US20220222674A1 - Method and system for transaction authorization via controlled blockchain - Google Patents
Method and system for transaction authorization via controlled blockchain Download PDFInfo
- Publication number
- US20220222674A1 US20220222674A1 US17/706,042 US202217706042A US2022222674A1 US 20220222674 A1 US20220222674 A1 US 20220222674A1 US 202217706042 A US202217706042 A US 202217706042A US 2022222674 A1 US2022222674 A1 US 2022222674A1
- Authority
- US
- United States
- Prior art keywords
- transaction
- authorization request
- processing server
- payment
- primary account
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000013475 authorization Methods 0.000 title claims abstract description 135
- 238000000034 method Methods 0.000 title claims abstract description 52
- 238000012545 processing Methods 0.000 claims abstract description 172
- 230000004044 response Effects 0.000 claims abstract description 32
- 230000007423 decrease Effects 0.000 claims abstract description 19
- 230000015654 memory Effects 0.000 claims description 30
- 230000008569 process Effects 0.000 claims description 15
- 238000004891 communication Methods 0.000 description 24
- 230000006870 function Effects 0.000 description 18
- 238000004590 computer program Methods 0.000 description 10
- 238000010586 diagram Methods 0.000 description 4
- 238000012546 transfer Methods 0.000 description 4
- 230000004048 modification Effects 0.000 description 3
- 238000012986 modification Methods 0.000 description 3
- 230000003287 optical effect Effects 0.000 description 3
- 230000008901 benefit Effects 0.000 description 2
- 230000005540 biological transmission Effects 0.000 description 2
- 230000010267 cellular communication Effects 0.000 description 2
- 239000000835 fiber Substances 0.000 description 2
- 238000013519 translation Methods 0.000 description 2
- 238000012795 verification Methods 0.000 description 2
- 230000033228 biological regulation Effects 0.000 description 1
- 230000001413 cellular effect Effects 0.000 description 1
- 230000008859 change Effects 0.000 description 1
- 238000013500 data storage Methods 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 239000004973 liquid crystal related substance Substances 0.000 description 1
- 238000010295 mobile communication Methods 0.000 description 1
- 238000005457 optimization Methods 0.000 description 1
- 230000008520 organization Effects 0.000 description 1
- 238000007781 pre-processing Methods 0.000 description 1
- 238000009877 rendering Methods 0.000 description 1
- 239000004065 semiconductor Substances 0.000 description 1
- 239000010409 thin film Substances 0.000 description 1
- 230000000007 visual effect Effects 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/22—Payment schemes or models
- G06Q20/227—Payment schemes or models characterised in that multiple accounts are available, e.g. to the payer
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
- G06Q20/322—Aspects of commerce using mobile devices [M-devices]
- G06Q20/3224—Transactions dependent on location of M-devices
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/36—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
- G06Q20/3829—Payment protocols; Details thereof insuring higher security of transaction involving key management
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q20/401—Transaction verification
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q20/401—Transaction verification
- G06Q20/4016—Transaction verification involving fraud or risk level assessment in transaction processing
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q20/405—Establishing or using transaction specific rules
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/06—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
- H04L9/0618—Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation
- H04L9/0637—Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
-
- H04L2209/38—
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/50—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using hash chains, e.g. blockchains or hash trees
Definitions
- the present disclosure relates to the processing of electronic payment transactions, specifically the use of an authorization for a payment transaction funded by a transaction account issued by a first issuer in the authorization of a second payment transaction funded by a different transaction account issued by a second issuer, where the transaction accounts are associated through biographical information.
- electronic payment transactions are processed using a system where an issuing institution that issued a transaction account used to fund the transaction will approve or decline the transaction.
- the determination to approve or decline the transaction is made based on, among other criteria, transaction history of that transaction account. For instance, if a consumer wants to make a purchase at the same merchant and the same time and day of the week as the consumer has made several times prior using the same transaction account, the issuing institution may be more likely to approve the transaction having the impression that it is the genuine consumer. Similarly, if a transaction is conducted in one country and then a second transaction attempted a short time after in a different country a significant distance away, the issuing institution may likely decline the transaction due to fraud concerns.
- a processing system identifies transaction accounts issued to the same consumer from different issuing institutions via the use of biographical data. Transactions are tracked across the issuing institution such that, when a new authorization request is received, the past transaction history, independent of issuing institution, is taken into account.
- the processing system is configured to decline transactions on behalf of the issuing institutions if the transactional history is such that fraud is detected, resulting in a more efficient processing system where fraud can be prevented in instances where the issuing institution would have been unable to detect such fraud, and in a manner that reduces network communications and processing time expended by issuing institutions.
- a method for processing an electronic payment transaction includes: storing, in an account database of a processing server, an account profile, wherein the account profile includes at least a plurality of primary account numbers and one or more biographical data values, where each of the plurality of primary account numbers is associated with a transaction account and the one or more biographical data values are associated with each of the transaction accounts related to the plurality of primary account numbers; receiving, by a receiving device of the processing server, a first authorization request for a first payment transaction, wherein the first authorization request is formatted according to one or more standards and includes a plurality of data elements configured to store transaction data including at least a first primary account number of the plurality of primary account numbers, a first transaction time, and a first geographic location; processing, by the processing server, the first payment transaction; receiving, by the receiving device of the processing server, a second authorization request for a second payment transaction from an external system, wherein the second authorization request is formatted according to the one or more standards and includes a plurality of data elements configured to store transaction data including at least a
- a system for processing an electronic payment transaction includes: an account database of a processing server configured to store an account profile, wherein the account profile includes at least a plurality of primary account numbers and one or more biographical data values, where each of the plurality of primary account numbers is associated with a transaction account and the one or more biographical data values are associated with each of the transaction accounts related to the plurality of primary account numbers; a receiving device of the processing server configured to receive a first authorization request for a first payment transaction, wherein the first authorization request is formatted according to one or more standards and includes a plurality of data elements configured to store transaction data including at least a first primary account number of the plurality of primary account numbers, a first transaction time, and a first geographic location; a transmitting device of the processing server; and the processing server configured to process the first payment transaction, wherein the receiving device of the processing server is further configured to receive a second authorization request for a second payment transaction from an external system, wherein the second authorization request is formatted according to the one or more standards and includes a plurality of data elements
- FIG. 1 is a block diagram illustrating a high level system architecture for processing electronic payment transactions in accordance with exemplary embodiments.
- FIG. 2 is a block diagram illustrating the processing server of the system of FIG. 1 for the processing of electronic payment transactions in accordance with exemplary embodiments.
- FIG. 3 is a flow diagram illustrating a process for processing electronic payment transactions by the processing server of FIG. 2 in accordance with exemplary embodiments.
- FIG. 4 is a flow chart illustrating an exemplary method for processing an electronic payment transaction in accordance with exemplary embodiments.
- FIG. 5 is a block diagram illustrating a computer system architecture in accordance with exemplary embodiments.
- Payment Network A system or network used for the transfer of money via the use of cash-substitutes for thousands, millions, and even billions of transactions during a given period. Payment networks may use a variety of different protocols and procedures in order to process the transfer of money for various types of transactions. Transactions that may be performed via a payment network may include product or service purchases, credit purchases, debit transactions, fund transfers, account withdrawals, etc. Payment networks may be configured to perform transactions via cash-substitutes, which may include payment cards, letters of credit, checks, transaction accounts, etc. Examples of networks or systems configured to perform as payment networks include those operated by MasterCard®, VISA®, Discover®, American Express®, PayPal®, etc. Use of the term “payment network” herein may refer to both the payment network as an entity, and the physical payment network, such as the equipment, hardware, and software comprising the payment network.
- Payment Rails Infrastructure associated with a payment network used in the processing of payment transactions and the communication of transaction messages and other similar data between the payment network and other entities interconnected with the payment network that handles thousands, millions, and even billions of transactions during a given period.
- the payment rails may be comprised of the hardware used to establish the payment network and the interconnections between the payment network and other associated entities, such as financial institutions, gateway processors, etc.
- payment rails may also be affected by software, such as via special programming of the communication hardware and devices that comprise the payment rails.
- the payment rails may include specifically configured computing devices that are specially configured for the routing of transaction messages, which may be specially formatted data messages that are electronically transmitted via the payment rails, as discussed in more detail below.
- Transaction Account A financial account that may be used to fund a transaction, such as a checking account, savings account, credit account, virtual payment account, etc.
- a transaction account may be associated with a consumer, which may be any suitable type of entity associated with a payment account, which may include a person, family, company, corporation, governmental entity, etc.
- a transaction account may be virtual, such as those accounts operated by PayPal®, etc.
- Merchant An entity that provides products (e.g., goods and/or services) for purchase by another entity, such as a consumer or another merchant.
- a merchant may be a consumer, a retailer, a wholesaler, a manufacturer, or any other type of entity that may provide products for purchase as will be apparent to persons having skill in the relevant art.
- a merchant may have special knowledge in the goods and/or services provided for purchase.
- a merchant may not have or require any special knowledge in offered products.
- an entity involved in a single transaction may be considered a merchant.
- the term “merchant” may refer to an apparatus or device of a merchant entity.
- Issuer An entity that establishes (e.g., opens) a letter or line of credit in favor of a beneficiary, and honors drafts drawn by the beneficiary against the amount specified in the letter or line of credit.
- the issuer may be a bank or other financial institution authorized to open lines of credit.
- any entity that may extend a line of credit to a beneficiary may be considered an issuer.
- the line of credit opened by the issuer may be represented in the form of a payment account, and may be drawn on by the beneficiary via the use of a payment card.
- An issuer may also offer additional types of payment accounts to consumers as will be apparent to persons having skill in the relevant art, such as debit accounts, prepaid accounts, electronic wallet accounts, savings accounts, checking accounts, etc., and may provide consumers with physical or non-physical means for accessing and/or utilizing such an account, such as debit cards, prepaid cards, automated teller machine cards, electronic wallets, checks, etc.
- Payment Transaction A transaction between two entities in which money or other financial benefit is exchanged from one entity to the other.
- the payment transaction may be a transfer of funds, for the purchase of goods or services, for the repayment of debt, or for any other exchange of financial benefit as will be apparent to persons having skill in the relevant art.
- payment transaction may refer to transactions funded via a payment card and/or payment account, such as credit card transactions.
- Such payment transactions may be processed via an issuer, payment network, and acquirer.
- the process for processing such a payment transaction may include at least one of authorization, batching, clearing, settlement, and funding.
- Authorization may include the furnishing of payment details by the consumer to a merchant, the submitting of transaction details (e.g., including the payment details) from the merchant to their acquirer, and the verification of payment details with the issuer of the consumer's payment account used to fund the transaction.
- Batching may refer to the storing of an authorized transaction in a batch with other authorized transactions for distribution to an acquirer.
- Clearing may include the sending of batched transactions from the acquirer to a payment network for processing.
- Settlement may include the debiting of the issuer by the payment network for transactions involving beneficiaries of the issuer.
- the issuer may pay the acquirer via the payment network.
- the issuer may pay the acquirer directly.
- Funding may include payment to the merchant from the acquirer for the payment transactions that have been cleared and settled. It will be apparent to persons having skill in the relevant art that the order and/or categorization of the steps discussed above performed as part of payment transaction processing.
- Blockchain A public ledger of all transactions of a blockchain-based currency.
- One or more computing devices may comprise a blockchain network, which may be configured to process and record transactions as part of a block in the blockchain. Once a block is completed, the block is added to the blockchain and the transaction record thereby updated.
- the blockchain may be a ledger of transactions in chronological order, or may be presented in any other order that may be suitable for use by the blockchain network.
- transactions recorded in the blockchain may include a destination address and a currency amount, such that the blockchain records how much currency is attributable to a specific address.
