Payment authentication system for electronic commerce transactions

A method comprising:

• providing, by a digital payment processing system, a session identifier (ID) and a URL of an iFrame to an e-commerce host server over a secure communication link for forwarding to a computing device responsive to the computing device initiating an e-commerce transaction on an information resource, the URL associated with the session ID;
• providing, by the digital payment processing system, upon validating a first instance of the session ID, the iFrame to the computing device for display thereon, the iFrame for decoupling processing of user payment data from the information resource and restricting access to the user payment data to the iFrame via executable instructions which cause the computing device to identify, via a user interface of the iFrame, a first selected information comprising one of a billing information, a shipping information or a zip code;
• receiving, by the digital processing system, from the e-commerce host server, a second selected information comprising a second one of the billing information, the shipping information or the zip code;
• storing, by the digital processing system, in association with the session ID and the URL, the first selected information and the second selected information;
• receiving, by the digital payment processing system, user payment data and a second instance of the session ID from the iFrame;
• providing, by the digital payment processing system, upon validating the second instance of the session ID, a one-time token (OTT) to the computing device for use to initiate payment pre-authorization, the OTT associated with the session ID;
• verifying, by the digital processing system, consistency of selected data associated with the session ID based on the first selected information and the second selected information;
• validating, by the digital payment processing system, upon receiving a payment pre-authorization request from the e-commerce host server including an instance of the OTT and responsive to the verified consistency of the selected data, the instance of the OTT;
• obtaining, by the digital payment processing system, upon validating the instance of the OTT, payment pre-authorization from a payment provider system using the user payment data;
• and
• providing, by the digital payment processing system, an indication of the payment pre-authorization to the e-commerce host server for forwarding to the computing device, the payment pre-authorization allowing the computing device to finalize the e-commerce transaction.

A non-transitory computer-readable medium including computer code instructions stored thereon, the computer code instructions when execute by one or more processors cause the one or more processors to:

• provide a session identifier (ID) and a URL of an iFrame to a e-commerce host server for forwarding to a computing device responsive to the computing device initiating a e-commerce transaction on an information resource, the URL associated with the session ID;
• provide, upon validating a first instance of the session ID, the iFrame to a client device for display thereon, the iFrame for decoupling processing of user payment data from the information resource and restricting access to the user payment data to the iFrame via executable instructions which cause the computing device to identify, via a user interface of the iFrame, a first selected information comprising one of a billing information, a shipping information or a zip code;
• receive, from the e-commerce host server, a second selected information comprising a second one of the billing information, the shipping information or the zip code;
• store, in association with the session ID and the URL, the first selected information and the second selected information;
• receive user payment data and a second instance of the session ID from the iFrame;
• provide, upon validating the second instance of the session ID, a one-time token (OTT) to the computing device for use to initiate payment pre-authorization, the OTT associated with the session ID;
• verify consistency of selected data associated with the session ID based on the first selected information and the second selected information;
• validate, upon receiving a payment pre-authorization request from the e-commerce host server including an instance of the OTT and responsive to the verified consistency of the selected data, the instance of the OTT;
• obtain, upon validating the instance of the OTT, payment pre-authorization from a payment processor using the user payment data;
• and
• provide an indication of the payment pre-authorization to the e-commerce host server for forwarding to the computing device, the payment pre-authorization allowing the computing device to finalize the e-commerce transaction.