SYSTEM AND METHOD FOR GENERATING A DYNAMIC CARD VALUE

• US 20110184867A1
• Filed: 01/25/2011
• Published: 07/28/2011
• Est. Priority Date: 01/27/2010
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Arcot Systems, Inc. (Broadcom, Inc.)
• Inventors: Varadarajan, Rammohan
• Granted Patent: US 8,615,468 B2
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/3433 the counter having monetary units
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4018 using the card verification value [CVV] associated with the card

Abstract

A method and system is provided for generating a dynamic card value (DCV) from a mobile user device for use in a transaction between a user cardholder and a transaction provider. The DCV may be configured for use as a card verification value (CVV), also known as a card security code (CSC), a primary account number (PAN), or a portion of a PAN. The DCV may be generated using a DCV generator which may include an algorithm and a DCV generation key. The DCV generation key may be camouflaged. Obtaining a DCV from the user device may require inputting a PIN, a device identifier, a challenge or transaction information. The DCV may be used for any transaction requiring the input of a user identification number and a verification value, including, credit card transactions, debit card transactions, online or telephonic transactions.

Claims

1. A method for generating a dynamic card value (DCV) configured for use in a transaction between a user and a transaction provider, comprising:

generating a DCV from a user device;

wherein the DCV is configured for input into a transaction interface;

inputting the DCV into the transaction interface;

verifying the DCV using a transaction system; and

using the verified DCV as a user DCV for the transaction.

2. The method of claim 1, wherein the DCV is configured as one of a Card Verification Code (CVC), Card Verification Value (CVV, CVV2 or CV2), Card Security Code (CSC), primary account number (PAN), account number, partial PAN and a portion of an account number.

3. The method of claim 1, wherein the DCV is configured for input into the transaction interface as one of a character string of one or more alphanumeric or special characters, a datum or an electronic signal transmittable from the user device, a datum or an electronic signal generated by the user device, and a human-readable output.

4. The method of claim 1, wherein generating the DCV from the user device further includes inputting a PIN into the user device.

5. The method of claim 4, further comprising:

generating a device identifier which identifies the user device;

wherein the device identifier is input into the user device as the PIN.

6. The method of claim 4, wherein the PIN may be configured for input into the user device as one of or a combination of a character string of one or more alpha-numeric or special characters, a datum or an electronic signal transmittable from the user device, a datum or an electronic signal generated by the user device, and a biometric parameter including one of a voice print, retinal print and fingerprint.

7. The method of claim 1, wherein generating the DCV from the user device further includes:

providing a DCV generator to the user device; and

generating the DCV using the DCV generator;

wherein the DCV generator includes a DCV generating algorithm.

8. The method of claim 1, further comprising:

using a DCV generation key to generate a DCV from the user device.

9. The method of claim 8, further comprising:

camouflaging the DCV generation key using at least one of encryption, obfuscation and cryptographic camouflage.

10. The method of claim 8, wherein the DCV generation key is one of a symmetric key, a Data Encryption Standard (DES) key, an Advanced Encryption Standard (AES) key, a non-symmetric key, a secret, a secret byte array, a Card Verification Key (CVK), Unique DEA Key A (UDKA), a Unique DEA Key B (UDKB), a seed or an indexed key list.

11. The method of claim 1, wherein generating the DCV from the user device further includes inputting a challenge into the user device.

12. The method of claim 1, wherein the transaction is configured as one of a credit card transaction, a debit card transaction and a payment card transaction.

13. The method of claim 1, wherein the transaction interface is one of an online interface, a secure access terminal, a telephone, a fax machine, a printed order form, an online order form, an online shopping cart, an automatic teller machine (ATM) terminal, a point of sale (POS) terminal, a transponder, a receptor, a scanner, a receiver, and a combination thereof.

14. The method of claim 1, wherein the user device includes a telephone.

15. A system for generating a dynamic card value (DCV) configured for use in a transaction between a user and a transaction provider, comprising:

a transaction interface configured to receive and transmit a card value;

a user device configured to provide the DCV;

a transaction server configured to verify the DCV as an authentic user card value;

wherein the transaction server and transaction interface are in operable communication with each other so as to authorize a transaction upon verification of the DCV.

16. The system of claim 15, wherein the DCV is configured as one of a Card Verification Code (CVC), Card Verification Value (CVV, CVV2 or CV2), Card Security Code (CSC), primary account number (PAN), account number, partial PAN and a portion of an account number.

17. The system of claim 15, further comprising:

a DCV generator configured to generate at least one DCV on the user device.

18. The system of claim 17, further comprising a provisioning server adapted to configure the DCV generator for the user device.

19. The system of claim 15, further comprising a DCV generation key.

20. The system of claim 15, further comprising an algorithm recorded on tangible, non-transitory memory, and configured to generate at least one DCV.