Verification of portable consumer devices

• US 8,326,759 B2
• Filed: 04/27/2010
• Issued: 12/04/2012
• Est. Priority Date: 04/28/2009
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Hammad, Ayman
• Primary Examiner(s): Tinkler, Muriel
• Application Number:
  US12/768,661
• Publication Number:
  US 20100274721A1
• Time in Patent Office: 952 Days
• Field of Search: 705/35, 705/36.R, 705/37, 705/38, 705/39, 705/40, 705/41, 705/42, 705/43, 705/44, 235/383, 235/379, 235/380, 235/382
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G07F 19/2055 Anti-skimming aspects at ATMs

Abstract

Embodiments of the invention are directed to methods, systems, and computer program products pertaining to obtaining, providing, and using dynamic card verification values for portable consumer devices, such as credit cards and debit cards. An exemplary method comprises receiving, at a server, a request for a device verification value for a portable consumer device associated with a user; obtaining, at the server, a datum indicative of a device verification value for a portable consumer device; and sending, from the server, the datum to at least one of a phone number or network address of a personal communication device associated with the user.

Claims

1. A method comprising:

providing during a payment transaction, by a first personal communication device, a request for a dynamic verification value to a server, the request originating from the first personal communication device associated with a user, wherein a server is configured to obtain, from the received request, a phone number or network address of the first personal communication device from which the received request was originated,

obtain an account record that contains the obtained phone number or network address, the account record associating one or more consumer accounts with the obtained phone number or network address,

select a consumer account from the obtained account record,

obtaining a datum indicative of a dynamic verification value for the selected consumer account, and

send the obtained datum to at least one of the phone number or the network address;

receiving the datum indicative of the dynamic verification value at the first personal communication device or a second personal communication device associated with the phone number of the network address; and

generating, by the first personal communication device or the second personal communication device, the dynamic verification value from the datum indicative of the dynamic verification value.

2. The method of claim 1, wherein the first personal communication device is a personal computer.

3. The method of claim 1,

wherein receiving the datum indicative of the dynamic verification value at the first personal communication device or the second personal communication device associated with the phone number of the network address comprises receiving the datum indicative of the dynamic verification value at the second personal communication device;

and

wherein generating, by the first personal communication device or the second personal communication device, the dynamic verification value comprises generating, by the second personal communication device, the dynamic verification value.

4. The method of claim 3 wherein the first personal communication device is a personal computer associated with the user and the second personal communication device is a mobile phone associated with the user.

5. The method of claim 1, wherein the server is further configured to transmit to the phone number or network address an indication of a time period in which the dynamic verification value can be used for the transaction.

6. The method of claim 1, wherein prior to providing during the payment transaction, by the first personal communication device, the request for a dynamic verification value to the server, the method further comprises:

initiating the payment transaction.

7. The method of claim 1,

wherein receiving the datum indicative of the dynamic verification value at the first personal communication device or the second personal communication device associated with the phone number of the network address comprises receiving the datum indicative of the dynamic verification value at the second personal communication device,

wherein outputting, by the first personal communication device or the second personal communication device, the dynamic verification value to the user comprises outputting, by the second personal communication device, the dynamic verification value to the user, and

wherein the first personal communication device is a personal computer associated with the user and the second personal communication device is a mobile phone associated with the user, and wherein the method further comprises:

entering the dynamic verification value into a checkout page of a merchant Website.

8. The method of claim 7, wherein the merchant Website is operated by a merchant computer, and wherein the merchant computer generates an authorization request message comprising the dynamic verification value.

9. The method of claim 8, wherein the authorization request message is transmitted, by the merchant computer, to a payment processing network and to an issuer.

10. The method of claim 8 wherein the payment processing network authenticates the payment transaction by comparing the dynamic verification value received in the authorization request message with the dynamic verification value that was associated with the datum received at the second personal communication device.

11. The method of claim 1 wherein the dynamic verification value is a dCVV2 value.

12. The method of claim 1 wherein the consumer accounts are associated with portable consumer devices.

13. The method of claim 12 wherein the portable consumer devices are payment cards.

14. The method of claim 13 wherein the payment cards are credit cards.

15. The method of claim 1 wherein the server computer is further configured to generate a new dynamic verification value with each transaction.

16. The method of claim 7 wherein the merchant Website is displayed on the first personal communication device.