TRANSPARENTLY SECURING DATA FOR TRANSMISSION ON FINANCIAL NETWORKS

• US 20080243701A1
• Filed: 04/25/2008
• Published: 10/02/2008
• Est. Priority Date: 09/07/2004
• Status: Active Grant

• Current Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Original Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Inventors: von Mueller, Clay
• Granted Patent: US 8,249,993 B2
• Time in Patent Office: Days
• US Class Current: 705/65
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06K 7/082 using inductive or magnetic sensors
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G07C 9/22 in combination with an identity check of the pass holder
• CPC Class Codes: G07F 19/206 Software aspects at ATMs
• CPC Class Codes: G07F 7/084 Additional components relating to data transfer and storing, e.g. error detection, self-diagnosis
• CPC Class Codes: G07F 7/0873 Details of the card reader
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 : Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 : Wireless
• CPC Class Codes: H04L 9/0891 : Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3297 : involving time stamps, e.g. generation of time stamps

Abstract

Systems and methods for performing financial transactions are provided. In one embodiment, the invention provides a method for processing token data for a bank card transaction, the method includes: receiving a string of first token data from a token at a token reader; modifying the first token data and generating second token data, the second token data including modified token data; performing a modulo arithmetic operation on the second token data and determining a mod 10 check digit that will cause a modulo arithmetic check of the second token data to yield the same result as the modulo arithmetic check would yield on the first token data; and inserting the mod 10 check digit in the second data string and forwarding the second data string for the transaction.

Claims

1. A method for processing token data for a transaction, the method comprising:

receiving a string of first token data from a token at a token reader;

modifying a portion of the first token data and generating second token data, the second token data including modified token data;

performing a mod 10 operation on the second token data and determining a mod 10 check digit that will cause a modulo arithmetic check of the second token data to yield the same result as the modulo arithmetic check would yield on the first token data; and

inserting the mod 10 check digit in the second data string and forwarding the second data string for the transaction.

2. The method of claim 1, wherein the second token data comprises a string of modified token data and clear text token data assembled in the same format as the first token data.

3. The method of claim 2, wherein the portion of the first token data comprises an account number data from first the token data.

4. The method of claim 1, wherein the mod 10 check digit is appended to the second string or replaces a character in the second string.

5. The method of claim 1, further comprising converting the modified token data to a base 10 number prior to generating the second token data.

6. The method of claim 1, wherein the mod 10 check digit is added to the second data string at a predetermined location of the second data string.

7. The method of claim 6, wherein the predetermined location is one position prior to the last four digits of an account number.

8. The method of claim 1, wherein the mod 10 check digit is added to the second data string at a predetermined location of the second data string and an original mod 10 check digit in the first string remains unchanged in the second data string.

9. The method of claim 1, wherein the token is a bank card and the token data includes card track data.

10. The method of claim 8, wherein the token is a bank card account number PAN and the token data includes modified PAN digits.

11. The method of claim 1, wherein modifying comprises encrypting the portion of the token data.

12. The method of claim 1, wherein the modifying comprises converting the first token data to eight bytes, and performing an eight-byte triple DES encryption on the converted token data.

13. The method of claim 1, wherein the modifying the first token data and generating second token data comprises:

converting X digits of the first token data to a predetermined number of Y bytes;

performing a Y-byte encryption on the converted token data; and

converting the encrypted Y bytes of encrypted data to X digits.

14. The method of claim 1, wherein performing the mod 10 operation and inserting the mod 10 check digit comprises performing a modulo calculation on the X digits to determine the mod 10 check digit and inserting the mod 10 check digit in the appended predetermined digit location

15. The method of claim 1, wherein the token data that is encrypted is a subset of the original token data string, and the encrypted token data replaces the original token data at the same location or locations in the string.

16. A method for processing bank card data for a purchase transaction, the method comprising:

receiving a first set of bank card data from a card reader;

encrypting selected characters of the card data;

replacing the original selected characters of the card data with the encrypted selected characters of the card data creating a second set of card data;

performing a mod 10 calculation on the second set of card data and determining a mod 10 check digit that will cause a modulo arithmetic check of the second set to yield the same result as the modulo arithmetic check would yield on the first set of bank card data; and

inserting the mod 10 check digit in the second data set and forwarding the second data set for the purchase transaction.

17. The method of claim 16, wherein the second set of card data set comprises a string of encrypted card data and original unencrypted card data assembled in the same format as the first set of bank card data.

18. The method of claim 16, wherein the mod 10 check digit is appended to the second set of card data or replaces a character in the second set of card data.

19. The method of claim 16, wherein the mod 10 check digit is added to the second set of card data at a predetermined location of the second set of card data.

20. The method of claim 19, wherein the predetermined location is one position prior to the last four digits of an account number.

21. The method of claim 16, wherein the mod 10 check digit is added to the second data string at a predetermined location of the second data string and an original mod 10 check digit in the first string remains unchanged in the second data string.

22. The method of claim 16, wherein the first set of token data is track data from a track of the bank card.

23. The method of claim 16, wherein the first set of token data is PAN data from a bank card.

24. The method of claim 16, wherein the encrypting selected characters comprises converting the selected characters to eight bytes, and performing an triple DES encryption on the selected token data.

25. The method of claim 16, wherein the encrypting selected characters comprises and creating a second set of card data comprises:

converting X digits of the first set of bank card to a predetermined number of Y bytes; and

performing a Y-byte encryption on the converted card data; and

converting the encrypted Y bytes of encrypted data to X digits.

26. The method of claim 16, wherein performing the modulo arithmetic and inserting the mod 10 check digit comprises performing a modulo calculation on the X digits to determine the mod 10 check digit and inserting the mod 10 check digit in the appended predetermined digit.

27. The method of claim 16, wherein the token data that is encrypted is a subset of the original token data string, and the encrypted token data is replaces the original token data at the same location or locations in the string.