Method and system for processing PIN debit transactions

• US 9,317,850 B2
• Filed: 04/05/2011
• Issued: 04/19/2016
• Est. Priority Date: 04/05/2010
• Status: Active Grant

• Current Assignee: CardinalCommerce Corporation (Visa, Inc.)
• Original Assignee: CardinalCommerce Corporation (Visa, Inc.)
• Inventors: Keresman, Michael A. III, Turgeon, Paul
• Primary Examiner(s): KIM, STEVEN S
• Application Number:
  US13/080,119
• Publication Number:
  US 20110246324A1
• Time in Patent Office: 1,841 Days
• Field of Search: 705/39, 705/44, 705/64, 705/67
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/26 Debit schemes, e.g. "pay now"
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 30/0613 Third-party assisted

Abstract

A system for processing a debit transaction between a merchant and a consumer. The system includes one or more processors programmed to receive payment information for the consumer, collect authentication data for the debit card from the consumer, transmit an alias account number unique to the debit transaction to the merchant, receive a credit authorization message including the alias account number from the merchant, translate the credit authorization message to a debit authorization message using the authentication data, and transmit the debit authorization message to a payment processor.

Claims

1. A system for processing a debit transaction between a merchant server and a consumer computer, said system comprising:

one or more processors of a third party programmed to;

receive a card number identifying a debit card of the consumer for completion of the debit transaction from the consumer computer;

select on of a plurality of different credentialing applications based on the received card number, said credentialing applications operative to collect authentication data from the consumer computer;

collect authentication data for the debit card from the consumer computer using the selected credentialing application;

subsequent to collecting the authentication data;

     1) generate an alias account number correlated with the card number; and

     2) store the alias account number, the card number identifying the debit card, and the authentication data in a storage;

transmit the alias account number to the merchant server, wherein the alias account number is unique to the debit transaction relative to other debit transaction;

subsequent to transmitting the alias account number to the merchant server, receive from the merchant server a credit authorization request to capture funds from the alias account number, the credit authorization request received from the merchant server in a credit authorization message, wherein the credit authorization message includes the alias account number;

retrieve the authentication data from the storage using the alias account number in the credit authorization message;

translate the received credit authorization message to a debit authorization request message using the authentication data, wherein the debit authorization request message includes the authentication data; and

request debit authorization to capture funds from the card number by transmitting the debit authorization request message to a payment processor,

wherein the debit card comprises a PIN debit card and said collected authentication data includes a personal identification number (PIN) for the debit card.

2. The system according to claim 1, wherein the one or more processors are further programmed to:

receive a debit authorization response message from the payment processor;

translate the debit authorization response message to a credit authorization response message; and

transmit the credit authorization response message to the merchant server.

3. The system according to claim 1, wherein the one or more processors are further programmed to:

translate the credit authorization message to the debit authorization request message using a rules engine applying rules specific to a debit network corresponding to the debit transaction.

4. The system according to claim 1, wherein the one or more processors are programmed to at least one of:

receive the card number over a communications network;

collect the authentication data over the communications network;

provide the alias account number over the communications network;

receive the credit authorization message over the communications network; and

submit the debit authorization request message over the communications network.

5. The system according to claim 1, wherein the selected credentialing application is operative to collect authentication data including a personal identification number (PIN) for the debit card.

6. The system according to claim 1, wherein the credit authorization message is formatted according to a format of an Internet acquiring platform, wherein the debit authorization message is formatted according to a format of a debit acquiring platform of the payment processor and wherein the Internet acquiring platform processes transactions initiated at electronic commerce merchants and the debit acquiring platform processes transactions initiated at physical world merchants.

7. The system according to claim 1, wherein the credit authorization message and the debit authorization message are formatted according to International Organization for Standardization (ISO) 8583, the credit authorization message being a 0100 series message and the debit authorization message being a 0200 series message.

8. The system according to claim 1, wherein the card number is received subsequent to initiation of the debit transaction.

17. The method according to claim 1, wherein the card number is received subsequent to initiation of the debit transaction.