- the transactions are financial and others not financial, or might include additional or different information, such as a source address, timestamp, etc.
- a blockchain may also or alternatively include nearly any type of data as a form of transaction that is or needs to be placed in a distributed database that maintains a continuously growing list of data records hardened against tampering and revision, even by its operators, and may be confirmed and validated by the blockchain network through proof of work and/or any other suitable verification techniques associated therewith.
- data regarding a given transaction may further include additional data that is not directly part of the transaction appended to transaction data.
- the inclusion of such data in a blockchain may constitute a transaction.
- a blockchain may not be directly associated with a specific digital, virtual, fiat, or other type of currency.
- FIG. 1 illustrates a system 100 for the processing of electronic payment transactions where authorization is performed on behalf of an issuing institution based on transactional history of a consumer across multiple issuing institutions where, in some cases, blockchain may be used for storage of the transactional history.
- the system 100 may include a processing server 102 .
- the processing server 102 may be configured to participate in the processing of electronic payment transactions utilizing transactional history for a consumer 104 across a plurality of different issuing institutions 106 , such as the issuing institutions 106 a and 106 b illustrated in FIG. 1 .
- a consumer 104 may have transaction accounts issued thereto that may be used in the funding of electronic payment transactions by two or more issuing institutions 106 .
- Each issuing institution 106 may issue a transaction account to the consumer 104 and, for each transaction account, may issue one or more payment instruments 108 to the consumer 104 , such as the payment instruments 108 a and 108 b illustrated in FIG. 1 .
- the payment instrument 108 may be encoded with or otherwise used to convey payment credentials associated with the related transaction account.
- Payment credentials may include, for example, a primary account number and any other data used in the identification and authentication of a transaction account for use in funding an electronic payment transaction, such as a name, expiration date, security code, application cryptogram, transaction counter, etc.
- the consumer 104 may use the payment instruments 108 at merchant systems 110 when conducting electronic payment transactions.
- the consumer 104 may present a payment instrument 108 to a merchant system 110 , which may read or otherwise receive payment credentials from the payment instrument.
- the merchant system 110 may include the payment credentials in transaction data that is submitted to a payment network 112 for processing of the payment transaction.
- the merchant system 110 may submit the transaction data directly to the payment network 112 via payment rails associated therewith.
- the merchant system 110 may transmit the transaction data to an intermediate entity, such as an acquiring institution or gateway processor, which may submit the transaction data to the payment network 112 via payment rails associated therewith.
- the payment network 112 may receive an authorization request for the payment transaction.
- An authorization request may be a type of transaction message indicating that authorization is requested for a related payment transaction.
- a transaction message may be a specially formatted data message that is formatted according to one or more standards governing the interchange of financial transactional messages, such as the International Organization of Standardization's ISO 8583 or ISO 20022 standards.
- a transaction message may include a message type indicator indicating a type of the message (e.g., an authorization request, authorization response, etc.) as well as a plurality of data elements, where each data element is configured to store data for the electronic payment transaction.
- the standards and/or one or more bitmaps included in the transaction message may be used to indicate what data elements store what transactional data.
- Data elements may be configured, for example, to store the primary account number, other payment credentials, a transaction amount, transaction time, transaction date, geographic location, currency type, merchant identification number, acquirer data, issuer data, product data, offer data, reward data, loyalty data, etc.
- the merchant system 110 may generate the authorization request for the electronic payment transaction.
- an intermediate entity e.g., acquiring institution, gateway processor, etc.
- the payment network 112 would forward the authorization request to the issuing institution 106 that issued the transaction account used by the consumer 104 to fund the electronic payment transaction, where the issuing institution 106 would approve or deny the payment transaction and electronically transmit an authorization response (e.g., a transaction message with a message type indicator indicating an authorization response) back to the payment network 112 .
- the processing server 102 may receive the authorization request (e.g., directly from the payment network 112 or from the issuing institution 106 after forwarding of the authorization request by the payment network 112 ) to perform on-behalf processing for the issuing institution 106 .
- the processing server 102 may determine if the transaction should be declined, or if the issuing institution 106 should be contacted for further approval based on past transaction history of the consumer 104 involved in the payment transaction, as discussed in more detail below.
- the processing server 102 may be configured to take past authorization requests into account when processing a newly received authorization request for a consumer 104 , wherein the past authorization requests may be associated with different issuing institutions 106 (e.g., as indicated via the included primary account numbers).
- the authorization request or data included therein may be stored in a profile associated with the consumer 104 , discussed in more detail below.
- the processing server 102 may continue to store authorization requests, or data included therein, for any payment transactions that can be attributed to the consumer 104 regardless of the issuing institution 106 .
- a payment transaction may be attributed to the consumer 104 based on biographical data associated with the transaction account used to fund the payment transaction.
- the processing server 102 may be configured to receive biographical information for transaction accounts from associated issuing institutions 106 .
- Biographical information may include any information made available by an issuing institution 106 regarding an authorized user of a transaction account. Such information may include, for example, a name, phone number, e-mail address, computing device identifier, username, social security number, etc.
- each consumer 104 may first provide their consent to the issuing institution 106 for such data to be made available to the processing server 102 .
- the biographical information may be anonymized prior to transmission to the processing server 102 , or may be anonymized by the processing server 102 upon receipt.
- the processing server 102 may receive biographical information for transaction accounts from multiple issuing institutions 106 , where the processing server 102 may identify transaction accounts across multiple issuing institutions 106 that are each issued to the consumer 104 or where the consumer 104 is otherwise an authorized user of the transaction account based on the biographical information. For instance, the processing server 102 may receive hashes of names for each transaction account, and may match a transaction account from issuing institution 106 a with a transaction account from issuing institution 106 b to the consumer 104 because of matching name hashes. Each transaction account that is matched to a consumer 104 may have identifying information thereof (e.g., the primary account number) stored in the consumer's profile.
- identifying information e.g., the primary account number
- the processing server 102 may identify a profile for the consumer 104 involved in the related electronic payment transaction using the primary account number or other identifying information found in the authorization request. The processing server 102 may then determine a likelihood of fraud for the attempted payment transaction based on data included in the new authorization request and data included in one or more prior authorization requests as found in the profile. For instance, in an exemplary embodiment, the processing server 102 may compare a time and geographic location in one or more recent authorization requests with a time and geographic location included in the new authorization request.
- the processing server 102 may determine a high likelihood of fraud. Conversely, if the times and locations are such that it is likely the consumer 104 is involved in the new payment transaction (e.g., the last two authorizations were for transactions in the last hour at the same shopping mall as the new authorization request), then a low likelihood of fraud may be determined.
- the likelihood of fraud may be represented by the processing server 102 using any suitable method, such as an integer (e.g., on a scale of 1-100), name (e.g., very low, low, high, very high), or other value.
- the processing server 102 may then determine if the transaction should be declined. The determination may be based on the likelihood of fraud, and may be further based on criteria set forth by the associated issuing institution 106 . For instance, each issuing institution 106 may have a threshold set for on-behalf declines where the processing server 102 may decline any attempted payment transaction where the determined likelihood of fraud is higher than a predetermined value provided by the issuing institution 106 . The processing server 102 may identify such a value based on the primary account number used in the new authorization request (e.g., where the issuing institution 106 may be identified therefrom, such as based on a bank identification number, issuer identification number, etc.).
- the processing server 102 may generate an authorization response for the payment transaction that includes a data element configured to store a response code that indicates that the payment transaction is declined. In some instances, the response code may indicate a decline due to fraud concerns.
- the processing server 102 may return the authorization response to the payment network 112 , which may proceed with any additional processing as necessary using traditional methods.
- the merchant system 110 may be informed of the transaction decline and may finalize the payment transaction accordingly.
- the authorization request, or data included therein, for the declined payment transaction may be stored in the consumer's profile to be taken into account for future determinations.
- a blockchain may be used to store the transaction data for past payment transactions involving a consumer 104 .
- the blockchain may be maintained by a blockchain network 114 , which may be comprised of a plurality of nodes, where each node may be a computing system configured to maintain a copy of the blockchain, generate new blocks, validate blocks generated by other nodes, and perform any additional functions associated with operation and use of the blockchain.
- the processing server 102 may be a node in the blockchain network 114 .
- the block reference value may be a hash value generated via the hashing of the block header of the most recently added block.
- the data reference value may similarly be a reference to the one or more data values stored in the block that includes the block header.
- the data reference value may be a hash value generated via the hashing of the one or more data values.
- the block reference value may be the root of a Merkle tree generated using the one or more data values.
- Each data value stored in the blockchain may correspond to an authorization request received for a payment transaction.
- there may be a separate blockchain for each consumer 104 where every data value included in that blockchain may be related to an attempted payment transaction involving that consumer.
- a blockchain may store data values for multiple consumers 104 .
- each data value may include the account identifier, biographical information, or other value used to identify the consumer 104 and/or profile related therewith.
- Each data value may include the authorization request or any data included therein that may be used in performing the functions discussed herein.
- the processing server 102 may submit any received authorization requests to a node in the blockchain network 114 for inclusion in the blockchain.
- an issuing institution 106 may, when an authorization request is received, submit that authorization request to a node in the blockchain network 114 .
- merchant systems 110 or the payment network 112 may be configured to provide authorization requests to nodes in the blockchain network 114 for inclusion on the blockchain during initial processing of the payment transaction.
- the blockchain may be a private blockchain such that only the processing server 102 is capable of reading information added to the blockchain, such as to prevent one issuing institution 106 a from seeing payment transactions involving a second issuing institution 106 b.
- the methods and systems discussed herein enable a processing server 102 to process payment transactions on behalf of multiple issuing institutions 106 that each involve a single consumer 104 .
- the use of authorization requests from multiple issuing institutions 106 may provide for a more accurate fraud determination, which may result in greater security for both consumers 104 and issuing institutions 106 .
- the actions being performed by the processing server 102 separate from the issuing institutions 106 ensures that issuing institutions 106 do not need to update their existing systems or risk security or privacy by storing transaction data for other issuing institutions 106 .
- issuing institutions 106 may see less transaction messages, which may decrease network bandwidth and processing power used, thus increasing operating efficiency.
- FIG. 2 illustrates an embodiment of a processing server 102 in the system 100 . It will be apparent to persons having skill in the relevant art that the embodiment of the processing server 102 illustrated in FIG. 2 is provided as illustration only and may not be exhaustive to all possible configurations of the processing server 102 suitable for performing the functions as discussed herein. For example, the computer system 500 illustrated in FIG. 5 and discussed in more detail below may be a suitable configuration of the processing server 102 .
- the processing server 102 may include a receiving device 202 .
- the receiving device 202 may be configured to receive data over one or more networks via one or more network protocols.
- the receiving device 202 may be configured to receive data from issuing institutions 106 , merchant systems 110 , payment networks 112 , blockchain networks 114 , and other systems and entities via one or more communication methods, such as radio frequency, local area networks, wireless area networks, cellular communication networks, Bluetooth, the Internet, etc.
- the receiving device 202 may be comprised of multiple devices, such as different receiving devices for receiving data over different networks, such as a first receiving device for receiving data over a local area network and a second receiving device for receiving data via the Internet.
- the receiving device 202 may be configured to receive data signals electronically transmitted by issuing institutions 106 that are superimposed or otherwise encoded with account identifiers and biographical information for transaction accounts issued thereby.
- the receiving device 202 may also be configured to receive data signals superimposed or otherwise encoded with authorization requests that may be electronically transmitted by issuing institutions 106 or payment networks 112 .
- the receiving device 202 may be configured to receive data signals electronically transmitted by issuing institutions 106 that are superimposed or otherwise encoded with authorization responses for forwarding to payment networks 112 .
