Device, system and method for reducing an interaction time for a contactless transaction

• US 8,770,476 B2
• Filed: 07/06/2010
• Issued: 07/08/2014
• Est. Priority Date: 09/28/2005
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Hill, Trudy, Sahota, Jagdeep Singh, Wagner, Kim R., Ochieano, Anita, Oppenlander, Carole, Chan, William Chi Yuen, Aabye, Christian, Glendenning, Craig Allen
• Primary Examiner(s): Savusdiphol, Paultep
• Application Number:
  US12/831,114
• Publication Number:
  US 20100270374A1
• Time in Patent Office: 1,463 Days
• Field of Search: 235/375, 235/379, 235/380
• US Class Current: 235/380
• CPC Class Codes: G06K 7/0008 General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G07F 7/0826 Embedded security module
• CPC Class Codes: G07F 7/088 the card reader being part of the point of sale [POS] terminal or electronic cash register [ECR] itself
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

A method. The method comprises, at a reader, performing at least one transaction-based risk management process prior to energizing a contactless interface, initiating communication with a card utilized for the contactless transaction, receiving information associated with the card, and terminating communication with the card to authorizing the contactless transaction.

Claims

1. A reader comprising:

a contactless interface;

a transaction module coupled to the contactless interface, wherein the transaction module is configured to minimize an interaction time under 500 milliseconds for a contactless transaction between the reader and a card by;

wirelessly sending from the reader to a card in a command message a terminal unpredictable number, transaction amount, and transaction currency;

receiving from the card in response to the command message a wireless message with a dynamic signature generated based on an application transaction counter (ATC), the terminal unpredictable number, the transaction amount, the transaction currency, and a card unpredictable number, the dynamic signature sent with an application file locator (AFL); and

then

wirelessly transmitting from the reader to the card a read record command message to request one or more records indicated in the AFL from the card; and

receiving from the card the requested one or more records requested by the read record command; and

a security module, coupled to the transaction module, configured for;

recalculating the dynamic signature; and

authorizing the contactless transaction if the dynamic signature received from card is validated.

2. The reader of claim 1, wherein the transaction module is configured to terminate communication with the card prior to performing an online authorization.

3. The reader of claim 2, wherein transaction module is configured for:

receiving a cryptogram that is based on the application transaction counter, the terminal unpredictable number, and transaction amount; and

requesting the transaction be processed online with the cryptogram if the dynamic signature is not validated.

4. The reader of claim 1, wherein the transaction module is configured to terminate communication with the card prior to performing an offline authorization.

5. The reader of claim 4, wherein the contactless transaction is authorized if the dynamic signature received from the card is equal to the recalculated dynamic signature.

6. The reader of claim 1, wherein the card is configured to operate in chip-mode for wireless communication or magnetic stripe mode.

7. The reader of claim 1, further comprising:

a network coupled to the reader.

8. The reader of claim 7, wherein the network is further coupled to an issuer.

9. The reader of claim 1, wherein the card increments the ATC before generating the dynamic signature.

10. The reader of claim 1 wherein the transaction module is configured to:

wirelessly transmit from the reader to the card a request for a list of applications that are supported by the card for conducting a transaction.

11. A system comprising:

a reader comprising;

a contactless interface;

a transaction module coupled to the contactless interface and configured to;

wirelessly send from the reader to a card in a command message a terminal unpredictable number, transaction amount, and transaction currency;

receive from the card in response to the command message a wireless message with a dynamic signature based on an application transaction counter (ATC), the terminal unpredictable number, the transaction amount, the transaction currency, and a card unpredictable number, the dynamic signature sent with an application file locator (AFL); and

then

wirelessly transmit from the reader to the card a read record command message to request one or more records indicated in the AFL from the card; and

receive from the card the requested one or more records requested by the read record command; and

a security module, coupled to the transaction module, configured for;

recalculating the dynamic signature; and

authorizing the contactless transaction if the dynamic signature received from the card is validated; and

a card configured to;

send from the card to the reader the wireless message with the dynamic signature; and

then

send from the card to the reader the requested one or more records requested by the read record command,

wherein the transaction module is configured to minimize an interaction time under 500 milliseconds for a contactless transaction between the reader and the card.

12. The system of claim 11, wherein the transaction module is configured to:

receive from the card a cryptogram that is based on the application transaction counter, the terminal unpredictable number, and transaction amount; and

request the transaction be processed online with the cryptogram if the dynamic signature is not validated.

13. The system of claim 11, wherein the card is configured to operate in chip-mode for wireless communication or magnetic stripe mode.

14. The system of claim 11, further comprising:

a network coupled to the reader.

15. The system of claim 14, wherein the network is further coupled to an issuer.

16. A method for minimizing an interaction time under 500 milliseconds for a contactless transaction between a reader and a card, the method comprising:

wirelessly sending from a reader to a card in a command message a terminal unpredictable number, transaction amount, and transaction currency;

receiving at the reader from the card in response to the command message a wireless message with a dynamic signature generated based on an application transaction counter (ATC), the terminal unpredictable number, the transaction amount, the transaction currency, and a card unpredictable number, the dynamic signature sent with an application file locator (AFL); and

then

wirelessly transmitting from the reader to the card a read record command message to request one or more records indicated in the AFL from the card; and

receiving at the reader from the card the requested one or more records requested by the read record command; and

recalculating the dynamic signature based on the application transaction counter, the terminal unpredictable number, transaction amount, and transaction currency; and

authorizing the contactless transaction if the dynamic signature received from card by the reader is validated.

17. The method of claim 16, further comprising:

receiving a request for a second contactless transaction;

re-establishing communication between the reader and the card; and

completing the second contactless transaction with less than one-half second of interaction time between the reader and the card.

18. The method of claim 17, wherein completing the second contactless transaction changes the application transaction counter.

19. The method of claim 17, wherein the second contactless transaction is for a non-financial transaction.

20. The method of claim 16, further comprising:

wirelessly transmitting from the reader to the card a request for a list of applications that are supported by the card for conducting a transaction.