AUTHENTICATION OF A DATA CARD USING A TRANSIT VERIFICATION VALUE

• US 20080203152A1
• Filed: 02/28/2007
• Published: 08/28/2008
• Est. Priority Date: 02/28/2007
• Status: Active Grant

• Current Assignee: Visa USA, Inc. (Visa, Inc.)
• Original Assignee: Visa USA, Inc. (Visa, Inc.)
• Inventors: Hammad, Ayman, Dixon, Philip B.
• Granted Patent: US 8,346,639 B2
• Time in Patent Office: Days
• US Class Current: 235/380
• CPC Class Codes: G06K 17/00 Methods or arrangements for effecting co-operative working between equipments covered by two or more of main groups G06K1/00 - G06K15/00, e.g. automatic card files incorporating conveying and reading operations
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/3221 Access to banking information through M-devices
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners

Abstract

Transaction processing involves receiving data from an access transaction application of a portable consumer device, wherein the received data comprises data from an access transaction data string that includes a transit verification value wherein, with the exception of the transit verification value, the access transaction data string is substantially similar to a retail data string comprising retail data, wherein the access application data string is adapted for use with an access transaction processing system and the retail data string is adapted for use with a retail processing system. The transaction processing involves processing access transaction application data for selective authorization of the transaction.

Claims

1. A portable consumer device comprising:

retail application data for use in connection with a retail transaction, the data having a predetermined data field configuration for use with a retail processing system of an issuer that receives the retail application data and processes it to either authorize or deny a retail transaction and includes a primary account number (PAN) associated with the retail application data;

access transaction application data for use in connection with an access transaction, the access transaction application data having a predetermined data field configuration for use with a reader of an agency, wherein the predetermined data field configuration of the access transaction application data is substantially similar to the retail application data field configuration, except that the access transaction application data includes an access transaction PAN that is used by the issuer to selectively authorize the access transaction.

2. The portable consumer device of claim 1, wherein the predetermined data field configuration of the access transaction application data conforms to a magnetic stripe data (MSD) configuration and the access transaction PAN is associated with merchant category code (MCC) data of the MSD configuration.

3. The portable consumer device of claim 2, wherein the MCC data corresponds to a transit category, such that the issuer will deny any access transactions of the portable consumer device that are outside of a transit MCC.

4. The portable consumer device of claim 1, wherein the access transaction application data further includes a transit verification value that is adapted for offline verification processing in connection with the portable consumer device.

5. The portable consumer device of claim 4, wherein the predetermined data field configuration of the access transaction application data conforms to a magnetic stripe data (MSD) configuration.

6. The portable consumer device of claim 5, wherein the transit verification value occupies a Personal Identification Number (PIN) data field of the MSD configuration.

7. The portable consumer device of claim 2, wherein the MSD data configuration includes issuer assigned data files for data storage on the portable consumer device in the access transaction application data.

8. The portable consumer device of claim 1, further including issuer assigned data files for data storage in the access transaction application data of the portable consumer device.

9. The portable consumer device of claim 1, wherein the portable consumer device comprises a contactless smart card device.

10. A portable consumer device including access transaction application data, the portable consumer device configured to store:

an access transaction data string comprising access transaction data that includes a transit verification value adapted for offline verification processing in connection with the portable consumer device;

wherein the access transaction application data has a predetermined data field configuration for use with a reader of an agency, wherein the predetermined data field configuration is substantially similar to a retail application data field configuration for use with a retail processing system of an issuer of the portable consumer device such that the issuer receives retail application data and processes it to either authorize or deny a retail transaction and the retail application data file configuration includes a primary account number (PAN) associated with the retail application data, and

wherein the predetermined data field configuration of the access transaction application data conforms to a magnetic stripe data (MSD) configuration.

11. The portable consumer device of claim 10, wherein the transit verification value occupies a Personal Identification Number (PIN) data field of the MSD configuration.

12. The portable consumer device of claim 10, wherein the portable consumer device is further configured to store a retail data string, wherein the retail data string is not accessible by the transit processing system and the access transaction data string is not accessible by a retail POS terminal of the retail system.

13. The portable consumer device of claim 10, wherein the access transaction application data includes an access transaction PAN that is used by the issuer to selectively authorize the access transaction.

14. The portable consumer device of claim 13, wherein the access transaction PAN is associated with merchant category code (MCC) data of the MSD configuration.

15. The portable consumer device of claim 14, wherein the MCC data corresponds to a transit category, such that the issuer will deny any access transactions of the portable consumer device that are outside of a transit MCC.

16. The portable consumer device of claim 10, further including issuer assigned data files for data storage in the access transaction application data of the portable consumer device.

17. The portable consumer device of claim 16, wherein the issuer assigned data files are within the MSD data configuration.

18. The portable consumer device of claim 10, wherein the transit verification value is dynamically changed by a processor of the portable consumer device during use of the portable consumer device.

19. The portable consumer device of claim 10, wherein the transit verification value data is determined by an issuer of the portable consumer device and is statically stored in the portable consumer device.

20. The portable consumer device of claim 10, wherein the portable consumer device comprises a contactless smart card device.

21. A method of processing an access transaction, the processing method comprising:

receiving access transaction application data from a portable consumer device, wherein the received data comprises data from an access transaction data string that includes a transit verification value adapted for offline verification processing in connection with the portable consumer device;

wherein the access transaction application data has a predetermined data field configuration for use with a reader of an agency, wherein the predetermined data field configuration is substantially similar to a retail application data field configuration for use with a retail processing system of an issuer of the portable consumer device such that the issuer receives retail application data and processes it to either authorize or deny a retail transaction and the retail application data filed configuration includes a retail primary account number (PAN) associated with the retail application data, and

wherein the predetermined data field configuration of the access transaction application data conforms to a magnetic stripe data (MSD) configuration; and

processing the received data comprises processing the transit verification value.

22. The method of claim 21, wherein the transit verification value occupies a Personal Identification Number (PIN) data field of the MSD configuration.

23. The method of claim 21, wherein the portable consumer device includes the access transaction data string and includes the retail data string, and receiving data comprises reading from the portable consumer device such that the retail data string is not accessible by the transit processing system and the access transaction data string is not accessible by a retail POS terminal of the retail system.

24. The method of claim 21, wherein the access transaction application data includes an access transaction PAN that is used by the issuer to selectively authorize the access transaction.

25. The method of claim 24, wherein the access transaction PAN is associated with merchant category code (MCC) data of the MSD configuration.

26. The method of claim 21, wherein the MCC data corresponds to a transit category, such that the issuer will deny any access transactions of the portable consumer device that are outside of a transit MCC.

27. The method of claim 21, further including processing data read from issuer discretionary data files of the portable consumer device that provide data storage in the access transaction application data.

28. The method of claim 27, wherein the issuer discretionary data files are within the MSD data configuration.

29. The method of claim 21, wherein processing the received data comprises validating dynamically changed transit verification value data received from the portable consumer device.

30. The method of claim 21, wherein the transit verification value data is determined by an issuer of the portable consumer device and is statically stored in the portable consumer device.

31. The method of claim 21, wherein receiving data comprises reading from a portable consumer device comprising a contactless smart card device.