# US 10,872,343 B2 · Secure and efficient payment processing system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,872,343 B2 - Document ID: US10872343B2 - Status: Granted - Kind: B2 - Application number: 15/942,780 - Filed: 2018-04-02 - Published: 2018-08-16 - Granted: 2020-12-22 - Earliest claimed: 2007-10-15 - Assignees: CardinalCommerce Corporation - Applicants: CardinalCommerce Corporation - Inventors: Michael A. Keresman, III; Chandra S. Balasubramanian; Francis M. Sherwin - Web page: https://patentgrep.com/patent/US10872343B2 ## CPC - G06Q 20/409: {Device specific authentication in transaction processing} - G06Q 20/04: Payment circuits - G06Q 20/10: specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems - G06Q 20/385: {using an alias or single-use codes} - G06Q 20/40: Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists - G06Q 20/4014: {Identity check for transactions} - G06Q 20/4037: {Remote solvency checks} - G06Q 20/405: {Establishing or using transaction specific rules} - G07F 7/08: by coded identity card or credit card {or other personal identification means (without personal verification means G07F7/02)} - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00}) ## Abstract A method is provided for facilitating session-based authentication for a plurality of e-commerce transactions for an account holder. The method includes registering a plurality of account holders, receiving, from an account holder of the plurality of account holders, user input setting the account privilege information for an account corresponding to the account holder, and receiving a transaction request for an e-commerce transaction between the account holder and a merchant, the transaction request comprising transaction details including a transaction value and a transaction time, and, in response to the transaction request, performing, with at least one computer system, an authentication process. The method further includes processing the e-commerce transaction in response to completing the authentication process, receiving at least one subsequent transaction request for at least one subsequent e-commerce transaction, and determining to bypass the authentication process for the at least one subsequent transaction. ## Claims ### Claim 1 A method for facilitating session-based authentication for a plurality of e-commerce transactions for an account holder, comprising: registering, with at least one computer system, a plurality of account holders, each account holder of the plurality of account holders corresponding to an account holder record containing account privilege information; receiving, from an account holder of the plurality of account holders, user input setting the account privilege information for an account corresponding to the account holder; receiving a transaction request for an e-commerce transaction between the account holder and a merchant, the transaction request comprising transaction details including a transaction value and a transaction time; in response to the transaction request, performing, with at least one computer system, an authentication process comprising: (i) prompting the account holder to input authentication data in response to the transaction request; (ii) comparing the inputted authentication data to the account holder record corresponding to the account holder; and (iii) authenticating the account holder in response to matching the inputted authentication data to the account holder record corresponding to the account holder; processing the e-commerce transaction in response to completing the authentication process; receiving at least one subsequent transaction request for at least one subsequent e-commerce transaction between the account holder and the merchant or at least one other merchant, the at least one subsequent transaction request comprising transaction details including a transaction value and a transaction time; determining to bypass the authentication process for the at least one subsequent transaction based on the transaction value of the e-commerce transaction, the transaction time of the e-commerce transaction, the transaction value of the at least one subsequent e-commerce transaction, and the transaction time of the at least one subsequent e-commerce transaction; and in response to determining to bypass the authentication process, processing the at least one subsequent e-commerce transaction without requiring the authentication process to be completed again. ### Claim 2 (depends on 1) The method of claim 1, further comprising: receiving at least one additional transaction request for at least one additional e-commerce transaction between the account holder and the merchant or at least one other merchant, the at least one additional transaction request received after the at least one subsequent transaction request, the at least one additional transaction request comprising transaction details including a transaction value and a transaction time; determining to perform the authentication process for the at least one additional transaction based on the transaction value of the at least one additional e-commerce transaction, the transaction time of the at least one additional e-commerce transaction, the transaction value of the at least one subsequent e-commerce transaction, and the transaction time of the at least one subsequent e-commerce transaction; performing the authentication process for the at least one additional transaction; and processing the at least one additional transaction in response to completing the authentication process. ### Claim 3 (depends on 1) The method of claim 1, wherein determining to bypass the authentication process for the at least one subsequent transaction comprises comparing a duration of a time window extending between the transaction time of the e-commerce transaction and the transaction time of the at least one subsequent e-commerce transaction to a total transaction value including the transaction value of the e-commerce transaction and the transaction value of the at least one subsequent e-commerce transaction. ### Claim 4 (depends on 1) The method of claim 1, wherein determining to bypass the authentication process for the at least one subsequent transaction is based on the account privilege information set by the account holder. ### Claim 5 (depends on 1) The method of claim 1, wherein the account privilege information comprises a designated authentication window for authenticating multiple transactions with a single authentication process. ### Claim 6 (depends on 1) The method of claim 1, wherein determining to bypass the authentication process for the at least one subsequent transaction comprises determining that a dollar amount was not used up by the transaction value of the e-commerce transaction. ### Claim 7 (depends on 1) The method of claim 1, wherein determining to bypass the authentication process for the at least one subsequent transaction is based on: (i) a time window extending between the transaction time of the e-commerce transaction and the transaction time of the at least one subsequent e-commerce transaction and (ii) a total transaction value including the transaction value of the e-commerce transaction and the transaction value of the at least one subsequent e-commerce transaction. ### Claim 8 A system for facilitating session-based authentication for a plurality of e-commerce transactions for an account holder, comprising at least one processor configured to: register a plurality of account holders, each account holder of the plurality of account holders corresponding to an account holder record containing account privilege information; receive, from an account holder of the plurality of account holders, user input setting the account privilege information for an account corresponding to the account holder; receive a transaction request for an e-commerce transaction between the account holder and a merchant, the transaction request comprising transaction details including a transaction value and a transaction time; in response to the transaction request, perform an authentication process comprising: (i) prompting the account holder to input authentication data in response to the transaction request; (ii) comparing the inputted authentication data to the account holder record corresponding to the account holder; and (iii) authenticating the account holder