System and method for uniquely identifying point of sale devices in an open payment network

• US 8,600,881 B2
• Filed: 05/28/2009
• Issued: 12/03/2013
• Est. Priority Date: 11/13/2008
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Nguyen, Loc Duc, Nelson, Chris S., Quach, Charles
• Primary Examiner(s): Zeender, Ryan
• Assistant Examiner(s): CHEIN, ALLEN C
• Application Number:
  US12/474,186
• Publication Number:
  US 20100121701A1
• Time in Patent Office: 1,650 Days
• Field of Search: None
• US Class Current: 705/39
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 30/0238 at point-of-sale [POS]

Abstract

A system, apparatus, and method for using a point of sale (POS) terminal as part of an electronic payment transaction. A unique number, code, alphanumeric character string, or other form of identification is assigned to each terminal manufacturer. Each terminal manufacturer then assigns a unique global identifier to each terminal they manufacture. The identifier assigned by the manufacturer may incorporate or be derived from the unique identifier assigned to each manufacturer. In the course of an electronic payment, other form of transaction, or other function or operation of the terminal, the POS terminal'"'"'s unique global identifier is provided to a payment processor or other electronic payment network entity. This information, alone or in combination with portable consumer device data and transaction data, may be used to provide new services, content, and products to consumers or merchants.

Claims

1. An apparatus for reducing fraud in payment transactions, comprising:

at least one processor configured to execute a set of instructions;

a memory coupled to the at least one processor for storing the set of instructions; and

the set of instructions stored in the memory, wherein when the instructions are executed by the at least one processor the apparatus operates to, at least;

receive, from a point of sale terminal manufacturer of a plurality of point of sale terminal manufacturers, a request for a point of sale terminal manufacturer identifier;

generate, by a payment processor, responsive to the request for a point of sale terminal manufacturer identifier, a point of sale terminal manufacturer identifier that is unique with respect to the plurality of point of sale terminal manufacturers;

provide, by the payment processor, the generated point of sale terminal manufacturer identifier;

access transaction data corresponding to a plurality of payment transactions;

process the transaction data to associate each of the payment transactions with a point of sale terminal used to conduct that payment transaction, wherein associating each of the payment transactions with a point of sale terminal further comprises processing the transaction data for each payment transaction to determine a point of sale terminal identifier for that payment transaction, the point of sale terminal identifier at least (i) uniquely identifying a point of sale terminal used to conduct the payment transaction regardless of a payment processing network used to process the payment transaction, (ii) being based at least in part on the point of sale terminal manufacturer identifier provided by the payment processor responsive to the request for a point of sale terminal manufacturer identifier by the point of sale terminal manufacturer and (iii) being independent of a network interface utilized by the point of sale terminal to access the payment processing network; and

process the transaction data to determine whether a specific point of sale terminal was used to conduct one or more fraudulent transactions based at least in part on the point of sale terminal identifier.

2. The apparatus of claim 1, wherein the apparatus operates to process the transaction data to determine whether a specific point of sale terminal was used to conduct one or more fraudulent transactions at least in part by authenticating the point of sale terminal based at least in part on the point of sale terminal identifier.

3. The apparatus of claim 1, wherein the apparatus further operates to process the transaction data to determine one or more characteristics of a point of sale terminal used to conduct one or more of the payment transactions, the one or more characteristics including the point of sale terminal model, location, number of transactions processed by the terminal, number of hours of operation of the terminal, or an in-service date of the terminal.

4. A method of reducing fraud in payment transactions, comprising:

receiving, from a point of sale terminal manufacturer of a plurality of point of sale terminal manufacturers, a request for a point of sale terminal manufacturer identifier;

generating, by a payment processor, responsive to the request for a point of sale terminal manufacturer identifier, a point of sale terminal manufacturer identifier that is unique with respect to the plurality of point of sale terminal manufacturers;

providing, by the payment processor, the generated point of sale terminal manufacturer identifier;

accessing, from an electronic data storage element, transaction data corresponding to a plurality of payment transactions;

