System and Method for Authenticating Payment Transactions

• US 20140279523A1
• Filed: 03/15/2013
• Published: 09/18/2014
• Est. Priority Date: 03/15/2013
• Status: Abandoned Application

• Current Assignee: PayOne Corporation
• Original Assignee: PayOne Corporation
• Inventors: Lynam, Joe M., Meyer, Evan B., Snycerski, Mark E., Singer, Bradford
• Application Number:
  US13/841,318
• Publication Number:
  US 20140279523A1
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/401 Transaction verification

Abstract

A request to authorize a payment transaction initiated on the client device is received by the system. In some embodiments, the request is received from a mobile client device connected to a cellular communications network. The request includes an IP address associated with a client device and a cellular phone number associated with the client device. The IP address is determined automatically without human intervention from the request. A cellular telephone carrier system associated with the cellular communications network is then queried using the cellular phone number associated with the client device. A response is received from the carrier system. The response includes the current IP address associated with the client device. The payment transaction is authorized when the IP address received from the carrier system matches the IP address received from the client device.

Claims

1. A method for authorizing a payment transaction initiated on a mobile client device connected to a cellular communication network, the method comprising:

at a system having one or more processors and memory storing one or more programs for execution by the one or more processors to perform the method;

receiving from a mobile client device connected to a cellular communications network a request to authorize a payment transaction initiated on the client device, where the request comprises an IP address associated with a client device and a cellular phone number associated with the client device;

querying a carrier system associated with the cellular communications network using the cellular phone number associated with the client device;

receiving a response from the carrier system, wherein the response includes an IP address associated with the client device; and

at least partially authorizing the payment transaction when the IP address received from the carrier system matches the IP address received from the client device.

2. The method of claim 1, further comprising, before the receiving:

receiving a payment processing transaction request from the mobile client device; and

transmitting a request for client device data to the mobile client device.

3. The method of claim 1, further comprising, before the receiving:

receiving a payment processing transaction request from a merchant; and

transmitting a request for client device data to the merchant.

4. The method of claim 1, wherein the IP address is determined automatically without human intervention from the request.

5. The method of claim 1, wherein the cellular phone number is determined automatically without human intervention.

6. The method of claim 1, wherein the cellular phone number is obtained from direct user input into the mobile client device.

7. The method of claim 1, wherein the authentication system is operated by an internet service provider.

8. The method of claim 1, further comprising providing a failure message when the IP address received from the carrier system does not match the IP address received from the client device.

9. The method of claim 1, further comprising notifying a user associated with the client device that illicit activity may be occurring with the mobile client device when the IP address received from the carrier system does not match the IP address received from the client device.

10. A method for authorizing a payment transaction initiated on a mobile client device connected to a cellular communication network, the method comprising:

at a system having one or more processors and memory storing one or more programs for execution by the one or more processors to perform the method;

receiving a request to authorize a payment transaction initiated on a portable client device connected to a cellular communications network, the request comprising first client device data including an IP address and a unique identifier both associated with the client device;

querying an authentication system using a subset of the first client device data;

receiving a response from the authentication system, wherein the response includes second client device data distinct from the subset of the first client device data; and

at least partially authorizing the payment transaction when at least some of the second client device data received from the authentication system matches at least some of the second client device data received from the client device.

11. The method of claim 10, wherein the IP address is determined automatically without human intervention from the request.

12. The method of claim 10, wherein the cellular phone number is determined automatically without human intervention.

13. The method of claim 10, wherein the cellular phone number is obtained from direct user input into the mobile client device.

14. The method of claim 10, further comprising providing a failure message when the IP address received from the carrier system does not match the IP address received from the client device.

15. The method of claim 10, further comprising notifying a user associated with the client device that illicit activity may be occurring with the mobile client device when the IP address received from the carrier system does not match the IP address received from the client device.

16. The method of claim 10, wherein the unique identifier includes a cellular phone number, a client device ID, a SIM card number, or an IMEI number.

17. The method of claim 10, wherein the subset of first client device data includes at least one of:

the IP address associated with a client device, the cellular phone number associated with a client device, a client device ID, a SIM card number associated with a client device, or an IMEI number associated with a client device.

18. The method of claim 10, wherein the subset of the first client device data includes at least one of:

the IP address associated with a client device, the cellular phone number associated with a client device, a client device ID, a SIM card number associated with a client device, or an IMEI number associated with a client device.

19. An authentication system, comprising:

one or more processors;

memory; and

one or more programs stored in the memory, the one or more programs comprising instructions for;

receiving from a mobile client device connected to a cellular communications network a request to authorize a payment transaction initiated on the client device, where the request comprises an IP address associated with a client device and a cellular phone number associated with the client device;

querying a carrier system associated with the cellular communications network using the cellular phone number associated with the client device;

receiving a response from the carrier system, wherein the response includes an IP address associated with the client device; and

at least partially authorizing the payment transaction when the IP address received from the carrier system matches the IP address received from the client device.

20. A non-transitory computer readable storage medium storing one or more programs configured for execution by one or more processors of an authentication system, the one or more programs comprising instructions for:

receiving from a mobile client device connected to a cellular communications network a request to authorize a payment transaction initiated on the client device, where the request comprises an IP address associated with a client device and a cellular phone number associated with the client device;

querying a carrier system associated with the cellular communications network using the cellular phone number associated with the client device;

receiving a response from the carrier system, wherein the response includes an IP address associated with the client device; and

at least partially authorizing the payment transaction when the IP address received from the carrier system matches the IP address received from the client device.