SECURE COMMUNICATION OF PAYMENT INFORMATION TO MERCHANTS USING A VERIFICATION TOKEN

• US 20180315050A1
• Filed: 07/06/2018
• Published: 11/01/2018
• Est. Priority Date: 05/15/2009
• Status: Abandoned Application

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Hammad, Ayman
• Application Number:
  US16/028,941
• Publication Number:
  US 20180315050A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3255 using mobile network messaging services for payment, e.g. SMS
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 20/4018 using the card verification value [CVV] associated with the card
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation

Abstract

Disclosed are apparatuses, systems, and methods pertaining to the secure communication of payment information from portable consumer devices, such as credit cards, to online merchants using verification tokens.

Claims

1-50. -50. (canceled)

51. A method of communicating payment information to a merchant, the method comprising:

receiving, at a server, identification information of a portable consumer device read and sent by a verification token over a communications network, the verification token being coupled to a computer by way of a peripheral interface of the computer and configured to access a networking facility of the computer;

selecting a merchant to send data representative of at least a portion of the received identification information to; and

sending, from the server, data representative of at least a portion of the received identification information to a computer of the selected merchant.

52. The method of claim 51, wherein the identification information has an account number associated with a user, wherein selecting the merchant comprises identifying the selected merchant from a portion of the account number.

53. The method of claim 51, wherein the identification information has a personal account number that comprises a bank number and a user number, wherein selecting the merchant comprises extracting the bank number in the personal account number of the identification information and identifying the selected merchant from the extracted bank number.

54. The method of claim 51, wherein the identification information is received by the server in the form of a request that includes a merchant identifier, and wherein selecting the merchant comprises identifying the selected merchant from the received merchant identifier.

55. The method of claim 51, wherein the identification information is received by the server in the form of a request that includes a merchant identifier, and wherein selecting the merchant comprises selecting a single merchant for processing the request before the request is received.

56. The method of claim 51, further comprising:

applying at least one validation test pertaining to the identification information received by the server before sending the data representative of at least a portion of the received identification information to the computer of the selected merchant.

57. The method of claim 56, wherein applying at least one validation comprises:

receiving a serial number of the verification token and a test message encrypted by the verification token by an encryption key;

obtaining a key and one or more acceptable messages; and

validating the encrypted test message using the encrypted test message, the obtained key, and the obtained one or more acceptable messages.

58. The method of claim 56, wherein applying at least one validation comprises:

receiving a serial number of the verification token; and

comparing the received serial number with serial numbers of suspicious tokens.

59. The method of claim 56, wherein applying at least one validation comprises:

receiving one or more data messages having information specific to the computer, the information being obtained by the token; and

comparing the received information with computer-specific information of suspicious computers for a match.

60. The method of claim 56 wherein the identification information is conveyed by way of a network packet on a communications network, and wherein applying at least one validation comprises:

obtaining a source IP address from the network packet; and

comparing the obtained source IP address with suspect IP addresses for a match.

61. The method of claim 56, wherein the received identification information includes an account number of a portable consumer device and a digital fingerprint of a magnetic stripe of the portable consumer device, and wherein applying at least one validation comprises:

obtaining a valid digital fingerprint for the portable consumer device having the account number in the received identification information; and

comparing the digital fingerprint in the received identification information to the valid digital fingerprint.

62. The method of claim 56, wherein the received identification information includes an account number of a portable consumer device and a variable datum that varies each time the portable consumer device is read for its identification information, and wherein applying at least one validation comprises:

obtaining one or more acceptable datum values for the portable consumer device having the account number in the received identification information; and

comparing the variable datum in the received identification information to obtain one or more acceptable datum values for a match.

63. The method of claim 56, wherein the received identification information includes an account number of a portable consumer device and a variable datum that varies each time the portable consumer device is read for its identification information, and wherein applying at least one validation comprises:

sending the account number and the variable datum to an issuing bank with a request for the bank to determine if the variable datum is valid; and

receiving the issuing bank'"'"'s determination.

64. The method of claim 51, further comprising:

sending address information to the computer of the selected merchant.

65. The method of claim 51, further comprising:

sending a device verification value to the computer of the selected merchant along with the data representative of at least a portion of the identification information.

66. The method of claim 65, further comprising:

sending the device verification value and data representative of at least a portion of the identification information to a payment processing network.

67. The method of claim 65, further comprising:

sending the device verification value to the verification token.

68. The method of claim 51, further comprising:

identifying a mobile phone number or universal resource identifier of a communications device associated with the portable consumer device indicated in the received identification information; and

sending a message to the portable communications device indicating that an action has been taken with respect to the user'"'"'s portable consumer device.

69. The method of claim 68, wherein the message comprises a text message sent to a cell phone.

70. The method of claim 51, further comprising:

identifying an email address associated with the portable consumer device indicated in the received identification information; and

sending a message to the identified email address indicating that an action has been taken with respect to the user'"'"'s portable consumer device.

71-81. -81. (canceled)

82. A server comprising:

a processor; and

a computer readable medium coupled to the processor, the computer readable medium comprising code, executable by the processor for implementing a method comprising;

receiving, at the server, identification information of a portable consumer device read and sent by a verification token over a communications network, the verification token being coupled to a computer by way of a peripheral interface of the computer and configured to access a networking facility of the computer;

selecting a merchant to send data representative of at least a portion of the received identification information to; and

sending, from the server, data representative of at least a portion of the received identification information to a computer of the selected merchant.