Multi-function electronic payment device

• US 10,628,820 B2
• Filed: 07/02/2018
• Issued: 04/21/2020
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: CardWare, Inc.
• Original Assignee: Virtual Electric Inc.
• Inventors: Wyatt, David
• Primary Examiner(s): Lee, Seung H
• Application Number:
  US16/025,829
• Publication Number:
  US 20190197520A1
• Time in Patent Office: 659 Days
• CPC Class Codes: G06K 19/06206 the magnetic marking being emulated
• CPC Class Codes: G06K 19/0716 at least one of the integrated circuit chips comprising a sensor or an interface to a sensor
• CPC Class Codes: G06K 19/07749 the record carrier being capable of non-contact communication, e.g. constructional details of the antenna of a non-contact smart card
• CPC Class Codes: G06Q 20/06 Private payment circuits, e.g. involving electronic currency used among participants of a common payment scheme
• CPC Class Codes: G06Q 20/065 using e-cash
• CPC Class Codes: G06Q 20/223 based on the use of peer-to-peer networks
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/346 Cards serving only as information carrier of service
• CPC Class Codes: G06Q 20/347 Passive cards
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/3827 Use of message hashing
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G07F 19/00 Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines data processing equipment for bank accounting G06Q40/02
• CPC Class Codes: G07F 7/0873 Details of the card reader

Abstract

An embodiment includes a multi-function electronic device capable of generating a programmed magnetic field of alternating polarity based on a speed of a card swipe, and methods for constructing the device for the purpose of emulating a standard credit card. An apparatus is described to allow the device to emulate behavior of a credit card when used in electronic credit card readers. Additionally methods are described to allow user control of the device for the purpose of authorizing or controlling use of the device in the application of credit, debit and cash transactions, including cryptocurrency and card-to-card transactions. Methods are also described for generating a limited-duration credit card number when performing a transaction for the purpose of creating a limited-use credit card number, which is limited in scope of use to a predetermined number of authorized transactions. Furthermore the device may interact with other similar devices in proximity for the purpose of funds or credit/debit transfers.

Claims

1. A payment device comprising:

a thin shaped body having no fixed payment numbers disposed thereon;

a memory;

a cryptographic processor coupled to the memory; and

a reader interface, including at least one interface selected from a set comprising;

a magnetic-stripe, a smart card reader interface, a mag-stripe inductor interface, an RF interface, an NFC interface, and a wireless interface, and

wherein payment information for a transaction is operable to be conveyed via the reader interface and comprises limited-use payment information, and wherein further the limited-use payment information is to be used in place of card issuer payment information for payment transactions by said device at payment card reader facilities.

2. The device of claim 1, wherein the body comprises fixed payment information disposed thereon and wherein the fixed payment information includes only:

a card-holder name;

a payment issuing logo; and

a card payment network logo, and wherein further, the body is free of any account numbers, expiration dates, card security codes, or other fixed payment numbers, disposed thereon.

3. The device of claim 1, wherein the limited-use payment information is conveyed via the magnetic-stripe and is unique to the payment device and to the magnetic stripe, and

wherein the limited-use payment information is limited to use by the payment device and is operable for conveying payment information to a magnetic-stripe payment card reader, and

wherein said limited-use payment information has a limited period of valid use, and

wherein said limited-use payment information is not valid when used other than through a magnetic stripe payment card reader.

4. The device of claim 1, wherein said limited-use payment information is provided by a card issuing authority for use by the payment device and wherein the card processing authority rejects as invalid, any use of said limited-use payment information obtained via any means other than:

a payment card reader reading said limited-use payment information from the reader interface.

5. The device of claim 1, wherein a request for payment includes at least one of a set comprising:

payment information, transaction information, merchant information, and payment card reader information, and

wherein a card-present transaction is one including the limited-use payment information, and valid payment card reader information, and wherein a card-not-present transaction is one including at least a portion of said limited-use card payment information, and not including valid payment card reader information; and

,

wherein a processing authority is operable to approve as valid, a card-present payment transaction; and

,

wherein said card processing authority is operable to reject, as not valid, a use of the limited-use card payment information in a card-not-present payment transaction; and

wherein a card issuing authority receiving said request for payment is operable to decline a transaction not involving a valid card-present use of a limited-use card payment information portion used in place of card issuer supplied payment information.

