Track data encryption

• US 7,818,264 B2
• Filed: 06/12/2007
• Issued: 10/19/2010
• Est. Priority Date: 06/19/2006
• Status: Active Grant

• Current Assignee: Visa USA, Inc. (Visa, Inc.)
• Original Assignee: Visa USA, Inc. (Visa, Inc.)
• Inventors: Hammad, Ayman
• Primary Examiner(s): Hewitt, II; Calvin L
• Assistant Examiner(s): Nilforoush; Mohammad A
• Application Number:
  US11/761,821
• Publication Number:
  US 20070294182A1
• Time in Patent Office: 1,225 Days
• Field of Search: None
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A method for using a secondary PAN is disclosed. The method includes providing a secondary PAN associated with a primary PAN, where the secondary PAN has at least one end portion that is the same as the primary PAN, but has a middle portion of that is different than the primary PAN.

Claims

1. A method comprising:

receiving an authorization request message associated with a transaction at a server computer, the authorization request message including a secondary PAN associated with a primary PAN comprising a primary PAN first end portion consisting of a six digit bank identification number, a primary PAN second end portion consisting of four digits, and a primary PAN middle portion, comprising at least three digits, between the primary PAN first end portion and the primary PAN second end portion, wherein the secondary PAN has a secondary PAN first end portion consisting of the six digit bank identification number, a secondary PAN second end portion comprising the four digits of the primary PAN second end portion, and a secondary PAN middle portion that is different from the primary PAN middle portion, wherein the secondary PAN middle portion comprises at least three digits that are identical and wherein the secondary PAN is in a PAN field in the authorization request message;

analyzing the secondary PAN by the server computer and determining that the secondary PAN comprises the at least three digits that are identical and that the secondary PAN is not a real primary account number;

based on the determining that the secondary PAN comprises the at least three digits that are identical, obtaining the primary PAN by the server computer from a location in the authorization request message other than the PAN field;

analyzing the primary PAN by the server computer; and

sending an authorization response message by the server computer, wherein the authorization response message indicates approval or disapproval of the transaction,

wherein both the primary PAN and the secondary PAN are either 13, 16, or 19 digits long.

2. The method of claim 1, wherein the primary PAN is associated with a portable consumer device, and wherein the method is performed by an issuer or a payment processing network.

6. The method of claim 1, wherein the secondary PAN middle portion comprises encrypted digits.

7. The method of claim 6, wherein the encrypted digits are dynamically generated.

8. The method of claim 1, wherein the secondary PAN middle portion comprises a number that will cause the secondary PAN to produce a checksum value that is the same as that produced by the primary PAN.

13. The method of claim 1 wherein the secondary PAN consists of the secondary PAN first end portion, the secondary PAN second end portion, and the secondary PAN middle portion.

14. The method of claim 13 wherein the secondary PAN middle portion has digits that are all identical.

15. The method of claim 13 wherein the secondary PAN middle portion has digits that are all identical, except for one digit which causes the secondary PAN to produce the same checksum value as the primary PAN.

16. The method of claim 1 wherein the authorization request message comprises an expiration date field, a service code field, and a card verification value.

18. The method of claim 1 further comprising:

sending a re-formatted authorization request message to an issuer, wherein the re-formatted authorization request message comprises the primary PAN.

19. The method of claim 18 wherein the secondary PAN middle portion has digits that are all identical, except for one digit which causes the secondary PAN to produce the same checksum value as the primary PAN.

20. The method of claim 19 further comprising, receiving, by an access device, the primary PAN, wherein the authorization request message is received at the server computer from the access device that generates the authorization request message comprising the secondary PAN after the access device receives the primary PAN.

21. The method of claim 1 further comprising, receiving, by an access device, the primary PAN, wherein the authorization request message is received at the server computer from the access device that generates the authorization request message comprising the secondary PAN after the access device receives the primary PAN.

22. The method of claim 1 wherein the secondary PAN middle portion comprises a number that will cause the secondary PAN to produce a checksum value that is the same as that produced by the primary PAN, and wherein the method further comprises:

performing checksum calculations by the server computer on the primary PAN and the secondary PAN, wherein the calculated checksum values calculated for the primary and secondary PANs are the same.

3. A computer readable storage medium having a computer readable code embodied therein, said computer readable code when executed by a processor causes the processor to perform a method comprising:

receiving an authorization request message associated with a transaction, the authorization request message including a secondary PAN associated with a primary PAN comprising a primary PAN first end portion consisting of a bank identification number, a primary PAN second end portion consisting of four digits, and a primary PAN middle portion, comprising at least three digits, between the primary PAN first end portion and the primary PAN second end portion, wherein the secondary PAN has a secondary PAN first end portion consisting of the bank identification number, a secondary PAN second end portion comprising the four digits of the primary PAN second end portion, and a secondary PAN middle portion that is different from the primary PAN middle portion, wherein the secondary PAN middle portion comprises at least three digits that are identical and wherein the secondary PAN is in a PAN field in the authorization request message;

analyzing the secondary PAN and determining that the secondary PAN comprises the at least three digits that are identical and that the secondary PAN is not a real primary account number;

based on the determining that the secondary PAN comprises the at least three digits that are identical, obtaining the primary PAN from a location in the authorization request message other than the PAN field;

analyzing the primary PAN; and

sending an authorization response message, wherein the authorization response message indicates approval or disapproval of the transaction,

wherein both the primary PAN and the secondary PAN are either 13, 16, or 19 digits long.

4. The computer readable medium of claim 3 wherein the method further comprises identifying the bank identification number and routing the authorization request message based on the bank identification number.

9. The computer readable medium of claim 3, wherein the secondary PAN middle portion comprises an encrypted portion.

10. The computer readable medium of claim 9, wherein the encrypted portion is generated dynamically.

11. The computer readable medium of claim 9, wherein the encrypted portion is statically stored on a portable consumer device.

12. The computer readable medium of claim 3, wherein the secondary PAN middle portion comprises a number that will cause the secondary PAN to produce a checksum value that is the same as that produced by the primary PAN.

17. The computer readable medium of claim 3 wherein the authorization request message comprises an expiration date field, a service code field, and a card verification value.

5. A server comprising:

a processor; and

a computer readable storage medium coupled to the processor, the computer readable storage medium comprising code, that when executed by the processor, causes the processor to perform a method comprising

receiving an authorization request message associated with a transaction, the authorization request message including a secondary PAN associated with a primary PAN comprising a primary PAN first end portion consisting of a bank identification number, a primary PAN second end portion consisting of four digits, and a primary PAN middle portion, comprising at least three digits, between the primary PAN first end portion and the primary PAN second end portion, wherein the secondary PAN has a secondary PAN first end portion consisting of the bank identification number, a secondary PAN second end portion comprising the four digits of the primary PAN second end portion, and a secondary PAN middle portion that is different from the primary PAN middle portion, wherein the secondary PAN middle portion comprises at least three digits that are identical and wherein the secondary PAN is in a PAN field in the authorization request message;

analyzing the secondary PAN and determining that the secondary PAN comprises the at least three digits that are identical and that the secondary PAN is not a real primary account number;

based on determining that the secondary PAN comprises the at least three digits that are identical, obtaining the primary PAN from a location in the authorization request message other than the PAN field;

analyzing the primary PAN; and

sending an authorization response message, wherein the authorization response message indicates approval or disapproval of the transaction,

wherein both the primary PAN and the secondary PAN are either 13, 16, or 19 digits long.