PROCESSING TRANSACTIONS WITH AN EXTENDED APPLICATION ID AND DYNAMIC CRYPTOGRAMS

• US 20120317035A1
• Filed: 06/11/2012
• Published: 12/13/2012
• Est. Priority Date: 01/22/2009
• Status: Active Grant

• Current Assignee: First Data Corporation (Fiserv Incorporated)
• Original Assignee: First Data Corporation (Fiserv Incorporated)
• Inventors: Royyuru, Vijay K., Klotz, Robert P., Loomis, Nancy, Fullett, John
• Granted Patent: US 10,354,321 B2
• Time in Patent Office: Days
• US Class Current: 705/71
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/3574 Multiple applications on card
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords

Abstract

Methods, systems, and machine-readable media are disclosed for handling information related to a transaction conducted with a presentation instrument at a POS device. Extended application IDs and dynamic cryptograms are use for the transaction. According to one embodiment, a method of processing a financial transaction for an account having a primary account number (PAN) can comprise detecting initiation of the transaction with the presentation instrument, and providing from the presentation instrument to the POS device a list of one or more applications IDs. Each application ID identifies an application that can be used to communicate data concerning the transaction between the presentation instrument and the POS device. The POS device selects one of the application IDs and returns it to the presentation instrument. Under the control of the selected application, the presentation instrument generates a Dynamic Transaction Cryptogram (DTC) and a dynamic PAN that are each valid for only a single transaction.

Claims

1. A method for processing a transaction related to an account having an account number, wherein the transaction is conducted with a presentation instrument device (PI device) communicating with a point of sale device (POS device), the method comprising:

detecting initiation of the transaction with the PI device;

providing from the PI device to the POS device a list of one or more applications IDs, each identifying an application that can be used to communicate data concerning the transaction between the PI device and the POS device, each application ID including fields identifying a provider of the application, a code for the application, a code for the issuer of the PI device, and a type for the account;

receiving at the PI device an application ID from the one or more application IDs, the application ID identifying an application selected at the POS device for the transaction; and

initiating communications between the PI device and the POS device using the selected application.

2. The method of claim 1, wherein the transaction is a financial transaction and the account is a financial account.

3. The method of claim 2, wherein the financial account is one of a credit card account, debit card account, checking account, savings account, and stored value account.

4. Then method of claim 1, wherein the account is a loyalty award transaction and the account is a loyalty award account.

5. The method of claim 1, wherein the PI device is used to gain access to a premises, and the account and account number are assigned to a user for purposes of gaining such access.

6. The method of claim 1, wherein the account is a financial account and the account number is a real Primary Account Number (PAN), and wherein the method further comprises:

generating, under the control of the selected application, a Dynamic Transaction Cryptogram (DTC) at the PI device that is valid for a single transaction;

generating, under the control of the selected application, a dynamic PAN at the PI device, the dynamic PAN comprising an encrypted form of the real PAN that is valid for the single transaction; and

providing the DTC and the dynamic PAN from the PI device to the POS device for use in the transaction.

7. The method of claim 6, wherein the DTC is encrypted at the PI device using a card key and based on personal information that is known to the user and that identifies the user.

8. The method of claim 7, wherein the dynamic PAN provided to the POS device is thereafter decrypted in order to determine the real PAN for processing of the transaction, wherein the determined real PAN is then used to retrieve a key corresponding the card key, and wherein the DTC is provided in order to authenticate the transaction, using the retrieved key.

9. The method of claim 6, wherein generating the dynamic PAN is based on the real PAN, an Institution Key Card Variant (IKCV) that is a variant of an institution key of an issuer of the financial account stored in the device, and an undeterminable number generated or received by the device.

10. The method of claim 9, wherein generating the dynamic PAN further comprises:

reading the real PAN from a memory of the PI device;

generating Pseudo-PAN-Dynamic-Data (PPDD) representing the real PAN by combining the real PAN with the undeterminable number; and

encrypting the PPDD using the IKCV.

11. The method of claim 6, further comprising including an unencrypted portion of the real PAN in the dynamic PAN.

12. The method of claim 11, wherein the portion of the real PAN comprises less than all of the real PAN and includes information for routing of the transaction to a financial institution.

13. The method of claim 11, wherein a right-most four digits of the real PAN are retained and re-used on a printed receipt.

14. The method of claim 6, further comprising providing the DTC and the dynamic PAN from the POS device to a payment processor system.

15. The method of claim 14, further comprising authenticating the transaction at the payment processor system based on the DTC.

16. The method of claim 14, further comprising authenticating the transaction at a financial institution based on the DTC.

17. The method of claim 14, further comprising determining the real PAN of the financial account at the payment processor system.

18. The method of claim 17, wherein determining the real PAN comprises decrypting the dynamic PAN using an institution key of an issuer of the financial account.

19. The method of claim 17, further comprising submitting the real PAN from the payment processor system to a financial institution to affect processing of the transaction.

20. A method for processing a financial transaction related to a financial account having a Primary Account Number (PAN), wherein the transaction is conducted with a device used as a presentation instrument communicating with a point of sale device (POS device), the method comprising:

detecting initiation of the transaction with the device;

providing from the device to the POS device a list of one or more applications IDs, each identifying an application that can be used to communicate data concerning the transaction between the device and the POS device, each application ID including fields identifying a provider of the application, a code for the application, a code for the issuer of the device, and a type for the financial account;

selecting at the POS device the application to be used for the transaction;

providing from the POS device the application ID for the selected application to the device;

managing communications between the device and the POS device using the selected application;

generating, under the control of the selected application, a Dynamic Transaction Cryptogram (DTC) at the device that is valid for a single transaction;

generating, under the control of the selected application, a dynamic PAN at the device, the dynamic PAN comprising an encrypted form of the real PAN that is valid for the single transaction; and

providing the DTC and the dynamic PAN from the device to the POS device for use in the transaction.

21. A presentation instrument device (PI device) for initiating with a point-of-sale device (POS device) a transaction related to an account, the presentation instrument device comprising:

a processor;

an output device communicatively coupled with the processor; and

a memory communicatively coupled with and readable by the processor, the memory having stored therein one or more applications and an application ID associated with each of the applications, each application including a series of instructions which, when executed by the processor, cause the processor to communicate data concerning the transaction between the PI device and the POS device, each application ID including fields identifying a provider of the application, a code for the application, a code for the issuer of the PI device, and a type for the account.

22. The system of claim 21, wherein the account is a financial account, wherein the memory has further stored therein a real Primary Account Number (PAN) for the financial account, a unique, card-level key, and an Institution Key Card Variant (IKCV) that is a variant of an institution key of an issuer of the financial account, and wherein each application further includes a series of instructions which, when executed by the processor, cause the processor to detect initiation of the transaction, generate a Dynamic Transaction Cryptogram (DTC) using the unique card-level key, generate a dynamic PAN based on the real PAN, the IKCV, and an undeterminable number, and provide the DTC and the dynamic PAN to the output device.