Back to results
US 10,482,465 B2Granted
Method and system for hosted order page/silent order post plus fraud detection
AssigneeVisa International Service Association
InventorsLisa Anderson, Sonny Truong
Life of this patent
Estimating the term…
Abstract
Generally, embodiments of the invention are directed to methods, computer readable medium, servers and systems for enabling merchants to use hosted order pages (HOPs) and/or silent order posts (SOPs) and thereby avoid handling payment information and the costs associated Payment Card Industry (PCI) compliance, while at the same time utilize third-party fraud detection screens and thereby avoid costs associated with fraudulent transactions.
Claims18
A computer-implemented method, comprising performing by a merchant service computer system:
- obtaining, by a payment service executing on the merchant service computer system, order information from a merchant server via a post from a user device, the order information including information about an item in a purchase transaction involving a user and a merchant;
- receiving, by the payment service, a merchant-generated one-way hash of the order information as part of the post from the user device, wherein the merchant-generated one-way hash is generated using a hashing technique specified by the merchant service computer system;
- generating, by the payment service, a one-way hash of the order information using the order information and the hashing technique;
- comparing, by the payment service, the received merchant-generated one-way hash of the order information to the generated one-way hash of the order information to verify that the order information is authentic;
- upon verifying that the order information is authentic, providing, by the payment service, a hosted order page on behalf of the merchant, wherein the hosted order page is presented to the user via the user device;
- obtaining, by the payment service via the hosted order page from the user device, payment information from the user on behalf of the merchant;
- transmitting, from the payment service to fraud detection services, a transmission including both the order information obtained from the merchant server and the payment information obtained from the user device;
- receiving, at the payment service from the fraud detection services, an approve or deny indication indicating whether the purchase transaction is approved or denied based on a fraud risk for the purchase transaction determined using the payment information of the user and the order information;
- if the purchase transaction is denied, displaying, by the payment service, a transaction denied page on the hosted order page;
- and
- if the purchase transaction is approved, sending, by the payment service, the purchase transaction along with the payment information to a payment processing server.
8 more elements
A system, comprising:
- a processor;
- and
- a memory device storing instructions for implementing a payment service executing on a merchant service computer system, wherein the instructions, when executed by the processor, cause the processor to:
- obtain order information from a merchant server via a post from a user device, the order information including information about an item in a purchase transaction involving a user and a merchant;
- receive a merchant-generated one-way hash of the order information as part of the post from the user device, wherein the merchant-generated one-way hash is generated using a hashing technique specified by the merchant service computer system;
- generate a one-way hash of the order information using the order information and the hashing technique;
- compare the received merchant-generated one-way hash of the order information to the generated one-way hash of the order information to verify that the order information is authentic;
- upon verifying that the order information is authentic, provide a hosted order page on behalf of the merchant, wherein the hosted order page is presented to the user via the user device;
- obtain, via the hosted order page from the user device, payment information from the user on behalf of the merchant;
- transmit, to fraud detection services, a transmission including both the order information obtained from the merchant server and the payment information obtained from the user device;
- receive, from the fraud detection services, an approve or deny indication indicating whether the purchase transaction is approved or denied based on a fraud risk for the purchase transaction determined using the payment information of the user and the order information;
- if the purchase transaction is denied, display a transaction denied page on the hosted order page;
- and
- if the purchase transaction is approved, send the purchase transaction along with the payment information to a payment processing server.
11 more elements
Dependencies are inferred from the claim text.