Mastercard International Incorporated

Stephen Orfei

Bruce John Rutherford

Arthur D Kranzley

John Robert Wankmueller

Carl M Campbell

Edward J Hogan

Mark Wiesman

Mark Wiseman

Art Kranzley

A system and computer-based method for performing a financial transaction using an interchange computer coupled to a database, the interchange computer and database associated with an interchange network, the transaction initiated by a cardholder with a merchant. The method includes receiving, at the interchange computer, a payer authentication request message from the merchant, the payer authentication request message associated with the cardholder and including data representing at least one of transaction card brands supported for payment, a response time limit, and item purchase information. The cardholder is prompted to enter access credential information. The entered access credential information is verified at the interchange computer. The cardholder is prompted to select a transaction card from one or more transaction cards associated with the cardholder. A payer authentication response message including transaction card data associated with the selected transaction card is transmitted from the interchange computer to the merchant.

Methods and systems for performing a financial transaction

In a secure electronic payment system, authentication data based on a payment account (e.g., a credit card account) is sent from an authentication server, through a user's Web browser, to a merchant's computer. The merchant's computer sends the authentication data to a computer operated by the issuer of the payment account, either through a payment organization computer or through an acquirer computer operated by the merchant's acquirer. The issuer's computer verifies the authorization request message, thereby generating an authorization response message. The authorization response message is forwarded to the merchant's computer, either through the payment organization computer or through the acquirer computer. If the authorization response message indicates that the verification was successful, the transaction is completed.

System and method for conducting secure payment transaction

A formatted data structure is provided for conveying the results of ecommerce authentication programs that are used to authenticate a cardholder's on-line transactions. The data structure, which has at most a 20-byte length, is designed to be compatible with 3-D Secure message protocols used in e-commerce. The data structure includes designated fields that include a hash of the merchant's name, identify an authentication service provider, identify the authentication method used, and include a merchant authentication code which ties cardholder information to the transaction. Secure payment algorithms are provided for use by the e-commerce authentication programs to generate authentication results in the desired format. In one secure payment algorithm, a secret key is used to encrypt a concatenation of a cardholder account number with information from designated fields of the data structure. In another secure payment algorithm, a pair of secret keys is used to encrypt a concatenation of the cardholder's account number, card expiration date and service code. In both cases, portions of the encryption results are used to define the merchant authentication code.

Systems and methods for conducting secure payment transactions using a formatted data structure

In accordance with the present invention, when an appropriate transaction message is received by a payment gateway, instead of requesting an authorization of the transaction through the payment network, the payment gateway instead sends an authorization response back to the message originator. The payment gateway may perform authentication functions and send transaction data back to the message originator. In this way, the payment gateway may be used for authentication functions while the message originator may use its existing payment system protocols to conduct authorization functions.

Method and system for conducting secure electronic commerce transactions with authorization request data loop-back

In a secure electronic payment system, authentication data is sent from a payment account issuer to user software operated by a purchaser. The user software sends the authentication data to a merchant using hidden fields on the Web page of the merchant. The merchant generates an authorization request message based upon the authentication data. The authorization request message is sent to a payment organization either directly from the merchant or via the merchant's acquirer. The payment organization forwards the authorization request message to a payment account issuer which verifies the authorization request message, thereby generating an authorization response message which is sent to the payment organization. The payment organization forwards the authorization response message to the merchant, either directly or via the acquirer.

Growing community of inventors

Katonah, NY, United States of America

Stephen Orfei