ISSUER TRUSTED PARTY SYSTEM

• US 20130073463A1
• Filed: 09/19/2012
• Published: 03/21/2013
• Est. Priority Date: 09/19/2011
• Status: Abandoned Application

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Dimmick, James, Dominguez, Ben
• Application Number:
  US13/622,993
• Publication Number:
  US 20130073463A1
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists

Abstract

Embodiments of the invention are directed to an authentication platform capable of storing authentication data received from an issuer access control server. The authentication platform can authenticate users and portable devices, on behalf of the issuer access control server, using the stored authentication data. Messaging extensions are included in transaction messaging indicating the authentication platform'"'"'s status as an issuer trusted party, allowing the issuer access control server computer to rely on the authentication platform to conduct authentication processing.

Claims

1. A method comprising:

receiving at an authentication platform a transaction initiation request from a portable device operated by a user, wherein the authentication platform was previously verified as an issuer trusted party;

initiating an authentication process by the authentication platform; and

initiating a payment authorization process by the authentication platform.

2. The method of claim 1 wherein the authentication process comprises:

receiving portable device identification data from the portable device;

querying a database with the portable device identification data to determine registration status of the portable device;

generating a user identifier request message;

sending the user identifier request message to the portable device;

receiving a user identifier response message from the portable device; and

verifying the user identifier response message with a user identifier stored in a database.

3. The method of claim 2 wherein the authentication process further comprises:

querying an issuer computer with a verify enrollment request message comprising a token;

receiving, from the issuer computer, a verify enrollment response message, comprising registration status of the portable device and a request for user authentication data;

generating a payer authentication request message comprising the requested user authentication data;

sending, to the issuer computer, the payer authentication request message; and

receiving a payer authentication response message from the issuer computer.

4. The method of claim 3 wherein the token indicates that the authentication platform is an issuer trusted party.

5. The method of claim 4 wherein the verify enrollment request message indicates the type of connection between the authentication platform and the issuer computer.

6. A server computer comprising a processor, and a computer readable medium coupled to the processor, the computer readable medium comprising code for implementing a method comprising:

receiving a transaction initiation request from a portable device operated by a user, wherein the authentication platform was previously verified as an issuer trusted party;

initiating an authentication process by the authentication platform; and

initiating a payment authorization process by the authentication platform.

7. The server computer of claim 6, wherein the authentication process comprises:

receiving portable device identification data from the portable device;

querying a database with the portable device identification data to determine registration status of the portable device;

generating a user identifier request message;

sending the user identifier request message to the portable device;

receiving a user identifier response message from the portable device; and

verifying the user identifier response message with a user identifier stored in a database.

8. The server computer of claim 7, wherein the authentication process comprises:

querying an issuer computer with a verify enrollment request message comprising at least a token;

receiving, from the issuer computer, a verify enrollment response message, comprising registration status of the portable device and a request for user authentication data;

generating a payer authentication request message comprising the requested user authentication data;

sending, to the issuer computer, the payer authentication request message; and

receiving a payer authentication response message from the issuer computer.

9. The server computer of claim 7, wherein the token indicates that the authentication platform is an issuer trusted party.

10. The server computer of claim 9 wherein the verify enrollment request message indicates the type of connection between the authentication platform and the issuer computer.

11. A method comprising:

receiving, from an authentication platform, a verify enrollment request message;

evaluating, by the issuer computer, the verify enrollment request message;

generating a verify enrollment response message in response to the evaluation of the verify enrollment request message, wherein the verify enrollment response message further comprises a request for user authentication data;

receiving, from the authentication platform, a payer authentication request message comprising the requested user authentication data; and

verifying the user authentication data against database user authentication data.

12. The method of claim 11 further comprising:

generating a payer authentication response message based on the verification; and

sending the payer authentication response message to the authentication platform.

13. The method of claim 11 wherein the verify enrollment request message comprises a token, wherein the token indicates the authentication platform as an issuer trusted party.

14. The method of claim 11 wherein the verify enrollment request message comprises portable device identification data indicating the type of portable device being used in the transaction.

15. The method of claim 11 wherein the verify enrollment request message indicates the type of connection between the authentication platform and the issuer computer.

16. The method of claim 13 wherein the payer authentication response message is automatically generated when the token in the verify enrollment request message indicates the authentication platform is issuer trusted.

17. A server computer comprising a processor, and a computer readable medium coupled to the processor, the computer readable medium comprising code for implementing a method comprising:

receiving, from an authentication platform, a verify enrollment request message;

evaluating, by the issuer computer, the verify enrollment request message;

generating a verify enrollment response message in response to the evaluation of the verify enrollment request message, wherein the verify enrollment response message further comprises a request for user authentication data;

receiving, from the authentication platform, a payer authentication request message comprising the requested user authentication data; and

verifying the user authentication data against database user authentication data.

18. The server computer of claim 17 further comprising:

generating a payer authentication response message based on the verification; and

sending the payer authentication response message to the authentication platform.

19. The server computer of claim 17 wherein the verify enrollment request message comprises a token, wherein the token indicates the authentication platform as an issuer trusted party.

20. The server computer of claim 17 wherein the verify enrollment request message comprises portable device identification data indicating the type of portable device being used in the transaction

21. The server computer of claim 17 wherein the verify enrollment message indicates the type of connection between the authentication platform and the issuer computer

22. The server computer of claim 19 wherein the payer authentication response message is automatically generated when the token in the verify enrollment request message indicates the authentication platform is issuer trusted.

23. A method comprising:

receiving, from an authentication platform, a verify enrollment request message;

evaluating, by the issuer computer, the verify enrollment request message;

generating a verify enrollment response message in response to the evaluation of the verify enrollment request message, wherein the verify enrollment response message further comprises data relating to an authentication process used by the issuer computer; and

sending the verify enrollment response message to the authentication platform.

24. The method of claim 23 further comprising:

after sending the verify enrollment response message, sending a request for user identification to a user; and

receiving a response from the user with the user identification.

25. A server computer comprising a processor and a computer readable medium coupled to the processor, the computer readable medium comprising code, executable by the processor for implementing a method comprising:

receiving, from an authentication platform, a verify enrollment request message;

evaluating, by the issuer computer, the verify enrollment request message;

generating a verify enrollment response message in response to the evaluation of the verify enrollment request message, wherein the verify enrollment response message further comprises data relating to an authentication process used by the issuer computer; and

sending the verify enrollment response message to the authentication platform.