Method and system using candidate dynamic data elements

• US 8,504,451 B2
• Filed: 11/14/2007
• Issued: 08/06/2013
• Est. Priority Date: 11/16/2006
• Status: Active Grant

• Current Assignee: Visa USA, Inc. (Visa, Inc.)
• Original Assignee: Visa USA, Inc. (Visa, Inc.)
• Inventors: Faith, Patrick, Hammad, Ayman
• Primary Examiner(s): Badii, Behrang
• Application Number:
  US11/940,074
• Publication Number:
  US 20080120236A1
• Time in Patent Office: 2,092 Days
• Field of Search: 705/75, 705/64, 705/44, 705/39, 705/65, 705/18, 705/35, 235/382, 235/380, 726/4, 726/9, 713/172, 713/168, 713/178, 713/182, 713/176, 380/232, 365/96
• US Class Current: 705/35
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/12 Card verification
• CPC Class Codes: G07F 7/122 Online card verification

Abstract

A method and computer readable medium for conducting a transaction, comprising receiving a verification value and a portion of a dynamic data element, determining candidate dynamic data elements using the portion of the dynamic data element, calculating candidate verification values using candidate dynamic data elements, and determining if the received verification value matches any of the candidate verification values, wherein the transaction is thereafter authenticated if a candidate verification value matches a candidate verification value.

Claims

1. A method for conducting a transaction, the method comprising:

receiving a first verification value and a portion of a first dynamic data element at a server, wherein the first verification value is calculated based in part on the first dynamic data element, and the portion of the first dynamic data element is received by the server, wherein the first dynamic data element is a counter value;

determining a plurality of candidate dynamic data elements using the portion of the first dynamic data element using a processor in the server;

calculating a plurality of candidate verification values using the plurality of candidate dynamic data elements using the processor in the server;

determining if the first verification value matches any of the plurality of candidate verification values using the processor in the server, wherein the transaction is thereafter authenticated if the first verification value matches any of the plurality of candidate verification values and wherein the first dynamic data element comprises data that can change over time;

wherein the first verification value is generated using at least one static data element, and wherein the transaction is a payment transaction;

wherein the static data element includes at least two of an expiration date, a phone number, a card number, a service code, and an account number;

wherein determining a plurality of candidate dynamic data elements using the portion of the first dynamic data element comprises calculating a plurality of potential dynamic data elements that occur in a sequence with the first dynamic data element based on a dynamic data element algorithm; and

wherein each of the plurality of candidate verification values is unique to a corresponding candidate dynamic data element.

2. The method of claim 1, further comprising storing one of the plurality of candidate dynamic data elements that is associated with the matched candidate verification value in the server.

3. The method of claim 1, further comprising, after determining if the first verification value matches any of the plurality of candidate verification values, sending an authentication response message from the server to an access device, wherein the authentication response message indicates that the transaction is authorized.

4. The method of claim 1, wherein the transaction is declined if none of the plurality of candidate verification values matches the first verification value.

5. The method of claim 1, wherein the verification value is derived using unique derived keys.

6. The method of claim 1, wherein the first dynamic data element is derived from an initial dynamic data element that is derived from personal information comprising a PAN, an expiration date, and a service code.

13. The method of claim 1 wherein the first verification value is derived using a PAN, and an account sequence number, an inverse of the PAN and an inverse of the account sequence number.

14. The method of claim 1 wherein the first verification value is derived by a POS terminal.

7. A computer readable medium, comprising:

code executable on a processor in a server for receiving a first verification value and a portion of a first dynamic data element, wherein the first verification value is calculated based in part on the first dynamic data element, and the portion of the first dynamic data element is received by the server;

code executable on the processor in the server for determining a plurality of candidate dynamic data elements using the portion of the first dynamic data element;

code executable on the processor in the server for calculating a plurality of candidate verification values using the plurality of candidate dynamic data elements;

code executable on the processor in the server for determining if the first verification value matches any of the plurality of candidate verification values, wherein the transaction is thereafter authenticated if the received verification value matches any of the plurality of candidate verification values and wherein the first dynamic data element comprises data that can change over time;

wherein the first verification value is generated using at least one static data element, and wherein the transaction is a payment transaction;

wherein the static data element includes at least two of an expiration date, a phone number, a card number, a service code, and an account number;

wherein the code executable on the processor in the server for determining a plurality of candidate dynamic data elements using the portion of the first dynamic data element comprises code for calculating a plurality of potential dynamic data elements that occur in a sequence with the first dynamic data element based on a dynamic data element algorithm; and

wherein each of the plurality of candidate verification values is unique to a corresponding candidate dynamic data element.

8. The computer readable medium of claim 7, further comprising code executable on the processor for storing the candidate dynamic data element associated with the matched candidate verification value.

9. The computer readable medium of claim 7, further comprising code executable on the processor for authenticating the transaction if the received verification value matches any of the plurality of candidate verification values.

10. The computer readable medium of claim 7, further comprising code executable on the processor for declining to authenticate the transaction if the received verification value does not match any of the candidate verification values.

11. The computer readable medium of claim 7, wherein the verification value is derived using unique derived keys.

12. The method of claim 7, wherein the first dynamic data element is derived from an initial dynamic data element that is derived from personal information comprising a PAN, an expiration date, and a service code.