- the receiving device 202 may be configured to receive data signals electronically transmitted by nodes in the blockchain network 114 that are superimposed or otherwise encoded with new blocks and/or data values included therein.
- the processing device may be configured to perform the functions of the processing server 102 discussed herein as will be apparent to persons having skill in the relevant art.
- the processing device may include and/or be comprised of a plurality of engines and/or modules specially configured to perform one or more functions of the processing device, such as a querying module 218 , determination module 220 , transaction processing module 222 , etc.
- the term “module” may be software or hardware particularly programmed to receive an input, perform one or more processes using the input, and provides an output. The input, output, and processes performed by various modules will be apparent to one skilled in the art based upon the present disclosure.
- the processing server 102 may include a querying module 218 .
- the querying module 218 may be configured to execute queries on databases to identify information.
- the querying module 218 may receive one or more data values or query strings, and may execute a query string based thereon on an indicated database, such as the account database 206 , to identify information stored therein.
- the querying module 218 may then output the identified information to an appropriate engine or module of the processing server 102 as necessary.
- the querying module 218 may, for example, execute a query on the account database 206 to identify an account profile 208 related to a consumer 104 involved in an attempted payment transaction to identify recent authorization requests related thereto for use in determining likelihood of fraud for the attempted payment transaction.
- the processing server 102 may also include a determination module 220 .
- the determination module 220 may be configured to make determinations for the processing server 102 for use in performing the functions discussed herein.
- the determination module 220 may receive instructions as input, may make a determination based on the instructions, and may output the determination to one or more modules of the processing server 102 .
- the input may include data and/or rules to be used in the determination.
- the determination module 220 may be configured to identify such data based on the instructions.
- the determination module 220 may be configured to determine likelihood of fraud for an attempted payment transaction based on the data included in an authorization request received for the attempted payment transaction as well as data included in authorization requests for past payment transactions involving the same consumer 104 across multiple issuing institutions 106 .
- the determination module 220 may compare times and geographic locations across the authorization requests to determine likelihood of fraud.
- the determination module 220 may also be configured to determine if an attempted payment transaction should be declined or forwarded to an associated issuing institution 106 based on the determined likelihood of fraud and a threshold value, such as may be associated with the associated issuing institution 106 .
- the processing server 102 may also include a transaction processing module 222 .
- the transaction processing module 222 may be configured to perform functions related to the processing of electronic payment transactions. For instance, the transaction processing module 222 may be configured generate authorization responses, forward authorization requests and responses, perform value added services, or any other functions associated with the routing and processing of electronic payment transactions.
- the transmitting device 224 may be configured to electronically transmit data signals to issuing institutions 106 that are superimposed or otherwise encoded with authorization requests and/or determinations of likelihood of fraud for attempted payment transactions, as well as data signals superimposed or otherwise encoded with requests for biographical information.
- the transmitting device 224 may also be configured to electronically transmit data signals to payment networks 112 or merchant systems 110 that are superimposed or otherwise encoded with authorization responses for attempted payment transactions.
- the transmitting device 224 may be configured to electronically transmit data signals to nodes in a blockchain network 114 that are superimposed or otherwise encoded with authorization request data for inclusion in a new blockchain data value or requests for blockchain data values.
- the processing server 102 may also include a memory 210 .
- the memory 210 may be configured to store data for use by the processing server 102 in performing the functions discussed herein, such as public and private keys, symmetric keys, etc.
- the memory 210 may be configured to store data using suitable data formatting methods and schema and may be any suitable type of memory, such as read-only memory, random access memory, etc.
- the memory 210 may include, for example, encryption keys and algorithms, communication protocols and standards, data formatting standards and protocols, program code for modules and application programs of the processing device, and other data that may be suitable for use by the processing server 102 in the performance of the functions disclosed herein as will be apparent to persons having skill in the relevant art.
- the memory 210 may be comprised of or may otherwise include a relational database that utilizes structured query language for the storage, identification, modifying, updating, accessing, etc. of structured data sets stored therein.
- the memory 210 may be configured to store, for example, fraud determination rules, transaction routing data, transaction message formatting standard data, etc.
- FIG. 3 illustrates an example process 300 executed by the processing server 102 in the system 100 for processing an electronic payment transaction on behalf of an issuing institution 106 based on a likelihood of fraud determined using past authorization requests from multiple issuing institutions 106 .
- the receiving device 202 of the processing server 102 may receive an authorization request for an attempted payment transaction, such as may be electronically transmitted by the payment network 112 or an issuing institution 106 .
- the authorization request may be formatted according to one or more standards governing the interchange of financial transaction messages and include a plurality of data elements including data elements configured to store a primary account number, transaction time, and geographic location.
- the processing server 102 may determine if other transaction accounts are known that are issued to the same consumer 104 involved in the payment transaction.
- Such a determination may be made by executing, by the querying module 218 of the processing server 102 , a query on the account database 206 of the processing server 102 to identify an account profile 208 that includes the primary account number included in the received authorization request, and identifying if any other primary account numbers are included in that account profile 208 , which may correspond to other transaction accounts including transaction accounts issued by other issuing institutions 106 .
- the transaction processing module 222 may proceed to process the payment transaction using traditional methods. In such cases, the processing server 102 may continue to make a fraud determination based on the one transaction account, or may forward the authorization request on to the issuing institution 106 for processing. If the determination is that other transaction accounts are known, then, in step 308 , the processing server 102 may identify recent payment transactions conducted or attempted using the same and other transaction accounts. In some cases, the recent payment transactions may be identified in the account profile 208 . In other cases, recent payment transactions may be identified in a transaction database in the processing server 102 used to store transaction data. In yet other cases, the transactions may be identified as data values in a blockchain.
- the determination module 220 of the processing server 102 may determine a likelihood of fraud for the attempted payment transaction based on data included in the received authorization request as compared to transaction data in the identified related transactions. In an exemplary embodiment, the determination may be based on at least a comparison of the time and geographic location of the attempted payment transaction with the times and locations of the other recent payment transactions involving the consumer 104 . In step 312 , the determination module 220 of the processing server 102 may determine if the likelihood of fraud is above a threshold value set by the issuing institution 106 that issued the transaction account used in the attempted payment transaction.
- the payment transaction may be processed using traditional methods.
- the transmitting device 224 of the processing server 102 may forward the authorization request to the associating issuing institution 106 for approval or denial.
- the issuing institution 106 may return an authorization response to the processing server 102 , which may be received by the receiving device 202 thereof, for forwarding on to the payment network 112 using payment rails associated therewith. If the likelihood of fraud for the attempted payment transaction is above the threshold, then, in step 316 , the processing server 102 may decline the payment transaction.
- the decline may be accomplished by the transaction processing module 222 of the processing server 102 generating an authorization response that includes a data element that stores a response code indicating denial of the payment transaction, which is then electronically transmitted to the payment network 112 by the transmitting device 224 of the processing server 102 using payment rails associated therewith.
- FIG. 4 illustrates a method 400 for the processing of an electronic payment transaction by a processing server on behalf of an issuing institution based on a determined likelihood of fraud based on past authorization requests involving other issuing institutions.
- an account profile (e.g., an account profile 208 ) may be stored in an account database (e.g., the account database 206 ) of a processing server (e.g., the processing server 102 ), wherein the account profile includes at least a plurality of primary account numbers and one or more biographical data values, where each of the plurality of primary account numbers is associated with a transaction account and the one or more biographical data values are associated with each of the transaction accounts related to the plurality of primary account numbers.
- a first authorization request for a first payment transaction may be received by a receiving device (e.g., the receiving device 202 ) of the processing server, wherein the first authorization request is formatted according to one or more standards and includes a plurality of data elements configured to store transaction data including at least a first primary account number of the plurality of primary account numbers, a first transaction time, and a first geographic location.
- a receiving device e.g., the receiving device 202
- the first authorization request is formatted according to one or more standards and includes a plurality of data elements configured to store transaction data including at least a first primary account number of the plurality of primary account numbers, a first transaction time, and a first geographic location.
- the first payment transaction may be processed by the processing server (e.g., by the transaction processing module 222 thereof).
- a second authorization for a second payment transaction may be received by the receiving device of the processing server from an external system (e.g., the payment network 112 ), wherein the second authorization request is formatted according to the one or more standards and includes a plurality of data elements configured to store transaction data including at least a second primary account number of the plurality of primary account numbers, a second transaction time, and a second geographic location, where the second primary account number is associated with a transaction account issued by a different issuer than a transaction account associated with the first primary account number.
- a likelihood of fraud may be determined by the processing server (e.g., by the determination module 220 thereof) based on at least the first transaction time and first geographic location stored in the first authorization request and the second transaction time and second geographic location stored in the second authorization request. If the determined likelihood of fraud is below a predetermined threshold, then, in step 412 , the second authorization request may be electronically transmitted to the different issuer by a transmitting device (e.g., the transmitting device 224 ) of the processing server. If the determined likelihood of fraud is above the predetermined threshold, then, in step 414 , an authorization response for the second payment transaction indicating decline of the second payment transaction may be electronically transmitted, by the transmitting device of the processing server, to the external system.
- a transmitting device e.g., the transmitting device 224
- the first primary account number may include an identification number associated with a first issuing institution (e.g., the issuing institution 106 a ), and the second primary account number may include an identification number associated with a second issuing institution (e.g., the issuing institution 106 b ) different from the first issuing institution.
- the determination of a likelihood of fraud based on at least the first transaction time and first geographic location stored in the first authorization request and the second transaction time and second geographic location stored in the second authorization request may be further based on an estimated travel time between the first geographic location and the second geographic location compared to a difference in time between the first transaction time and the second transaction time.
- the authorization response may be formatted according to the one or more standards.
- the authorization response may include a plurality of data elements including a data element configured to store a response code indicating decline of the payment transaction due to likelihood of fraud.
- FIG. 5 illustrates a computer system 500 in which embodiments of the present disclosure, or portions thereof, may be implemented as computer-readable code.
- the processing server 102 of FIG. 1 may be implemented in the computer system 500 using hardware, software, firmware, non-transitory computer readable media having instructions stored thereon, or a combination thereof and may be implemented in one or more computer systems or other processing systems.
- Hardware, software, or any combination thereof may embody modules and components used to implement the methods of FIGS. 3 and 4 .
- Processor device 504 may be a special purpose or a general purpose processor device specifically configured to perform the functions discussed herein.
- the processor device 504 may be connected to a communications infrastructure 506 , such as a bus, message queue, network, multi-core message-passing scheme, etc.
- the network may be any network suitable for performing the functions as disclosed herein and may include a local area network (LAN), a wide area network (WAN), a wireless network (e.g., WiFi), a mobile communication network, a satellite network, the Internet, fiber optic, coaxial cable, infrared, radio frequency (RF), or any combination thereof.
- LAN local area network
- WAN wide area network
- WiFi wireless network
- mobile communication network e.g., a mobile communication network
- satellite network the Internet, fiber optic, coaxial cable, infrared, radio frequency (RF), or any combination thereof.
- RF radio frequency
- the computer system 500 may also include a main memory 508 (e.g., random access memory, read-only memory, etc.), and may also include a secondary memory 510 .
- the secondary memory 510 may include the hard disk drive 512 and a removable storage drive 514 , such as a floppy disk drive, a magnetic tape drive, an optical disk drive, a flash memory, etc.
- the secondary memory 510 may include alternative means for allowing computer programs or other instructions to be loaded into the computer system 500 , for example, the removable storage unit 522 and an interface 520 .
- Examples of such means may include a program cartridge and cartridge interface (e.g., as found in video game systems), a removable memory chip (e.g., EEPROM, PROM, etc.) and associated socket, and other removable storage units 522 and interfaces 520 as will be apparent to persons having skill in the relevant art.