6. The device of claim 1, wherein a card processing authority is operable to reject as invalid, a use of the limited-use payment information provided via the reader interface, in online payment transactions.

7. The device of claim 1, wherein a card issuer providing the limited-use payment information, for use by the payment device, limits valid approval of said limited-use payment information to performing a card-present payment transaction by the card device, and wherein said card issuer declines as invalid a use of said limited-use payment information in transactions other than wherein the payment device is present, and

wherein a card issuer limits said card payment information to use for a finite amount of time, and declines as invalid use when said amount of time has expired, and

wherein a card issuer limits use to payment for transactions with the user approving, and declines as invalid use when the card user is denying an approval, and

wherein a card issuer limits to use in place of card issuer information for payments by the payment device.

8. The device of claim 1, wherein the reader interface is operable to wirelessly receive cardholder transaction information and to identify a valid user through at least one user-validation action, selected from a set of comprising:

a device touch ID sensor identifying a touch of the valid user;

a device touch sensor-array receiving a user entered valid passcode;

a device key-pad receiving a use entered a valid passcode;

a device user interface receiving a user entered a valid PIN or Key-Code;

a device user interface receiving a user entered a valid password;

a device user interface reading a user swipe or gesture;

a user tapping a predetermined sequence on the device;

a user motioning the device in accordance with a sequence;

a skin-contact sensing identifying a valid user;

a device sensor array reading a touch of an identified user;

a device biometric recognition of a valid user; and

a biometric sensing of the device remaining continuously in the possession of a valid user,

wherein a display of the device is operable to display transaction information through a user interface, and wherein transaction information includes at least one of a set comprising;

a transaction time;

a transaction amount;

transaction merchant information;

a transaction location;

a transaction facility;

card information;

a partial card number;

graphical card images; and

wherein upon validating the user, the user-interface is operable to receive a valid user input, of at least one user action selected from a set comprising;

a payment approval authorization;

a payment denial; and

an adjustment of a transaction payment.

9. The device of claim 1, wherein a dynamically-generated one-time limited-use payment information portion is generated by said processor when coupled to a reader interface accessible to said processor, and

wherein the payment information conveyed to a payment card reader, at the time of transaction, includes at least one of a portion of:

a static limited-use portion; and

a dynamically-generated limited-use portion, and

wherein said static limited-use payment information is provided by a card issuing authority for use in place of a card issuer payment information.

10. The device of claim 1, wherein the processor cryptographically dynamically generates a one-time limited-use number based on combination of a card device transaction sequence count, and at least one of a set of information including:

a user information;

a user card account number;

a device account number;

device secret keys;

card issuer keys;

a time;

a merchant;

a location;

an online address;

a payment information;

a card reader information;

an account information;

an amount;

a transaction information; and

a cryptographic combination of at least two of the above set of information, and wherein the processor increments the card device transaction sequence count on each transaction.

11. An online payment system, the system comprising:

a thin payment device comprising no fixed payment numbers visible thereon; and

a personal computing device, wherein the personal computing device comprises;

a processor;

a memory;

a wireless interface;

a display operable to provide a visual user-interface operable for performing online transactions; and

a user-interface coupled to the processor, and

wherein the wireless interface is operable to wirelessly obtain card device payment account information, and

wherein the processor is operable to generate limited-use payment information based on the card device payment account information, and

wherein the personal computing device is operable to generate complete payment information, including the limited-use payment information, and to convey said complete payment information via at least one interface of a set comprising;

said display; and

the wireless interface, and

wherein the limited-use payment information is configured to be used in place of a card issuer payment information.

12. The system of claim 11, wherein the thin payment device bears no fixed payment numbers, and bears only:

the cardholders name;

a brand logo; and

the card payment network logo.

