Visa International Service Association

Karl Newland

Craig O'Connell

Douglas Fisher

Kevin Paul Siegel

Sharon Rowberry

Brad Nightengale

Mark Allen Nelsen

Brendan Xavier Louis

Zhongxiao Jiang

Patrick Wright

Kevin E Wong

Zhongxiao (“Josh”) Jiang

Christopher Brownlee

Techniques for authorizing a transaction or interaction of a user that is modified by authentication information for the same user are described herein. In embodiments, an authorization request message for a transaction and a session identifier may be received from a transport computer or a resource provider computer. A portion of pre-analyzed data about the user and the one or more interactions may be obtained, from a database, based on the session identifier. A risk analysis for the transaction using the portion of the pre-analyzed data may be performed to generate a value. The authorization request message may be modified to include the portion of the pre-analyzed data and the value. The modified authorization request message may be transmitted to an authorizing computer.

Systems and methods for enhanced authorization messages

A server computing device receives authentication request messages formatted according to a first message format from a party via a computing device of a user involved in a transaction, translates the messages into modified authentication request messages formatted according to a second message format, and transmits the modified authentication request messages to an authorization computer. The server computing device may augment the modified authentication request messages by including data gathered from the received authentication request messages describing the user, user's computing device, and/or network path between the server computing device and user's computing device, as well as risk scores generated based upon the received authentication request message. Additionally, the server computing device receives messages formatted according to the second message format from the authorization computer and translates them into messages formatted according to the first message format to be sent to the user's computing device.

Authentication system with message conversion

One embodiment of the invention is directed to a method comprising, receiving an authentication request message for a transaction. The method further comprises determining that detailed device information is required to authenticate the transaction and generating a message including an identifier and a request for the detailed device information. The method further comprises retrieving the detailed device information from a remote server computer using the identifier and modifying the authentication request message to include the detailed device information. The method further comprises sending the modified authentication request message to an access control server computer. The method further comprises receiving an authentication response message from the access control server computer including a verification value for the transaction, where the verification value is generated based on a result of a risk analysis performed using the detailed device information.

Authenticating transactions using risk scores derived from detailed device information

Methods and systems are presented for a fraud risk score to be given to a merchant for a proposed transaction with a consumer. The fraud risk score is generated by a payment account service provider, such as a credit card processor, using information from a pending transaction as well as information from other payment accounts that the consumer holds to which the payment account service provider is privy. Various factors, including indicators of elevated risk in other payment accounts, are custom-weighted by the merchant for the score.

Merchant fraud risk score

Embodiments of the present invention are directed to methods, systems, and apparatuses for performing a secure authentication process to authenticate a payment device used in a transaction between a merchant and a user. The secure authentication process may receive an authentication request message including user data, user computing device data and transaction data to verify that an account is enrolled in the secure authentication process and perform a risk analysis to determine whether the transaction should be authenticated.

Enhancements to transaction processing in a secure environment using a merchant computer

Embodiments of the invention are directed to systems and methods of user authentication for data services. The data services may include accessing a tax return at the IRS, accessing or completing a student loan application, accessing a credit report, etc. User authentication data is collected by a data provider and provided to a server computer, and user device data is collected by the server computer after the user device accesses a resource identifier (e.g., URL) associated with the server computer. The user authentication data and/or user device data is analyzed and a risk score is generated.

Growing community of inventors

Pacifica, CA, United States of America

Karl Newland