Patent ID: 11928678
Assignee: VISA INTERNATIONAL SERVICE ASSOCIATION
Field: IT methods for management (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 0:
1. A method comprising:
receiving, at a server computer and during a first transaction that uses a first account of a first user, a first personal identifier verification request message from an authentication computer, wherein the first personal identifier verification request message comprises a first personal identifier of the first user;
in response to receiving the first personal identifier verification request message,
determining, by the server computer, a first level of assurance required by at least one of the authentication computer or the server computer;
based on the first level of assurance, selecting, by the server computer from among a plurality of authentication processes comprising a first authentication process and a second authentication process, the first authentication process;
wherein the first authentication process comprises verifying that a received personal identifier of a user matches a stored personal identifier of the user, generating a first authentication indicator when the received personal identifier of the user matches the stored personal identifier of the user, and transmitting the generated first authentication indicator to the authentication computer, and
the second authentication process comprises storing an encrypted personal identifier of the user in a database, generating a second authentication indicator without performing a matching of personal identifiers, forwarding the second authentication indicator to the authentication computer, which then transmits the second authentication indicator and a primary account identifier to a service provider computer, receiving an authorization request message comprising the primary account identifier and the second authentication indicator from the service provider computer, retrieving the encrypted personal identifier of the user from the database, modifying the authorization request message to replace the second authentication indicator with the encrypted personal identifier of the user, and transmitting the authorization request message to an issuer computer which receives the encrypted personal identifier of the user, where the issuer computer verifies that the received encrypted personal identifier of the first user is authentic;
performing, by the server computer, the first authentication process in response to determining, by the server computer, the first authentication process to perform from among the plurality of authentication processes;
generating and transmitting, by the server computer, the first authentication indicator to the authentication computer, wherein the issuer computer authorizes the first transaction at least based on the first authentication indicator;
receiving, at the server computer and during a second transaction that uses a second account of a second user, a second personal identifier verification request message from the authentication computer, wherein the second personal identifier verification request message comprises a second personal identifier of the second user;
in response to receiving the second personal identifier verification request message, determining, by the server computer, a second level of assurance required by at least one of the authentication computer or the server computer, the second level of assurance being higher than the first level of assurance;
based on the second level of assurance:
determining, by the server computer, that the first authentication process is unsuitable, and
selecting, by the server computer, the second authentication process as satisfying a required authentication process, the second authentication process being slower than the first authentication process;
performing, by the server computer, the second authentication process in response to determining, by the server computer, the second authentication process to perform from among the plurality of authentication processes;
receiving, by the server computer, a transaction authorization request message for the second transaction; and
modifying, by the server computer, the transaction authorization request message to insert an encrypted second personal identifier of the second user stored by the server computer, and transmitting the transaction authorization request message to the issuer computer, wherein the issuer computer authorizes the second transaction based on information provided in the transaction authorization request message.