, token, or other authenticating element. An authenticating password, token, or other authenticating element allows trusted party to authenticate the identity of the presenter 21 since only trusted party and presenter 21 know the password, token, or other authenticating element. The alias identifier and/or authentication element may be related to a communication device (e.g., a phone) in some way. For example, the alias identifier may be a phone number and the authentication element may be a SIM card number for the phone.
  • A program identity number is a number that identifies presenters who are properly enrolled to use the authentication program. The program identity number or alias identifiers generally, may be linked to an account identifier such as an account number associated with the presenter 21.
  • A program identity number can include any suitable type of number. An exemplary program identify number may include a random number or a number issued out of a series of numbers. In one embodiment, a program identity number can be a phone number. This is convenient in the case where the presenter 21 is interacting with the authentication system by voice or a Short Message Service (SMS) message using a telephone with that phone number. The program identity number may be used in place of the presenter's account number when conducting a transaction.
  • In embodiments of the invention, the identity number can generally correspond to a communications device or communications service address or identifier (e.g., a phone number, an e-mail address, etc.). If a telephone number is used as an identity number, the system may use a service such as automatic number identification (ANI) service to automatically determine the presenter's phone number. Alternatively, the presenter 21 may be asked to provide his phone number using his voice or by manually inputting the phone number into his phone.
  • In embodiments of the invention, the identity number may include additional information, such as at least part of an account identifier (e.g., an account number) or acceptor identification number. For example, if the transaction that is being conducted involves a credit card, the additional information could be the credit card issuer's Bank Identification Number (BIN), which corresponds to the first six digits of the card account number. This additional identifying information is useful when multiple accounts or acceptors might be associated with a given presenter identity number.
  • During the enrollment process, the presenter 21 can present the trusted party with enrollment data, authentication data, and profile data. These types of data can be used to verify the presenter's identity so that the trusted party can authenticate the presenter 21 and determine if the presenter is participating in the authentication program. Authentication data can be used to authenticate the presenter during a subsequent transaction. Examples of authentication data can include passwords, unique data in chip cards, biometric data, etc. It should be understood that various types of authentication data can be used. If such data is not already on file with the trusted party, profile data can be used to validate and/or provision profile data during a subsequent transaction.
  • The presenter enrollment process can occur in a variety of ways. For instance, the enrollment process can take place online, in a person-to-person interaction, a telephone conversation, or through the mail. In an exemplary online enrollment process, a presenter can visit an enrollment Web site to provide suitable information to obtain a program identity number (or other alias identifier) and an authenticating element. In some embodiments, enrollment can also be automatically initiated the first time an un-enrolled presenter attempts to perform a transaction.
  • A data authentication process associated with a data authentication program can now be described with respect to FIG. 1. The data authentication program can be used in a variety of situations where an acceptor such as the merchant 22 wants to authenticate a presenter 21. For instance, in a non-payment example, the presenter 21 can visit a government Web site (which is an example of an acceptor Web site) in order to fill out an application for a small business license. Various government agencies offer online services through their Web sites. Typically, a government agency wants to confirm information (e.g., a name, address, etc.) entered by the presenter 21. Embodiments of the invention can also operate in a similar manner for a payment example. For instance, the following example describes operation of the data authentication program where a customer calls a merchant 22 and places an order, and then plans to pay for the order with his credit card.
  • The presenter 21 initiates the transaction by calling the merchant 22 to place an order for a good or service. In other embodiments, the presenter 21 can interact with the merchant 22 using an SMS message, through Internet using a Web browser or e-mail, etc. Additionally, the customer and the merchant could interact face-to-face.
  • After placing the order, the presenter 21 provides an identity number, such as a cellular phone number, possibly augmented with additional identification information such as a BIN (bank identification number) and/or an additional identifier, to the merchant 22. This information can be provided to the merchant 22, instead of the presenter's 21 account number. The identity number, or portions of the identity number, such as a cellular phone number, can also be automatically determined using systems such as ANI (automatic number identification) rather than being manually provided by the presenter 21.
  • After receiving the identity number, the merchant 22 enters it into the data authentication system (assuming the presenter 21 does not provide it directly to the authentication system). The merchant 22 may interface with the authentication system through the use of a Web page interface 23 or through some other means. For instance, the merchant 22 may enter the identity number into the Web page interface 23. In other embodiments the presenter 21 could enter the identity number directly into the system via the Web page interface 23 or through some other interface.
  • After the identity number is received by the Web page interface 23, the issuer look-up system 24 receives the identity number and determines the issuer that is associated with the identity number. Once the relevant issuer is determined, the issuer look-up system 24 electronically sends the identity number to the issuer. The issuer maintains a presenter file database 26 which is used to convert the identity number to an account number. The account number and the identity number are then forwarded to the merchant plug-in (MPI) 28 by the issuer look-up system 24.
  • Next, the merchant plug-in (MPI) 28 checks to see if the presenter 21 is participating in the data authentication program. In one implementation, a two-phase process is used to check to see if the presenter 21 participates in the authentication program. In the two-phase process, the directory server 27 (DS) and the access control server (ACS) 25 are queried. The directory server 27 receives the identity number and determines if the issuer associated with the identity number is participating in the data authentication program. The presenter 21 can use the data authentication program if the issuer is willing to authenticate the identity of the presenter 21 and to provide data services relating to the presenter. After receiving the identity number, the access control server (ACS) 25 determines if the presenter 21 is enrolled with the authentication program and if the device type (for example, a cellular phone) associated with the identity number is supported by the authentication system.
  • If the issuer does not participate in the data authentication program, or if the presenter 21 is not enrolled in the data authentication program, the merchant 22 can decide to either terminate the transaction or to proceed in some other manner. If the issuer participates in the authentication program, but the presenter 21 is not enrolled, then the presenter 21 may be presented with an opportunity to enroll in the data authentication program.
  • If the issuer and the presenter 21 are participating in the data authentication program, and if the device associated with the identity number is capable of being used in program, then the access control server (ACS) 25 generates a remote authentication request message, which is sent to the merchant plug-in (MPI) 28 (e.g., if the MPI is hosted by an acquirer or other trusted party).
  • The merchant (MPI) 28 then issues an authentication challenge to the presenter 21 via the challenge interface 29. In order to do this, it associates the presenter's payment card number with the identity number. If the identity number corresponds to a cellular phone, the phone number is extracted from the identity number and used to send an authentication challenge to the presenter's phone. An Unstructured Supplementary Service Data (USSD) protocol may be used to send an authentication challenge to the customer's cellular phone using a challenge interface module 29. Those skilled in the art will recognize that other protocols or communication methods may be used. For example, the authentication challenge might be an SMS message, an automated pre-recorded phone call, or an interactive chat message.
  • The presenter 21, upon receiving the authentication challenge, responds with the predetermined authentication data. For example, if the authentication challenge is issued via an SMS message, the presenter 21 may send a response SMS message including a password. If the authentication challenge is by phone call, the presenter 21 may use a phone keypad or may use his voice to provide the password. Other types of authentication data, such as biometric data, chip card data, etc. could alternatively be used.
  • Once the merchant plug-in (MPI) 28 receives the presenter's authentication data, transaction data (e.g., card data including a card account number and expiration data) are attached and sent to the issuer's access control server (ACS) 25. The issuer's access control server (ACS) 25 validates the authentication data and reports the result of the validation to the merchant plug-in (MPI) 28. The merchant plug-in (MPI) 28 then informs the merchant 22 of the result of the verification, for example, through the Web page interface 23. If the verification was successful, the merchant 22 can be provided with the presenter's account identifier (e.g., account number) or a portion thereof. The issuer can then be informed of the transaction details and the transaction may proceed to completion.
  • After the transaction is completed, messages may be sent to the presenter's device (e.g., a phone) corresponding to the identity number and the merchant 22, using the Web interface 23. For example, a message may be sent to the presenter's phone using the presenter's phone number, indicating that the presenter 21 was properly authenticated and that the transaction was successfully completed. It should be understood that all messages described in FIG. 1 can be encrypted to increase the level of security.
  • Embodiments of the invention can also be implemented such that the presenter 21 and the merchant 22 are transacting in person. The merchant 22 can interact with the system by providing an identity number associated with the merchant 22, rather than the presenter 21. The merchant 22 could also provide the identity number of the presenter 21 to the system. The presenter 21 can receive an authentication challenge on his own device and could respond with authentication data as described above. In another embodiment the presenter 21 could interact with the system by providing the merchant's identity number and the payment amount for the transaction.
  • Note that in embodiments of the invention, the presenter 21 could have a number of payment cards (e.g., more than two credit cards). In one embodiment, if the presenter 21 is using a communication device such as a wireless phone, the presenter 21 could be presented with a list of primary account numbers to select from. The presenter's current phone number may correspond to a default primary account number so that when the presenter 21 conducts a transaction with the phone number, the default primary account number is eventually used to conduct the transaction. In another embodiment, the list of primary account numbers may be presented to the presenter 21 and the presenter 21 chooses the account number to be used in the transaction, prior to conducting a transaction. In this case, there may be no default account number associated with the phone number. In yet another embodiment, there can be a different alias identifier associated with each primary account number in the list. For example, the alias identifiers may simply be “card1”, “card2”, and “card3”, for three different primary account numbers.
  • FIG. 2 shows a block diagram of another system according to another embodiment of the invention. Message flows are also shown. Some of the components in FIG. 2 are similar to some of the components in FIG. 1. FIG. 2 additionally shows a mobile phone 40 in communication with a merchant's call center 42, as well as an interface element 60 that is coupled to a Telco (telephone company) 58 interface, which is in turn coupled to a virtual cardholder redirect module 56. An issuer 12 and acquirer 14 are also specifically shown in FIG. 2.
  • In this embodiment, a presenter 21 initiates a purchase transaction with a merchant 22 using a credit card (or some other payment device). Although a credit card transaction is described in detail, the transaction could alternatively be conducted with a stored value card, a debit card, a contactless phone, a smart card, etc.
  • The presenter 21 uses his mobile phone 40 to call the merchant's call center 42 (step 1). The presenter 21 then provides (e.g., by voice, entering a phone number into phone 40, etc.) an alias identifier such as an identity number, which may include some or all of the phone number associated with the mobile phone 40. Additional identifier information may include the BIN (bank identification number) associated with a credit card number of the credit card held by the presenter 21, etc. Another type of alias identifier may be a nickname or other alias assigned by the presenter 21 to the particular credit card being used. The merchant 22 can then enter one or more of the alias identifiers into the merchant Web page interface 23 (step 2).
  • The merchant plug-in (MPI) 28 receives the alias identifier, and it is sent to the directory server (DS) 48 in a verification request message (VE Req(m)) (step 3). After receiving the verification request message, the directory server 48 queries the access control server 25 (step 3) in order to determine whether authentication is available for the presenter 21. In this example, the verification request message (VE Req(m)) includes an alias identifier such as the phone number of the mobile phone 40.
  • The access control server (ACS) 25 responds by sending a verification response (VE Res(m)) message (step 4) to the merchant plug-in (MPI) 28 by passing the message through the directory server 48. After receiving the verification response message, the merchant plug-in (MPI) 28 sends a payment authentication request message (PA Req(m)) to the access control server (ACS) 25 through the directory server (DS) 48 (step 5). The access control server (ACS) 25 then generates a mobile authentication request message (step 6), which is passed to a telephone company (Telco) interface 58 via a virtual cardholder redirect module 56. In order to do so, the directory server (DS) 48 re-associates the presenter's credit card number with his phone number, and contacts an interface element 60 that is accessible to the presenter 21 via the Telco interface 58 (steps 6 and 7). The interface element 60 could include a user interface on the mobile phone 40, or it could include a user interface on a device other than the mobile phone 40.
  • The authentication request message is then sent to the presenter 21 prompting the presenter 21 to respond with a pre-determined password or other authentication data (step 7). In step 8, the card number associated with the credit card being used is reattached to the authentication data and the supplemented response message is sent to the issuer's access control server (ACS) 25 via the Telco interface 58. In step 9, after receiving the authentication response message including the password from the presenter 21, the issuer 12 validates the password. After the issuer 12 validates the password, it sends the payment authentication response (PA Res(m)) message to the merchant plug-in (MPI) 28 (step 9).
  • Note that in some embodiments, the payer authentication response (PA Res(m)) message may include additional information (e.g., shipping address, contact information such as e-mail address, preferences, etc.) about the presenter 21. For example, the shipping address of the presenter 21 may be sent from the issuer's ACS 25 to the merchant plug-in (MPI) 28. In such embodiments, the merchant 22 advantageously need not retain such additional information. Thus, any suitable information that was previously collected by the issuer 12 may be sent to the merchant 22 after a transaction is initiated by the presenter 21.
  • In step 10, an employee of the merchant 22 is informed of the result of the authentication process using the Web page interface 23. In step 11, a response message 11 is sent to the merchant's acquirer 14 from the merchant plug-in (MPI) 28. The acquirer 30 completes the transaction by sending messages (step 12) to both the presenter 21 via the Telco interface 58 and the merchant 22 via the web interface 23.
  • In an alternate embodiment, a presenter 21 can interact with a merchant's website via the Web page interface 23 without going through the merchant's call centre 42. The presenter 21 can enter his identity number into a “payment page” and would subsequently receive an authentication challenge on the interface element 60.
  • The process flow shown in FIG. 2 has a number of advantages. For example, in FIG. 2, the presenter 21 is properly authenticated in a quick and efficient manner, even though the merchant 22 never sees or possesses the actual account number of the credit card that the presenter 21 is using. This provides additional security for the presenter 21, since some merchants or employees of merchants could fraudulently use payment account numbers of presenters.
  • Another block diagram of a system according to another embodiment of the invention is shown in FIG. 3. The system includes a mobile phone 72 that is in a presenter domain. A merchant plug-in interface 74 is in an acquirer domain, and is in communication with a transaction initiation component 84 in the acquirer domain. A directory server 76 and a reporting server 78 are in an interoperability domain, and an access control server 80 and a registration server 82 are in an issuer domain. A mobile authentication component 86 and a mobile registration component 88 can work in the acquirer domain, the interoperability domain, and the issuer domain in this embodiment.
  • The mobile phone 72 can alternatively be any suitable communication device that can send and/or receive data (e.g., a fixed phone, PC on Internet, etc.). As noted above, a consumer (or presenter) can initiate transactions based on a mobile phone number, a mobile phone number plus a check digit(s), or some other suitable alias identifier. The alias identifier can be used as a substitute for a payment account number. The consumer may also use his mobile phone, or mobile number/alias in order to initiate a transaction, and/or to authenticate the transaction. The consumer may also use his mobile phone to register with the authentication program.
  • Upon the presenter's request, the transaction initiation component 84 can allow a merchant to initiate a payment process. The transaction initiation component 84 may be in the form of any suitable combination of hardware and software. In some cases, it may be present in hardware operated by a merchant (e.g., in or connected to a POS terminal). The transaction initiation component 84 can communicate with the merchant plug-in (MPI) 74 in the same way that a Web page communicates with a standard MPI in the Internet environment.
  • As in prior embodiments, the presenter's payment card number is advantageously not provided to the merchant when the transaction is initiated. The transaction is instead initiated on the basis of the presenter's phone number/alias, or other identifier, with a mobile transaction indicator.
  • The transaction initiation component 84 can facilitate a range of transaction initiation scenarios. The scenarios can be divided into those that allow the consumer's mobile number to be automatically passed to the merchant plug-in (MPI) 74, and those that allow the consumer's mobile number to be manually input. As noted above, the mobile phone number may be automatically passed to the merchant plug-in (MPI) 74 using IVR, USSD, SMS, or WAP. Alternatively, the phone number may be manually input into the system. For instance, it may be manually input into the authentication system by a call centre agent at a PC, a mobile merchant using his mobile phone as an acceptance device, etc. The transaction initiation component 84 can also provide a backwards communication channel to the merchant in order to inform the presenter of the status of the transaction.
  • The merchant plug-in (MPI) 74 can perform a number of functions. For example, it can facilitate transaction processing on the basis of a mobile number, without the use of a card number. It can also facilitate the inclusion of a mobile channel/device identifier in a verification message, thereby prompting the issuer to authenticate the transaction via a mobile channel. It can also provide backwards communication to the merchant in order to allow for the on-line enrollment of new presenters with their respective issuers.
  • The directory server (DS) 76 also provides a number of functions. It can map mobile numbers and/or other alias identifiers to BINs (bank identification numbers) and can allow authentication requests to be routed to the relevant issuers. The mobile numbers and/or alias identifiers and/or BIN numbers can be updated from the access control server (ACS) 80 (and vice-versa) if the consumer wishes to change his card, phone number or alias identifier. Also, in conjunction with the transaction initiation component 84 and the merchant plug-in (MPI) 74, the directory server (DS) 76 is able to facilitate the on-line enrollment of new presenters with relevant issuers.
  • The reporting server 78 provides reports. It can also record mobile numbers and/or alias identifiers.
  • The access control server (ACS) 80 can perform a number of functions. For example, upon receiving an identified transaction, it can initiate the sending of an authentication request message via the mobile authentication component 86 to the mobile phone 72. Upon receiving a positive authentication response message, the access control server (ACS) 80 can convert the presenter's mobile phone number into the presenter's registered PAN (primary account number).
  • The mobile authentication component 87 provides a bi-directional mobile channel between the presenter and the access control server (ACS) 80 for transaction authentication. The bi-directional channel may include may include IVR, WAP, or a client application that is loaded onto the presenter's mobile phone 72.
  • The registration server 82 provides a registration function and contains a mobile phone number and/or alias field for such data.
  • The mobile registration component 88 provides a bi-directional mobile channel between the presenter and the registration server 82. This channel is used to register the presenter in the authentication program, and is used to ensure that the presenter's registered mobile phone 72 is correct. Example mobile channels may include IVR, WAP, or a client application that is loaded onto the presenter's mobile phone. Note that the channel may be the same as, or based on, the mobile authentication component 86.
  • FIG. 4 shows a process flow where a presenter registers with the data authentication program prior initiating a payment transaction. In this example, a presenter can register a specific account over a mobile channel.
  • With reference to FIG. 4, a presenter registers an account associated with an issuer with the issuer's authentication program using his mobile phone 72. To do this, the mobile phone 72 may communicate with the issuer's mobile registration component 88 (step 101). The mobile registration component 88 translates and forwards the incoming registration request to the issuer's registration server 82 (step 102). The issuer registration server 82 checks to see if an MSISDN for the mobile phone 72 was passed through a mobile channel (step 103).
