METHODS AND SYSTEMS TO SECURELY LOARD / RELOAD A CONTACTLESS PAYMENT DEVICE

• US 20100131413A1
• Filed: 08/06/2009
• Published: 05/27/2010
• Est. Priority Date: 08/06/2008
• Status: Active Grant

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Wankmueller, John R., Garrett, Duncan, Kranzley, Arthur D.
• Granted Patent: US 9,454,865 B2
• Time in Patent Office: Days
• US Class Current: 705/66
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/349 Rechargeable cards
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02

Abstract

Embodiments allow loading and reloading contactless payment devices using only a contactless terminal interface, while providing user authentication. The contactless terminal interface could be at a merchant POS location, kiosk, or embedded or attached to a personal computing device with contactless read/write capability such as a personal computer or mobile phone or Internet device.

Claims

1. A method for operating a terminal, comprising:

receiving a request to load value onto a contactless payment device, including a requested load amount;

receiving, from said contactless payment device over a contactless interface, a load authorization request;

transmitting said load authorization request to an issuer of said contactless payment device for authorization processing; and

receiving a load authorization response from said issuer and forwarding said authorization response to said contactless payment device over said contactless interface for said contactless payment device to complete said request to load value.

2. The method of claim 1, wherein said receiving a request to load value is received at a data entry device associated with said terminal.

3. The method of claim 1, wherein said load authorization request includes a cryptogram signed by said contactless payment device using a key associated with said contactless payment device.

4. The method of claim 1, wherein said load authorization request includes said requested load amount.

5. The method of claim 1, wherein said transmitting said load authorization request is performed over a payment network.

6. The method of claim 1, wherein said issuer is at least one of:

the issuer of said contactless payment device, and an agent of said issuer.

7. The method of claim 1, wherein said authorization processing includes verifying said cryptogram and determining whether funds are available to be loaded onto said contactless payment device.

8. The method of claim 7, wherein said determining whether funds are available includes verifying a funding source associated with a holder of said contactless payment device.

9. The method of claim 1, wherein said load authorization response includes a cryptogram signed by said issuer of said contactless payment device.

10. The method of claim 9, wherein said load authorization response includes at least one of an authorization approval and an authorization denial.

11. The method of claim 1, wherein said contactless payment device completes said request to load value includes:

determining if the authorization response is valid and includes an authorization approval;

transmitting a PIN request over said contactless interface;

receiving a PIN response over said contactless interface;

validating said PIN response by comparing said PIN response to a stored PIN; and

updating a memory of said contactless payment device with said load amount if said PIN is validated.

12. The method of claim 1, wherein said transaction comprises more than one contactless communication session between said contactless payment device and said terminal.

13. The method of claim 12, wherein a memory of said contactless payment device stores a state of each of said communication sessions for use in a subsequent session.