METHOD AND SYSTEM FOR ONLINE AUTHENTICATION USING A CREDIT/DEBIT CARD PROCESSING SYSTEM

• US 20130185207A1
• Filed: 01/17/2012
• Published: 07/18/2013
• Est. Priority Date: 01/17/2012
• Status: Abandoned Application

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: LYONS, Garry, CUMMINS, Oran, GERBER, Theunis Johannes, JM HAYES, Anthony, ROZBICKI, Richard
• Application Number:
  US13/351,615
• Publication Number:
  US 20130185207A1
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing

Abstract

A system for online authentication using a payment card processing system, the system comprises: a managing computer system of a payment card service provider, the managing computer system having a memory device capable of storing data associating identifying information of individual customers with payment card accounts, and a computer processor configured to: receive a request for personal information of a customer on a relying party website, and wherein the relying party website is a member of the payment card processing system; request and receive identifying information of the customer for at least one payment card of the customer; present at least one authentication question to the customer to validate the customer; and validate the customer upon receipt of at least one correct answer to the at least one authentication question.

Claims

1. A system for online authentication using a payment card processing system, the system comprising:

a managing computer system of a payment card service provider, the managing computer system having a memory device capable of storing data associating identifying information of individual customers with payment card accounts, and a computer processor configured to;

receive a request for personal information of a customer on a relying party website, and wherein the relying party website is a member of the payment card processing system;

request and receive identifying information of the customer for at least one payment card of the customer;

present at least one authentication question to the customer to validate the customer; and

validate the customer upon receipt of at least one correct answer to the at least one authentication question.

2. The system of claim 1, wherein the relying party website has a payment card service provider icon, which upon activation by the customer establishes a secure web-session between the managing computer system of the payment card service provider and a computer device of the customer.

3. The system of claim 1, wherein the identifying information of the customer for at least one of the payment cards of the customer is a primary account number (PAN) of the at least one payment card of the customer.

4. The system of claim 3, wherein the managing computer system further confirms that the primary account number (PAN) is a member of an attribute provider, and wherein the attribute provider is a participant of the payment card processing system of the payment card service provider.

5. The system of claim 1, wherein the relying party website provides the managing computer system with an unique Identifier (ID) to identify a replying party associated with the relying party website, creating an identifier for a customer associated with the request for personal information, providing information to the service card provider for the customer to access personal information, and providing the payment card service provider with a level of authentication required to allow the customer to gain access the personal information of the customer.

6. The system of claim 5, wherein the managing computer system of the payment card service provider identifies one or more attribute providers, and sends the one or more attribute providers a request for authentication questions based on the level of authentication required by the relying party website to access the personal information of the customer.

7. The system of claim 6, wherein the authentication questions are generated by the one or more attribute providers.

8. The system of claim 1, wherein the relying party requires the customer to obtain a required authentication score before providing the customer with access to the personal information hosted by the relying party website.

9. The system of claim 1, wherein if the customer is unable to correctly answer one or more of the one or more authentication questions, the authentication are represented.

10. The system of claim 1, further comprising generating an assurance score based on known attributes about the consumer and augmenting the assurance score with additional know information to generate a minimum score needed to provide the customer with access to personal information on the relying party website.

11. A method for online authentication using a payment card processing system, the method comprising:

receiving, in a managing computer system hosted by a payment card service provider, the managing computer system comprising a memory device capable of storing data associating identifying information of individual customers with payment card accounts, and a computer processor, a request for personal information of a customer from a relying party website, and wherein the relying party website is a member of the payment card processing system;

establishing a secure web-session between the managing computer system of the payment card service provider and the relying party website;

requesting and receiving, in the managing computer system, identifying information of the customer for at least one payment card of the customer;

forwarding, from the managing computer system, at least one authentication question to the customer;

receiving, in the managing computer system, at least one response to the at least one authentication question from the customer; and

validating, in the managing computer system, the authentication of the customer upon receipt of at least one correct answer to the at least one authentication question.

12. The method of claim 11, wherein the identifying information of the customer for at least one payment card of the customer comprises receiving, in the managing computer system, a primary account number (PAN) of the at least one payment card of the customer.

13. The method of claim 11, wherein the relying party website has payment card service provider icon, which upon activation by the customer establishes the secure web-session between the managing computer system of the payment card service provider and a computer device of the customer.

14. The method of claim 13, wherein in the managing computer system, confirming that the primary account number (PAN) is a member of an attribute provider, which is a participant of the payment card processing system of the payment card service provider.

15. The method of claim 11, wherein the relying party website provides the managing computer system with an unique Identifier (ID) to identify a replying party associated with the relying party website, creating an identifier for a customer associated with the request for personal information, providing information to the service card provider for the customer to access personal information, and providing the payment card service provider with a level of authentication required to allow the customer to gain access the personal information of the customer.

16. The method of claim 15, wherein the managing computer system of the payment card service provider identifies one or more attribute providers, and sends the one or more attribute providers a request for authentication questions based on the level of authentication required by the relying party website to access the personal information of the customer.

17. The method of claim 16, wherein the authentication questions are generated by the one or more attribute providers.

18. The method of claim 11, wherein the relying party website requires the customer to obtain a minimum required authentication score before providing the customer with access to the personal information hosted by the relying party website.

19. The method of claim 11, wherein if the customer is unable to correctly answer one or more of the one or more authentication questions, the authentication are represented.

20. The method of claim 11, further comprising generating an assurance score based on known attributes about the consumer and augmenting the assurance score with additional know information to generate a minimum score needed to provide the customer with access to personal information on the relying party website.