  • If the MSISDN for the mobile phone 72 is provided via a mobile channel, then the issuer's registration server 82 requests further account data from the presenter and sends account data request to the mobile registration component 88 (step 104). The mobile registration component 88 adapts the request based on the mobile channel and presenter's device capabilities and sends it to the presenter's mobile phone 72 (step 105). Using the mobile phone 72, the presenter then communicates back the account data to the mobile registration component 88 (step 106). The mobile registration component 88 then translates and forwards the account data to the issuer's registration server 82 (step 107).
  • As shown in Alternative Flow A, if the MSISDN is not provided by the mobile channel, the issuer's registration server 82 requests further account data including an MSISDN from the presenter by sending the request to the mobile registration component 88 (step A-1). The mobile registration component 88 then adapts the request based on the mobile channel and presenter's device capabilities and sends it to the presenter's mobile phone 72 (step A-2). Using the mobile phone 72, the presenter then sends back the account data and MSISDN to the mobile registration component 88 (step A-3). The mobile registration component 88 then translates and forwards the account data and MSISDN to the issuer's registration server 82 (step A-4). After this information is received, the issuer's registration server 82 sends a registration confirmation request to the mobile registration component 88 (step A-5). The mobile registration component 88 adapts the request based on a messaging mobile channel (e.g. SMS, USSD) and presenter's device capabilities and sends it to the presenter's mobile phone 72 (step A-6). The presenter receives the confirmation requests, accepts it and communicates it back to the mobile registration component 88 (step A-7). The mobile registration component 88 translates and forwards the confirmation response to the issuer's registration server 82 (step A-8). The issuer's registration server 82 then updates the pending presenter's registration status (step A-9).
  • At some point, the registration server 82 checks the validity of the registration status of the presenter (step 108).
  • If the presenter's registration is acceptable, then the issuer's registration server 82 can send a password creation request to the mobile registration component 88 (step 109). The mobile registration component 88 adapts the request based on the mobile channel and presenter's device capabilities and sends it to the presenter's mobile phone 72 (step 110). Using the mobile phone 72, the presenter provides a password and communicates it back to the mobile registration component 88 (step 111). The mobile registration component 88 translates and forwards the password to the issuer's registration server 82 (step 112). The issuer's registration server 82 then sends a registration notification to the mobile registration component 88 (step 113). The mobile registration component 88 adapts the notification based on the mobile channel and presenter's device capabilities and sends it to the presenter's mobile phone 72 (step 114). The issuer's registration server 82 then updates the access control server 80 with some of the presenter's account data (step 115).
  • In Alternative Flow B, the presenter's registration has failed. The issuer's registration server 82 sends a registration notification error to the mobile registration component 88 (step B-1). The mobile registration component 88 adapts the error message based on the mobile channel and presenter's device capabilities and sends it to the presenter's mobile phone 72 (step B-2).
  • Alternative Flow C relates to an issuer generated password. In this process flow, the issuer's registration server 82 generates a unique password (step C-1) (e.g., without input by the presenter). The issuer's registration server 82 sends the generated password to the mobile registration component 88 (step C-2). The mobile registration component 88 adapts the message based on the mobile channel and presenter's device capabilities and sends it to the presenter's mobile phone 72 (step C-3).
  • FIG. 5 shows a flow diagram for registration during a payment transaction over a mobile channel. With reference to FIG. 5, the presenter initiates a payment transaction via the transaction initiation component 84 (step 201). The transaction initiation component 84 translates and forwards the transaction details to the merchant plug-in (MPI) 74 (step 202). Then, the initiate payment transaction process, which is shown in FIG. 6 and is described in further detail below, is executed. The merchant plug-in (MPI) 74 checks the returned presenter's enrollment status. If the presenter is registered, then the flow continues at step 218 with an execution of the payment authentication process, which is shown in FIG. 7, and is described in further detail below.
  • If the presenter is not registered, the merchant plug-in (MPI) 74 sends a request for BIN (bank identification number) information to the transaction initiation component 84 (step 204). The transaction initiation component 84 adapts the request based on a mobile channel and presenter's device capabilities and sends it to the presenter's mobile phone 72 (step 205). Using the mobile phone 72, the presenter provides the requested BIN information and communicates it back to the transaction initiation component 84 (step 206). The transaction initiation component 84 translates and forwards the requested account data to the merchant plug-in (MPI) 74 (step 207). The merchant plug-in (MPI) 74 then requests the issuer's participation status by passing the collected account data to the directory server 76 (step 208). After receiving this information, the directory server 76 checks the issuer's registration status (step 209). The directory server 76 then sends back the issuer's registration status to the merchant plug-in (MPI) 74 (step 210). The merchant plug-in (MPI) 74 checks the issuer's registration status (step 211).
  • If the issuer participates in the authentication program, the merchant plug-in (MPI) 74 routes a presenter registration request to the directory server 76 (step 212). The BIN and telephone number are then passed to the issuer to properly register the presenter. The directory server 76 then routes the presenter registration request to the access control server (ACS) 80 (step 213). The access control server (ACS) 80 routes the presenter registration request to the issuer's registration server 82 (step 214). The issuer's registration server 82 then sends a presenter registration request to the mobile registration component 58 (step 215). The mobile registration component 88 adapts the request based on a mobile channel and presenter's device capabilities and sends it to the presenter's mobile phone 72 (step 216). The presenter registration process in FIG. 4 can then be executed (step 217). Upon successful presenter registration, the payment transaction is authenticated according to the process in FIG. 7, which is described in further detail below (step 218).
  • In the case where the issuer is not participating in the authentication program, the merchant plug-in (MPI) 74 sends an “issuer not registered” type of error message to the transaction initiation component 84. The transaction initiation component 84 adapts the request based on the mobile channel and presenter's device capabilities and sends it to the presenter's mobile phone 72 (step 2A-1). In this case, authentication is not performed and the payment transaction can be discarded.
  • FIG. 6 shows a flow diagram for a process where a presenter initiates a payment transaction. The process starts when a presenter decides to initiate a payment transaction with a merchant/acquirer over a mobile channel. It can end when the payment transaction is successfully initiated over a mobile channel (not yet authenticated). This process also has alternative paths where exceptions and errors can be taken in account.
  • With reference to FIG. 6, the presenter initiates a payment transaction using his/her mobile phone 72 via the transaction initiation component 84 (step 301). The transaction initiation component 84 translates and forwards the payment initiation request to the merchant plug-in (MPI) (step 302). The merchant plug-in (MPI) verifies that the MSISDN (mobile telephone number) was passed through the mobile channel (step 303). The merchant plug-in (MPI) 64 then sends a verify enrollment request (VE req) message to the directory server 76 (step 304). After receiving this message, the directory server 76 queries the access control server (ACS) 76 for presenter's enrollment status (step 305). The access control server (ACS) 76 returns the presenter enrollment status to the directory server (DS) 76 (step 306). The directory server 76 returns the verify enrollment response (VE res) message to the merchant plug-in (MPI) 74 (step 307). After receiving the enrollment response status, the presenter may start the registration process that is described in FIG. 5 (register during payment transaction).
  • If the MSISDN is not provided by the mobile channel, then the merchant plug-in (MPI) 74 requests the presenter's MSISDN through the transaction initiation component 84 (step 3A-1). The transaction initiation component 84 adapts the request based on the mobile channel and the presenter's device capabilities and sends it to the presenter's mobile phone 72 (step 3A-2). The presenter then sends back the MSISDN to the transaction initiation component 84 (step 3A-3). The transaction initiation component 84 translates and forwards the MSISDN to the merchant plug-in (MPI) 74 (step 3A-4).
  • FIG. 7 shows a process where a presenter has initiated a payment transaction that needs to be authenticated. The process starts when a presenter has initiated a payment transaction and is ready to be authenticated to finalize the transaction. After authentication, authorization can take place.
  • Referring to FIG. 7, the merchant plug-in (MPI) 74 sends a payer authentication request (PA req) message to the access control server 80 (step 401). The access control server 80 then sends an authentication request (there may be more than one account identifiers associated with the MSISDN) to the mobile authentication component 86 (step 402). After receiving this message, the mobile authentication component 86 adapts the request based on a mobile channel and presenter's device capabilities and sends it to the presenter's mobile phone 72 (step 403).
  • Using the mobile phone 72, the presenter provides the requested authentication data (e.g., a password) and sends back a response including the authentication data to the mobile authentication component 86 (step 404). The mobile authentication channel translates and forwards the response and passes it to the access control server (ACS) 80 for validation (step 405). The access control server (ACS) 80 then receives the authentication response, and checks the received authentication data (step 406). The access control server (ACS) 80 then sends back the payer authentication response (PA Res) message to the merchant plug-in (MPI) 74 (step 407). The merchant plug-in (MPI) 74 then checks the authentication response message (step 408).
  • If the consumer is authenticated, then a determination is made as to whether immediate authorization is appropriate. If immediate authorization is appropriate, then the process may proceed to the authorization process shown in FIG. 8, and described in further detail below (step 4B-1). If immediate authorization is not appropriate, the merchant plug-in (MPI) 74 then sends a payment pending notification message to the mobile authentication component 86 (step 409). The mobile authentication component 86 adapts the notification based on a mobile channel and the presenter's device capabilities and sends it to the presenter's mobile phone 410. Then, an authorize payment transaction process as shown in FIG. 8 (and as described in further detail below) is executed (step 411).
  • Alternative Flow A in FIG. 7 can occur when a presenter is not authenticated. Depending on the issuers' authentication rules, the access control server (ACS) 80 may re-issue the authentication request to the presenter via the mobile authentication component 86 or may notify the presenter that the number of authentication attempts is reached. If the number of authentication attempts have been reached, the merchant plug-in (MPI) sends an “authentication attempts limit reached” type of notification to the mobile authentication component 86 (step 4C-1). The mobile authentication component 86 adapts the notification based on a mobile channel and presenter's device capabilities and sends it to the presenter's mobile phone 72 (step 4C-2). If the number of authentication attempts have not been reached, then the process may proceed back to step 402, and may continue until the number of authentication attempts have been reached.
  • FIG. 8 can describe a process where an authenticated payment transaction needs to be authorized. Authorization can be immediate or differed. The process starts when a presenter has authenticated a payment transaction. The process ends when the payment authorization is successful.
  • Referring to FIG. 8, the merchant plug-in (MPI) sends a payment authorization request to an authorization system 70 (step 501). The authorization system 70 processes the payment authorization (step 502). The authorization system 70 then communicates the payment authorization response to the access control server (ACS) 80 (step 503). The access control server (ACS) 80 communicates the payment authorization response to the merchant plug-in (MPI) 74 (step 504). The merchant plug-in (MPI) 74 then checks the payment authorization response (step 505).
  • If the payment transaction is authorized, the merchant plug-in (MPI) 74 sends a payment accepted notification message to the mobile authentication component 86 (step 506). The mobile authentication component 86 adapts the notification based on a mobile channel and presenter's device capabilities, and sends it to the presenter's mobile phone 72 (step 507).
  • If a payment transaction is declined and not authorized, then the merchant plug in (MPI) 74 sends a payment declined notification message to the mobile authentication component (steps 5A-1 and 5A-2). The mobile authentication component adapts the notification based on a mobile channel and presenter's device capabilities and sends it to the presenter's mobile phone 72.
  • III. Portable Consumer Devices and Computer Apparatuses
  • FIGS. 9-10 show block diagrams of portable computer devices and subsystems that may be present in computer apparatuses that are used in systems according to embodiments of the invention. In some embodiments described above, a presenter may have a payment card such as a credit card and a phone or other communication device, to receive authentication challenges. In other embodiments, the presenter may use a phone to conduct payment transactions and can use the phone to provide both payment data and to act as an interface for an authentication challenge. Cards and phones are examples of portable consumer devices and embodiments of the invention are not limited to these specific portable consumer devices.
  • Exemplary portable consumer devices may be in any suitable form. For example, suitable portable consumer devices can be hand-held and compact so that they can fit into a consumer's wallet and/or pocket (e.g., pocket-sized). They may include smart cards, ordinary credit or debit cards (with a magnetic strip and without a microprocessor), keychain devices (such as the Speedpass™ commercially available from Exxon-Mobil Corp.), etc. Other examples of portable consumer devices include cellular phones, personal digital assistants (PDAs), pagers, payment cards, security cards, access cards, smart media, transponders, and the like. The portable consumer devices can also be debit devices (e.g., a debit card), credit devices (e.g., a credit card), or stored value devices (e.g., a stored value card).
  • An exemplary portable consumer device in the form of a phone 32′ may comprise a computer readable medium and a body as shown in FIG. 9( a). (FIG. 9( a) shows a number of components, and the portable consumer devices according to embodiments of the invention may comprise any suitable combination or subset of such components.) The computer readable medium 32(b) may be present within the body 32(h), or may be detachable from it. The body 32(h) may be in the form a plastic substrate, housing, or other structure. The computer readable medium 32(b) may be a memory that stores data and may be in any suitable form including a magnetic stripe, a memory chip, uniquely derived keys, encryption algorithms, etc. The memory also preferably stores information such as financial information, transit information (e.g., as in a subway or train pass), access information (e.g., as in access badges), etc. Financial information may include information such as bank account information, bank identification number (BIN), credit or debit card number information, account balance information, expiration date, consumer information such as name, date of birth, etc. Any of this information may be transmitted by the phone 32′.
  • Information in the memory may also be in the form of data tracks that are traditionally associated with credits cards. Such tracks include Track 1 and Track 2. Track 1 (“International Air Transport Association”) stores more information than Track 2, and contains the cardholder's name as well as account number and other discretionary data. This track is sometimes used by the airlines when securing reservations with a credit card. Track 2 (“American Banking Association”) is currently most commonly used. This is the track that is read by ATMs and credit card checkers. The ABA (American Banking Association) designed the specifications of this track and all world banks must abide by it. It contains the cardholder's account, encrypted PIN, plus other discretionary data.
  • The computer readable medium 32(b), or memory, may comprise code for performing any of the above-described steps in any suitable order. For example, the computer readable medium 32(b) may comprise a) code for providing an alias identifier associated with an account identifier associated with an account of a presenter; b) code for receiving an authentication request message after providing the alias identifier; and c) code for sending an authentication response message after receiving the authentication request message.
  • The phone 32′ may further include a contactless element 32(g), which may include a semiconductor chip (or other data storage element) with an associated wireless transfer (e.g., data transmission) element, such as an antenna. Contactless element 32(g) is associated with (e.g., embedded within) phone 32′ and data or control instructions transmitted via a cellular network may be applied to contactless element 32(g) by means of a contactless element interface (not shown). The contactless element interface functions to permit the exchange of data and/or control instructions between the mobile device circuitry (and hence the cellular network) and an optional contactless element 32(g).
  • Contactless element 32(g) is capable of transferring and receiving data using a near field communications (“NFC”) capability (or near field communications medium) typically in accordance with a standardized protocol or data transfer mechanism (e.g., ISO 14443/NFC). Near field communications capability is a short-range communications capability, such as RFID, Bluetooth™, infra-red, or other data transfer capability that can be used to exchange data between the phone 32′ and an interrogation device. Thus, the phone 32′ is capable of communicating and transferring data and/or control instructions via both cellular network and near field communications capability.
  • The phone 32′ may also include a processor 32(c) (e.g., a microprocessor) for processing the functions of the phone 32′ and a display 32(d) to allow a consumer to see phone numbers and other information and messages. The phone 32′ may further include input elements 32(e) to allow a consumer (or presenter) to input information into the device, a speaker 32(f) to allow the consumer to hear voice communication, music, etc., and a microphone 32(i) to allow the consumer to transmit her voice through the phone 32′. The phone 32′ may also include an antenna 32(a) for wireless data transfer (e.g., data transmission).
  • As noted above, in some embodiments, the presenter or consumer may use a portable consumer device in the form of a debit, credit, or smartcard. The portable consumer device in the form of a card may also optionally have a feature such as a magnetic strip. Such devices can operate in either a contact or contactless mode.
  • An example of a portable consumer device in the form of a card 32″ is shown in FIG. 9( a). FIG. 9( a) shows a plastic substrate 32(m). A contactless element 32(o) for interfacing with an access device such as a point of sale terminal may be present on or embedded within the plastic substrate 32(m). Consumer information 32(p) such as an account number, expiration date, and consumer name may be printed or embossed on the card. Also, a magnetic stripe 32(n) may also be on the plastic substrate 32(m).
  • As shown in FIG. 9( b), the card 32″ may include both a magnetic stripe 32(n) and a contactless element 32(o). In other embodiments, both the magnetic stripe 32(n) and the contactless element 32(o) may be in the card 32″. In other embodiments, either the magnetic stripe 32(n) or the contactless element 32(o) may be present in the card 32″.
  • The various participants and elements in the previously described Figures (e.g., FIGS. 1-3) may operate using one or more computer apparatuses to facilitate the functions described herein. Any of the elements in the Figures may use any suitable number of subsystems to facilitate the functions described herein. Examples of such subsystems or components are shown in FIG. 10. The subsystems shown in FIG. 10 are interconnected via a system bus 775. Additional subsystems such as a printer 774, keyboard 778, fixed disk 779 (or other memory comprising computer readable media), monitor 776, which is coupled to display adapter 782, and others are shown. Peripherals and input/output (I/O) devices, which couple to I/O controller 771, can be connected to the computer system by any number of means known in the art, such as serial port 777. For example, serial port 777 or external interface 781 can be used to connect the computer apparatus to a wide area network such as the Internet, a mouse input device, or a scanner. The interconnection via system bus allows the central processor 773 to communicate with each subsystem and to control the execution of instructions from system memory 772 or the fixed disk 779, as well as the exchange of information between subsystems. The system memory 772 and/or the fixed disk 779 may embody a computer readable medium. Any of these elements may be present in the previously described features. For example, the previously described directory server and access control server may have one or more of these components shown in FIG. 10.
  • A computer readable medium according to an embodiment of the invention may comprise code for performing any of the functions described above. For example, the previously described directory server may comprise a computer readable medium comprising: a) code for providing an alias identifier associated with an account identifier associated with an account of a presenter; b) code for receiving an authentication request message after providing the alias identifier; and c) code for sending an authentication response message after receiving the authentication request message. The directory server may also have a processor coupled to the computer readable medium, where the processor executes instructions embodied by computer code on the computer readable medium.
  • The terms and expressions which have been employed herein are used as terms of description and not of limitation, and there is no intention in the use of such terms and expressions of excluding equivalents of the features shown and described, or portions thereof, it being recognized that various modifications are possible within the scope of the invention claimed. Moreover, any one or more features of any embodiment of the invention may be combined with any one or more other features of any other embodiment of the invention, without departing from the scope of the invention.
  • Also, it should be understood that the present invention as described above can be implemented in the form of control logic using computer software in a modular or integrated manner. Based on the disclosure and teachings provided herein, a person of ordinary skill in the art will know and appreciate other ways and/or methods to implement the present invention using hardware and a combination of hardware and software.
  • A recitation of “a”, “an” or “the” is intended to mean “one or more” unless specifically indicated to the contrary.
  • All patents, patent applications, publications, and descriptions mentioned above are herein incorporated by reference in their entirety for all purposes. None is admitted to be prior art.

