Secure Remote Payment Transaction Processing Including Consumer Authentication

• US 20150088756A1
• Filed: 09/22/2014
• Published: 03/26/2015
• Est. Priority Date: 09/20/2013
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Makhotin, Oleg, Pirzadeh, Kiushan
• Granted Patent: US 10,817,875 B2
• Time in Patent Office: Days
• US Class Current: 705/71
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/401 Transaction verification

Abstract

Embodiments of the invention are directed to methods, apparatuses, computer-readable media, and systems for securely processing remote transactions. One embodiment is directed to a method of processing a remote transaction initiated by a communication device. The method comprising a server computer receiving a payment request including encrypted payment information that is encrypted using a first key. The encrypted payment information including security information. The method further comprises decrypting the encrypted payment information using a second key, obtaining an authentication response value for the remote transaction from an authentication computer associated with an issuer, updating the decrypted payment information to include the authentication response value, re-encrypting the decrypted payment information using a third key, and sending a payment response including the re-encrypted payment information to a transaction processor. The transaction processor decrypting the re-encrypted payment information using a fourth key and initiating a payment transaction using the decrypted payment information.

Claims

1. A method of processing a remote transaction initiated by a communication device, the method comprising:

receiving, by a server computer, a payment request including encrypted payment information, wherein the encrypted payment information includes security information, and wherein the encrypted payment information is encrypted using a first encryption key;

decrypting, by the server computer, the encrypted payment information using a second encryption key;

obtaining, by the server computer, an authentication response value for the remote transaction from an authentication computer associated with an account issuer, wherein the authentication computer validates the security information before providing the authentication response value;

updating, by the server computer, the decrypted payment information to include the authentication response value;

re-encrypting, by the server computer, the decrypted payment information using a third encryption key; and

sending, by the server computer, a payment response including the re-encrypted payment information to a transaction processor associated with the communication device, wherein the transaction processor decrypts the re-encrypted payment information using a fourth encryption key and initiates a payment transaction using the decrypted payment information.

2. The method of claim 1, wherein obtaining the authentication response value further comprises:

determining, by the server computer, the authentication computer associated with the decrypted payment information;

sending, by the server computer, an authentication request including the security information to the authentication computer; and

receiving, by the server computer, an authentication response including the authentication response value, the authentication response value indicating validation of the security information by an account issuer associated with account information in the decrypted payment information.

3. The method of claim 1, wherein obtaining the authentication response value further comprises:

sending, by the server computer, an authentication request including the security information to a payment processing network computer associated with the decrypted payment information, wherein the payment processing network computer determines the authentication computer associated with the decrypted payment information and forwards the authentication request to the authentication computer, wherein the authentication computer validates the security information and generates an authentication response including an authentication response value; and

receiving, by the server computer, the authentication response including the authentication response value from the payment processing network computer.

4. The method of claim 2, wherein the authentication computer is operated by a payment processing network on-behalf-of the account issuer.

5. The method of claim 1, wherein the encrypted payment information is generated by a payment application of the communication device by accessing payment credentials stored in a secure memory of the communication device.

6. The method of claim 1, wherein the security information includes a security value generated by a payment application of the communication device.

7. The method of claim 6, wherein the security value is generated using a shared algorithm associated with an account issuer.

8. The method of claim 6, wherein the security information includes user authentication data input by a user of the communication device.

9. The method of claim 1, wherein the payment request message further comprises a transaction processor certificate, the method further comprising determining the third encryption key using the transaction processor certificate by:

validating that the transaction processor certificate is authentic;

verifying the transaction processor certificate is currently valid with a certificate authority; and

extracting the transaction processor public key from the transaction processor certificate.

10. The method of claim 1, wherein the transaction processor initiates the payment transaction by mapping the decrypted payment information to an authorization request message configured to be processed by a payment processing network.

11. The method of claim 1, wherein the authentication response value is validated by a payment processing network after initiation of the payment transaction during processing of the payment transaction.

12. The method of claim 1, wherein the first encryption key includes a public key of a third party public/private key pair, wherein the third party public/private key pair includes a third party public key and a third party private key, wherein the first encryption key includes the third party public key, and wherein the second encryption key includes the third party private key.

13. The method of claim 12, wherein the server computer, the third party public key, and the third party private key are associated with a payment processing network.

14. A server computer comprising:

a processor; and

a computer-readable medium coupled to the processor, the computer-readable medium comprising code, executable by the processor, for performing a method of processing a remote transaction initiated by a communication device, the method comprising;

receiving a payment request including encrypted payment information, wherein the encrypted payment information includes a security information, and wherein the encrypted payment information is encrypted using a first encryption key;

decrypting the encrypted payment information using a second encryption key;

obtaining an authentication response value for the remote transaction from an authentication computer associated with an account issuer, wherein the authentication computer validates the security information before providing the authentication response value;

updating the decrypted payment information to include the authentication response value;

re-encrypting the decrypted payment information using a third encryption key; and

sending a payment response including the re-encrypted payment information to a transaction processor associated with the communication device, wherein the transaction processor decrypts the re-encrypted payment information using a fourth encryption key and initiates a payment transaction using the decrypted payment information.

15. The server computer of claim 14, wherein obtaining the authentication response value further comprises:

determining, by the server computer, the authentication computer associated with the decrypted payment information;

sending, by the server computer, an authentication request including the security information to the authentication computer; and

receiving, by the server computer, an authentication response including the authentication response value, the authentication response value indicating validation of the security information by an account issuer associated with account information in the decrypted payment information.

16. The server computer of claim 14, wherein obtaining the authentication response value further comprises:

sending, by the server computer, an authentication request including the security information to a payment processing network computer associated with the decrypted payment information, wherein the payment processing network computer determines the authentication computer associated with the decrypted payment information and forwards the authentication request to the authentication computer, wherein the authentication computer validates the security information and generates an authentication response including the authentication response value; and

receiving, by the server computer, the authentication response including the authentication response value from the payment processing network computer.

17. The server computer of claim 14, wherein the security information includes a security value generated by a payment application of the communication device.

18. The server computer of claim 17, wherein the security information includes user authentication data input by a user of the communication device.

19. The server computer of claim 14, wherein the authentication response value is validated by a payment processing network after initiation of the payment transaction during processing of the payment transaction.

20. A system for processing a remote transaction, the system comprising:

the server computer of claim 14;

the communication device configured to send the payment request including security information to the server computer; and

the authentication computer configured to receive an authentication request from the server computer, validate the security information, generate an authentication response including the authentication response value, and send the authentication response to the server computer.