SYSTEM AND METHOD FOR PROCESSING PAYMENT TRANSACTIONS

• US 20120284187A1
• Filed: 03/14/2012
• Published: 11/08/2012
• Est. Priority Date: 03/15/2011
• Status: Abandoned Application

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Hammad, Ayman, Faith, Patrick L., Carlson, Mark
• Application Number:
  US13/420,377
• Publication Number:
  US 20120284187A1
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing

Abstract

A system and associated data processing flow for processing payment transactions that are conducted using a payment account or portable consumer device. The portable consumer device may be in any suitable form, including cards, key fobs, devices containing a contactless element, smart cards (having contacts or without contacts), etc. The invention separates the authentication of the payment account or payment device from the transaction authorization process, enabling different entities to be responsible for each of those functions.

Claims

1. A method of processing a payment transaction, comprising:

performing, by an entity, an authentication process on payment account data for a payment account used to conduct the payment transaction by processing the payment account data to generate an indication of whether the payment account is a valid payment account;

performing, by a payment processing network, a transaction processing operation by processing data regarding the payment transaction, the transaction processing operation being other than the authentication process to generate an indication of whether the payment account is a valid payment account that is performed by the entity, the payment processing network being operated by a payment processing organization that is different from the entity performing the authentication process; and

providing the results of the processing by the entity and the processing by the payment processing network to an issuer to enable the issuer to approve or deny the payment transaction.

2. The method of claim 1, wherein the entity is a payment processing network operated by a payment processing organization that is different from the payment processing organization that operates the payment processing network that performs the transaction processing operation.

3. The method of claim 1, wherein the entity further performs an authentication process on a portable consumer device used by a consumer to conduct the payment transaction.

4. The method of claim 3, wherein the authentication process performed by the entity on the portable consumer device includes processing a received cryptogram to verify that the device is an authentic device.

5. The method of claim 1 wherein the transaction processing operation performed by the payment processing network includes generating a transaction authorization request message for the payment transaction.

6. The method of claim 1, wherein the entity processes the payment account data to generate the indication of whether the payment account is a valid payment account by evaluating one or more of:

(a) account usage statistics to determine an indication of unusual activity within the account as represented by the payment transaction or previous payment transactions;

(b) an IP address or other indication of the source of the payment transaction;

(c) a response to a challenge or security question presented to a consumer conducting the payment transaction;

(d) data related to the type of payment transaction;

(e) a presence or absence of certain data in data provided by a payment device or by the consumer;

or

(f) indicia of the payment account, the consumer, a merchant, or the payment transaction that suggests an attempt to commit a fraudulent payment transaction.

7. The method of claim 1, wherein the entity is an acquirer.

8. The method of claim 1, wherein the entity is a merchant.

9. The method of claim 1, wherein the entity is communicatively coupled to the payment processing network and receives the data used in the authentication process from the payment processing network.

10. A system for processing a payment transaction, comprising:

a merchant data processing system configured to receive payment account data from a consumer and in response to generate a request for authorization of the payment transaction;

an entity configured to receive the payment account data and to process the received data to determine whether the payment account is a valid payment account;

a payment processing network operated by a payment processing organization and configured to receive the request for authorization of the payment transaction and to process the request to determine if the payment transaction should be authorized; and

an issuer configured to receive an output from the entity and from the payment processing network and to process the received outputs to determine whether to approve or deny the payment transaction.

11. The system of claim 10, wherein the entity further performs an authentication process on a portable consumer device used by the consumer to conduct the payment transaction by determining whether a cryptogram received from the device is valid.

12. The system of claim 10, wherein the entity is a payment processing network operated by a payment processing organization that is different from the payment processing organization that operates the payment processing network configured to receive the request for authorization of the payment transaction and to process the request to determine if the payment transaction should be authorized.

13. The system of claim 10, wherein the entity is an acquirer.

14. The system of claim 10, wherein the entity is a merchant.

15. The system of claim 10, further comprising an account authentication module configured to perform an authentication process to determine if the payment account is a valid payment account, and further, wherein the module is operated by the entity.

16. The system of claim 10, wherein the entity processes the received data to determine whether the payment account is a valid payment account by evaluating one or more of:

(a) account usage statistics to determine an indication of unusual activity within the account as represented by the payment transaction or previous payment transactions;

(b) an IP address or other indication of the source of the payment transaction;

(c) a response to a challenge or security question presented to a consumer conducting the payment transaction;

(d) data related to the type of payment transaction;

(e) a presence or absence of certain data in data provided by a payment device or by the consumer;

or

(f) indicia of the payment account, the consumer, a merchant, or the payment transaction that suggests an attempt to commit a fraudulent payment transaction.

17. A method of processing a payment transaction, comprising:

receiving, from a first payment processing network operated by a first payment processing organization, confirmation that a payment account used to conduct the payment transaction is a valid payment account;

processing, by a second payment processing network operated by a second payment processing organization, an authorization request message for the payment transaction to determine if the payment transaction is authorized; and

providing the confirmation that the payment account is a valid payment account and the determination of whether the payment transaction is authorized to an issuer.

18. The method of claim 17, further comprising the issuer processing the confirmation that the payment account is a valid payment account and the determination of whether the payment transaction is authorized to determine whether to approve or deny the payment transaction.

19. The method of claim 17, wherein the confirmation that the payment account used to conduct the payment transaction is a valid payment account is received from the first payment processing network by the second payment processing network.

20. The method of claim 17, further comprising performing an authentication process on a portable consumer device used to conduct the payment transaction by processing a cryptogram received from the device to verify that it is valid.