SYSTEMS AND METHODS FOR PROVIDING ANONYMIZED TRANSACTION DATA TO THIRD-PARTIES

• US 20150317613A1
• Filed: 04/30/2014
• Published: 11/05/2015
• Est. Priority Date: 04/30/2014
• Status: Active Grant

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Clark, Kyle Patrick
• Granted Patent: US 11,030,587 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions

Abstract

A computer-implemented method for authorizing access to transaction data to a third-party computer system is implemented by a payment processor computer system coupled to a memory. The method includes receiving a request for access to transaction data associated with a cardholder account, requesting a set of authentication information associated with the cardholder account, authenticating the set of authentication information upon receiving the set of authentication information, and authorizing the third-party computer system to receive transaction data associated with the cardholder account. Upon validation, the payment processor computer system generates an authorization token and provides the authorization token to the third-party computer system. The third-party computer system uses the authorization token and a secure identifier to retrieve transaction data associated with the cardholder account.

Claims

1. A computer-implemented method for authorizing access to transaction data to a third-party computer system, the method implemented by a payment processor computer system in communication with a memory, the method comprising:

receiving, at the payment processor computer system, a request for access to transaction data associated with a cardholder account;

requesting a set of authentication information associated with the cardholder account;

authenticating, at the payment processor computer system, the set of authentication information upon receiving the set of authentication information; and

authorizing the third-party computer system to receive transaction data associated with the cardholder account.

2. The method of claim 1, wherein requesting a set of authentication information associated with the cardholder account further comprises:

generating a request form configured to transmit the set of authentication information directly to the payment processor computer system; and

providing the request form to the third-party computer system, wherein the request form is embedded within third-party software configured to be executed on the third-party computer system.

3. The method of claim 1, wherein receiving the request for access to transaction data further comprises:

receiving a secure identifier associated with the cardholder account, wherein the secure identifier does not contain any information directly identifying the cardholder account and does not contain any information directly identifying a cardholder associated with the cardholder account.

4. The method of claim 3, further comprising:

associating, at the payment processor computer system, the secure identifier with a primary account identifier for the cardholder account.

5. The method of claim 4, further comprising:

receiving a request for transaction data from the third-party computer system, wherein the request for transaction data includes the secure identifier;

retrieving the primary account identifier based upon the secure identifier;

retrieving transaction data associated with the cardholder account based upon the primary account identifier; and

providing transaction data associated with the cardholder account to the third-party computer system, wherein the transaction data is provided using the secure identifier and contains no personally identifiable information (PII).

6. The method of claim 1, wherein receiving the request for transaction data further comprises:

receiving an identifier associated with at least one of third-party software associated with the third-party computer system and the third-party computer system.

7. The method of claim 1, wherein authorizing the third-party computer system further comprises:

generating an authorization token associated with the cardholder account; and

transmitting the authorization token to the third-party computer system.

8. The method of claim 1, further comprising:

providing a confirmation message to the third-party computer system upon authorizing the third-party computer system to receive transaction data associated with the cardholder account.

9. The method of claim 1, wherein receiving the set of authentication information further comprises:

receiving at least one of a primary account number associated with the cardholder account, a personal name associated with the cardholder account, a personal identification number (PIN) number associated with the cardholder account, and a physical address associated with the cardholder account.

10. A payment processor computer system for authorizing access to transaction data to a third-party computer system, the payment processor computer system comprising:

a processor; and

a memory coupled to said processor, said processor configured to;

receive a request for access to transaction data associated with a cardholder account;

request a set of authentication information associated with the cardholder account;

authenticate the set of authentication information upon receiving the set of authentication information; and

authorize the third-party computer system to receive transaction data associated with the cardholder account.

11. A payment processor computer system in accordance with claim 10 wherein the processor is further configured to:

generate an authorization token associated with the cardholder account; and

transmit the authorization token to the third-party computer system.

12. A payment processor computer system in accordance with claim 10 wherein the processor is further configured to:

receive a secure identifier associated with the cardholder account, wherein the secure identifier does not contain any information directly identifying the cardholder account and does not contain any information directly identifying a cardholder associated with the cardholder account.

13. A payment processor computer system in accordance with claim 12 wherein the processor is further configured to:

associate the secure identifier with a primary account identifier for the cardholder account, the primary account identifier directly identifying the cardholder account in the payment processor computer system.

14. A payment processor computer system in accordance with claim 13 wherein the processor is further configured to:

receive a request for transaction data from the third-party computer system, wherein the request for transaction data includes the secure identifier;

retrieve the primary account identifier based upon the secure identifier;

retrieve transaction data associated with the cardholder account based upon the primary account identifier; and

provide transaction data associated with the cardholder account to the third-party computer system, wherein the transaction data is provided using the secure identifier and contains no personally identifiable information (PII).

15. A payment processor computer system in accordance with claim 10 wherein the processor is further configured to:

receive an identifier associated with at least one of third-party software associated with the third-party computer system and the third-party computer system.

16. A payment processor computer system in accordance with claim 10 wherein the processor is further configured to:

generate a request form configured to transmit the set of authentication information directly to the payment processor computer system; and

provide the request form to the third-party computer system, wherein the request form is embedded within third-party software configured to be executed on the third-party computer system.

17. A payment processor computer system in accordance with claim 10 wherein the processor is further configured to:

provide a confirmation message to the third-party computer system upon authorizing the third-party computer system to receive transaction data associated with the cardholder account.

18. A payment processor computer system in accordance with claim 10 wherein the processor is further configured to:

validate at least one of a primary account number associated with the cardholder account, a personal name associated with the cardholder account, a personal identification number (PIN) number associated with the cardholder account, and a physical address associated with the cardholder account.

19. Computer-readable storage media for authorizing access to transaction data to a third-party computer system, the computer-readable storage media having computer-executable instructions embodied thereon, wherein, when executed by at least one processor, the computer-executable instructions cause the processor to:

receive a request for access to transaction data associated with a cardholder account;

request a set of authentication information associated with the cardholder account;

authenticate the set of authentication information upon receiving the set of authentication information; and

authorize the third-party computer system to receive transaction data associated with the cardholder account.

20. The computer-readable storage media in accordance with claim 19, wherein the computer-executable instructions cause the processor to:

generate an authorization token associated with the cardholder account; and

transmit the authorization token to the third-party computer system.