System and method for secure telephone and computer transactions

• US 20050289052A1
• Filed: 01/24/2005
• Published: 12/29/2005
• Est. Priority Date: 01/23/2003
• Status: Abandoned Application

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Wankmueller, John
• Application Number:
  US11/042,864
• Publication Number:
  US 20050289052A1
• Time in Patent Office: Days
• US Class Current: 705/40
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions

Abstract

A secure electronic payment system and method for conducting a secure transaction using authentication is provided. A merchant'"'"'s computer transmits an authorization request to an access control server. The access control obtains authentication to confirm the identity of the purchaser, via e.g., an electronic form or interactive voice response system. The access control server then transmits a response to the merchant'"'"'s computer. If the purchaser is authorized to access the account, payment is processed by the merchant and the transaction is completed.

Claims

1. A method for conducting a secure transaction between a merchant and a customer wherein payment is processed from a payment account comprising:

providing a database comprising first authentication information associated with a holder of said payment account;

providing payment account information associated with said payment account, said payment account information to be used for conducting said transaction;

transmitting an authentication request including said payment account information to an access control server;

receiving by a merchant information comprising authentication instructions;

receiving second authentication information from the customer;

comparing said first and said second authentication information to determine whether said transaction is authorized by said holder of said payment account.

2. The method of claim 1 further comprising the step of transmitting an authentication response responsive to said authentication request.

3. The method of claim 2 further comprising the steps of processing payment from said payment account to complete the transaction as a function of said authentication response.

4. The method of claim 1 wherein said payment account information is provided via telephone.

5. The method of claim 1 wherein said payment account information is provided via computer network.

6. The method of claim 2 wherein said authentication request and said authentication response are formatted according to the 3-D Secure authentication protocol.

7. The method of claim 1 wherein said authentication instructions comprise information relating to IVR authentication.

8. The method of claim 1 wherein said authentication instructions comprise information relating to MOBO authentication.

9. A method for conducting a secure transaction using authentication wherein payment is processed from a holder'"'"'s payment account comprising:

receiving payment account information associated with said payment account, said payment account information to be used for conducting said transaction;

transmitting an authentication request including said payment account information to an access control server, said authentication request triggering automatically by said server the transmission of data used to display an electronic form;

receiving via said electronic form authentication information from said holder;

authenticating said holder for purposes of authorizing said transaction; and

authorizing said transaction.

10. The method of claim 9 further comprising the step of receiving an authentication response responsive to said authentication request.

11. The method of claim 10 further comprising the steps of processing payment from said payment account to complete the transaction as a function of said authentication response.

12. The method of claim 9 wherein said payment account information is provided via telephone.

13. The method of claim 9 wherein said payment account information is provided via computer network.

14. The method of claim 10 wherein said authentication request and said authentication response are formatted according to the 3-D Secure authentication protocol.

15. The method of claim 9 wherein said authentication instructions comprise information relating to IVR authentication.

16. The method of claim 9 wherein said authentication instructions comprise information relating to MOBO authentication.

17. A method for conducting a secure transaction using authentication wherein payment is processed from a payment account comprising:

providing a database comprising at least a first set of authentication information associated with a holder of said payment account;

receiving payment account information associated with said payment account, said payment account information to be used for conducting said transaction;

receiving an authentication request including at least said payment account information in connection with conducting said transaction;

triggering automatically the display of an electronic form;

receiving a second set of authentication information from said holder of said payment account;

inputting said second set of authentication information into said electronic form; and

comparing said first set of authentication information to said second set of authentication information to determine whether said transaction is authorized by said holder of said payment account.

18. The method of claim 17 further comprising the step of providing an authentication response responsive to said authentication request.

19. The method of claim 18 further comprising the steps of processing payment from said payment account to complete the transaction as a function of said authentication response.

20. The method of claim 17 wherein said payment account information is provided via telephone.

21. The method of claim 17 wherein said payment account information is provided via computer network.

22. The method of claim 18 wherein said authentication request and said authentication response are formatted according to the 3-D Secure authentication protocol.

23. A system for conducting a secure transaction comprising:

a server computer subsystem, said server computer subsystem comprising information relating to at least one payment account including at least a first set of authentication information relating to an account holder of said payment account;

an automated voice response subsystem; and

an authentication subsystem,

wherein said automated voice response subsystem connects a call to said account holder to obtain a second set of authentication information, and further wherein said authentication subsystem compares said first set of authentication information to said second set of authentication information to determine whether the transaction is authorized by said account holder.

24. The system of claim 23 wherein the transaction is conducted in accordance with the 3-D Secure protocol.

25. A system for conducting a secure transaction between a merchant and an account holder, comprising:

a server computer subsystem, said server computer subsystem comprising information relating to at least one payment account including at least a first set of authentication information relating to an account holder of said payment account; and

a virtual electronic form subsystem;

wherein said virtual electronic form subsystem provides an electronic form to said merchant, said electronic form receiving a second set of authentication information from said merchant, and further wherein said server computer subsystem compares said first set of authentication information to said second set of authentication information to determine whether the transaction is authorized by said account holder.

26. The system of claim 25 wherein the transaction is conducted in accordance with the 3-D Secure protocol.