SYSTEMS AND METHODS FOR SECURELY PROCESSING TRANSACTIONS

• US 20130036058A1
• Filed: 08/03/2011
• Published: 02/07/2013
• Est. Priority Date: 08/03/2011
• Status: Abandoned Application

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Kelly, Nicholas, Rojewski, John M., Sugathan, Man M., Tune, James J., Yong, Daniel W.
• Application Number:
  US13/197,574
• Publication Number:
  US 20130036058A1
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40145 Biometric identity checks

Abstract

This disclosure includes a system, method, and article of manufacture for securely processing a transaction. The method may comprise performing a three factor authentication, communicating and/or generating, to a web client, a token in response to a transaction request and based upon the three factor authentication, comparing the token to a received token, and authorizing the transaction request based upon the comparing. Three factor authentication may comprise authenticating a web client to a transaction account associated with an individual, authenticating a web client to a payment network associated with the transaction account, and authenticating an individual to the transaction account based upon a biometric sample.

Claims

1. A method comprising:

performing, by a computer-based system for securely processing a transaction, a three factor authentication;

communicating, by the computer-based system and to a web client, a token in response to a transaction request and the three factor authentication;

comparing, by the computer-based system, the token to a received token; and

authorizing, by the computer-based system, the transaction request based upon the comparing.

2. The method of claim 1, wherein the three factor authentication comprises:

authenticating, by the computer-based system, the web client to a transaction account associated with an individual;

authenticating, by the computer-based system, the web client to a payment network associated with the transaction account; and

authenticating, by the computer-based system, the individual to the transaction account based upon a biometric sample.

3. The method of claim 1, further comprising receiving, by the computer-based system, the received token from a merchant.

4. The method of claim 1, further comprising communicating, by the computer-based system, the token in combination with at least one of:

a timestamp indicating a time at which the token was generated and a timestamp indicating a time at which the token expires.

5. The method of claim 1, further comprising declining, by the computer-based system, the transaction request based upon a timestamp associated with the token.

6. The method of claim 1, further comprising generating, by the computer-based system, the token in response to the three factor authentication and the transaction request.

7. The method of claim 1, wherein the token comprises at least one of:

an alias transaction account number, a unique number, a non-unique number, a QR code, a bar code, and a random number.

8. A system comprising:

a processor for securely processing a transaction;

a tangible, non-transitory memory communicating with the processor;

the tangible, non-transitory memory having instructions stored thereon that, in response to execution by the processor, cause the processor to perform operations comprising;

performing, by the processor, a three factor authentication;

communicating, by the processor and to a web client, a token in response to a transaction request and the three factor authentication;

comparing, by the processor, the token to a received token; and

authorizing, by the processor, the transaction request based upon the comparing.

9. The system of claim 8, wherein the three factor authentication comprises:

authenticating, by the processor, the web client to a transaction account associated with an individual;

authenticating, by the processor, the web client to a payment network associated with the transaction account; and

authenticating, by the processor, the individual to the transaction account based upon a biometric sample.

10. The system of claim 8, further comprising receiving, by the processor, the received token from a merchant.

11. The system of claim 8, further comprising communicating, by the processor, the token in combination with at least one of:

a timestamp indicating a time at which the token was generated and a timestamp indicating a time at which the token expires.

12. The system of claim 8, further comprising declining, by the processor, the transaction request based upon a timestamp associated with the token.

13. The system of claim 8, further comprising generating, by the processor, the token in response to the three factor authentication and the transaction request.

14. The system of claim 8, wherein the token comprises at least one of:

an alias transaction account number, a unique number, a non-unique number, a QR code, a bar code, and a random number.

15. An article of manufacture including a non-transitory, tangible computer readable medium having instructions stored thereon that, in response to execution by a computer-based system for securely processing a transaction, cause the computer-based system to perform operations comprising:

performing, by the computer-based system, a three factor authentication;

communicating, by the computer-based system and to a web client, a token in response to a transaction request and the three factor authentication;

comparing, by the computer-based system, the token to a received token; and

authorizing, by the computer-based system, the transaction request based upon the comparing.

16. The article of claim 15, wherein the three factor authentication comprises:

authenticating, by the computer-based system, the web client to a transaction account associated with an individual;

authenticating, by the computer-based system, the web client to a payment network associated with the transaction account; and

authenticating, by the computer-based system, the individual to the transaction account based upon a biometric sample.

17. The article of claim 15, further comprising receiving, by the computer-based system, the received token from a merchant.

18. The article of claim 15, further comprising communicating, by the computer-based system, the token in combination with at least one of:

a timestamp indicating a time at which the token was generated and a timestamp indicating a time at which the token expires.

19. The article of claim 15, further comprising declining, by the computer-based system, the transaction request based upon a timestamp associated with the token.

20. The article of claim 15, wherein the token comprises at least one of:

an alias transaction account number, a unique number, a non-unique number, a QR code, a bar code, and a random number.