METHOD AND CORRESPONDING PROXY SERVER, SYSTEM, COMPUTER-READABLE STORAGE MEDIUM AND COMPUTER PROGRAM

• US 20150220890A1
• Filed: 02/05/2015
• Published: 08/06/2015
• Est. Priority Date: 02/06/2014
• Status: Active Grant

• Current Assignee: Mastercard Asia/Pacific Pte. Ltd (MasterCard Incorporated)
• Original Assignee: Mastercard Asia/Pacific Pte. Ltd (MasterCard Incorporated)
• Inventors: Seshadri, Tadepally Venkata, Murali, Manohar, Malhotra, Sandeep
• Granted Patent: US 10,453,063 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 67/53 using third party service providers
• CPC Class Codes: H04L 67/562 Brokering proxy services

Abstract

A method is provided. The method includes receiving a request message, the request message relating to a transaction between a first client and a second client, the request message including first client data and second client data, the first client data identifying an account to be used by the first client in the transaction, the second client data indicating if the second client is subscribed to a service. The method further includes determining if the second client is subscribed to the service, and generating an authentication request message if the second client is not subscribed to the service, the authentication request message requesting confirmation that a holder of the account is the first client. The method further includes sending the authentication request message, and receiving an authentication response message from the external server in response, the authentication response message including an indication whether the holder is the first client.

Claims

1. A method comprising:

receiving a request message at a proxy server, the request message relating to a transaction between a first client and a second client, the request message comprising first client data and second client data, the first client data identifying an account to be used by the first client in the transaction, the second client data indicating if the second client is subscribed to a service;

determining if the second client is subscribed to the service based on the second client data at the proxy server;

generating an authentication request message at the proxy server if it is determined that the second client is not subscribed to the service, the authentication request message requesting confirmation that a holder of the account is the first client;

sending the authentication request message from the proxy server to an external server; and

receiving an authentication response message from the external server at the proxy server in response to sending the authentication request message, the authentication response message comprising an indication of whether the holder of the account is the first client.

2. The method according to claim 1, wherein the request message indicates a type of the transaction and the authentication request message is generated only if the type is a predetermined type.

3. The method according to claim 1, wherein the first client data indicates if the holder of the account is subscribed to the service and the authentication request message is generated if the first client data indicates that the holder of the account is subscribed to the service.

4. The method according to claim 1, further comprising holding the request message at the proxy server for a preset time period if the authentication request message is generated.

5. The method according to claim 1, further comprising:

generating a transaction request message at a first client device associated with the first client, the transaction request message comprising the first client data;

sending the transaction request message from the first client device to a second client device associated with the second client to initiate the transaction; and

generating the request message at the second client device based on the transaction request message and sending the request message from the second client device to the proxy server.

6. The method according to claim 1, wherein the external server is an issuer server associated with an issuer of the account, the authentication request message further comprising the account data from the request message, the method further comprising:

generating a verification request message at the issuer server based on verification data stored in association with the first client data by the issuer server, the verification data identifying a verification device of the holder of the account, the verification request message requesting password data for verification;

sending the verification request message from the issuer server to the verification device and outputting a password request message for the password data from the verification device to a user of the verification device;

receiving an input at the verification device from the user of the verification device and sending the input from the verification device to the issuer server; and

generating the authentication response message at the issuer server and sending the authentication response message from the issuer server to the proxy server, wherein the indication in the authentication response message is based on a comparison between the input and a password identified in the verification data.

7. The method according to claim 6, further comprising:

modifying the request message to include the indication at the proxy server to form a modified request message;

sending the modified request message from the proxy server to the issuer server; and

authorizing the transaction at the issuer server based on the indication in the modified request message.

8. The method according to claim 7, further comprising generating a receipt message at the issuer server, the receipt message indicating whether or not the transaction has been authorized.

