One-time password credit/debit card

• US 8,266,441 B2
• Filed: 04/22/2005
• Issued: 09/11/2012
• Est. Priority Date: 04/22/2005
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Inskeep, Todd Keith, Phillips, Richard Wade
• Primary Examiner(s): PERUNGAVOOR, VENKATANARAY
• Application Number:
  US10/907,961
• Publication Number:
  US 20060242698A1
• Time in Patent Office: 2,699 Days
• Field of Search: 713/172, 713/179, 713182-186, 713193-194
• US Class Current: 713/185
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3415 Cards acting autonomously as pay-media
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A one-time password (OTP) generator in combination with a conventional credit/debit card comprising a card having a magnetic bar stripe, raised imprint card numbers and name, expiration date and four digit code as are known in the art is provided. Full smart card functionality may also be provided. The card also includes a microprocessor and software, dedicated chip or a memory chip for generating the OTP. A visual and/or audio display is provided on the card to output the OTP to the user. The end user inputs the OTP to access the secured system. The credit/debit card functionality may be used apart from the OTP generator functionality.

Claims

1. A credit/debit card comprising:

one or more input devices positioned on the credit/debit card and configured to enable a user of the credit/debit card to input information into the credit/debit card including a challenge response, wherein the one or more input devices comprises a plurality of buttons corresponding to a plurality of characters, wherein a challenge response comprises a plurality of characters, and wherein a challenge response may be input into the credit/debit card using the plurality of buttons;

a processor in communication with the one or more input devices, wherein said processor is configured to determine whether an input challenge response is successful;

a one-time password generator configured to generate a one-time password based at least partially on the challenge response input by the user into the credit/debit card;

a display for displaying the one-time password;

a power source; and

an authentication device allowing the credit/debit card to be used for performing credit/debit transactions.

2. The credit/debit card of claim 1 wherein audio signals representing the one-time password are generated.

3. The credit/debit card of claim 1, wherein the authentication device comprises a processor for storing information and a member for transmitting the information.

4. The credit/debit card of claim 1, further comprising a body and raised numbers on said body.

5. The credit/debit card of claim 1, further comprising a physical contact interface for transmitting the one-time password.

6. The credit/debit card of claim 1 further including a body having the approximate size and shape of the credit/debit card.

7. The credit/debit card of claim 1, wherein the authentication device comprises a magnetic stripe.

8. The credit/debit card of claim 7, wherein the coded magnetic stripe comprises financial account information needed to perform credit or debit transactions.

9. The credit/debit card of claim 1, wherein the authentication device comprises a signature block.

10. The credit/debit card of claim 1, wherein the authentication device comprises a smart card processor.

11. The credit/debit card of claim 1, wherein the authentication device comprises a card number.

12. The credit/debit card of claim 1 where the one-time password generator comprises a special purpose integrated circuit chip.

13. The credit/debit card of claim 1 where the one-time password generator comprises a microprocessor chip.

14. The credit/debit card of claim 1 wherein the one-time password generator generates the one-time password using a time/clock-based algorithm.

27. The credit/debit card of claim 1, wherein the challenge is presented to the user by displaying the challenge to the user via the display.

28. The credit/debit card of claim 1, wherein the display is configured to display a challenge to the user, and wherein the user inputs the successful challenge response in response to the challenge being displayed.

29. The credit/debit card of claim 28, wherein the successful challenge response is different than the challenge.

15. A method for generating a one-time password using a credit/debit card, the method comprising:

receiving, by the credit/debit card, a challenge response inputted into the credit/debit card by a user of the credit/debit card, wherein the credit/debit card comprises one or more input devices configured to enable the user to input the challenge response, wherein the one or more input devices comprises a plurality of buttons corresponding to a plurality of characters, wherein a challenge response comprises a plurality of characters, and wherein a challenge response may be input into the credit/debit card using the plurality of buttons, one or more output devices, and a one-time password generator;

determining whether an input challenge response is successful

generating, by the one-time password generator, a one-time password based at least partially on a challenge response input by a user; and

outputting, by the one or more output devices comprising a display, the one-time password to the user via the display.

16. The method of claim 15 where the one-time password generator comprises a special purpose integrated circuit chip.

17. The method of claim 15 where the one-time password generator comprises a microprocessor chip.

18. The method of claim 15 where the one-time password is generated using a HOTP algorithm.

19. The method of claim 15 where the one-time password is generated using a time/clock-based algorithm.

20. The method of claim 15 wherein the outputting the one-time password comprises outputting, by the one or more output devices, one or more audio signals representing the one-time password.

21. The method of claim 15, wherein the credit/debit card comprises a coded magnetic stripe on the credit/debit card that enables the credit/debit card to be used as a payment device.

22. The method of claim 15, further comprising using a processor on the card for storing and transmitting information.

23. The credit/debit card of claim 15 wherein the one-time password identifies a credit/debit account associated with the credit/debit card.

30. The method of claim 15, further comprising:

presenting, by the one or more output devices, a challenge to the user, wherein the presenting the challenge occurs before the receiving the challenge response.

31. The method of claim 30, wherein the challenge is different than the challenge response.

32. The method of claim 15, wherein the challenge response comprises two or more inputs.

24. An apparatus comprising:

a challenge module for presenting a challenge to a user, said challenge module comprising a plurality of buttons corresponding to a plurality of characters, wherein a challenge response comprises a plurality of characters, and wherein a challenge response may be input into the credit/debit card using the plurality of buttons;

memory for receiving a challenge response inputted into the apparatus in response to the challenge being presented to the user;

a processor in communication with the one or more input devices, wherein said processor is configured to determine whether an input challenge response is verified;

a generator for generating a one-time password based at least partially on the challenge response input by the user;

a device for presenting the one-time password; and

an authentication device allowing the apparatus to be used for performing transactions.

25. The apparatus of claim 24 wherein the authentication device comprises at least one of:

a coded magnetic stripe having a financial account identifier encoded therein;

or

digits displaying the identifier.

26. The apparatus of claim 24 wherein the apparatus comprises a credit/debit card associated with a credit/debit account.