- Data stored in the computer system 500 may be stored on any type of suitable computer readable media, such as optical storage (e.g., a compact disc, digital versatile disc, Blu-ray disc, etc.) or magnetic tape storage (e.g., a hard disk drive).
- the data may be configured in any type of suitable database configuration, such as a relational database, a structured query language (SQL) database, a distributed database, an object database, etc. Suitable configurations and storage types will be apparent to persons having skill in the relevant art.
- the computer system 500 may also include a communications interface 524 .
- the communications interface 524 may be configured to allow software and data to be transferred between the computer system 500 and external devices.
- Exemplary communications interfaces 524 may include a modem, a network interface (e.g., an Ethernet card), a communications port, a PCMCIA slot and card, etc.
- Software and data transferred via the communications interface 524 may be in the form of signals, which may be electronic, electromagnetic, optical, or other signals as will be apparent to persons having skill in the relevant art.
- the signals may travel via a communications path 526 , which may be configured to carry the signals and may be implemented using wire, cable, fiber optics, a phone line, a cellular phone link, a radio frequency link, etc.
- the processor device 504 may comprise one or more modules or engines configured to perform the functions of the computer system 500 .
- Each of the modules or engines may be implemented using hardware and, in some instances, may also utilize software, such as corresponding to program code and/or programs stored in the main memory 508 or secondary memory 510 .
- program code may be compiled by the processor device 504 (e.g., by a compiling module or engine) prior to execution by the hardware of the computer system 500 .
- the program code may be source code written in a programming language that is translated into a lower level language, such as assembly language or machine code, for execution by the processor device 504 and/or any additional hardware components of the computer system 500 .
Abstract
Description
- The present disclosure relates to the processing of electronic payment transactions, specifically the use of an authorization for a payment transaction funded by a transaction account issued by a first issuer in the authorization of a second payment transaction funded by a different transaction account issued by a second issuer, where the transaction accounts are associated through biographical information.
- Generally, electronic payment transactions are processed using a system where an issuing institution that issued a transaction account used to fund the transaction will approve or decline the transaction. In many cases, the determination to approve or decline the transaction is made based on, among other criteria, transaction history of that transaction account. For instance, if a consumer wants to make a purchase at the same merchant and the same time and day of the week as the consumer has made several times prior using the same transaction account, the issuing institution may be more likely to approve the transaction having the impression that it is the genuine consumer. Similarly, if a transaction is conducted in one country and then a second transaction attempted a short time after in a different country a significant distance away, the issuing institution may likely decline the transaction due to fraud concerns.
- Such considerations can be useful in the approval and denial of electronic payment transactions. However, these kinds of considerations are only as useful as the data available to the issuing institutions. In cases where a consumer may have multiple transaction accounts that are used to fund electronic payment transactions, the transaction history available to any single issuer may be incomplete and thus ineffective for determining approval or denial based thereon. In addition, in traditional systems, it may be impossible due to privacy regulations and restrictions for one issuing institution to obtain transactional information for a consumer from a different issuing institution. Furthermore, due to inexperience handling such data, issuing institutions may be inefficient, if not incapable, of taking such data into account when determining approval and denial of payment transactions. That is, a business need creates a technical challenge to achieve the desired effect that avoids the technical problems identified above for instance.
- Thus, there is a need for a technological system that is configured to identify, while maintaining consumer security and privacy, transactional history for a consumer across multiple issuing institutions for use thereof in determining approval or denial of an attempted electronic payment transaction.
- The present disclosure provides a description of systems and methods for processing an electronic payment transaction. A processing system identifies transaction accounts issued to the same consumer from different issuing institutions via the use of biographical data. Transactions are tracked across the issuing institution such that, when a new authorization request is received, the past transaction history, independent of issuing institution, is taken into account. The processing system is configured to decline transactions on behalf of the issuing institutions if the transactional history is such that fraud is detected, resulting in a more efficient processing system where fraud can be prevented in instances where the issuing institution would have been unable to detect such fraud, and in a manner that reduces network communications and processing time expended by issuing institutions.
- A method for processing an electronic payment transaction includes: storing, in an account database of a processing server, an account profile, wherein the account profile includes at least a plurality of primary account numbers and one or more biographical data values, where each of the plurality of primary account numbers is associated with a transaction account and the one or more biographical data values are associated with each of the transaction accounts related to the plurality of primary account numbers; receiving, by a receiving device of the processing server, a first authorization request for a first payment transaction, wherein the first authorization request is formatted according to one or more standards and includes a plurality of data elements configured to store transaction data including at least a first primary account number of the plurality of primary account numbers, a first transaction time, and a first geographic location; processing, by the processing server, the first payment transaction; receiving, by the receiving device of the processing server, a second authorization request for a second payment transaction from an external system, wherein the second authorization request is formatted according to the one or more standards and includes a plurality of data elements configured to store transaction data including at least a second primary account number of the plurality of primary account numbers, a second transaction time, and a second geographic location, where the second primary account number is associated with a transaction account issued by a different issuer than a transaction account associated with the first primary account number; determining, by the processing server, a likelihood of fraud based on at least the first transaction time and first geographic location stored in the first authorization request and the second transaction time and second geographic location stored in the second authorization request; and forwarding, by a transmitting device of the processing server, the second authorization request to the different issuer if the determined likelihood of fraud is below a predetermined threshold, or transmitting, by the transmitting device of the processing server, an authorization response for the second payment transaction to the external system indicating decline of the second payment transaction if the determined likelihood of fraud is above the predetermined threshold.
- A system for processing an electronic payment transaction includes: an account database of a processing server configured to store an account profile, wherein the account profile includes at least a plurality of primary account numbers and one or more biographical data values, where each of the plurality of primary account numbers is associated with a transaction account and the one or more biographical data values are associated with each of the transaction accounts related to the plurality of primary account numbers; a receiving device of the processing server configured to receive a first authorization request for a first payment transaction, wherein the first authorization request is formatted according to one or more standards and includes a plurality of data elements configured to store transaction data including at least a first primary account number of the plurality of primary account numbers, a first transaction time, and a first geographic location; a transmitting device of the processing server; and the processing server configured to process the first payment transaction, wherein the receiving device of the processing server is further configured to receive a second authorization request for a second payment transaction from an external system, wherein the second authorization request is formatted according to the one or more standards and includes a plurality of data elements configured to store transaction data including at least a second primary account number of the plurality of primary account numbers, a second transaction time, and a second geographic location, where the second primary account number is associated with a transaction account issued by a different issuer than a transaction account associated with the first primary account number, the processing server is further configured to determine a likelihood of fraud based on at least the first transaction time and first geographic location stored in the first authorization request and the second transaction time and second geographic location stored in the second authorization request, and the transmitting device of the processing server is configured to transmit the second authorization request to the different issuer if the determined likelihood of fraud is below a predetermined threshold, or transmit an authorization response for the second payment transaction to the external system indicating decline of the second payment transaction if the determined likelihood of fraud is above the predetermined threshold.
- The scope of the present disclosure is best understood from the following detailed description of exemplary embodiments when read in conjunction with the accompanying drawings. Included in the drawings are the following figures:
-
FIG. 1 is a block diagram illustrating a high level system architecture for processing electronic payment transactions in accordance with exemplary embodiments. -
FIG. 2 is a block diagram illustrating the processing server of the system ofFIG. 1 for the processing of electronic payment transactions in accordance with exemplary embodiments. -
FIG. 3 is a flow diagram illustrating a process for processing electronic payment transactions by the processing server ofFIG. 2 in accordance with exemplary embodiments. -
FIG. 4 is a flow chart illustrating an exemplary method for processing an electronic payment transaction in accordance with exemplary embodiments. -
FIG. 5 is a block diagram illustrating a computer system architecture in accordance with exemplary embodiments. - Further areas of applicability of the present disclosure will become apparent from the detailed description provided hereinafter. It should be understood that the detailed description of exemplary embodiments are intended for illustration purposes only and are, therefore, not intended to necessarily limit the scope of the disclosure.
- Payment Network—A system or network used for the transfer of money via the use of cash-substitutes for thousands, millions, and even billions of transactions during a given period. Payment networks may use a variety of different protocols and procedures in order to process the transfer of money for various types of transactions. Transactions that may be performed via a payment network may include product or service purchases, credit purchases, debit transactions, fund transfers, account withdrawals, etc. Payment networks may be configured to perform transactions via cash-substitutes, which may include payment cards, letters of credit, checks, transaction accounts, etc. Examples of networks or systems configured to perform as payment networks include those operated by MasterCard®, VISA®, Discover®, American Express®, PayPal®, etc. Use of the term “payment network” herein may refer to both the payment network as an entity, and the physical payment network, such as the equipment, hardware, and software comprising the payment network.
- Payment Rails—Infrastructure associated with a payment network used in the processing of payment transactions and the communication of transaction messages and other similar data between the payment network and other entities interconnected with the payment network that handles thousands, millions, and even billions of transactions during a given period. The payment rails may be comprised of the hardware used to establish the payment network and the interconnections between the payment network and other associated entities, such as financial institutions, gateway processors, etc. In some instances, payment rails may also be affected by software, such as via special programming of the communication hardware and devices that comprise the payment rails. For example, the payment rails may include specifically configured computing devices that are specially configured for the routing of transaction messages, which may be specially formatted data messages that are electronically transmitted via the payment rails, as discussed in more detail below.
- Transaction Account—A financial account that may be used to fund a transaction, such as a checking account, savings account, credit account, virtual payment account, etc. A transaction account may be associated with a consumer, which may be any suitable type of entity associated with a payment account, which may include a person, family, company, corporation, governmental entity, etc. In some instances, a transaction account may be virtual, such as those accounts operated by PayPal®, etc.
- Merchant—An entity that provides products (e.g., goods and/or services) for purchase by another entity, such as a consumer or another merchant. A merchant may be a consumer, a retailer, a wholesaler, a manufacturer, or any other type of entity that may provide products for purchase as will be apparent to persons having skill in the relevant art. In some instances, a merchant may have special knowledge in the goods and/or services provided for purchase. In other instances, a merchant may not have or require any special knowledge in offered products. In some embodiments, an entity involved in a single transaction may be considered a merchant. In some instances, as used herein, the term “merchant” may refer to an apparatus or device of a merchant entity.
- Issuer—An entity that establishes (e.g., opens) a letter or line of credit in favor of a beneficiary, and honors drafts drawn by the beneficiary against the amount specified in the letter or line of credit. In many instances, the issuer may be a bank or other financial institution authorized to open lines of credit. In some instances, any entity that may extend a line of credit to a beneficiary may be considered an issuer. The line of credit opened by the issuer may be represented in the form of a payment account, and may be drawn on by the beneficiary via the use of a payment card. An issuer may also offer additional types of payment accounts to consumers as will be apparent to persons having skill in the relevant art, such as debit accounts, prepaid accounts, electronic wallet accounts, savings accounts, checking accounts, etc., and may provide consumers with physical or non-physical means for accessing and/or utilizing such an account, such as debit cards, prepaid cards, automated teller machine cards, electronic wallets, checks, etc.
- Payment Transaction—A transaction between two entities in which money or other financial benefit is exchanged from one entity to the other. The payment transaction may be a transfer of funds, for the purchase of goods or services, for the repayment of debt, or for any other exchange of financial benefit as will be apparent to persons having skill in the relevant art. In some instances, payment transaction may refer to transactions funded via a payment card and/or payment account, such as credit card transactions. Such payment transactions may be processed via an issuer, payment network, and acquirer. The process for processing such a payment transaction may include at least one of authorization, batching, clearing, settlement, and funding. Authorization may include the furnishing of payment details by the consumer to a merchant, the submitting of transaction details (e.g., including the payment details) from the merchant to their acquirer, and the verification of payment details with the issuer of the consumer's payment account used to fund the transaction. Batching may refer to the storing of an authorized transaction in a batch with other authorized transactions for distribution to an acquirer. Clearing may include the sending of batched transactions from the acquirer to a payment network for processing. Settlement may include the debiting of the issuer by the payment network for transactions involving beneficiaries of the issuer. In some instances, the issuer may pay the acquirer via the payment network. In other instances, the issuer may pay the acquirer directly. Funding may include payment to the merchant from the acquirer for the payment transactions that have been cleared and settled. It will be apparent to persons having skill in the relevant art that the order and/or categorization of the steps discussed above performed as part of payment transaction processing.
