Authentication platform for pin debit issuers
AssigneeCardinalCommerce Corporation
InventorPaul Turgeon
Life of this patent
Estimating the term…
Abstract
A system and method processes a transaction between a merchant and a consumer. Data indicate of the security of a digital processing device being used by the consumer to carry out the transaction with the merchant is received. A determination as to whether the digital processing device is secure is made using the received data. In response to determining the digital processing device is insecure, the transaction is aborted. In response to determining the digital processing device is in secure, the transaction is processed by at least one of authenticating the consumer, authorizing the transaction using a payment processing supply chain, and capturing funds for the transaction using a payment processing supply chain.
Claims20
A system for processing a transaction between a merchant and a consumer, said system comprising:
- one or more processors of a third party programmed to:
- receive data indicate of the security of a digital processing device being used by the consumer to carry out the transaction with the merchant;
- determine whether the digital processing device is secure using the received data;
- in response to determining the digital processing device is in insecure, abort the transaction;
- and
- in response to determining the digital processing device is in secure, process the transaction by at least one of authenticating the consumer, authorizing the transaction using a payment processing supply chain, and capturing funds for the transaction using a payment processing supply chain.
The system according to claim 4, wherein the rules include at least one of:
- a rule decreasing the score if a man in the middle attack is detected or malware is detected;
- a rule increasing the score if purchase amount of the transaction is less than a threshold;
- a rule decreasing the score if the consumer is located outside a known region of the consumer;
- and
- a rule decreasing the score if a unique signature of the digital processing device is unrecognized among a list of registered digital processing devices for the consumer.
The system according to claim 8, wherein the one or more processors are further programmed to:
- receive a debit authorization response message from the payment processor;
- translate the debit authorization response message to a credit authorization response message;
- and,
- transmit the credit authorization response message to the merchant.
The system according to claim 10, wherein the data regarding the digital processing device includes data regarding the selected credentialing application.
A method for processing a transaction between a merchant and a consumer, said method comprising:
- receiving data indicate of the security of a digital processing device being used by the consumer to carry out the transaction with the merchant;
- determining whether the digital processing device is secure using the received data;
- in response to determining the digital processing device is in insecure, aborting the transaction;
- and
- in response to determining the digital processing device is in secure, processing the transaction by at least one of authenticating the consumer, authorizing the transaction using a payment processing supply chain, and capturing funds for the transaction using the payment processing supply chain;
- wherein the method is performed by one or more processors of a third party.
A system for processing a transaction between a merchant and a consumer, said system comprising:
- one or more processors of a third party programmed to:
- receive data indicate of the security of a digital processing device being used by the consumer to carry out the transaction with the merchant;
- receive at least one of payment data and authentication data to process the transaction in parallel with the data indicate of the security of the digital processing device;
- determine whether the digital processing device is secure using the received data;
- in response to determining the digital processing device is in insecure, abort the transaction;
- and
- in response to determining the digital processing device is in secure, process the transaction by:
- collecting authentication data for a debit card being used to complete the transaction from the consumer;
- translating between a credit authorization message for the transaction to a debit authorization message using the authentication data, the translating including combining data in the credit authorization message with the collected authentication data to create the debit authorization message;
- and,
- transmitting the debit authorization message to a payment processor.
Dependencies are inferred from the claim text.