Method and System for Payment Transaction Authentication

Abstract

A method for facilitating the widespread use of the PIN-Debit payment method for Internet “eCommerce” and mobile payments sales which requires little or no change for the cardholders, merchants, debit networks and card issuers based primarily on the introduction of a layer of middleware and wherein the Debit Networks and Issuing Banks may customize the implementation of the services based on individual strategy and cardholder preferences.

1 - 18 . (canceled) 
     
     
         19 . A method for processing a payment transaction comprising the steps of:
 receiving at a computing system in connection with a registration event that is completed prior to the payment transaction, a plurality of payment account numbers, the plurality of payment account numbers received at the computing system and associated with a plurality of mobile devices which are associated with a consumer, the computing system comprising:   a transaction gateway for receiving and processing payment transactions,   a web server having a network interface for receiving and processing messages received from Internet sources,   a messaging server having a network interface for communicating with the registered mobile devices,   and a settings database for storing settings from one or more of a merchant, the consumer, an issuer, a payment network, a payment acquirer, and an e-commerce gateway;   in connection with the payment transaction, which is initiated after the registration event, the computing system receiving at the transaction gateway payment data from one of a point-of-sale device, a mobile wallet, and an eCommerce site, the payment data comprising a first payment account number;   in association with processing the payment transaction, the computing system analyzing the payment data to identify a registered payment account number of the consumer matching the first payment account number;   upon identifying the payment data as comprising the registered payment account number of the consumer, the computing system;
 receiving from a registered mobile device of the consumer, an approval message indicating that the consumer has approved the payment transaction; 
 determining, based on a selection from the consumer, a selected payment account number from the plurality of payment account numbers received in connection with the registration event, 
 inserting the selected payment account number in the payment data; 
   transmitting the payment data comprising the selected payment account number to a secure payment network for processing; and   after transmitting the payment data to the secure payment network for processing, the computing system transmitting a payment confirmation to the one of the point-of-sale device, the mobile wallet, and the eCommerce site.   
     
     
         20 . The method of  claim 19 , wherein the computing system issues a secure token for use on the registered mobile device of the consumer. 
     
     
         21 . The method of  claim 19 , wherein the approval message is received responsive to a request for transaction authorization and the approval message comprises a secure token, the secure token indicating that the consumer has approved the payment transaction; the payment transaction approved with one of a biometric factor and a mobile PIN number; and wherein the one of the biometric factor and the mobile PIN number are not transmitted in the approval message received by the computing system. 
     
     
         22 . A computing system for processing a payment transaction, the computing system comprising:
 a transaction gateway for receiving and processing payment transactions,   a web server having a network interface for receiving and processing messages received from Internet sources,   a messaging server having a network interface for communicating with the registered mobile devices,   and a settings database for storing settings from one or more of a merchant, a consumer, an issuer, a payment network, a payment acquirer, and an e-commerce gateway;   the computing system further comprising computer-readable instructions that when executed by one or more processors are operable for performing the following steps in connection with a payment transaction:   receiving at the computing system in connection with a registration event that is completed prior to the payment transaction, a plurality of payment account numbers, the plurality of payment account numbers received at the computing system and associated with a plurality of mobile devices which are associated with the consumer, wherein mobile device identifiers associated with the plurality of mobile devices and the plurality of payment account numbers are stored in the settings data base of the computing system;   in connection with the payment transaction, which is initiated after the registration event, the computing system receiving at the transaction gateway payment data from one of a point-of-sale device, a mobile wallet, and an eCommerce site, the payment data comprising a first payment account number;   in association with processing the payment transaction, the computing system:
 analyzing the payment data to identify a registered payment account number of the consumer matching the first payment account number; upon identifying the payment data as comprising the registered payment account number of the consumer:
 receiving from a registered mobile device of the consumer, an approval message comprised of a secure token, the secure token indicating that the consumer has approved the payment transaction; the payment transaction approved with one of a biometric factor and a mobile PIN number; and wherein the one of the biometric factor and the mobile PIN number are not transmitted in the approval message received by computing system; 
 determining a primary payment account number associated with the consumer from the settings in the settings database; 
 inserting the primary payment account number in the payment data; 
 transmitting the payment data comprising the primary payment account number to a secure payment network for processing; and 
 
   after transmitting the payment data to the secure payment network for processing, the computing system transmitting a payment confirmation to the one of the point-of-sale device, the mobile wallet, and the eCommerce site.   
     
