System and Methods for Secure Wireless Payment Transactions When a Wireless Network is Unavailable

• US 20170255924A1
• Filed: 05/18/2017
• Published: 09/07/2017
• Est. Priority Date: 03/12/2011
• Status: Active Grant

• Current Assignee: Stripe, Inc.
• Original Assignee: Cria Inc.
• Inventors: White, William O.
• Granted Patent: US 10,467,618 B2
• Time in Patent Office: Days
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4015 using location information
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05

Abstract

Systems, methods, and devices are disclosed which allow a mobile device user to complete financial transactions even when the mobile device is not connected to a wireless network. The systems, methods, and devices of the present disclosure may utilize a combination of an encrypted lockbox containing out of network payment codes on the mobile device and a matching set of out of network payment codes stored on a server of a payment authority.

Claims

1. A method for authorizing a transaction, the method comprising:

receiving at a payment authority server, from a point of sale terminal, a payment code associated with a state of network disconnectivity at a mobile device;

authorizing the transaction associated with the point of sale terminal in response to a determination that a set of payment codes stored by the payment authority server contains the payment code received from the point of sale terminal, wherein the set of payment codes stored by the payment authority server is associated with the state of network disconnectivity at the mobile device; and

invalidating the received payment code at the payment authority server for future transactions.

2. The method of claim 1, further comprising:

marking the received payment code as used in the set of payment codes stored by the payment authority server.

3. The method of claim 1, further comprising:

transmitting a replacement payment code to the mobile device in response to the mobile device connecting to a wireless network.

4. The method of claim 1, further comprising:

rendering the received payment code unusable for a predetermined period of time.

5. The method of claim 1, further comprising:

associating set of payment codes stored by the payment authority server with a user of the mobile device.

6. The method of claim 1, wherein the received payment code comprises:

a first portion provided to the mobile device by the payment authority server; and

a second portion known to a user of the mobile device.

7. The method of claim 1, further comprising:

adjusting a set period of validity for at least one payment code in the set of payment codes stored by the payment authority server based on a location of the mobile device.

8. The method of claim 1, wherein a length of the received payment code and each stored payment code in the set of payment codes stored by the payment authority server is variable.

9. The method of claim 1, wherein at least one stored payment code in the set of payment codes stored by the payment authority server is valid indefinitely.

10. A payment authority server, comprising:

at least one processor; and

at least one memory communicatively coupled with the at least one processor, the at least one memory comprising executable code that, when executed by the at least one processor, causes the at least one processor to;

receive at the payment authority server, from a point of sale terminal, a payment code associated with a state of network disconnectivity at a mobile device;

authorize a transaction associated with the point of sale terminal in response to a determination that a set of payment codes stored by the payment authority server contains the payment code received from the point of sale terminal, wherein the set of payment codes stored by the payment authority server is associated with the state of network disconnectivity at the mobile device; and

invalidate the received payment code at the payment authority server for future transactions.

11. The payment authority server of claim 10, wherein the executable code is further configured to cause the at least one processor to:

mark the received payment code as used in the set of payment codes stored by the payment authority server.

12. The payment authority server of claim 10, wherein the executable code is further configured to cause the at least one processor to:

transmit a replacement payment code to the mobile device in response to the mobile device connecting to a wireless network.

13. The payment authority server of claim 10, wherein the executable code is further configured to cause the at least one processor to:

render the received payment code unusable for a predetermined period of time.

14. The payment authority server of claim 10, wherein at least one stored payment code in the set of payment codes stored by the payment authority server is valid indefinitely.