Claims (20)

1. A method comprising:
a) receiving an alias identifier from a phone, wherein the alias identifier is associated with an account identifier for an account of a presenter;
b) determining an associated trusted party using the alias identifier;
c) sending a verification request message to the trusted party after determining the associated trusted party, where the verification request message requests information regarding whether the trusted party or the presenter participates in an authentication program; and
d) receiving a verification response message, wherein the verification response message indicates whether the trusted party or the presenter participates in the authentication program.
2. The method of claim 1 wherein the alias identifier is a phone number.
3. The method of claim 1 wherein the trusted party is a financial institution that maintains the account.
4. The method as recited in claim 1 further comprising:
initiating the sending of an authentication request message to the presenter.
5. The method of claim 1 further comprising:
initiating the sending of an authentication request message to the presenter, wherein an access control server subsequently sends the authentication request message to the presenter.
6. The method of claim 1 wherein prior to receiving the alias identifier, the presenter sends the alias identifier using the mobile phone.
7. The method of claim 1 wherein a)-d) are performed by a directory server.
8. The method of claim 7 wherein the trusted party is an issuer that issued the account identifier.
9. The method of claim 1 wherein the phone comprises a contactless element.
10. The method of claim 2 wherein the phone comprises a contactless element.
11. A method conducted using a phone, the method comprising:
a) providing an alias identifier associated with an account identifier associated with an account of a presenter;
b) receiving an authentication request message after providing the alias identifier; and
c) sending an authentication response message after receiving the authentication request message.
12. The method of claim 11 wherein the alias identifier is a phone number.
13. The method of claim 11 wherein the alias identifier is provided using the presenter's voice.
14. The method of claim 13 wherein the phone comprises a contactless element.
15. The method of claim 14 wherein the authentication response message comprises a password or a pin number.
16. The method of claim 11 wherein the alias identifier is provided to a merchant in a face-to-face transaction.
17. The method of claim 11 wherein the alias identifier is provided to a merchant using a communication device that is remotely located with respect to the merchant.
18. A phone comprising:
a processor;
an antenna coupled to the processor;
a microphone coupled to the processor; and
a computer readable medium coupled to the processor, the computer readable medium comprising code for providing an alias identifier associated with an account identifier associated with an account of a presenter, code for receiving an authentication request message after providing the alias identifier, and c) code for sending an authentication response message after receiving the authentication request message.
19. The phone of claim 18, further comprising a contactless element coupled to the processor.
20. The phone of claim 18, further comprising a display coupled to the processor.
US12/104,593 2007-04-17 2008-04-17 Method and system for authenticating a party to a transaction Abandoned US20090325542A1 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US12/104,593 US20090325542A1 (en) 2007-04-17 2008-04-17 Method and system for authenticating a party to a transaction

