Method and system for conducting secure payments over a computer network
First Claim
Patent Images
1. A method of conducting an electronic transaction over a public communications network with an account number, comprising:
- electronically generating a per-card key associated with said account number;
electronically generating a message authentication code using said per-card key;
electronically converting said message authentication code into a pseudo expiration date;
electronically generating an authorization request for said transaction, said request having an expiration date field containing said pseudo expiration date; and
electronically verifying said message authentication code based on said pseudo expiration date.
1 Assignment
0 Petitions
Accused Products
Abstract
A secure method of conducting an electronic transaction over a public communications network is provided which utilizes a pseudo-expiration date in the expiration date field of an authorization request. One of the preferred methods comprises:
- generating a per-card key associated with an account number;
- generating a message authentication code using the per-card key;
- converting the message authentication code into a pseudo expiration date;
- generating an authorization request for the transaction, the request having an expiration date field containing the pseudo expiration date; and
- verifying the message authentication code based on the pseudo expiration date.
- Another embodiment of the invention includes a method of conducting an electronic transaction over a public communications network, with a payment account number having an associated pseudo account number, comprising:
- (a) providing the pseudo account number with a control field indicating one of a plurality of key-generation processes to be used to generate an authentication key;
- (b) generating an authentication key associated with the pseudo account number using one of the plurality of key-generation processes indicated in the control field of the pseudo account number;
- (c) using the authentication key to generate a message authentication code specific to the transaction;
- (d) generating an authorization request message including the message authentication code and the pseudo account number; and
- (e) verifying the message authentication code using the indicated key-generation process and the authentication key.
-
Citations
14 Claims
-
1. A method of conducting an electronic transaction over a public communications network with an account number, comprising:
-
electronically generating a per-card key associated with said account number;
electronically generating a message authentication code using said per-card key;
electronically converting said message authentication code into a pseudo expiration date;
electronically generating an authorization request for said transaction, said request having an expiration date field containing said pseudo expiration date; and
electronically verifying said message authentication code based on said pseudo expiration date. - View Dependent Claims (2)
-
-
3. A method of conducting an electronic transaction over a public communications network with a payment account number having an associated pseudo account number, comprising:
-
(a) electronically generating by a service provider a per-card key associated with said pseudo account number using said payment account number and said pseudo account number;
(b) creating a secure payment application for use in said transaction including said per-card key, (c) using said per-card key to electronically generate a message authentication code (“
MAC”
);
(d) electronically generating a MAC verification request by said secure payment application including said pseudo account number and said MAC;
(e) electronically verifying said MAC;
(f) based on said verification, creating an expected transaction sequence number (ETSN) for said MAC;
(g) providing said secure payment application with reference data;
(h) electronically creating a second message authentication code using said expected transaction sequence number and said per-card key;
(i) electronically converting said second message authentication code into a pseudo expiration date using said reference data;
(j) electronically generating an authorization request having an expiration date field containing said pseudo expiration date; and
(k) responding to said authorization request and verifying said second message authentication code based on said pseudo expiration date. - View Dependent Claims (4, 5, 6, 7, 8, 9)
-
-
10. A method of conducting an electronic transaction over a public communications network, with a payment account number having an associated pseudo account number, comprising:
-
(a) electronically providing said pseudo account number with a control field indicating one of a plurality of key-generation processes to be used to generate an authentication key;
(b) electronically generating an authentication key associated with said pseudo account number using said one of said plurality of key-generation processes indicated in said control field of said pseudo account number;
(c) using said authentication key to electronically generate a message authentication code specific to said transaction;
(d) electronically generating an authorization request message including said message authentication code and said pseudo account number; and
(e) verifying the message authentication code using said indicated key-generation process and said authentication key. - View Dependent Claims (11, 12)
-
-
13. A method of conducting an electronic transaction over a communications network with an account number, comprising:
-
electronically generating a per-card key associated with said account number;
electronically generating a message authentication code using said per-card key;
providing at least two different operating modes for forwarding in different manners said message authentication code with an authorization request having different fields, at least one of said operating modes for forwarding said message authentication code in an expiration date field and at least one of said operating modes for forwarding said message authentication code in a message authentication code field. - View Dependent Claims (14)
-
Specification