DYNAMIC PRIMARY ACCOUNT NUMBER (PAN) AND UNIQUE KEY PER CARD

• US 20100185545A1
• Filed: 01/22/2009
• Published: 07/22/2010
• Est. Priority Date: 01/22/2009
• Status: Active Grant

• Current Assignee: First Data Corporation (Fiserv Incorporated)
• Original Assignee: First Data Corporation (Fiserv Incorporated)
• Inventors: Klotz, Robert P., Royyuru, Vijay K.
• Granted Patent: US 10,037,524 B2
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/16 the keys or algorithms being changed during operation

Abstract

Methods, systems, and machine-readable media are disclosed for handling information related to a financial transaction including utilizing dynamic cryptograms. According to one embodiment, a method of processing a financial transaction related to a financial account can comprise detecting initiation of the transaction with a device used as a presentation instrument in the transaction. A Dynamic Transaction Cryptogram (DTC) and a dynamic PAN can be generated at the device. The DTC can be used to authenticate the transaction and the dynamic PAN can comprise an encrypted form of a real PAN of the financial account that is valid for a single transaction. The DTC and the dynamic PAN can be provided by the device for use in the transaction.

Claims

1. A method of processing a financial transaction related to a financial account having a real Primary Account Number (PAN), the method comprising:

detecting initiation of the transaction with a device used as a presentation instrument in the transaction;

generating a Dynamic Transaction Cryptogram (DTC) that is valid for a single transaction;

generating a dynamic PAN at the device, the dynamic PAN comprising an encrypted form of the real PAN that is valid for the single transaction; and

providing the DTC and the dynamic PAN from the device for use in the transaction.

2. The method of claim 1, wherein generating the dynamic PAN is based on the real PAN, an Institution Key Card Variant (IKCV) that is a variant of an institution key of an issuer of the financial account stored in the device, and an undeterminable number generated or received by the device.

3. The method of claim 2, wherein generating the dynamic PAN comprises:

reading the real PAN from a memory of the device;

generating Pseudo-PAN-Dynamic-Data (PPDD) representing the real PAN by combining the real PAN with the undeterminable number; and

encrypting the PPDD using the IKCV.

4. The method of claim 3, further comprising including an unencrypted portion of the real PAN to the dynamic PAN.

5. The method of claim 4, wherein the portion of the real PAN comprises less than all of the real PAN and includes information for routing of the transaction to a financial institution.

6. The method of claim 5, wherein a right-most four digits of the real PAN are retained and re-used on a printed receipt.

7. The method of claim 5, wherein the dynamic PAN is constructed with a new prefix of 6 or more left-most digits, such that routing of the transactions using the new prefix results in the transaction being delivered to a payment processor with keys and capability to decrypt the dynamic PAN.

8. The method if claim 5, wherein the dynamic PAN passes a check digit editing of a Luhn check digit algorithm.

9. The method of claim 1, wherein providing the DTC and the dynamic PAN from the device for use in the transaction comprises providing the DTC and the dynamic PAN to a Point-of-Sale (POS) device.

10. The method of claim 9, further comprising providing the DTC and the dynamic PAN from the POS device to a payment processor system.

11. The method of claim 10, further comprising authenticating the transaction at the payment processor system based on the DTC.

12. The method of claim 10, further comprising authenticating the transaction at a financial institution based on the DTC.

13. The method of claim 11, further comprising determining the real PAN of the financial account at the payment processor system.

14. The method of claim 13, wherein determining the real PAN comprises decrypting the dynamic PAN using an institution key of an issuer of the financial account.

15. The method of claim 14, further comprising submitting the real PAN from the payment processor system to a financial institution to affect processing of the transaction.

16. The method of claim 1, wherein generating the DTC comprises:

creating a PAN digit string (DTCPAN);

creating a variant string (DTCVAR) from DTCPAN;

converting DTCPAN and DTCVAR to binary;

generating data (DTCDATA) from the converted DTCPAN and DTCVAR;

encrypting DTCDATA with a unique card-level key;

converting the encrypted DTCDATA to decimal form; and

selecting the DTC from the decminal form of the encrypted DTCDATA.

17. A device for initiating a financial transaction related to a financial account, the device comprising:

a processor;

an output device communicatively coupled with the processor; and

a memory communicatively coupled with and readable by the processor, the memory having stored therein a real Primary Account Number (PAN) for the financial account, a unique, card-level key, and an Institution Key Card Variant (IKCV) that is a variant of an institution key of an issuer of the financial account and wherein the memory further has stored therein a series of instructions which, when executed by the processor, cause the processor to detect initiation of the transaction, generate a Dynamic Transaction Cryptogram (DTC) using the unique card-level key and a dynamic PAN based on the real PAN, the IKCV, and an undeterminable number and provide the DTC and the dynamic PAN to the output device.