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US91240607P 2007-04-17 2007-04-17
US12/104,186 US8156543B2 (en) 2007-04-17 2008-04-16 Method and system for authenticating a party to a transaction
US12/104,593 US20090325542A1 (en) 2007-04-17 2008-04-17 Method and system for authenticating a party to a transaction

Related Parent Applications (1)

Application Number Title Priority Date Filing Date
US12/104,186 Continuation US8156543B2 (en) 2007-04-17 2008-04-16 Method and system for authenticating a party to a transaction

Publications (1)

Publication Number Publication Date
US20090325542A1 true US20090325542A1 (en) 2009-12-31

Family

ID=39875877

Family Applications (5)

Application Number Title Priority Date Filing Date
US12/104,186 Active 2030-04-07 US8156543B2 (en) 2007-04-17 2008-04-16 Method and system for authenticating a party to a transaction
US12/104,593 Abandoned US20090325542A1 (en) 2007-04-17 2008-04-17 Method and system for authenticating a party to a transaction
US12/715,148 Active 2028-10-05 US8631231B2 (en) 2007-04-17 2010-03-01 Mobile device initiated transaction
US13/908,950 Active US8918637B2 (en) 2007-04-17 2013-06-03 Remote authentication system
US14/522,283 Active US9160741B2 (en) 2007-04-17 2014-10-23 Remote authentication system

Family Applications Before (1)

Application Number Title Priority Date Filing Date
US12/104,186 Active 2030-04-07 US8156543B2 (en) 2007-04-17 2008-04-16 Method and system for authenticating a party to a transaction

Family Applications After (3)

Application Number Title Priority Date Filing Date
US12/715,148 Active 2028-10-05 US8631231B2 (en) 2007-04-17 2010-03-01 Mobile device initiated transaction
US13/908,950 Active US8918637B2 (en) 2007-04-17 2013-06-03 Remote authentication system
US14/522,283 Active US9160741B2 (en) 2007-04-17 2014-10-23 Remote authentication system

Country Status (9)

Country Link
US (5) US8156543B2 (en)
EP (2) EP2149084B1 (en)
JP (4) JP5520813B2 (en)
KR (1) KR101540417B1 (en)
CN (1) CN101711383B (en)
AU (1) AU2008243004B2 (en)
BR (1) BRPI0810369B8 (en)
CA (1) CA2684614C (en)
WO (1) WO2008131021A1 (en)

Cited By (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20090037982A1 (en) * 2007-04-17 2009-02-05 David Wentker Method and system for authenticating a party to a transaction
US20100121767A1 (en) * 2008-11-08 2010-05-13 Coulter Todd R Intermediary service and method for processing financial transaction data with mobile device confirmation
US20100243728A1 (en) * 2009-03-27 2010-09-30 Mark Wiesman Methods and systems for performing a financial transaction
US20100312657A1 (en) * 2008-11-08 2010-12-09 Coulter Todd R System and method for using a rules module to process financial transaction data
US20100312636A1 (en) * 2008-11-08 2010-12-09 Coulter Todd R System and method for applying stored value to a financial transaction
US20100312700A1 (en) * 2008-11-08 2010-12-09 Coulter Todd R System and method for managing status of a payment instrument
US20110055077A1 (en) * 2009-09-02 2011-03-03 Susan French Portable consumer device with funds transfer processing
US20110178925A1 (en) * 2010-01-19 2011-07-21 Mike Lindelsee Token Based Transaction Authentication
US20110320290A1 (en) * 2010-06-29 2011-12-29 The Western Union Company Augmented Reality Money Transfer
US20120166295A1 (en) * 2010-12-27 2012-06-28 The Western Union Company Secure contactless payment systems and methods
US20130007849A1 (en) * 2011-05-26 2013-01-03 FonWallet Transaction Soulutions, Inc. Secure consumer authorization and automated consumer services using an intermediary service
WO2013020086A1 (en) * 2011-08-03 2013-02-07 Ebay Inc. Account access at point of sale
US20130282581A1 (en) * 2012-04-18 2013-10-24 Infosys Limited Mobile device-based cardless financial transactions
WO2014162296A1 (en) * 2013-04-04 2014-10-09 Visa International Service Association Method and system for conducting pre-authorized financial transactions
AU2011289180B2 (en) * 2010-08-12 2015-05-28 Mastercard International, Inc. Multi-commerce channel wallet for authenticated transactions
US20160034896A1 (en) * 2003-02-28 2016-02-04 Intercontinental Exchange Holdings, Inc. SYSTEMS AND METHODS FOR EXTENDING IDENTITY ATTRIBUTES AND AUTHENTICATION FACTORS IN AN ePAYMENT ADDRESS REGISTRY

