System and method for generating a dynamic card value

• US 8,615,468 B2
• Filed: 01/25/2011
• Issued: 12/24/2013
• Est. Priority Date: 01/27/2010
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Inventors: Varadarajan, Rammohan
• Primary Examiner(s): Borlinghaus, Jason M
• Assistant Examiner(s): Alladin, Ambreen A
• Application Number:
  US13/013,038
• Publication Number:
  US 20110184867A1
• Time in Patent Office: 1,064 Days
• Field of Search: 235/382
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/3433 the counter having monetary units
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4018 using the card verification value [CVV] associated with the card

Abstract

A method and system is provided for generating a dynamic card value (DCV) from a mobile user device for use in a transaction between a user cardholder and a transaction provider. The DCV may be configured for use as a card verification value (CVV), also known as a card security code (CSC), a primary account number (PAN), or a portion of a PAN. The DCV may be generated using a DCV generator which may include an algorithm and a DCV generation key. The DCV generation key may be camouflaged. Obtaining a DCV from the user device may require inputting a PIN, a device identifier, a challenge or transaction information. The DCV may be used for any transaction requiring the input of a user identification number and a verification value, including, credit card transactions, debit card transactions, online or telephonic transactions.

Claims

1. A method for generating a dynamic card value (DCV) configured for use in a transaction between a user and a transaction provider, comprising:

generating a DCV generation key using a provisioning server, wherein the DCV generation key is configured to generate the DCV;

camouflaging the DCV generation key using the provisioning server;

providing the camouflaged DCV generation key via the provisioning server to a user device;

generating the DCV using the camouflaged DCV generation key;

wherein the DCV is configured for input into a transaction interface configured to verify the DCV as a verified DCV;

inputting the DCV into the transaction interface; and

using the verified DCV as a user DCV for the transaction.

2. The method of claim 1, wherein the DCV is configured for input into the transaction interface as one of a primary account number (PAN), account number, partial PAN and a portion of an account number.

3. The method of claim 1, wherein the DCV is configured for input into the transaction interface as one of a character string of one or more alphanumeric or special characters, a datum or an electronic signal transmittable from the user device, a datum or an electronic signal generated by the user device, and a human-readable output.

4. The method of claim 1, further comprising:

inputting a PIN into the user device prior to generating the DCV.

5. The method of claim 1, further comprising:

generating a device identifier by the user device;

wherein the device identifier is unique to the user device; and

providing the device identifier as an input to generating the DCV.

6. The method of claim 4, wherein the PIN is configured as an alarm code, the method further comprising:

inputting the alarm code as the PIN; and

responding to the inputting of the alarm code by at least one of;

generating an invalid DCV; and

terminating verification of the DCV by the transaction system.

7. The method of claim 1, wherein generating the DCV from the user device further includes:

providing a DCV generator to the user device; and

generating the DCV using the DCV generator;

wherein the DCV generator includes a DCV generating algorithm.

8. The method of claim 5, further comprising:

identifying the user device as one of an authorized device and a non-authorized device using the device identifier;

generating an alert DCV when the user device is identified as the non-authorized device; and

wherein the alert DCV is configured to be recognizable as an alert code by the transaction system.

9. The method of claim 1,

wherein the DCV generation key is camouflaged using cryptographic camouflage.

10. The method of claim 8, wherein the DCV generation key is one of a symmetric key, a Data Encryption Standard (DES) key, an Advanced Encryption Standard (AES) key, a non-symmetric key, a secret, a secret byte array, a Card Verification Key (CVK), Unique DEA Key A (UDKA), a Unique DEA Key B (UDKB), a seed or an indexed key list.

11. The method of claim 1, wherein generating the DCV from the user device further includes inputting a challenge into the user device.

12. The method of claim 1, wherein:

the DCV is configured as an authentication value for a non-monetary transaction; and

the transaction is configured as a non-monetary transaction.

13. The method of claim 1, wherein the transaction interface is one of an online interface, a secure access terminal, a telephone, a fax machine, a printed order form, an online order form, an online shopping cart, an automatic teller machine (ATM) terminal, a point of sale (POS) terminal, a transponder, a receptor, a scanner, a receiver, and a combination thereof.

14. The method of claim 1, wherein the user device includes a telephone.

15. A system for generating a dynamic card value (DCV) configured for use in a transaction between a user and a transaction provider, comprising:

a provisioning server to perform a method comprising;

generating a DCV generation key using the provisioning server, wherein the DCV generation key is configured to generate the DCV;

camouflaging the DCV generation key using the provisioning server;

providing the camouflaged DCV generation key via the provisioning server to a user device;

generating the DCV using the camouflaged DCV generation key;

wherein the DCV is configured for input into a transaction interface configured to verify the DCV as a verified DCV;

inputting the DCV into the transaction interface; and

using the verified DCV as a user DCV for the transaction.

16. The system of claim 15, wherein the DCV is configured for input into the transaction interface as one of a primary account number (PAN), account number, partial PAN and a portion of an account number.

17. The system of claim 15, wherein the DCV is configured for input into the transaction interface as one of a character string of one or more alphanumeric or special characters, a datum or an electronic signal transmittable from the user device, a datum or an electronic signal generated by the user device, and a human-readable output.

18. The system of claim 15, wherein the provider server is configured to:

provide a DCV generator including a DCV generating algorithm to the user device; and

wherein the DCV generator is configured to generate the DCV.

19. A tangible, non-transitory computer-readable medium having instructions stored thereon that when executed by a processor perform a method for generating a dynamic card value (DCV) configured for use in a transaction between a user and a transaction provider, the method comprising:

generating a DCV generation key using a provisioning server, wherein the DCV generation key is configured to generate the DCV;

camouflaging the DCV generation key using the provisioning server;

providing the camouflaged DCV generation key via the provisioning server to a user device;

generating the DCV using the camouflaged DCV generation key;

wherein the DCV is configured for input into a transaction interface configured to verify the DCV as a verified DCV;

inputting the DCV into the transaction interface; and

using the verified DCV as a user DCV for the transaction.

20. The tangible, non-transitory computer-readable medium of claim 19, wherein the DCV is configured for input into the transaction interface as one of a character string of one or more alphanumeric or special characters, a datum or an electronic signal transmittable from the user device, a datum or an electronic signal generated by the user device, and a human-readable output.