Portable consumer device configured to generate dynamic authentication data

• US 8,375,441 B2
• Filed: 09/01/2010
• Issued: 02/12/2013
• Est. Priority Date: 06/19/2006
• Status: Active Grant

• Current Assignee: Visa USA, Inc. (Visa, Inc.)
• Original Assignee: Visa USA, Inc. (Visa, Inc.)
• Inventors: Hammad, Ayman, Faith, Patrick
• Primary Examiner(s): Chea, Philip
• Assistant Examiner(s): ABEDIN, SHANTO
• Application Number:
  US12/874,008
• Publication Number:
  US 20110066516A1
• Time in Patent Office: 895 Days
• Field of Search: 726/2, 726/27, 726/36, 726/20, 726/21, 713/168, 713/189, 713/194, 705/44, 705/50, 705/64, 705/75, 705/67, 235/462.45, 235/492
• US Class Current: 726/21
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

Embodiments of the invention provide a portable consumer device configured to store dynamic authentication data in memory. The portable consumer device also includes an interface for transmitting data to and receiving power from an external device. The dynamic authentication data is read from the memory by a read-write device located on the portable consumer device. The authentication data is updated and the updated data may be written into memory using the read-write device. In some embodiments, an authentication value read from the memory may be used to generate another authentication value based on an algorithm. The portable consumer device is further configured to transmit authentication data to an external device. The process of reading, updating, generating, transmitting, and rewriting the authentication data may occur each time external power is provided to the portable consumer device via the interface. The power for operating the components of the portable consumer device may be drawn exclusively from the power received from the external device (i.e., the external power). In some embodiments, a portion of the external power may be temporarily stored on an energy storage means of the portable consumer device.

Claims

1. A portable consumer device comprising:

a batteryless portable body of a consumer device;

memory housed by the portable body, the memory storing dynamic authentication data;

a read-write device housed by the portable body and coupled to the memory, the read-write device being configured to change the dynamic authentication data each time the portable consumer device is temporarily powered by an external device, wherein the read-write device is configured to read the dynamic authentication data from the memory before a transaction, and write updated dynamic authentication data to the memory after the transaction; and

an antenna coupled to the portable body and coupled to the read-write device,

wherein the read-write device is configured to function only when receiving power from the external device that is not of the consumer.

2. The portable consumer device of claim 1, wherein each and every time the antenna is within range of an active energy field of the external device, the dynamic authentication data is communicated to the external device via the antenna.

3. The portable consumer device of claim 2, wherein external device comprises a contactless point-of-sale device which requires no physical contact with the portable body in order to communicate to the antenna.

4. The portable consumer device of claim 2, wherein the contactless point-of-sale device generates the active energy field in order to conduct a transaction with the consumer.

5. The portable consumer device of claim 1, wherein the antenna comprises a coil which generates a charge to power the read-write device each and every time the charge is generated via an electromagnetic field generated by the external device.

6. The portable consumer device of claim 1, wherein the portable body comprises a payment card.

7. The portable consumer device of claim 6, wherein the external device is one of an ATM device and point-of-sale device.

8. The portable consumer device of claim 1, wherein electrical energy used to temporarily power the read-write device is only sourced from the external device.

9. The portable consumer device of claim 8, wherein the electrical energy is temporarily stored in an energy storage device within the portable body, and wherein the temporarily stored electrical energy is completely discharged from the energy storage device by the end of a transaction with the external device.

10. The portable consumer device of claim 9, wherein each time the electrical energy is used to temporarily power the read-write device, the read-write device is further configured to generate a verification value based on the updated authentication data.

11. The portable consumer device of claim 1, further comprising:

a processor housed by the portable consumer device, configured to generate the dynamic verification value using an algorithm stored in the memory.

12. The portable consumer device of claim 1, wherein the portable consumer device is configured to receive power from the external device when the portable consumer device is positioned within or adjacent to the external device.