Method and system for generating a dynamic verification value

• US 7,740,168 B2
• Filed: 06/18/2007
• Issued: 06/22/2010
• Est. Priority Date: 08/18/2003
• Status: Expired due to Term

• Current Assignee: Visa USA, Inc. (Visa, Inc.)
• Original Assignee: Visa USA, Inc. (Visa, Inc.)
• Inventors: Faith, Patrick, Hammad, Ayman, Aabye, Christian, Sahota, Jagdeep Singh
• Primary Examiner(s): Labaze; Edwyn
• Application Number:
  US11/764,376
• Publication Number:
  US 20080029593A1
• Time in Patent Office: 1,100 Days
• Field of Search: 235/379, 235/380, 235/375, 235/487, 235/492, 235/451, 235/443, 705/41
• US Class Current: 235/379
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4093 Monitoring of device authentication
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A method is disclosed. The method includes generating a verification value in response to a transaction involving a portable consumer device, where the verification value is generated using a first dynamic data element and a second dynamic data element. The verification value is sent to a service provider associated with the portable consumer device so that the service provider can verify the transaction.

Claims

1. A method comprising:

generating a verification value in response to a transaction involving a portable consumer device, wherein the verification value is generated using a first dynamic data element and a second dynamic data element, wherein the first dynamic data element or the second dynamic data element includes a time of day or a current transaction amount; and

sending the verification value to a service provider with data in a magnetic stripe data format so that the service provider can verify the verification value,

wherein the verification value is also generated using at least one static data element, and wherein the transaction is a payment transaction, and wherein the static data element includes at least one of an expiration date, a phone number, a SIM card number, a service code, and an account number.

2. The method of claim 1 wherein the verification value is derived using unique derived keys (UDKs).

3. The method of claim 1 wherein the verification value is generated on the portable consumer device.

4. The method of claim 1 wherein the verification value is generated on a point of sale terminal.

5. The method of claim 1 wherein the portable consumer device is in the form of a card.

6. The method of claim 1 wherein the first dynamic data element or the second dynamic data element includes the time of day.

7. The method of claim 1 wherein the portable consumer device is in the form of a phone.

8. The method of claim 1 wherein at least one of the first dynamic data element, and second dynamic data element, and the at least one static data element are sent to the service provider in a discretionary data field, along with the current transaction amount.

9. The method of claim 1 wherein the verification value is generated by the portable consumer device, wherein the portable consumer device comprises a wireless device.

10. The method of claim 9 wherein the portable consumer device wirelessly transmits the generated verification value to a point of sale terminal, before being sent to the service provider.

11. A computer readable medium comprising:

code for generating a verification value in response to a transaction involving a portable consumer device, wherein the verification value is generated using a first dynamic data element and a second dynamic data element, wherein the first dynamic data element or the second dynamic data element includes a time of day or a current transaction amount; and

code for sending the verification value to a service provider with data in a magnetic stripe data format so that the service provider can verify the verification value,

wherein the verification value is also generated using at least one static data element, and wherein the transaction is a payment transaction, and wherein the static data element includes at least one of an expiration date, a phone number, a SIM card number, a service code, and an account number.

12. The computer readable medium of claim 11 wherein the verification value is derived using unique derived keys (UDKs).

13. A portable consumer device comprising the computer readable medium of claim 11.

14. A phone comprising the computer readable medium of claim 11.

15. A point of sale terminal comprising the computer readable medium of claim 11.

16. The computer readable medium of claim 11 wherein the first dynamic data element or the second dynamic data element includes the time of day.

17. A method comprising:

receiving an authorization request message comprising a first verification value, along with data comprising an indicator that the first verification value is included in the authorization request message, in a magnetic stripe data format in response to a transaction involving a portable consumer device, wherein the first verification value is generated using a first dynamic data element and a second dynamic data element, wherein the first dynamic data element or the second dynamic data element includes a time of day or a current transaction amount, and wherein the authorization request message further comprises the time of day or the current transaction amount; and

determining if the received first verification value matches a second verification value at a service provider computer.

18. A computer readable medium comprising code for performing the method of claim 17.

19. A computer comprising the computer readable medium of claim 17.

20. The method of claim 17 wherein the first dynamic data element includes the time of day.

21. The method of claim 17 wherein at least one of the first dynamic data element, and second dynamic data element, and the at least one static data element are sent to the service provider in a discretionary data field, along with the current transaction amount.

22. The method of claim 17 wherein the verification value is generated by the portable consumer device, wherein the portable consumer device comprises a wireless device, and wherein the portable consumer device wirelessly transmits the generated verification value to a point of sale terminal, before being sent to the service provider.

23. A system comprising:

means for receiving an authorization request message comprising a first verification value, along with data comprising an indicator that the first verification value is included in the authorization request message, in a magnetic stripe data format in response to a transaction involving a portable consumer device, wherein the first verification value is generated using a first dynamic data element and a second dynamic data element, wherein the first dynamic data element or the second dynamic data element includes a time of day or a current transaction amount, and wherein the authorization request message further comprises the time of day or the current transaction amount; and

means for determining if the received first verification value matches a second verification value at a service provider computer.

24. The system of claim 23 wherein the first dynamic data element includes the time of day.