PIN BLOCK REPLACEMENT

• US 20080189214A1
• Filed: 08/16/2007
• Published: 08/07/2008
• Est. Priority Date: 10/17/2006
• Status: Active Grant

• Current Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Original Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Inventors: Catinella, Paul, Mueller, Clay von, Yale, Scott R.
• Granted Patent: US 9,123,042 B2
• Time in Patent Office: Days
• US Class Current: 705/65
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G07F 7/088 the card reader being part of the point of sale [POS] terminal or electronic cash register [ECR] itself

Abstract

Systems and methods for performing token transactions are provided. In one embodiment, the invention provides for processing token transactions, including receiving an encrypted password for a debit card transaction, wherein the password was secured using encrypted debit-card information, decrypting the password using encrypted debit-card information for the debit card, recreating the password using actual debit-card information for the debit card, and forwarding the recreated password for subsequent transaction processing. The invention is suitable for implementation with other types of tokens in addition to debit-card tokens as well. The invention can be implemented in a scenario where the password includes a PIN block that is created by combining a clear or encrypted PIN for the token with token information.

Claims

1. A method for debit card transactions, comprising:

receiving encrypted PIN information for a debit card transaction, wherein the PIN information was encrypted using encrypted debit-card information;

decrypting the PIN information using encrypted debit-card information for the debit card;

re-encrypting the PIN using actual debit-card information for the debit card; and

forwarding the re-encrypted PIN for subsequent transaction processing.

2. The method of claim 1, wherein the encrypted debit-card information comprises an encrypted primary account number of the debit card.

3. The method of claim 1, wherein the encrypted PIN information comprises a PIN block created by a clear text PIN and the encrypted debit card information.

4. The method of claim 3, further comprising the step of encrypting the PIN block.

5. The method of claim 1, wherein the encrypted PIN comprises a PIN block created by a first encrypted PIN and the encrypted debit card information.

6. The method of claim 1, wherein the encrypted debit-card information comprises a partially-encrypted primary account number of the debit card.

7. The method of claim 1, further comprising decrypting the encrypted debit-card information to generate the actual account information.

8. The method of claim 1, wherein the encrypted or actual debit-card information are forwarded with the re-encrypted PIN for subsequent transaction processing.

9. The method of claim 1, wherein PIN information recreation is performed at a gateway prior to forwarding to a transaction processor.

10. The method of claim 1, wherein PIN information recreation is performed in a transaction processing network.

11. The method of claim 1, further comprising:

encrypting the debit-card information at a terminal;

encrypting the PIN information at the terminal; and

forwarding the encrypted debit card information and the encrypted PIN information for transaction processing; and

wherein the encrypted debit card information and the encrypted PIN information are used to re-encrypt the PIN using actual account information prior to PIN verification.

12. The method of claim 1, wherein the encrypted debit-card information comprises an encrypted primary account number of the debit card.

13. The method of claim 1, wherein the encrypted PIN information comprises a PIN block created by a clear text PIN and the encrypted debit card information.

14. The method of claim 13, further comprising the step of encrypting the PIN block.

15. The method of claim 11, wherein PIN block recreation is performed at a gateway prior to forwarding to a transaction processor.

16. The method of claim 11, wherein PIN block recreation is performed in a transaction processing network.

17. A method for secure token transactions, comprising:

receiving an encrypted password for a token transaction, wherein the password was encrypted using encrypted token information;

decrypting the password using encrypted token information;

re-encrypting the password using actual token information; and

forwarding the re-encrypted password for subsequent transaction processing.

18. The method of claim 17, wherein the encrypted password comprises a PIN block created by a clear text PIN and the encrypted token information.

19. The method of claim 18, further comprising the step of encrypting the PIN block.

20. The method of claim 17, wherein the encrypted password comprises a PIN block created by an encrypted PIN and the encrypted token information.

21. The method of claim 17, wherein the encrypted token information comprises an encrypted identifier of the token.

22. The method of claim 17, wherein the encrypted token information comprises a partially-encrypted identifier of the token.

23. The method of claim 17, wherein the token is a debit card and wherein the encrypted token information comprises encrypted account information for the debit card.

24. The method of claim 17, wherein the token is a debit card and wherein the password is a PIN entered for the debit card.

25. A token transaction system, comprising:

a decryption module configured to receive encrypted token information and to decrypt the received encrypted token information to generate decrypted token information; and

a re-encryption module configured to receive decrypted token information from the decryption module and to receive a password that was secured with the encrypted token information, and further configured to decrypt the password using the encrypted token information and to recreate the password using the decrypted token information.

26. The token transaction system of claim 25, wherein the encrypted password comprises a PIN block created by a clear text PIN and the encrypted token information.

27. The token transaction system of claim 26, further comprising the step of encrypting the PIN block.

28. The token transaction system of claim 25, wherein the encrypted password comprises a PIN block created by an encrypted PIN and the encrypted token information.

29. The token transaction system of claim 25, further comprising a plurality of token readers configured to read token data and to encrypt some or all of the token data to generate the encrypted token data.

30. The token transaction system of claim 25, wherein the decryption module and encryption module are communicatively coupled to a gateway that is configured to route the token information and the PIN information from a token reader to a transaction processor.

31. The token transaction system of claim 25, wherein the decryption module and encryption module comprise hardware, software or a combination of hardware and software.

32. A computer program product comprising a computer useable medium having computer program logic embodied therein configured to cause a computer system to process token transactions, said computer program logic comprising:

first computer readable program code for receiving an encrypted password for a token transaction, wherein the password was encrypted using encrypted token information;

second computer readable program code for decrypting the password using encrypted token information;

third computer readable program code for re-encrypting the password using actual token information; and

fourth computer readable program code for forwarding the re-encrypted password for subsequent transaction processing.

33. The computer program product of claim 32, wherein the encrypted password comprises a PIN block created by a clear text PIN and the encrypted token information.

34. The computer program product of claim 33, further comprising the step of encrypting the PIN block.

35. The computer program product of claim 32, wherein the encrypted password comprises a PIN block created by an encrypted PIN and the encrypted token information.

36. The computer program product of claim 32, wherein the encrypted token information comprises an encrypted identifier of the token.

37. The computer program product of claim 32, wherein the encrypted token information comprises a partially encrypted identifier of the token.

38. The computer program product of claim 32, wherein the token is a debit card and wherein the encrypted token information comprises encrypted account information for the debit card.

39. The computer program product of claim 32, wherein the token is a debit card and wherein the password is a PIN entered for the debit card.

40. A method for debit card transactions, comprising:

receiving encrypted PIN information for a debit card transaction, wherein the PIN was encrypted using encrypted debit-card information; and

decrypting the PIN information using encrypted debit-card information for the debit card.