-
公开(公告)号:US11271930B2
公开(公告)日:2022-03-08
申请号:US16025851
申请日:2018-07-02
Applicant: MASTERCARD INTERNATIONAL INCORPORATED
Inventor: Brian Piel
Abstract: An authentication correlation (AC) computing device is provided. The AC computing device includes a processor and a memory. The AC computing device receives a first authentication request from a requesting computer device including an account identifier, a first timestamp, and at least one authentication factor, and determines a first security level of the first authentication request. The AC computing device stores the first security level and the first timestamp. The AC computing device is also configured to receive a second authentication request including the account identifier and a second timestamp, determine that the second authentication satisfies an authentication rule based on the account identifier, the second timestamp, and the stored authentication data wherein the rule defines a timeframe and an authentication threshold, and generate an authentication response based on the determination and the authentication rule wherein the authentication response includes an approval indicator.
-
公开(公告)号:US20210312407A1
公开(公告)日:2021-10-07
申请号:US17353366
申请日:2021-06-21
Applicant: MASTERCARD INTERNATIONAL INCORPORATED
Inventor: Brian Piel
Abstract: An authentication computing device, including a processor in communication with a memory, for authenticating an ACH transaction processed over an ACH network is provided. The processor is programmed to register a payee with the authentication computing device, and to receive an authentication request for an electronic ACH transaction to transfer funds from a payor account to a payee account. The request is received from a first client computing device and includes an account identifier associated with the payor account. The processor is also programmed to transmit an authentication challenge to a second client computing device based on account data associated with the account identifier. The processor is further programmed to receive a response to the authentication challenge, determine whether the account data has been authenticated based on the received challenge response, and transmit an authentication response to the payee based on the determination.
-
公开(公告)号:US20190140847A1
公开(公告)日:2019-05-09
申请号:US15803519
申请日:2017-11-03
Applicant: MASTERCARD INTERNATIONAL INCORPORATED
Inventor: Brian Piel
Abstract: A data controller (DC) system including one or more data controller (DC) computing device for authenticating a user is provided. The DC system is configured to receive first crypto key data associated with a first transaction including encrypted on-device biometric data, and a first account identifier, store the first crypto key data as historical crypto key data, and receive an authentication request message for a second transaction including second crypto key data which includes a second account identifier. The DC system is further configured to correlate the second crypto key data to the historical crypto key data, match the first account identifier to the second account identifier, determine a fraud score for the second transaction, automatically generate an authentication response message including the fraud score, and transmit the authentication response message.
-
14.
公开(公告)号:US11810107B2
公开(公告)日:2023-11-07
申请号:US17391667
申请日:2021-08-02
Applicant: MASTERCARD INTERNATIONAL INCORPORATED
Inventor: Sowmya Reddy Lakka , Brian Piel , Vincenzo Palomba , Jonathan James Main , David Anthony Roberts
CPC classification number: G06Q20/385 , G06Q20/04 , G06Q20/12 , G06Q20/38215 , G06Q20/401
Abstract: Systems and methods are provided for authenticating users. An exemplary method includes receiving, by a directory server (DS), an authentication request for a transaction to an account where the request includes a token and a cryptogram, and transmitting the token and cryptogram to a digital service server (DSS). The method also includes mapping, by the DSS, the token to an account number for the account, validating the cryptogram, generating a directory server nonce (DSN) for the request, and transmitting the DSN and the account number to the DS. The method further includes transmitting, by the DS, the DSN and the account number to an access control server (ACS) associated with an issuer of the account and, in response to an issuer authentication value (IAV), compiling an accountholder authentication value (AAV) including the IAV, the DSN and an amount of the transaction and transmitting the AAV to a merchant or server.
-
公开(公告)号:US20230036787A1
公开(公告)日:2023-02-02
申请号:US17959153
申请日:2022-10-03
Applicant: MASTERCARD INTERNATIONAL INCORPORATED
Inventor: Brian Piel
Abstract: An authentication computing device stores a cardholder profile that is associated with a candidate cardholder and includes a cardholder identifier, a device identifier, payment account data, and trusted authentication data in a database system, receives an authentication request that is associated with a tax filing of the candidate cardholder and includes a filing identifier from a revenue computing device, detects the authentication request is associated with the candidate cardholder based upon the filing identifier and the cardholder profile, transmits an identity challenge requesting authentication data associated with the candidate cardholder to a user device associated with the device identifier, receives a challenge response including response authentication data from the user device, determines an authentication status associated with the authentication request based on a comparison of the response authentication data and the trusted authentication data, and transmits the authentication status to the revenue computing device.
