VERIFICATION OF PORTABLE CONSUMER DEVICE FOR 3-D SECURE SERVICES

• US 20120018506A1
• Filed: 05/13/2011
• Published: 01/26/2012
• Est. Priority Date: 05/15/2009
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Hammad, Ayman, Faith, Patrick, Rewis, Ben, Louis, Brendan Xavier, Weller, Kevin, Dominguez, Benedicto Hernandez, Koganti, Krishma Prasad
• Granted Patent: US 9,105,027 B2
• Time in Patent Office: Days
• US Class Current: 235/375
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 20/42 Confirmation, e.g. check or permission by the legal debtor of payment
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869

Abstract

Apparatuses, methods, and systems pertaining to the verification of portable consumer devices for 3-D Secure Systems are disclosed. In one implementation, a verification token is coupled to a computer by a USB connection so as to use the computer'"'"'s networking facilities. The verification token reads identification information from a user'"'"'s portable consumer device (e.g., credit card) and sends the information to a validation entry over a communications network using the computer'"'"'s networking facilities. The validation entity applies one or more validation tests to the information that it receives from the verification token. If a selected number of tests are passed, the validation entity sends a 3-D Secure datum to the verification token. The verification token may enter the 3-D Secure datum into a hidden field of a Purchase Authentication Page appearing on the computer'"'"'s display.

Claims

1-41. -41. (canceled)

42. A computer program product embodied on a computer-readable medium, the product comprising:

code that directs a data processor to receive a request for a 3-D Secure datum for a portable consumer device associated with a user, the request comprising identification information pertaining to the portable consumer device;

code that directs the data processor to apply at least one validation test pertaining to the received request; and

code that directs the data processor to send, if the at least one validation test is passed, a 3-D Secure datum to a verification token associated with the user or to an entity configured to forward the 3-D Secure datum to the token.

43. The computer program product of claim 42, further comprising code that directs the data processor to send, if the at least one validation test is passed, the 3-D Secure datum to an entity of a 3-D Secure System.

44. The computer program product of claim 42, further comprising code that directs the data processor to receive a serial number of the verification token and a test message encrypted by the verification token with an encryption key;

and

wherein the code that directs the data processor to apply at least one validation test comprises code that directs the data processor to access a database to obtain a key and one or more acceptable messages, and code that direct the data processor to validate the encrypted test message using the encrypted test message, the obtained key, and the obtained one or more acceptable messages.

45. The computer program product of claim 44, wherein the code that directs the data processor to validate the encrypted test message comprises code that directs the data processor to decrypt the encrypted test message using the obtained key, and code that directs the data processor to compare the decrypted test message to the one or more acceptable messages for a match.

46. The computer program product of claim 44, wherein the code that directs the data processor to validate the encrypted test message comprises code that directs the data processor to encrypt the obtained one or more acceptable messages with the obtained key, and to compare the encrypted test message to the one or more encrypted acceptable messages for a match.

47. The computer program product of claim 42, further comprising code that directs the data processor to receive a serial number of the verification token;

and

code that directs the data processor to have the received serial number compared with serial numbers stored in a database that stores serial numbers of suspicious tokens.

48. The computer program product of claim 42 wherein the verification token is coupled to a computer to access a networking facility of the computer, and wherein the product further comprises:

code that directs the data processor to receive one or more data messages having information specific to the computer, the information being obtained by the token, and

code that directs the data processor to have the received information compared with information stored in a database that stores computer-specific information of suspicious computers for a match.

49. The computer program product of claim 42 wherein the request for a 3-D Secure datum is conveyed by way of a network packet on a communications network, and wherein the code that directs the data processor to apply at least one validation test comprises:

code that directs the direct processor to obtain a source IP address from the network packet; and

code that directs the data processor to have the obtained source IP address compared with suspect IP addresses stored in a database for a match.

50. The computer program product of claim 42, wherein the received identification information includes an account number of a portable consumer device and a digital fingerprint of a magnetic stripe of the portable consumer device;

and

wherein the code that directs the data processor to apply at least one validation test comprises instructions that direct the data processor to obtain a valid digital fingerprint for the portable consumer device having the account number in the received identification information, and to compare the digital fingerprint in the received identification information to the valid digital fingerprint.

51. The computer program product of claim 42, wherein the received identification information includes an account number of a portable consumer device and a variable datum that varies each time the portable consumer device is read for its identification information;

and

wherein the code that directs the data processor to apply at least one validation test comprises instructions that direct the data processor to obtain one or more acceptable datum values for the portable consumer device having the account number in the received identification information, and to compare the variable datum in the received identification information to the obtain one or more acceptable datum values for a match.

52. The computer program product of claim 42, wherein the received identification information includes an account number of a portable consumer device and a variable datum that varies each time the portable consumer device is read for its identification information;

and

wherein the code that directs the data processor to apply at least one validation test comprises instructions that direct the data processor to send the account number and the variable datum to an issuing bank with a request for the bank to determine if the variable datum is valid, and instructions that direct the data processor to receive the issuing bank'"'"'s determination.

53. The computer program product of claim 42, wherein the code that directs the data processor to apply at least one validation test comprises instructions that direct the data processor to apply at least two validation tests pertaining to the received request.

54. The computer program product of claim 42, further comprising code that directs the data processor to communicate with the verification token over a communications network with a computer disposed between the verification token and the communications network, the verification token being communicatively coupled to the computer by way of a peripheral interface of the computer and configured to access a networking facility of the computer.

55. The computer program product of claim 54, further comprising code that directs the data processor to establish a communications session with the computer that is secured by one or more encryption keys;

and

wherein the request for the 3-D Secure datum is received through the communications session; and

wherein the 3-D Secure datum is provided through the communications session.

56. The computer program product of claim 42, further comprising code that directs the data processor to send, if the at least one validation test is passed, a device verification value to the token or to an entity configured to forward the device verification value to the token.

57. The computer program product of claim 56, further comprising code that directs the data processor to send, if the at least one validation test is passed, a dynamic account number to the token or to an entity configured to forward the dynamic account number to the token.

58. The computer program product of claim 42, further comprising code that directs the data processor to send, if the at least one validation test is passed, address information to the token or to an entity configured to forward the address information to the token.

59. The computer program product of claim 42, further comprising code that directs that data processor to identify a mobile phone number or universal resource identifier of a portable communications device associated with the portable consumer device indicated in the received identification information, and

code that directs that data processor to send a message to the identified mobile phone number or universal resource identifier indicating that a request has been made for a 3-D Secure datum for the user'"'"'s portable consumer device.

60. The computer program product of claim 42, further comprising:

code that directs that data processor to identify an email address associated with the portable consumer device indicated in the received identification information; and

code that directs that data processor to send a message to the identified email address indicating that a request has been made for a 3-D Secure datum for the user'"'"'s portable consumer device.

61. A validation entity incorporating the computer program product of claim 42, the validation entity comprising a data processor, a networking facility coupled to the processor, a computer-readable medium coupled to the processor, and the computer program product embodied on the computer-readable medium.

62. A method of providing device verification values, the method comprising:

receiving, at a server, a request for a 3-D secure datum for a portable consumer device associated with a user, the request comprising identification information pertaining to the portable consumer device;

applying at least one validation test pertaining to the received request; and

sending, if the at least one validation test is passed, a 3-D secure datum to a verification token associated with the user or to an entity configured to forward the 3-D secure datum to the token.

63-112. -112. (canceled)