in response to matching the inputted authentication data to the account holder record corresponding to the account holder; process the e-commerce transaction in response to completing the authentication process; receive at least one subsequent transaction request for at least one subsequent e-commerce transaction between the account holder and the merchant or at least one other merchant, the at least one subsequent transaction request comprising transaction details including a transaction value and a transaction time; determine to bypass the authentication process for the at least one subsequent transaction based on the transaction value of the e-commerce transaction, the transaction time of the e-commerce transaction, the transaction value of the at least one subsequent e-commerce transaction, and the transaction time of the at least one subsequent e-commerce transaction; and in response to determining to bypass the authentication process, process the at least one subsequent e-commerce transaction without requiring the authentication process to be completed again. ### Claim 9 (depends on 8) The system of claim 8, wherein the at least one processor is further configured to: receive at least one additional transaction request for at least one additional e-commerce transaction between the account holder and the merchant or at least one other merchant, the at least one additional transaction request received after the at least one subsequent transaction request, the at least one additional transaction request comprising transaction details including a transaction value and a transaction time; determine to perform the authentication process for the at least one additional transaction based on the transaction value of the at least one additional e-commerce transaction, the transaction time of the at least one additional e-commerce transaction, the transaction value of the at least one subsequent e-commerce transaction, and the transaction time of the at least one subsequent e-commerce transaction; perform the authentication process for the at least one additional transaction; and process the at least one additional transaction in response to completing the authentication process. ### Claim 10 (depends on 8) The system of claim 8, wherein determining to bypass the authentication process for the at least one subsequent transaction comprises comparing a duration of a time window extending between the transaction time of the e-commerce transaction and the transaction time of the at least one subsequent e-commerce transaction to a total transaction value including the transaction value of the e-commerce transaction and the transaction value of the at least one subsequent e-commerce transaction. ### Claim 11 (depends on 8) The system of claim 8, wherein determining to bypass the authentication process for the at least one subsequent transaction is based on the account privilege information set by the account holder. ### Claim 12 (depends on 8) The system of claim 8, wherein the account privilege information comprises a designated authentication window for authenticating multiple transactions with a single authentication process. ### Claim 13 (depends on 8) The system of claim 8, wherein determining to bypass the authentication process for the at least one subsequent transaction comprises determining that a dollar amount was not used up by the transaction value of the e-commerce transaction. ### Claim 14 A method for facilitating session-based authentication for a plurality of e-commerce transactions for an account holder, comprising: registering, with at least one computer system, a plurality of account holders, each account holder of the plurality of account holders corresponding to an account holder record containing account privilege information; receiving, from an account holder of the plurality of account holders, user input setting the account privilege information for an account corresponding to the account holder; receiving a transaction request for an e-commerce transaction between the account holder and a merchant, the transaction request comprising transaction details including a transaction value and a transaction time; in response to the transaction request, performing, with at least one computer system, an authentication process comprising: (i) prompting the account holder to input authentication data in response to the transaction request; (ii) comparing the inputted authentication data to the account holder record corresponding to the account holder; and (iii) authenticating the account holder in response to matching the inputted authentication data to the account holder record corresponding to the account holder; processing the e-commerce transaction in response to completing the authentication process; receiving at least one subsequent transaction request for at least one subsequent e-commerce transaction between the account holder and the merchant or at least one other merchant, the at least one subsequent transaction request comprising transaction details including a transaction value and a transaction time; determining to bypass the authentication process for the at least one subsequent transaction based on account privilege information set by the account holder and at least one of the following parameters: the transaction value of the e-commerce transaction, the transaction time of the e-commerce transaction, the transaction value of the at least one subsequent e-commerce transaction, the transaction time of the at least one subsequent e-commerce transaction, or any combination thereof; and in response to determining to bypass the authentication process, processing the at least one subsequent e-commerce transaction without requiring the authentication process to be completed again. ### Claim 15 (depends on 14) The method of claim 14, further comprising: receiving at least one additional transaction request for at least one additional e-commerce transaction between the account holder and the merchant or at least one other merchant, the at least one additional transaction request received after the at least one subsequent transaction request, the at least one additional transaction request comprising transaction details including a transaction value and a transaction time; determining to perform the authentication process for the at least one additional transaction based on the transaction value of the at least one additional e-commerce transaction, the transaction time of the at least one additional e-commerce transaction, the transaction value of the at least one subsequent e-commerce transaction, and the transaction time of the at least one subsequent e-commerce transaction; performing the authentication process for the at least one additional transaction; and processing the at least one additional transaction in response to completing the authentication process. ### Claim 16 (depends on 14) The method of claim 14, wherein determining to bypass the authentication process for the at least one subsequent transaction comprises comparing a duration of a time window extending between the transaction time of the e-commerce transaction and the transaction time of the at least one subsequent e-commerce transaction to a total transaction value including the transaction value of the e-commerce transaction and the transaction value of the at least one subsequent e-commerce transaction. ### Claim 17 (depends on 14) The method of claim 14, wherein the account privilege information comprises a designated authentication window for authenticating multiple transactions with a single authentication process. ### Claim 18 (depends on 14) The method of claim 14, wherein determining to bypass the authentication process for the at least one subsequent transaction comprises determining that a dollar amount was not used up by the transaction value of the e-commerce transaction. ### Claim 19 (depends on 14) The method of claim 14, wherein determining to bypass the authentication process for the at least one subsequent transaction is based on: (i) a time window extending between the transaction time of the e-commerce transaction and the transaction time of the at least one subsequent e-commerce transaction and (ii) a total transaction value including the transaction value of the e-commerce transaction and the transaction value of the at least one subsequent e-commerce transaction.