- Blockchain—A public ledger of all transactions of a blockchain-based currency. One or more computing devices may comprise a blockchain network, which may be configured to process and record transactions as part of a block in the blockchain. Once a block is completed, the block is added to the blockchain and the transaction record thereby updated. In many instances, the blockchain may be a ledger of transactions in chronological order, or may be presented in any other order that may be suitable for use by the blockchain network. In some configurations, transactions recorded in the blockchain may include a destination address and a currency amount, such that the blockchain records how much currency is attributable to a specific address. In some instances, the transactions are financial and others not financial, or might include additional or different information, such as a source address, timestamp, etc. In some embodiments, a blockchain may also or alternatively include nearly any type of data as a form of transaction that is or needs to be placed in a distributed database that maintains a continuously growing list of data records hardened against tampering and revision, even by its operators, and may be confirmed and validated by the blockchain network through proof of work and/or any other suitable verification techniques associated therewith. In some cases, data regarding a given transaction may further include additional data that is not directly part of the transaction appended to transaction data. In some instances, the inclusion of such data in a blockchain may constitute a transaction. In such instances, a blockchain may not be directly associated with a specific digital, virtual, fiat, or other type of currency.
-
FIG. 1 illustrates asystem 100 for the processing of electronic payment transactions where authorization is performed on behalf of an issuing institution based on transactional history of a consumer across multiple issuing institutions where, in some cases, blockchain may be used for storage of the transactional history. - The
system 100 may include aprocessing server 102. Theprocessing server 102, discussed in more detail below, may be configured to participate in the processing of electronic payment transactions utilizing transactional history for aconsumer 104 across a plurality of different issuing institutions 106, such as the issuinginstitutions FIG. 1 . In thesystem 100, aconsumer 104 may have transaction accounts issued thereto that may be used in the funding of electronic payment transactions by two or more issuing institutions 106. Each issuing institution 106 may issue a transaction account to theconsumer 104 and, for each transaction account, may issue one or more payment instruments 108 to theconsumer 104, such as thepayment instruments FIG. 1 . The payment instrument 108 may be encoded with or otherwise used to convey payment credentials associated with the related transaction account. Payment credentials may include, for example, a primary account number and any other data used in the identification and authentication of a transaction account for use in funding an electronic payment transaction, such as a name, expiration date, security code, application cryptogram, transaction counter, etc. - The
consumer 104 may use the payment instruments 108 atmerchant systems 110 when conducting electronic payment transactions. Theconsumer 104 may present a payment instrument 108 to amerchant system 110, which may read or otherwise receive payment credentials from the payment instrument. Themerchant system 110 may include the payment credentials in transaction data that is submitted to apayment network 112 for processing of the payment transaction. In some embodiments, themerchant system 110 may submit the transaction data directly to thepayment network 112 via payment rails associated therewith. In other embodiments, themerchant system 110 may transmit the transaction data to an intermediate entity, such as an acquiring institution or gateway processor, which may submit the transaction data to thepayment network 112 via payment rails associated therewith. - As part of the processing of the payment transaction, the
payment network 112 may receive an authorization request for the payment transaction. An authorization request may be a type of transaction message indicating that authorization is requested for a related payment transaction. A transaction message may be a specially formatted data message that is formatted according to one or more standards governing the interchange of financial transactional messages, such as the International Organization of Standardization's ISO 8583 or ISO 20022 standards. A transaction message may include a message type indicator indicating a type of the message (e.g., an authorization request, authorization response, etc.) as well as a plurality of data elements, where each data element is configured to store data for the electronic payment transaction. In some cases, the standards and/or one or more bitmaps included in the transaction message may be used to indicate what data elements store what transactional data. Data elements may be configured, for example, to store the primary account number, other payment credentials, a transaction amount, transaction time, transaction date, geographic location, currency type, merchant identification number, acquirer data, issuer data, product data, offer data, reward data, loyalty data, etc. In some cases, themerchant system 110 may generate the authorization request for the electronic payment transaction. In other cases, an intermediate entity (e.g., acquiring institution, gateway processor, etc.) may receive the transaction data from themerchant system 110 and generate the authorization request based thereon. - In a traditional system, the
payment network 112 would forward the authorization request to the issuing institution 106 that issued the transaction account used by theconsumer 104 to fund the electronic payment transaction, where the issuing institution 106 would approve or deny the payment transaction and electronically transmit an authorization response (e.g., a transaction message with a message type indicator indicating an authorization response) back to thepayment network 112. In thesystem 100, theprocessing server 102 may receive the authorization request (e.g., directly from thepayment network 112 or from the issuing institution 106 after forwarding of the authorization request by the payment network 112) to perform on-behalf processing for the issuing institution 106. Theprocessing server 102 may determine if the transaction should be declined, or if the issuing institution 106 should be contacted for further approval based on past transaction history of theconsumer 104 involved in the payment transaction, as discussed in more detail below. - The
processing server 102 may be configured to take past authorization requests into account when processing a newly received authorization request for aconsumer 104, wherein the past authorization requests may be associated with different issuing institutions 106 (e.g., as indicated via the included primary account numbers). When an authorization request is received by theprocessing server 102, the authorization request or data included therein may be stored in a profile associated with theconsumer 104, discussed in more detail below. Theprocessing server 102 may continue to store authorization requests, or data included therein, for any payment transactions that can be attributed to theconsumer 104 regardless of the issuing institution 106. A payment transaction may be attributed to theconsumer 104 based on biographical data associated with the transaction account used to fund the payment transaction. - The
processing server 102 may be configured to receive biographical information for transaction accounts from associated issuing institutions 106. Biographical information may include any information made available by an issuing institution 106 regarding an authorized user of a transaction account. Such information may include, for example, a name, phone number, e-mail address, computing device identifier, username, social security number, etc. In some cases, eachconsumer 104 may first provide their consent to the issuing institution 106 for such data to be made available to theprocessing server 102. In some instances, the biographical information may be anonymized prior to transmission to theprocessing server 102, or may be anonymized by theprocessing server 102 upon receipt. For example, a name of theconsumer 104 may be provided by the issuing institution 106 as the biographical information for a transaction account, but where the name is hashed such that the consumer's real name is unknown to theprocessing server 102 and cannot be identified by theprocessing server 102. - The
processing server 102 may receive biographical information for transaction accounts from multiple issuing institutions 106, where theprocessing server 102 may identify transaction accounts across multiple issuing institutions 106 that are each issued to theconsumer 104 or where theconsumer 104 is otherwise an authorized user of the transaction account based on the biographical information. For instance, theprocessing server 102 may receive hashes of names for each transaction account, and may match a transaction account from issuinginstitution 106 a with a transaction account from issuinginstitution 106 b to theconsumer 104 because of matching name hashes. Each transaction account that is matched to aconsumer 104 may have identifying information thereof (e.g., the primary account number) stored in the consumer's profile. - When a new authorization request is received from the payment network 112 (e.g., or an issuing institution 106, as applicable), the
processing server 102 may identify a profile for theconsumer 104 involved in the related electronic payment transaction using the primary account number or other identifying information found in the authorization request. Theprocessing server 102 may then determine a likelihood of fraud for the attempted payment transaction based on data included in the new authorization request and data included in one or more prior authorization requests as found in the profile. For instance, in an exemplary embodiment, theprocessing server 102 may compare a time and geographic location in one or more recent authorization requests with a time and geographic location included in the new authorization request. If the times and locations are such that it would be impossible for theconsumer 104 to personally conduct both transactions (e.g., there is one hour between authorization requests but the geographic locations are 1,000 miles apart), then theprocessing server 102 may determine a high likelihood of fraud. Conversely, if the times and locations are such that it is likely theconsumer 104 is involved in the new payment transaction (e.g., the last two authorizations were for transactions in the last hour at the same shopping mall as the new authorization request), then a low likelihood of fraud may be determined. The likelihood of fraud may be represented by theprocessing server 102 using any suitable method, such as an integer (e.g., on a scale of 1-100), name (e.g., very low, low, high, very high), or other value. - The
processing server 102 may then determine if the transaction should be declined. The determination may be based on the likelihood of fraud, and may be further based on criteria set forth by the associated issuing institution 106. For instance, each issuing institution 106 may have a threshold set for on-behalf declines where theprocessing server 102 may decline any attempted payment transaction where the determined likelihood of fraud is higher than a predetermined value provided by the issuing institution 106. Theprocessing server 102 may identify such a value based on the primary account number used in the new authorization request (e.g., where the issuing institution 106 may be identified therefrom, such as based on a bank identification number, issuer identification number, etc.). - If the
processing server 102 determines that the attempted payment transaction should be declined, then theprocessing server 102 may generate an authorization response for the payment transaction that includes a data element configured to store a response code that indicates that the payment transaction is declined. In some instances, the response code may indicate a decline due to fraud concerns. Theprocessing server 102 may return the authorization response to thepayment network 112, which may proceed with any additional processing as necessary using traditional methods. Themerchant system 110 may be informed of the transaction decline and may finalize the payment transaction accordingly. In an exemplary embodiment, the authorization request, or data included therein, for the declined payment transaction may be stored in the consumer's profile to be taken into account for future determinations. - If the
processing server 102 determines that the payment transaction should not be immediately declined, theprocessing server 102 may forward the authorization request to the appropriate issuing institution 106. In some cases, the determined likelihood of fraud may be included in the authorization request (e.g., in a data element reserved for private use) or may be transmitted in a data message with the authorization request or in a separate data message. The issuing institution 106 may receive the authorization request and may approve or deny the transaction using traditional methods. As part of the approval or denial, an authorization response indicating thereof (e.g., in a response code stored in a corresponding data element) may be generated by the issuing institution 106. In some cases, the authorization response may be transmitted directly to thepayment network 112 via payment rails associated therewith. In other cases, the issuing institution 106 may return the authorization response to theprocessing server 102, which may forward the authorization response to thepayment network 112. The payment transaction may then be finalized accordingly by thepayment network 112 andmerchant system 110. - In some embodiments, a blockchain may be used to store the transaction data for past payment transactions involving a
consumer 104. The blockchain may be maintained by ablockchain network 114, which may be comprised of a plurality of nodes, where each node may be a computing system configured to maintain a copy of the blockchain, generate new blocks, validate blocks generated by other nodes, and perform any additional functions associated with operation and use of the blockchain. In some embodiments, theprocessing server 102 may be a node in theblockchain network 114. - The blockchain may be a distributed ledger that is comprised of at least a plurality of blocks. Each block may include at least a block header and one or more data values. Each block header may include at least a timestamp, a block reference value, and a data reference value. The timestamp may be a time at which the block header was generated, and may be represented using any suitable method (e.g., UNIX timestamp, DateTime, etc.). The block reference value may be a value that references an earlier block (e.g., based on timestamp) in the blockchain. In some embodiments, a block reference value in a block header may be a reference to the block header of the most recently added block prior to the respective block. In an exemplary embodiment, the block reference value may be a hash value generated via the hashing of the block header of the most recently added block. The data reference value may similarly be a reference to the one or more data values stored in the block that includes the block header. In an exemplary embodiment, the data reference value may be a hash value generated via the hashing of the one or more data values. For instance, the block reference value may be the root of a Merkle tree generated using the one or more data values.
