SECURITY SYSTEM INCORPORATING MOBILE DEVICE

• US 20130238499A1
• Filed: 03/06/2012
• Published: 09/12/2013
• Est. Priority Date: 03/06/2012
• Status: Active Application

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Hammad, Ayman
• Granted Patent: US 10,282,724 B2
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4018 using the card verification value [CVV] associated with the card

Abstract

In some embodiments, a first server computer may be provided. The first server computer may comprise a processor and a computer readable medium coupled to the processor. The computer readable medium may include code executable by the processor for implementing a method. The method may include the step of electronically receiving an authorization request message that includes a first device verification value from a merchant for a first transaction, where the first device verification value may have been received by the merchant from a mobile device based on an interaction between the mobile device and an access device. In some embodiments, the mobile device may have received the first verification value based on a first request. The method may further include the step of determining by a data processor if the first device verification value corresponds to a stored device verification value.

Claims

1. A server computer comprising:

a processor; and

a computer readable medium coupled to the processor, wherein the computer readable medium comprises code executable by the processor for implementing a method comprising;

electronically receiving an authorization request message comprising a first device verification value from a merchant for a first transaction;

wherein the first device verification value was received by the merchant from a mobile device based on an interaction between the mobile device and an access device,

wherein the mobile device received the first verification value based on a first request;

determining by a data processor if the first device verification value corresponds to a stored device verification value.

2. The server computer of claim 1, wherein the interaction between the mobile device and the access device comprises short-range wireless communication.

3. The server computer of claim 1, wherein the first request was based on an interaction between the mobile device and a portable consumer device associated with the first transaction;

4. The server computer of claim 3, wherein the method further comprises:

electronically receiving the first request for the first device verification value from the mobile device, wherein the first request comprises identification information for the portable consumer device;

performing by a data processor at least one validation test pertaining to the first request; and

electronically sending the first device verification value to the mobile device if the at least one validation test is passed.

5. The server computer of claim 4, wherein the method further comprises the step of electronically storing the first device verification value.

6. A method comprising:

electronically receiving an authorization request message comprising a first device verification value from a merchant for a first transaction;

wherein the first device verification value was received by the merchant from a mobile device based on an interaction between the mobile device and an access device,

wherein the mobile device received the first verification value based on a first request; and

determining by a data processor if the first device verification value corresponds to a stored device verification value.

7. The method of claim 6, wherein the first request was based on an interaction between the mobile device and a portable consumer device.

8. The method of claim 6, wherein the method further comprises the steps of:

generating an authorization response message based at least in part on the determination by the data processor as to whether the first device verification value corresponds to the stored device verification value; and

electronically sending the authorization response message to the merchant.

9. The method of claim 6, wherein the method further comprises:

electronically receiving the first request for the device verification value from the mobile device, wherein the first request comprises identification information for the portable consumer device;

performing by the data processor at least one validation test pertaining to the first request;

electronically sending the first device verification value to the mobile device if the at least one validation test is passed; and

electronically storing the first device verification value.

10. A mobile device comprising:

a processor; and

a computer readable medium coupled to the processor, wherein the computer readable medium comprises code executable by the processor for implementing a method comprising;

electronically sending a first request for a first device verification value to a server computer,

electronically receiving from the server computer the first device verification value; and

electronically sending the first device verification value to a merchant associated with a first transaction based on an interaction between the mobile device and an access device.

11. The mobile device of claim 10, further comprising the step of receiving identification information stored on a portable consumer device based on an interaction between the portable consumer device and the mobile device

12. The mobile device of claim 11, wherein the first request comprises at least some of the identification information stored on the portable consumer device.

13. The mobile device of claim 12, wherein the first device verification value is received if the first request is validated based at least in part on the identification information.

14. The mobile device of claim 10, wherein the first device verification value sent to the merchant is included by the merchant in an authorization request message sent to a payment processing network.

15. A method comprising:

electronically sending by a mobile device a first request for a first device verification value to a server computer,

electronically receiving at the mobile device the first device verification value from the server computer; and

electronically sending by the mobile device the first device verification value to a merchant associated with a first transaction based on an interaction between the mobile device and an access device.

16. The method of claim 15, further comprising the step of receiving at the mobile device identification information stored on a portable consumer device based on an interaction between the portable consumer device and the mobile device.

17. The method of claim 16, wherein the first request comprises at least some of the identification information stored on the portable consumer device.

18. The method of claim 17, wherein the first device verification value is received by the mobile device if the first request is validated based at least in part on the identification information.

19. The method of claim 15, further comprising:

initiating a first transaction with the first merchant; and

interacting with the access device for the merchant associated with the first transaction using the mobile device.

20. The method of claim 15, further comprising:

wherein the interaction with the access device comprises short-range wireless communication; and

wherein the first merchant includes the first device verification value in an authorization request message associated with the first transaction.

21. A method comprising:

electronically sending by a mobile device a first request for first information to a server computer, wherein the first request is generated based on an interaction between the mobile device and a portable consumer device;

electronically receiving at the mobile device the first information from the server computer; and

electronically sending by the mobile device the first information to a merchant associated with a first transaction based on an interaction between the mobile device and an access device located at the merchant.

22. The method of claim 21, wherein the interaction between the mobile device and the access device comprises short-range wireless communication.

23. The method of claim 21, wherein the portable consumer device is presented to the merchant to complete the first transaction.

24. The method of claim 21, wherein the portable consumer device is not presented to the merchant to complete the first transaction.

25. The method of claim 21, wherein the first information comprises any one of, or some combination of:

a verification value, a dynamic verification value, an account number, an account balance, an authorization message, an IP address, a session key, an account identifier, an expiration date, or previous transaction information.