FINANCIAL TRANSACTION NETWORK

• US 20090164380A1
• Filed: 02/24/2009
• Published: 06/25/2009
• Est. Priority Date: 12/20/2006
• Status: Abandoned Application

• Current Assignee: Fitbit, Inc. (Alphabet Inc.)
• Original Assignee: Fitbit, Inc. (Alphabet Inc.)
• Inventors: Brown, Kerry D.
• Application Number:
  US12/391,425
• Publication Number:
  US 20090164380A1
• Time in Patent Office: Days
• US Class Current: 705/65
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/4093 Monitoring of device authentication
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/12 Card verification
• CPC Class Codes: G07F 7/122 Online card verification

Abstract

The manufacture and control of payment cards used in consumer financial transactions circulates a population of payments cards with user identification and account access codes. Each use of an individual card produces a variation of its user access code according to an encryption program seeded with encryption keys or initialization vectors. A portion of the magnetic stripe is made dynamic with a Q-Chip magnetic MEMS device. The job of personalizing payment cards with the user identification and account access codes is outsourced to a personalization company. The encryption keys and initialization vectors are kept private from the personalization company by using the encryption program to generate tables of computed results. Respective ones of the tables of computed results are sent for loading by the personalization company into new members of the population of payments cards. New payment cards are manufactured and distributed that include and operate with the tables of computed results.

Claims

1. A financial transaction network (100), comprising:

a population of payments cards (102) each including a personal account number (PAN), an expiry date, and/or a card verification value (CVV/CVV2) having a dynamic portion;

a swipe data message (104) transmittable from each of the population of payments cards (102) that includes a new combination of PAN, expiry date, and CVV/CVV2 made unique by changes occurring in said dynamic portion; and

a card personalization process (146) for completing new payment cards (150) from blanks (144) using personalization information in a secure message (148) from an issuing bank (128) that predetermines the values and sequences possible in said dynamic portion for their later predictability in a financial transaction.

2. The financial transaction network of claim 1, further comprising:

a set of encryption keys and initialization vectors (130) kept private from said personalization process (146) by using an encryption program to generate tables (132) of computed results.

3. The financial transaction network of claim 1, further comprising:

a card integrator (136) that produces card blanks (144) with magnetic stripes, MEMS magnetic devices, embossing and logos.

4. The financial transaction network of claim 1, wherein, said secure message (148) to the personalization process (146) includes corresponding users'"'"' names, addresses, account numbers, and expiry dates.

5. A method for operating a financial transaction network (100), comprising:

circulating a population of payments cards (102) each including a personal account number (PAN), an expiry date, and/or a card verification value (CVV/CVV2) having a dynamic portion;

causing a swipe data message (104) to be transmitted from each of the population of payments cards (102) that includes a new combination of PAN, expiry date, and CVV/CVV2 made unique by changes occurring in said dynamic portion; and

completing new payment cards (150) from blanks (144) using personalization information in a secure message (148) from an issuing bank (128) that predetermines the values and sequences possible in said dynamic portion for their later predictability in a financial transaction.

6. The method of claim 5, further comprising:

keeping a set of encryption keys and initialization vectors (130) private from said personalization process (146) by using an encryption program to generate tables (132) of computed results.

7. The method of claim 5, further comprising:

producing said card blanks (144) with magnetic stripes, MEMS magnetic devices, embossing and logos.

8. The method of claim 5, wherein, said secure message (148) to the personalization process (146) includes corresponding users'"'"' names, addresses, account numbers, and expiry dates.

9. A financial transaction network with improved security, wherein the network comprises a population of payments cards with user identification and account access codes, in part produced by an outsourced personalization company, the improved security realized by including:

a dynamic part in said account access codes loaded by said personalization company into each of said payment cards;

a set of encryption keys and initialization vectors kept private from said personalization company by using an encryption program to generate tables of computed results;

a transmitter to send respective ones of said tables of computed results for loading by said personalization company into new members of said population of payments cards; and

devices for manufacturing and distributing said new members of the population of payments cards to include and operate with said tables of computed results.