- The use of the block reference value and data reference value in each block header may result in the blockchain being immutable. Any attempted modification to a data value would require the generation of a new data reference value for that block, which would thereby require the subsequent block's block reference value to be newly generated, further requiring the generation of a new block reference value in every subsequent block. This would have to be performed and updated in every single node in the
blockchain network 114 prior to the generation and addition of a new block to the blockchain in order for the change to be made permanent. Computational and communication limitations may make such a modification exceedingly difficult, if not impossible, thus rendering the blockchain immutable. - Each data value stored in the blockchain may correspond to an authorization request received for a payment transaction. In some cases, there may be a separate blockchain for each
consumer 104, where every data value included in that blockchain may be related to an attempted payment transaction involving that consumer. In other cases, a blockchain may store data values formultiple consumers 104. In such cases, each data value may include the account identifier, biographical information, or other value used to identify theconsumer 104 and/or profile related therewith. Each data value may include the authorization request or any data included therein that may be used in performing the functions discussed herein. In some embodiments, theprocessing server 102 may submit any received authorization requests to a node in theblockchain network 114 for inclusion in the blockchain. In other embodiments, an issuing institution 106 may, when an authorization request is received, submit that authorization request to a node in theblockchain network 114. In yet other embodiments,merchant systems 110 or thepayment network 112 may be configured to provide authorization requests to nodes in theblockchain network 114 for inclusion on the blockchain during initial processing of the payment transaction. In some embodiments, the blockchain may be a private blockchain such that only theprocessing server 102 is capable of reading information added to the blockchain, such as to prevent oneissuing institution 106 a from seeing payment transactions involving asecond issuing institution 106 b. - The methods and systems discussed herein enable a
processing server 102 to process payment transactions on behalf of multiple issuing institutions 106 that each involve asingle consumer 104. The use of authorization requests from multiple issuing institutions 106 may provide for a more accurate fraud determination, which may result in greater security for bothconsumers 104 and issuing institutions 106. The actions being performed by theprocessing server 102 separate from the issuing institutions 106 ensures that issuing institutions 106 do not need to update their existing systems or risk security or privacy by storing transaction data for other issuing institutions 106. In addition, by theprocessing server 102 declining fraud-likely payment transactions on behalf of issuing institutions 106, issuing institutions 106 may see less transaction messages, which may decrease network bandwidth and processing power used, thus increasing operating efficiency. -
FIG. 2 illustrates an embodiment of aprocessing server 102 in thesystem 100. It will be apparent to persons having skill in the relevant art that the embodiment of theprocessing server 102 illustrated inFIG. 2 is provided as illustration only and may not be exhaustive to all possible configurations of theprocessing server 102 suitable for performing the functions as discussed herein. For example, thecomputer system 500 illustrated inFIG. 5 and discussed in more detail below may be a suitable configuration of theprocessing server 102. - The
processing server 102 may include a receivingdevice 202. The receivingdevice 202 may be configured to receive data over one or more networks via one or more network protocols. In some instances, the receivingdevice 202 may be configured to receive data from issuing institutions 106,merchant systems 110,payment networks 112,blockchain networks 114, and other systems and entities via one or more communication methods, such as radio frequency, local area networks, wireless area networks, cellular communication networks, Bluetooth, the Internet, etc. In some embodiments, the receivingdevice 202 may be comprised of multiple devices, such as different receiving devices for receiving data over different networks, such as a first receiving device for receiving data over a local area network and a second receiving device for receiving data via the Internet. The receivingdevice 202 may receive electronically transmitted data signals, where data may be superimposed or otherwise encoded on the data signal and decoded, parsed, read, or otherwise obtained via receipt of the data signal by the receivingdevice 202. In some instances, the receivingdevice 202 may include a parsing module for parsing the received data signal to obtain the data superimposed thereon. For example, the receivingdevice 202 may include a parser program configured to receive and transform the received data signal into usable input for the functions performed by the processing device to carry out the methods and systems described herein. - The receiving
device 202 may be configured to receive data signals electronically transmitted by issuing institutions 106 that are superimposed or otherwise encoded with account identifiers and biographical information for transaction accounts issued thereby. The receivingdevice 202 may also be configured to receive data signals superimposed or otherwise encoded with authorization requests that may be electronically transmitted by issuing institutions 106 orpayment networks 112. In some embodiments, the receivingdevice 202 may be configured to receive data signals electronically transmitted by issuing institutions 106 that are superimposed or otherwise encoded with authorization responses for forwarding topayment networks 112. In embodiments where blockchain is used, the receivingdevice 202 may be configured to receive data signals electronically transmitted by nodes in theblockchain network 114 that are superimposed or otherwise encoded with new blocks and/or data values included therein. - The
processing server 102 may also include acommunication module 204. Thecommunication module 204 may be configured to transmit data between modules, engines, databases, memories, and other components of theprocessing server 102 for use in performing the functions discussed herein. Thecommunication module 204 may be comprised of one or more communication types and utilize various communication methods for communications within a computing device. For example, thecommunication module 204 may be comprised of a bus, contact pin connectors, wires, etc. In some embodiments, thecommunication module 204 may also be configured to communicate between internal components of theprocessing server 102 and external components of theprocessing server 102, such as externally connected databases, display devices, input devices, etc. Theprocessing server 102 may also include a processing device. The processing device may be configured to perform the functions of theprocessing server 102 discussed herein as will be apparent to persons having skill in the relevant art. In some embodiments, the processing device may include and/or be comprised of a plurality of engines and/or modules specially configured to perform one or more functions of the processing device, such as aquerying module 218,determination module 220,transaction processing module 222, etc. As used herein, the term “module” may be software or hardware particularly programmed to receive an input, perform one or more processes using the input, and provides an output. The input, output, and processes performed by various modules will be apparent to one skilled in the art based upon the present disclosure. - The
processing server 102 may include anaccount database 206. Theaccount database 206 may be configured to store a plurality ofaccount profiles 208 using a suitable data storage format and schema. Theaccount database 206 may be a relational database that utilizes structured query language for the storage, identification, modifying, updating, accessing, etc. of structured data sets stored therein. Eachaccount profile 208 may be a structured data set configured to store data related to aconsumer 104. Eachaccount profile 208 may include at least a plurality of primary account numbers or other account identifiers, where each is related to a transaction account issued to therelated consumer 104 or where therelated consumer 104 is an authorized user thereof. Eachaccount profile 208 may also include biographical information used to identify matching transaction accounts, as well as transaction data and/or authorization requests for past payment transactions, if applicable. - The
processing server 102 may include aquerying module 218. Thequerying module 218 may be configured to execute queries on databases to identify information. Thequerying module 218 may receive one or more data values or query strings, and may execute a query string based thereon on an indicated database, such as theaccount database 206, to identify information stored therein. Thequerying module 218 may then output the identified information to an appropriate engine or module of theprocessing server 102 as necessary. Thequerying module 218 may, for example, execute a query on theaccount database 206 to identify anaccount profile 208 related to aconsumer 104 involved in an attempted payment transaction to identify recent authorization requests related thereto for use in determining likelihood of fraud for the attempted payment transaction. - The
processing server 102 may also include adetermination module 220. Thedetermination module 220 may be configured to make determinations for theprocessing server 102 for use in performing the functions discussed herein. Thedetermination module 220 may receive instructions as input, may make a determination based on the instructions, and may output the determination to one or more modules of theprocessing server 102. In some cases, the input may include data and/or rules to be used in the determination. In other cases, thedetermination module 220 may be configured to identify such data based on the instructions. For example, thedetermination module 220 may be configured to determine likelihood of fraud for an attempted payment transaction based on the data included in an authorization request received for the attempted payment transaction as well as data included in authorization requests for past payment transactions involving thesame consumer 104 across multiple issuing institutions 106. For instance, thedetermination module 220 may compare times and geographic locations across the authorization requests to determine likelihood of fraud. Thedetermination module 220 may also be configured to determine if an attempted payment transaction should be declined or forwarded to an associated issuing institution 106 based on the determined likelihood of fraud and a threshold value, such as may be associated with the associated issuing institution 106. - In some embodiments, the
processing server 102 may also include atransaction processing module 222. Thetransaction processing module 222 may be configured to perform functions related to the processing of electronic payment transactions. For instance, thetransaction processing module 222 may be configured generate authorization responses, forward authorization requests and responses, perform value added services, or any other functions associated with the routing and processing of electronic payment transactions. - The
processing server 102 may also include atransmitting device 224. The transmittingdevice 224 may be configured to transmit data over one or more networks via one or more network protocols. In some instances, the transmittingdevice 224 may be configured to transmit data to issuing institutions 106,merchant systems 110,payment networks 112,blockchain networks 114, and other entities via one or more communication methods, local area networks, wireless area networks, cellular communication, Bluetooth, radio frequency, the Internet, etc. In some embodiments, the transmittingdevice 224 may be comprised of multiple devices, such as different transmitting devices for transmitting data over different networks, such as a first transmitting device for transmitting data over a local area network and a second transmitting device for transmitting data via the Internet. The transmittingdevice 224 may electronically transmit data signals that have data superimposed that may be parsed by a receiving computing device. In some instances, the transmittingdevice 224 may include one or more modules for superimposing, encoding, or otherwise formatting data into data signals suitable for transmission. - The transmitting
device 224 may be configured to electronically transmit data signals to issuing institutions 106 that are superimposed or otherwise encoded with authorization requests and/or determinations of likelihood of fraud for attempted payment transactions, as well as data signals superimposed or otherwise encoded with requests for biographical information. The transmittingdevice 224 may also be configured to electronically transmit data signals topayment networks 112 ormerchant systems 110 that are superimposed or otherwise encoded with authorization responses for attempted payment transactions. In some embodiments, the transmittingdevice 224 may be configured to electronically transmit data signals to nodes in ablockchain network 114 that are superimposed or otherwise encoded with authorization request data for inclusion in a new blockchain data value or requests for blockchain data values. - The
processing server 102 may also include amemory 210. Thememory 210 may be configured to store data for use by theprocessing server 102 in performing the functions discussed herein, such as public and private keys, symmetric keys, etc. Thememory 210 may be configured to store data using suitable data formatting methods and schema and may be any suitable type of memory, such as read-only memory, random access memory, etc. Thememory 210 may include, for example, encryption keys and algorithms, communication protocols and standards, data formatting standards and protocols, program code for modules and application programs of the processing device, and other data that may be suitable for use by theprocessing server 102 in the performance of the functions disclosed herein as will be apparent to persons having skill in the relevant art. In some embodiments, thememory 210 may be comprised of or may otherwise include a relational database that utilizes structured query language for the storage, identification, modifying, updating, accessing, etc. of structured data sets stored therein. Thememory 210 may be configured to store, for example, fraud determination rules, transaction routing data, transaction message formatting standard data, etc. -
FIG. 3 illustrates anexample process 300 executed by theprocessing server 102 in thesystem 100 for processing an electronic payment transaction on behalf of an issuing institution 106 based on a likelihood of fraud determined using past authorization requests from multiple issuing institutions 106. - In
step 302, the receivingdevice 202 of theprocessing server 102 may receive an authorization request for an attempted payment transaction, such as may be electronically transmitted by thepayment network 112 or an issuing institution 106. The authorization request may be formatted according to one or more standards governing the interchange of financial transaction messages and include a plurality of data elements including data elements configured to store a primary account number, transaction time, and geographic location. Instep 304, theprocessing server 102 may determine if other transaction accounts are known that are issued to thesame consumer 104 involved in the payment transaction. Such a determination may be made by executing, by thequerying module 218 of theprocessing server 102, a query on theaccount database 206 of theprocessing server 102 to identify anaccount profile 208 that includes the primary account number included in the received authorization request, and identifying if any other primary account numbers are included in thataccount profile 208, which may correspond to other transaction accounts including transaction accounts issued by other issuing institutions 106. - If the determination is that there are no other known transaction accounts for the
consumer 104, then, instep 306, thetransaction processing module 222 may proceed to process the payment transaction using traditional methods. In such cases, theprocessing server 102 may continue to make a fraud determination based on the one transaction account, or may forward the authorization request on to the issuing institution 106 for processing. If the determination is that other transaction accounts are known, then, instep 308, theprocessing server 102 may identify recent payment transactions conducted or attempted using the same and other transaction accounts. In some cases, the recent payment transactions may be identified in theaccount profile 208. In other cases, recent payment transactions may be identified in a transaction database in theprocessing server 102 used to store transaction data. In yet other cases, the transactions may be identified as data values in a blockchain. - In
