System, method, and computer program product to ensure data integrity for conducting a payment transaction

A system for conducting a payment transaction to ensure data integrity of the payment transaction, comprising:

• at least one processor of a payment gateway system, wherein the at least one processor is programmed or configured to:
• transmit a public key of a private/public key pair of the payment gateway system to a transaction service provider system;
• receive data associated with an electronic funds transfer at a point-of-sale (POS) device of a merchant system;
• generate a transaction authorization request message, wherein the transaction authorization request message comprises a first payload associated with an electronic funds transfer at the POS device and a second payload associated with an acquirer system, wherein, when generating the transaction authorization request message, the at least one processor is programmed or configured to:
• generate the first payload associated with the electronic funds transfer at the POS device based on the data associated with the electronic funds transfer at the POS device;
• generate the second payload associated with the acquirer system;
• generate a digital signature for the first payload using a private key of a payment gateway system;
• and
• insert the first payload associated with the electronic funds transfer at the POS device and the digital signature for the first payload into the second payload associated with the acquirer system;
• transmit the transaction authorization request message to the acquirer system, wherein the transaction authorization request message causes the acquirer system to transmit the transaction authorization request message to the transaction service provider system without modifying the transaction authorization request message;
• and
• receive a transaction authorization response messages;
• generate a certification message, wherein the certification message comprises a payload formatted according to a specification of the transaction service provider system;
• and
• transmit the certification message to the transaction service provider system without transmitting the certification message to the acquirer system.

A computer program product for conducting a payment transaction to ensure data integrity of the payment transaction, comprising at least one non-transitory computer-readable medium comprising one or more instructions that, when executed by at least one processor of a payment gateway system, cause the at least one processor of the payment gateway system to:

• transmit a public key of a private/public key pair of the payment gateway system to a transaction service provider system;
• receive data associated with an electronic funds transfer at a point-of-sale (POS) device of a merchant system;
• generate a transaction authorization request message, wherein the transaction authorization request message comprises a first payload associated with an electronic funds transfer at the POS device, and a second payload associated with an acquirer system, wherein the one or more instructions that cause the at least one processor to generate the transaction authorization request message, cause the at least one processor to:
• generate the first payload associated with the electronic funds transfer at the POS device based on the data associated with the electronic funds transfer at the POS device;
• generate a digital signature for the first payload using a private key of a payment gateway system;
• and
• insert the first payload associated with the electronic funds transfer at the POS device and the digital signature for the first payload into the second payload associated with the acquirer system;
• transmit the transaction authorization request message to the acquirer system, wherein the transaction authorization request message causes the acquirer system to transmit the transaction authorization request message to the transaction service provider system without modifying the transaction authorization request message;
• and
• receive a transaction authorization response message from the transaction service provider system;
• generate a certification message, wherein the certification message comprises a payload formatted according to a specification of the transaction service provider system;
• and
• transmit the certification message to the transaction service provider system without transmitting the certification message to an acquirer system.