Cardholder Authentication Routing for Frictionless Online Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems for online transactions, such as the 3-D Secure Protocol, do not adequately address the need for enhanced authentication levels and user experience, particularly in card-not-present transactions, leading to potential fraud and declined legitimate transactions.
Innovation Solution
An improved authentication system that integrates a consumer device with an interoperability domain, allowing for additional authentication levels determined by card issuers or users, and supports tokenization, reducing the need for a merchant plug-in and enhancing the user experience through context-specific message sets and biometric authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional 3-D Secure Protocol authentication is implemented, then fraud reduction and issuer liability protection are improved, but user experience deteriorates due to additional authentication windows and device compatibility issues
Solution Approach 1:
The patent extracts the authentication functionality from the traditional 3-D Secure Protocol framework, removing the requirement for separate authentication windows and i-frame elements. The authentication process is integrated directly into the merchant's existing interface, eliminating the disruptive user experience while maintaining fraud protection capabilities through server-to-server communication between the authentication service and card issuer.
Solution Approach 2:
The authentication service is designed to work across multiple devices and platforms (mobile phones, tablets, computers) without requiring device-specific implementations. The system provides universal authentication functionality that adapts to different user interfaces while maintaining consistent security protocols, thereby improving ease of operation across diverse devices.
2Reliability
If 3-D Secure Protocol with Merchant Plug In is used, then transaction authentication is improved, but device complexity increases due to MPI requirements and protocol compliance
Solution Approach 1:
The patent extracts the Merchant Plug In (MPI) component from the authentication process, replacing it with a simplified server-to-server communication model. Merchants no longer need to implement complex MPI software or maintain protocol compliance; instead, they interact with a streamlined authentication service that handles all authentication logic and card issuer communication, thereby reducing device complexity while maintaining authentication reliability.
3Reliability
If multiple authentication methods are implemented, then authentication security is improved, but loss of time increases due to additional verification steps
Solution Approach 1:
The system performs preliminary risk assessment and authentication method selection before the actual authentication transaction. By pre-evaluating transaction risk factors and determining the appropriate authentication level in advance, the system avoids unnecessary verification steps for low-risk transactions while maintaining high security for suspicious activities, thereby reducing overall verification time without compromising authentication security.
Data Source
AI summary
A cardholder authentication method includes receiving, at an authentication network, an authentication request involving an account. The method further includes determining, based at least in part on a portion of an account identifier associated with said account, an authentication service. In addition, the method includes determining, based at least on said authentication service and a portion of said account identifier, an authentication response. The method also includes transmitting, to a merchant associated with a transaction involving said account, said authentication response.