US 2019/0197542 A1Published application

Systems and Methods for Use in Authenticating Users to Accounts in Connection With Network Transactions

AssigneeMastercard International Incorporated

InventorsAaron Kirby, Brandon Craig Bryson

Life of this patent

Estimating the term…

Loading patent…

Abstract

Systems and methods are provided for authenticating users to accounts in connection with network transactions. An exemplary method includes receiving an authentication request associated with a transaction where the authentication request includes a credential associated with the account, and transmitting an authentication assertion request to an entity associated with the account other than an access control server (ACS) associated with an issuer of the account. The method also includes providing an authentication confirmation, in response to the authentication request, when the entity provides an authentication assertion for the transaction based on a prior authentication of the user, whereby the transaction proceeds based on the authentication confirmation and without authentication specific to the transaction. The method further includes seeking authentication of the user, based on the authentication request, from the ACS, when the entity provides instruction to seek authentication of the user or fails to respond to the authentication assertion request.

Claims18

Dependent claims

A system for use in authenticating a user to an account in connection with a network transaction, the system comprising:

a directory server coupled in communication with a merchant server plug-in (MPI) associated with a merchant and in communication with an issuer of an account associated with the user;
wherein the directory server is configured to:
receive an authentication request, from the MPI, associated with a transaction between the user and the merchant, the authentication request including a payment account credential associated with the account;
determine whether the account associated with the payment account credential included in the authentication request is enrolled in an enhanced authentication service;
transmit an authentication assertion request to the issuer of the account, when the account is enrolled in the enhanced authentication service;
transmit an authentication confirmation to the MPI when an authentication assertion is received from the issuer in response to the authentication assertion request, thereby omitting an access control server (ACS) associated with said issuer from participating in the authentication confirmation, pursuant to the enhanced authentication service, the authentication assertion based on, at least in part, an authentication of the user before the authentication request is received;
and
seek authentication of the user, based on the authentication request, from the ACS, when no authentication assertion is received from the issuer in response to the authentication assertion request.

5 more elements

A method for use in authenticating a user associated with an account, in connection with a transaction involving the account, the method comprising:

receiving, at a directory server, an authentication request associated with a transaction from a merchant server plug-in (MPI), the authentication request including a payment account credential associated with the account;
transmitting, by the directory server, an authentication assertion request to an entity associated with the account other than an access control server (ACS) associated with an issuer of the account;
providing, by the directory server, an authentication confirmation to the MPI, in response to the authentication request, when the entity associated with the account provides an authentication assertion for the transaction based on a prior authentication of the user, whereby the transaction is permitted to proceed based on the authentication confirmation and without an authentication specific to the transaction;
and
seeking authentication of the user, based on the authentication request, from the ACS, when the entity provides an instruction to seek authentication of the user or fails to respond to the authentication assertion request.

2 more elements

Dependencies are inferred from the claim text.