Mastercard International Incorporated

Mastercard Ireland Limited

Cristian Radu

Patrick Mestré

Mehdi Collinge

Simon Phillips

David Anthony Roberts

Sebastien Pochic

Fikret Ates

Ronald D Carter

Valerie Wouters

Patrik Smets

John Robert Wankmueller

Omar Laazimani

Duncan Garrett

Jonathan James Main

Alan Johnson

Eric Alger

Patrick Mestre

Lukas Ekselius

Paul Vanneste

Fernando Lourenco

Robert Gerard Ouellette

Edward L H Van De Velde

John Gaitanos

Elizabeth M Foran-Owens

Anthony Steven Cooper

Ryan Crowe

Roshan L Lewis

Erik Lukas Ekselius

The present invention relates to a method () of requesting consent from a consumer to complete an action. The method () comprises: determining () a time interval during which a probability of a consumer providing consent to complete the action exceeds a probability of the consumer not providing consent to complete the action; and requesting () consent from the consumer to complete the action during the time interval. Also disclosed is a system () for requesting consent from a consumer to complete an action. The system () comprises a probability processor () and a request processor (). The probability processor () is configured to determine a time interval during which a probability of a consumer providing consent to complete the action exceeds a probability of the consumer not providing consent to complete the action. The request processor () is configured to request consent from the consumer to complete the action during the time interval. The action may comprise: a payment transaction, an exchange of data, and/or an update to terms and conditions of use or a service agreement. The method () and/or system () may be used in the completion of a merchant-initiated transaction.

Computer implemented method and system for requesting consent from a consumer to complete an action

A method is described of managing service events in a distributed computing system. The distributed computing system comprises a plurality of computing nodes able to perform a service using a service process. The method takes place at one of the computing nodes. A service event is received or created. This service event is identified by a combination of a node identifier, a time element, and a local counter value. The local counter value represents a number of service events performed by a service process for a user since a last reset. The identified service event is then stored in a service process database according to node identifier and local counter values. The service process database is used to manage service events in the distributed system. Service events are removed from the service process database when no longer valid using the time element.

Event management in distributed computing system

A method for building an advanced storage key includes: storing, in a mobile device, at least (i) device information associated with the mobile device, (ii) program code associated with a first program including an instance identifier, and (iii) program code associated with a second program including a first key; generating a device fingerprint associated with the mobile device based on the device information via execution of the code associated with the first program; generating a random value via execution of the code associated with the first program; building a diversifier value based on the generated device fingerprint, the generated random value, and the instance identifier included in the code associated with the first program; and decrypting the built diversifier value using the first key stored in the code associated with the second program via execution of the code associated with the second program to obtain a storage key.

Method and system for generating an advanced storage key in a mobile device without secure elements

A method is described of monitoring a service performed at a computing node. The computing node is one of a plurality of computing nodes in a distributed computing system. Each computing node is adapted to perform at least one service for clients. A monitoring process is adapted to monitor a service process performing the process. In the method, the monitoring process monitors the service process on performance of the service. The monitoring service then provides monitoring information to a monitoring process for another service process. A suitable computing node for performing the service is described, as is a coordinated monitoring service for supporting multiple monitoring services.

Monitoring in distributed computing system

A method and system include providing a user interface associated with an issuer of an account; receiving, at the user interface, a request to generate a token associated with a user account; generating at least one token associated with the user account; authenticating one or more elements associated with the user account, wherein authentication may be one of prior to and subsequent to the generation of the at least one token; and receiving the at least one token. Numerous other aspects are provided.

Systems and methods for minimizing user interactions for cardholder authentication

A method of establishing a digital identity for use of an online service and of subsequently using the digital identity to perform the online service is described. A digital identity for the online service is bound to computer hardware associated with the digital identity. A user associated with the digital identity provides a user authentication at the computer hardware associated with the digital identity. The digital identity is enrolled for the online service, and a first instance of the online service for the digital identity is performed. A common user authentication process result completes enrolment of the digital identity and authenticates the digital identity for performing said first instance of the online service.

