METHOD AND SYSTEM FOR AUTHENTICATING A PARTY TO A TRANSACTION

• US 20090037982A1
• Filed: 04/16/2008
• Published: 02/05/2009
• Est. Priority Date: 04/17/2007
• Status: Active Grant

• Current Assignee: Visa USA, Inc. (Visa, Inc.)
• Original Assignee: Visa USA, Inc. (Visa, Inc.)
• Inventors: Brand, Olivier, Dimmick, James, Wentker, David, Singh Grewal, Tribhuwan A., Lindelsee, Michael
• Granted Patent: US 8,156,543 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/386 using messaging services or messaging apps using mobile network messaging services for payment, e.g. SMS G06Q20/3255
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity

Abstract

One embodiment of the invention is directed to a method including receiving an alias identifier associated with an account associated with a presenter, determining an associated trusted party using the alias identifier, sending a verification request message to the trusted party after determining the associated trusted party, and receiving a verification response message

Claims

1. A method comprising:

a) receiving an alias identifier, wherein the alias identifier is associated with an account identifier for an account of a presenter;

b) determining an associated trusted party using the alias identifier;

c) sending a verification request message to the trusted party after determining the associated trusted party, where the verification request message requests information regarding whether the trusted party or the presenter participates in an authentication program; and

d) receiving a verification response message, wherein the verification response message indicates whether the trusted party or the presenter participates in the authentication program.

2. The method of claim 1 wherein the alias identifier is a number.

3. The method of claim 1 wherein the trusted party is a financial institution that maintains the account.

4. The method as recited in claim 1 further comprising:

initiating the sending of an authentication request message to the presenter.

5. The method of claim 1 further comprising:

initiating the sending of an authentication request message to the presenter, wherein an access control server subsequently sends the authentication request message to the presenter.

6. The method of claim 1 wherein prior to receiving the alias identifier, the presenter sends the alias identifier using a communication device.

7. The method of claim 1 wherein a)-d) are performed by a directory server.

8. The method of claim 7 wherein the trusted party is an issuer that issued the account identifier.

9. A computer readable medium comprising:

a) code for receiving an alias identifier, wherein the alias identifier is associated with an account identifier for an account of a presenter;

b) code for determining an associated trusted party using the alias identifier;

c) code for sending a verification request message to the trusted party after determining the associated trusted party, where the verification request message requests information regarding whether the trusted party or the presenter participates in a authentication program; and

d) code for receiving a verification response message, wherein the verification response message indicates whether the trusted party or the presenter participates in the authentication program.

10. A directory server comprising:

a processor; and

the computer readable medium system of claim 9 coupled to the processor.

11. A method comprising:

a) providing an alias identifier associated with an account identifier associated with an account of a presenter;

b) receiving an authentication request message after providing the alias identifier; and

c) sending an authentication response message after receiving the authentication request message.

12. The method of claim 11 wherein the alias identifier is a number.

13. The method of claim 11 wherein the alias identifier is provided using the presenter'"'"'s voice.

14. The method of claim 13 wherein the authentication request message is received at a communication device operated by the presenter.

15. The method of claim 14 wherein the authentication response message comprises a password or a pin number.

16. The method of claim 11 wherein the alias identifier is provided to a merchant in a face-to-face transaction.

17. The method of claim 11 wherein the alias identifier is provided to a merchant using a communication device that is remotely located with respect to the merchant.

18. A computer readable medium comprising:

a) code for providing an alias identifier associated with an account identifier associated with an account of a presenter;

b) code for receiving an authentication request message after providing the alias identifier; and

c) code for sending an authentication response message after receiving the authentication request message.

19. The computer readable medium of claim 18 wherein the alias identifier is provided to a merchant in a face-to-face transaction.

20. The computer readable medium of claim 18 wherein the alias identifier is provided to a merchant using a communication device that is remotely located with respect to the merchant.

21. A communication device comprising a processor, coupled to the computer readable medium of claim 18.