Patent ID: 8121956

Claim:
A method for authorizing a transaction between a consumer and a merchant, the method comprising: receiving, at a server of a non-merchant entity, a consumer message directly from an access device used by the consumer, wherein the consumer message includes account information of an account of the consumer to be used for the transaction; determining whether to send a challenge question to the consumer based on information collected from and about the access device; providing, to a merchant server from the non-merchant server, code that is incorporated into an application page that is sent from the merchant to the consumer before the non-merchant server receives the consumer message, wherein the code sends the information about the access device to the non-merchant server; subsequent to receiving the consumer message, sending, to the consumer from the non-merchant server, a challenge question; receiving, at the non-merchant server from the consumer, a challenge answer to the challenge question; and sending, to the merchant server from the non-merchant server, a funding message.