SECURE TRANSACTION MANAGEMENT

• US 20110161233A1
• Filed: 12/30/2009
• Published: 06/30/2011
• Est. Priority Date: 12/30/2009
• Status: Active Grant

• Current Assignee: First Data Corporation (Fiserv Incorporated)
• Original Assignee: First Data Corporation (Fiserv Incorporated)
• Inventors: Tieken, Craig A.
• Granted Patent: US 8,788,429 B2
• Time in Patent Office: Days
• US Class Current: 705/71
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

Methods, systems, and devices for secure transaction management are provided. Embodiments include a method for providing secure transactions that include receiving an identifier of a financial account at a payment processor system. A token may be generated that is linked with the identifier of the financial account at the payment processor system. The identifier of the financial account and the token may be stored securely at the payment processor system. The token may be transmitted without the identifier of the financial account to at least a recipient system or a recipient device where the token replaces the identifier of the financial account.

Claims

1. A method for providing secure transactions, the method comprising:

receiving an identifier of a financial account at a payment processor system;

generating a token linked with the identifier of the financial account at the payment processor system;

storing the identifier of the financial account and the token securely at the payment processor system; and

transmitting the token without the identifier of the financial account to at least a recipient system or a recipient device where the token replaces the identifier of the financial account.

2. The method for providing secure transactions of claim 1, wherein the identifier of the financial account is selected from a group consisting of a credit card account number, a debit card account number, a checking account number, and a stored value card account number.

3. The method for providing secure transactions of claim 1, wherein the received identifier of the financial account is encrypted.

4. The method for providing secure transactions of claim 3, further comprising decrypting the encrypted identifier of the financial account using a private key associated with a public key used to encrypt the identifier of the financial account

5. The method for providing secure transactions of claim 4, further comprising transmitting the public key from the payment processor system to the recipient system or recipient device.

6. The method for providing secure transactions of claim 3, further comprising decrypting the encrypted identifier of the financial account using a symmetric key used to encrypt the identifier.

7. The method for providing secure transactions of claim 1, wherein the token has the same number of digits as the identifier of the financial account.

8. The method for providing secure transactions of claim 1, wherein the token includes a subset of digits that form a sequence of digits that are the same as in the identifier of the financial account.

9. The method for providing secure transactions of claim 8, wherein the subset of digits includes the last four digits of the identifier of the financial account.

10. The method for providing secure transactions of claim 1, wherein a first checksum from the token equals a second checksum from the identifier of the financial account.

11. The method for providing secure transactions of claim 1, wherein the recipient system or the recipient device includes at least a merchant system or a merchant device.

12. The method for providing secure transactions of claim 1, wherein the recipient system or the recipient device includes at least a service provider system or a service provider device.

13. The method for providing secure transactions of claim 1, wherein the recipient system or the recipient device includes at least an identifier of a financial account issuer system or an identifier of a financial account issuer device.

14. The method for providing secure transactions of claim 1, further comprising:

receiving the token at the payment processor system; and

performing at least a transaction adjustment, a transaction refund, or a transaction settlement using the token.

15. The method for providing secure transactions of claim 1, further comprising:

transmitting the identifier of the financial account to a financial institution system;

receiving an authorization from the financial institution system; and

transmitting the authorization to the recipient system or the recipient device.

16. The method for providing secure transactions of claim 1, further comprising:

receiving a customer identifier, wherein the customer identifier links the identifier of the financial account of a customer with a merchant or service provider;

retrieving the identifier of the financial account; and

transmitting the identifier of the financial account to a financial institution system for authorization.

17. A point-of-sale terminal for performing secure transactions, the terminal comprising:

an input component for receiving an identifier of a financial account;

a processor communicatively coupled with the input component;

an output component communicatively coupled with the processor;

a memory communicatively coupled with and readable by the processor, the memory having stored therein a series of instructions which, when executed by the processor, cause the processor to;

detect reception of the identifier of the financial account;

transmit the identifier of the financial account to the output component for transmission to a payment processor system;

detect reception of a token from the payment processor system; and

replace the identifier of the financial account with the token.

18. The point-of-sale terminal for performing secure transactions of claim 17, wherein the series of instructions further comprises instructions causing the processor to encrypt the identifier of the financial account.

19. The point-of-sale terminal for performing secure transactions of claim 18, wherein encrypting the identifier of the financial account utilizes an asymmetric key.

20. The point-of-sale terminal for performing secure transactions of claim 19, wherein the series of instructions further comprises instructions causing the processor to store the asymmetric key.

21. The point-of-sale terminal for performing secure transactions of claim 17, wherein the series of instructions further comprises instructions causing the processor initiate at least a transaction adjustment, a transaction refund, or a transaction settlement using the token.

22. A system for performing secure transactions, the system comprising:

a storage medium;

a processor coupled with the storage medium, the processor configured to secure a financial transaction by a configuration to;

receive an identifier of a financial account at a payment processor system;

generate a token linked with the identifier of the financial account at the payment processor system;

store the identifier of the financial account and the token securely at the payment processor system; and

transmit the token without the identifier of the financial account to at least a recipient system or a recipient device where the token replaces the identifier of the financial account.