USING STEGANOGRAPHY TO PERFORM PAYMENT TRANSACTIONS THROUGH INSECURE CHANNELS

• US 20150006390A1
• Filed: 06/23/2014
• Published: 01/01/2015
• Est. Priority Date: 06/26/2013
• Status: Abandoned Application

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Aissi, Selim, Kgil, Taeho, Gaddam, Ajit, Rutherford, Robert
• Application Number:
  US14/312,258
• Publication Number:
  US 20150006390A1
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/3272 using an audio code
• CPC Class Codes: G06Q 20/3274 using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
• CPC Class Codes: G06Q 20/384 using social networks
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04N 19/467 characterised by the embedded information being invisible, e.g. watermarking

Abstract

Steganographic techniques are used to embed financial information or authentication information within an image, audio, or video file using a quantization table and/or other filter. The file is then transmitted over an insecure network, such as a GSM cell phone network, and a server extracts the information from the image, audio, or video using the same quantization table and/or filter. Multiple sets of information, such as telephone numbers and/or payment account numbers, are extracted from the same image by those entities possessing the appropriate keys. The filters and tables used to embed financial information can be updated periodically or according to events. A video of images, some with embedded information, some with ‘dummy’ data, can be used to hide information over insecure networks for payment transactions.

Claims

1. A method comprising:

providing a first compression filter;

providing a sound, image, or video;

providing a payment account credential;

embedding, using at least one processor operatively coupled with a memory, the payment account credential in the sound, image, or video using the first compression filter;

transmitting the sound, image, or video over an insecure channel;

determining that an event has occurred related to the insecure channel;

obtaining a second compression filter based on the determination of the event occurring;

embedding the payment account credential in the sound, image, or video using the second compression filter; and

transmitting the sound, image, or video over the insecure channel.

2. The method of claim 1 wherein the first and second compression filters include a quantization table.

3. The method of claim 2 wherein the quantization table is rotated prior to using the first and second compression filters.

4. The method of claim 2 wherein the quantization table is compatible with a standard of a Join Photographic Experts Group (JPEG) or Moving Picture Experts Group (MPEG).

5. The method of claim 1 wherein the embedding uses a lossy codec.

6. The method of claim 1 wherein the embedding is not specific to a location on the sound, image, or video.

7. The method of claim 1 wherein the first payment account credential is selected from the group consisting of an account number, an expiration date, and a card verification value.

8. The method of claim 1 wherein the second payment account credential includes a subscriber identity module (SIM) card number.

9. The method of claim 1 wherein the sound, image, or video is received from a trusted payment network.

10. A computer system executing instructions in a computer program, the computer program instructions comprising:

program code for providing a first compression filter;

program code for providing a sound, image, or video;

program code for providing a payment account credential;

program code for embedding the payment account credential in the sound, image, or video using the first compression filter;

program code for transmitting the sound, image, or video over an insecure channel;

program code for determining that an event has occurred related to the insecure channel;

program code for obtaining a second compression filter based on the determination of the event occurring;

program code for embedding the payment account credential in the sound, image, or video using the second compression filter; and

program code for transmitting the sound, image, or video over the insecure channel.

11. A method comprising:

receiving a first payment account credential;

receiving a second payment account credential;

receiving a sound, image, or video;

selecting a first compression filter;

selecting a second compression filter;

embedding, using at least one processor operatively coupled with a memory, the first payment account credential in the sound, image, or video, using the first compression filter, and embedding the second payment account credential in the sound, image, or video, using the second compression filter to create a second sound, second image, or second video;

transmitting the second sound, second image, or second video over an insecure channel to a trusted payment network;

transmitting the second sound, second image, or second video over an insecure channel to a telephony service provider;

extracting the first payment account credential from the second sound, second image, or second video using a copy of the first compression filter at the trusted payment network;

sending an authorization request message through the trusted payment network based on the first payment account credential, thereby initiating a payment transaction;

receiving an authorization response message from the trusted payment network;

extracting the second payment account credential from the second sound, second image, or second video using a copy of the second compression filter at the telephony service provider;

sending an authorization request message through the telephony service provider based on the second payment account credential, thereby initiating a payment transaction; and

receiving an authorization response message from the telephony service provider in response to the authorization request message.

12. The method of claim 11 wherein the compression filter includes a quantization table.

13. The method of claim 12 wherein the quantization table is rotated prior to using the compression filter.

14. The method of claim 12 wherein the quantization table is compatible with a standard of a Join Photographic Experts Group (JPEG) or Moving Picture Experts Group (MPEG).

15. A computer system executing instructions in a computer program, the computer program instructions comprising:

program code for receiving a first payment account credential;

program code for receiving a second payment account credential;

program code for receiving a sound, image, or video;

program code for selecting a first compression filter;

program code for selecting a second compression filter;

program code for embedding the first payment account credential in the sound, image, or video, using the first compression filter, and embedding the second payment account credential in the sound, image, or video, using the second compression filter to create a second sound, second image, or second video;

program code for transmitting the second sound, second image, or second video over an insecure channel to a trusted payment network;

program code for transmitting the second sound, second image, or second video over an insecure channel to a telephony service provider;

program code for extracting the first payment account credential from the second sound, second image, or second video using a copy of the first compression filter at the trusted payment network;

program code for sending an authorization request message through the trusted payment network based on the first payment account credential, thereby initiating a payment transaction;

program code for receiving an authorization response message from the trusted payment network;

program code for extracting the second payment account credential from the second sound, second image, or second video using a copy of the second compression filter at the telephony service provider;

program code for sending an authorization request message through the telephony service provider based on the second payment account credential, thereby initiating a payment transaction; and

program code for receiving an authorization response message from the telephony service provider in response to the authorization request message.

16. A method comprising:

receiving a payment account credential;

receiving a sound, image, or video;

selecting a compression filter;

embedding, using at least one processor operatively coupled with a memory, the payment account credential in the sound, image, or video, using the compression filter create a second sound, second image, or second video;

transmitting the second sound, second image, or second video over an insecure channel to a trusted payment network;

extracting the payment account credential from the second sound, second image, or second video using a copy of the compression filter at the trusted payment network;

sending an authorization request message through the trusted payment network based on the payment account credential, thereby initiating a payment transaction;

receiving an authorization response message from the trusted payment network in response to the authorization request message.

17. A method of sending payment information through a video, the method comprising:

encoding, using at least one processor operatively coupled with a memory, a machine-readable image code with payment information in a first image;

providing a set of other images, the set of other images including a trigger image;

randomly selecting an order of the first image within the set of other images;

sending to a trusted payment network the images in the selected order to form a video payment message, the trigger image signaling the position of the first image.

18. The method of claim 17 further comprising:

sending the video payment message to a social networking platform; and

tagging, on the social networking platform, an intended recipient of the payment information to the video payment message.

19. The method of claim 18 further comprising:

tagging, on the social networking platform a trusted payment network to the video payment message.

20. The method of claim 17 wherein the payment information encoded in the image code is for a recipient'"'"'s account, the method further comprising:

sending the video payment message to a social networking platform; and

tagging, on the social networking platform, a trusted payment network to the video payment message.

21. The method of claim 17 further comprising:

sending the video payment message to a social networking platform;

tagging, on the social networking platform, an intended recipient of the payment information to the video payment message; and

forwarding or submitting by the intended recipient, the video payment message to a trusted payment network.

22. The method of claim 17 further comprising:

sending an authorization request message through the trusted payment network based on the payment information in the video payment message, thereby initiating a payment transaction; and

receiving an authorization response message from the trusted payment network.