DEVICE INCLUDING ENCRYPTED DATA FOR EXPIRATION DATE AND VERIFICATION VALUE CREATION

• US 20100299267A1
• Filed: 05/12/2010
• Published: 11/25/2010
• Est. Priority Date: 05/20/2009
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Faith, Patrick, Koganti, Krishna Prasad
• Granted Patent: US 10,140,598 B2
• Time in Patent Office: Days
• US Class Current: 705/76
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

In order to make it more difficult to obtain numbers that can be used to conduct fraudulent transactions, a portion of a real account number is encrypted. The encrypted portion of the account number is used to generate a new account number, a new expiration date, and a new verification value. This information can be determined using processor that may reside in a point of sale terminal, a smart card, or a computer operated by a user. The new account number, the new expiration date, and the new verification value can be used in a payment transaction. A server computer in a central payment processing network may determine that the new account information is not the real account information, and may subsequently generate a modified authorization request message using the real account information and may send it to an issuer for approval. The transmission of data is more secure, since real account information is not sent from the merchant to the payment processing network.

Claims

1. A method comprising:

encrypting, using a processor, a portion of a first account number to form an encrypted portion, the first account number being associated with a first expiration date and a first verification value; and

determining a second expiration date or a second verification value using a segment of the encrypted portion.

2. The method of claim 1 wherein the segment is a first encrypted portion segment, and wherein determining the second expiration date using the first encrypted portion comprises determining the second expiration date using the first encrypted portion segment.

3. The method of claim 2 wherein determining the second expiration date using the first encrypted portion segment comprises mapping the first encrypted portion to the second expiration date.

4. The method of claim 3 further comprising determining the second verification value using a second encrypted portion segment of the encrypted portion.

5. The method of claim 4 further comprising forming a second account number using a third encrypted portion segment of the encrypted portion.

6. The method of claim 5 wherein the second account number comprises a signal segment, the third encrypted portion segment, and an unencrypted portion of the first account number.

7. The method of claim 5 wherein the third encrypted portion segment consists of exactly four digits.

8. A computer readable medium comprising code, executable by a processor, for implementing a method comprising:

encrypting, using a processor, a portion of a first account number to form an encrypted portion, the first account number being associated with a first expiration date and a first verification value; and

determining a second expiration date or a second verification value using a segment of the encrypted portion.

9. The computer readable medium of claim 8 wherein the segment is a first encrypted portion segment, and wherein determining the second expiration date or the second verification value using the first encrypted portion comprises determining the second expiration date using the first encrypted portion segment.

10. The computer readable medium of claim 9 wherein determining the second expiration date using the first encrypted portion segment comprises mapping the first encrypted portion to the second expiration date.

11. The computer readable medium of claim 10 further comprising determining the second verification value using a second encrypted portion segment of the encrypted portion.

12. The computer readable medium of claim 11 further comprising forming a second account number using a third encrypted portion segment of the encrypted portion.

13. The computer readable medium of claim 12 wherein the second account number comprises a signal segment, the third encrypted portion segment, and an unencrypted portion of the first account number.

14. The computer readable medium of claim 13 wherein the third encrypted portion segment consists of exactly for digits.

15. A computer apparatus comprising the computer readable medium of claim 8, and the processor, coupled to the computer readable medium.

16. A method comprising:

receiving an initial authorization request message comprising a second account number, and at least one of a second expiration date and a second verification value;

determining, using a server computer, a first account number, a first expiration date, and a first verification value from the second account number; and

sending a modified authorization request message to an issuer, wherein the modified authorization request message comprises the first account number, the first expiration date, and the first verification value,

wherein the first verification value is different than the second verification value and the first expiration date is different than the second expiration date.

17. The method of claim 16 wherein the initial authorization request message comprises the second account number, the second expiration date, and the second verification value.

18. The method of claim 16 wherein the second account number comprises a signal segment, which informs the server computer to generate the modified authorization request message.

19. The method of claim 16 wherein the first account number, the first expiration date, and the first verification value are associated with a debit or credit card.

20. A computer readable medium comprising code, executable by a processor, for implementing the method of claim 16.

21. A server computer comprising the computer readable medium and the processor coupled to the computer readable medium.