Apparatus, method, and computer program product for recovering torn smart payment device transactions

• US 10,181,121 B2
• Filed: 01/30/2013
• Issued: 01/15/2019
• Est. Priority Date: 04/28/2009
• Status: Active Grant

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Roberts, David A., Garrett, Duncan, Van de Velde, Eddy L. H.
• Primary Examiner(s): Holly, John H.
• Application Number:
  US13/754,419
• Publication Number:
  US 20130246269A1
• Time in Patent Office: 2,176 Days
• Field of Search: 705 44, 705 11, 705 71, 705 40, 705 41, 705 67, 705 21, 380258, 380277, 235492, 235375
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/38 Payment protocols; Details thereof
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/12 Card verification

Abstract

A first command is sent from a payment terminal assembly to a payment device with an on-device balance to compute a cryptogram to complete a putative transaction. It is detected that the cryptogram is not received as expected. In response, an identifier of the payment device and transaction recovery data associated with the putative transaction are stored in a storage area of a terminal memory of the payment terminal assembly. The payment terminal assembly obtains the identifier of the payment device, upon re-presentation of the payment device. Upon such re-presentation, the payment terminal assembly compares the obtained identifier of the payment device to contents of the storage area. Conditioned at least upon the comparing yielding a match, a second command is sent from the payment terminal assembly to the payment device to instruct the payment device to re-produce the cryptogram to complete the putative transaction.

Claims

1. A method comprising the steps of:

upon initial presentation of a device to a terminal assembly in connection with a putative data storage transaction, said device comprising a device memory storing a device-side application, and at least one device processor coupled to said device memory, said terminal assembly comprising a terminal memory, storing a terminal-side application, and at least one terminal processor coupled to said terminal memory, said terminal-side application executing on said at least one terminal processor establishing communications with said device-side application executing on said at least one device processor;

sending a first command from said terminal-side application executing on said at least one terminal processor to said device-side application executing on said at least one device processor to instruct said device-side application executing on said at least one device processor to compute a cryptogram to complete said putative data storage transaction;

said terminal-side application executing on said at least one terminal processor detecting that said cryptogram is not received as expected from said device-side application executing on said at least one device processor;

responsive to said detection, said terminal-side application executing on said at least one terminal processor storing in a storage area of said terminal memory an identifier of said device and data storage transaction recovery data associated with said putative data storage transaction;

obtaining, by said terminal-side application executing on said at least one terminal processor, said identifier of said device, upon re-presentation of said device to said terminal assembly;

upon said re-presentation of said device to said terminal assembly, comparing, by said terminal-side application executing on said at least one terminal processor, of said obtained identifier of said device to contents of said storage area; and

conditioned at least upon said comparing yielding a match, sending a second command from said terminal-side application executing on said at least one terminal processor to said device-side application executing on said at least one device processor, said second command instructing said device-side application executing on said at least one device processor to re-produce said cryptogram and send it to said terminal-side application executing on said at least one terminal processor to complete said putative data storage transaction.

5. The method of claim 1, further comprising sending at least pertinent portions of said data storage transaction recovery data from said terminal-side application executing on said at least one terminal processor to said device-side application executing on said at least one device processor, wherein, in said storing step, said transaction recovery data comprises at least one of:

a terminal unpredictable number associated with said putative transaction; and

a date and time of said putative transaction.

6. The method of claim 1, further comprising:

sending at least pertinent portions of said data storage transaction recovery data from said terminal-side application executing on said at least one terminal processor to said device-side application executing on said at least one device processor; and

said terminal-side application executing on said at least one terminal processor obtaining from said device-side application executing on said at least one device processor in connection with said putative transaction, an indication that said device is able to recover incomplete transactions.

7. The method of claim 1, wherein said obtaining, by said terminal-side application executing on said at least one terminal processor, of said identifier of said device, upon said re-presentation of said device to said terminal assembly, further comprises obtaining, by said terminal-side application executing on said at least one terminal processor, of an identity of said putative transaction, stored on said device, further comprising:

upon said re-presentation of said device to said terminal assembly, comparing, by said terminal-side application executing on said at least one terminal processor, of said obtained identity of said putative transaction, stored on said device, to corresponding contents of said storage area;

wherein said sending of said second command is further conditioned upon said comparison of said obtained identity of said putative transaction, stored on said device, to said corresponding contents of said storage area.