Families Citing this family (196)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20140019352A1 (en) 2011-02-22 2014-01-16 Visa International Service Association Multi-purpose virtual card transaction apparatuses, methods and systems
US8700729B2 (en) * 2005-01-21 2014-04-15 Robin Dua Method and apparatus for managing credentials through a wireless network
US8762263B2 (en) 2005-09-06 2014-06-24 Visa U.S.A. Inc. System and method for secured account numbers in proximity devices
US7739169B2 (en) 2007-06-25 2010-06-15 Visa U.S.A. Inc. Restricting access to compromised account information
US7937324B2 (en) 2007-09-13 2011-05-03 Visa U.S.A. Inc. Account permanence
US20090076950A1 (en) * 2007-09-18 2009-03-19 Ujin Chang Universal Network-Based Deposit Management Service
US8219489B2 (en) 2008-07-29 2012-07-10 Visa U.S.A. Inc. Transaction processing using a global unique identifier
GB2466676A (en) 2009-01-06 2010-07-07 Visa Europe Ltd A method of processing payment authorisation requests
GB2466810A (en) 2009-01-08 2010-07-14 Visa Europe Ltd Processing payment authorisation requests
US8826397B2 (en) * 2009-01-15 2014-09-02 Visa International Service Association Secure remote authentication through an untrusted network
US9715681B2 (en) 2009-04-28 2017-07-25 Visa International Service Association Verification of portable consumer devices
US10846683B2 (en) 2009-05-15 2020-11-24 Visa International Service Association Integration of verification tokens with mobile communication devices
US9105027B2 (en) 2009-05-15 2015-08-11 Visa International Service Association Verification of portable consumer device for secure services
US8534564B2 (en) 2009-05-15 2013-09-17 Ayman Hammad Integration of verification tokens with mobile communication devices
US8893967B2 (en) 2009-05-15 2014-11-25 Visa International Service Association Secure Communication of payment information to merchants using a verification token
US9038886B2 (en) 2009-05-15 2015-05-26 Visa International Service Association Verification of portable consumer devices
US10140598B2 (en) 2009-05-20 2018-11-27 Visa International Service Association Device including encrypted data for expiration date and verification value creation
US20100312703A1 (en) * 2009-06-03 2010-12-09 Ashish Kulpati System and method for providing authentication for card not present transactions using mobile device
US8103553B2 (en) * 2009-06-06 2012-01-24 Bullock Roddy Mckee Method for making money on internet news sites and blogs
US20100312702A1 (en) * 2009-06-06 2010-12-09 Bullock Roddy M System and method for making money by facilitating easy online payment
US8065193B2 (en) 2009-06-06 2011-11-22 Bullock Roddy Mckee Method for making money on the internet
US20100332337A1 (en) * 2009-06-25 2010-12-30 Bullock Roddy Mckee Universal one-click online payment method and system
US8364593B2 (en) * 2009-06-30 2013-01-29 Visa International Service Association Intelligent authentication
CA2770893A1 (en) * 2009-08-10 2011-02-17 Visa International Service Association Systems and methods for enrolling users in a payment service
US20110047076A1 (en) * 2009-08-24 2011-02-24 Mark Carlson Alias reputation interaction system
US10255591B2 (en) * 2009-12-18 2019-04-09 Visa International Service Association Payment channel returning limited use proxy dynamic value
CA3045817A1 (en) 2010-01-12 2011-07-21 Visa International Service Association Anytime validation for verification tokens
AU2015249145B2 (en) * 2010-01-19 2017-03-23 Visa International Service Association Remote variable authentication processing
WO2011091051A2 (en) * 2010-01-19 2011-07-28 Visa International Service Association Remote variable authentication processing
US9107072B2 (en) * 2010-02-12 2015-08-11 Alexander Hoi WONG Seamless mobile subscriber identification
US9424413B2 (en) 2010-02-24 2016-08-23 Visa International Service Association Integration of payment capability into secure elements of computers
US10255601B2 (en) 2010-02-25 2019-04-09 Visa International Service Association Multifactor authentication using a directory server
US9245267B2 (en) 2010-03-03 2016-01-26 Visa International Service Association Portable account number for consumer payment account
US9544143B2 (en) 2010-03-03 2017-01-10 Duo Security, Inc. System and method of notifying mobile devices to complete transactions
FR2958102B1 (en) * 2010-03-23 2012-08-17 Ingenico Sa METHOD AND SYSTEM FOR VALIDATING A TRANSACTION, TRANSACTIONAL TERMINAL AND PROGRAM THEREFOR.
JP6006907B2 (en) * 2010-04-05 2016-10-12 カーディナルコマース コーポレーション Processing method and system for debit transaction with PIN
US11887105B2 (en) 2010-04-09 2024-01-30 Paypal, Inc. Transaction token issuing authorities
US10134031B2 (en) 2010-04-09 2018-11-20 Paypal, Inc. Transaction token issuing authorities
US8336088B2 (en) 2010-04-19 2012-12-18 Visa International Service Association Alias management and value transfer claim processing
BR112012023314A2 (en) * 2010-06-04 2018-07-24 Visa Int Service Ass payment tokenization apparatus, methods and systems
US9342832B2 (en) 2010-08-12 2016-05-17 Visa International Service Association Securing external systems with account token substitution
US20120136796A1 (en) * 2010-09-21 2012-05-31 Ayman Hammad Device Enrollment System and Method
US9047630B2 (en) 2010-10-15 2015-06-02 Cellco Partnership Using a mobile device to make a transaction
EP2649745A4 (en) * 2010-12-10 2014-05-07 Electronic Payment Exchange Tokenized contactless payments for mobile devices
AU2011348061B2 (en) * 2010-12-23 2015-12-10 Paypal, Inc. Mobile phone atm processing methods and systems
US8924489B2 (en) * 2011-01-05 2014-12-30 Apple Inc. Message push notification client improvements for multi-user devices
US20120197801A1 (en) * 2011-01-27 2012-08-02 Day Jimenez Merchant payment system and method for mobile phones
CN103765453B (en) 2011-02-16 2018-08-14 维萨国际服务协会 Snap mobile payment device, method and system
US10586227B2 (en) 2011-02-16 2020-03-10 Visa International Service Association Snap mobile payment apparatuses, methods and systems
US8856043B2 (en) 2011-02-18 2014-10-07 Visa International Service Association Method and system for managing data and enabling payment transactions between multiple entities
BR112013021057A2 (en) 2011-02-22 2020-11-10 Visa International Service Association universal electronic payment devices, methods and systems
US20120221466A1 (en) * 2011-02-28 2012-08-30 Thomas Finley Look Method for improved financial transactions
US9280765B2 (en) * 2011-04-11 2016-03-08 Visa International Service Association Multiple tokenization for authentication
US10121129B2 (en) 2011-07-05 2018-11-06 Visa International Service Association Electronic wallet checkout platform apparatuses, methods and systems
US9355393B2 (en) 2011-08-18 2016-05-31 Visa International Service Association Multi-directional wallet connector apparatuses, methods and systems
US9582598B2 (en) 2011-07-05 2017-02-28 Visa International Service Association Hybrid applications utilizing distributed models and views apparatuses, methods and systems
US9704155B2 (en) 2011-07-29 2017-07-11 Visa International Service Association Passing payment tokens through an hop/sop
US10825001B2 (en) 2011-08-18 2020-11-03 Visa International Service Association Multi-directional wallet connector apparatuses, methods and systems
US10242358B2 (en) 2011-08-18 2019-03-26 Visa International Service Association Remote decoupled application persistent state apparatuses, methods and systems
US9710807B2 (en) 2011-08-18 2017-07-18 Visa International Service Association Third-party value added wallet features and interfaces apparatuses, methods and systems
US10223730B2 (en) 2011-09-23 2019-03-05 Visa International Service Association E-wallet store injection search apparatuses, methods and systems
FR2980867B1 (en) * 2011-10-04 2013-10-18 Inside Secure METHOD AND SYSTEM FOR EXECUTING A CONTACTLESS TRANSACTION AUTHORIZING MULTIPLE APPLICATIONS AND MULTIPLE INSTANCES OF THE SAME APPLICATION
GB201120328D0 (en) * 2011-11-24 2012-01-04 Renesas Mobile Corp Wireless communication apparatus and method
CN103164791B (en) * 2011-12-13 2016-04-06 阿里巴巴集团控股有限公司 A kind of method and apparatus being realized secure payment by electric terminal
US10223710B2 (en) 2013-01-04 2019-03-05 Visa International Service Association Wearable intelligent vision device apparatuses, methods and systems
CN109508983A (en) 2012-01-05 2019-03-22 维萨国际服务协会 Data protection is carried out with conversion
DE102012220774B4 (en) * 2012-01-09 2022-02-24 Heinz Giesen Procedures for Conducting Transactions
WO2013113004A1 (en) 2012-01-26 2013-08-01 Visa International Service Association System and method of providing tokenization as a service
WO2013116515A1 (en) * 2012-01-31 2013-08-08 Visa International Service Association Mobile managed service
AU2013214801B2 (en) 2012-02-02 2018-06-21 Visa International Service Association Multi-source, multi-dimensional, cross-entity, multimedia database platform apparatuses, methods and systems
US9047594B2 (en) 2012-02-27 2015-06-02 American Express Travel Related Services Company, Inc. Smart phone system and method
US10282724B2 (en) 2012-03-06 2019-05-07 Visa International Service Association Security system incorporating mobile device
US8489507B1 (en) 2012-03-28 2013-07-16 Ebay Inc. Alternative payment method for online transactions using interactive voice response
US20130297501A1 (en) 2012-05-04 2013-11-07 Justin Monk System and method for local data conversion
US9524501B2 (en) 2012-06-06 2016-12-20 Visa International Service Association Method and system for correlating diverse transaction data
KR101327292B1 (en) * 2012-06-18 2013-11-11 주식회사 인터페이 Goods/service price payment system based on ars authentication using variious payment means and price payment method of the same
WO2014008403A1 (en) 2012-07-03 2014-01-09 Visa International Service Association Data protection hub
US9256871B2 (en) 2012-07-26 2016-02-09 Visa U.S.A. Inc. Configurable payment tokens
US9665722B2 (en) 2012-08-10 2017-05-30 Visa International Service Association Privacy firewall
WO2014043278A1 (en) 2012-09-11 2014-03-20 Visa International Service Association Cloud-based virtual wallet nfc apparatuses, methods and systems
KR20140051640A (en) * 2012-10-23 2014-05-02 삼성전자주식회사 Financial transaction method of mobile equipment, apparatus thereof, and medium storing program source thereof
US10176478B2 (en) 2012-10-23 2019-01-08 Visa International Service Association Transaction initiation determination system utilizing transaction data elements
CN102932788A (en) * 2012-10-26 2013-02-13 南宁佰睿技术开发有限公司 Mobile phone-based identity identification and near-field payment method
WO2014075234A1 (en) * 2012-11-14 2014-05-22 Telefonaktiebolaget L M Ericsson (Publ) Authenticating a device when connecting it to a service
US9911118B2 (en) 2012-11-21 2018-03-06 Visa International Service Association Device pairing via trusted intermediary
US10304047B2 (en) 2012-12-07 2019-05-28 Visa International Service Association Token generating component
US10521794B2 (en) * 2012-12-10 2019-12-31 Visa International Service Association Authenticating remote transactions using a mobile device
US10740731B2 (en) 2013-01-02 2020-08-11 Visa International Service Association Third party settlement
US9741051B2 (en) 2013-01-02 2017-08-22 Visa International Service Association Tokenization and third-party interaction
FR3000823A1 (en) * 2013-01-04 2014-07-11 St Microelectronics Sa Method for securing banking transaction carried out between e.g. mobile phone, and server, involves recovering identifier from image information for continuing transaction, without transmission of identifier on communication channel
US10535060B2 (en) * 2013-03-15 2020-01-14 Mastercard International Incorporated System and method for processing financial transactions using a mobile device for payment
US11055710B2 (en) 2013-05-02 2021-07-06 Visa International Service Association Systems and methods for verifying and processing transactions using virtual currency
WO2014186635A1 (en) 2013-05-15 2014-11-20 Visa International Service Association Mobile tokenization hub
US10373166B2 (en) * 2013-05-24 2019-08-06 Marc George System for managing personal identifiers and financial instrument use
CN104184713B (en) * 2013-05-27 2018-03-27 阿里巴巴集团控股有限公司 Terminal identification method, machine identifier register method and corresponding system, equipment
US10878422B2 (en) 2013-06-17 2020-12-29 Visa International Service Association System and method using merchant token
AU2014292980A1 (en) 2013-07-24 2016-02-04 Visa International Service Association Systems and methods for interoperable network token processing
AU2014294613B2 (en) 2013-07-26 2017-03-16 Visa International Service Association Provisioning payment credentials to a consumer
US10366391B2 (en) 2013-08-06 2019-07-30 Visa International Services Association Variable authentication process and system
US10496986B2 (en) 2013-08-08 2019-12-03 Visa International Service Association Multi-network tokenization processing
CN114819961A (en) 2013-08-08 2022-07-29 维萨国际服务协会 Method and system for provisioning payment credentials for mobile devices
US9978094B2 (en) 2013-10-11 2018-05-22 Visa International Service Association Tokenization revocation list
EP3078156A4 (en) 2013-10-11 2017-07-12 Visa International Service Association Network token system
US10515358B2 (en) 2013-10-18 2019-12-24 Visa International Service Association Contextual transaction token methods and systems
US10489779B2 (en) 2013-10-21 2019-11-26 Visa International Service Association Multi-network token bin routing with defined verification parameters
US10366387B2 (en) 2013-10-29 2019-07-30 Visa International Service Association Digital wallet system and method
US9424410B2 (en) * 2013-12-09 2016-08-23 Mastercard International Incorporated Methods and systems for leveraging transaction data to dynamically authenticate a user
US9972005B2 (en) 2013-12-19 2018-05-15 Visa International Service Association Cloud-based transactions methods and systems
US9922322B2 (en) 2013-12-19 2018-03-20 Visa International Service Association Cloud-based transactions with magnetic secure transmission
US10433128B2 (en) 2014-01-07 2019-10-01 Visa International Service Association Methods and systems for provisioning multiple devices
US9846878B2 (en) 2014-01-14 2017-12-19 Visa International Service Association Payment account identifier system
US9858572B2 (en) * 2014-02-06 2018-01-02 Google Llc Dynamic alteration of track data
SG2014008932A (en) 2014-02-06 2015-09-29 Mastercard Asia Pacific Pte Ltd A method and a corresponding proxy server, system, computer-readable storage medium and computer program
US10026087B2 (en) 2014-04-08 2018-07-17 Visa International Service Association Data passed in an interaction
US9942043B2 (en) 2014-04-23 2018-04-10 Visa International Service Association Token security on a communication device
AU2015253182B2 (en) 2014-05-01 2019-02-14 Visa International Service Association Data verification using access device
SG10202007850WA (en) 2014-05-05 2020-09-29 Visa Int Service Ass System and method for token domain control
CN106465112A (en) 2014-05-21 2017-02-22 维萨国际服务协会 Offline authentication
US11023890B2 (en) 2014-06-05 2021-06-01 Visa International Service Association Identification and verification for provisioning mobile application
FR3022054A1 (en) * 2014-06-05 2015-12-11 Orange SECURING AN ENTRY INTO A USER DATABASE
US9780953B2 (en) 2014-07-23 2017-10-03 Visa International Service Association Systems and methods for secure detokenization
US10484345B2 (en) 2014-07-31 2019-11-19 Visa International Service Association System and method for identity verification across mobile applications
US9775029B2 (en) 2014-08-22 2017-09-26 Visa International Service Association Embedding cloud-based functionalities in a communication device
US10140615B2 (en) 2014-09-22 2018-11-27 Visa International Service Association Secure mobile device credential provisioning using risk decision non-overrides
WO2016049636A2 (en) 2014-09-26 2016-03-31 Visa International Service Association Remote server encrypted data provisioning system and methods
US11257074B2 (en) 2014-09-29 2022-02-22 Visa International Service Association Transaction risk based token
US10015147B2 (en) 2014-10-22 2018-07-03 Visa International Service Association Token enrollment system and method
GB201419016D0 (en) 2014-10-24 2014-12-10 Visa Europe Ltd Transaction Messaging
FR3028638A1 (en) * 2014-11-14 2016-05-20 Orange METHOD FOR CONNECTING A MOBILE TERMINAL TO A SERVER OF A SERVICE PROVIDER
US11620643B2 (en) 2014-11-26 2023-04-04 Visa International Service Association Tokenization request via access device
US10257185B2 (en) 2014-12-12 2019-04-09 Visa International Service Association Automated access data provisioning
SG11201703526VA (en) 2014-12-12 2017-05-30 Visa Int Service Ass Provisioning platform for machine-to-machine devices
GB2533333A (en) 2014-12-16 2016-06-22 Visa Europe Ltd Transaction authorisation
US9525694B2 (en) 2015-01-15 2016-12-20 Bank Of America Corporation Authenticating customers and managing authenticated sessions
US9491170B2 (en) * 2015-01-15 2016-11-08 Bank Of America Corporation Authenticating customers and managing authenticated sessions
US10096009B2 (en) 2015-01-20 2018-10-09 Visa International Service Association Secure payment processing using authorization request
US11250391B2 (en) 2015-01-30 2022-02-15 Visa International Service Association Token check offline
US9680646B2 (en) * 2015-02-05 2017-06-13 Apple Inc. Relay service for communication between controllers and accessories
US10164996B2 (en) 2015-03-12 2018-12-25 Visa International Service Association Methods and systems for providing a low value token buffer
US10333921B2 (en) 2015-04-10 2019-06-25 Visa International Service Association Browser integration with Cryptogram
US9998978B2 (en) 2015-04-16 2018-06-12 Visa International Service Association Systems and methods for processing dormant virtual access devices
US10552834B2 (en) 2015-04-30 2020-02-04 Visa International Service Association Tokenization capable authentication framework
US9935941B2 (en) 2015-09-16 2018-04-03 International Business Machines Corporation Mobile based multi-channel citizen account origination in digital economy
US11232453B2 (en) * 2015-09-30 2022-01-25 Mastercard International Incorporated Method and system for authentication data collection and reporting
WO2017066792A1 (en) 2015-10-15 2017-04-20 Visa International Service Association Instant token issuance system
US10664843B2 (en) 2015-12-04 2020-05-26 Visa International Service Association Unique code for token verification
KR102476017B1 (en) * 2016-01-05 2022-12-09 삼성전자주식회사 Method and apparatus for authentication using biometric information
EP3400696B1 (en) 2016-01-07 2020-05-13 Visa International Service Association Systems and methods for device push provisioning
US11080696B2 (en) 2016-02-01 2021-08-03 Visa International Service Association Systems and methods for code display and use
US11501288B2 (en) 2016-02-09 2022-11-15 Visa International Service Association Resource provider account token provisioning and processing
PL416364A1 (en) * 2016-03-01 2017-09-11 Phone Id Spółka Z Ograniczoną Odpowiedzialnością Method and the server for authentication of a user, using a mobile device
US11087304B2 (en) * 2016-03-14 2021-08-10 Jpmorgan Chase Bank, N.A. Systems and methods for device authentication
AU2017238223A1 (en) 2016-03-22 2018-08-09 Visa International Service Association Adaptable authentication processing
US10313321B2 (en) 2016-04-07 2019-06-04 Visa International Service Association Tokenization of co-network accounts
CN109074578A (en) 2016-04-19 2018-12-21 维萨国际服务协会 System and method for executing push transaction
US11521185B1 (en) * 2016-05-19 2022-12-06 Citibank, N.A. Distributed private ledger systems and methods
US11250424B2 (en) 2016-05-19 2022-02-15 Visa International Service Association Systems and methods for creating subtokens using primary tokens
FR3051944A1 (en) * 2016-05-30 2017-12-01 Orange METHOD FOR INQUIRY OF PERSONAL INFORMATION FROM A USER ASKED BY A GIVEN ONLINE SERVICE
KR102508836B1 (en) 2016-06-03 2023-03-10 비자 인터네셔널 서비스 어소시에이션 Sub-token management system for connected devices
WO2017218482A1 (en) * 2016-06-15 2017-12-21 Mastercard International Incorporated System and method to push payment to beneficiary account using an alias
US11068899B2 (en) 2016-06-17 2021-07-20 Visa International Service Association Token aggregation for multi-party transactions
GB2551543A (en) * 2016-06-21 2017-12-27 Eckoh Uk Ltd Methods of authenticating a user for data exchange
WO2017223525A1 (en) 2016-06-24 2017-12-28 Visa International Service Association Unique token authentication cryptogram
SG11201808998RA (en) 2016-07-11 2018-11-29 Visa Int Service Ass Encryption key exchange process using access device
CA3026224A1 (en) 2016-07-19 2018-01-25 Visa International Service Association Method of distributing tokens and managing token relationships
US10630669B2 (en) * 2016-09-09 2020-04-21 Cyphercor Inc. Method and system for user verification
US10509779B2 (en) 2016-09-14 2019-12-17 Visa International Service Association Self-cleaning token vault
SG11201903468RA (en) 2016-11-28 2019-05-30 Visa Int Service Ass Access identifier provisioning to application
US10915899B2 (en) 2017-03-17 2021-02-09 Visa International Service Association Replacing token on a multi-token user device
US11049101B2 (en) * 2017-03-21 2021-06-29 Visa International Service Association Secure remote transaction framework
US10902418B2 (en) 2017-05-02 2021-01-26 Visa International Service Association System and method using interaction token
US11494765B2 (en) 2017-05-11 2022-11-08 Visa International Service Association Secure remote transaction system using mobile devices
US10574662B2 (en) 2017-06-20 2020-02-25 Bank Of America Corporation System for authentication of a user based on multi-factor passively acquired data
US10360733B2 (en) 2017-06-20 2019-07-23 Bank Of America Corporation System controlled augmented resource facility
US10491389B2 (en) 2017-07-14 2019-11-26 Visa International Service Association Token provisioning utilizing a secure authentication system
WO2019171163A1 (en) 2018-03-07 2019-09-12 Visa International Service Association Secure remote token release with online authentication
US11037114B2 (en) 2018-03-22 2021-06-15 Diebold Nixdorf, Incorporated System and method for financial transactions
US11256789B2 (en) 2018-06-18 2022-02-22 Visa International Service Association Recurring token transactions
US11875349B2 (en) 2018-06-22 2024-01-16 Mastercard International Incorporated Systems and methods for authenticating online users with an access control server
US20200013028A1 (en) * 2018-07-09 2020-01-09 American Express Travel Related Services Company, Inc. Peer-to-peer money transfers
SG11202101587SA (en) 2018-08-22 2021-03-30 Visa Int Service Ass Method and system for token provisioning and processing
CN111030965A (en) * 2018-10-09 2020-04-17 青岛海信移动通信技术股份有限公司 Method for transmitting and receiving encrypted data and mobile terminal
CN113015992B (en) 2018-11-14 2023-02-17 维萨国际服务协会 Cloud token provisioning of multiple tokens
WO2020198764A2 (en) * 2019-03-25 2020-10-01 Angus Pohl Method & system for terminal coded mobile payments
US10825023B2 (en) 2019-04-10 2020-11-03 Advanced New Technologies Co., Ltd. Verification method and apparatus for user signing fast payment with bank card
SG11202108626QA (en) 2019-05-17 2021-09-29 Visa Int Service Ass Virtual access credential interaction system and method
US11876798B2 (en) * 2019-05-20 2024-01-16 Citrix Systems, Inc. Virtual delivery appliance and system with remote authentication and related methods
US11508006B1 (en) * 2019-05-31 2022-11-22 Aon Risk Services, Inc. Of Maryland Digital property collateral protection
US11301558B2 (en) 2019-08-21 2022-04-12 Red Hat Inc. Automatic secure storage of credentials within a managed configuration model
US10685351B1 (en) 2019-09-19 2020-06-16 Capital One Services, Llc Designation of a trusted user
US11301583B2 (en) * 2019-10-09 2022-04-12 Mastercard International Incorporated Method and system for protection of customer PII via cryptographic tokens
US11588800B2 (en) * 2019-11-15 2023-02-21 Salesforce, Inc. Customizable voice-based user authentication in a multi-tenant system
CN110995829B (en) * 2019-11-29 2022-07-22 广州市百果园信息技术有限公司 Instance calling method and device and computer storage medium
US11770374B1 (en) * 2019-12-31 2023-09-26 Cigna Intellectual Property, Inc. Computer user credentialing and verification system
US11704637B2 (en) * 2020-03-18 2023-07-18 Capital One Services, Llc System and method to accept third-party payments
NL2025327B1 (en) * 2020-04-10 2021-10-26 Mobuyou B V Method for secure transfer of data.

