Track data encryption

• US 8,843,417 B2
• Filed: 11/03/2008
• Issued: 09/23/2014
• Est. Priority Date: 06/19/2006
• Status: Active Grant

• Current Assignee: Visa USA, Inc. (Visa, Inc.)
• Original Assignee: Visa USA, Inc. (Visa, Inc.)
• Inventors: Hammad, Ayman
• Primary Examiner(s): Nigh, James D
• Application Number:
  US12/264,036
• Publication Number:
  US 20090171849A1
• Time in Patent Office: 2,150 Days
• Field of Search: 705/44, 705/64, 705/67, 705/75
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A method for using a secondary PAN is disclosed. The method includes providing a secondary PAN associated with a primary PAN, where the secondary PAN has at least one end portion that is the same as the primary PAN, but has a middle portion of that is different than the primary PAN.

Claims

1. A method comprising:

providing to a server, by an access device, a secondary primary account number (PAN)for a primary account, wherein the secondary PAN is created by modifying a primary PAN for the primary account using the access device, wherein the secondary PAN has a location identification data element, and wherein the location identification data element is the same as a corresponding location identification data element in the primary PAN, and wherein a middle portion of the secondary PAN is different than a corresponding middle portion of the primary PAN; and

receiving from the server, at the access device, an approval or disapproval for a payment transaction from the primary account after said providing the secondary PAN to the server;

wherein the secondary PAN and the primary PAN each comprise at least three corresponding digits having a same value; and

wherein the middle portion of the secondary PAN further comprises a digit selected to allow a checksum operation to be performed using the secondary PAN that will generate a same value as a checksum digit of the primary PAN.

2. The method of claim 1 wherein the location identification data element comprises a bank identification number (BIN).

3. The method of claim 1 wherein the middle portion of the secondary PAN comprises a modified version of the middle portion of the primary PAN.

4. The method of claim 3 further comprising encrypting the primary PAN.

5. The method of claim 4 wherein said encrypting the primary PAN comprises:

accessing the primary PAN from a first memory location;

encrypting the primary PAN; and

storing the encrypted primary PAN in a secondary memory location different from the first memory location.

6. The method of claim 5 wherein the providing the secondary PAN associated with the primary PAN to the server comprises sending the encrypted primary PAN and the secondary PAN with an authorization request.

7. A non-transitory computer readable storage medium comprising instructions which when executed by an access device cause the access device to perform operations comprising:

providing, from the access device to a server, a secondary Primary Account Number (PAN) created by modifying a primary PAN, wherein the secondary PAN has a location identification data element, and wherein the location identification data element is the same as a corresponding location identification data element in the primary PAN, and wherein a middle portion of the secondary PAN is different than a corresponding middle portion of the primary PAN; and

receiving, at the access device, an approval or disapproval for a payment transaction from a primary account after said providing the secondary PAN to the server;

wherein the middle portion of the secondary PAN comprises at least three digits having a same value and a digit selected to allow a checksum operation to be performed using the secondary PAN that will generate a same value as a checksum digit of the primary PAN; and

wherein the secondary PAN comprises at least three digits that each have a same value as a corresponding digit of the primary PAN.

8. The non-transitory computer readable storage medium of claim 7 wherein the location identification data element comprises a bank identification number (BIN).

9. The non-transitory computer readable storage medium of claim 7 wherein the middle portion of the primary PAN is changed to create the middle portion of the secondary PAN.

10. The non-transitory computer readable storage medium of claim 7, wherein the operations further comprise encrypting the primary PAN.

11. The non-transitory computer readable storage medium of claim 7 wherein the operations further comprise encrypting at least a portion of the secondary PAN.

12. The non-transitory computer readable storage medium of claim 11, wherein said encrypting at least the portion of the secondary PAN includes using an elliptical curve cryptography (ECC) encryption process.

13. A non-transitory computer readable storage medium comprising instructions which when executed by an access point cause the access point to authenticate a payment transaction by performing operations comprising:

receiving at the access point, from a portable consumer device, a data track comprising a primary Primary Account Number (PAN) at a first location of the data track, wherein the primary PAN comprises a location identification data element and a middle portion;

modifying, by the access point, the middle portion of the primary PAN to create a secondary PAN, wherein a middle portion of the secondary PAN comprises a digit selected to allow the checksum operation to be performed using the secondary PAN that will generate a same value as a checksum digit of the primary PAN;

providing to a server, by the access point, the secondary PAN, wherein the secondary PAN includes the location identification data element; and

receiving, at the access point, an approval or disapproval for a payment transaction after said providing the secondary PAN to the server;

wherein the primary PAN and the secondary PAN both have 13, 16 or 19 digits.

14. The non-transitory computer readable storage medium of claim 13, wherein the operations further comprise storing the secondary PAN at the first location of the data track of the portable consumer device to create a modified data track.

15. The non-transitory compute readable storage medium of claim 14, wherein the operations further comprise:

encrypting the primary PAN to create an encrypted primary PAN; and

wherein said providing the secondary PAN to the server further comprises providing the encrypted primary PAN to the server.

16. The non-transitory computer readable storage medium of claim 14, wherein said modifying the middle portion of the primary PAN to create the secondary PAN comprises modifying a digit of the middle portion so that the checksum operation using the secondary PAN will generate a same value as the checksum digit of the primary PAN.

17. The non-transitory computer readable storage medium of claim 15 wherein said modifying the middle portion of the primary PAN to create the secondary PAN comprises setting all the digits of the middle portion to zero values.

18. The non-transitory computer readable storage medium of claim 14 wherein the middle portion of the primary PAN is between 3 and 6 digits long.