Patent ID: 11922427
Assignee: VISA INTERNATIONAL SERVICE ASSOCIATION
Field: IT methods for management (Electrical engineering)
Classification: CPC G  H | IPC G

Claim 18:
19. A system for processing card not present (CNP) transactions comprising:
an issuer system that issued a portable financial device of a user, the issuer system comprising an authentication system and an authorization system;
the authentication system comprising at least one processor programmed or configured to:
receive a transaction request associated with a CNP transaction between the user and a merchant initiated with a computing device of the user using the portable financial device during a browser session on the computing device, wherein the CNP transaction is initiated by the computing device communicating with a merchant system of the merchant on a website of the merchant;
receive control of the browser session from the merchant system;
receive, from the computing device during the browser session,

authentication transaction data associated with the CNP transaction, wherein the authentication transaction data comprises device identification data identifying the computing device; and
communicate the authentication transaction data via an authentication transaction request to the authorization system programmed or configured to determine an authorization decision associated with the CNP transaction; and

the authorization system comprising at least one processor programmed or configured to:
receive from a transaction processing server, an authorization transaction request comprising authorization transaction data associated with the portable financial device;
in response to receiving the authorization transaction data and the authentication transaction data, determine the authorization decision for the CNP transaction based at least partially on both the authorization transaction data and the authentication transaction data; and
in response to the authorization transaction request, generate and communicate an authorization transaction response comprising at least one data field containing the authorization decision.