Back to results
US 12,002,037 B2Granted
Consumer authentication system and method
AssigneeVisa U.S.A. Inc.
InventorsAyman Hammad, Patrick Faith, Mark Carlson
Life of this patent
Estimating the term…
Abstract
A method for authenticating a consumer. The method includes receiving an authorization request message associated with a consumer conducting a transaction with a portable consumer device. A challenge message is sent to the consumer, where the challenge message is dynamic or semi-dynamic. A challenge response message is received from the consumer, and an authorization response message is sent to the consumer. The authorization response message indicates whether or not the transaction is authorized.
Claims20
A method comprising:
- receiving, by a server computer from an access device associated with a merchant, an authorization request message relating to a transaction conducted using a portable consumer device associated with a consumer;
- determining, by the server computer, whether a challenge message is needed by determining whether a series of features relating to the transaction, the consumer, and the merchant exceed predetermined ranges;
- responsive to determining that the challenge message is needed, generating, by the server computer, a challenge message that includes content that is dynamic and is based on a credit card or debit card transaction history specific to the consumer;
- sending, by the server computer, the challenge message to a mobile device of the consumer;
- receiving, by the server computer, a challenge response message from the access device, the challenge response message responsive to the challenge message with content that is dynamic and that is based upon the transaction history of the consumer;
- validating, by the server computer, the challenge response message by determining that the content of the challenge response message corresponds to the challenge message;
- and
- sending, by the server computer, an authorization response message to the access device or to the consumer, wherein the authorization response message indicates whether or not the transaction is authorized based on whether the challenge response message is validated.
5 more elements
A server computer comprising:
- a processor;
- and
- a computer readable medium coupled to the processor, the computer readable medium comprising code, executable by the processor, to implement a method comprising:
- receiving, from an access device associated with a merchant, an authorization request message relating to a transaction conducted using a portable consumer device associated with a consumer;
- determining whether a challenge message is needed by determining whether a series of features relating to the transaction, the consumer, and the merchant exceed predetermined ranges;
- responsive to determining that the challenge message is needed, generating a challenge message that includes content that is dynamic and is based on a credit card or debit card transaction history specific to the consumer;
- sending the challenge message to a mobile device of the consumer;
- receiving a challenge response message from the access device, the challenge response message responsive to the challenge message with content that is dynamic and that is based upon the transaction history of the consumer;
- validating the challenge response message by determining that the content of the challenge response message corresponds to the challenge message;
- and
- sending an authorization response message to the access device or to the consumer, wherein the authorization response message indicates whether or not the transaction is authorized based on whether the challenge response message is validated.
8 more elements
Dependencies are inferred from the claim text.