Mastercard International Incorporated

Brian John Piel

David Anthony Roberts

Christopher John Merz

Jonathan James Main

Felix Johannes Flory

Sowmya Reddy Lakka

Ranjita Shankar Iyer

Robert Albert Ederle

Julia Sharon Gosset

Vincenzo Palomba

Peter J Groarke

Gregory D Williamson

Laurie Ann Nicoletti

Brandon Craig Bryson

Steve E Hubbard

Janet Marie Smith

Mark B Hey

Dennis A Gamiello

Anand Reddy Mallepally

Paul Stephen Baker

Sameer Tare

Elisabeth Lea Rode

Craig Gilbert

Andres Gonzalez

An authentication correlation (AC) computing device is provided. The AC computing device includes a processor and a memory. The AC computing device receives a first authentication request from a requesting computer device including an account identifier, a first timestamp, and at least one authentication factor, and determines a first security level of the first authentication request. The AC computing device stores the first security level and the first timestamp. The AC computing device is also configured to receive a second authentication request including the account identifier and a second timestamp, determine that the second authentication satisfies an authentication rule based on the account identifier, the second timestamp, and the stored authentication data wherein the rule defines a timeframe and an authentication threshold, and generate an authentication response based on the determination and the authentication rule wherein the authentication response includes an approval indicator.

System architecture and database for context-based authentication

An authentication platform for authenticating an online user is provided. The authentication platform includes a memory device including an authentication profile and at least one processor coupled to the memory device. The at least one processor is programmed to receive an authentication request message for a transaction. The authentication request message includes authentication data. The at least one processor is also programmed to extract the authentication data from the authentication request message and determine if the ACS is available to process the transaction. If the ACS is unavailable, the at least one processor is further programmed to generate, based at least in part on the extracted authentication data, risk-based authentication (RBA) result data including a risk score and transmit an authentication response message based on the RBA result data.

Systems and methods for authenticating online users

An adaptive authentication (AA) computer device used for improved payment transaction authentication services is provided. The AA computer device includes at least one processor in communication with at least one memory device and is configured to retrieve historical transaction data and authentication types for each historical transaction. The AA computer device is also configured to generate a model associating each of the authentication types with a corresponding set of values for transaction parameters. The AA computer device is further configured to receive pending transaction data including a cardholder identifier of a first cardholder, a merchant identifier, and a transaction amount. The AA computer device is further configured to determine an authentication type by applying the model to the transaction parameters derived from the pending transaction and transmit to the first cardholder an authentication request of the authentication type.

United states system and methods for dynamically determined contextual, user-defined, and adaptive authentication

A computer-implemented method for authenticating an online user with an access control server (ACS) is provided. The method includes receiving, at a risk-based authentication enabled (RBA-enabled) directory server, an authentication request message including authentication data, extracting, using the RBA-enabled directory server, the authentication data from the authentication request message, transmitting the extracted authentication data to an RBA engine, generating, using the RBA engine, based at least in part on the extracted authentication data, RBA result data including a risk score, a risk analysis, and at least one reason code, transmitting the RBA result data to the RBA-enabled directory server, embedding, using the RBA-enabled directory server, the RBA result data into the authentication request message to generate an enhanced authentication request message, and transmitting the enhanced authentication request message to the ACS to enable the ACS to make an authentication decision based on the RBA result data.

Systems and methods for authenticating online users with an access control server

A cardholder authentication method includes receiving, at an authentication network, an authentication request involving an account. The method further includes determining, based at least in part on a portion of an account identifier associated with said account, an authentication service. In addition, the method includes determining, based at least on said authentication service and a portion of said account identifier, an authentication response. The method also includes transmitting, to a merchant associated with a transaction involving said account, said authentication response.

Systems, apparatus and methods for improved authentication

Systems and methods are provided for authenticating users. An exemplary method includes receiving, by a directory server (DS), an authentication request for a transaction to an account where the request includes a token and a cryptogram, and transmitting the token and cryptogram to a digital service server (DSS). The method also includes mapping, by the DSS, the token to an account number for the account, validating the cryptogram, generating a directory server nonce (DSN) for the request, and transmitting the DSN and the account number to the DS. The method further includes transmitting, by the DS, the DSN and the account number to an access control server (ACS) associated with an issuer of the account and, in response to an issuer authentication value (IAV), compiling an accountholder authentication value (AAV) including the IAV, the DSN and an amount of the transaction and transmitting the AAV to a merchant or server.

