Systems and methods for intelligent step-up for access control systems
AssigneeMastercard International Incorporated
InventorMohamed Abouelenin
Life of this patent
Estimating the term…
Abstract
Some embodiments may provide systems, methods and computer program code to method to facilitate an interaction involving a user which include determining that a user authentication is required to complete the interaction, identifying at least a first verified device associated with the user, and transmitting an authentication message to the at least first verified device.
Claims15
A method for operating an authentication service to authenticate a user in a transaction involving the user and a merchant, the method comprising:
- receiving, by the authentication service, an authorization request, the authorization request including information identifying the merchant, information identifying the transaction and information identifying a selected payment device;
- determining that an issuer of the payment device is a registered participant of the authentication service;
- identifying, based on the information identifying the selected payment device, a list of registered authentication devices associated with the user;
- generating, a list of registered authentication devices for display to the user;
- receiving a selection of a registered authentication device from the user;
- identifying, for each registered authentication device, a payment token;
- identifying, for each payment token, a payment application identifier;
- transmitting a request for authentication from the user using the selected registered authentication device;
- wherein transmitting the request for authentication from the user using the selected registered authentication device further includes transmitting the information identifying the transaction to the payment application identified by the payment application identifier of the selected registered authentication device;
- receiving an authentication response from the selected registered authentication device;
- and
- causing the information identifying the transaction to be displayed to the user on the selected registered authentication device.
An authentication system, comprising:
- a memory storing data associated with payment accounts;
- and
- a processor configured to
- receive an authorization request, the authorization request including information identifying a merchant, information identifying a transaction and information identifying a payment device selected by a user;
- determine that an issuer of the payment device is a registered participant in a service provided by the authentication system;
- identify, based on the information identifying the selected payment device, a list of registered authentication devices associated with the user;
- generate, a list of registered authentication devices for display to the user;
- receive a selection of a registered authentication device from the user;
- identify, for each registered authentication device, a payment token;
- identify, for each payment token, a payment application identifier;
- transmit a request for authentication from the user using the selected registered authentication device;
- wherein transmitting the request further includes transmitting the information identifying the transaction to the payment application identified by the payment application identifier of the selected registered authentication device;
- receive an authentication response from the selected registered authentication device;
- and
- cause the information identifying the transaction to be displayed to the user on the selected registered authentication device.
A non-transitory, computer-readable medium storing instructions that, when executed by a processor, cause the processor to:
- receive an authorization request, the authorization request including information identifying a merchant, information identifying a transaction and information identifying a payment device selected by a user;
- determine that an issuer of the payment device is a registered participant in a service provided by the authentication system;
- identify, based on the information identifying the selected payment device, a list of registered authentication devices associated with the user;
- generate, a list of registered authentication devices for display to the user;
- receive a selection of a registered authentication device from the user;
- identify, for each registered authentication device, a payment token;
- identify, for each payment token, a payment application identifier;
- transmit a request for authentication from the user using the selected registered authentication device;
- wherein transmitting the request further includes transmitting the information identifying the transaction to the payment application identified by the payment application identifier of the selected registered authentication device;
- receive an authentication response from the selected registered authentication device;
- and
- cause the information identifying the transaction to be displayed to the user on the selected registered authentication device.
Dependencies are inferred from the claim text.