PAYMENT CARD FINANCIAL TRANSACTION AUTHENTICATOR

• US 20080201264A1
• Filed: 10/20/2007
• Published: 08/21/2008
• Est. Priority Date: 02/17/2007
• Status: Abandoned Application

• Current Assignee: Fitbit, Inc. (Alphabet Inc.)
• Original Assignee: Fitbit, Inc. (Alphabet Inc.)
• Inventors: Brown, Kerry D., Chatelain, Daniel
• Application Number:
  US11/875,860
• Publication Number:
  US 20080201264A1
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

A payment card financial transaction authenticates for providing overall financial network security computes a number of results from a cryptographic key that match values that were selectively used to personalize individual payment cards with their individual user identification and account access codes. An account access code is later presented daring a financial transaction involving at least one of those individual payment cards. A dynamic portion is included in a merchant'"'"'s magnetic reading of the payment card. Then authenication can proceed by matching it with values computed from the cryptographic key.

Claims

1. A payment card financial transaction authenticator (152) method for providing overall financial network security, comprising:

computing a number of results (132) from a cryptographic key (130) that match values that were selectively used to personalize individual payment cards (102) with their individual user identification and account access codes; and

authenticating an account access code presented during a financial transaction involving at least one of those individual payment cards (102) with a dynamic portion obtained from a merchant'"'"'s magnetic reading of said payment card (102), by matching that with values computed from said cryptographic key (130).

2. The method of claim 1, wherein:

the computing further comprises using a cryptographic key in real time as needed that is not included in said payment cards.

3. The method of claim 1, wherein:

the computing further comprises accessing a stored list of values that were used to personalize said payment cards.

4. A payment card financial transaction authenticator (152) for providing overall financial network security, comprising:

a device for computing a number of results (132) from a cryptographic key (130) that match values that were selectively used to personalize individual payment cards (102) with their individual user identification and account access codes; and

a processor for authenticating an account access code presented during a financial transaction involving at least one of those individual payment cards (102) with a dynamic portion obtained from a merchant'"'"'s magnetic reading of said payment card (102), by matching that with values computed from said cryptographic key (130).

5. The authenticator of claim 4, further comprises:

a cryptographic key used in real time as needed that is not included in said payment cards.

6. The authenticator of claim 4, further comprises:

a stored list of values that were used to personalize said payment cards.

7. A method for authenticating a payment card financial transaction comprising:

using a table of results (132) produced from a cryptographic key (130) to personalize individual payment cards (102) with user identification and account access codes; and

authenticating an account access code with a dynamic portion obtained from a merchant'"'"'s magnetic reading of a payment card (102); and

comparing data from the step of authenticating with values computed from said cryptographic key (130).

8. The method of claim 7, further comprising:

determining an expected index location within said table of results (132) with a synchronizer; and

sliding a dynamically sized window maintained on an issuer server (128) to predict which pre-computed values are valid at any given time, based on a last valid transaction number received, a transaction time and date, or a merchant identifier (ID).

9. The method of claim 7, wherein the steps are such that some dynamic elements in a payment card (102) secure an entire transaction network (100) in a transparent manner without necessitating changes to preexisting mechanisms (106,110,120,124) that route a merchant transaction request (108) to a payment card issuer (128).

10. A device for authenticating a payment card financial transaction comprising:

a table of results (132) produced from a cryptographic key (130) to personalize individual payment cards (102) with user identification and account access codes; and

a peripheral for authenticating an account access code with a dynamic portion obtained from a merchant'"'"'s magnetic reading of a payment card (102); and

a processor for comparing data from the step of authenticating with values computed from said cryptographic key (130).

11. The device of claim 10, further comprising:

a calculator for determining an expected index location within said table of results (132) with a synchronizer; and

a dynamically sized window maintained on an issuer server (128) to predict which pre-computed values are valid at any given time, based on a last valid transaction number received, a transaction time and date, or a merchant identifier (ID).

12. The device of claim 10, farther comprising:

at least some dynamic elements in a payment card (102) are used to secure an entire transaction network (100) in a transparent manner without necessitating changes to preexisting mechanisms (106,110,120,124) that route a merchant transaction request (108) to a payment card issuer (128).