Citations (35)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6105008A (en) * 1997-10-16 2000-08-15 Visa International Service Association Internet loading system using smart card
US6282522B1 (en) * 1997-04-30 2001-08-28 Visa International Service Association Internet payment system using smart card
US6298336B1 (en) * 1997-12-19 2001-10-02 Visa International Service Association Card activation at point of distribution
US20030061167A1 (en) * 2001-09-21 2003-03-27 Mann William Frederick System for providing cardless payment
US20040083184A1 (en) * 1999-04-19 2004-04-29 First Data Corporation Anonymous card transactions
US20040122685A1 (en) * 2002-12-20 2004-06-24 Daryl Bunce Verification system for facilitating transactions via communication networks, and associated method
US20040230610A1 (en) * 2000-01-05 2004-11-18 Gutierrez-Sheris Luis Eduardo Money-transfer techniques
US20040267665A1 (en) * 2003-06-24 2004-12-30 Lg Telecom, Ltd. System for providing banking services by use of mobile communication
US20050044423A1 (en) * 1999-11-12 2005-02-24 Mellmer Joseph Andrew Managing digital identity information
US20050131816A1 (en) * 1999-05-14 2005-06-16 Britto Mark J. Computer-based funds transfer system
US20060006224A1 (en) * 2004-07-06 2006-01-12 Visa International Service Association, A Delaware Corporation Money transfer service with authentication
US7007840B2 (en) * 2003-07-02 2006-03-07 Visa U.S.A., Inc. Managing activation of cardholders in a secure authentication program
US7023315B2 (en) * 2000-04-24 2006-04-04 Chartered Semiconductor Manufacturing Ltd. High performance RF inductors and transformers using bonding technique
US20060189382A1 (en) * 2001-09-20 2006-08-24 Igt Method and apparatus for registering a mobile device with a gaming machine
US7111789B2 (en) * 2001-08-31 2006-09-26 Arcot Systems, Inc. Enhancements to multi-party authentication and other protocols
US20070053513A1 (en) * 1999-10-05 2007-03-08 Hoffberg Steven M Intelligent electronic appliance system and method
US7203315B1 (en) * 2000-02-22 2007-04-10 Paul Owen Livesay Methods and apparatus for providing user anonymity in online transactions
US20070094150A1 (en) * 2005-10-11 2007-04-26 Philip Yuen Transaction authorization service
US7349871B2 (en) * 2002-08-08 2008-03-25 Fujitsu Limited Methods for purchasing of goods and services
US20090037982A1 (en) * 2007-04-17 2009-02-05 David Wentker Method and system for authenticating a party to a transaction
US7606560B2 (en) * 2002-08-08 2009-10-20 Fujitsu Limited Authentication services using mobile device
US7653602B2 (en) * 2003-11-06 2010-01-26 Visa U.S.A. Inc. Centralized electronic commerce card transactions
US20100094753A1 (en) * 2008-10-13 2010-04-15 Mark Carlson P2p transfer using prepaid card
US7707120B2 (en) * 2002-04-17 2010-04-27 Visa International Service Association Mobile account authentication service
US20100198728A1 (en) * 2008-09-22 2010-08-05 Christian Aabye Over the air management of payment application installed in mobile device
US7827115B2 (en) * 2000-04-24 2010-11-02 Visa International Service Association Online payer authentication service
US20100318783A1 (en) * 2009-06-10 2010-12-16 Ashwin Raj Service activation using algorithmically defined key
US20110035319A1 (en) * 2009-08-10 2011-02-10 Olivier Brand Systems and methods for enrolling users in a payment service
US20110055077A1 (en) * 2009-09-02 2011-03-03 Susan French Portable consumer device with funds transfer processing
US20110061051A1 (en) * 2009-09-10 2011-03-10 International Business Machines Corporation Dynamic Recommendation Framework for Information Technology Management
US7908216B1 (en) * 1999-07-22 2011-03-15 Visa International Service Association Internet payment, authentication and loading system using virtual smart card
US20110178927A1 (en) * 2010-01-19 2011-07-21 Mike Lindelsee Verification mechanism
US20110178925A1 (en) * 2010-01-19 2011-07-21 Mike Lindelsee Token Based Transaction Authentication
US20110178926A1 (en) * 2010-01-19 2011-07-21 Mike Lindelsee Remote Variable Authentication Processing
US8019691B2 (en) * 2002-09-10 2011-09-13 Visa International Service Association Profile and identity authentication service

