Over the air update of payment transaction data stored in secure memory

• US 10,706,402 B2
• Filed: 09/21/2009
• Issued: 07/07/2020
• Est. Priority Date: 09/22/2008
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Aabye, Christian, Ngo, Hao, Wilson, David William, Zeiden, Gustavo Mariath, Pitchford, Chris, Pirzadeh, Kiushan
• Primary Examiner(s): McAtee, Patrick
• Assistant Examiner(s): Winter, John M
• Application Number:
  US12/563,421
• Publication Number:
  US 20100211507A1
• Time in Patent Office: 3,942 Days
• Field of Search: 705 67, 705 50
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists

Abstract

A system, apparatus, and method for processing payment transactions that are conducted using a mobile device that includes a contactless element, such as an integrated circuit chip. The invention enables the updating, correction or synchronization of transaction data maintained by an Issuer with that stored on the device. This is accomplished by using a wireless (cellular) network as a data communication channel for data provided by an Issuer to the mobile device, and is particularly advantageous in circumstances in which the contactless element is not presently capable of communication with a device reader or point of sale terminal that uses a near field communications mechanism. Data transferred between the mobile device and Issuer may be encrypted and decrypted to provide additional security and protect the data from being accessed by other users or applications. If encryption keys are used for the encryption and decryption processes, they may be distributed by a key distribution server or other suitable entity to a mobile gateway which participates in the data encryption and decryption operations.

Claims

1. A mobile device for use in conducting a payment transaction, comprising:

a processor;

a computer readable memory; and

a set of instructions stored in the computer readable memory, which when executed by the processor implement a method comprising;

conducting the payment transaction by communicating with a point of sale terminal over a first communication channel using a contactless element in the mobile device, and adjusting an accumulator stored in the mobile device by an initial transaction amount of the payment transaction;

receiving an encryption key to be used for encrypting and decrypting transaction data over a second communication channel from a mobile gateway associated with an encryption key server in response to conducting the payment transaction, the encryption key being generated by the encryption key server based on a request associated with the payment transaction, the second communication channel being different than the first communication channel, and the second communication channel utilizing a cellular communications network;

receiving encrypted data related to the payment transaction in response to conducting the payment transaction, the encrypted data comprising an actual transaction amount at the mobile device through the second communication channel after communicating with the point of sale terminal, wherein the actual transaction amount of the payment transaction is determined by the point of sale terminal modifying the initial transaction amount of the payment transaction;

decrypting the encrypted data related to the payment transaction using the encryption key; and

updating the accumulator stored in the mobile device using the decrypted data related to the payment transaction, the decrypted data comprising the actual transaction amount of the payment transaction such that the accumulator is adjusted by the difference between the actual transaction amount of the payment transaction and the initial transaction amount of the payment transaction.

2. The mobile device of claim 1, wherein the mobile device is a mobile wireless phone.

3. The mobile device of claim 1, wherein the accumulator is associated with an account, which is one of a prepaid account, a credit account, or a debit account.

4. A method of conducting a payment transaction, comprising:

communicating, by a mobile device, with a point of sale terminal over a first communication channel using a contactless element in the mobile device as part of the payment transaction, and adjusting an accumulator stored in the mobile device by an initial transaction amount of the payment transaction;

receiving an encryption key to be used for encrypting and decrypting transaction data over a second communication channel from a mobile gateway associated with an encryption key server in response to conducting the payment transaction, the encryption key being generated by the encryption key server based on a request associated with the payment transaction, the second communication channel being different than the first communication channel, and the second communication channel utilizing a cellular communications network;

receiving, by the mobile device through the second communication channel after communicating with the point of sale terminal, encrypted data related to the payment transaction in response to conducting the payment transaction, the encrypted data comprising an actual transaction amount, wherein the actual transaction amount of the payment transaction is determined by the point of sale terminal modifying the initial transaction amount of the payment transaction;

decrypting the encrypted data related to the payment transaction using the encryption key; and

updating the accumulator with the decrypted data related to the payment transaction, the decrypted data comprising the actual transaction amount of the payment transaction such that the accumulator is adjusted by the difference between the actual transaction amount of the payment transaction and the initial transaction amount of the payment transaction.

5. The method of claim 4, wherein the contactless element includes a secure memory storage region and a record of the payment transaction is stored in that region.

6. The method of claim 4, wherein the payment transaction is a prepaid transaction.

7. The method of claim 4, wherein the encrypted data is decrypted within a secure memory region of the contactless element.

8. The method of claim 4, wherein the encryption key server provides a second key corresponding to the encryption key provided to the mobile device to the mobile gateway for the mobile gateway to use in encrypting transaction data to be communicated to the mobile device, and in decrypting transaction data communicated from the mobile device.

9. The method of claim 4, wherein a payment processor computer receives data for the payment transaction from the point of sale terminal, processes the received data to generate a record of the transaction and provides the record of the transaction to the mobile device via the mobile gateway.

10. The method of claim 9, wherein the payment processor computer is configured to process payment transaction data for one or more of a credit, debit, or prepaid account, and wherein the record of the transaction includes a balance for the credit, debit, or prepaid account.

11. The method of claim 4 wherein the encrypted data is received from the mobile gateway.

12. The method of claim 11 wherein the mobile gateway is in communication with a payment processing network, which is in communication with an issuer of a payment account used to conduct the transaction.

13. The method of claim 12 wherein the payment processing network is in communication with an acquirer.

14. The method of claim 13 wherein the acquirer is in communication with the point of sale terminal.

15. The method of claim 14 wherein the point of sale terminal generates an authorization request message which is sent to the acquirer, the payment processing network, and the issuer, and wherein the issuer then sends an authorization response message back to the point of sale terminal via the payment processing network and the acquirer.

16. The method of claim 4 wherein the encrypted data is received from the mobile gateway, which performs data formatting between two different networks.

17. The method of claim 16 wherein the two different networks include a cellular network and a payment processing network.

18. The method of claim 17 wherein the payment processing network is between an issuer of an account associated with the mobile device and an acquirer.

19. The method of claim 18 wherein the account is a credit card account.

20. The method of claim 16 wherein the mobile gateway is one of a plurality of mobile gateways and wherein the mobile gateway is selected based on a characteristic of the payment transaction.

21. The method of claim 20 wherein the characteristic of the payment transaction includes at least one of a transaction type, transaction amount, consumer characteristic, and characteristic of a data processing system.

22. The method of claim 4 wherein the encryption key server provides a second key corresponding to the encryption key provided to the mobile device to the mobile gateway, wherein the mobile gateway is configured to use the second key in encrypting transaction data to be communicated to the mobile device and in decrypting transaction data communicated from the mobile device.