Verification of Portable Consumer Devices

• US 20100293189A1
• Filed: 05/11/2010
• Published: 11/18/2010
• Est. Priority Date: 05/15/2009
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Hammad, Ayman
• Granted Patent: US 8,020,766 B2
• Time in Patent Office: Days
• US Class Current: 707/769
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/3255 using mobile network messaging services for payment, e.g. SMS
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation

Abstract

Embodiments of the invention are directed to methods, systems, and computer program products pertaining to obtaining, providing, and using dynamic card verification values for portable consumer devices, such as credit cards and debit cards. An exemplary method comprises receiving, at a server, a request for a device verification value for a portable consumer device associated with a user; obtaining, at the server, a datum indicative of a device verification value for a portable consumer device; and sending, from the server, the datum to at least one of a phone number or network address of a personal communication device associated with the user.

Claims

1. A method comprising:

(a) receiving, at a server, a request for a device verification value for a portable consumer device associated with a user, the request originating from a personal communication device associated with the user;

(b) obtaining, from the received request, a phone number or network address of the personal communication device from which the received request was originated;

(c) obtaining an account record that contains the obtained phone number or network address, the account record associating one or more consumer accounts of portable consumer devices with the obtained phone number or network address;

(d) selecting a consumer account from the obtained account record;

(e) obtaining a datum indicative of a device verification value for the selected consumer account; and

(f) sending the obtained datum to at least one of a phone number or network address of a personal communication device associated with the selected consumer account.

2. The method of claim 1, wherein the account record stores one or more account numbers of one or more consumer accounts, each consumer account corresponding to a portable consumer device;

wherein the method further comprises obtaining an incomplete account number from the received request; and

wherein identifying a consumer account of the portable consumer device comprises comparing the obtained incomplete account number to the one or more account numbers stored in the obtained account record to find a match between the incomplete account number and a portion of one of the stored account numbers.

3. The method of claim 1, wherein the account record stores one or more code phrases of one or more consumer accounts, each consumer account corresponding to a portable consumer device;

wherein the method further comprises obtaining a code phrase from the received request; and

wherein identifying a consumer account of the portable consumer device comprises comparing the obtained code phrase to the one or more code phrases stored in the obtained account record to find a match between the obtained code phrase and a stored code phrase.

4. The method of claim 1, further comprising sending a datum indicative of the device verification value for the selected consumer account and an indication of the selected consumer account to an entity different from the personal communication device associated with the selected consumer account.

5. The method of claim 1, wherein transmitting the datum indicative of the device verification value further comprises transmitting an indication of a time period in which the device verification value can be used for a transaction.

6. The method of claim 1, wherein obtaining the datum indicative of a device verification value comprises generating the datum from an algorithm.

7. The method of claim 1, wherein obtaining the datum indicative of the device verification value comprises obtaining the datum from a data storage device.

8. The method of claim 1, wherein transmitting the datum indicative of the device verification value comprises transmitting said datum to a phone number of the personal communications device.

9. The method of claim 1, wherein transmitting the datum indicative of the device verification value comprises transmitting said datum to a network address of the personal communications device via a communications facility of the server, the communications facility being coupled to a communications network.

10. The method of claim 1 wherein obtaining a datum representative of a device verification value comprises:

selecting a process of generating the device verification value based upon the selected consumer account.

11. A computer program product embodied on a computer-readable medium, the product comprising:

code that directs a data processor to receive a request for a device verification value for a portable consumer device associated with a user, the request originating from a personal communication device associated with the user;

code that directs the data processor to obtain, from the received request, a phone number or network address of the personal communication device from which the received request was originated;

code that directs the data processor to obtain an account record that contains the obtained phone number or network address, the account record associating one or more consumer accounts of portable consumer devices with the obtained phone number or network address;

code that directs the data processor to select a consumer account from the obtained account record;

code that directs the data processor to obtain a datum indicative of a device verification value for the selected consumer account; and

code that directs the data processor to send the obtained datum to at least one of a phone number or network address of a personal communication device associated with the selected consumer account.

12. The computer program product of claim 11, wherein the obtained account record stores one or more account numbers of one or more consumer accounts, each consumer account corresponding to a portable consumer device;

wherein the computer program product further comprises code that directs the data processor to obtain an incomplete account number from the received request; and

wherein the code that directs the data processor to identify a consumer account of the portable consumer device comprises code that directs the data processor to compare the obtained incomplete account number to the one or more account numbers stored in the obtained account record to find a match between the incomplete account number and a portion of one of the stored account numbers.

13. The computer program product of claim 11, wherein the obtained account record stores one or more code phrases of one or more consumer accounts, each consumer account corresponding to a portable consumer device;

wherein the computer program product further comprises code that directs the data processor to obtain a code phrase from the received request; and

wherein the code that directs the data processor to identify a consumer account of the portable consumer device comprises code that directs the data processor to compare the obtained code phrase to the one or more code phrases stored in the obtained account record to find a match between the obtained code phrase and a stored code phrase.

14. The computer program product of claim 11, further comprising code that directs the data processor to send a datum indicative of the device verification value for the selected consumer account and an indication of the selected consumer account to an entity different from the personal communication device associated with the selected consumer account.

15. The computer program product of claim 11, further comprising code that directs the data processor to send an indication of a time period in which the device verification value can be used for a transaction.

16. The computer program product of claim 11, wherein the obtained account record stores one or more method data fields of one or more consumer accounts, each method data field indicating an algorithm to be used to generate a device verification value;

wherein the code that directs the data processor to obtain a datum indicative of a device verification value for the selected consumer account comprises code that directs the data processor to obtain an indication of an algorithm from a method data field of the obtained account record and to execute the algorithm for which the indication was obtained.

17. The computer program product of claim 11, wherein the obtained account record stores one or more data fields of one or more consumer accounts, each data field holding at least one datum indicative of a device verification value;

wherein the code that directs the data processor to obtain a datum indicative of a device verification value for the selected consumer account comprises code that directs the data processor to obtain a datum indicative of a device verification value from a data field of the obtained account record.

18. The computer program product of claim 11, wherein the code that directs the data processor to obtain a datum indicative of a device verification value for the selected consumer account comprises code that directs the data processor to determine the identity of the issuing bank from the selected consumer account, to send an electronic message to the issuing bank to request a datum indicative of a device verification value, and to receive a datum indicative of a device verification value from the issuing bank.

19. The computer program product of claim 11, wherein the obtained account record stores at least one of a phone number or network address of a personal communication device associated with the selected consumer account;

and

wherein the code that directs the data processor to send the obtained datum comprises code that directs the data processor to obtain the at least one of a phone number or network address from the obtained account record.

20. The computer program product of claim 11, wherein the request is received in the form of a computer-readable data message sent from a short message server gateway, and wherein the computer program product further comprises code that directs the data processor to obtain the network address of the gateway from the received data message, to access a database that stores the network addresses of trusted short message server gateways to determine if the obtained network address is found in the accessed database.