Family Cites Families (87)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4341951A (en) 1980-07-02 1982-07-27 Benton William M Electronic funds transfer and voucher issue system
US4755872A (en) 1985-07-29 1988-07-05 Zenith Electronics Corporation Impulse pay per view system and method
US5023904A (en) 1987-08-04 1991-06-11 Science Dynamics Corporation Direct telephone dial ordering service
US5008930A (en) 1989-10-24 1991-04-16 At&T Bell Laboratories Customer definable integrated voice/data call transfer technique
USRE36788E (en) 1990-09-06 2000-07-25 Visa International Service Association Funds transfer system
US5383113A (en) 1991-07-25 1995-01-17 Checkfree Corporation System and method for electronically providing customer services including payment of bills, financial analysis and loans
CA2100134C (en) 1992-09-29 1999-06-22 Raymond Otto Colbert Secure credit/debit card authorization
FI100137B (en) 1994-10-28 1997-09-30 Vazvan Simin Real-time wireless telecom payment system
US5591949A (en) 1995-01-06 1997-01-07 Bernstein; Robert J. Automatic portable account controller for remotely arranging for payment of debt to a vendor
US5778313A (en) 1995-12-08 1998-07-07 Cellexis International, Inc. Pre-paid cellular telephone system
US5729460A (en) 1995-12-14 1998-03-17 Francotyp-Postalia Ag & Co. Method for payment of the recrediting of an electronic postage meter and arrangement for the operation of a data central
US5787159A (en) 1996-02-27 1998-07-28 Hamilton; Chris Use of caller ID information
CA2197930A1 (en) 1996-02-29 1997-08-29 Masayuki Ohki Electronic wallet and method for operating the same
US5815657A (en) 1996-04-26 1998-09-29 Verifone, Inc. System, method and article of manufacture for network electronic authorization utilizing an authorization instrument
US5991749A (en) 1996-09-11 1999-11-23 Morrill, Jr.; Paul H. Wireless telephony for collecting tolls, conducting financial transactions, and authorizing other activities
US5937396A (en) 1996-12-04 1999-08-10 Konya; Arpad System for ATM/ATM transfers
US5991748A (en) 1996-12-06 1999-11-23 American Express Travel Related Services Company, Inc. Methods and apparatus for regenerating a prepaid transaction account
US5787759A (en) * 1997-02-11 1998-08-04 General Motors Corporation Position control apparatus for steering column
US6868391B1 (en) 1997-04-15 2005-03-15 Telefonaktiebolaget Lm Ericsson (Publ) Tele/datacommunications payment method and apparatus
US20020174016A1 (en) 1997-06-16 2002-11-21 Vincent Cuervo Multiple accounts and purposes card method and system
US6295522B1 (en) 1997-07-11 2001-09-25 Cybercash, Inc. Stored-value card value acquisition method and apparatus
US6206283B1 (en) 1998-12-23 2001-03-27 At&T Corp. Method and apparatus for transferring money via a telephone call
US6418420B1 (en) 1998-06-30 2002-07-09 Sun Microsystems, Inc. Distributed budgeting and accounting system with secure token device access
US6169974B1 (en) 1998-10-08 2001-01-02 Paymentech, Inc. Method for closed loop processing of transactions utilizing bank card association
FI105243B (en) 1999-01-13 2000-06-30 Sonera Oyj Method and system for payment management
US6430539B1 (en) 1999-05-06 2002-08-06 Hnc Software Predictive modeling of consumer financial behavior
US6227447B1 (en) * 1999-05-10 2001-05-08 First Usa Bank, Na Cardless payment system
US6675153B1 (en) 1999-07-06 2004-01-06 Zix Corporation Transaction authorization system
WO2001013275A1 (en) * 1999-08-13 2001-02-22 Fleetboston Financial Corporation Proxy system for customer confidentiality
US7664703B2 (en) 1999-10-26 2010-02-16 The Western Union Company Value transfer systems and methods
AU1588701A (en) * 1999-11-09 2001-06-06 First Data Resources, Inc. Systems and methods for anonymous payment transactions
EP1100045A1 (en) 1999-11-11 2001-05-16 Infineon Technologies AG Chipcard with contact interface and non-contact interface
US20030083042A1 (en) 2000-02-11 2003-05-01 Maher Abuhamdeh Remote rechargeable prepaid cellular service peripheral device
US6612487B2 (en) 2000-02-14 2003-09-02 Mas Inco Corporation Method and system for account activation
KR100506913B1 (en) 2000-03-14 2005-08-10 주식회사 올앳 Electronic payment system using anonymous representative payment means and method thereof
AU2001259013A1 (en) 2000-05-25 2001-12-03 Wilson How Kiap Gueh Transaction system and method
WO2001097118A1 (en) * 2000-06-14 2001-12-20 Takako Jogu Settling method using mobile phone and mobile phone
US20020152168A1 (en) 2000-07-11 2002-10-17 First Data Corporation Automated transfer with stored value fund
US20030105710A1 (en) 2000-07-11 2003-06-05 Ellen Barbara Method and system for on-line payments
US6769605B1 (en) 2000-07-21 2004-08-03 Jason P. Magness Money transfer system
US7415442B1 (en) 2000-09-26 2008-08-19 Integrated Technological Systems, Inc. Integrated technology money transfer system
US7155411B1 (en) 2000-09-28 2006-12-26 Microsoft Corporation Integrating payment accounts and an electronic wallet
US6993507B2 (en) 2000-12-14 2006-01-31 Pacific Payment Systems, Inc. Bar coded bill payment system and method
JP2002183612A (en) * 2000-12-19 2002-06-28 Sumitomo Corp Method and system for non-cash account settlement of use charge
JP2002334291A (en) * 2001-05-08 2002-11-22 Takako Kiyohiro Method and device for vicarious charging, and method and device for settlement confirmation
US8498932B2 (en) 2001-05-24 2013-07-30 Daniel W. Davis Card based transfer account
JP2003016364A (en) * 2001-07-04 2003-01-17 Jcb:Kk Credit card dealing requesting device, credit settlement server, credit card dealing requesting method, computer program, and ic chip
US7742984B2 (en) 2001-07-06 2010-06-22 Hossein Mohsenzadeh Secure authentication and payment system
US7225156B2 (en) 2001-07-11 2007-05-29 Fisher Douglas C Persistent dynamic payment service
JP2003099687A (en) * 2001-07-17 2003-04-04 Toshiba Tec Corp Merchandise transaction cost settlement system, merchandise transaction cost settlement device, telephone rate collection management device and merchandise transaction cost settlement method
JP2003036406A (en) * 2001-07-23 2003-02-07 Ntt Docomo Inc Method and system for electronic settlement, communication terminal, settlement device and recording medium
AUPS087602A0 (en) 2002-03-04 2002-03-28 Ong, Yong Kin (Michael) Electronic fund transfer system
AU2003243516B2 (en) 2002-06-11 2009-03-19 First Data Corporation Value processing network and methods
US7047041B2 (en) 2002-06-17 2006-05-16 Nokia Corporation Method and device for storing and accessing personal information
US8412623B2 (en) * 2002-07-15 2013-04-02 Citicorp Credit Services, Inc. Method and system for a multi-purpose transactional platform
US7822688B2 (en) * 2002-08-08 2010-10-26 Fujitsu Limited Wireless wallet
JP2004164597A (en) * 2002-08-08 2004-06-10 Fujitsu Ltd Method for purchasing goods and services
JP2004126907A (en) * 2002-10-02 2004-04-22 Bank Of Tokyo-Mitsubishi Ltd Device for selecting settlement financial institution, business server, and method of settlement
US7003493B2 (en) 2003-01-22 2006-02-21 First Data Corporation Direct payment with token
US20040188515A1 (en) 2003-03-26 2004-09-30 Ivan Jimenez Pre-paid internet credit card
US20050080697A1 (en) 2003-10-14 2005-04-14 Foss Sheldon H. System, method and apparatus for providing financial services
US9514458B2 (en) * 2003-06-04 2016-12-06 Mastercard International Incorporated Customer authentication in E-commerce transactions
GB0318000D0 (en) * 2003-07-31 2003-09-03 Ncr Int Inc Mobile applications
US7711638B2 (en) 2004-03-17 2010-05-04 The Western Union Company System and method for transferring money
US8762283B2 (en) 2004-05-03 2014-06-24 Visa International Service Association Multiple party benefit from an online authentication service
CA2465927C (en) * 2004-05-10 2009-06-30 Lorne G.K. Smith Winch and cable driven pipe snubbing apparatus
JP2006221434A (en) * 2005-02-10 2006-08-24 Takeshi Yoshihara Financial affair processing system
US7237721B2 (en) 2005-05-24 2007-07-03 Nokia Corporation Image processing for pattern detection
US20070027820A1 (en) 2005-07-28 2007-02-01 Amir Elharar Methods and systems for securing electronic transactions
US7494056B2 (en) 2005-08-23 2009-02-24 Kenneth Sturm Retail package for prepaid debit cards and method for debit card distribution
WO2007033071A2 (en) 2005-09-13 2007-03-22 Billetel, Llc Calling card with intergrated banking functions
US20070094132A1 (en) 2005-10-25 2007-04-26 Waterson Vincent A System and method for person to person electronic fund transfer using video payphones
US8510223B2 (en) 2006-08-03 2013-08-13 The Western Union Company Money transfer transactions via pre-paid wireless communication devices
US9177314B2 (en) 2006-08-14 2015-11-03 Chijioke Chukwuemeka UZO Method of making secure electronic payments using communications devices and biometric data
US20080109352A1 (en) 2006-09-12 2008-05-08 Daniel Csoka Systems and methods for transferring funds from a sending account
GB0621189D0 (en) 2006-10-25 2006-12-06 Payfont Ltd Secure authentication and payment system
US20080120231A1 (en) 2006-11-16 2008-05-22 Charles Megwa Money refillable credit card
EP2728528A1 (en) 2008-05-30 2014-05-07 MR.QR10 GmbH & Co. KG Server device for controlling a transaction, first entity and second entity
US8346210B2 (en) 2009-02-27 2013-01-01 Nokia Corporation Method and apparatus for managing services using bearer tags
US8364593B2 (en) 2009-06-30 2013-01-29 Visa International Service Association Intelligent authentication
US8479975B2 (en) 2010-02-11 2013-07-09 Cimbal Inc. System and method for using machine-readable indicia to provide additional information and offers to potential customers
US8380177B2 (en) 2010-04-09 2013-02-19 Paydiant, Inc. Mobile phone payment processing methods and systems
US9268545B2 (en) 2011-03-31 2016-02-23 Intel Corporation Connecting mobile devices, internet-connected hosts, and cloud services
US8412631B2 (en) 2011-05-13 2013-04-02 American Express Travel Related Services Company, Inc. Cloud enabled payment processing system and method
US20130159195A1 (en) 2011-12-16 2013-06-20 Rawllin International Inc. Authentication of devices
US20130226812A1 (en) 2012-02-24 2013-08-29 Mads Landrok Cloud proxy secured mobile payments
WO2013155536A1 (en) 2012-04-13 2013-10-17 Mastercard International Incorporated Systems, methods, and computer readable media for conducting a transaction using cloud based credentials

