Customer authentication in E-commerce transactions

US9514458B2 · kind B2 · utility

Assignee

• MASTERCARD INTERNATIONAL INCORPORATED · US

Inventors

• Bruce Rutherford · Seattle, US
• Alfred Dagher · Wyckoff, US
• Mark Wiseman · Chesterfield, US
• Didier Jean Marie Charles Paie · Rixensart, BE
• Jean-Paul Edmond Rans · Glabais, BE
• Fikret Ates · Namur, BE
• John Wankmueller · Great Neck, US

Key dates

• Filing date: Jun 4, 2004
• Grant date: Dec 6, 2016
• Expiry date: Mar 15, 2029

Classification

• Technology area (CPC G): Physics
• CPC primary: G07F7/1025
• WIPO field: IT methods for management
• WIPO sector: Electrical engineering

Abstract

A Chip Authentication Program based on 3-D Secure protocols is provided for authenticating customers' on-line transactions. An issuer, who may be a payment card issuer, operates Access Control and Authentication Request Servers for authenticating transactions by individual customers who are identified by their personal EMV-complaint smart cards. An authentication token is generated at the point of interaction (POI) for each transaction based on information from the customer's smart card and transaction specific information sent directly by the issuer to populate a web page at the POI. Authentication tokens generated at the POI are evaluated by the Authentication Request Server to authenticate individual customer and/or card presence at the transaction POI. Authentication values are transported on-line in designated Universal Cardholder Authentication Fields consistent with 3-D Secure protocols.