Transparently securing data for transmission on financial networks

• US 8,249,993 B2
• Filed: 04/25/2008
• Issued: 08/21/2012
• Est. Priority Date: 09/07/2004
• Status: Active Grant

• Current Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Original Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Inventors: von Mueller, Clay
• Primary Examiner(s): Reagan, James A
• Assistant Examiner(s): CHEUNG, CALVIN K
• Application Number:
  US12/110,106
• Publication Number:
  US 20080243701A1
• Time in Patent Office: 1,579 Days
• Field of Search: None
• US Class Current: 705/75
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06K 7/082 using inductive or magnetic sensors
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G07C 9/22 in combination with an identity check of the pass holder
• CPC Class Codes: G07F 19/206 Software aspects at ATMs
• CPC Class Codes: G07F 7/084 Additional components relating to data transfer and storing, e.g. error detection, self-diagnosis
• CPC Class Codes: G07F 7/0873 Details of the card reader
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 : Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 : Wireless
• CPC Class Codes: H04L 9/0891 : Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3297 : involving time stamps, e.g. generation of time stamps

Abstract

Systems and methods for performing financial transactions are provided. In one embodiment, the invention provides a method for processing token data for a bank card transaction, the method includes: receiving a string of first token data from a token at a token reader; modifying the first token data and generating second token data, the second token data including modified token data; performing a modulo arithmetic operation on the second token data and determining a mod 10 check digit that will cause a modulo arithmetic check of the second token data to yield the same result as the modulo arithmetic check would yield on the first token data; and inserting the mod 10 check digit in the second data string and forwarding the second data string for the transaction.

Claims

1. A method for encrypting bank card data from a bank card presented for a purchase transaction and for presenting encrypted bank card data to a transaction processing network for the purchase, the method comprising:

a point of sale bank card reader receiving a first set of bank card data from the bank card presented to the point of sale card reader for the purchase transaction, wherein the first set of data comprises clear text bank card data read from the bank card at the point of sale;

the bank card reader encrypting a selected subset of characters of the clear text bank card data read from the bank card at the point of sale;

the bank card reader replacing the original selected subset of characters of the card data with the encrypted selected subset of characters of the card data thereby creating encrypted bank card transaction data;

the bank card reader performing a mod 10 calculation on the encrypted bank card transaction data;

the bank card reader determining a digit that can be inserted into the encrypted bank card transaction data to cause a modulo 10 arithmetic check of the encrypted bank card transaction data to yield the same result as a modulo 10 arithmetic check would yield on the clear text bank card data read from the bank card at the point of sale;

inserting the digit into the encrypted bank card transaction data; and

forwarding the encrypted bank card transaction data with the digit to the transaction processing network for the purchase transaction.

2. The method of claim 1, wherein the encrypted bank card transaction data comprises a string of encrypted token data and clear text token data, and the encrypted hank card transaction data is assembled in the same format as the clear text bank card data.

3. The method of claim 1, wherein the first set of bank card data comprises an account number.

4. The method of claim 1, wherein the digit is inserted into the encrypted bank card transaction data at a predetermined location of the encrypted bank card transaction data and an original mod 10 check digit in the first set of bank card data remains in the encrypted bank card transaction data and is recoverable upon decryption of the encrypted bank card transaction data.

5. The method of claim 1, wherein the first set of token data is track data from a track of the bank card.

6. The method of claim 1, wherein the first set of token data is a personal account number encoded on the bank card.

7. The method of claim 1, wherein the clear text bank card data comprises a mod 10 check digit.

8. The method of claim 1, wherein the encrypting selected characters comprises converting the selected characters to eight bytes, and performing an triple DES encryption on the selected token data.

9. The method of claim 1, wherein the selected subset of characters comprises some or all of the first set of bank card data.