2. A method comprising the steps of:

upon initial presentation of a payment device to a payment terminal assembly in connection with a putative transaction, said payment device comprising a payment device memory storing a device-side payment application, with an on-device balance, and at least one payment device processor coupled to said payment device memory, said payment terminal assembly comprising a terminal memory, storing a terminal-side payment application, and at least one terminal processor coupled to said terminal memory, said terminal-side payment application executing on said at least one terminal processor establishing communications with said device-side payment application executing on said at least one payment device processor;

sending a first command from said terminal-side payment application executing on said at least one terminal processor to said device-side payment application executing on said at least one payment device processor to instruct said device-side payment application executing on said at least one device processor to compute an original cryptogram to complete said putative transaction;

said terminal-side payment application executing on said at least one terminal processor detecting that said original cryptogram is not received as expected from said device-side payment application executing on said at least one payment device processor;

responsive to said detection, said terminal-side payment application executing on said at least one terminal processor storing in a storage area of said terminal memory an identifier of said payment device and transaction recovery data associated with said putative transaction;

obtaining, by said terminal-side payment application executing on said at least one terminal processor, said identifier of said payment device, upon re-presentation of said payment device to said payment terminal assembly;

upon said re-presentation of said payment device to said payment terminal assembly, comparing, by said terminal-side payment application executing on said at least one terminal processor, of said obtained identifier of said payment device to contents of said storage area; and

conditioned at least upon said comparing yielding a match, sending a second command from said terminal-side payment application executing on said at least one terminal processor to said device-side payment application executing on said at least one payment device processor, said second command instructing said device-side payment application executing on said at least one payment device processor to re-produce said original cryptogram as a re-produced cryptogram and send it to said terminal-side application executing on said at least one terminal processor to complete said putative transaction, wherein said re-produced cryptogram has a different value but same meaning as compared to said original cryptogram.

8. The method of claim 2, further comprising sending at least pertinent portions of transaction recovery data from said terminal-side payment application executing on said at least one payment terminal processor to said device-side payment application executing on said at least one payment device processor, wherein, in said storing step, said transaction recovery data comprises at least one of:

a terminal unpredictable number associated with said putative transaction; and

a date and time of said putative transaction.

9. The method of claim 2, further comprising:

sending at least pertinent portions of said transaction recovery data from said terminal-side payment application executing on said at least one payment terminal processor to said device-side payment application executing on said at least one payment device processor; and

said terminal-side payment application executing on said at least one payment terminal processor obtaining from said device-side payment application executing on said at least one payment device processor in connection with said putative transaction, an indication that said payment device is able to recover incomplete transactions.

10. The method of claim 2, wherein said obtaining, by said terminal-side payment application executing on said at least one payment terminal processor, of said identifier of said payment device, upon said re-presentation of said payment device to said payment terminal assembly, further comprises obtaining, by said terminal-side payment application executing on said at least one payment terminal processor, of an identity of said putative transaction, stored on said payment device, further comprising:

upon said re-presentation of said payment device to said payment terminal assembly, comparing, by said terminal-side payment application executing on said at least one payment terminal processor, of said obtained identity of said putative transaction, stored on said payment device, to corresponding contents of said storage area;

wherein said sending of said second command is further conditioned upon said comparison of said obtained identity of said putative transaction, stored on said payment device, to said corresponding contents of said storage area.

3. A method comprising the steps of:

upon initial communication of a real payment device to a virtual payment terminal assembly in connection with a putative transaction, said real payment device comprising a payment device memory storing a device-side payment application, with an on-device balance, and at least one payment device processor coupled to said payment device memory, said virtual payment terminal assembly comprising a virtual payment terminal memory, storing a virtual payment terminal-side payment application, and at least one virtual payment terminal processor coupled to said virtual payment terminal memory, said virtual payment terminal-side payment application executing on said at least one virtual payment terminal processor establishing communications with said device-side payment application executing on said at least one payment device processor;

sending a first command from said virtual payment terminal-side payment application executing on said at least one virtual payment terminal processor to said device-side payment application executing on said at least one payment device processor to instruct said device-side payment application executing on said at least one device processor to compute a cryptogram to complete said putative transaction;

said virtual payment terminal-side payment application executing on said at least one virtual payment terminal processor detecting that said cryptogram is not received as expected from said device-side payment application executing on said at least one payment device processor;

responsive to said detection, said virtual payment terminal-side payment application executing on said at least one processor storing in a storage area of said memory of said virtual terminal an identifier of said real payment device and transaction recovery data associated with said putative transaction;

obtaining, by said virtual payment terminal-side payment application executing on said at least one virtual payment terminal processor, said identifier of said real payment device, upon re-communication of said real payment device to said virtual payment terminal assembly;

upon said re-communication of said real payment device to said virtual payment terminal assembly, comparing, by said virtual payment terminal-side payment application executing on said at least one virtual payment terminal processor, of said obtained identifier of said real payment device to contents of said storage area; and

conditioned at least upon said comparing yielding a match, sending a second command from said virtual payment terminal-side payment application executing on said at least one virtual payment terminal processor to said device-side payment application executing on said at least one payment device processor, said second command instructing said device-side payment application executing on said at least one payment device processor to re-produce said cryptogram and send it to said virtual payment terminal terminal-side payment application executing on said at least one virtual payment terminal processor to complete said putative transaction.

