Hands-free transactions with a challenge and response

Abstract

Conducting hands-free transactions comprises a server at a payment processing system, a user computing device, and a merchant computing device. The payment processing system receives a communication from a hands-free payment application on a user device, the communication comprising a first transaction token, an identification of a user account, and a beacon identifier. The merchant may provide a challenge to the user and use the response to identify the token and account of the user. The merchant computing device can use voice patterns of the user to assist in identifying the token and account of the user. The system receives from the merchant computing device a transaction request, the transaction request comprising the first transaction token and transaction data associated with the transaction request. The system determines that the transaction is for an amount less than a configured transaction limit and communicates a request for an authorization of the transaction.

1 - 20 . (canceled) 
     
     
         21 . A computer-implemented method to conduct hands-free transactions based on challenge responses, comprising:
 by a merchant system computing device,
 transmitting a beacon, wherein the beacon comprises an identifier associated with the merchant system computing device; 
 receiving a transaction token from a user computing device associated with a particular user and a particular user account; 
 displaying a challenge to a merchant system operator; 
 receiving an input of a challenge response to the displayed challenge provided by the particular user; 
 displaying, to the merchant system operator, one or more user accounts of the plurality of user accounts that are associated with the received challenge response; 
 receiving an input providing a selection of a particular user account from the one or more user accounts; and 
 communicating, to a payment processing system, a transaction request, the transaction request comprising transaction details and the transaction token associated with the particular user account. 
   
     
     
         22 . The computer-implemented method of  claim 21 , comprising:
 by the user computing device,
 receiving the beacon from the merchant system computing device; 
 extracting the identifier from the beacon; 
 approving the merchant system computing device based on a comparison of the extracted identifier with merchant data stored on the user computing device; 
 in response to the approval of the merchant system computing device, generating the transaction token; and 
 transmitting the transaction token to the merchant system computing device. 
   
     
     
         23 . The computer-implemented method of  claim 21  wherein the transaction token comprises a picture of the particular user. 
     
     
         24 . The computer-implemented method of  claim 23 , wherein the input received by the merchant system computing device is based on a selection of the particular user account based on the picture of the particular user. 
     
     
         25 . The computer-implemented method of  claim 21 , wherein the challenge response comprises initials of the particular user that are associated with the particular user account. 
     
     
         26 . The computer-implemented method of  claim 21 , wherein the challenge response comprises a configured challenge response that is associated with the particular user account. 
     
     
         27 . The computer-implemented method of  claim 21 , wherein the merchant system computing device receives an input of the selection of the particular user account via a user interface on the merchant system computing device. 
     
     
         28 . The computer-implemented method of  claim 21 , wherein the transaction token represents an authorization to conduct the transaction between the merchant system computing device and the particular user account. 
     
     
         29 . A computer program product, comprising:
 a non-transitory computer-readable storage device having computer-executable program instructions embodied thereon that when executed by a computer cause the computer to conduct hands-free transactions, the computer-executable program instructions comprising instructions to:
 transmit a beacon, wherein the beacon comprises an identifier associated with the merchant system computing device; 
 receive a transaction token from a user computing device associated with a particular user and a particular user account; 
 display a challenge to a merchant system operator; 
 receive an input of a challenge response to the displayed challenge provided by the particular user; 
 display, to the merchant system operator, one or more user accounts of the plurality of user accounts that are associated with the received challenge response; 
 receive an input providing a selection of a particular user account from the one or more user accounts; and 
 communicate, to a payment processing system, a transaction request, the transaction request comprising transaction details and the transaction token associated with the particular user account. 
   
     
     
         30 . The computer program product of  claim 29  wherein the transaction token comprises a picture of the particular user. 
     
     
         31 . The computer program product of  claim 30 , wherein the input received by the merchant system computing device is based on a selection of the particular user account based on the picture of the particular user. 
     
     
         32 . The computer program product of  claim 29 , wherein the challenge response comprises initials of the particular user that are associated with the particular user account. 
     
     
         33 . The computer program product of  claim 29 , wherein the challenge response comprises a configured challenge response that is associated with the particular user account. 
     
     
         34 . The computer program product of  claim 29 , wherein the merchant system computing device receives an input of the selection of the particular user account via a user interface on the merchant system computing device. 
     
     
         35 . The computer program product of  claim 29 , wherein the transaction token represents an authorization to conduct the transaction between the merchant system computing device and the particular user account. 
     
     
         36 . A system for hands-free transactions, comprising:
 a storage device; and   a processor communicatively coupled to the storage device, wherein the processor executes application code instructions that are stored in the storage device to cause the processor to:
 transmit a beacon, wherein the beacon comprises an identifier associated with the merchant system computing device; 
 receive a transaction token from a user computing device associated with a particular user and a particular user account; 
 display a challenge to a merchant system operator; 
 receive an input of a challenge response to the displayed challenge provided by the particular user; 
 display, to the merchant system operator, one or more user accounts of the plurality of user accounts that are associated with the received challenge response; 
 receive an input providing a selection of a particular user account from the one or more user accounts; and 
 communicate, to a payment processing system, a transaction request, the transaction request comprising transaction details and the transaction token associated with the particular user account. 
   
     
     
         37 . The system of  claim 36  wherein the transaction token comprises a picture of the particular user. 
     
     
         38 . The system of  claim 37 , wherein the input received by the merchant system computing device is based on a selection of the particular user account based on the picture of the particular user. 
     
     
         39 . The computer program product of  claim 36 , wherein the challenge response comprises initials of the particular user that are associated with the particular user account or a configured challenge response that is associated with the particular user account. 
     
     
         40 . The computer program product of  claim 36 , wherein the merchant system computing device receives an input of the selection of the particular user account via a user interface on the merchant system computing device.