18. The device of claim 17, wherein generating the dynamic PAN comprises reading the real PAN from the memory of the device, generating Pseudo-PAN-Dynamic-Data (PPDD) representing the real PAN by combining the real PAN with the undeterminable number, and encrypting the PPDD using the IKCV.

19. The device of claim 18, wherein generating the dynamic PAN further comprises including an unencrypted portion of the real PAN to the dynamic PAN.

20. The device of claim 19, wherein the portion of the real PAN comprises less than all of the real PAN and includes information for routing of the transaction to a financial institution.

21. The device of claim 20, wherein a right-most four digits of the real PAN are retained and re-used as a last four digits of the dynamic PAN on a printed receipt.

22. The device of claim 20, wherein the dynamic PAN is constructed with a new prefix of 6 or more left-most digits, such that routing of the transactions using the new prefix results in the transaction being delivered to a payment processor with keys and capability to decrypt the dynamic PAN.

23. The device if claim 19, wherein the dynamic PAN passes the check digit editing of a Luhn check digit algorithm.

24. The device of claim 17, wherein generating the DTC comprises creating a PAN digit string (DTCPAN), creating a variant string (DTCVAR) from DTCPAN, converting DTCPAN and DTCVAR to binary, generating data (DTCDATA) from the converted DTCPAN and DTCVAR, encrypting DTCDATA with a unique card-level key, converting the encrypted DTCDATA to decimal form, and selecting the DTC from the decminal form of the encrypted DTCDATA.

25. A system comprising:

device for initiating a financial transaction related to a financial account, the device having stored therein a real Primary Account Number (PAN) for the financial account, a unique, card-level key, and an Institution Key Card Variant (IKCV) that is a variant of an institution key of an issuer of the financial account and wherein the device is further adapted to detect initiation of the transaction, generate a Dynamic Transaction Cryptogram (DTC) using the unique card-level key and a dynamic PAN based on the real PAN, the IKCV, and an undeterminable number and output the DTC and the dynamic PAN; and

a payment processor system communicatively coupled with the device and adapted to receive the DTC and the dynamic PAN from the device and process the transaction based on the DTC and the dynamic PAN.

26. The system of claim 25 wherein generating the dynamic PAN comprises reading the real PAN from a memory of the device, generating Pseudo-PAN-Dynamic-Data (PPDD) representing the real PAN by combining the real PAN with the undeterminable number, and encrypting the PPDD using the IKCV.

27. The system of claim 26, wherein generating the dynamic PAN further comprises including an unencrypted portion of the real PAN to the dynamic PAN.

28. The system of claim 27, wherein the portion of the real PAN comprises less than all of the real PAN and includes information for routing of the transaction to a financial institution.

29. The system of claim 28, wherein the right-most four digits of the real PAN are retained and re-used as the last four digits of the dynamic PAN, thereby allowing the truncated PAN on the printed receipt to look the same to the customer.

30. The system of claim 28, wherein the dynamic PAN is constructed with a new prefix of 6 or more left-most digits, such that routing of the transactions using this new prefix always results in the transaction being delivered to a payment processor with the keys and capability to decrypt the dynamic PAN to the real PAN.

31. The method if claim 28, wherein the dynamic PAN passes the check digit editing as defined by the Luhn check digit algorithm.

32. The system of claim 25, wherein the payment processor system is further adapted to authenticate the transaction based on the DTC.

33. The system of claim 25, wherein the Financial Institution processes are adapted to authenticate the transaction based on the DTC.

34. The system of claim 28, wherein the payment processor system is further adapted to determine the real PAN of the financial account based on the dynamic PAN.

35. The system of claim 28, wherein the Financial Institution retains the unique card level key and authenticates the transaction by validating the DTC using the unique card level key.

36. The system of claim 34, wherein the payment processor system maintains the institution key of the issuer of the financial account and determines the real PAN by decrypting the dynamic PAN using the institution key of the issuer of the financial account.

37. The system of claim 36, wherein the payment processor system is further adapted to submit the real PAN to a financial institution to affect processing of the transaction.

38. The system of claim 25, further comprising a Point-of-Sale (POS) device communicatively coupled with the device and the payment processor system, wherein the POS device is adapted to receive the DTC and the dynamic PAN from the device and provide the DTC and the dynamic PAN to the payment processor system.