Universal merchant platform for payment authentication

• US 7,051,002 B2
• Filed: 06/12/2003
• Issued: 05/23/2006
• Est. Priority Date: 06/12/2002
• Status: Expired due to Term

• Current Assignee: CardinalCommerce Corporation (Visa, Inc.)
• Original Assignee: CardinalCommerce Corporation (Visa, Inc.)
• Inventors: Sherwin, Francis M., Balasubramanian, Chandra S., Keresman, Michael A. III
• Primary Examiner(s): Poinvil, Frantzy
• Application Number:
  US10/459,849
• Publication Number:
  US 20030233327A1
• Time in Patent Office: 1,076 Days
• Field of Search: 705 30- 44
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists

Abstract

A method is provided for processing authentication of a consumer using one of a plurality of different types of payment instruments to conduct a commercial transaction over a communications network with a merchant. The payment instrument being used is either enrolled in or not enrolled in an authentication program conforming to one of a plurality of authentication protocols prescribed for the respective plurality of different types of payment instruments by payment networks supporting the same. The method includes: obtaining payment information for the transaction from the merchant, the payment information including a number identifying the particular payment instrument being used; determining the type of payment instrument being used from the payment information; obtaining an authentication determination for the transaction in accordance with the authentication protocols prescribed for the determined type of payment instrument being used; and, returning the obtained authentication determination to the merchant.

Claims

1. A system for supporting authentication processing of commercial transactions conducted over a communications network between a consumers and merchants, wherein the consumers are each using one of a plurality of different types of payment instruments, said used payment instrument being either enrolled or not enrolled in an authentication program conforming to one of a plurality of authentication protocols prescribed for the respective plurality of different types of payment instruments, the system comprising:

a connection layer for connecting with the merchants to exchange communications therewith, said connection layer receiving payment information for the transactions from the merchants, said payment information for each transaction including a number identifying a particular payment instrument being used;

a plug-in layer including a plurality of plug-in components, each plug-in component administering a different one of a plurality of authentication programs in accordance with the authentication protocols prescribed to obtain an authentication determination for the transactions; and

,

a distribution layer residing between the connection layer and the plug-in layer, said distribution layer determining from the payment information received for each transaction which of the different authentication program is prescribed for the type of payment instrument identified in the payment information, and routing communications between the connection layer and selected plug-in components in the plug-in layer, wherein said payment information for each transaction is routed to the plug-in component responsible for administering the authentication program for the particular payment instrument used for that transaction.

2. The system of claim 1, wherein the connection layer supports a plurality of connection means allowing for different types of connectivity with the merchant.

3. The system of claim 2, wherein at least one of the connection means is an a hypertext transfer protocol (HTTPS) server that communicates with a thin-client installed on a server that is supporting a web site of the merchant, said thin-client providing communication with the web site.

4. The system of claim 1, wherein the plug-in layer is extensible so as to allow selected plug-in components to be added, removed and modified without disrupting other plug-in components residing in the plug-in layer.

5. A method for supporting authentication processing of a commercial transaction conducted over a communications network between a first party and a second party, wherein said first party maintains a server operatively connected to the communications network for conducting the commercial transaction with the second party and accepts payment therethrough via a plurality of different payment instrument types belonging to different payment networks, said plurality of different payment instrument types having different authentication protocols prescribed therefor by their respective payment networks, conduct of said commercial transaction including the second party submitting payment information identifying a particular payment instrument being used for the commercial transaction, said payment information being obtained by the first party'"'"'s server, said method comprising:

(a) providing software installed on the first party'"'"'s server that sends payment information for the plurality of different payment instrument types accepted by the first party from the first party'"'"'s server to a universal platform server, said universal platform server being equipped to format and route messages over the communications network in different manners to accommodate the plurality of different authentication protocols prescribed by the different payment networks;

(b) determining from the payment information received at the universal platform server, for each commercial transaction, which of the different authentication protocols is prescribed by the payment network for the type of payment instrument identified in the payment information;

(c) selecting, in accordance with the determination of step (b), a particular authentication protocol from the plurality of different authentication protocols supported by the universal platform server;

(d) obtaining an authentication determination for the commercial transaction in accordance with the selected authentication protocol, including formatting messages and routing the formatted messages over the communications network in accordance with one or more mandates of the selected authentication protocol; and

,

(e) returning the obtained authentication determination to the first party'"'"'s server.

6. The method of claim 5, wherein the formatted messages include a first message that is routed to an issuing entity, said issuing entity having issued the particular payment instrument being used for the transaction and said first message requesting that the issuing entity confirm an enrollment status of the particular payment instrument being used for the transaction.

7. The method of claim 6, further comprising obtaining a response to the first message from the issuing entity, wherein based upon the response, if the particular payment instrument being used is not enrolled in the authentication program for the determined type of payment instrument, then steps (d) and (e) are omitted, otherwise if the particular payment instrument being used is enrolled in the authentication program for the determined type of payment instrument, then steps (d) and (e) are completed.

8. The method of claim 7, wherein the formatted messages include a second message that is routed to the merchant such that the consumer is redirected to the issuing entity for completing authentication directly therewith whereupon the authentication determination is made, a response to said second message containing the authentication determination made by the issuing entity being returned in accordance with routing instructions contained in the second message so that it is obtained in step (d).

9. The method of claim 8, further comprising:

verifying that the response to the second message was obtained from the issuing entity.

10. The method of claim 5, wherein the consumer accesses a merchant'"'"'s web page over the communications network to conduct the commercial transaction, and step (d) comprises:

dynamically adding one or more data fields to the merchant'"'"'s web page.

11. The method of claim 5, wherein the payment information is received by the universal platform server in extensible Markup Language (XML) format.

12. The method of claim 5, further comprising:

determining from the payment information an enrollment status of the particular payment instrument being used for the transaction, wherein if the particular payment instrument being used is not enrolled in the authentication program for the determined type of payment instrument, then steps (d) and (e) are omitted, otherwise if the particular payment instrument being used is enrolled in the authentication program for the determined type of payment instrument, then steps (d) and (e) are completed.

13. The method of claim 5, wherein the payment instrument is a credit or debit card.

14. A system for supporting authentication processing of a commercial transaction conducted over a communications network between a first party and a second party, wherein said first party maintains a server operatively connected to the communications network for conducting the commercial transaction with the second party and accepts payment therethrough via a plurality of different payment instrument types belonging to different payment networks, said plurality of different payment instrument types having different authentication protocols prescribed therefor by their respective payment networks, conduct of said commercial transaction including the second party submitting payment information identifying a particular payment instrument being used for the commercial transaction, said payment information being obtained by the first party'"'"'s server, said system comprising:

(a) software installed on the first party'"'"'s server that sends payment information for the plurality of different payment instrument types accepted by the first party from the first party'"'"'s server to a universal platform server, said universal platform server being equipped to format and route messages over the communications network in different manners to accommodate the plurality of different authentication protocols prescribed by the different payment networks;

(b) means for determining from the payment information received at the universal platform server, for each commercial transaction, which of the different authentication protocols is prescribed by the payment network for the type of payment instrument identified in the payment information;

(c) means for selecting, in accordance with the determination of step (b), a particular authentication protocol from the plurality of different authentication protocols supported by the universal platform server;

(d) means for obtaining an authentication determination for the commercial transaction in accordance with the selected authentication protocol, including formatting messages and routing the formatted messages over the communications network in accordance with one or more mandates of the selected authentication protocol; and

,

(e) means for returning the obtained authentication determination to the first party'"'"'s server.