Method and System for Generating a Dynamic Verification Value

• US 20080029593A1
• Filed: 06/18/2007
• Published: 02/07/2008
• Est. Priority Date: 08/18/2003
• Status: Active Grant

• Current Assignee: Visa USA, Inc. (Visa, Inc.)
• Original Assignee: Visa USA, Inc. (Visa, Inc.)
• Inventors: Faith, Patrick, Hammad, Ayman, Aabye, Christian, Sahota, Jagdeep
• Granted Patent: US 7,740,168 B2
• Time in Patent Office: Days
• US Class Current: 235/380
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4093 Monitoring of device authentication
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A method is disclosed. The method includes generating a verification value in response to a transaction involving a portable consumer device, where the verification value is generated using a first dynamic data element and a second dynamic data element. The verification value is sent to a service provider associated with the portable consumer device so that the service provider can verify the transaction.

Claims

1. A method comprising:

generating a verification value in response to a transaction involving a portable consumer device, wherein the verification value is generated using a first dynamic data element and a second dynamic data element; and

sending the verification value to a service provider with data in a magnetic stripe data format so that the service provider can verify the verification value.

2. The method of claim 1 wherein the first dynamic data element or the second dynamic data element includes at least one of the following:

a time of day, a current transaction amount, a terminal ID, and a randomly generated number from a terminal.

3. The method of claim 1 wherein the verification value is also generated using at least one static data element, and wherein the transaction is a payment transaction.

4. The method of claim 3 wherein the static data element includes at least one of an expiration date, a phone number, a SIM card number, a service, code, and an account number.

5. The method of claim 1 wherein the verification value is derived using unique derived keys (UDKs).

6. The method of claim 1 wherein at least the first dynamic verification value or the second dynamic verification value falls within a predetermined range.

7. The method of claim 1 wherein the verification value is generated on the portable consumer device.

8. The method of claim 1 wherein the verification value is generated on a point of sale terminal.

9. The method of claim 1 wherein the portable consumer device is in the form of a card.

10. A computer readable medium comprising:

code for generating a verification value in response to a transaction involving a portable consumer device, wherein the verification value is generated using a first dynamic data element and a second dynamic data element; and

code for sending the verification value to a service provider with data in a magnetic stripe data format so that the service provider can verify the verification value.

11. The computer readable medium of claim 10 wherein the first dynamic data element or the second dynamic data element includes at lest one the following:

a time of day, a current transaction amount, a terminal ID, and a randomly generated number from a terminal.

12. The computer readable medium of claim 10 wherein the verification value is also generated using at least one static data element, and wherein the transaction is a payment transaction.

13. The computer readable medium of claim 12 wherein the static data element includes at least one of an expiration date, a service, code, and an account number.

14. The computer readable medium of claim 10 wherein the verification value is derived using unique derived keys (UDKs).

15. A portable consumer device comprising the computer readable medium of claim 10.

16. A phone comprising the computer readable medium of claim 10.

17. A point of sale terminal comprising the computer readable medium of claim 10.

18. A method comprising:

receiving a verification value with data in a magnetic stripe data format in response to a transaction involving a portable consumer device, wherein the verification value is generated using a first dynamic data element and a second dynamic data element; and

determining if the received verification value matches a verification value at a service provider computer.

19. A computer readable medium comprising code for performing the method of claim 18.

20. A computer comprising the computer readable medium of claim 18.

21. A system comprising:

means for receiving a verification value with data in a magnetic stripe data format in response to a transaction involving a portable consumer device, wherein the verification value is generated using a first dynamic data element and a second dynamic data element; and

means for determining if the received verification value matches a verification value at a service provider computer.