processing the transaction data using an electronic data processing element to associate each of the payment transactions with a point of sale terminal used to conduct that payment transaction, wherein associating each of the payment transactions with a point of sale terminal further comprises processing the transaction data for each payment transaction to determine a point of sale terminal identifier for that payment transaction, the point of sale terminal identifier at least (i) uniquely identifying a point of sale terminal used to conduct the payment transaction regardless of a payment processing network used to process the payment transaction, (ii) being based at least in part on the point of sale terminal manufacturer identifier provided by the payment processor responsive to the request for a point of sale terminal manufacturer identifier by the point of sale terminal manufacturer and (iii) being independent of a network interface utilized by the point of sale terminal to access the payment processing network; and

processing the transaction data using the electronic data processing element to determine whether a specific point of sale terminal was used to conduct one or more fraudulent transactions based at least in part on the point of sale terminal identifier.

5. The method of claim 4, wherein processing the transaction data to determine whether a specific point of sale terminal was used to conduct one or more fraudulent transactions comprises authenticating the point of sale terminal based at least in part on the point of sale terminal identifier.

6. The method of claim 4, further comprising processing the transaction data to determine one or more characteristics of a point of sale terminal used to conduct one or more of the payment transactions, the one or more characteristics including the point of sale terminal model, location, number of transactions processed by the terminal, number of hours of operation of the terminal, or an in-service date of the terminal.

7. The method of claim 4, wherein the point of sale terminal identifier being based at least in part on the point of sale terminal manufacturer identifier provided by the payment processor comprises the point of sale terminal identifier incorporating the point of sale terminal manufacturer identifier provided by the payment processor with an identifier incorporation method distinct from concatenation of the point of sale terminal manufacturer identifier with another identifier.

8. The method of claim 7, further comprising:

generating the point of sale terminal identifier incorporating the point of sale terminal manufacturer identifier with the identifier incorporation method; and

providing the point of sale terminal identifier to the point of sale terminal.

9. The method of claim 4, wherein the payment processing network comprises a plurality of communication networks utilizing a plurality of communication media, the network interface utilized by the point of sale terminal to access the payment processing network is communicatively coupled to one of the plurality of communication networks and one of the plurality of communication media, and the point of sale terminal identifier uniquely identifies the point of sale terminal across the plurality of communication networks.

10. The method of claim 9, wherein:

the network interface is configured with a media access control identifier utilized by the one of the plurality of communication networks to control access to the one of the plurality of communication media; and

the point of sale terminal identifier is distinct from the media access control identifier.

11. The method of claim 4, further comprising receiving the point of sale terminal identifier responsive to an initialization process of the point of sale terminal.

12. The method of claim 11, wherein the initialization process of the point of sale terminal occurs in response to a request sent to the point of sale terminal from the payment processor.

13. The method of claim 4, further comprising:

sending a request to the point of sale terminal to provide the point of sale terminal identifier; and

receiving the point of sale terminal identifier responsive to the request.

14. The method of claim 4, further comprising sending an instruction to the point of sale terminal to replace a current non-unique point of sale terminal identifier with a new unique point of sale terminal identifier, the instruction including the new unique point of sale terminal identifier.

15. The method of claim 4, wherein the generated point of sale terminal manufacturer identifier is provided to the point of sale terminal manufacturer responsive to the responsive to the request for a point of sale terminal manufacturer identifier.

16. The method of claim 15, further comprising generating, by the point of sale terminal manufacturer, the point of sale terminal identifier based at least in part on the generated point of sale terminal manufacturer identifier provided responsive to the request for a point of sale terminal manufacturer identifier by the point of sale terminal manufacturer.

17. The method of claim 4, wherein associating each of the payment transactions with a point of sale terminal further comprises associating each of the payment transactions with a set of payment terminal attributes distinct from the point of sale terminal identifier and determining whether a specific point of sale terminal was used to conduct one or more fraudulent transactions is further based at least in part on the set of payment terminal attributes.

18. The method of claim 17, wherein the set of payment terminal attributes used to determine whether a specific point of sale terminal was used to conduct one or more fraudulent transactions includes at least one of:

a payment terminal model, a payment terminal firmware version, a number of transactions processed by the payment terminal, and a number of continuous hours of operation of the payment terminal.