SECURE AUTHORIZATION OF CONTACTLESS TRANSACTION

• US 20090210308A1
• Filed: 02/15/2008
• Published: 08/20/2009
• Est. Priority Date: 02/15/2008
• Status: Active Grant

• Current Assignee: First Data Corporation (Fiserv Incorporated)
• Original Assignee: First Data Corporation (Fiserv Incorporated)
• Inventors: Arthur, Steven E., Toomer, Christopher L.
• Granted Patent: US 9,947,002 B2
• Time in Patent Office: Days
• US Class Current: 705/16
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists

Abstract

Methods, systems, and machine-readable media are disclosed for securely authorizing a financial transaction utilizing an electronic payment credential. According to one embodiment, a method of authorizing a financial transaction utilizing an electronic payment credential can comprise maintaining information identifying an account associated with the electronic payment credential. The information can also identify one or more electronic devices authorized to use the electronic payment credential. A request to authorize the transaction can be received. The request can include information identifying an electronic device presenting the payment credential. The transaction can be authorized based at least in part on the information identifying the account. Authorizing can comprise determining the electronic device presenting the payment credential is one of the electronic devices authorized to use the electronic payment credential.

Claims

1. A method for authorizing a financial transaction utilizing an electronic payment credential, the method comprising:

maintaining information identifying an account associated with the electronic payment credential, the information identifying one or more electronic devices authorized to use the electronic payment credential;

receiving a request to authorize the transaction, wherein the request includes information identifying an electronic device presenting the payment credential; and

authorizing the transaction based at least in part on the information identifying the account, wherein authorizing comprises determining the electronic device presenting the payment credential is one of the electronic devices authorized to use the electronic payment credential.

2. The method of claim 1, wherein the electronic payment credential comprises a credential representing a pre-paid account.

3. The method of claim 2, wherein the pre-paid account comprises a gift card account.

4. The method of claim 1, wherein the information identifying the electronic device presenting the payment credential comprises a unique static identifier.

5. The method of claim 4, wherein the unique static identifier comprises a device serial number.

6. The method of claim 1, wherein the information identifying the electronic device presenting the payment credential comprises a unique dynamic identifier.

7. The method of claim 6, further comprising:

prior to receiving the request to authorize the transaction, generating a unique device identifier;

saving the unique device identifier in the information identifying the account; and

transferring the unique device identifier to the electronic device.

8. The method of claim 7, further comprising:

after authorizing the transaction, generating a new unique device identifier;

saving the new unique device identifier in the information identifying the account; and

transferring the new unique device identifier to the electronic device for use in authorizing subsequent transactions.

9. The method of claim 6, wherein the unique dynamic identifier comprises a combination of an account number for the account and a random value.

10. The method of claim 9, wherein the random value comprises an elapsed time since a previous transaction.

11. The method of claim 9, wherein the random value comprises a time of occurrence of a last transaction.

12. The method of claim 9, wherein the random value comprises Greenwich Mean Time (GMT).

30. The machine-readable medium of claim 1, wherein the information identifying the electronic device presenting the payment credential comprises a unique dynamic identifier.

13. A system for authorizing a financial transaction utilizing an electronic payment credential, the system comprising:

a mobile electronic device adapted to maintain the electronic payment credential and initiate the financial transaction utilizing the electronic payment credential; and

an acquirer system adapted to maintain information identifying an account associated with the electronic payment credential, the information identifying one or more electronic devices authorized to use the electronic payment credential, receive a request to authorize the transaction, wherein the request includes information identifying the mobile electronic device initiating the financial transaction utilizing the electronic payment credential, and authorize the transaction based at least in part on the information identifying the account, wherein authorizing comprises determining the mobile electronic device initiating the transaction is one of the electronic devices authorized to use the electronic payment credential.

14. The system of claim 13, further comprising a point-of-sale device communicatively coupled with the acquirer system, wherein the mobile electronic device initiates the financial transaction by presenting the payment credential to the point-of-sale device and wherein the acquirer system receives the request to authorize the financial transaction from the point-of-sale device.

15. The system of claim 13, wherein the electronic payment credential comprises a credential representing a pre-paid account.

16. The system of claim 15, wherein the pre-paid account comprises a gift card account.

17. The system of claim 13, wherein the information identifying the electronic device presenting the payment credential comprises a unique static identifier.

18. The system of claim 17, wherein the unique static identifier comprises a device serial number for the mobile electronic device.

19. The system of claim 13, wherein the information identifying the electronic device presenting the payment credential comprises a unique dynamic identifier.

20. The system of claim 19, wherein the acquirer system is further adapted to:

prior to receiving the request to authorize the transaction, generate a unique device identifier;

save the unique device identifier in the information identifying the account; and

transfer the unique device identifier to the electronic device.

21. The system of claim 20, wherein the acquirer system is further adapted to:

after authorizing the transaction, generate a new unique device identifier;

save the new unique device identifier in the information identifying the account; and

transfer the new unique device identifier to the electronic device for use in authorizing subsequent transactions.

22. The system of claim 19, wherein the unique dynamic identifier comprises a combination of an account number for the account and a random value.

23. The system of claim 22, wherein the random value comprises an elapsed time since a previous transaction.

24. The system of claim 22, wherein the random value comprises a time of occurrence of a last transaction.

25. The system of claim 22, wherein the random value comprises Greenwich Mean Time (GMT).

26. A machine-readable medium having stored thereon a series of instructions which, when executed by a processor, cause the processor to authorize a financial transaction utilizing an electronic payment credential by:

maintaining information identifying an account associated with the electronic payment credential, the information identifying one or more electronic devices authorized to use the electronic payment credential;

receiving a request to authorize the transaction, wherein the request includes information identifying an electronic device presenting the payment credential; and

authorizing the transaction based at least in part on the information identifying the account, wherein authorizing comprises determining the electronic device presenting the payment credential is one of the electronic devices authorized to use the electronic payment credential.

27. The machine-readable medium of claim 26, wherein the electronic payment credential comprises a credential representing a pre-paid account.

28. The machine-readable medium of claim 27, wherein the pre-paid account comprises a gift card account.

29. The machine-readable medium of claim 26, wherein the information identifying the electronic device presenting the payment credential comprises a unique static identifier.