Patent ID: 11922427
Assignee: VISA INTERNATIONAL SERVICE ASSOCIATION
Field: IT methods for management (Electrical engineering)
Classification: CPC G  H | IPC G

Claim 9:
10. A system for processing card not present (CNP) transactions comprising an issuer system that issued a portable financial device of a user programmed or configured to:
receive a transaction request associated with a CNP transaction between the user and a merchant initiated with a computing device of the user using the portable financial device during a browser session on the computing device, wherein the CNP transaction is initiated by the computing device communicating with a merchant system of the merchant on a website of the merchant;
determine that the user participates in an authentication protocol;
communicate a notification to the merchant system that the user participates in the authentication protocol;
in response to communicating the notification, receive control of the browser session from the merchant system to the issuer system;
receive, from the computing device during the browser session, a first request comprising an authentication transaction request comprising at least one data field containing authentication transaction data associated with the CNP transaction, wherein the authentication transaction data comprises device identification data identifying the computing device;
receive, from a transaction processing server, a second request comprising an authorization transaction request comprising at least one data field containing authorization transaction data associated with the portable financial device;
in response to receiving the authorization transaction data and the authentication transaction data, matching, by the issuer system, a portion of the authorization transaction data to a portion of the authentication transaction data;
determine an authorization decision for the CNP transaction based at least partially on both the authorization transaction data and the authentication transaction data; and
in response to the authorization transaction request, generate and communicate an authorization transaction response comprising at least one data field containing the authorization decision.