BATCH SETTLEMENT TRANSACTIONS SYSTEM AND METHOD

• US 20080091944A1
• Filed: 10/17/2006
• Published: 04/17/2008
• Est. Priority Date: 10/17/2006
• Status: Active Grant

• Current Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Original Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Inventors: Catinella, Paul, von Mueller, Clay W., Hazel, Patrick K., Yale, Scott R.
• Granted Patent: US 8,769,275 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

Systems and methods for performing settlement of token access transactions are provided. In one embodiment, the invention provides for batch processing bank card transactions, including receiving transaction records for a plurality of bank card transactions, wherein at least some of the transaction records include encrypted token information; determining whether the transaction records contain encrypted token information; decrypting the encrypted token information for a transaction record that is determined to have encrypted token information; and providing clear text token information obtained by decrypting the encrypted token information for a transaction record for transaction settlement.

Claims

1. A method for batch processing bank card transactions, comprising:

receiving transaction records for a plurality of bank card transactions, wherein at least some of the transaction records include encrypted token information;

determining whether the transaction records contain encrypted token information;

decrypting the encrypted token information for a transaction record that is determined to have encrypted token information; and

providing clear text token information obtained by decrypting the encrypted token information for a transaction record for transaction settlement.

2. The method of claim 1, wherein the encrypted token information comprises at least a primary account number of a bank card.

3. The method of claim 1, wherein the transaction records are stored in a batch settlement file.

4. The method of claim 1, wherein token information is encrypted by a merchant using a unique key associated with that merchant, and wherein the step of decrypting comprises the steps of determining a correct decryption key based on an identification of the merchant from which a transaction record originated, and decrypting encrypted token data using the correct decryption key.

5. The method of claim 1, wherein a flag is set to identify whether a transaction record includes encrypted token data.

6. The method of claim 5, wherein the flag comprises a token expiration date set to a value other than the actual expiration date.

7. The method of claim 6, wherein the set value comprises a predetermined string or an incremented expiration date.

8. The method of claim 6, further comprising the step of restoring the expiration date to the actual expiration date.

9. The method of claim 1, wherein the method steps are performed at a gateway configured to handle transactions from a plurality of merchants.

10. The method of claim 9, wherein the method steps are performed by a secure transaction module in communicative contact with the gateway.

11. The method of claim 1, wherein the method steps are performed at a gateway, a merchant, an issuing bank, an acquiring bank or a clearing house.

12. The method of claim 1, wherein the step of providing comprises the steps of encrypting the clear text token information and providing the encrypted clear text token information to a transaction processor for settlement.

13. The method of claim 1, wherein the step of providing comprises the steps of packaging the token information into a settlement file and forwarding the settlement file to a transaction processor.

14. A method for batch processing a plurality of token transactions, comprising:

receiving a plurality of records for the token transactions, wherein at least some of the settlement records include encrypted token data;

determining whether the token information for a record is encrypted;

decrypting the settlement record information for a record that is determined to have encrypted token information; and

providing the clear text settlement record for settlement.

15. A computer program product comprising a computer useable medium having computer program logic embodied therein configured to cause a computer system to batch process bank card transactions, said computer program logic comprising:

first computer readable program code for enabling the computer to receive transaction records for a plurality of bank card transactions, wherein at least some of the transaction records include encrypted token information;

second computer readable program code configured to cause the computer to determine whether the transaction records contain encrypted token information;

third computer readable program code configured to cause the computer to decrypt the encrypted token information for a transaction record that is determined to have encrypted token information; and

fourth computer readable program code configured to cause the computer to provide clear text token information obtained by decrypting the encrypted token information for a transaction record for transaction settlement.

16. The computer program product of claim 15, wherein the encrypted token information comprises at least a primary account number of a bank card.

17. The computer program product of claim 15, wherein the transaction records are stored in a batch settlement file.

18. The computer program product of claim 15, wherein token information is encrypted by a merchant using a unique key associated with that merchant, and wherein the step of decrypting comprises the steps of determining a correct decryption key based on an identification of the merchant from which a transaction record originated, and decrypting encrypted token data using the correct decryption key.

19. The computer program product of claim 15, wherein a flag is set to identify whether a transaction record includes encrypted token data.

20. The computer program product of claim 15, wherein the flag comprises a token expiration date set to a value other than the actual expiration date.

21. The computer program product of claim 20, wherein the set value comprises a predetermined string or an incremented expiration date.

22. The computer program product of claim 20, further comprising the step of restoring the expiration date to the actual expiration date.

23. The computer program product of claim 15, wherein the computer program product is executed at a gateway configured to handle transactions from a plurality of merchants.

24. The computer program product of claim 23, wherein the computer program product is executed by a secure transaction module in communicative contact with the gateway.

25. The computer program product of claim 15, wherein the computer program product is executed at a gateway, a merchant, an issuing bank, an acquiring bank or a clearing house.

26. The computer program product of claim 15, wherein the fourth computer readable program code comprises computer readable program code configured to encrypt the clear text token information and provide the encrypted clear text token information to a transaction processor for settlement.

27. The computer program product of claim 15, wherein the fourth computer readable program code comprises computer readable program code configured to cause the computer to package the token information into a settlement file and forward the settlement file to a transaction processor.

28. A secure transaction module configured to batch process bank card transactions, said secure transaction module comprising:

control logic configured to receive transaction records for a plurality of bank card transactions, wherein at least some of the transaction records include encrypted token information;

control logic configured to determine whether the transaction records contain encrypted token information;

control logic configured to decrypt the encrypted token information for a transaction record that is determined to have encrypted token information; and

control logic configured to provide clear text token information obtained by decrypting the encrypted token information for a transaction record for transaction settlement.

29. The apparatus of claim 28, wherein the encrypted token information comprises at least a primary account number of a bank card.

30. The apparatus of claim 28, wherein the transaction records are stored in a batch settlement file.

31. The apparatus of claim 28, wherein token information is encrypted by a merchant using a unique key associated with that merchant, and wherein the step of decrypting comprises the steps of determining a correct decryption key based on an identification of the merchant from which a transaction record originated, and decrypting encrypted token data using the correct decryption key.

32. The apparatus of claim 28, wherein a flag is set to identify whether a transaction record includes encrypted token data.

33. The apparatus of claim 28, wherein the flag comprises a token expiration date set to a value other than the actual expiration date.

34. The computer program product of claim 33, wherein the set value comprises a predetermined string or an incremented expiration date.

35. The computer program product of claim 33, further comprising the step of restoring the expiration date to the actual expiration date.

36. The apparatus of claim 28, wherein the secure transaction module is communicatively coupled to a gateway configured to handle transactions from a plurality of merchants.

37. The apparatus of claim 28, wherein the secure transaction module is communicatively coupled to a gateway, a merchant, an issuing bank, an acquiring bank or a clearing house.

38. The apparatus of claim 28, wherein the control logic configured to provide comprises control logic configured to encrypt the clear text token information and provide the encrypted clear text token information to a transaction processor for settlement.

39. The apparatus of claim 28, wherein the control logic configured to provide comprises control logic configured to cause the computer to package the token information into a settlement file and forward the settlement file to a transaction processor.

40. A secure transaction module configured to batch process token data, said secure transaction module comprising:

control logic configured to receive a plurality of records for the token transactions, wherein at least some of the settlement records include encrypted token data;

control logic configured to determine whether the token information for a record is encrypted;

control logic configured to decrypt the settlement record information for a record that is determined to have encrypted token information; and

control logic configured to provide the clear text settlement record for settlement.