VERIFICATION OF PORTABLE CONSUMER DEVICES

• US 20100274692A1
• Filed: 05/14/2010
• Published: 10/28/2010
• Est. Priority Date: 04/28/2009
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Hammad, Ayman
• Granted Patent: US 9,715,681 B2
• Time in Patent Office: Days
• US Class Current: 705/30
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/42 Confirmation, e.g. check or permission by the legal debtor of payment
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/12 Accounting

Abstract

Embodiments of the invention are directed to methods, systems, and computer program products pertaining to obtaining, providing, and using dynamic card verification values for portable consumer devices, such as credit cards and debit cards. An exemplary method comprises receiving, at a server, a request for a device verification value for a portable consumer device associated with a user; obtaining, at the server, a datum indicative of a device verification value for a portable consumer device; and sending, from the server, the datum to at least one of a phone number or network address of a personal communication device associated with the user.

Claims

1-35. -35. (canceled)

36. A method comprising:

(a) receiving, at a server, a request for a device verification value for a portable consumer device associated with a user;

(b) obtaining, from the received request, a unique identification code assigned to the user;

(c) obtaining an account record that contains the obtained unique identification code, the account record associating a consumer account of a portable consumer device with the obtained unique identification code, the consumer account having an account number associated with it that identifies the consumer account within a payment processing network, the obtained unique identification code being different from the account number of the consumer account of the obtained account record;

(d) obtaining a datum indicative of a device verification value for the consumer account of the obtained account record; and

(e) sending the obtained datum to at least one of a phone number or network address of a personal communication device associated with the consumer account of the obtained account record.

37. The method of claim 36, wherein the obtained account record associates a plurality of consumer accounts of portable consumer devices with the obtained unique identification code, and wherein the method further comprises selecting one of the consumer accounts from the obtained account record as the consumer account for which the datum is obtained.

38. The method of claim 37, wherein the obtained account record stores one or more account numbers of one or more consumer accounts, each consumer account associated with a portable consumer device;

wherein the method further comprises obtaining an incomplete account number from the received request; and

wherein selecting a consumer account of the portable consumer device comprises comparing the obtained incomplete account number to the one or more account numbers stored in the obtained account record to find a match between the incomplete account number and a portion of one of the stored account numbers.

39. The method of claim 37, wherein the obtained account record stores one or more code phrases of one or more consumer accounts, each consumer account corresponding to a portable consumer device;

wherein the method further comprises obtaining a code phrase from the received request; and

wherein selecting a consumer account of the portable consumer device comprises comparing the obtained code phrase to the one or more code phrases stored in the obtained account record to find a match between the obtained code phrase and a stored code phrase.

40. The method of claim 36, further comprising sending a datum indicative of the device verification value for the consumer account and an indication of the consumer account to an entity different from the personal communication device associated with the consumer account.

41. The method of claim 36, wherein the consumer account is provided by an issuing bank, and wherein the method further comprising sending a datum indicative of the device verification value for the consumer account and an indication of the consumer account to the issuing bank.

42. The method of claim 36, wherein transmitting the datum indicative of the device verification value further comprises transmitting an indication of a time period in which the device verification value can be used for a transaction.

43. The method of claim 36, wherein the obtained account record comprises a data field that indicates the route by which the datum indicative of a device verification value is to be sent, and wherein the method further comprises accessing the data field to determine the phone number or network address to which to send the datum.

44. The method of claim 36, further comprising comparing the consumer account against a database that tracks consumer accounts that have been used in fraudulent activities.

45. The method of claim 36, further comprising sending an e-mail message to an e-mail address of the user notifying the user of one or more of the following occurrences:

a request for a device verification value, a sending of a device verification value, a denial of a request for a device verification value.

46. A computer program product embodied on a computer-readable medium, the product comprising:

code that directs a data processor to receive a request for a device verification value for a portable consumer device associated with a user;

code that directs the data processor to obtain, from the received request, a unique identification code assigned to the user;

code that directs the data processor to obtain an account record that contains the obtained unique identification code, the account record associating a consumer account of a portable consumer device with the obtained unique identification code, the consumer account having an account number associated with it that identifies the consumer account within a payment processing network, the obtained unique identification code being different from the account number of the consumer account of the obtained account record;

code that directs the data processor to obtain a datum indicative of a device verification value for the consumer account of the obtained record; and

code that directs the data processor to send the obtained datum to at least one of a phone number or network address of a personal communication device associated with the consumer account of the obtained account record.