step 310, thedetermination module 220 of theprocessing server 102 may determine a likelihood of fraud for the attempted payment transaction based on data included in the received authorization request as compared to transaction data in the identified related transactions. In an exemplary embodiment, the determination may be based on at least a comparison of the time and geographic location of the attempted payment transaction with the times and locations of the other recent payment transactions involving theconsumer 104. Instep 312, thedetermination module 220 of theprocessing server 102 may determine if the likelihood of fraud is above a threshold value set by the issuing institution 106 that issued the transaction account used in the attempted payment transaction. - If the likelihood of fraud is below the threshold, then, in
step 314, the payment transaction may be processed using traditional methods. In such an instance, the transmittingdevice 224 of theprocessing server 102 may forward the authorization request to the associating issuing institution 106 for approval or denial. In some cases, the issuing institution 106 may return an authorization response to theprocessing server 102, which may be received by the receivingdevice 202 thereof, for forwarding on to thepayment network 112 using payment rails associated therewith. If the likelihood of fraud for the attempted payment transaction is above the threshold, then, instep 316, theprocessing server 102 may decline the payment transaction. The decline may be accomplished by thetransaction processing module 222 of theprocessing server 102 generating an authorization response that includes a data element that stores a response code indicating denial of the payment transaction, which is then electronically transmitted to thepayment network 112 by the transmittingdevice 224 of theprocessing server 102 using payment rails associated therewith. -
FIG. 4 illustrates amethod 400 for the processing of an electronic payment transaction by a processing server on behalf of an issuing institution based on a determined likelihood of fraud based on past authorization requests involving other issuing institutions. - In
step 402, an account profile (e.g., an account profile 208) may be stored in an account database (e.g., the account database 206) of a processing server (e.g., the processing server 102), wherein the account profile includes at least a plurality of primary account numbers and one or more biographical data values, where each of the plurality of primary account numbers is associated with a transaction account and the one or more biographical data values are associated with each of the transaction accounts related to the plurality of primary account numbers. Instep 404, a first authorization request for a first payment transaction may be received by a receiving device (e.g., the receiving device 202) of the processing server, wherein the first authorization request is formatted according to one or more standards and includes a plurality of data elements configured to store transaction data including at least a first primary account number of the plurality of primary account numbers, a first transaction time, and a first geographic location. - In
step 406, the first payment transaction may be processed by the processing server (e.g., by thetransaction processing module 222 thereof). Instep 408, a second authorization for a second payment transaction may be received by the receiving device of the processing server from an external system (e.g., the payment network 112), wherein the second authorization request is formatted according to the one or more standards and includes a plurality of data elements configured to store transaction data including at least a second primary account number of the plurality of primary account numbers, a second transaction time, and a second geographic location, where the second primary account number is associated with a transaction account issued by a different issuer than a transaction account associated with the first primary account number. - In
step 410, a likelihood of fraud may be determined by the processing server (e.g., by thedetermination module 220 thereof) based on at least the first transaction time and first geographic location stored in the first authorization request and the second transaction time and second geographic location stored in the second authorization request. If the determined likelihood of fraud is below a predetermined threshold, then, instep 412, the second authorization request may be electronically transmitted to the different issuer by a transmitting device (e.g., the transmitting device 224) of the processing server. If the determined likelihood of fraud is above the predetermined threshold, then, instep 414, an authorization response for the second payment transaction indicating decline of the second payment transaction may be electronically transmitted, by the transmitting device of the processing server, to the external system. - In one embodiment, the
method 400 may further include storing, in a memory (e.g., the memory 210) of the processing server, a blockchain, wherein the blockchain includes a plurality of blocks, each block including at least a block header and one or more transaction data values, wherein the first authorization request is stored in a new block added to the blockchain as a new transaction data value included in the new block prior to receiving the second authorization request. In a further embodiment, the account profile may further include a unique identifier and the new transaction data value may further include the unique identifier. In an even further embodiment, the unique identifier may be a private key of a key pair and the unique identifier may be included in the new transaction data value as a digital signature generated using the private key. - In some embodiments, the first primary account number may include an identification number associated with a first issuing institution (e.g., the issuing
institution 106 a), and the second primary account number may include an identification number associated with a second issuing institution (e.g., the issuinginstitution 106 b) different from the first issuing institution. In one embodiment, the determination of a likelihood of fraud based on at least the first transaction time and first geographic location stored in the first authorization request and the second transaction time and second geographic location stored in the second authorization request may be further based on an estimated travel time between the first geographic location and the second geographic location compared to a difference in time between the first transaction time and the second transaction time. - In some embodiments, the authorization response may be formatted according to the one or more standards. In a further embodiment, the authorization response may include a plurality of data elements including a data element configured to store a response code indicating decline of the payment transaction due to likelihood of fraud.
-
FIG. 5 illustrates acomputer system 500 in which embodiments of the present disclosure, or portions thereof, may be implemented as computer-readable code. For example, theprocessing server 102 ofFIG. 1 may be implemented in thecomputer system 500 using hardware, software, firmware, non-transitory computer readable media having instructions stored thereon, or a combination thereof and may be implemented in one or more computer systems or other processing systems. Hardware, software, or any combination thereof may embody modules and components used to implement the methods ofFIGS. 3 and 4 . - If programmable logic is used, such logic may execute on a commercially available processing platform configured by executable software code to become a specific purpose computer or a special purpose device (e.g., programmable logic array, application-specific integrated circuit, etc.). A person having ordinary skill in the art may appreciate that embodiments of the disclosed subject matter can be practiced with various computer system configurations, including multi-core multiprocessor systems, minicomputers, mainframe computers, computers linked or clustered with distributed functions, as well as pervasive or miniature computers that may be embedded into virtually any device. For instance, at least one processor device and a memory may be used to implement the above described embodiments.
- A processor unit or device as discussed herein may be a single processor, a plurality of processors, or combinations thereof. Processor devices may have one or more processor “cores.” The terms “computer program medium,” “non-transitory computer readable medium,” and “computer usable medium” as discussed herein are used to generally refer to tangible media such as a
removable storage unit 518, aremovable storage unit 522, and a hard disk installed inhard disk drive 512. - Various embodiments of the present disclosure are described in terms of this
example computer system 500. After reading this description, it will become apparent to a person skilled in the relevant art how to implement the present disclosure using other computer systems and/or computer architectures. Although operations may be described as a sequential process, some of the operations may in fact be performed in parallel, concurrently, and/or in a distributed environment, and with program code stored locally or remotely for access by single or multi-processor machines. In addition, in some embodiments the order of operations may be rearranged without departing from the spirit of the disclosed subject matter. -
Processor device 504 may be a special purpose or a general purpose processor device specifically configured to perform the functions discussed herein. Theprocessor device 504 may be connected to acommunications infrastructure 506, such as a bus, message queue, network, multi-core message-passing scheme, etc. The network may be any network suitable for performing the functions as disclosed herein and may include a local area network (LAN), a wide area network (WAN), a wireless network (e.g., WiFi), a mobile communication network, a satellite network, the Internet, fiber optic, coaxial cable, infrared, radio frequency (RF), or any combination thereof. Other suitable network types and configurations will be apparent to persons having skill in the relevant art. Thecomputer system 500 may also include a main memory 508 (e.g., random access memory, read-only memory, etc.), and may also include asecondary memory 510. Thesecondary memory 510 may include thehard disk drive 512 and aremovable storage drive 514, such as a floppy disk drive, a magnetic tape drive, an optical disk drive, a flash memory, etc. - The
removable storage drive 514 may read from and/or write to theremovable storage unit 518 in a well-known manner. Theremovable storage unit 518 may include a removable storage media that may be read by and written to by theremovable storage drive 514. For example, if theremovable storage drive 514 is a floppy disk drive or universal serial bus port, theremovable storage unit 518 may be a floppy disk or portable flash drive, respectively. In one embodiment, theremovable storage unit 518 may be non-transitory computer readable recording media. - In some embodiments, the
secondary memory 510 may include alternative means for allowing computer programs or other instructions to be loaded into thecomputer system 500, for example, theremovable storage unit 522 and aninterface 520. Examples of such means may include a program cartridge and cartridge interface (e.g., as found in video game systems), a removable memory chip (e.g., EEPROM, PROM, etc.) and associated socket, and otherremovable storage units 522 andinterfaces 520 as will be apparent to persons having skill in the relevant art. - Data stored in the computer system 500 (e.g., in the
main memory 508 and/or the secondary memory 510) may be stored on any type of suitable computer readable media, such as optical storage (e.g., a compact disc, digital versatile disc, Blu-ray disc, etc.) or magnetic tape storage (e.g., a hard disk drive). The data may be configured in any type of suitable database configuration, such as a relational database, a structured query language (SQL) database, a distributed database, an object database, etc. Suitable configurations and storage types will be apparent to persons having skill in the relevant art. - The
computer system 500 may also include acommunications interface 524. Thecommunications interface 524 may be configured to allow software and data to be transferred between thecomputer system 500 and external devices. Exemplary communications interfaces 524 may include a modem, a network interface (e.g., an Ethernet card), a communications port, a PCMCIA slot and card, etc. Software and data transferred via thecommunications interface 524 may be in the form of signals, which may be electronic, electromagnetic, optical, or other signals as will be apparent to persons having skill in the relevant art. The signals may travel via acommunications path 526, which may be configured to carry the signals and may be implemented using wire, cable, fiber optics, a phone line, a cellular phone link, a radio frequency link, etc. - The
computer system 500 may further include adisplay interface 502. Thedisplay interface 502 may be configured to allow data to be transferred between thecomputer system 500 andexternal display 530. Exemplary display interfaces 502 may include high-definition multimedia interface (HDMI), digital visual interface (DVI), video graphics array (VGA), etc. Thedisplay 530 may be any suitable type of display for displaying data transmitted via thedisplay interface 502 of thecomputer system 500, including a cathode ray tube (CRT) display, liquid crystal display (LCD), light-emitting diode (LED) display, capacitive touch display, thin-film transistor (TFT) display, etc. - Computer program medium and computer usable medium may refer to memories, such as the
main memory 508 andsecondary memory 510, which may be memory semiconductors (e.g., DRAMs, etc.). These computer program products may be means for providing software to thecomputer system 500. Computer programs (e.g., computer control logic) may be stored in themain memory 508 and/or thesecondary memory 510. Computer programs may also be received via thecommunications interface 524. Such computer programs, when executed, may enablecomputer system 500 to implement the present methods as discussed herein. In particular, the computer programs, when executed, may enableprocessor device 504 to implement the methods illustrated byFIGS. 3 and 4 , as discussed herein. Accordingly, such computer programs may represent controllers of thecomputer system 500. Where the present disclosure is implemented using software, the software may be stored in a computer program product and loaded into thecomputer system 500 using theremovable storage drive 514,interface 520, andhard disk drive 512, orcommunications interface 524. - The
processor device 504 may comprise one or more modules or engines configured to perform the functions of thecomputer system 500. Each of the modules or engines may be implemented using hardware and, in some instances, may also utilize software, such as corresponding to program code and/or programs stored in themain memory 508 orsecondary memory 510. In such instances, program code may be compiled by the processor device 504 (e.g., by a compiling module or engine) prior to execution by the hardware of thecomputer system 500. For example, the program code may be source code written in a programming language that is translated into a lower level language, such as assembly language or machine code, for execution by theprocessor device 504 and/or any additional hardware components of thecomputer system 500. The process of compiling may include the use of lexical analysis, preprocessing, parsing, semantic analysis, syntax-directed translation, code generation, code optimization, and any other techniques that may be suitable for translation of program code into a lower level language suitable for controlling thecomputer system 500 to perform the functions disclosed herein. It will be apparent to persons having skill in the relevant art that such processes result in thecomputer system 500 being a specially configuredcomputer system 500 uniquely programmed to perform the functions discussed above. - Techniques consistent with the present disclosure provide, among other features, systems and methods for processing electronic payment transactions. While various exemplary embodiments of the disclosed system and method have been described above it should be understood that they have been presented for purposes of example only, not limitations. It is not exhaustive and does not limit the disclosure to the precise form disclosed. Modifications and variations are possible in light of the above teachings or may be acquired from practicing of the disclosure, without departing from the breadth or scope.
