AUTHENTICATION PROCESS FOR VALUE TRANSFER MACHINE

• US 20130226799A1
• Filed: 08/23/2012
• Published: 08/29/2013
• Est. Priority Date: 08/23/2011
• Status: Abandoned Application

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Raj, Thanigaivel Ashwin
• Application Number:
  US13/593,245
• Publication Number:
  US 20130226799A1
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G06Q 20/42 Confirmation, e.g. check or permission by the legal debtor of payment
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G07C 9/00 Individual registration on entry or exit
• CPC Class Codes: G07F 19/00 Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines data processing equipment for bank accounting G06Q40/02
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

Embodiments of the invention are directed towards improved transaction processing methods and systems with transaction apparatuses, including a value transfer machine, using a device identifier instead of a value transfer machine card to process a transaction. One embodiment of the transaction may be directed to a transaction apparatus and a method including receiving an authentication code from a consumer, sending the authentication code to a first server computer, wherein if the received authentication code matches a generated authentication code, the first server sends a confirmation message. The method continues by receiving the confirmation message from the first server, receiving a secret token from the consumer, and sending an authorization request message to a second server computer. Thereafter, the transaction apparatus receives an authorization response message from the second server, indicating whether the secret token matches an expected token. Other embodiments are directed to first and second servers and corresponding methods.

Claims

1. A transaction apparatus comprising:

a processor; and

a computer-readable storage medium, comprising code executable by the processor to implement a method, the method comprising;

receiving an authentication code from a consumer;

sending the authentication code to a first server computer, wherein if the received authentication code matches a generated authentication code, the first server sends a confirmation message;

receiving the confirmation message;

receiving a secret token from the consumer;

sending an authorization request message to a second server computer; and

receiving an authorization response message from the second server computer, wherein the authorization response message indicates that the secret token matches an expected token.

2. The transaction apparatus of claim 1 wherein the method further comprises before receiving the authentication code from the consumer, electronically receiving a device identifier and sending the device identifier to the first server computer.

3. The transaction apparatus of claim 1 wherein the authentication code is a dynamic code generated by the first server computer.

4. The transaction apparatus of claim 1 wherein the confirmation message comprises an account identifier, wherein the second server computer is associated with the account identifier, wherein the authorization request message comprises the secret token and the account identifier, and wherein the second server computer determines the expected token associated with the account identifier and compares the expected token to the secret token, and wherein the authorization response message indicates whether the transaction is authorized.

5. The transaction apparatus of claim 1 further comprising completing a transaction, wherein completing a transaction further comprises dispensing the transaction amount in cash to the consumer.

6. The transaction apparatus of claim 1 further comprising completing a transaction, wherein completing a transaction comprises dispensing an object to the consumer.

7. A method comprising:

receiving an authentication code from a consumer;

sending the authentication code to a first server computer, wherein if the received authentication code matches a generated authentication code, the first server sends a confirmation message;

receiving the confirmation message;

receiving a secret token from the consumer;

sending an authorization request message to a second server computer; and

receiving an authorization response message from the second server computer, wherein the authorization response message indicates that the secret token matches an expected token.

8. The method of claim 7 further comprising before receiving an authentication code from the consumer, electronically receiving a device identifier and sending the device identifier to the first server computer.

9. The method of claim 7 wherein the authentication code is a dynamic code generated by the first server computer.

10. The method of claim 7 wherein the confirmation message comprises an account identifier, wherein the second server computer is associated with the account identifier, wherein the authorization request message comprises the secret token and the account identifier, and wherein the second server computer determines the expected token associated with the account identifier and compares the expected token to the secret token, and wherein the authorization response message indicates whether the transaction is authorized.

11. The method of claim 7 further comprising completing a transaction, wherein completing a transaction further comprises dispensing the transaction amount in cash to the consumer.

12. The method of claim 7 further comprising completing a transaction, wherein completing a transaction comprises dispensing an object to the consumer.

13. A first server computer comprising:

a processor; and

a computer-readable storage medium, comprising code executable by the processor to implement a method, the method comprising;

electronically receiving a device identifier;

generating an authentication code for a transaction;

electronically transmitting the generated authentication code to a device associated with the device identifier;

electronically receiving, from a transaction apparatus, a received authentication code;

matching the received authentication code with the generated authentication code for the transaction; and

sending a confirmation message to the transaction apparatus, wherein the transaction apparatus sends an authorization request message to a second server computer and receives an authorization response message from the second server computer.

14. The first server computer of claim 13 wherein the authentication code for the transaction is a dynamic code.

15. The first server computer of claim 13 wherein the device identifier is received from the transaction apparatus.

16. The first server computer of claim 13 wherein the device identifier is received from a consumer device.

17. The first server computer of claim 13 further comprising searching a database for an account identifier associated with the device identifier, wherein the confirmation message comprises the account identifier, wherein the second server computer is associated with the account identifier, and wherein the authorization response message indicates whether the transaction is authorized.

18. A method comprising:

electronically receiving, at a first server computer, a device identifier;

generating an authentication code for a transaction,

electronically transmitting the generated authentication code to a device associated with the device identifier,

electronically receiving, from a transaction apparatus, a received authentication code;

matching the received authentication code with the generated authentication code for the transaction, and

sending a confirmation message to the transaction apparatus, wherein the transaction apparatus sends an authorization request message to a second server computer and receives an authorization response message from the second server computer.

19. The method of claim 18 wherein the authentication code for the transaction is a dynamic code.

20. The method of claim 18 wherein the device identifier is received from the transaction apparatus.

21. The method of claim 18 wherein the device identifier is received from a consumer device.

22. The method of claim 18 further comprising searching a database for an account identifier associated with the device identifier, wherein the confirmation message comprises the account identifier, wherein the second server computer is associated with the account identifier, and wherein the authorization response message indicates whether the transaction is authorized.