PORTABLE CONSUMER DEVICE VERIFICATION SYSTEM

• US 20110004526A1
• Filed: 09/15/2010
• Published: 01/06/2011
• Est. Priority Date: 06/19/2006
• Status: Active Grant

• Current Assignee: Ayman Hammad, Patrick Faith
• Original Assignee: Ayman Hammad, Patrick Faith
• Inventors: Faith, Patrick, Hammad, Ayman
• Granted Patent: US 8,489,506 B2
• Time in Patent Office: Days
• US Class Current: 705/16
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A method for verifying a portable consumer device. The method includes receiving an authorization request message associated with a transaction conducted using a portable consumer device. The portable consumer device includes a portable consumer device fingerprint. The authorization request message includes an altered portable consumer device fingerprint and an algorithm identifier. The method also includes selecting an algorithm from among a plurality of algorithms using the algorithm identifier, determining the portable consumer device fingerprint using selected algorithm and the altered portable consumer device fingerprint, determining if the portable consumer device fingerprint matches a stored portable consumer device fingerprint, and sending an authorization response message after determining if the portable consumer device fingerprint matches the stored portable consumer device fingerprint.

Claims

1-20. -20. (canceled)

21. A method comprising:

receiving an authorization request message, wherein the authorization request message is generated after an interaction between a portable consumer device and an access device;

analyzing the authorization request message for one or more characteristics or the portable consumer device or the access device to determine if a confidence threshold is met or exceeded; and

if the confidence threshold is not exceeded, performing additional authentication processing.

22. The method of claim 21 wherein the one or more characteristics of the portable consumer device include a particular portable consumer device used.

23. The method of claim 21 wherein the one or more characteristics of the access device include a particular algorithm used to alter a portable consumer device fingerprint associated with the portable consumer device.

24. The method of claim 23 wherein analyzing the authorization request message comprises analyzing at least one characteristic of the access device and at least one characteristic of the portable consumer device to determine if the confidence threshold is met or exceeded.

25. The method of claim 24 wherein the one or more characteristics of the access device include a particular algorithm present in the access device

26. The method of claim 24 wherein the portable consumer device is a payment card.

27. The method of claim 24 wherein the portable consumer device is a phone.

28. The method of claim 24, wherein the method further comprises:

sending an authorization response message to the consumer without performing additional authentication processing if the confidence threshold is met.

29. The method of claim 21 wherein the additional authentication processing comprises sending the consumer a message to a phone operated by a consumer or to an access device used to conduct the transaction, wherein the message indicates that the transaction is occurring.

30. The method of claim 29 wherein the transaction is a payment transaction.

31. A system comprising:

means for receiving an authorization request message, wherein the authorization request message is generated after an interaction between a portable consumer device and an access device;

means for analyzing the authorization request message for one or more characteristics or the portable consumer device or the access device to determine if a confidence threshold is met or exceeded; and

means for performing additional authentication processing if the confidence threshold is not exceeded.

32. The system of claim 31 wherein the one or more characteristics of the portable consumer device include a particular portable consumer device.

33. The system of claim 31 wherein the one or more characteristics of the access device include a particular algorithm in the access device.

34. The system of claim 31 wherein the means for analyzing the authorization request message comprises means for analyzing at least one characteristic of the access device and at least one characteristic of the portable consumer device.

35. The system of claim 31 wherein the portable consumer device is a payment card.

36. A system comprising:

a server computer comprising a processor; and

computer readable medium comprising code for receiving an authorization request message, wherein the authorization request message is generated after an interaction between a portable consumer device and an access device, code for analyzing the authentication request message for one or more characteristics of the portable consumer device or the access device to determine if a confidence threshold is met or exceeded, and code for performing additional authentication processing if the confidence threshold is not exceeded.

37. The system of claim 36 further comprising an access device in operative communication with the server computer.

38. The system of claim 37 wherein the access device is a POS terminal.

39. The system of claim 36 wherein the one or more characteristics of the access device includes a particular algorithm that is used by the access device to encrypt data from the portable consumer device.

40. The system of claim 36 wherein the one or more characteristics comprises of the portable consumer device includes a particular portable consumer device.