11. The method of claim 3, further comprising sending at least pertinent portions of said data storage transaction recovery data from said virtual terminal-side payment application executing on said at least one virtual terminal processor to said device-side payment application executing on said at least one payment device processor, wherein, in said storing step, said transaction recovery data comprises at least one of:

a terminal unpredictable number associated with said putative transaction; and

a date and time of said putative transaction.

12. The method of claim 3, further comprising:

sending at least pertinent portions of said transaction recovery data from said virtual terminal-side payment application executing on said at least one virtual terminal processor to said device-side payment application executing on said at least one payment device processor; and

said virtual terminal-side payment application executing on said at least one virtual terminal processor obtaining from said device-side payment application executing on said at least one payment device processor in connection with said putative transaction, an indication that said payment device is able to recover incomplete transactions.

13. The method of claim 3, wherein said obtaining, by said virtual terminal-side payment application executing on said at least one virtual terminal processor, of said identifier of said payment device, upon said re-presentation of said payment device to said virtual terminal assembly, further comprises obtaining, by said virtual terminal-side payment application executing on said at least one virtual terminal processor, of an identity of said putative transaction, stored on said payment device, further comprising:

upon said re-presentation of said payment device to said virtual terminal assembly, comparing, by said virtual terminal-side payment application executing on said at least one virtual terminal processor, of said obtained identity of said putative transaction, stored on said payment device, to corresponding contents of said storage area;

wherein said sending of said second command is further conditioned upon said comparison of said obtained identity of said putative transaction, stored on said payment device, to said corresponding contents of said storage area.

4. A method comprising the steps of:

upon initial communication of a virtual payment device to a real payment terminal assembly in connection with a putative transaction, said virtual payment device comprising a virtual payment device memory storing a device-side virtual payment application, and at least one virtual payment device processor coupled to said virtual payment device memory, said real payment terminal assembly comprising a terminal memory, storing a terminal-side payment application, and at least one terminal processor coupled to said terminal memory, said terminal-side payment application executing on said at least one terminal processor establishing communications with said virtual payment device-side payment application executing on said at least one virtual payment device processor;

sending a first command from said terminal-side payment application executing on said at least one terminal processor to said virtual payment device-side payment application executing on said at least one virtual payment device processor to instruct said virtual payment device-side payment application executing on said at least one virtual payment device processor to compute a cryptogram to complete said putative transaction;

said terminal-side payment application executing on said at least one terminal processor detecting that said cryptogram is not received as expected from said virtual payment device-side payment application executing on said at least one virtual payment device processor;

responsive to said detection, said terminal-side payment application executing on said at least one terminal processor storing in a storage area of said memory of said real terminal an identifier of said virtual payment device and transaction recovery data associated with said putative transaction;

obtaining, by said terminal-side payment application executing on said at least one terminal processor, said identifier of said virtual payment device, upon re-communication of said virtual payment device to said real payment terminal assembly;

upon said re-communication of said virtual payment device to said real payment terminal assembly, comparing, by said terminal-side payment application executing on said at least one terminal processor, of said obtained identifier of said virtual payment device to contents of said storage area; and

conditioned at least upon said comparing yielding a match, sending a second command from said terminal-side payment application executing on said at least one terminal processor to said virtual payment device-side payment application executing on said at least one virtual payment device processor, said second command instructing said virtual payment device-side payment application executing on said at least one virtual payment device processor to re-produce said cryptogram and send it to said terminal-side payment application executing on said at least one terminal processor to complete said putative transaction.

14. The method of claim 4, further comprising sending at least pertinent portions of said transaction recovery data from said terminal-side payment application executing on said at least one payment terminal processor to said device-side virtual payment application executing on said at least one virtual payment device processor, wherein, in said storing step, said transaction recovery data comprises at least one of:

a terminal unpredictable number associated with said putative transaction; and

a date and time of said putative transaction.

15. The method of claim 4, further comprising:

sending at least pertinent portions of said transaction recovery data from said terminal-side payment application executing on said at least one payment terminal processor to said device-side virtual payment application executing on said at least one virtual payment device processor; and

said terminal-side payment application executing on said at least one payment terminal processor obtaining from said device-side virtual payment application executing on said at least one virtual payment device processor in connection with said putative transaction, an indication that said virtual payment device is able to recover incomplete transactions.

16. The method of claim 4, wherein said obtaining, by said terminal-side payment application executing on said at least one payment terminal processor, of said identifier of said virtual payment device, upon said re-presentation of said virtual payment device to said payment terminal assembly, further comprises obtaining, by said terminal-side payment application executing on said at least one payment terminal processor, of an identity of said putative transaction, stored on said virtual payment device, further comprising:

upon said re-presentation of said virtual payment device to said payment terminal assembly, comparing, by said terminal-side payment application executing on said at least one payment terminal processor, of said obtained identity of said putative transaction, stored on said virtual payment device, to corresponding contents of said storage area;

wherein said sending of said second command is further conditioned upon said comparison of said obtained identity of said putative transaction, stored on said virtual payment device, to said corresponding contents of said storage area.