US 12,423,699 B2
Systems and methods for pre-authenticating a user of a payment card over a network
Jason Jay Lacoss-Arnold, St. Louis, MO (US)
Assigned to MASTERCARD INTERNATIONAL INCORPORATED, Purchase, NY (US)
Filed by MASTERCARD INTERNATIONAL INCORPORATED, Purchase, NY (US)
Filed on Aug. 1, 2022, as Appl. No. 17/878,732.
Application 17/878,732 is a continuation of application No. 15/397,323, filed on Jan. 3, 2017, granted, now 11,403,637.
Prior Publication US 2022/0366419 A1, Nov. 17, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. G06Q 40/00 (2023.01); G06Q 20/32 (2012.01); G06Q 20/36 (2012.01); G06Q 20/40 (2012.01); G06Q 20/42 (2012.01)
CPC G06Q 20/4014 (2013.01) [G06Q 20/3223 (2013.01); G06Q 20/3674 (2013.01); G06Q 20/425 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system for pre-authenticating users over a network, the system comprising:
an authentication computing device comprising at least one processor configured to:
pre-authenticate a payment transaction, wherein pre-authenticating the payment transaction comprises:
subsequent to a token ID provided to a candidate client device, receiving, over a first computer network, a pre-authentication signal initiated by a user directly from the candidate client device, wherein the pre-authentication signal includes (i) the token ID previously provided to the candidate client device, and (ii) a candidate client device identifier identifying the candidate client device;
determining, by mapping the received token ID to stored account data, that a candidate account number associated with the token ID is embodied on a candidate payment card;
verifying, based on the pre-authentication signal, that (i) the user has satisfied at least one security measure when initiating the pre-authentication signal, and (ii) the candidate account number is associated with the received candidate client device identifier; and
initiating a timer after receipt of the pre-authentication signal, the timer associated with the candidate account number and expiring after a predetermined length of time; and
generate an enhanced authorization request message, wherein generating the enhanced authorization request message comprises:
monitoring, until the timer expires, a second computer network to detect an authorization request message for a transaction initiated using the candidate account number, the authorization request message generated by a merchant computing device and including the candidate account number, the second computer network being different from the first computer network, the second computer network comprising a proprietary communications standard promulgated by a payment card interchange network for exchange of financial transaction data between financial institutions that are members of the payment card interchange network;
in response to initiating the timer and monitoring the second computer network, detecting the authorization request message including the candidate account number received, via the second computer network, from the merchant computing device associated with the transaction, the authorization request message being compliant with the proprietary communications standard; and
embedding, prior to transmitting, via the second computer network, the authorization request message to an issuer computing device associated with the candidate account number, a digital authentication flag in the authorization request message in response to the authentication computing device detecting the authorization request message before the timer expires, the digital authentication flag indicating that the transaction has been pre-authenticated.