-
公开(公告)号:US11475418B2
公开(公告)日:2022-10-18
申请号:US17353366
申请日:2021-06-21
Applicant: MASTERCARD INTERNATIONAL INCORPORATED
Inventor: Brian Piel
Abstract: An authentication computing device, including a processor in communication with a memory, for authenticating an ACH transaction processed over an ACH network is provided. The processor is programmed to register a payee with the authentication computing device, and to receive an authentication request for an electronic ACH transaction to transfer funds from a payor account to a payee account. The request is received from a first client computing device and includes an account identifier associated with the payor account. The processor is also programmed to transmit an authentication challenge to a second client computing device based on account data associated with the account identifier. The processor is further programmed to receive a response to the authentication challenge, determine whether the account data has been authenticated based on the received challenge response, and transmit an authentication response to the payee based on the determination.
-
17.
公开(公告)号:US20210357922A1
公开(公告)日:2021-11-18
申请号:US17391667
申请日:2021-08-02
Applicant: MASTERCARD INTERNATIONAL INCORPORATED
Inventor: Sowmya Reddy Lakka , Brian Piel , Vincenzo Palomba , Jonathan James Main , David Anthony Roberts
Abstract: Systems and methods are provided for authenticating users. An exemplary method includes receiving, by a directory server (DS), an authentication request for a transaction to an account where the request includes a token and a cryptogram, and transmitting the token and cryptogram to a digital service server (DSS). The method also includes mapping, by the DSS, the token to an account number for the account, validating the cryptogram, generating a directory server nonce (DSN) for the request, and transmitting the DSN and the account number to the DS. The method further includes transmitting, by the DS, the DSN and the account number to an access control server (ACS) associated with an issuer of the account and, in response to an issuer authentication value (IAV), compiling an accountholder authentication value (AAV) including the IAV, the DSN and an amount of the transaction and transmitting the AAV to a merchant or server.
-
公开(公告)号:US11042845B2
公开(公告)日:2021-06-22
申请号:US15806113
申请日:2017-11-07
Applicant: MASTERCARD INTERNATIONAL INCORPORATED
Inventor: Brian Piel
Abstract: An authentication computing device, including a processor in communication with a memory, for authenticating an ACH transaction processed over an ACH network is provided. The processor is programmed to register a payee with the authentication computing device, and to receive an authentication request for an electronic ACH transaction to transfer funds from a payor account to a payee account. The request is received from a first client computing device and includes an account identifier associated with the payor account. The processor is also programmed to transmit an authentication challenge to a second client computing device based on account data associated with the account identifier. The processor is further programmed to receive a response to the authentication challenge, determine whether the account data has been authenticated based on the received challenge response, and transmit an authentication response to the payee based on the determination.
-
公开(公告)号:US20190392449A1
公开(公告)日:2019-12-26
申请号:US16448596
申请日:2019-06-21
Applicant: MASTERCARD INTERNATIONAL INCORPORATED
Inventor: Julia Sharon Gosset , Robert Albert Ederle , Ranjita Shankar Iyer , Brian Piel , Christopher John Merz , Felix Johannes Flory
Abstract: An authentication platform for authenticating an online user is provided. The authentication platform includes a memory device including an authentication profile and at least one processor coupled to the memory device. The at least one processor is programmed to receive an authentication request message. The authentication request message includes authentication data. The at least one processor is also programmed to extract the authentication data from the authentication request message, generate, based at least in part on the extracted authentication data, risk-based authentication (RBA) result data including a risk score, and route the RBA result data based on the authentication profile and the RBA result data.
-
公开(公告)号:US20190392448A1
公开(公告)日:2019-12-26
申请号:US16448572
申请日:2019-06-21
Applicant: MASTERCARD INTERNATIONAL INCORPORATED
Inventor: Julia Sharon Gosset , Robert Albert Ederie , Ranjita Shankar Iyer , Brian Piel , Christopher John Merz , Felix Johannes Flory , Andres Gonzalez
Abstract: A computer-implemented method for authenticating an online user with an access control server (ACS) is provided. The method includes receiving, at a risk-based authentication enabled (RBA-enabled) directory server, an authentication request message including authentication data, extracting, using the RBA-enabled directory server, the authentication data from the authentication request message, transmitting the extracted authentication data to an RBA engine, generating, using the RBA engine, based at least in part on the extracted authentication data, RBA result data including a risk score, a risk analysis, and at least one reason code, transmitting the RBA result data to the RBA-enabled directory server, embedding, using the RBA-enabled directory server, the RBA result data into the authentication request message to generate an enhanced authentication request message, and transmitting the enhanced authentication request message to the ACS to enable the ACS to make an authentication decision based on the RBA result data.
-
-
-
-
-
-
-
-
-