Claims (16)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US17/706,042 US20220222674A1 (en) | 2018-05-24 | 2022-03-28 | Method and system for transaction authorization via controlled blockchain |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US15/988,026 US11301856B2 (en) | 2018-05-24 | 2018-05-24 | Method and system for transaction authorization via controlled blockchain |
US17/706,042 US20220222674A1 (en) | 2018-05-24 | 2022-03-28 | Method and system for transaction authorization via controlled blockchain |
Related Parent Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US15/988,026 Continuation US11301856B2 (en) | 2018-05-24 | 2018-05-24 | Method and system for transaction authorization via controlled blockchain |
Publications (1)
Publication Number | Publication Date |
---|---|
US20220222674A1 true US20220222674A1 (en) | 2022-07-14 |
Family
ID=66429465
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US15/988,026 Active 2040-03-01 US11301856B2 (en) | 2018-05-24 | 2018-05-24 | Method and system for transaction authorization via controlled blockchain |
US17/706,042 Pending US20220222674A1 (en) | 2018-05-24 | 2022-03-28 | Method and system for transaction authorization via controlled blockchain |
Family Applications Before (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US15/988,026 Active 2040-03-01 US11301856B2 (en) | 2018-05-24 | 2018-05-24 | Method and system for transaction authorization via controlled blockchain |
Country Status (3)
Country | Link |
---|---|
US (2) | US11301856B2 (en) |
CN (1) | CN110533418B (en) |
WO (1) | WO2019226230A1 (en) |
Families Citing this family (13)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US9911124B2 (en) | 2005-07-22 | 2018-03-06 | Gtj Ventures, Llc | Transaction security apparatus and method |
US20200265440A1 (en) * | 2019-02-19 | 2020-08-20 | International Business Machines Corporation | Transaction validation for plural account owners |
CN116932564A (en) * | 2019-06-28 | 2023-10-24 | 创新先进技术有限公司 | System and method for updating data in a blockchain |
WO2019170178A2 (en) | 2019-06-28 | 2019-09-12 | Alibaba Group Holding Limited | System and method for blockchain address mapping |
US11057189B2 (en) * | 2019-07-31 | 2021-07-06 | Advanced New Technologies Co., Ltd. | Providing data authorization based on blockchain |
US11251963B2 (en) | 2019-07-31 | 2022-02-15 | Advanced New Technologies Co., Ltd. | Blockchain-based data authorization method and apparatus |
US11252166B2 (en) | 2019-07-31 | 2022-02-15 | Advanced New Technologies Co., Ltd. | Providing data authorization based on blockchain |
US11310051B2 (en) | 2020-01-15 | 2022-04-19 | Advanced New Technologies Co., Ltd. | Blockchain-based data authorization method and apparatus |
KR20210111066A (en) * | 2020-03-02 | 2021-09-10 | 삼성전자주식회사 | Electronic device for providing transaction related information account and operating method therof |
CN111784314A (en) * | 2020-06-24 | 2020-10-16 | 杭州云象网络技术有限公司 | Block chain digital currency life cycle supervision method and system |
CN112445824B (en) * | 2020-11-11 | 2024-02-02 | 北京思特奇信息技术股份有限公司 | Abnormal order user information sharing system and method based on block chain |
EP4184408A1 (en) * | 2021-11-17 | 2023-05-24 | Mastercard International Incorporated | Account linking index structure in a network |
EP4184407A1 (en) * | 2021-11-17 | 2023-05-24 | Mastercard International Incorporated | Account linking index structure in a network |
Citations (9)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20080140516A1 (en) * | 2006-12-07 | 2008-06-12 | Specialty Acquirer Llc | Learning Fare Collection System for Mass Transit |
US20100125546A1 (en) * | 2008-11-19 | 2010-05-20 | Melyssa Barrett | System and method using superkeys and subkeys |
US20170004486A1 (en) * | 2015-06-30 | 2017-01-05 | Mastercard International Incorporated | Method and system for fraud control based on geolocation |
US20170169421A1 (en) * | 2015-12-15 | 2017-06-15 | Mastercard International Incorporated | System for performing cross card authentication using wallet transaction authentication history |
US20190139024A1 (en) * | 2017-10-23 | 2019-05-09 | Zumigo, Inc. | Multi-factor authentication of on-line transactions |
US20190303622A1 (en) * | 2018-03-28 | 2019-10-03 | Ca, Inc. | Bicameral framework for fast and tamper-resistant blockchain validation |
US20200250676A1 (en) * | 2017-08-07 | 2020-08-06 | Visa International Service Association | Blockchain architecture with record security |
US20200267153A1 (en) * | 2016-11-28 | 2020-08-20 | Visa International Service Association | Access identifier provisioning to application |
US11379848B2 (en) * | 2008-02-14 | 2022-07-05 | Capital One Services, Llc | Method and system for authorizing card account transactions by geographic region |
Family Cites Families (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8290838B1 (en) | 2006-12-29 | 2012-10-16 | Amazon Technologies, Inc. | Indicating irregularities in online financial transactions |
US20150012430A1 (en) * | 2013-07-03 | 2015-01-08 | Mastercard International Incorporated | Systems and methods for risk based decisioning service incorporating payment card transactions and application events |
AU2015305524A1 (en) * | 2014-08-21 | 2017-03-16 | Mastercard International Incorporated | Method and system for processing of a real-time rebate at transaction authorization |
US20170132625A1 (en) | 2015-11-05 | 2017-05-11 | Mastercard International Incorporated | Method and system for use of a blockchain in a transaction processing network |
US20170140385A1 (en) | 2015-11-13 | 2017-05-18 | Mastercard International Incorporated | Method and system for secondary processing of transactions |
US20170213219A1 (en) * | 2016-01-25 | 2017-07-27 | Mastercard International Incorporated | Method and system for automated management of dynamic currency conversion |
RU2625050C1 (en) | 2016-04-25 | 2017-07-11 | Акционерное общество "Лаборатория Касперского" | System and method of transactions trusted declaration |
-
2018
- 2018-05-24 US US15/988,026 patent/US11301856B2/en active Active
-
2019
- 2019-03-28 WO PCT/US2019/024471 patent/WO2019226230A1/en active Application Filing
- 2019-05-15 CN CN201910402331.0A patent/CN110533418B/en active Active
-
2022
- 2022-03-28 US US17/706,042 patent/US20220222674A1/en active Pending
Patent Citations (9)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20080140516A1 (en) * | 2006-12-07 | 2008-06-12 | Specialty Acquirer Llc | Learning Fare Collection System for Mass Transit |
US11379848B2 (en) * | 2008-02-14 | 2022-07-05 | Capital One Services, Llc | Method and system for authorizing card account transactions by geographic region |
US20100125546A1 (en) * | 2008-11-19 | 2010-05-20 | Melyssa Barrett | System and method using superkeys and subkeys |
US20170004486A1 (en) * | 2015-06-30 | 2017-01-05 | Mastercard International Incorporated | Method and system for fraud control based on geolocation |
US20170169421A1 (en) * | 2015-12-15 | 2017-06-15 | Mastercard International Incorporated | System for performing cross card authentication using wallet transaction authentication history |
US20200267153A1 (en) * | 2016-11-28 | 2020-08-20 | Visa International Service Association | Access identifier provisioning to application |
US20200250676A1 (en) * | 2017-08-07 | 2020-08-06 | Visa International Service Association | Blockchain architecture with record security |
US20190139024A1 (en) * | 2017-10-23 | 2019-05-09 | Zumigo, Inc. | Multi-factor authentication of on-line transactions |
US20190303622A1 (en) * | 2018-03-28 | 2019-10-03 | Ca, Inc. | Bicameral framework for fast and tamper-resistant blockchain validation |
Also Published As
Publication number | Publication date |
---|---|
CN110533418A (en) | 2019-12-03 |
CN110533418B (en) | 2023-12-01 |
US11301856B2 (en) | 2022-04-12 |
WO2019226230A1 (en) | 2019-11-28 |
US20190362352A1 (en) | 2019-11-28 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US20220222674A1 (en) | Method and system for transaction authorization via controlled blockchain | |
US11544731B2 (en) | Method and system for authentication of coupons via blockchain | |
US11803857B2 (en) | Method and system for implementing chargebacks on a distributed ledger system | |
US20220215354A1 (en) | Method and system for multi-account check processing via blockchain | |
US20200027084A1 (en) | Method and System for Hybrid Payment Authorization | |
US11093924B2 (en) | Method and system for verification of device authenticity | |
US20190318359A1 (en) | Method and system for fraud prevention via blockchain | |
US10839397B2 (en) | Method and system for contextual device authentication via blockchain | |
US11587071B2 (en) | Method and system for merchant acceptance of cryptocurrency via payment rails | |
EP3482364A1 (en) | Method and system for real-time controls on credit check requests | |
US11763300B2 (en) | Method and system for currency-agnostic real-time settlement | |
US20240020695A1 (en) | Method and system for transferring digital tokens to and from a physical card | |
US11941622B2 (en) | Method and system for employing blockchain for fraud prevention in bulk purchases | |
US20210312431A1 (en) | Method and system for use of an emv card in a multi-signature wallet for cryptocurrency transactions | |
US10740757B2 (en) | Method and system for secured merchant verification | |
US20210295279A1 (en) | Method and system to manage dispute resolution via digital asset network | |
US20190228410A1 (en) | Method and system for generating and using contextual cryptograms for proximity and e-commerce payment | |
US20230196345A1 (en) | Method and system of integrating blockchain technology with existing computer architecture | |
US20210406887A1 (en) | Method and system for merchant acceptance of cryptocurrency via payment rails |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AS | Assignment |
Owner name: MASTERCARD INTERNATIONAL INCORPORATED, NEW YORK Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:KUMAWAT, JAIPAL SINGH;KAUR, KOMALPREET;MEHROTRA, VIPUL;AND OTHERS;REEL/FRAME:059414/0819 Effective date: 20180515 |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: DOCKETED NEW CASE - READY FOR EXAMINATION |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: FINAL REJECTION MAILED |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: DOCKETED NEW CASE - READY FOR EXAMINATION |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: NON FINAL ACTION MAILED |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: RESPONSE TO NON-FINAL OFFICE ACTION ENTERED AND FORWARDED TO EXAMINER |