Authentication of a data card using a transit verification value

• US 8,700,513 B2
• Filed: 11/30/2012
• Issued: 04/15/2014
• Est. Priority Date: 02/28/2007
• Status: Active Grant

• Current Assignee: Visa USA, Inc. (Visa, Inc.)
• Original Assignee: Visa USA, Inc. (Visa, Inc.)
• Inventors: Hammad, Ayman, Dixon, Philip B.
• Primary Examiner(s): Shafi, Muhammad
• Assistant Examiner(s): Malhotra, Sanjeev
• Application Number:
  US13/691,615
• Publication Number:
  US 20130191283A1
• Time in Patent Office: 501 Days
• Field of Search: 705/14, 705/21, 705/22, 705/26, 705/35, 705/38, 705/39, 705/41, 705/44, 705/50, 705/74, 705/75, 701/117, 707/9, 709/203, 709/205, 709/224, 725/78, 235/380, 235/381, 235/382, 235/383, 235/435, 235/492, 340/10.41, 340/426.35, 340/572.7, 348/150, 379/91.02, 380/270, 194/205, 455/406
• US Class Current: 705/35
• CPC Class Codes: G06K 17/00 Methods or arrangements for effecting co-operative working between equipments covered by two or more of main groups G06K1/00 - G06K15/00, e.g. automatic card files incorporating conveying and reading operations
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/3221 Access to banking information through M-devices
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners

Abstract

Transaction processing involves receiving data from an access transaction application of a portable consumer device, wherein the received data comprises data from an access transaction data string that includes a transit verification value wherein, with the exception of the transit verification value, the access transaction data string is substantially similar to a retail data string comprising retail data, wherein the access application data string is adapted for use with an access transaction processing system and the retail data string is adapted for use with a retail processing system. The transaction processing involves processing access transaction application data for selective authorization of the transaction.

Claims

1. A method of processing an access transaction, the processing method comprising:

receiving access transaction application data from a portable consumer device, wherein the received data comprises data from an access transaction data string that includes a transit verification value adapted for offline verification processing in connection with the portable consumer device;

wherein the access transaction application data has an access data field configuration for use with a reader of an agency, wherein retail application data has a retail data field configuration for use with a retail processing system of an issuer of the portable consumer device such that the issuer receives the retail application data and processes it to either authorize or deny a retail transaction and the retail data field configuration includes a retail primary account number (PAN) associated with the retail application data, wherein the retail data field configuration of the retail application data corresponds to a standardized format, and

wherein the access data field configuration of the access transaction application data conforms to a magnetic stripe data (MSD) configuration; and

processing the received data, wherein processing the received data includes processing the transit verification value.

2. The method of claim 1, wherein the transit verification value occupies a Personal Identification Number (PIN) data field of the MSD configuration.

3. The method of claim 1, wherein the portable consumer device includes the access transaction data string and includes the retail data string, and receiving data comprises reading from the portable consumer device such that the retail data string is not accessible by the transit processing system and the access transaction data string is not accessible by a retail POS terminal of the retail system.

4. The method of claim 1, wherein the access transaction application data includes an access transaction PAN that is used by the issuer to selectively authorize the access transaction.

5. The method of claim 4, wherein the access transaction PAN is associated with merchant category code (MCC) data of the MSD configuration.

6. The method of claim 5, wherein the MCC data corresponds to a transit category, such that the issuer will deny any access transactions of the portable consumer device that are outside of a transit MCC.

7. The method of claim 1, further including processing data read from issuer discretionary data files of the portable consumer device that provide data storage in the access transaction application data.

8. The method of claim 7, wherein the issuer discretionary data files are within the MSD data configuration.

9. The method of claim 1, wherein processing the received data comprises validating dynamically changed transit verification value data received from the portable consumer device.

10. The method of claim 9, wherein the transit verification value data is determined by the issuer of the portable consumer device and is statically stored in the portable consumer device.

11. The method of claim 1, wherein receiving data comprises reading from the portable consumer device comprising a contactless smart card device.

12. A system comprising:

a memory device;

at least one processor coupled to the memory device, wherein the at least one processor is operable to;

receive access transaction application data from a portable consumer device, wherein the received data comprises data from an access transaction data string that includes a transit verification value adapted for offline verification processing in connection with the portable consumer device;

wherein the access transaction application data has an access data field configuration for use with a reader of an agency, wherein retail application data has a retail data field configuration for use with a retail processing system of an issuer of the portable consumer device such that the issuer receives the retail application data and processes it to either authorize or deny a retail transaction and the retail data field configuration includes a retail primary account number (PAN) associated with the retail application data, wherein the retail data field configuration of the retail application data corresponds to a standardized format, and

wherein the access data field configuration of the access transaction application data conforms to a magnetic stripe data (MSD) configuration; and

process the received data, wherein processing the received data includes processing the transit verification value.

13. The system of claim 12, wherein the transit verification value occupies a Personal Identification Number (PIN) data field of the MSD configuration.

14. The system of claim 12, wherein the portable consumer device includes the access transaction data string and includes the retail data string, and receiving data comprises reading from the portable consumer device such that the retail data string is not accessible by the transit processing system and the access transaction data string is not accessible by a retail POS terminal of the retail system.

15. The system of claim 12, wherein the access transaction application data includes an access transaction PAN that is used by the issuer to selectively authorize the access transaction.

16. The system of claim 15, wherein the access transaction PAN is associated with merchant category code (MCC) data of the MSD configuration.

17. The system of claim 16, wherein the MCC data corresponds to a transit category, such that the issuer will deny any access transactions of the portable consumer device that are outside of a transit MCC.

18. The system of claim 12, wherein the at least one processor is further operable to process data read from issuer discretionary data files of the portable consumer device that provide data storage in the access transaction application data.

19. The system of claim 18, wherein the issuer discretionary data files are within the MSD data configuration.

20. The system of claim 12, wherein processing the received data comprises validating dynamically changed transit verification value data received from the portable consumer device.

21. The system of claim 20, wherein the transit verification value data is determined by the issuer of the portable consumer device and is statically stored in the portable consumer device.

22. The system of claim 12, wherein receiving data comprises reading from the portable consumer device comprising a contactless smart card device.