9. The method according to claim 1, wherein the proxy server is an acquirer server associated with an acquirer, the acquirer being an administrator of a second client account to be used by the second client in the transaction.

10. The method according to claim 1, wherein the proxy server is a payment network server, the payment network server configured to communicate with an acquirer server associated with an acquirer, the acquirer an administrator of a second client account to be used by the second client in the transaction.

11. A proxy server comprising:

at least one processor; and

at least one memory including computer program code;

the at least one memory and the computer program code configured to, with the at least one processor, cause the proxy server at least to;

receive a request message, the request message relating to a transaction between a first client and a second client, the request message comprising first client data and second client data, the first client data identifying an account to be used by the first client in the transaction, the second client data indicating if the second client is subscribed to a service;

determine if the second client is subscribed to the service based on the second client data;

generate an authentication request message if it is determined that the second client is not subscribed to the service, the authentication request message requesting confirmation that a holder of the account is the first client;

send the authentication request message to an external server; and

receive an authentication response message from the external server in response to sending the authentication request message, the authentication response message comprising an indication of whether the holder of the account is the first client.

12. The proxy server according to claim 11, wherein the request message indicates a type of the transaction and the authentication request message is generated only if the type is a predetermined type.

13. The proxy server according to claim 11, wherein the first client data indicates if the holder of the account is subscribed to the service and the authentication request message is generated if the first client data indicates that the holder is subscribed to the service.

14. The proxy server according to claim 11, wherein the at least one memory and the computer program code is further configured with the at least one processor to cause the proxy server to hold the request message at the proxy server for a preset time period if the authentication request message is generated.

15. The proxy server according to claim 11, wherein the second client is a merchant and the first client is a customer who initiates the transaction with the merchant.

16. The proxy server according to claim 11, wherein the transaction is a payment transaction between the first client and the second client.

17. A system comprising:

a proxy server according to claim 11; and

a first client device associated with the first client,

wherein the first client device is configured to generate a transaction request message comprising the first client data.

18. The system according to claim 17, further comprising a second client device associated with the second client,

wherein the first client device is configured to send the transaction request message to the second client device,

wherein the second client device is configured to receive the transaction request message from the first client device to initiate the transaction, and

wherein the second client device is further configured to generate the request message based on the transaction request message and to send the request message to the proxy server.

19. The system according to claim 17, wherein the external server is an issuer server associated with an issuer of the account, and

wherein the issuer server is configured to:

receive the authentication request message from the proxy server, the authentication request message further comprising the first client data from the request message;

store verification data in association with the first client data; and

generate a verification request message based on the verification data, the verification request requesting password data for verification.

20. A proxy server comprising:

means for receiving a request message, the request message relating to a transaction between a first client and a second client, the request message comprising first client data and second client data, the first client data identifying an account to be used by the client in the transaction, the second client data indicating if the second client is subscribed to a service;

means for determining if the second client is subscribed to the service based on the second client data;

means for generating an authentication request message if it is determined that the second client is not subscribed to the service, the authentication request message requesting confirmation that a holder of the account is the first client;

means for sending the authentication request message to an external server; and

means for receiving an authentication response message from the external server in response to sending the authentication request message, the authentication response message comprising an indication of whether the holder of the account is the first client.

21. Computer-readable storage media having computer-executable instructions embodied thereon, wherein, when executed by at least one processor, the computer-executable instructions cause the processor to:

receive a request message, the request message relating to a transaction between a first client and a second client, the request message comprising first client data and second client data, the first client data identifying an account to be used by the first client in the transaction, the second client data indicating if the second client is subscribed to a service;

determine if the second client is subscribed to the service based on the second client data;

generate an authentication request message if it is determined that the second client is not subscribed to the service, the authentication request message requesting confirmation that a holder of the account is the first client;

send the authentication request message to an external server; and

receive an authentication response message from the external server in response to sending the authentication request message, the authentication response message comprising an indication of whether the holder of the account is the first client.