VIRTUALIZATION AND SECURE PROCESSING OF DATA

• US 20140279552A1
• Filed: 05/26/2014
• Published: 09/18/2014
• Est. Priority Date: 10/17/2012
• Status: Abandoned Application

• Current Assignee: Royal Bank of Canada (The PNC Financial Services Group, Inc.)
• Original Assignee: Royal Bank of Canada (The PNC Financial Services Group, Inc.)
• Inventors: ORTIZ, EDISON U., LEE, TERRY W., MANTIA, LINDA
• Application Number:
  US14/287,134
• Publication Number:
  US 20140279552A1
• Time in Patent Office: Days
• US Class Current: 705/65
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3221 Access to banking information through M-devices
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/36 using electronic wallets or electronic money safes
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05

Abstract

Systems, methods, and non-transient machine-interpretable data representing executable instruction sets and/or other products for the processing of data for the secure creation, administration, manipulation, processing, and storage of electronic data useful in the processing of payment transactions and other secure data processes. In various aspects and embodiments the disclosure provides secure means for the authorization of sensitive and other data processes subject to controlled access. Such processes include, for example the creation, administration, authorization, virtualization, storage, and other manipulation or processing of electronic data representing characteristics of, instructions for, and information associated with consumer, business, and other payment accounts, and other forms of secure payment elements, such as payment tokens; and data useful in processing transactions using such accounts and elements. Information associated with particular payment means, such as accounts or payment tokens, can be stored, for example, in a data set, usually secure, sometimes referred to as a virtual or electronic wallet, or a secure payment token.

Claims

1. A transaction communication device comprising:

at least one network communication system;

at least one data processor; and

at least one persistent memory device, the at least one persistent memory device comprising data representing at least;

at least one identifier associated with at least one authorized user of at least one transaction payment account;

at least one identifier associated with the transaction communication device; and

an identifier associated with the at least one transaction payment account;

a machine-executable coded instruction set configured to cause the at least one data processor to;

access the persistent memory device and generate a transaction request data set, the transaction data set comprising at least;

the at least one identifier associated with at least one authorized user of at least one transaction payment account;

the at least one identifier associated with the transaction communication device; and

the identifier associated with the at least one transaction payment account; and

to

route the generated transaction data request to a transaction adjudication server, using the network communication system.

2. The transaction communication device of claim 1, wherein the transaction communication device is a personal digital assistant (PDA).

3. The transaction communication device of claim 1, wherein the at least one network communication system comprises at least one wireless communication system.

4. The transaction communication device of claim 3, wherein the at least one wireless communication system comprises a near-field communication (NFC) system.

5. The transaction communication device of claim 1, the at least one persistent memory comprising at least one removable memory device.

6. The transaction communication device of claim 1, the at least one persistent memory further comprising data representing at least one encrypted payment token.

7. The transaction communication device of claim 1, the at least one persistent memory further comprising data representing at least one private key useable for at least one of encrypting and decrypting data in accordance with a private key encryption protocol.

8. The transaction communication device of claim 1, the at least one persistent memory comprising data representing identifiers associated a plurality of transaction payment accounts.

9. A method, performed by at least one processor of a transaction communication device, the transaction communication device comprising at least one input device and a network communication system, the method comprising:

receiving, from the input device, signals representing a purchaser-defined identifier;

using at least the purchaser-defined identifier, accessing one of a plurality of transaction authorization data sets; and

using at least the accessed transaction authorization data set, generating a transaction request data set, the transaction request data set comprising at least two of;

an identifier associated with at least one authorized user of at least one transaction payment account;

an identifier associated with the transaction communication device; and

an identifier associated with the at least one transaction payment account; and

routing the generated transaction data request to a transaction adjudication server, using the wireless communication system.

10. The method of claim 9, wherein the transaction communication device is a personal digital assistant (PDA).

11. The method of claim 9, wherein the at least one network communication system comprises at least one wireless communication system.

12. The method of claim 11, wherein the at least one wireless communication system comprises a near-field communication (NFC) system.

13. The method of claim 11, comprising receiving from the transaction adjudication server an encrypted validation code.

14. The method of claim 13, comprising decrypting the validation code using at least one private key stored in persistent memory of the transaction communication device.

15. The method of claim 14, comprising routing to a merchant system an encrypted transaction data set comprising at least one identifier representing a payment amount associated with a proposed transaction.

16. The method of claim 13, comprising routing to a merchant system an encrypted payment token, the encrypted payment token comprising data representing at least one pre-authorized purchase amount.

17. A server for adjudicating electronically-coded transaction requests, comprising one or more non-transient machine-executable coded instructions configured to cause the server to:

access a transaction request data set generated by a networked purchaser communication device, the transaction request data set comprising machine-interpretable data representing at least;

at least one identifier associated with at least one authorized user of at least one transaction payment account;

at least one identifier associated with the networked purchaser communication device; and

an identifier associated with the at least one transaction payment account;

data representing a transaction amount; and

data representing a transaction authorization routing address;

determine that;

the received identifier associated with an authorized user of the transaction payment account corresponds to at least one authorized user associated with the transaction authorization data set; and

the received identifier associated with a purchaser communication device corresponds to at least one purchaser communication device associated with the transaction authorization data set;

determine that an amount of funds associated with the identified transaction payment account is sufficient to cover the transaction amount; and

conditioned on said determinations, generate an transaction authorization data set; and

route the transaction authorization data set to the transaction authorization routing address.

18. The server of claim 17, wherein the non-transient machine-interpretable instructions cause further cause the server to generate and route to the transaction authorization address a validation code encrypted using at least a private key associated with the transaction authorization routing address.

19. The server of claim 18, wherein the generating the transaction authorization data set is conditioned upon receiving from the transaction authorization routing address a data set consistent with decryption of the validation code using the private key.

20. A medium or media comprising non-transient machine-executable coded instructions configured to cause at least one processor of a transaction communication device to:

generate, using data accessed in a persistent memory of the transaction communication device, a transaction data set comprising at least;

at least one identifier associated with at least one authorized user of at least one transaction payment account;

at least one identifier associated with the transaction communication device; and

an identifier associated with the at least one transaction payment account; and

to

route the generated transaction data request to a transaction adjudication server, using a network communication system of the transaction communication device.

21. The medium or media of claim 20, wherein the transaction communication device is a personal digital assistant (PDA).

22. The medium or media of claim 20, wherein the at least one network communication system comprises at least one wireless communication system.

23. The medium or media of claim 22, wherein the at least one wireless communication system comprises a near-field communication (NFC) system.

24. The medium or media of claim 20, the at least one persistent memory further comprising data representing at least one encrypted payment token.

25. The medium or media of claim 20, the at least one persistent memory further comprising data representing at least one private key useable for at least decrypting data in accordance with a private key encryption protocol and the medium or media configured to cause the at least one processor to decrypt at least one data set received using the network communication system, using at least the private key.

26. The medium or media of claim 25, wherein the at least one data set decrypted using the private key comprises at least one validation code.

27. The medium or media of claim 25, wherein the at least one data set decrypted using the private key comprises at least one encrypted payment token.

28. The medium or media of claim 20, the at least one persistent memory further comprising data representing at least one private key useable for at least encrypting data in accordance with a private key encryption protocol and the medium or media configured to cause the at least one processor to encrypt data sets routed using the network communication system, using at least the private key.

29. The medium or media of claim 28, wherein the at least one data set encrypted using the private key comprises at least one transaction request data set.

30. The medium or media of claim 28, wherein the at least one data set encrypted using the private key comprises at least one encrypted payment token.