Systems and methods for use in authenticating users in connection with network transactions

An authentication computing device, including a processor in communication with a memory, for authenticating an ACH transaction processed over an ACH network is provided. The processor is programmed to register a payee with the authentication computing device, and to receive an authentication request for an electronic ACH transaction to transfer funds from a payor account to a payee account. The request is received from a first client computing device and includes an account identifier associated with the payor account. The processor is also programmed to transmit an authentication challenge to a second client computing device based on account data associated with the account identifier. The processor is further programmed to receive a response to the authentication challenge, determine whether the account data has been authenticated based on the received challenge response, and transmit an authentication response to the payee based on the determination.

ACH transaction authentication systems and methods

An authentication computing device stores a cardholder profile that is associated with a candidate cardholder and includes a cardholder identifier, a device identifier, payment account data, and trusted authentication data in a database system, receives an authentication request that is associated with a tax filing of the candidate cardholder and includes a filing identifier from a revenue computing device, detects the authentication request is associated with the candidate cardholder based upon the filing identifier and the cardholder profile, transmits an identity challenge requesting authentication data associated with the candidate cardholder to a user device associated with the device identifier, receives a challenge response including response authentication data from the user device, determines an authentication status associated with the authentication request based on a comparison of the response authentication data and the trusted authentication data, and transmits the authentication status to the revenue computing device.

Systems and methods for using multi-factor authentication for tax filings

A personal cloud authentication (PCA) system for authenticating an online user using device data stored on a personal cloud platform of the user is provided. The PCA system configured to build an authentication table using a user profile that includes at least user account information. The PCA system is also configured to receive transaction data associated with the user account information and store the transaction data within a database, wherein the transaction data includes at least an authentication request, a second primary user computing device identifier and a second secondary user computing device identifier. The PCA system is further configured to parse the transaction data, match the first primary user computing device identifier to the second primary user computing device identifier and the first secondary user computing device identifier to the second secondary user computing device identifier, generate an authentication response based on the match, and transmit the authentication response.

Systems and methods for enhancing online user authentication using a personal cloud platform

An electronic payment card processing system and method includes at least one host computing device having at least one processor in communication with a memory device and a multi-party payment processing system and network for processing payment card transactions. The at least one host computing device retrieves delivery data for a purchased item associated with at least one disputed charge by a cardholder of a payment card transaction that was previously approved through the multi-party payment processing system, and analyzes the retrieved delivery data to determine a basis for the at least one disputed charge including whether the at least one disputed charge is friendly fraud.

Multi-party payment card processing systems and methods with friendly fraud detection

Methods, media, and systems directed to a platform for determining, processing, storing, and analyzing authentication data from various internal and external systems within an authentication ecosystem, and from other authentication systems providing authentication services.

Method and system for authentication data collection and reporting

Systems and methods are provided for authenticating users to payment accounts in connection with transactions. An exemplary method includes receiving, by at least one computing device, an authentication request for a transaction associated with a payment account where the authentication request includes a token associated with the payment account and a cryptogram, and mapping the token to a primary account number (PAN) for the payment account. The method also includes validating the cryptogram, generating a directory server nonce (DSN) for the authentication request, and transmitting the DSN and the account number to an access control server (ACS) associated with an issuer of the payment account. The method further includes, in response to an issuer authentication value (IAV), compiling an accountholder authentication value (AAV) including the IAV, the DSN and an amount of the transaction, and transmitting the AAV to one of a merchant and a server.

Methods and systems for providing cardholder authentication services on-behalf-of (OBO) issuers utilizing a payment card authorization network to bridge cardholder authentication and transaction authorization processes. In some embodiments, the process includes an OBO issuer service computer receiving an authentication message, storing the authentication message in a transaction database and then receiving a purchase transaction authorization request message from a payment network. The OBO issuer service computer then determines that an authentication value of the received purchase transaction authorization request message matches the authentication value of the stored authentication message, stores a record of the match, and transmits the purchase transaction authorization request to the payment network for purchase authorization processing.

Growing community of inventors

Ballwin, MO, United States of America

Brian John Piel