Portable device with local verification data

• US 10,726,412 B2
• Filed: 05/15/2017
• Issued: 07/28/2020
• Est. Priority Date: 05/15/2017
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Yehuda, Shlomo, Tammineni, Bhavana
• Primary Examiner(s): Iwarere, Oluseye
• Application Number:
  US15/595,799
• Publication Number:
  US 20180330355A1
• Time in Patent Office: 1,170 Days
• Field of Search: 705 67, 705 18, 235383
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/202 Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/3558 Preliminary personalisation for transfer to user
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G07F 7/0813 Specific details related to card security
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction

Abstract

Embodiments of the disclosure are directed to systems and methods in which verification data is written to a portable device and used to complete a transaction. The system may identify a number of trusted third-party entities computers capable of providing verification data associated with a particular user. The system may generate requests to each of the trusted third-party computers for that verification data. Upon receiving responses, the system may select an appropriate verification data from the responses received from those trusted third-party computers. The verification data is then written to a portable device, which is provided to a user with which it is associated. Once provided, the portable device may be used in a transaction conducted at a resource provider and the verification data may be caused to be displayed on a display operated by the resource provider.

Claims

1. A method comprising:

receiving, at an access device via a portable device reader in communication with the access device, user data from a portable device in relation to a transaction, wherein the portable device comprises a payment card having the user data stored in an integrated circuit;

identifying, by the access device within the user data, verification data associated with a user of the portable device, wherein the verification data comprises at least an image of the user;

displaying, by the access device, the verification data on a display device in communication with the access device wherein the image of the user is caused to be displayed by the access device in a manner which enables an operator to manually verify the verification data;

receiving, by the access device from the operator, an indication that the user is verified;

identifying, by the access device within the user data, access data associated with the user of the portable device; and

initiating the transaction using the identified access data.

2. The method of claim 1, wherein the access device comprises a point-of-sale (POS) terminal.

3. The method of claim 1, wherein the indication that the user is verified is received in response to prompting the operator to compare the verification data to the user.

4. The method of claim 1, wherein initiating the transaction using the identified access data comprises generating an authorization request message that includes the access data.

5. The method of claim 1, wherein the portable device reader is a credit card reader.

6. The method of claim 1, further comprising:

generating a value based on the identified verification data;

transmitting the value to a service provider computer;

receiving a response from the service provider computer indicating a validity of the verification data; and

displaying the verification data on the display device only if the verification data is valid.

11. The method of claim 6, wherein the generated value is a hash value generated from the user data, and wherein the validity of the verification data is determined via independent generation of the hash value.

12. The method of claim 1, wherein the user data is embedded into the integrated circuit by an issuer associated with the credit card.

13. The method of claim 12, wherein at least a portion of the user data is provided to the issuer associated with the credit card by a trusted third party determined to be affiliated with the user.

7. An access device comprising:

a display;

a portable device reader;

a processor; and

a memory including instructions that, when executed with the processor, cause the access device to, at least;

receive, via the portable device reader, user data from a portable device in relation to a transaction, wherein the portable device comprises a payment card having the user data stored in an integrated circuit;

identify, within the user data, verification data associated with a user of the portable device, wherein the verification data comprises at least an image of the user;

display the verification data on the display, wherein the image of the user is caused to be displayed by the access device in a manner which enables an operator to manually verify the verification data;

receive, from the operator of the access device, an indication that the user is verified;

identify, within the user data, access data associated with the user of the portable device; and

initiate a transaction using the access data.

8. The access device of claim 7, wherein a number of details of the transaction are displayed on the display along with the verification data.

9. The access device of claim 7, wherein the portable device reader is a chip reader.

10. The access device of claim 7, wherein the instructions further cause the access device to decrypt the verification data prior to displaying the verification data on the display.