Online authentication

Transaction address data is received at a point of interaction (POI) device, from a payment-enabled mobile device. The transaction address data includes first address data and second address data. The first address data identifies a wallet service provider that is associated with the payment-enabled mobile device. The second address data indicates an internet address for a server function present in the payment-enabled mobile device. The first address data is used to dispatch the second address data from the POI device to the wallet service provider.

Authentication token for wallet based transactions

Techniques for enabling performance of a quality control function on the contactless interface while the contactless interface is disabled are provided. The techniques include implementing, on a dual-interface payment device, one or more security mechanisms, wherein the dual-interface payment device comprises a first interface and a second interface, using the one or more security mechanisms to prevent a subset of data corresponding to the first interface from being read using the second interface while allowing data corresponding to the second interface to be read using the first interface, and personalizing the dual-interface payment device and the one or more security mechanisms according to one or more requirements of an issuer of the dual-interface payment device.

Apparatus, method, and computer program product for providing a quality control mechanism for the contactless interface of a dual-interface card

A method of performing a payment transaction employing a two-factor authentication mechanism. The method includes engaging in cryptographic processing with a cryptographic function having a secret key encoded therein. The cryptographic function is stored in a computing device. The secret key serves as a first authentication factor. The method further includes utilizing a second authentication factor in performing the payment transaction.

Authentication system and method for server-based payments

Methods, apparatus and systems for upgrading an untrusted channel to a trusted channel. In an embodiment, a verifier server computer receives a request to verify an untrusted channel address from a first service component that is associated with a Consumer identifier, retrieves a trusted channel address from a verifier database, and then generates a one-time password witness value. The verifier server computer then splits the one-time password witness value into a first portion and a second portion, and transmits the first portion to the first service component and transmits the second portion to the second service component. The process includes receiving a recomposed value from the first service component, splitting the recomposed value into a first recomposed value and a second recomposed value, generating a reverted one-time password value, determining that the reverted one-time password value equals the one-time password witness value, and then transmitting an authentication message to the first service component confirming authentication of the consumer enabling upgrading of the untrusted channel to a trusted channel.

Securely upgrading an untrusted channel into a trusted channel

Methods and systems for generating consumer payment credentials using an Internet-connected appliance. In an embodiment, a primary Internet-connected appliance receives purchase transaction information from a secondary appliance. The process also includes generating a purchase transaction authorization request based on purchase transaction information and on payment account credential data that is stored locally in a dedicated storage element, transmitting the purchase transaction authorization request via the Internet to a gateway server computer, receiving a purchase transaction authorization response, and transmitting the purchase transaction authorization response via a domestic network to the secondary appliance for display to a consumer.

Automatic registration and generation of consumer payment credentials using internet-connected appliances

A method includes maintaining a digital wallet in a computer, and receiving a request for a transaction. The computer may receive and verify user authentication data, and then allow the user to access any payment card account in the digital wallet without requiring additional user authentication, regardless of the account selected for the transaction by the user. In some embodiments, cryptogram generation may be performed with an EMV server in association with the digital wallet, to enhance the level of security assurance for merchants, issuers and users.

Method and apparatus for streamlined digital wallet transactions

First and second wallet form data are transmitted to a mobile device. The first and second wallet form data indicate funding account options respectively available from two different digital wallets. The user of the mobile device may split funding for a transaction between an account selected from the first digital wallet and an account selected from the second digital wallet.

Transactions utilizing multiple digital wallets

A secure payment system comprises a merchant POS client and a remote POS server. The merchant POS client comprises a reading device for reading a customer user token and for accepting transaction details and customer verification data, and also a computing device with access to a communications network and in communication with the reading device. The merchant POS client also comprises a merchant token associated with the remote POS server. The remote POS server is in communication with the merchant POS client through the communications network, and one or more elements of the merchant POS client business logic are assured by the remote POS server and not the merchant POS client. A merchant token for use in such a merchant POS client is described, as is a suitable reader device, and a method of conducting a transaction using such a payment system.

Growing community of inventors

Beauvechain, Belgium

Cristian Radu