Method and device for generating a single-use financial account number

• US 8,315,948 B2
• Filed: 06/08/2006
• Issued: 11/20/2012
• Est. Priority Date: 08/28/1997
• Status: Expired due to Fees

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: Walker Digital LLC (Walker Innovation Inc. (f/k/a Patent Properties, Inc.))
• Inventors: Walker, Jay S., Schneier, Bruce, Jindal, Sanjay K., Tedesco, Daniel E.
• Primary Examiner(s): Elisca, Pierre E
• Application Number:
  US11/422,986
• Publication Number:
  US 20060218097A1
• Time in Patent Office: 2,357 Days
• Field of Search: 235/379, 705/50, 705/64, 705/67, 705/75
• US Class Current: 705/50
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G06Q 40/03 Credit; Loans; Processing thereof
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

A device for facilitating financial account transactions is described which includes a processing unit including a cryptographic processor. The device also includes an input unit, a display unit and a memory device connected to the processing unit. The memory device contains a private cryptographic key, a first data element and a second data element. The processing unit encrypts the first data element using the private cryptographic key and the second data element, modifies the second data element, combines the encrypted first data element and the second data element to generate a single-use financial account identifier, and displays the single-use financial account identifier. This identifier is then transmitted to a central processor for authorization of the transaction. The central processor extracts and decrypts data elements from the transmitted identifier using the private cryptographic key, compares those data elements with data elements stored in a memory, and verifies the single-use financial account identifier in accordance with the comparison.

Claims

1. A device for providing a single-use credit card number, the device comprising:

a central processor;

an input device in communication with the central processor;

a display in communication with the central processor; and

a storage device in communication with the central processor, the storage device including;

a first data element that is specific to a credit card account, and

instructions adapted to be executed by the central processor to;

receive a request by a user to generate a single-use credit card number;

access the first data element;

receive, via the input device, transaction-specific data comprising at least one of the following;

an amount of a purchase, or

an identifier that identifies a merchant,

combine the first data element and the transaction-specific data to produce a single-use credit card number that identifies the credit card account, in which the single-use credit card number is recognizable by a credit card authorization system as a credit card number, and

display the single-use credit card number via the display.

2. The device of claim 1, further comprising:

a biometric interface in communication with the central processor and operable to receive biometric input by the user.

3. The device of claim 2, in which the instructions are further adapted to be executed by the central processor to grant the user access to the device based on the biometric input.

4. The device of claim 1, in which combining comprises encrypting the first data element and the transaction-specific data.

5. The device of claim 1, in which the single-use credit card number is a sixteen-digit number.

6. The device of claim 1, the single-use credit card number having a total number of digits equal to a total number of digits of an account number that identifies the credit card account.

7. A non-transitory computer readable medium storing instructions configured to direct a processor to perform a method, the method comprising:

receiving, by a computing device comprising a processor, a request by a user to generate a single-use credit card number;

accessing, by the computing device, a first data element that is specific to a credit card account;

receiving, by the computing device via an input device, transaction-specific data comprising at least one of the following;

an amount of a purchase, or

an identifier that identifies a merchant;

combining the first data element and the transaction-specific data to produce a single-use credit card number that identifies the credit card account, in which the single-use credit card number is recognizable by a credit card authorization system as a credit card number; and

displaying the single-use credit card number via a display.

8. The non-transitory computer readable medium of claim 7, further comprising:

receiving biometric input from the user via a biometric interface.

9. The non-transitory computer readable medium of claim 7, further comprising:

granting the user access to the computing device based on the biometric input.

10. The non-transitory computer readable medium of claim 7, in which combining comprises encrypting the first data element and the transaction-specific data.

11. The non-transitory computer readable medium of claim 7, in which the single-use credit card number is a sixteen-digit number.

12. The non-transitory computer readable medium of claim 7, the single-use credit card number having a total number of digits equal to a total number of digits of an account number that identifies the credit card account.

13. A method comprising:

receiving, by a computing device comprising a processor, a request by a user to generate a single-use credit card number;

accessing, by the computing device, a first data element that is specific to a credit card account;

receiving, by the computing device via an input device, transaction-specific data comprising at least one of the following;

an amount of a purchase, or

an identifier that identifies a merchant;

combining the first data element and the transaction-specific data to produce a single-use credit card number that identifies the credit card account, in which the single-use credit card number is recognizable by a credit card authorization system as a credit card number; and

displaying the single-use credit card number via a display.

14. The method of claim 13, further comprising:

receiving biometric input from the user via a biometric interface.

15. The method of claim 13, further comprising:

granting the user access to the computing device based on the biometric input.

16. The method of claim 13, in which combining comprises encrypting the first data element and the transaction-specific data.

17. The method of claim 13, in which the single-use credit card number is a sixteen-digit number.

18. The method of claim 13, the single-use credit card number having a total number of digits equal to a total number of digits of an account number that identifies the credit card account.