     
         23 . The system of  claim 22 , wherein the computing system issues a secure token for use on the registered mobile device of the consumer. 
     
     
         24 . The system of  claim 22 , wherein the computing system generates the mobile PIN using a proprietary algorithm and based on requirements and settings stored in the rule database; wherein the mobile PIN is provided to the consumer for subsequent use; and the mobile PIN is associated with the first payment account number and restricted to use for eCommerce and mobile wallet purchases. 
     
     
         25 . The method of  claim 19 , wherein the selected payment account number is one of a credit card, a debit card, a gift card, and an alternative payment account number. 
     
     
         26 . The system of  claim 22 , wherein the primary payment account number is one of a credit card, a debit card, a gift card, and an alternative payment account number. 
     
     
         27 . The method of  claim 19 , wherein the payment network is one of a debit network, a credit card network and an alternative payment network. 
     
     
         28 . The system of  claim 22 , wherein the payment network is one of a debit network, a credit card network and an alternative payment network. 
     
     
         29 . The method of  claim 19 , wherein the first payment account number is received by the one of the point-of-sale device and the eCommerce site via one of a contactless transmission or a manual entry of the first payment account number. 
     
     
         30 . The system of  claim 22 , wherein the first payment account number is received by the one of the point-of-sale device and the eCommerce site via one of a contactless transmission or a manual entry of the first payment account number. 
     
     
         31 . The method of  claim 19 , wherein the computing device validates the payment transaction against configuration settings received from one or more of the consumer, the issuer, the merchant, and the payment network; wherein consumer preferences are invoked; wherein a rule associated with the first payment account number can be configured to automatically approve or cancel purchases based on one or more characteristics; and wherein the one or more characteristics comprise one or more of approved merchants, prohibited merchants, IP address and transaction amount. 
     
     
         32 . The system of  claim 22 , wherein the computing device validates the payment transaction against configuration settings received from one or more of the consumer, the issuer, the merchant, and the payment network; wherein consumer preferences are invoked; wherein a rule associated with the first payment account number can be configured to automatically approve or cancel purchases based on one or more characteristics; and wherein the one or more characteristics comprise one or more of approved merchants, prohibited merchants, IP address, and transaction amount. 
     
     
         33 . The system of  claim 22 , further comprising a PIN repository operable to store one or more of a cardholder PIN, an alternate PIN, or a partial PIN related to the registered payment account number of the consumer. 
     
     
         34 . The system of  claim 33 , wherein the alternate PIN is registered with the issuer of the registered payment account number. 
     
     
         35 . The method of  claim 19 , wherein the first payment account number is a mobile payment account number which is not the selected payment account number. 
     
     
         36 . The system of  claim 22 , wherein the first payment account number is a mobile payment account number which is not the primary payment account number. 
     
     
         37 . The method of  claim 19 , wherein the first payment account number is the selected payment account number. 
     
     
         38 . The system of  claim 22 , wherein the first payment account number is the primary payment account number. 
     
     
         39 . The method of  claim 19 , wherein configuration rules enable the consumer to log into the computing system for the purpose of approving or declining flagged payment transactions even after the payment transaction is initially approved using the registered mobile device of the consumer. 
     
     
         40 . The system of  claim 22 , wherein configuration rules enable the consumer to log into the computing system for the purpose of approving or declining flagged payment transactions even after the payment transaction is initially approved using the registered mobile device of the consumer. 
     
     
         41 . The system of  claim 22 , wherein transactions may be auto approved within an established time window. 
     
     
         42 . The system of  claim 22 , wherein the merchant receives a secondary notification of transaction approval. 
     
     
         43 . The system of  claim 22  wherein a reversal transaction is generated for cancelled transactions.