13. The system of claim 11 wherein the personal computing device is configured for presenting on the display a limited-use card security code number for use in payments in place of card issuer payment information, and

wherein the personal computing device is further configured to generate said limited-use card security code responsive to an input request from a valid user, via said user-interface, and

wherein said limited-use number is generated on the personal computing device from at least one information from a set comprising:

a payment device user information;

a payment device account number;

a payment device sequence counter;

a payment device identifier;

payment device secrets;

a payment device key;

computing device secrets;

computing device keys;

payment device issuer secrets;

payment device issuer keys;

a time;

an expiration date;

an amount;

a merchant locality;

an online location;

a transaction information; and

a cryptographic combination of at least two of the above.

14. The system as described in claim 11 wherein the personal computing device is configured for presenting on the display, a limited-use card account number, and a limited-duration expiration date, for use in payments in place of a card issuer payment information, and

wherein said personal computing device is further configured to generate said limited-use card payment information responsive to an input request from a valid user, and

wherein the personal computing device is configured to identify a valid device-user through at least one user-validation input available to the personal computing device, of a set comprising:

a touch ID sensor operable to identify the touch a valid user;

a user entering of a valid passcode on a touch sensor-array;

a user entering of a valid passcode on a key-pad;

a user entering of a valid PIN or Key-Code on the user-interface;

a user entering of a valid password on the user-interface;

a valid user swiping or gesturing on a touch sensor-array;

a valid sequence of a user tapping of the device detectable by device accelerometer;

a valid user sequence of user motioning of the device detectable by device motion sensor unit;

a skin-contact sensing identifying a valid user on a device contact sensor;

a touching of an identified user'"'"'s skin on a device touch sensor array;

a device biometric recognition of a valid user via a device biometric sensing; and

a biometric sensing of the device remaining continuously in the proximity possession of a valid user via device skin-proximity sensor; and

, wherein the personal computing device conveys the limited-use payment information through the user interface.

15. An online payment system comprising:

a thin card-shaped payment card device that bears no fixed payment numbers on the card device; and

a computing device operable for completing an online payment transaction and comprising;

a display;

a user-interface;

a processor; and

a memory for storing a payment card information accessible to the processor,

wherein card issuer provided payment card information is wirelessly downloaded into the computing device, and

wherein at least one of the set comprising;

the computing device; and

the card-shaped payment device,

is configured to dynamically generate a limited-use payment information, upon the authorization of a valid computing device user, and

wherein the payment information provided by the computing device is used in online transactions in place of a card issuers payment card information.

16. The system of claim 15 wherein the card device bears no fixed payment numbers, and bears only:

the cardholders name;

the brand logo; and

the card payment network logo.

17. The system of claim 15 wherein the dynamically generated limited-use payment information is displayable on a display of the computing device.

18. The system of claim 15 wherein the limited-use payment information includes a static limited-use card account number, a limited-duration card expiration date, and a limited-use card security code and,

wherein the dynamically generated limited-use payment information is conveyed by the computing device to complete an online transaction.

19. The system of claim 15 wherein the computing device is operable to generate a limited-use card security code number, for use in place of a card issuers card security code by generating said limited-use number via cryptographically combining information from at least one of a set comprising:

a user information;

an internet address;

an email address;

a device transaction sequence counter;

a device account number;

device identifiers;

device secrets;

device keys;

issuer secrets;

issuer keys;

a payment card account number;

a payment card security code;

a time;

an expiration date;

an amount;

a merchant locality;

a transaction information;

and a cryptographic combination of at least two of the above set, and wherein the computing device is operable to display the generated limited-use card security code on the display.

20. The system of claim 15 wherein the computing device is further operable to obtain a user payment approval through at least one user-interface element of the computing device, from a set comprising:

a display interface,

a touch-screen interface,

a touch ID button,

input buttons,

a touch key-pad,

a key-pad,

a key-board,

an optical sensor array,

a motion detection unit,

an accelerometer,

the swiping of a recognized user skin over a device sensor array, a biometric sensor,

a wireless interface,

an NFC interface,

an RF interface,

a device biometric sensing the device is continuously remaining in contact with a valid user; and

,

wherein the computing device is operable to display at least one of a set comprising;

the transaction information, the merchant information, the time, the location of the transaction, the payment bank logo, the card issuer icon, the payment card image, and the amount, on a display of the computing device, and,

a user input providing for at least one user action from a set comprising;

an approving of a transaction, a denying of a transaction, and an adjusting of a transaction, via the user-interface.