Using mix-media for payment authorization

• US 8,725,652 B2
• Filed: 03/28/2012
• Issued: 05/13/2014
• Est. Priority Date: 03/29/2011
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Faith, Patrick
• Primary Examiner(s): Huang, Tsan-Yu J
• Application Number:
  US13/433,059
• Publication Number:
  US 20120278155A1
• Time in Patent Office: 776 Days
• Field of Search: 705/64, 705/67, 713/186
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 30/0225 Avoiding frauds
• CPC Class Codes: G06V 40/16 Human faces, e.g. facial parts, sketches or expressions

Abstract

Techniques for identifying a user and authenticating payment transactions based on the identification include requesting the user to send his audio, video, and/or image from the point of sale location and comparing the received audio, video, and/or image to an audio/video/image on file to identify and authenticate the user as being the official holder of the payment device being used in the transaction. Once, the user is authenticated, the payment processing can be performed using conventional techniques. Some techniques involve use of accelerometer data associated with the user in addition to or in lieu of the audio, video, and/or image data to perform the identification and authentication of the user.

Claims

1. A server computer comprising:

a processor;

a storage medium coupled to the processor and storing associating information between accelerometer data of a plurality of users and one or more payment devices; and

an interface module configured to communicate with one or more external systems, wherein the processor in conjunction with the interface module is programmed to;

receive an authorization request for processing a payment transaction, the authorization request including information about a first payment device;

determine a user associated with the first payment device;

send an authentication request to a user device associated with the user requesting the user to send a video of the user;

receive the video of the user in response to the authentication request, the video of the user including first accelerometer data associated with the video;

compare the video of the user to one or more videos associated with a plurality of users to determine whether a match exists;

based on a result of the comparison of the video of the user to the one or more videos associated with the plurality of users, extract the first accelerometer data from the received video of the user and compare that to the accelerometer data associated with the plurality of users;

determine that a second accelerometer data from the accelerometer data of the plurality of users matches with the first accelerometer data; and

send the authorization request message to an issuer computer associated with the first payment device.

2. The server computer of claim 1 wherein the authentication request sent to the user device associated with the user requests the user to capture a series of images of the user and send the series of images instead of the video of the user.

3. The server computer of claim 1 wherein the processor is further programmed to compare the received video of the user to one or more videos in a database to identify the user in the received video.

4. The server computer of claim 1, wherein the authentication request sent to the user device associated with the user requests the user to capture audio data, accelerometer data, or image data of the user instead of the video of the user.

5. The server computer of claim 1 wherein the video of the user is received through an out-of-band communication channel that is different than a payment authorization communication channel.

16. The server computer of claim 1 wherein the user device is a mobile communication device.

6. A method comprising:

receiving, by a server computer, an authorization request for processing a payment transaction, the authorization request including information about a first payment device;

determining a user associated with the first payment device;

sending an authentication request to a user device associated with the user, requesting the user to send a video of the user;

receiving the video of the user in response to the authentication request, the video including first accelerometer data associated with the video;

comparing, by the server computer, the video of the user to one or more videos associated with a plurality of users to determine whether a match exists;

based on a result of the comparison of the video of the user to the one or more videos associated with the plurality of users, extracting, by the server computer, the first accelerometer data from the received video and comparing that to the accelerometer data associated with the plurality of users;

determining, by the server computer, that a second accelerometer data from the accelerometer data of the plurality of users matches with the first accelerometer data; and

sending the authorization request message to an issuer computer associated with the first payment device.

7. The method of claim 6 wherein the authentication request sent to the user device associated with the user requests the user to capture a series of self-images and send the series of self-images instead of the video of the user.

8. The method of claim 6 further comprising comparing the received video of the user to one or more videos in a database to identify the user in the received video.

9. The method of claim 6 wherein the video of the user is received via an out-of-band communication channel that is different from a communication channel used for sending the authorization request message.

10. The method of claim 6 wherein the user device is a mobile communication device.

14. The method of claim 6 further comprising receiving the video of the user via a first communication channel that is different from a second communication channel used for sending the authorization request message to an issuer computer.

15. The method of claim 6 wherein the authentication request is sent using a first communication channel that is different from a second communication channel used for receiving the authorization request message.

17. The method of claim 6 further comprising:

marking the video of the user when the second accelerometer data is determined not to match the first accelerometer data;

receiving another video and comparing the other video with the marked video to determine a match.

18. The method of claim 6 further comprising:

updating the second accelerometer data associated with the user on a periodic basis.

19. The method of claim 6 wherein the extraction of the first accelerometer data and the determination that the second accelerometer data matches with the first accelerometer data are performed when the match is determined not to exist but is within a threshold margin.

11. A non-transitory computer-readable medium storing a plurality of instructions which when executed by a processor of a computer server causes the computer server to perform a method for authenticating a user, the plurality of instructions comprising:

instructions that cause the processor to receive an authorization request for processing a payment transaction, the authorization request including information about a first payment device;

instructions that cause the processor to determine a user associated with the first payment device;

instructions that cause the processor to send an authentication request to a user device associated with the user requesting the user to send a video of the user;

instructions that cause the processor to receive the video of the user in response to the authentication request, the video of the user including first accelerometer data associated with the video;

instructions that cause the processor to compare the video of the user to one or more videos associated with a plurality of users to determine whether a match exists;

instructions that cause the processor to, based on a result of the comparison of the video of the user to the one or more videos associated with the plurality of users, extract the first accelerometer data from the received video of the user and compare that to the accelerometer data associated with the plurality of users;

instructions that cause the processor to determine that a second accelerometer data from the accelerometer data of the plurality of users matches with the first accelerometer data; and

instructions that cause the processor to send the authorization request message to an issuer computer associated with the first payment device.

12. The non-transitory computer-readable media of claim 11 wherein the plurality of instructions further comprise instructions that cause the processor to compare the received video of the user to one or more videos in a database to identify the user in the received video.

13. The non-transitory computer-readable media of claim 11 wherein the plurality of instructions further comprise instructions that cause the processor to receive the video of the user via an out-of-band communication channel that is different from a communication channel used to send the authorization request message.