METHOD AND SYSTEM FOR AUTHENTICATION DATA COLLECTION AND REPORTING

• US 20170091772A1
• Filed: 09/30/2015
• Published: 03/30/2017
• Est. Priority Date: 09/30/2015
• Status: Active Grant

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Mallepally, Anand Reddy, Baker, Paul Stephen, Hey, Mark, Piel, Brian John
• Granted Patent: US 11,232,453 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/36 using electronic wallets or electronic money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3827 Use of message hashing
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification

Abstract

Methods, media, and systems directed to a platform for determining, processing, storing, and analyzing authentication data from various internal and external systems within an authentication ecosystem, and from other authentication systems providing authentication services.

Claims

1. A computer-implemented method, the method comprising:

receiving, by a computer from at least one access control server (ACS) external to a particular enterprise environment, a first authentication message and a second authentication message associated with a transaction;

receiving, by a computer from at least one access control server (ACS) internal to the enterprise environment, a first enrollment message and a second enrollment message associated with the transaction;

combining the first authentication message and the second authentication message associated with the transaction with a first enrollment message and the second enrollment message associated with the transaction into a single data record; and

storing the single data record in a shared data storage device.

2. The method of claim 1, further comprising determining, by a processor, that the first enrollment message and the second enrollment message are associated with the transaction to which the first authentication message and the second authentication response are associated.

3. The method of claim 1, wherein the first authentication message and the second authentication response message associated with the transaction are received from at least one of an application, a service, or a communication channel outside of the particular enterprise environment.

4. The method of claim 1, wherein the first enrollment message and the second enrollment message associated with the transaction are received from a software application within the particular enterprise environment that is not exposed to either of an application, a service, or a communication channel outside of a particular enterprise environment.

5. The method of claim 1, wherein the at least one ACS internal to the enterprise environment is selected from a group of:

an online authentication service ACS, an enterprise ACS internal to the enterprise environment, and an authentication value ACS that generates second verify enrollment response messages by communicating with at least one device external to the enterprise environment.

6. The method of claim 5, wherein the second enrollment response message includes an indication of a type of ACS from which the second enrollment message are received.

7. The method of claim 1, wherein the data storage system comprises a data warehouse facility to perform enterprise level analytics on the data stored therein, wherein the stored data includes aggregated historical authentication data to feed into a fraud risk scoring system to create risk scores based on account or identity authentication patterns and velocities.

8. The method of claim 1, wherein the first authentication message is a verify authentication request message, the second authentication message is a verify authentication response message, the first enrollment message is a verify enrollment request message, and the second enrollment message is a verify enrollment response message associated with the transaction

combining the first authentication message and the second authentication message associated with the transaction with a first enrollment message and the second enrollment message associated with the transaction into a single data record;

and

9. A system comprising:

an apparatus comprising;

a processor; and

a memory device in communication with the processor and storing program instructions thereon, the processor operative with the program instructions to;

receive from at least one access control server (ACS) external to a particular enterprise environment, a first authentication message and a second authentication message associated with a transaction;

receive from at least one access control server (ACS) internal to the enterprise environment, a second enrollment message associated with the transaction;

combine the first authentication message and the second authentication message associated with the transaction with a first enrollment message and the second enrollment message associated with the transaction into a single data record; and

store the single data record in the memory, the memory being a shared data storage device.

10. The system of claim 9, wherein the processor further determines that the first enrollment message and the second enrollment message are associated with the transaction to which the first authentication message and the second authentication are associated.

11. The system of claim 9, wherein the first authentication message and the second authentication response message associated with the transaction are received from at least one of an application, a service, or a communication channel outside of the particular enterprise environment.

12. The system of claim 9, wherein the first enrollment message and the second enrollment message associated with the transaction are received from a software application within the particular enterprise environment that is not exposed to either of an application, a service, or a communication channel outside of a particular enterprise environment.

13. The system of claim 9, wherein the at least one ACS internal to the enterprise environment is selected from a group of:

an online authentication service ACS, an enterprise ACS internal to the enterprise environment, and an authentication value ACS that generates second enrollment messages by communicating with at least one device external to the enterprise environment.

14. The system of claim 13, wherein the second enrollment message includes an indication of a type of ACS from which the second enrollment message is received.

15. The system of claim 9, wherein the memory comprises a data warehouse facility to perform enterprise level analytics on the data stored therein, wherein the stored data includes aggregated historical authentication data to feed into a fraud risk scoring system to create risk scores based on account or identity authentication patterns and velocities.

16. The system of claim 9, wherein the first authentication message is a verify authentication request message, the second authentication message is a verify authentication response message, the first enrollment message is a verify enrollment request message, and the second enrollment message is a verify enrollment response message associated with the transaction

17. A medium having processor-executable program instructions stored thereon, the medium comprising:

program instructions to receive from at least one access control server (ACS) external to a particular enterprise environment, a first authentication message and a second authentication message associated with a transaction;

program instructions to receive from at least one access control server (ACS) internal to the enterprise environment, a second enrollment message associated with the transaction;

program instructions to combine the first authentication message and the second authentication message associated with the transaction with a first enrollment message and the second enrollment message associated with the transaction into a single data record; and

program instructions to store the single data record in a data storage device.

18. The medium of claim 17, further comprising determining, by a processor, that a first enrollment message and the second enrollment response message are associated with the transaction to which the first authentication message and the second authentication message are associated.

19. The medium of claim 17, wherein the first authentication message and the second authentication message associated with the transaction are received from at least one of an application, a service, or a communication channel outside of the particular enterprise environment.

20. The medium of claim 17, wherein the first enrollment message and the second enrollment message associated with the transaction are received from a software application within the particular enterprise environment that is not exposed to either of an application, a service, or a communication channel outside of a particular enterprise environment.

21. The medium of claim 17, wherein the at least one ACS internal to the enterprise environment is selected from a group of:

an online authentication service ACS, an enterprise ACS internal to the enterprise environment, and an authentication value ACS that generates the second enrollment messages by communicating with at least one device external to the enterprise environment.

22. The medium of claim 17, wherein the second enrollment message includes an indication of a type of ACS from which the second enrollment response message is received.

23. The medium of claim 17, wherein the first authentication message is a verify authentication request message, the second authentication message is a verify authentication response message, the first enrollment message is a verify enrollment request message, and the second enrollment message is a verify enrollment response message associated with the transaction