Patent Citations (38)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6282522B1 (en) * 1997-04-30 2001-08-28 Visa International Service Association Internet payment system using smart card
US6105008A (en) * 1997-10-16 2000-08-15 Visa International Service Association Internet loading system using smart card
US6298336B1 (en) * 1997-12-19 2001-10-02 Visa International Service Association Card activation at point of distribution
US20040083184A1 (en) * 1999-04-19 2004-04-29 First Data Corporation Anonymous card transactions
US20050131816A1 (en) * 1999-05-14 2005-06-16 Britto Mark J. Computer-based funds transfer system
US7908216B1 (en) * 1999-07-22 2011-03-15 Visa International Service Association Internet payment, authentication and loading system using virtual smart card
US20070053513A1 (en) * 1999-10-05 2007-03-08 Hoffberg Steven M Intelligent electronic appliance system and method
US20050044423A1 (en) * 1999-11-12 2005-02-24 Mellmer Joseph Andrew Managing digital identity information
US20040230610A1 (en) * 2000-01-05 2004-11-18 Gutierrez-Sheris Luis Eduardo Money-transfer techniques
US7203315B1 (en) * 2000-02-22 2007-04-10 Paul Owen Livesay Methods and apparatus for providing user anonymity in online transactions
US7827115B2 (en) * 2000-04-24 2010-11-02 Visa International Service Association Online payer authentication service
US7023315B2 (en) * 2000-04-24 2006-04-04 Chartered Semiconductor Manufacturing Ltd. High performance RF inductors and transformers using bonding technique
US7991701B2 (en) * 2000-04-24 2011-08-02 Visa International Service Association Online payer authentication service
US7111789B2 (en) * 2001-08-31 2006-09-26 Arcot Systems, Inc. Enhancements to multi-party authentication and other protocols
US20060189382A1 (en) * 2001-09-20 2006-08-24 Igt Method and apparatus for registering a mobile device with a gaming machine
US20030061167A1 (en) * 2001-09-21 2003-03-27 Mann William Frederick System for providing cardless payment
US20060259439A1 (en) * 2001-09-21 2006-11-16 Mann William F Iii System for providing cardless payment
US7707120B2 (en) * 2002-04-17 2010-04-27 Visa International Service Association Mobile account authentication service
US7349871B2 (en) * 2002-08-08 2008-03-25 Fujitsu Limited Methods for purchasing of goods and services
US7606560B2 (en) * 2002-08-08 2009-10-20 Fujitsu Limited Authentication services using mobile device
US8019691B2 (en) * 2002-09-10 2011-09-13 Visa International Service Association Profile and identity authentication service
US20040122685A1 (en) * 2002-12-20 2004-06-24 Daryl Bunce Verification system for facilitating transactions via communication networks, and associated method
US20040267665A1 (en) * 2003-06-24 2004-12-30 Lg Telecom, Ltd. System for providing banking services by use of mobile communication
US7007840B2 (en) * 2003-07-02 2006-03-07 Visa U.S.A., Inc. Managing activation of cardholders in a secure authentication program
US7653602B2 (en) * 2003-11-06 2010-01-26 Visa U.S.A. Inc. Centralized electronic commerce card transactions
US20060006224A1 (en) * 2004-07-06 2006-01-12 Visa International Service Association, A Delaware Corporation Money transfer service with authentication
US20070094150A1 (en) * 2005-10-11 2007-04-26 Philip Yuen Transaction authorization service
US20090037982A1 (en) * 2007-04-17 2009-02-05 David Wentker Method and system for authenticating a party to a transaction
US20100153272A1 (en) * 2007-04-17 2010-06-17 David Wentker Mobile device initiated transaction
US20100198728A1 (en) * 2008-09-22 2010-08-05 Christian Aabye Over the air management of payment application installed in mobile device
US20100094753A1 (en) * 2008-10-13 2010-04-15 Mark Carlson P2p transfer using prepaid card
US20100318783A1 (en) * 2009-06-10 2010-12-16 Ashwin Raj Service activation using algorithmically defined key
US20110035319A1 (en) * 2009-08-10 2011-02-10 Olivier Brand Systems and methods for enrolling users in a payment service
US20110055077A1 (en) * 2009-09-02 2011-03-03 Susan French Portable consumer device with funds transfer processing
US20110061051A1 (en) * 2009-09-10 2011-03-10 International Business Machines Corporation Dynamic Recommendation Framework for Information Technology Management
US20110178927A1 (en) * 2010-01-19 2011-07-21 Mike Lindelsee Verification mechanism
US20110178925A1 (en) * 2010-01-19 2011-07-21 Mike Lindelsee Token Based Transaction Authentication
US20110178926A1 (en) * 2010-01-19 2011-07-21 Mike Lindelsee Remote Variable Authentication Processing

Cited By (38)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20160034896A1 (en) * 2003-02-28 2016-02-04 Intercontinental Exchange Holdings, Inc. SYSTEMS AND METHODS FOR EXTENDING IDENTITY ATTRIBUTES AND AUTHENTICATION FACTORS IN AN ePAYMENT ADDRESS REGISTRY
US20170140374A1 (en) * 2003-02-28 2017-05-18 Intercontinental Exchange Holdings, Inc. SYSTEMS AND METHODS FOR EXTENDING IDENTITY ATTRIBUTES AND AUTHENTICATION FACTORS IN AN ePAYMENT ADDRESS REGISTRY
US20090037982A1 (en) * 2007-04-17 2009-02-05 David Wentker Method and system for authenticating a party to a transaction
US8918637B2 (en) 2007-04-17 2014-12-23 Visa U.S.A. Inc. Remote authentication system
US9160741B2 (en) 2007-04-17 2015-10-13 Visa U.S.A. Inc. Remote authentication system
US20100153272A1 (en) * 2007-04-17 2010-06-17 David Wentker Mobile device initiated transaction
US8631231B2 (en) 2007-04-17 2014-01-14 Visa U.S.A. Inc. Mobile device initiated transaction
US8156543B2 (en) 2007-04-17 2012-04-10 Visa U.S.A. Method and system for authenticating a party to a transaction
US20100312657A1 (en) * 2008-11-08 2010-12-09 Coulter Todd R System and method for using a rules module to process financial transaction data
US20100312700A1 (en) * 2008-11-08 2010-12-09 Coulter Todd R System and method for managing status of a payment instrument
US8099368B2 (en) 2008-11-08 2012-01-17 Fonwallet Transaction Solutions, Inc. Intermediary service and method for processing financial transaction data with mobile device confirmation
US20100312636A1 (en) * 2008-11-08 2010-12-09 Coulter Todd R System and method for applying stored value to a financial transaction
US9292852B2 (en) 2008-11-08 2016-03-22 FonWallet Transactions Solutions, Inc. System and method for applying stored value to a financial transaction
US8244643B2 (en) 2008-11-08 2012-08-14 Fonwallet Transaction Solutions, Inc. System and method for processing financial transaction data using an intermediary service
US8280776B2 (en) 2008-11-08 2012-10-02 Fon Wallet Transaction Solutions, Inc. System and method for using a rules module to process financial transaction data
US20100121726A1 (en) * 2008-11-08 2010-05-13 Coulter Todd R System and method for processing financial transaction data using an intermediary service
US8370265B2 (en) 2008-11-08 2013-02-05 Fonwallet Transaction Solutions, Inc. System and method for managing status of a payment instrument
US20100121767A1 (en) * 2008-11-08 2010-05-13 Coulter Todd R Intermediary service and method for processing financial transaction data with mobile device confirmation
US8317090B2 (en) 2009-03-27 2012-11-27 Mastercard International Incorporated Methods and systems for performing a financial transaction
US20100243728A1 (en) * 2009-03-27 2010-09-30 Mark Wiesman Methods and systems for performing a financial transaction
US20110055077A1 (en) * 2009-09-02 2011-03-03 Susan French Portable consumer device with funds transfer processing
US20110178925A1 (en) * 2010-01-19 2011-07-21 Mike Lindelsee Token Based Transaction Authentication
US8346666B2 (en) 2010-01-19 2013-01-01 Visa Intellectual Service Association Token based transaction authentication
US8924301B2 (en) 2010-01-19 2014-12-30 Visa International Service Association Token based transaction authentication
US9582799B2 (en) 2010-01-19 2017-02-28 Visa International Service Association Token based transaction authentication
US11410227B2 (en) 2010-06-29 2022-08-09 The Western Union Company Augmented reality money transfer
US10083482B2 (en) * 2010-06-29 2018-09-25 The Western Union Company Augmented reality money transfer
US20110320290A1 (en) * 2010-06-29 2011-12-29 The Western Union Company Augmented Reality Money Transfer
US10460319B2 (en) 2010-08-12 2019-10-29 Mastercard International Incorporated Multi-commerce channel wallet for authenticated transactions
AU2011289180B2 (en) * 2010-08-12 2015-05-28 Mastercard International, Inc. Multi-commerce channel wallet for authenticated transactions
US10769632B2 (en) 2010-08-12 2020-09-08 Mastercard International Incorporated Multi-commerce channel wallet for authenticated transactions
US20120166295A1 (en) * 2010-12-27 2012-06-28 The Western Union Company Secure contactless payment systems and methods
US9489669B2 (en) * 2010-12-27 2016-11-08 The Western Union Company Secure contactless payment systems and methods
US10552815B2 (en) 2010-12-27 2020-02-04 The Western Union Company Secure contactless payment systems and methods
US20130007849A1 (en) * 2011-05-26 2013-01-03 FonWallet Transaction Soulutions, Inc. Secure consumer authorization and automated consumer services using an intermediary service
WO2013020086A1 (en) * 2011-08-03 2013-02-07 Ebay Inc. Account access at point of sale
US20130282581A1 (en) * 2012-04-18 2013-10-24 Infosys Limited Mobile device-based cardless financial transactions
WO2014162296A1 (en) * 2013-04-04 2014-10-09 Visa International Service Association Method and system for conducting pre-authorized financial transactions

Also Published As

Publication number Publication date
JP6441270B2 (en) 2018-12-19
BRPI0810369B8 (en) 2019-05-28
JP5520813B2 (en) 2014-06-11
US8918637B2 (en) 2014-12-23
JP2019050029A (en) 2019-03-28
AU2008243004A1 (en) 2008-10-30
EP2149084B1 (en) 2019-03-27
CN101711383A (en) 2010-05-19
EP2149084A1 (en) 2010-02-03
JP2014160487A (en) 2014-09-04
KR101540417B1 (en) 2015-07-29
US20100153272A1 (en) 2010-06-17
CA2684614C (en) 2016-06-07
BRPI0810369B1 (en) 2019-04-24
KR20100016560A (en) 2010-02-12
EP2149084A4 (en) 2012-11-21
US20090037982A1 (en) 2009-02-05
US8156543B2 (en) 2012-04-10
JP6371564B2 (en) 2018-08-08
US20150143106A1 (en) 2015-05-21
US8631231B2 (en) 2014-01-14
US20130269003A1 (en) 2013-10-10
BRPI0810369A2 (en) 2014-10-29
AU2008243004B2 (en) 2013-06-27
JP2010525461A (en) 2010-07-22
EP3575951A1 (en) 2019-12-04
CN101711383B (en) 2016-06-08
WO2008131021A1 (en) 2008-10-30
US9160741B2 (en) 2015-10-13
CA2684614A1 (en) 2008-10-30
JP2017021816A (en) 2017-01-26

Similar Documents

Publication Publication Date Title
US9160741B2 (en) Remote authentication system
AU2010256666B2 (en) System and method for providing authentication for card not present transactions using mobile device
US8504475B2 (en) Systems and methods for enrolling users in a payment service
US7848980B2 (en) Mobile payment system and method using alias
US20130023294A1 (en) Message Routing Using Logically Independent Recipient Identifiers

Legal Events

Date Code Title Description
AS Assignment

Owner name: VISA U.S.A. INC., CALIFORNIA

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:WENTKER, DAVID;LINDELSEE, MICHAEL;BRAND, OLIVIER;AND OTHERS;REEL/FRAME:021239/0795;SIGNING DATES FROM 20080515 TO 20080709

STCB Information on status: application discontinuation

Free format text: ABANDONED -- FAILURE TO RESPOND TO AN OFFICE ACTION