EMBEDDED ACCEPTANCE SYSTEM

• US 20140310183A1
• Filed: 04/15/2014
• Published: 10/16/2014
• Est. Priority Date: 04/15/2013
• Status: Active Application

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Lance Weber
• Inventors: WEBER, LANCE
• Application Number:
  US14/253,188
• Publication Number:
  US 20140310183A1
• Time in Patent Office: Days
• US Class Current: 705/71
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation

Abstract

Methods and systems can provide for unified processing of merchant transactions over various payment channels over which the transactions originate, such as in-person retail transactions and e-commerce transactions. For example, transactions can be received from payment channels through different payment channel-specific interfaces. The transactions from the various payment channels can then be sent to an entry point module that centrally manages the transactions. An orchestrator can then identify payment channel-agnostic transaction services to be applied to the transactions. This can allow for a unified end-to-end encryption implementation across a merchant'"'"'s enterprise, reducing management costs and improving overall security. Similarly, universal tokenization services, payment and fraud management can be provided across a merchant'"'"'s entire enterprise.

Claims

1. A method for comprising:

receiving, at a server computer, first transaction data for a first transaction initiated at a merchant access device through a first channel interface of the server computer;

receiving, at the server computer, second transaction data for a second transaction initiated at a user computer through a second channel interface of the server computer;

sending, via the first channel interface, the first transaction data to an entry point module of the server computer;

sending, via the second channel interface, the second transaction data to the entry point module of the server computer;

adding, by the entry point module, the first transaction data and the second transaction data to a queue;

processing, by an orchestrator of the server computer, the first transaction data and the second transaction data from the queue, the orchestrator configured to perform a plurality of service functions for a transaction using corresponding transaction data;

generating, by the orchestrator, a first response message corresponding to the first transaction data and a second response message corresponding to the second transaction data;

returning the first response message through the first channel interface to the merchant access device and the second response message through the second channel interface to the user computer.

2. The method of claim 1, wherein the first channel interface includes a first bridge module, wherein the first bridge module is configured to transform the first transaction data from a first format to a merchant processor format.

3. The method of claim 1, wherein the first transaction data is received at the first channel interface from a switch that is configured to receive transaction data from a plurality of merchant access devices, and wherein the second transaction data is received at the second channel interface from a gateway that is configured to receive transaction data from a plurality of user computers.

4. The method of claim 1, further comprising:

identifying, by the orchestrator, a first orchestration workflow to process the first transaction data and a second orchestration workflow to process the second transaction data, wherein each orchestration workflow includes at least one of the plurality of service functions; and

executing, by the orchestrator, the first orchestration workflow and the second orchestration workflow.

5. The method of claim 4, wherein the first orchestration workflow is defined by a merchant and associated with the first channel interface, and the second orchestration workflow is defined by the merchant and associated with the second channel interface.

6. The method of claim 4, wherein the first orchestration workflow is identified based on the first transaction data and the second orchestration workflow is identified based on the second transaction data.

7. The method of claim 4, wherein the first orchestration workflow and the second orchestration workflow both include a same service function.

8. A system comprising one or more processors configured to:

receive first transaction data for a first transaction initiated at a merchant access device through a first channel interface of the server computer;

receive second transaction data for a second transaction initiated at a user computer through a second channel interface of the server computer;

send, via the first channel interface, the first transaction data to an entry point module of the server computer;

send, via the second channel interface, the second transaction data to the entry point module of the server computer;

add, by the entry point module, the first transaction data and the second transaction data to a queue;

process, by an orchestrator, the first transaction data and the second transaction data from the queue, the orchestrator configured to perform a plurality of service functions for a transaction using corresponding transaction data;

generate, by the orchestrator, a first response message corresponding to the first transaction data and a second response message corresponding to the second transaction data;

return the first response message through the first channel interface to the merchant access device and the second response message through the second channel interface to the user computer.

9. The system of claim 8, wherein the first channel interface includes a first bridge module, wherein the first bridge module is configured to transform the first transaction data from a first format to a merchant processor format.

10. The system of claim 8, wherein the first transaction data is received at the first channel interface from a switch that is configured to receive transaction data from a plurality of merchant access devices, and wherein the second transaction data is received at the second channel interface from a gateway that is configured to receive transaction data from a plurality of user computers.

11. The system of claim 8, wherein the orchestrator is further configured to:

identify a first orchestration workflow to process the first transaction data and a second orchestration workflow to process the second transaction data, wherein each orchestration workflow includes at least one of the plurality of service functions; and

execute the first orchestration workflow and the second orchestration workflow.

12. The system of claim 11, wherein the first orchestration workflow is defined by a merchant and associated with the first channel interface, and the second orchestration workflow is defined by the merchant and associated with the second channel interface.

13. The system of claim 11, wherein the first orchestration workflow is identified based on the first transaction data and the second orchestration workflow is identified based on the second transaction data.

14. The system of claim 11, wherein the first orchestration workflow and the second orchestration workflow both include a same service function.

15. A method for managing encryption of transactions, the method comprising:

sending, by a server computer, one or more first encryption keys to a first merchant computer, wherein the first merchant computer injects the one or more encryption keys into a plurality of first terminals;

sending, by the server computer, one or more second encryption keys to a second merchant computer, wherein the second merchant computer injects the one or more encryption keys into a plurality of second terminals;

receiving, at the server computer, encrypted first transaction data for a first transaction initiated at one of the plurality of first terminals through a first channel interface of the server computer;

receiving, at the server computer, encrypted second transaction data for a second transaction initiated at one of the plurality of second terminals through a second channel interface of the server computer;

decrypting, by a decryption module at the server computer, the encrypted first transaction data using at least one of the first encryption keys;

decrypting, by the decryption module at the server computer, the encrypted second transaction data using at least one of the second encryption keys; and

processing, by the server computer, the first transaction data and second transaction data using a plurality of service modules.

16. The method of claim 15, wherein the one or more first encryption keys and the one or more second encryption keys are derived from at least one encryption key received from a payment processing network computer.

17. The method of claim 15, wherein the plurality of first terminals are retail point of sale terminals.

18. The method of claim 17, wherein the plurality of second terminals are mobile point of sale terminals.

19. The method of claim 15, wherein each of the plurality of second terminals is communicatively coupled to a card reader, and wherein the one or more encryption keys are injected by each of the plurality of second terminals into its corresponding card reader.

20. The method of claim 15, wherein the decryption module at the server computer requests an encryption key from a payment processing network computer to decrypt each transaction.