Onetime passwords for smart chip cards

• US 8,095,113 B2
• Filed: 02/04/2009
• Issued: 01/10/2012
• Est. Priority Date: 10/17/2007
• Status: Active Grant

• Current Assignee: First Data Corporation (Fiserv Incorporated)
• Original Assignee: First Data Corporation (Fiserv Incorporated)
• Inventors: Kean, Brian, Cox, Christopher T.
• Primary Examiner(s): Afshar, Kamran
• Assistant Examiner(s): WANG-HURST, KATHY W
• Application Number:
  US12/365,697
• Publication Number:
  US 20090200371A1
• Time in Patent Office: 1,070 Days
• Field of Search: 705/14.3, 705/44, 705/67, 705/41, 705/14.63, 705/14.65, 235379-380, 235492-493, 726 4- 6, 455410-411
• US Class Current: 455/410
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G07F 7/0833 Card having specific functional components
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key

Abstract

A financial transaction card is provided according to various embodiments described herein. The financial transaction card includes a card body with at least a front surface and a back surface. The financial transaction card may also include a near field communications transponder and/or a magnetic stripe, as well as a digital display configured to display alphanumeric characters on the front surface of the card body. The financial transaction card may also include a processor that is communicatively coupled with the near field communications transponder or magnetic stripe and the digital display. The processor may be configured to calculate one-time passwords and communicate the one-time passwords to both the near filed communications transponder or magnetic stripe and the digital display.

Claims

1. A onetime password server comprising:

an input-output interface;

memory; and

a

a processor coupled with the input-output interface and the memory, wherein the processor includes instructions for

generating a first onetime password;

associating the first onetime password with a first account number;

looking up a mobile device phone number or identification number associated in the memory with the first account number;

transmitting the first onetime password to a mobile device through the input-output interface using the mobile device phone number or identification number;

receiving a second onetime password and a second account number from a point of sale device via the input-output interface;

determining whether the second onetime password and the first onetime password match;

in the event that the second onetime password and the first onetime password match, authenticating a transaction for use with the second account number; and

in the event that the second onetime password and the first onetime password do not match, denying authentication of a transaction for use with the second account number.

2. The onetime password server according to claim 1 wherein the processor further comprises instructions for storing the first onetime password in a relationship with the first account number in the memory.

3. The onetime password server according to claim 2 wherein the processor further comprises instructions for retrieving from the memory the first onetime password using the second account number.

4. The onetime password server according to claim 1 wherein the processor further comprises instructions for looking up a mobile device address associated in the memory with the first account number, wherein the onetime password is transmitted to the mobile device address associated with the account number.

5. The onetime password server according to claim 1 wherein the second onetime password is received from a point of sale device via the input-output interface.

6. The onetime password server according to claim 1 wherein the second onetime password is received from a financial institution via the input-output interface.

7. The onetime password server according to claim 1 wherein the second onetime password and the second account number is received from a financial institution via the input-output interface.

8. A method occurring at a one time password server that includes a processor and memory, the method comprising:

generating a first onetime password;

storing the first onetime passwords in association with the account number in memory;

looking up a mobile device phone number or identification number associated in the memory with the first account number;

transmitting the first onetime password to a mobile device using the mobile device phone number or identification number;

receiving a second onetime password and a second account number from a point of sale device;

retrieving a stored onetime password from memory associated with the second account number;

determining whether the second onetime password and the stored onetime password match;

in the event that the second onetime password and the stored onetime password match, authenticating a transaction for use with the second account number; and

in the event that the second onetime password and the stored onetime password do not match, denying authentication a transaction for use with the second account number.