Method and System for Conducting a Transaction Using a Proximity Device and an Identifier

• US 20100228668A1
• Filed: 09/08/2009
• Published: 09/09/2010
• Est. Priority Date: 04/11/2000
• Status: Abandoned Application

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Campbell, Carl M., Hogan, Edward J., Garon, Gilles, Wankmueller, John
• Application Number:
  US12/555,688
• Publication Number:
  US 20100228668A1
• Time in Patent Office: Days
• US Class Current: 705/41
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/403 Solvency checks
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/12 Card verification
• CPC Class Codes: G07F 7/122 Online card verification

Abstract

A proximity device transmits a first dynamic authentication value contactlessly to a terminal. The first authentication value is included in a discretionary data field of message data arranged in an ISO Track 1 and/or ISO Track 2 format. Message data is sent from the terminal to an issuer. The issuer separately derives a second authentication value and compares it with the first authentication value. An identifier associated with the primary account number (PAN) is also used and transmitted instead of the PAN.

Claims

1. A method of conducting a transaction with a payment account having an associated account number and using a proximity device, comprising:

associating an identifier with said account number;

providing a processor on said proximity device programmed with logic to dynamically generate a first authentication value;

transmitting not the payment account number but the first authentication value and said identifier from the proximity device;

including the first authentication value in a discretionary data field of message data, the message being arranged in an ISO format; and

transmitting the message data including said identifier for verification.

2. The method of claim 1, further comprising:

storing said identifier in a database maintained by an issuer of said payment account;

transmitting said identifier to said issuer; and

determining at said issuer the associated account number.

3. The method of claim 1, further comprising:

storing said identifier in a database maintained at a terminal;

transmitting the first authentication value and said identifier from the proximity device to said terminal;

determining at said terminal the associated account number; and

transmitting said message data including the determined associated account number for verification.

4. The method of claim 3, wherein the message data includes a primary account field, and said determined associated account number is included in said account field.

5. The method of claim 1, wherein said identifier is further associated with an expiry date.

6. The method of claim 1, wherein said identifier is a card serial number.

7. The method of claim 1, wherein the associated identifier is not a routable account number.

8. The method of claim 1, wherein the associated identifier is formatted in a different manner than a routable account number.

9. The method of claim 3, wherein the terminal is at a merchant site.

10. The method of claim 1, wherein:

the proximity device comprises a counter; and

the first authentication value is generated by using said counter.

11. The method of claim 1, further comprising:

receiving from a terminal a random number; and

wherein the first authentication value is generated by using the number.

12. The method of claim 1, further comprising:

receiving from a terminal a random number; and

wherein;

the proximity device comprises a counter; and

the first authentication value is generated by using the counter and the number.

13. A proximity device for conducting a transaction with a payment account having an associated account number and an associated identifier, comprising:

a processor for dynamically generating a first authentication value;

an antenna coupled to said processor for transmitting not the payment account number but the first authentication value and said identifier from the proximity device; and

wherein said first authentication value is placed in a discretionary data field of message data, the message data being arranged in an ISO format.

14. A system comprising the proximity device of claim 13, further comprising:

a database maintained by an issuer of said payment account storing said identifier;

a receiver coupled to a payment network for receiving said message data arranged in an ISO format, said message including said identifier; and

a processor coupled to said receiver programmed to determine the associated account number using said identifier.

15. A system comprising the proximity device of claim 13, further comprising:

a database maintained at a terminal storing said identifier;

a receiver coupled to a payment network for receiving said message data arranged in an ISO format, said message including said identifier; and

a processor coupled to said receiver programmed to determine the associated account number using said identifier.

16. The system of claim 15, wherein the message data includes a primary account field, and said determined associated account number is included in said account field.

17. The proximity device of claim 13, wherein said identifier is further associated with an expiry date.

18. The proximity device of claim 13, wherein said identifier is a card serial number.

19. The proximity device of claim 13, wherein the associated identifier is not a routable account number.

20. The proximity device of claim 13, wherein the associated identifier is formatted in a different manner than a routable account number.

21. The system of claim 15, wherein the terminal is at a merchant site.

22. The proximity device of claim 13, wherein:

the processor comprises a counter storing a count; and

the first authentication value is generated by using the count.

23. The proximity device of claim 13, wherein:

the processor is configured to receive a random number; and

the first authentication value is generated by using the number.

24. The proximity device of claim 13, wherein:

the processor comprises a counter storing a count;

the processor is configured to receive a random number; and

the first authentication value is generated by using the count and the number.