Universal merchant platform for payment authentication

• US 20030233327A1
• Filed: 06/12/2003
• Published: 12/18/2003
• Est. Priority Date: 06/12/2002
• Status: Active Grant

• Current Assignee: CardinalCommerce Corporation (Visa, Inc.)
• Original Assignee: Cardinal Commerce Corporation
• Inventors: Sherwin, Francis M., Balasubramanian, Chandra S., Keresman, Michael A. III
• Granted Patent: US 7,051,002 B2
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists

Abstract

A method is provided for processing authentication of a consumer using one of a plurality of different types of payment instruments to conduct a commercial transaction over a communications network with a merchant. The payment instrument being used is either enrolled in or not enrolled in an authentication program conforming to one of a plurality of authentication protocols prescribed for the respective plurality of different types of payment instruments by payment networks supporting the same. The method includes: obtaining payment information for the transaction from the merchant, the payment information including a number identifying the particular payment instrument being used; determining the type of payment instrument being used from the payment information; obtaining an authentication determination for the transaction in accordance with the authentication protocols prescribed for the determined type of payment instrument being used; and, returning the obtained authentication determination to the merchant.

Claims

1. A method for processing authentication of a consumer using one of a plurality of different types of payment instruments to conduct a commercial transaction over a communications network with a merchant, wherein the payment instrument being used is either enrolled in or not enrolled in an authentication program conforming to one of a plurality of authentication protocols prescribed for the respective plurality of different types of payment instruments by payment networks supporting the same, the method comprising:

(a) obtaining payment information for the transaction from the merchant, said payment information including a number identifying the particular payment instrument being used;

(b) determining the type of payment instrument being used from the payment information;

(c) obtaining an authentication determination for the transaction in accordance with the authentication protocols prescribed for the determined type of payment instrument being used; and

,

(d) returning the obtained authentication determination to the merchant.

2. The method of claim 1, further comprising:

formatting messages in accordance with the authentication protocols prescribed for the determined type of payment instrument being used; and

,

routing the messages in accordance with the authentication protocols prescribed for the determined type of payment instrument being used.

3. The method of claim 2, wherein the formatted messages includes a first message that is routed to an issuing entity, said issuing entity having issued the particular payment instrument being used for the transaction and said first message requesting that the issuing entity confirm an enrollment status of the particular payment instrument being used for the transaction.

4. The method of claim 3, further comprising obtaining a response to the first message from the issuing entity, wherein based upon the response, if the particular payment instrument being used is not enrolled in the authentication program for the determined type of payment instrument, then steps (c) and (d) are omitted, otherwise if the particular payment instrument being used is enrolled in the authentication program for the determined type of payment instrument, then steps (c) and (d) are completed.

5. The method of claim 4, wherein the formatted messages include a second message that is routed to the merchant such that the consumer is redirected to the issuing entity for completing authentication directly therewith whereupon the authentication determination is made, a response to said second message containing the authentication determination made by the issuing entity being returned in accordance with routing instructions contained in the second message so that it is obtained in step (c).

6. The method of claim 5, further comprising:

verifying that the response to the second message was obtained from the issuing entity.

7. The method of claim 1, wherein the consumer accesses a merchant'"'"'s web page over the communications network to conduct the commercial transaction, and step (c) comprises:

dynamically adding one or more data fields to the merchant'"'"'s web page.

8. The method of claim 1, wherein the payment information is obtained in extensible Markup Language (XML) format.

9. The method of claim 1, further comprising:

determining from the payment information an enrollment status of the particular payment instrument being used for the transaction, wherein if the particular payment instrument being used is not enrolled in the authentication program for the determined type of payment instrument, then steps (c) and (d) are omitted, otherwise if the particular payment instrument being used is enrolled in the authentication program for the determined type of payment instrument, then steps (c) and (d) are completed.

10. The method of claim 1, wherein the payment instrument is a credit or debit card.

11. A system for supporting authentication processing of commercial transactions conducted over a communications network between a consumers and merchants, wherein the consumers are each using one of a plurality of different types of payment instruments, said used payment instrument being either enrolled or not enrolled in an authentication program conforming to one of a plurality of authentication protocols prescribed for the respective plurality of different types of payment instruments, the system comprising:

a connection layer for connecting with the merchants to exchange communications therewith, said connection layer receiving payment information for the transactions from the merchants, said payment information for each transaction including a number identifying the particular payment instrument being used;

a plug-in layer including a plurality of plug-in components, each plug-in component administering a different one of the authentication programs in accordance with the authentication protocols prescribed to obtain an authentication determination for the transactions; and

,

a distribution layer residing between the connection layer and the plug-in layer, said distribution layer routing communications between the connection layer and selected plug-in components in the plug-in layer, wherein said payment information for each transaction is routed to the plug-in component responsible for administering the authentication program for the particular payment instrument used for that transaction.

12. The system of claim 11, wherein the connection layer supports a plurality of connection means allowing for different types of connectivity with the merchant.

13. The system of claim 12, wherein at least one of the connection means is an HTTPS server that communicates with a thin-client installed on a server that is supporting a web site of the merchant, said thin-client providing communication with the web site.

14. The system of claim 11, wherein the plug-in layer is extensible so as to allow selected plug-in components to be added, removed and modified without disrupting other plug-in components residing in the plug-in layer.

15. A system for processing authentication of a consumer using one of a plurality of different types of payment instruments to conduct a commercial transaction over a communications network with a merchant, wherein the payment instrument being used is either enrolled in or not enrolled in an authentication program conforming to one of a plurality of authentication protocols prescribed for the respective plurality of different types of payment instruments by payment networks supporting the same, the system comprising:

means for obtaining payment information for the transaction from the merchant, said payment information including a number identifying the particular payment instrument being used;

means for determining the type of payment instrument being used from the payment information;

means for obtaining an authentication determination for the transaction in accordance with the authentication protocols prescribed for the determined type of payment instrument being used; and

,

means for returning the obtained authentication determination to the merchant.