PROCESSING AUTHORIZATION REQUESTS

• US 20150254672A1
• Filed: 05/21/2015
• Published: 09/10/2015
• Est. Priority Date: 11/22/2012
• Status: Abandoned Application

• Current Assignee: Visa Europe Limited (Visa, Inc.)
• Original Assignee: Visa Europe Limited (Visa, Inc.)
• Inventors: HUESCH, Christian, YARYURA, Georges, HOFFMANN, Michael, FUHRMANN, Katharina
• Application Number:
  US14/718,989
• Publication Number:
  US 20150254672A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/306 using TV related infrastructures external card used for payment with client device H04N21/4185
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners

Abstract

Systems, methods and computer programs for use in processing payment authorization requests for payment transactions to be conducted via a data communications network. At a trusted intermediary system, data indicative of the user having been authenticated by a first authentication process conducted between the user and a data communication interface associated with a bank data processing system is received via a data communication network. In response to the receipt of the authentication-indicative data, a user account corresponding to one or more transactional accounts held by a user at the bank data processing system is activated. Payment data associated with the one or more transactional accounts is stored in a data store in association with the user account. Following a subsequent authentication of the user by a second authentication process conducted between the user and the trusted intermediary system, the stored payment data is retrieved from the data store for use in processing at least one payment authorization request involving the user.

Claims

1. A method for use in processing payment authorization requests for payment transactions to be conducted via a data communications network, the method comprising, at a trusted intermediary system:

receiving data indicative of a user having been authenticated by a first authentication process conducted between the user and a data communication interface associated with a bank data processing system via a data communication network;

activating, in response to the receipt of the authentication-indicative data, a user account corresponding to one or more transactional accounts held by the user at the bank data processing system;

storing payment data associated with the one or more transactional accounts in a data store in association with the user account; and

retrieving, following a subsequent authentication of the user by a second authentication process conducted between the user and the trusted intermediary system, the stored payment data from the data store for use in processing at least one payment authorization request involving the user.

2. The method of claim 1, wherein the second authentication process involves the use of fewer authentication factors than the first authentication process.

3. The method of claim 1, comprising receiving one or more first authentication process credentials for use in the first authentication process.

4. The method of claim 3, comprising transmitting the one or more first authentication process credentials via an interface to a bank data processing system.

5. The method of claim 1, comprising:

receiving one or more first authentication process credentials for use in the first authentication process prior to said receiving of the authentication-indicative data from the bank data processing system; and

transmitting said one or more first authentication process credentials to the bank data processing system prior to said receiving of the authentication-indicative data from the bank data processing system.

6. The method of claim 1, comprising transmitting a request for one or more third authentication process credentials for use in a third authentication process conducted between the user and the bank data processing system.

7. The method of claim 1, comprising:

transmitting a request for one or more third authentication process credentials for use in a third authentication process conducted between the user and the bank data processing system in response to determining that a payment authorization request involving the user relates to potentially fraudulent activity;

receiving one or more third authentication process credentials for use in the third authentication process after said receiving of the authentication-indicative data from the bank data processing system; and

transmitting said one or more third authentication process credentials for use in said third authentication process conducted between the user and the bank data processing system after said receiving of the authentication-indicative data from the bank data processing system.

8. The method of claim 1, comprising:

transmitting a request for further payment data associated with one or more transactional accounts held by the user with the bank data processing system to the bank data processing system in response to detecting one or more trigger events;

receiving further payment data associated with one or more transactional accounts held by the user with the bank data processing system from the bank data processing system; and

storing the further payment data in the data store in association with the user account,

wherein the one or more trigger events comprise one or more of;

receiving a request from the user to determine whether updated payment data is available;

expiry of a predetermined time period;

determining that payment data stored in association with the user account is no longer valid.

9. The method of claim 1, wherein payment data associated with a plurality of transactional accounts held by the user is stored in the data store in association with the user account, the method comprising transmitting data identifying the plurality of transactional accounts to an online merchant system associated with an online merchant to facilitate selection of a preferred transactional account by the user.

10. A system for use in processing payment authorization requests for payment transactions to be conducted via a data communications network, the system comprising a trusted intermediary system configured for:

receiving data indicative of a user having been authenticated by a first authentication process conducted between the user and a data communication interface associated with a bank data processing system via a data communication network;

activating, in response to the receipt of the authentication-indicative data, a user account corresponding to one or more transactional accounts held by the user at the bank data processing system;

storing payment data associated with the one or more transactional accounts in a data store in association with the user account; and

retrieving, following a subsequent authentication of the user by a second authentication process conducted between the user and the trusted intermediary system, the stored payment data from the data store for use in processing at least one payment authorization request involving the user.

11. A non-transitory computer-readable medium comprising computer-executable instructions which, when executed by a processor, cause a computing device to perform a method for use in processing payment authorization requests for payment transactions to be conducted via a data communications network, the method comprising, at a trusted intermediary system:

receiving data indicative of a user having been authenticated by a first authentication process conducted between the user and a data communication interface associated with a bank data processing system via a data communication network;

activating, in response to the receipt of the authentication-indicative data, a user account corresponding to one or more transactional accounts held by the user at the bank data processing system;

storing payment data associated with the one or more transactional accounts in a data store in association with the user account; and

retrieving, following a subsequent authentication of the user by a second authentication process conducted between the user and the trusted intermediary system, the stored payment data from the data store for use in processing at least one payment authorization request involving the user.

12. A method for use in processing payment authorization requests for payment transactions to be conducted via a data communications network, the method comprising, at a bank data processing system:

conducting a first authentication process involving a user and the bank data processing system; and

transmitting data, indicative of the user having been authenticated by the first authentication process, to activate a user account for the user in a trusted intermediary system, the trusted intermediary system being arranged to store payment data associated with one or more transactional accounts held by the user at the bank data processing system in a data store in association with the activated user account and to retrieve, following a subsequent authentication of the user by a second authentication process conducted between the user and the trusted intermediary system, the stored payment data from the data store for use in processing at least one payment authorization request involving the user.

13. The method of claim 12, wherein the second authentication process involves the use of fewer authentication factors than the first authentication process.

14. The method of claim 12, comprising:

receiving one or more first authentication process credentials for use in the first authentication process.

15. The method of claim 14, comprising:

receiving the one or more first authentication process credentials via an interface with the trusted intermediary system.

16. The method of claim 12, comprising:

receiving the one or more first authentication process credentials for use in the first authentication process prior to transmitting the authentication-indicative data to the trusted intermediary system.

17. The method of claim 12, comprising:

transmitting a request for one or more first authentication process credentials for use in a third authentication process conducted between the user and the bank data processing system to the trusted intermediary system in response to determining that a payment authorization request involving the user relates to potentially fraudulent activity.

18. The method of claim 12, comprising:

receiving one or more first authentication process credentials for use in a third authentication process conducted between the user and the bank data processing system after transmitting the payment data to the trusted intermediary system.

19. The method of claim 12, wherein the first authentication process is different from the second authentication process.

20. The method of claim 12, comprising:

transmitting updated payment data associated with one or more transactional accounts held by the user with the bank data processing system from the trusted intermediary system in response to detecting one or more trigger events,

wherein the one or more trigger events comprise one or more of;

receiving a request from the user to provide updated payment data to the trusted intermediary system;

expiry of a predetermined time period;

determining that at least some payment data associated with the one or more transactional accounts held by the user with the bank data processing system is no longer valid.