9. A method for processing a debit transaction between a merchant server and a consumer computer, said method comprising:

receiving, by one or more processors of a third party, a card number identifying a debit card of the consumer for completion of the debit transaction from the consumer device;

selecting, by the one or more processors of the third party, one of a plurality of different credentialing applications based on the received card number, said credentialing applications operative to collect authentication data from the consumer device;

collecting, by the one or more processors of the third party, authentication data for the debit card from the consumer device using the selected credentialing application;

subsequent to collecting the authentication data;

     1) generating, by the one or more processors of the third party, an alias account number correlated with the card number; and

     2) storing, by the one or more processors of the third party, the alias account number, the card number identifying the debit card, and the authentication data in a storage;

transmitting, by the one or more processors of the third party, the alias account number to the merchant server, wherein the alias account number is unique to the debit transaction relative to other debit transactions;

subsequent to transmitting the alias account number to the merchant server, receiving, by the one or more processors of the third party, a credit authorization request to capture funds from the alias account number, the credit authorization request received from the merchant server in a credit authorization message, wherein the credit authorization message includes the alias account number;

retrieve, by the one or more processors of the third party, the authentication data from the storage using the alias account number in the credit authorization message;

translating, by the one or more processors of the third party, the received credit authorization message to a debit authorization request message using the authentication data, wherein the debit authorization request message includes the authentication data; and

requesting, by the one or more processors of the third party, debit authorization to capture funds from the card number by transmitting the debit authorization request message to a payment processor,

wherein the debit card comprises a PIN debit card and said collected authentication data includes a personal identification number (PIN) for the debit card.

10. The method according to claim 9, further including:

receiving a debit authorization response message from the payment processor;

translating the debit authorization response message to a credit authorization response message; and

transmitting the credit authorization response message to the merchant server.

11. The method according to claim 10, wherein the translating the debit authorization response message to the credit authorization response message includes:

removing debit specific information.

12. The method according to claim 9, further including:

determining data from the credit authorization message that cannot be added to the debit authorization request message when translating the credit authorization message to the debit authorization request message using the authentication data; and

storing the determined data in a database.

13. The method according to claim 9, wherein the alias account number is a primary account number (PAN).

14. The method according to claim 9, wherein the translating the credit authorization message to the debit authorization request message using the authentication data includes:

merging data of the credit authorization message and the authentication data into the debit authorization request message.

15. The method according to claim 9, wherein selecting the one of the plurality of different credentialing applications includes:

looking up a record in a bank identification number (BIN) table using the card number.

16. The method according to claim 9, wherein the selected credentialing application is operative to collect authentication data including a PIN for the debit card.

18. A non-transitory computer medium carrying software when executed by one or more processors of a third party causes the one or more processors to:

subsequent to initiation of a debit transaction between a merchant server and a consumer computer;

receive a card number identifying a debit card of the consumer for completion of the debit transaction from the consumer computer;

select on of a plurality of different credentialing applications based on the received card number, said credentialing applications operative to collect authentication data from the consumer computer;

collect the authentication data for the debit card from the consumer computer using the selected credentialing application;

subsequent to collecting the authentication data;

     1) generate an alias account number correlated with the card number; and

     2) store the alias account number, the card number identifying a debit card, and the authentication data in a storage;

transmit the alias account number to the merchant server, wherein the alias account number unique to the debit transaction relative to other debit transactions;

subsequent to transmitting the alias account number to the merchant server, receive from the merchant server a credit authorization request to capture funds from the alias account number, the credit authorization request received in a credit authorization message, wherein the credit authorization message includes the alias account number;

retrieve the authentication data from the storage using the alias account number in the credit authorization message;

translate the received credit authorization message to a debit authorization request message using the authentication data, wherein the debit authorization request message includes the authentication data; and

request debit authorization to capture funds from the card number by transmitting the debit authorization request message to a payment processor,

wherein the debit card comprises a PIN debit card and said collected authentication data includes a personal identification number (PIN) for the debit card.