INTEGRATION OF VERIFICATION TOKENS WITH MOBILE COMMUNICATION DEVICES

• US 20160197725A1
• Filed: 03/15/2016
• Published: 07/07/2016
• Est. Priority Date: 05/15/2009
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Hammad, Ayman
• Granted Patent: US 10,009,177 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4018 using the card verification value [CVV] associated with the card
• CPC Class Codes: G06Q 20/42 Confirmation, e.g. check or permission by the legal debtor of payment
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: H04L 2209/12 Details relating to cryptographic hardware or logic circuitry
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/10 with particular housing, physical features or manual controls
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

Apparatuses, methods, and systems pertaining to the verification of portable consumer devices are disclosed. In one implementation, a verification token is communicatively coupled to a computer by a USB connection so as to use the computer'"'"'s networking facilities. The verification token reads identification information from a user'"'"'s portable consumer device (e.g., credit card) and sends the information to a validation entry over a communications network using the computer'"'"'s networking facilities. The validation entity applies one or more validation tests to the information that it receives from the verification token. If a selected number of tests are passed, the validation entity sends a device verification value to the verification token, and optionally to a payment processing network. The verification token may enter the device verification value into a CVV field of a web page appearing on the computer'"'"'s display, or may display the value to the user using the computer'"'"'s display.

Claims

1-49. -49. (canceled)

50. A device comprising:

a housing;

a first processor disposed within the housing;

a first memory unit disposed within the housing;

an input-output controller coupled to the first processor; and

a verification token disposed within the housing and communicatively coupled to the input-output controller, the verification token comprising a second processor separate from the first processor, a second memory unit separate from the first memory unit and storing an encryption key for encrypting or signing data sent from the verification token to a validation entity.

51. The device of claim 50, wherein the encryption key is a symmetric encryption key.

52. The device of claim 50 wherein the device is a computer

53. The device of claim 50 wherein the verification token is protected from attacks from hackers.

54. The device of claim 50 wherein the second memory unit is a security module.

55. The device of claim 50 wherein the verification token stores a uniform resource identifier for the validation entity.

56. The device of claim 50 wherein the validation entity provides a dynamic account number and a device verification value to the verification token.

57. The device of claim 56 wherein the verification token stores the dynamic account number and the device verification value.

58. A method comprising:

receiving identification information at a verification token in a device, the device comprising (a) a housing, (h) a first processor disposed within the housing, (c) a first memory unit disposed within the housing, (d) an input-output controller coupled to the first processor, and (e) the verification token communicatively coupled to the input-output controller, the verification token comprising a second processor separate from the first processor, a second memory unit separate from the first memory unit and storing an encryption key;

encrypting, the identification data using the encryption key; and

transmitting, the encrypted identification data to a validation entity.

59. The method of claim 58, wherein the encryption key is a symmetric key.

60. The method of claim 58 wherein the encryption key is a first encryption key, and the validation entity holds a second encryption key, the first encryption key and the second encryption key being a symmetric key pair.

61. The method of claim 58 wherein the second memory unit is a security module.

62. The method of claim 58 wherein the verification token stores a uniform resource identifier for the validation entity.

63. The method of claim 58 further comprising:

receiving, by the device, a dynamic account number from the validation entity.

64. The method of claim 58 further comprising:

receiving, by the device, a dynamic account number and a device verification value from the validation entity.