MULTI-POINT AUTHENTICATION FOR PAYMENT TRANSACTIONS

摘要

Authentication includes receiving an indication of physical possession of a payment card by a merchant and receiving a purchase request for an authorization of an exchange from the payment account of the cardholder to the merchant. Authentication includes assigning a randomized transaction identifier to the request for the authorization of the exchange. The method also includes transmitting the request for the authorization of the exchange from the payment account of the cardholder to the merchant and receiving the assigned randomized transaction identifier and a randomized authentication identifier associated with the randomized transaction identifier from a payment association, the payment association determining whether the request for the authorization of the exchange is valid. Authentication includes transmitting a copy of the randomized authentication identifier to the mobile device and receiving validation that the transmitted copy of the randomized authentication identifier from the mobile device matches the randomized authentication identifier.

主权项

1. A method, comprising:
receiving, by a point-of-sale (POS) terminal, a first indication that a payment account of a cardholder is associated with a mobile device of the cardholder; receiving, by the POS terminal, a second indication of physical possession of a payment card by a merchant; receiving, by the POS terminal, a purchase request for an authorization of an exchange of funds from the payment account of the cardholder to the merchant; assigning, by the POS terminal, a randomized transaction identifier to the request for the authorization of the exchange of funds; transmitting, by the POS terminal, the request for the authorization of the exchange of funds from the payment account of the cardholder to the merchant; receiving, by the POS terminal, the assigned randomized transaction identifier and a randomized authentication identifier associated with the randomized transaction identifier from a payment association, the payment association determining whether the request for the authorization of the exchange of funds is valid; transmitting, by the POS terminal, a copy of the randomized authentication identifier to the mobile device; and receiving, by the POS terminal, validation that the transmitted copy of the randomized authentication identifier from the mobile device matches the randomized authentication identifier.