Verification for payment transactions
AssigneeMastercard International Incorporated
InventorsMehdi Collinge, Patrik Smets
Life of this patent
Estimating the term…
Abstract
A method is described for providing user authentication and user consent for a transaction made with a payment device. A user authentication step is taken to verify that a user is entitled to use the payment device, and a user consent step is taken to verify that the user consents to the transaction. The user authentication step is discrete from the user consent step. A payment device adapted to perform this method is also described.
Claims13
A method for providing user authentication and user consent for a contactless transaction made with a mobile payment device, comprising:
- providing on the mobile payment device a digital wallet module, comprising:
- a communication module;
- a wallet processor;
- a consent risk manager module;
- and
- a payment application module;
- wherein the consent risk manager module is electronically coupled to the wallet processor and wherein the consent risk manager module further includes a decision module on the payment device, wherein the consent risk manager module provides authentication based on a consumer device cardholder verification method (CDCVM);
- a user authentication step, executed by the consent risk manager module, to verify that a user is entitled to use the payment device for a specific transaction;
- an implicit user consent step, determined by a decision module of the consent risk manager module, to verify that the user implicitly consents to the specific transaction, wherein:
- implicit consent is based on contextual information that is not directly related to providing explicit consent to the specific transaction, bypassing the need for any additional user action to indicate explicit consent,
- the user authentication step is discrete from the user consent step,
- the implicit user consent step is based on an order of events, and
- the events comprise correlating at least a plurality of user actions and behavioral information, transaction context information, payment device information, terminal data, environmental information and proprietary check data;
- outputting, from the decision module to the payment application module, implicit consent data indicating that implicit consent for the specific transaction has been determined based on an analysis of the events;
- combining as CDCVM data the implicit consent data and authentication data associated with the CDCVM;
- and
- communicating, via the communication module and using an EMV data structure, the combined implicit consent data and CDCVM authentication data to an Issuer of an account associated with the mobile payment device.
A mobile payment device comprising a digital wallet module, the digital wallet module comprising:
- a wallet processor electronically coupled to a consent risk manager module and a payment application module, and a communication module, wherein the consent risk manager module further includes a decision module on the payment device, wherein the consent risk manager module provides authentication based on a consumer device cardholder verification method (CDCVM), the digital wallet module programmed to perform the following steps to provide user authentication and user consent for a contactless transaction made with the mobile payment device, the steps comprising:
- a user authentication step, executed by the consent risk manager module to verify that a user is entitled to use the payment device for a specific transaction and;
- an implicit user consent step, determined by a decision module of the consent risk manager module, to verify that the user implicitly consents to the specific transaction, wherein:
- implicit consent is based on contextual information that is not directly related to providing explicit consent to the specific transaction, bypassing the need for any additional user action to indicate explicit consent,
- the user authentication step is discrete from the user consent step,
- the implicit user consent step is based on an order of events, and
- the events comprise correlating at least a plurality of user actions and behavioral information, transaction context information, payment device information, terminal data, environmental information and proprietary check data;
- an output from the decision module to the payment application module, implicit consent data indicating that implicit consent for the specific transaction has been determined based on an analysis of the events;
- a combination of the implicit consent data and authentication data associated with the CDCVM as CDCVM data;
- and
- communication, via the communication module and using an EMV data structure, the combined implicit consent data and CDCVM authentication data to an Issuer of an account associated with the mobile payment device.
Dependencies are inferred from the claim text.