Patent ID: 11922427
Assignee: VISA INTERNATIONAL SERVICE ASSOCIATION
Field: IT methods for management (Electrical engineering)
Classification: CPC G  H | IPC G

Claim 0:
1. A method for processing card not present (CNP) transactions, comprising:
receiving, by an issuer system that issued a portable financial device of a user, a transaction request associated with a CNP transaction between the user and a merchant initiated with a computing device of the user using the portable financial device during a browser session on the computing device, wherein the CNP transaction is initiated by the computing device communicating with a merchant system of the merchant on a website of the merchant;
determining, by the issuer system, that the user participates in an authentication protocol;
receiving, by the merchant system, a notification that the user participates in the authentication protocol;
in response to receiving the notification, transferring control, by the merchant system, of the browser session from the merchant system to the issuer system;
receiving, by the issuer system and from the computing device during the browser session, a first request comprising an authentication transaction request comprising at least one data field containing authentication transaction data associated with the CNP transaction, wherein the authentication transaction data comprises device identification data identifying the computing device;
receiving, by the issuer system and from a transaction processing server, a second request comprising an authorization transaction request comprising at least one data field containing authorization transaction data associated with the portable financial device;
in response to receiving the authorization transaction data and the authentication transaction data, matching, by the issuer system, a portion of the authorization transaction data to a portion of the authentication transaction data;
determining, by the issuer system, an authorization decision for the CNP transaction based at least partially on both the authorization transaction data and the authentication transaction data; and
in response to the authorization transaction request, generating and communicating, by the issuer system, an authorization transaction response comprising at least one data field containing the authorization decision.