Device including encrypted data for expiration date and verification value creation

• US 10,140,598 B2
• Filed: 05/12/2010
• Issued: 11/27/2018
• Est. Priority Date: 05/20/2009
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Faith, Patrick, Koganti, Krishna Prasad
• Primary Examiner(s): Wu, Rutao
• Assistant Examiner(s): Mandel, Monica A
• Application Number:
  US12/778,638
• Publication Number:
  US 20100299267A1
• Time in Patent Office: 3,121 Days
• Field of Search: 705 67
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

In order to make it more difficult to obtain numbers that can be used to conduct fraudulent transactions, a portion of a real account number is encrypted. The encrypted portion of the account number is used to generate a new account number, a new expiration date, and a new verification value. This information can be determined using processor that may reside in a point of sale terminal, a smart card, or a computer operated by a user. The new account number, the new expiration date, and the new verification value can be used in a payment transaction. A server computer in a central payment processing network may determine that the new account information is not the real account information, and may subsequently generate a modified authorization request message using the real account information and may send it to an issuer for approval. The transmission of data is more secure, since real account information is not sent from the merchant to the payment processing network.

Claims

1. A method comprising:

encrypting, using a processor, a first portion of a first account number, the first portion having less digits than the whole first account number, to form an encrypted account number portion, while leaving a remaining portion of the first account number unencrypted, the first account number being associated with a first expiration date and a first verification value;

determining a second account number based at least in part on a first segment of the encrypted account number portion and the remaining portion of the first account number;

determining a second expiration date based at least in part on a second segment of the encrypted account number portion;

determining a second verification value based at least in part on a third segment of the encrypted account number portion; and

participating in a transaction with respect to an account corresponding to the first account number utilizing the determined second account number, the determined second expiration date and the determined second verification value in place of the first account number, the first expiration date and the first verification value,

wherein (i) each segment of the encrypted account number portion contains less information than the whole encrypted account number portion and (ii) the first segment, the second segment and the third segment of the encrypted account number portion collectively contain all the information in the whole encrypted account number portion.

2. The method of claim 1 wherein the second expiration date is determined and determining the second expiration date comprises determining the second expiration date at least in part by mapping the second segment of the encrypted account number portion to a date.

3. The method of claim 1, wherein the second account number comprises a signal segment, the third segment of the encrypted account number portion, and an unencrypted portion of the first account number, the signal segment of the second account number indicating that the second account number includes an encrypted portion.

4. The method of claim 1, wherein an unencrypted portion of the first account number is incorporated into the second account number and the unencrypted portion consists of exactly four digits.

10. The method of claim 1, wherein determining the second expiration date comprises encoding the second segment of the encrypted account number portion as the second expiration date.

11. The method of claim 10, wherein:

the method further comprises maintaining a map from a plurality of segment values to a corresponding plurality of dates; and

encoding the second segment of the encrypted account number portion comprises determining a date among the plurality of dates that corresponds to the second segment utilizing the map.

5. A computer readable medium comprising code, executable by at least one processor, for implementing a method comprising:

encrypting, using the at least one processor, a first portion of a first account number, the first portion having less digits than the whole first account number, to form an encrypted account number portion, while leaving a remaining portion of the first account number unencrypted, the first account number being associated with a first expiration date and a first verification value;

determining a second account number based at least in part on a first segment of the encrypted account number portion and the remaining portion of the first account number;

determining a second expiration date based at least in part on a second segment of the encrypted account number portion;

determining a second verification value based at least in part on a third segment of the encrypted account number portion; and

participating in a transaction with respect to an account corresponding to the first account number utilizing the determined second account number, the determined second expiration date and the determined second verification value in place of the first account number, the first expiration date and the first verification value,

wherein (i) each segment of the encrypted account number portion contains less information than the whole encrypted account number portion and (ii) the first segment, the second segment and the third segment of the encrypted account number portion collectively contain all the information in the whole encrypted account number portion.

6. The computer readable medium of claim 5 wherein the second expiration date is determined and determining the second expiration date comprises determining the second expiration date at least in part by mapping the second segment of the encrypted account number portion to a date.

7. The computer readable medium of claim 5, wherein the second account number comprises a signal segment, the third segment of the encrypted account number portion, and an unencrypted portion of the first account number, the signal segment of the second account number indicating that the second account number includes an encrypted portion.

8. The computer readable medium of claim 5, wherein an unencrypted portion of the first account number is incorporated into the second account number and the unencrypted portion consists of exactly four digits.

9. A computer apparatus comprising:

at least one processor; and

at least one computer readable medium communicatively coupled with the at least one processor and collectively having stored thereon code, executable by the at least one processor, that configures the computer apparatus to, at least;

encrypt a first portion of a first account number, the first portion having less digits than the whole first account number, to form an encrypted account number portion, while leaving a remaining portion of the first account number unencrypted, the first account number being associated with a first expiration date and a first verification value;

determine a second account number based at least in part on a first segment of the encrypted account number portion and the remaining portion of the first account number;

determine a second expiration date based at least in part on a second segment of the encrypted account number portion;

determine a second verification value based at least in part on a third segment of the encrypted account number portion; and

participate in a transaction with respect to an account corresponding to the first account number utilizing the determined second account number, the determined second expiration date and the determined second verification value in place of the first account number, the first expiration date and the first verification value,

wherein (i) each segment of the encrypted account number portion contains less information than the whole encrypted account number portion and (ii) the first segment, the second segment and the third segment of the encrypted account number portion collectively contain all the information in the whole encrypted account number portion.