Dynamic primary account number (PAN) and unique key per card

• US 10,037,524 B2
• Filed: 01/22/2009
• Issued: 07/31/2018
• Est. Priority Date: 01/22/2009
• Status: Expired due to Fees

• Current Assignee: First Data Corporation (Fiserv Incorporated)
• Original Assignee: First Data Corporation (Fiserv Incorporated)
• Inventors: Royyuru, Vijay K, Klotz, Robert P
• Primary Examiner(s): Hewitt, II, Calvin L
• Assistant Examiner(s): SHERR, CRISTINA O
• Application Number:
  US12/357,579
• Publication Number:
  US 20100185545A1
• Time in Patent Office: 3,477 Days
• Field of Search: 705 75
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/16 the keys or algorithms being changed during operation

Abstract

Methods, systems, and machine-readable media are disclosed for handling information related to a financial transaction including utilizing dynamic cryptograms. According to one embodiment, a method of processing a financial transaction related to a financial account can comprise detecting initiation of the transaction with a device used as a presentation instrument in the transaction. A Dynamic Transaction Cryptogram (DTC) and a dynamic PAN can be generated at the device. The DTC can be used to authenticate the transaction and the dynamic PAN can comprise an encrypted form of a real PAN of the financial account that is valid for a single transaction. The DTC and the dynamic PAN can be provided by the device for use in the transaction.

Claims

1. A method of processing a financial transaction by a user and related to a financial account having a real Primary Account Number (PAN), the method comprising:

detecting, with a processor, initiation of the transaction with a device used as a presentation instrument in the transaction;

generating, with the processor, a Dynamic Transaction Cryptogram (DTC) at the device that is valid for a single transaction, the DTC encrypted at the device using a card key and based on personal information that is known to the user and that identifies the user;

generating, with the processor, a dynamic PAN at the device, the dynamic PAN comprising an encrypted form of the real PAN that is valid for the single transaction; and

providing both the DTC and the dynamic PAN from the device to a Point-of-Sale (POS) device for use in the transaction, wherein the provided dynamic PAN is decrypted in order to determine the real PAN for processing of the transaction, wherein the real PAN that is determined from the provided dynamic PAN is then used to retrieve a key corresponding to the card key, and wherein the DTC is provided in order to authenticate the transaction, using the retrieved key.

2. The method of claim 1, wherein generating the dynamic PAN is based on the real PAN, an Institution Key Card Variant (IKCV) that is a variant of an institution key of an issuer of the financial account stored in the device, and an undeterminable number generated or received by the device.

3. The method of claim 2, wherein generating the dynamic PAN comprises:

reading the real PAN from a memory of the device;

generating Pseudo-PAN-Dynamic-Data (PPDD) representing the real PAN by combining the real PAN with the undeterminable number; and

encrypting the PPDD using the IKCV.

4. The method of claim 3, further comprising including an unencrypted portion of the real PAN to the dynamic PAN.

5. The method of claim 4, wherein the portion of the real PAN comprises less than all of the real PAN and includes information for routing of the transaction to a financial institution.

6. The method of claim 5, wherein a right-most four digits of the real PAN are retained and re-used on a printed receipt.

7. The method of claim 5, wherein the dynamic PAN is constructed with a new prefix of 6 or more left-most digits, such that routing of the transactions using the new prefix results in the transaction being delivered to a payment processor with keys and capability to decrypt the dynamic PAN.

8. The method if claim 5, wherein the dynamic PAN passes a check digit editing of a Luhn check digit algorithm.

9. The method of claim 1, further comprising providing the DTC and the dynamic PAN from the POS device to a payment processor system.

10. The method of claim 9, further comprising authenticating the transaction at the payment processor system based on the DTC.

11. The method of claim 9, further comprising authenticating the transaction at a financial institution based on the DTC.

12. The method of claim 10, further comprising determining the real PAN of the financial account at the payment processor system.

13. The method of claim 12, wherein determining the real PAN comprises decrypting the dynamic PAN using an institution key of an issuer of the financial account.

14. The method of claim 13, further comprising submitting the real PAN from the payment processor system to a financial institution to affect processing of the transaction.

15. The method of claim 1, wherein generating the DTC at the device comprises:

storing the real PAN at the device;

creating, with the processor, a PAN digit string (DTCPAN) from the real PAN;

creating, with the processor, a variant string (DTCVAR) from DTCPAN;

converting, with the processor, DTCPAN and DTCVAR to binary;

generating, with the processor, data (DTCDATA) from the converted DTCPAN and DTCVAR;

encrypting, with the processor, DTCDATA with a unique card-level key;

converting, with the processor, the encrypted DTCDATA to decimal form; and

selecting, with the processor, the DTC from the decimal form of the encrypted DTCDATA.

16. The method of claim 1, wherein the DTC and dynamic PAN are provided to a payment processor through the Point-of-Sale (POS) device, and wherein the dynamic PAN is decrypted at the payment processor to determine the real PAN.