Method and system for multi-modal transaction authentication
AssigneeStripe, Inc.
InventorSteven V. Bacastow
Life of this patent
Estimating the term…
Abstract
This invention relates to systems and methods for authenticating transactions using a mobile device based primarily on the introduction of a layer of middleware and wherein the Payment Networks, Merchants, Issuing Banks, Credit Reporting Bureaus, Insurance Companies, Healthcare Providers may customize the implementation of the services based on individual strategy and consumer preferences.
Claims21
1-23. (canceled)
A method for processing a secure mobile payment transaction conducted at a location of a merchant comprising:
- receiving, from a point-of-sale device at the location of a merchant, mobile payment data that is associated with the secure mobile payment transaction, which is initiated after a registration event, and comprising a payment account number transmitted from a registered mobile device of a consumer;
- transmitting, from a mobile wallet system to the registered mobile device, an approval request;
- receiving, at the mobile wallet system from the registered mobile device of the consumer, an indication indicating the consumer has approved the secure mobile payment transaction;
- analyzing, by the mobile wallet system, the mobile payment data received from the point-of-sale device to identify the mobile payment data as comprising the payment account number;
- upon identifying the mobile payment data as comprising the payment account number,
- receiving, at a secure payment computing device, the payment account number associated with the secure mobile payment transaction;
- determining, by the secure payment computing, device, mobile device information associated with the payment account number;
- sending an authentication request from the secure payment computing device to the registered mobile device;
- receiving, at the secure payment computing device from the registered mobile device, an authentication response, the authentication response comprising biometric-related information indicating that a registered user has approved the payment, transaction. using at least one or more fingerprint biometric factors corresponding to a fingerprint captured contemporaneously when the registered user touches a position on a user interface of the registered mobile device, the fingerprint biometric factors received by a biometric signal handler of the registered mobile device and validated on the mobile device by comparing the one or more fingerprint biometric factors to previously registered fingerprint biometric factors stored on a file system or secure element of the mobile device, wherein a first fingerprint biometric factor is captured when the registered user's first finger touches a position of the user interface;
- authenticating the transaction based on biometric-related information received at the secure payment computing device matching previously stored information at the secure payment computing device;
- in response to authenticating the transaction, transmitting at least a portion of the mobile payment data to a secure payment network for processing;
- and
- after transmitting the mobile payment data to the secure payment network for processing, transmitting, by the mobile wallet system, a payment confirmation to the point-of-sale device at the location of the merchant.
An e-commerce environment for processing a secure mobile payment transaction conducted at a oration of a merchant comprising:
- a secure payment computing device having
- a web server having a network interface for receiving and processing information received from Internet sources in connection with the registration event;
- a transaction gateway for receiving and processing payment transactions;
- a messaging server having a network interface for communicating with a registered mobile device that became registered as part of the registration event, and
- a database for storing settings from one or more of a merchant, an issuer, a payment network, a payment acquirer, and an e-commerce gateway;
- a mobile wallet system communicably coupled to the secure payment computing device communicably coupled to the mobile wallet system, wherein the mobile wallet system is operable to
- receive, from a point-of-sale device at the location of a merchant, mobile payment data that is associated with the secure mobile payment transaction, which is initiated after a registration event, wherein the mobile payment data comprises a payment account number transmitted from a registered mobile device of a consumer,
- transmit, to the registered mobile device, an approval request,
- receive, from the registered mobile device of the consumer, an indication indicating the consumer has approved the secure mobile payment transaction, and
- analyze the mobile payment data received from the point-of-sale device to identify the mobile payment data as comprising the payment account number;
- upon identifying the mobile payment data as comprising the payment account number, the secure payment computing device is operable to:
- receive the payment account number associated with the secure mobile payment transaction,
- determine mobile device information associated with the payment account number,
- send an authentication request to the registered mobile device, and
- receive, from the registered mobile device, an authentication response, the authentication response comprising biometric-related information indicating that a registered user has approved the payment transaction using at least one or more fingerprint biometric factors corresponding to a fingerprint captured contemporaneously when the registered user touches a position on a user interface of the registered mobile device, the fingerprint biometric factors received by a biometric signal handler of the registered mobile device and validated on the mobile device by comparing the one or more fingerprint biometric factors to previously registered fingerprint biometric factors stored on a file system or secure element of the mobile device, wherein a first fingerprint biometric factor is captured when the registered user's first finger touches a position of the user interface,
- authenticate the transaction based on biometric-related information received at the secure payment computing device matching previously stored information at the secure payment computing device,
- in response to authenticating the transaction, transmit at least a portion of the mobile payment data to a secure payment network for processing;
- and
- wherein after transmitting the mobile payment data to the secure payment network for processing, the mobile wallet system is operable to transmit a payment confirmation to the point-of-sale device at the location of the merchant.
Dependencies are inferred from the claim text.