SYSTEM AND METHOD FOR SECURELY VALIDATING TRANSACTIONS

• US 20110270757A1
• Filed: 04/07/2011
• Published: 11/03/2011
• Est. Priority Date: 04/09/2010
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Hammad, Ayman
• Granted Patent: US 10,373,138 B2
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/4018 using the card verification value [CVV] associated with the card
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

Systems and methods for validating and processing payment transactions are disclosed. In the embodiments of the invention a first authorization request message and a first verification value are received at a server computer. The verification value is validated and a second authorization request message with a second verification value is generated. The first verification value may be a dynamic value and the second verification value may be static value. The second verification value is associated with portable device used to perform a transaction and it is what the issuer computers of the portable device expect to receive as part of an authorization request message in a payment transaction.

Claims

1. A server computer comprising:

a processor; and

a computer readable medium coupled to the processor, wherein the computer readable medium includes code executable by the processor for implementing a method comprising;

receiving a first authorization request message comprising a first verification value;

determining whether the first verification value is valid;

creating a second authorization request message comprising a second verification value; and

sending the second authorization request message to an issuer computer.

2. The system of claim 1, wherein the first verification value is a dynamic verification value.

3. The system of claim 1, wherein the second verification value is a static verification value.

4. The system of claim 1, further comprising:

sending a validation indicator in the second authorization request message to the server computer, wherein the validation indicator indicates whether the first verification value is valid.

5. The system of claim 1, wherein the server computer is a first server computer, and wherein the method further comprises:

receiving a duplicate copy of the first verification value from a second server computer, wherein the second server computer is operated by an IP Gateway.

6. The system of claim 5, wherein determining whether the first verification value is valid further comprises comparing the first verification value from the first authorization request message with the verification value received from the server computer operated by the IP Gateway.

7. The system of claim 1, wherein the second verification value is generated based on the transaction data in the first authorization request message

8. The system of claim 1, wherein the second verification value is associated with a portable device.

9. The system of claim 1, wherein the first authorization request message includes data associated with a portable device.

10. The system of claim 9, wherein the portable device is a payment card.

11. The system of claim 9, wherein the portable device is a mobile phone.

12. The system of claim 1, wherein the second authorization request message is in a magnetic stripe data format.

13. The system of claim 1, further comprising:

determining whether the first authorization request message includes a static verification value associated with a portable device when the first verification value is not valid.

14. A method comprising:

receiving a first authorization request message comprising a first verification value;

determining whether the first verification value is valid;

creating a second authorization request message comprising a second verification value; and

sending the second authorization request message to a server computer.

15. The method of claim 14, further comprising:

determining whether the first authorization request message includes a static verification value associated with a portable device when the first verification value is not valid.

16. The method of claim 14, further comprising:

sending a validation indicator in the second authorization request message to the server computer, wherein the validation indicator indicates whether the first verification value is valid.

17. The method of claim 14, wherein the first verification value is a dynamic verification value and wherein the second verification value is a static verification value.

18. The method of claim 14, wherein the second verification value is generated based on the data in the first authorization request message.

19. A method comprising:

receiving an authorization request message associated with a payment transaction from a first server computer;

receiving a validation indicator from the first server computer, wherein the validation indicator indicates whether a verification value associated with the payment transaction is valid; and

generating an authorization response message based on the validation indicator.

20. The method of claim 19, wherein the verification value is further associated with a portable device.

21. The method of claim 20, where in the portable device is a payment card.

22. The method of claim 20, wherein the portable device is a mobile phone.