Method and system for generating a dynamic verification value

• US 8,387,866 B2
• Filed: 11/30/2011
• Issued: 03/05/2013
• Est. Priority Date: 08/18/2003
• Status: Expired due to Term

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Hammad, Ayman, Faith, Patrick, Aabye, Christian, Sahota, Jagdeep Singh
• Primary Examiner(s): Labaze, Edwyn
• Application Number:
  US13/308,419
• Publication Number:
  US 20120136735A1
• Time in Patent Office: 461 Days
• Field of Search: 235/379, 235/380, 235/375, 235/487, 235/451, 235/492, 235/493, 705/41
• US Class Current: 235/379
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4093 Monitoring of device authentication
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A method is disclosed. The method includes generating a verification value in response to a transaction involving a portable consumer device, where the verification value is generated using a first dynamic data element and a second dynamic data element. The verification value is sent to a service provider associated with the portable consumer device so that the service provider can verify the transaction.

Claims

1. A method comprising:

deploying on a phone a payment service for a first dynamic verification value;

receiving a payment transaction having the first dynamic verification value at a service provider computer from a terminal, wherein the first dynamic verification value was present in the phone prior to being provided to the terminal;

determining based on an indicator that the payment transaction includes the first dynamic verification value;

generating a second dynamic verification value, the generating based on the determination that the payment transaction includes the dynamic verification value; and

determining if the second verification value matches the first verification value,

wherein the service provider computer allows the payment transaction to proceed if the first verification value matches the second verification value.

2. The method of claim 1 wherein the phone is a cellular telephone.

3. The method of claim 1 wherein the first and second dynamic verification values are first and second card dynamic verification values.

4. The method of claim 1 wherein the first verification value is generated using a uniquely derived key.

5. The method of claim 1 wherein the terminal is a point of sale terminal.

6. The method of claim 1 wherein the first dynamic verification value is generated using a static data element including at least one of an expiration date, a phone number, and a SIM card number.

7. The method of claim 1 wherein the first dynamic verification value is generated using a phone number or a SIM card number of the phone, and wherein the generating of the second dynamic verification value uses the phone number or SIM card number of the phone.

8. A method for authenticating a payment transaction, the method comprising:

receiving a first dynamic verification value at a terminal for a payment transaction, wherein the first dynamic verification value was previously present on a telephone; and

transmitting the received dynamic verification value and a contactless indicator to a service provider computer,

wherein the service provider computer thereafter determines based on the contactless indicator that the payment transaction is contactless between the telephone and the terminal and, based on the determination that the payment transaction is contactless between the telephone and terminal, generates a second dynamic verification value, and determines if the second verification value matches the first verification value, and wherein the service provider computer allows the payment transaction to proceed if the first verification value matches the second verification value.

9. The method of claim 8 wherein the telephone is a cellular telephone.

10. The method of claim 8 wherein the terminal is a point of service terminal.

11. The method of claim 8 wherein the first dynamic verification and the second verification values are generated using an account number and a service code.

12. The method of claim 8 wherein the phone is a contactless phone.

13. The method of claim 8 wherein the first and second dynamic verification values are first and second dynamic card verification values.

14. The method of claim 8 wherein the first dynamic verification value is generated using a phone number or a SIM card number of the telephone, and wherein the generating of the second dynamic verification value uses the telephone number or the SIM card number of the telephone.

15. A terminal comprising:

a processor; and

a computer readable medium comprising code, executable by the processor, for implementing a method comprising;

receiving a first dynamic verification value at the terminal for a payment transaction, wherein the first dynamic verification value was previously present on a telephone; and

transmitting the received dynamic verification value and a contactless indicator to a service provider computer,

wherein the service provider computer thereafter determines based on the contactless indicator that the payment transaction is contactless between the telephone and the terminal and, based on the determination that the payment transaction is contactless between the telephone and terminal, generates a second dynamic verification value, and determines if the second verification value matches the first verification value, and wherein the service provider computer allows the payment transaction to proceed if the first verification value matches the second verification value.

16. The terminal of claim 15 wherein the first dynamic verification and the second verification values are generated using an account number and a service code.

17. The terminal of claim 15 wherein the first and second dynamic verification values are first and second dynamic card verification values.

18. The terminal of claim 15 wherein the terminal is a point of service terminal.

19. The terminal of claim 15 wherein the first dynamic verification value is generated using a phone number or a SIM card number of the telephone, and wherein the generating of the second dynamic verification value uses the telephone number or the SIM card number of the telephone.