System and Method for One-Time Payment Authorization in a Portable Communication Device

• US 20130159186A1
• Filed: 04/16/2012
• Published: 06/20/2013
• Est. Priority Date: 12/19/2011
• Status: Active Grant

• Current Assignee: TIS Incorporated (It Holdings Corporation)
• Original Assignee: Sequent Software, Inc.
• Inventors: Brudnicki, David, Craft, Michael, Reisgies, Hans, Weinstein, Andrew
• Granted Patent: US 9,898,728 B2
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/227 characterised in that multiple accounts are available, e.g. to the payer
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/3274 using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 4/02 Services making use of location information

Abstract

A system for using a dynamic temporary credential with a portable communication device for use in a transaction with an electronic control point (e.g. point of sale, NFC access point) wherein the portable communication device has a geo-location module (e.g. GPS). The system has a centralized module that receives the portable communication device'"'"'s current geo-location and transmits the dynamic temporary credential to the portable communication device and provides predictive transaction information—including the dynamic temporary credential and portable communication device'"'"'s geo-location—to an authorization system operably associated with the electronic control point. The dynamic temporary credential has a predetermined time to live, which allows for the recycling of the dynamic credential, such recycling may take into account the geo-location for which the credential has been recently issued. A method for using a dynamic temporary credential with a portable communication device is also disclosed.

Claims

1. A system for issuing a dynamic temporary credential to a portable communication device for use in a transaction with an electronic control point, the portable communication device having a service that provides a current geo-location of the portable communication device, the system comprising:

means in a centralized computer for receiving the current geo-location of the portable communication device;

means for transmitting the dynamic temporary credential to the portable communication device from the centralized computer; and

means for providing predictive transaction information to an authorization system operably associated with the electronic control point, the predictive transaction information including the dynamic temporary credential and information indicative of the current geo-location of the portable communication device,

wherein the dynamic temporary credential has a predetermined time to live.

2. The system of claim 1 further comprising means for authenticating an end user of the portable communication device, wherein the dynamic temporary credential transmitting means, predictive transaction information providing means or both do not function until the end user authenticating means has authenticated the end user.

3. The system of claim 2 further comprising a user database providing associations between the end user name and a passcode, wherein the authenticating means is operably associated with the user database and authenticates the end user by confirming the passcode.

4. The system of claim 3 wherein the portable communication device has a unique digital signature, the authenticating means further authenticates the end user by confirming the pairing the authenticated end user with the unique digital signature.

5. The system of claim 4 wherein the predictive transaction information further includes the unique digital signature of the portable communication device.

6. The system of claim 2 wherein the portable communication device has a unique digital signature, the authenticating means further authenticates the end user by confirming the pairing the authenticated end user with the unique digital signature.

7. The system of claim 6 wherein the predictive transaction information further includes the unique digital signature of the portable communication device.

8. The system of claim 1 further comprising means for determining one or more likely merchant associated with the current geo-location of the portable communication device, wherein the one or more likely merchant associated with the current geo-location is the information indicative of the current geo-location of the portable communication device.

9. The system of claim 8 wherein each of the one or more likely merchant is represented by a merchant name and a merchant identification code.

10. The system of claim 8 wherein the transmitting means further transmits the one or more likely merchant to the portable communication device, the system further comprising means for ascertaining confirmation of one of the one or more likely merchant from the portable communication device, the ascertaining means selecting another one or more likely merchant upon receiving an indication of no match.

11. The system of claim 10 wherein the transmitting means further transmits to the portable communication device an emulation method associated with each of the one or more likely merchants.

12. The system of claim 11 wherein the predictive transaction information further includes the emulation method associated with each of the one more likely merchants.

13. The system of claim 1 wherein the electronic control point comprises a point-of-sale terminal and the authorization system comprises a merchant payment network with a validation mapping gateway.

14. The system of claim 13 wherein the validation mapping gateway includes a validation database containing the predictive transaction information and legacy payment data.

15. The system of claim 14 wherein the validation mapping gateway being operably connected to one or more issuers, the system further comprising means associated with the validation mapping gateway to substitute the legacy payment data for the dynamic temporary credential in a payment transaction before sending the payment transaction to the issuer associated with the legacy payment data.

16. The system of claim 15 wherein the authorization means only provides authorization if the payment transaction is received within a predetermined time of the transmission of the dynamic temporary credential to the portable communication device.

17. The system of claim 16 wherein the authorization means only provides authorization if the payment transaction record is from the merchant most-likely located at the current geo-location.

18. The system of claim 1 wherein the predetermined time to live is on the order of minutes, the system further comprising means for recycling the dynamic temporary credentials wherein the recycling means uses the current geo-location of the portable communication device, a geo-location of a second portable communication device and the predetermined time to live associated with the dynamic temporary credential to transmit the dynamic temporary credential to the second portable communication device following expiration of the predetermined time to live when the second portable communication device is located in a second disparate geo-location relative to the current geo-location of the first portable communication device.

19. A method for using a dynamic temporary credential with a portable communication device in a transaction with an electronic control point, the portable communication device having a service that provides a current geo-location of the portable communication device, the method comprising:

receiving the current geo-location of the portable communication device in a centralized computer;

transmitting the dynamic temporary credential to the portable communication device from the centralized computer; and

providing predictive transaction information to an authorization system operably associated with the electronic control point, the predictive transaction information including the dynamic temporary credential and information indicative of the current geo-location of the portable communication device, wherein the dynamic temporary credential has a predetermined time to live.

20. The method of claim 19 further comprising authenticating an end user of the portable communication device prior to providing predictive transaction information to the authorization system.

21. The method of claim 20 wherein authenticating further comprises checking an association between the end user and a passcode previously stored in the centralized computer.

22. The method of claim 21 wherein the portable communication device has a unique digital signature, the authenticating further comprises checking an association between the end user and a unique digital signature.

23. The method of claim 19 further comprising authorizing the electronic control point upon receiving a transaction record containing the predictive transaction information from the electronic control point.

24. The method of claim 23 wherein authorizing the electronic control point further comprises determining whether the transaction record is received within a predetermined time of transmitting the dynamic temporary credential to the portable communication device.

25. The method of claim 24 wherein authorizing the electronic control point further comprises determining whether the transaction record is received from the merchant most-likely located at the current geo-location.

26. The method of claim 23 wherein the method further comprises following authorization:

substituting legacy card payment data associated with the end user of the portable communication device in the transaction record; and

passing the transaction record onto an issuer authorization system for payment using the legacy card payment data associated with the end user.