Multi-point authentication for payment transactions

US10055723B2 · kind B2 · utility

Assignee

• International Business Machines Corporation · US

Inventors

• Timothy C. Buchholtz · Rochester, US
• Morgan D. Davis · Rochester, US
• Daniel Ramirez · Rochester, US
• Michael J. Rohn · Rochester, US

Key dates

• Filing date: Mar 26, 2015
• Grant date: Aug 21, 2018
• Expiry date: Aug 31, 2036

Classification

• Technology area (CPC G): Physics
• CPC primary: G06Q20/425
• WIPO field: IT methods for management
• WIPO sector: Electrical engineering

Abstract

Authentication includes receiving an indication of physical possession of a payment card by a merchant and receiving a purchase request for an authorization of an exchange from the payment account of the cardholder to the merchant. Authentication includes assigning a randomized transaction identifier to the request for the authorization of the exchange. The method also includes transmitting the request for the authorization of the exchange from the payment account of the cardholder to the merchant and receiving the assigned randomized transaction identifier and a randomized authentication identifier associated with the randomized transaction identifier from a payment association, the payment association determining whether the request for the authorization of the exchange is valid. Authentication includes transmitting a copy of the randomized authentication identifier to the mobile device and receiving validation that the transmitted copy of the randomized authentication identifier from the mobile device matches the randomized authentication identifier.