47. The product of claim 46, wherein the obtained account record associates a plurality of consumer accounts of portable consumer devices with the obtained unique identification code, and wherein the product further comprises code that directs the data processor to select one of the consumer accounts from the obtained account record as the consumer account for which the datum is obtained.

48. The computer program product of claim 47, wherein the obtained account record stores one or more account numbers of one or more consumer accounts, each consumer account associated with a portable consumer device;

wherein the computer program product further comprises code that directs the data processor to obtain an incomplete account number from the received request; and

wherein the code that directs the data processor to select a consumer account of the portable consumer device comprises code that directs the data processor to compare the obtained incomplete account number to the one or more account numbers stored in the obtained account record to find a match between the incomplete account number and a portion of one of the stored account numbers.

49. The computer program product of claim 47, wherein the obtained account record stores one or more code phrases of one or more consumer accounts, each consumer account associated with a portable consumer device;

wherein the computer program product further comprises code that directs the data processor to obtain a code phrase from the received request; and

wherein the code that directs the data processor to select a consumer account of the portable consumer device comprises code that directs the data processor to compare the obtained code phrase to the one or more code phrases stored in the obtained account record to find a match between the obtained code phrase and a stored code phrase.

50. The computer program product of claim 46, further comprising code that directs the data processor to send a datum indicative of the device verification value for the consumer account and an indication of the consumer account to an entity different from the personal communication device associated with the consumer account.

51. The computer program product of claim 46, wherein the consumer account is provided by an issuing bank, and wherein the computer program product further comprises code that directs the data processor to send a datum indicative of the device verification value for the consumer account and an indication of the consumer account to the issuing bank.

52. The computer program product of claim 46, further comprising code that directs the data processor to send an indication of a time period in which the device verification value can be used for a transaction.

53. The computer program product of claim 46, wherein the obtained account record stores one or more method data fields of one or more consumer accounts, each method data field indicating an algorithm to be used to generate a device verification value;

wherein the code that directs the data processor to obtain a datum indicative of a device verification value for the consumer account comprises code that directs the data processor to obtain an indication of an algorithm from a method data field of the obtained account record and to execute the algorithm for which the indication was obtained.

54. The computer program product of claim 46, wherein the obtained account record stores one or more data fields of one or more consumer accounts, each data field holding at least one datum indicative of a device verification value;

wherein the code that directs the data processor to obtain a datum indicative of a device verification value for the consumer account comprises code that directs the data processor to obtain a datum indicative of a device verification value from a data field of the obtained account record.

55. The computer program product of claim 46, wherein the code that directs the data processor to obtain a datum indicative of a device verification value for the consumer account comprises code that directs the data processor to determine the identity of the issuing bank from the consumer account, to send an electronic message to the issuing bank to request a datum indicative of a device verification value, and to receive a datum indicative of a device verification value from the issuing bank.

56. The computer program product of claim 46, wherein the obtained account record stores at least one of a phone number or network address of a personal communication device associated with the consumer account;

and

wherein the code that directs the data processor to send the obtained datum comprises code that directs the data processor to obtain the at least one of a phone number or network address from the obtained account record.

57. The computer program product of claim 46, wherein the request is received in the form of a computer-readable data message sent from a short message server gateway, and wherein the computer program product further comprises code that directs the data processor to obtain the network address of the gateway from the received data message, to access a database that stores the network addresses of trusted short message server gateways to determine if the obtained network address is found in the accessed database.

58. The computer program product of claim 46, further comprising code that directs the data processor to compare the consumer account against a database that tracks consumer accounts that have been used in fraudulent activities.

59. The computer program product of claim 46, further comprising code that directs the data processor to send an e-mail message to an e-mail address of the user notifying the user of one or more of the following occurrences:

a request for a device verification value, a sending of a device verification value, a denial of a request for a device verification value.

60-85. -85. (canceled)