Methods and systems for authenticating an identity of a payer in a financial transaction
AssigneeMastercard International Incorporated
InventorsTodd N. Telle, Sue Ellen Moskowitz
Life of this patent
Estimating the term…
Abstract
A system and computer-based method for using a one-time password (OTP) to authenticate an identity of a cardholder in a financial transaction initiated by the cardholder with a merchant via a first communication medium. A one-time password is generated at an interchange computer system and transmitted to the cardholder via a second communication medium. The cardholder is prompted to enter access credential information, including the one-time password. When the entered access credential information is verified (e.g., the entered one time password is equal to the generated one-time password), a successful authentication is indicated to the merchant.
Claims20
A method for authenticating an identity of a cardholder in a financial transaction initiated by the cardholder with a merchant via a first communication medium, said method comprising:
- receiving a purchase authentication request message from the merchant at an interchange computer system, the purchase authentication request message associated with the cardholder and the financial transaction;
- generating a one-time password for the financial transaction at the interchange computer system;
- transmitting the one-time password to the cardholder via a second communication medium different from the first communication medium;
- prompting the cardholder, by the interchange computer system, to enter the one-time password;
- receiving, by the interchange computer system, an entered one-time password from the cardholder via the second communication medium;
- determining that the entered one-time password is equal to the generated one-time password;
- and
- transmitting a positive purchase authentication response message to the merchant indicating a successful authentication of the identity of the cardholder.
A system for authenticating an identity of a cardholder in a financial transaction initiated by the cardholder with a merchant computer system via a first communication medium, said system comprising:
- a memory device configured to store contact information associated with the cardholder;
- a communication interface configured to receive a purchase authentication request message from a merchant computer system;
- a processor coupled to said memory device and said communication interface, said processor programmed to:
- generate a one-time password for the financial transaction;
- provide the one-time password to the cardholder via a second communication medium different from the first communication medium using the contact information associated with the cardholder;
- prompt the cardholder to enter the one-time password;
- receive an entered one-time password from the cardholder via the second communication medium:,
- determine that the entered one-time password is equal to the generated one-time password;
- and
- transmit a positive purchase authentication response message to the merchant computer system indicating a successful authentication of the identity of the cardholder via said communication interface.
A computer-readable storage medium that includes computer executable instructions for authenticating an identity of a cardholder in a financial transaction initiated by the cardholder with a merchant via a first communication medium, said computer executable instructions configured to instruct a computer to:
- receive a purchase authentication request message from the merchant, the purchase authentication request message associated with the cardholder and the financial transaction;
- generate a one-time password for the financial transaction, the one-time password including a sequence of random characters;
- transmit the one-time password to the cardholder via a second communication medium different from the first communication medium;
- prompt the cardholder to enter the one-time password;
- receive an entered one-time password from the cardholder via the second communication medium,
- determine that the entered one-time password is equal to the generated one-time password;
- and
- transmit a positive purchase authentication response message to the merchant indicating a successful authentication of the identity of the cardholder.
Dependencies are inferred from the claim text.