Method, server and system for authorizing a transaction

• US 10,699,268 B2
• Filed: 12/30/2015
• Issued: 06/30/2020
• Est. Priority Date: 12/30/2015
• Status: Active Grant

• Current Assignee: Thales DIS France SAS (Thales SA)
• Original Assignee: Thales DIS France SA (Thales SA)
• Inventors: Hugot, Didier
• Primary Examiner(s): Coppola, Jacob C.
• Application Number:
  US14/984,804
• Publication Number:
  US 20170193500A1
• Time in Patent Office: 1,644 Days
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/4018 using the card verification value [CVV] associated with the card
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation

Abstract

To authorize a transaction, a first device sends to a first server a transaction-authorization request accompanied with an Id-PAN relating to a user account, and including an identifier of a second device. The first server sends to a second server a user-authorization request accompanied with the Id-PAN and transaction data. The second server sends to the second device a request for user approval including the transaction data and the user account data. The second device requests whether the device user approves a requested transaction. The second device sends to the second server a request for authorizing the transaction and data relating to user approval. The second server verifies whether the requested transaction is approved by the user. The second server sends to a server a verification result including a transaction authorization or refusal.

Claims

1. A method for authorizing a transaction, comprising:

generating, by or through a first device, an Id-PAN, the Id-PAN including a bank issuer identifier and at least in part a second device identifier, the second device identifier allowing to address the second device;

sending, by the first device to a first server, a first message including a request for authorizing a transaction accompanied with the Id-PAN;

sending, by the first server to a payment network, a message including a request for getting at least one identifier relating to a second server accompanied with the Id-PAN, the at least one second server identifier allowing to address the second server;

extracting, by the payment network, the bank issuer identifier from the Id-PAN;

getting, by the payment network, based upon the bank issuer identifier, at least one second server identifier;

sending, by the payment network, to the first server, the at least one second server identifier;

sending, by the first server to the second server, a second message including a request for a user authorization for the transaction accompanied with the Id-PAN and transaction data;

retrieving, by the second server, based upon the Id-PAN, the second device identifier and user account data;

sending, by the second server, based upon the second device identifier, to the second device a third message including a request for getting a user approval relating to the transaction accompanied with the transaction data and the user account data;

requesting a user, by the second device, whether the second device user does or does not approve a requested transaction authorization;

sending, by the second device to the second server, a fourth message including a request for authorizing the transaction accompanied with user approval data;

determining, by the second server, based upon the user approval data, a user approval result, and sending to the first server a fifth message including a response for authorizing the transaction accompanied with the user approval result and the Id-PAN;

sending, by the first server, to the second server a sixth message including a request for authorizing the transaction accompanied with the Id-PAN;

verifying by the second server, based upon the Id-PAN, whether the requested transaction is or is not approved by the user; and

sending by the second server to a server a seventh message including a verification result.

2. The method according to claim 1, wherein the user of the second device approves the requested transaction authorization by depressing at least one predetermined key at the second device side.

3. The method according to claim 1, wherein the second device user approves the requested transaction authorization by providing user authentication data to be successfully verified by or through the second device.

4. The method according to claim 3, wherein the user authentication data includes at least one element of a group comprising:

a Personal Identity Number;

at least one biometric print;

user credentials;

a user name; and

a password.

5. The method according to claim 3, wherein the second device generates a cryptogram, as user approval data, by using a predetermined cryptogram generation algorithm and the second server generates an expected cryptogram by using the cryptogram generation algorithm, the second server verifies whether the expected cryptogram does or does not match the cryptogram, the second server stores a cryptogram verification result, the user account identifier and the transaction data.

6. The method according to claim 5, wherein, after having received the sixth message, the second server retrieves, based upon the Id-PAN, the transaction data, the user account identifier and the cryptogram verification result.

7. The method according to claim 6, wherein the second server verifies whether the cryptogram verification result is a positive cryptogram verification or a negative cryptogram verification.

8. A system for authorizing a transaction,

wherein, the system comprising a payment network, a first device, a second device, a first server and a second sever, the first device is configured to:

generate an Id-PAN, the Id-PAN including a bank issuer identifier and at least in part a second device identifier, the second device identifier allowing to address the second device; and

send, to a first server, a first message including a request for authorizing a transaction accompanied with the Id-PAN;

wherein the first server is configured to send, to the payment network, a message including a request for getting at least one identifier relating to a second server accompanied with the Id-PAN, the at least one second server identifier allowing to address the second server;

wherein the payment network is configured to;

extract the bank issuer identifier from the Id-PAN;

get, based upon the bank issuer identifier, at least one second server identifier; and

send, to the first server, the at least one second server identifier;

wherein the first server is configured to send, to the second server, a second message including a request for a user authorization for the transaction accompanied with the Id-PAN and transaction data;

wherein the second server is configured to;

retrieve, based upon the Id-PAN, the second device identifier and user account data; and

send, based upon the second device identifier, to the second device, a third message including a request for getting a user approval relating to the transaction accompanied with the transaction data and the user account data;

wherein the second device is configured to;

request a user whether the second device user does or does not approve a requested transaction authorization; and

send, to the second server, a fourth message including a request for authorizing the requested transaction accompanied with user approval data;

wherein the second server is configured to;

determine, based upon the user approval data, a user approval result; and

send, to the first server, a fifth message including a response for authorizing the transaction accompanied with the user approval result and the Id-PAN;

wherein the first server is configured to send, to the second server, a sixth message including a request for authorizing a requested transaction accompanied with the Id-PAN; and

wherein the second server is configured to;

verify, based upon the Id-PAN, whether the requested transaction is or is not approved by the user; and

send, to a server, a seventh message including a verification result.