10. The method of claim 1, wherein the encrypting a selected subset of characters and creating encrypted bank card transaction data comprises:

converting X digits of the first set of bank card to a predetermined number of Y bytes; and

performing a Y-byte encryption on the converted card data; and

convert the encrypted Y bytes of encrypted data to X digits.

11. The method of claim 10, wherein performing the modulo arithmetic and inserting the mod 10 check digit comprises performing a modulo calculation on the X digits to determine the mod 10 check digit and inserting the mod 10 check digit in the appended predetermined digit.

12. The method of claim 1, wherein the encrypted selected subset of characters of the card data replaces the original selected subset of characters of the card data at the same location or locations in the first set of bank card data.

13. The method of claim 1, wherein at least one of the steps of encrypting and replacing is performed inside a magnetic stripe read head of the point of sale bank card reader.

14. A computer program product comprising a computer readable non-transitory storage medium having computer readable code embodied thereon that is configured to cause a processor to perform a method for encrypting bank card data from a bank card presented for a purchase transaction and for presenting encrypted bank card data to a transaction processing network for the purchase, the method comprising:

a point of sale bank card reader receiving a first set of bank card data from the bank card presented to the point of sale card reader for the purchase transaction, wherein the first set of data comprises clear text bank card data read from the bank card at the point of sale;

the bank card reader encrypting a selected subset of characters of the clear text bank card data read from the bank card at the point of sale;

the bank card reader replacing the original selected subset of characters of the card data with the encrypted selected subset of characters of the card data thereby creating encrypted bank card transaction data;

the bank card reader performing a mod 10 calculation on the encrypted bank card transaction data;

the bank card reader determining a digit that can be inserted into the encrypted bank card transaction data to cause a modulo 10 arithmetic check of the encrypted bank card transaction data to yield the same result as a modulo 10 arithmetic check would yield on the clear text bank card data read from the bank card at the point of sale;

inserting the digit into the encrypted bank card transaction data; and

forwarding the encrypted bank card transaction data with the digit to the transaction processing network for the purchase transaction.

15. The computer program product of claim 14, wherein the encrypted bank card transaction data comprises a string of encrypted token data and clear text token data, and the encrypted bank card transaction data is assembled in the same format as the clear text bank card data.

16. The computer program product of claim 14, wherein the first set of bank card data comprises an account number.

17. The computer program product of claim 14, wherein the digit is inserted into the encrypted bank card transaction data at a predetermined location of the encrypted bank card transaction data and an original mod 10 check digit in the first set of bank card data remains in the encrypted bank card transaction data and is recoverable upon decryption of the encrypted bank card transaction data.

18. The computer program product of claim 14, wherein the first set of token data is track data from a track of the bank card.

19. The computer program product of claim 14, wherein the first set of token data is a personal account number encoded on the bank card.

20. The computer program product of claim 14, wherein the clear text bank card data comprises a mod 10 check digit.

21. The computer program product of claim 14, wherein the encrypting selected characters comprises converting the selected characters to eight bytes, and performing an triple DES encryption on the selected token data.

22. The computer program product of claim 14, wherein the selected subset of characters comprises some or all of the first set of bank card data.

23. The computer program product of claim 14, wherein the encrypting a selected subset of characters and creating encrypted bank card transaction data comprises:

converting X digits of the first set of bank card to a predetermined number of Y bytes; and

performing a Y-byte encryption on the converted card data; and

converting the encrypted Y bytes of encrypted data to X digits.

24. The computer program product of claim 23, wherein performing the modulo arithmetic and inserting the mod 10 check digit comprises performing a modulo calculation on the X digits to determine the mod 10 check digit and inserting the mod 10 check digit in the appended predetermined digit.

25. The computer program product of claim 14, wherein the encrypted selected subset of characters of the card data replaces the original selected subset of characters of the card data at the same location or locations in the first set of bank card data.

26. The computer program product of claim 14, wherein at least one of the steps of encrypting and replacing is performed inside a magnetic stripe read head of the point of sale bank card reader.