Patent ID: 11928678
Assignee: VISA INTERNATIONAL SERVICE ASSOCIATION
Field: IT methods for management (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 20:
21. A method comprising:
receiving, at a server computer and during a transaction that uses an account of a user, a personal identifier verification request message from an authentication computer, wherein the personal identifier verification request message comprises a personal identifier of the user;
in response to receiving the personal identifier verification request message,
determining, by the server computer, a level of assurance required by at least one of the authentication computer or the server computer,
based on the level of assurance being a first level of assurance, selecting, by the server computer from among a plurality of authentication processes comprising a first authentication process and a second authentication process, the first authentication process;
performing, by the server computer, the first authentication process in response to determining, by the server computer, the first authentication process to perform from among the plurality of authentication processes, wherein the first authentication process comprises verifying that the received personal identifier of the user matches a stored personal identifier of the user,
generating a first authentication indicator when the received personal identifier of the user matches the stored personal identifier of the user, and transmitting the generated first authentication indicator to the authentication computer, wherein an issuer computer authorizes the transaction at least based on the first authentication indicator;
based on the level of assurance being a second level of assurance, the second level of assurance being higher than the first level of assurance:
determining, by the server computer, that the first authentication process is unsuitable;
selecting, by the server computer, the second authentication process as satisfying a required authentication process, the second authentication process being slower than the first authentication process;

performing, by the server computer, the second authentication process in response to determining, by the server computer, the second authentication process to perform from among the plurality of authentication processes, wherein the second authentication process comprises storing an encrypted personal identifier of the user in a database, generating a second authentication indicator without performing a matching of personal identifiers, forwarding the second authentication indicator to the authentication computer, which then transmits the second authentication indicator and a primary account identifier to a service provider computer;
receiving, by the server computer, an authorization request message comprising the primary account identifier and the second authentication indicator from the service provider computer;
modifying, by the server computer, the authorization request message to insert an encrypted second personal identifier of the user stored by the server computer; and

transmitting, by the server computer, the authorization request message to the issuer computer, wherein the issuer computer authorizes the transaction based on information provided in the modified authorization request message.