Systems and methods for transmitting financial account information

• US 8,898,086 B2
• Filed: 09/27/2010
• Issued: 11/25/2014
• Est. Priority Date: 09/27/2010
• Status: Active Grant

• Current Assignee: Fidelity National Information Services Incorporated
• Original Assignee: Fidelity National Information Services Incorporated
• Inventors: Downing, Robert W., Steffensmeier, Nicole
• Primary Examiner(s): Agwumezie, Charles C
• Application Number:
  US12/891,334
• Publication Number:
  US 20120078798A1
• Time in Patent Office: 1,520 Days
• Field of Search: 705/64
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3827 Use of message hashing
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0478 applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD

Abstract

Described herein are methods and systems for securely transmitting information, including financial account information. An irreversibly encrypted account number can be transmitted to a processing party as part of a transmission packet. The processing party can extract other information from the transmission packet to determine one or more registered account numbers that may match the irreversibly encrypted account number. Using the same encryption algorithm used to create the transmission packet, the processing party can create a verification packet by encrypting the one or more registered account numbers and determine if the verification packet matches the transmission packet. As a result, financial account information can be transmitted in such a way that it cannot be intercepted and then used to perform an unauthorized transaction.

Claims

1. A payment verification system comprising:

a processor;

memory storing executable instructions that when executed by a processor cause the processor to perform the steps of;

receiving a reversibly encrypted transmission packet comprising a random data string, a client identification number, a portion of an account number and an irreversibly encrypted inner packet,

the irreversibly encrypted inner packet comprising an irreversibly encrypted form of a copy of the random data string, the account number, and a copy of the client identification number;

decrypting the reversibly encrypted transmission packet and extracting the random data string, the client identification number, the portion of the account number, and the irreversibly encrypted inner packet;

selecting a registered account number from a database based on the client identification number and the portion of the account number;

irreversibly encrypting the random data string, the client identification number, and the registered account number in order to create a verification packet; and

determining if the verification packet matches the received inner packet; and

based on a determination that the verification packet matches the received inner packet, processing a payment using the registered account number.

2. The system of claim 1, wherein the instructions further cause the processor to perform the steps of:

if the verification packet does not match the inner packet;

selecting a second registered account number from the database;

irreversibly encrypting the random data string, the client identification number, and the second registered account number in order to create a second verification packet; and

determinimg if the second verification packet matches the inner packet.

3. The system of claim 1, wherein the instructions further cause the processor to perform the steps of:

determining that the verification packet does not match the received inner packet;

determining that there are no other registered account numbers in the database that contain the portion of the account number; and

sending an error message.

4. The system of claim 1, wherein the instructions further cause the processor to perform the steps of:

incrementing the client identification number; and

storing the client identification number in the database.

5. The system of claim 1, wherein the irreversibly encrypted inner packet is a hash of the copy of the random data string, the account number, and the copy of the client identification number.

6. A non-transitory computer-readable medium comprising instructions, wherein the instructions, when executed by at least one processor, cause the at least one processor to perform operations comprising:

receiving a reversibly encrypted transmission packet comprising a random data string, a client identification number, a portion of an account number and an irreversibly encrypted inner packet,

the irreversibly encrypted inner packet comprising an irreversibly encrypted form of a copy of the random data string, the account number, and a copy of the client identification number;

decrypting the reversibly encrypted transmission packet and extracting the random data string, the client identification number, the portion of the account number, and the irreversibly encrypted inner packet;

selecting a registered account number from a database based on the client identification number and the portion of the account number;

irreversibly encrypting the random data string, the client identification number, and the registered account number in order to create a verification packet; and

determining if the verification packet matches the received inner packet; and

based on a determination that the verification packet matches the received inner packet, processing a payment using the registered account number.

7. The medium of claim 6, wherein the instructions further cause the at least one processor to perform operations comprising:

if the verification packet does not match the inner packet;

selecting a second registered account number from the database;

irreversibly encrypting the random data string, the client identification number, and the second registered account number in order to create a second verification packet; and

determining if the second verification packet matches the inner packet.

8. The medium of claim 6, wherein the instructions further cause the at least one processor to perform operations comprising:

determining that the verification packet does not match the received inner packet;

determining that there are no other registered account numbers in the database that contain the portion of the account number; and

sending an error message.

9. The medium of claim 6, wherein the instructions further cause the at least one processor to perform operations comprising:

incrementing the client identification number; and

storing the client identification number in the database.

10. The medium of claim 6, wherein the irreversibly encrypted inner packet is a hash of the copy of the random data string, the account number, and the copy of the client identification number.

11. A method for payment verification, comprising:

receiving, by at least one processor, a reversibly encrypted transmission packet comprising a random data string, a client identification number, a portion of an account number and an irreversibly encrypted inner packet,

the irreversibly encrypted inner packet comprising an irreversibly encrypted form of a copy of the random data string, the account number, and a copy of the client identification number;

decrypting, by the at least one processor, the reversibly encrypted transmission packet and extracting the random data string, the client identification number, the portion of the account number, and the irreversibly encrypted inner packet;

selecting, by the at least one processor, a registered account number from a database based on the client identification number and the portion of the account number;

irreversibly encrypting, by the at least one processor, the random data string, the client identification number, and the registered account number in order to create a verification packet; and

determining, by the at least one processor, that the verification packet matches the received inner packet; and

based on the determination processing, by the at least one processor, a payment using the registered account number.

12. The method of claim 11, further comprising:

if the verification packet does not match the inner packet;

selecting a second registered account number from the database;

irreversibly encrypt the random data string, the client identification number, and the second registered account number in order to create a second verification packet; and

determine if the second verification packet matches the inner packet.

13. The method of claim 11, further comprising:

determining that the verification packet does not match the received inner packet;

determine that there are no other registered account numbers in the database that contain the portion of the account number; and

send an error message.

14. The method of claim 11, further comprising:

incrementing the client identification number; and

storing the client identification number in the database.

15. The method of claim 11, wherein the irreversibly encrypted inner packet is a hash of the copy of the random data string, the account number, and the copy of the client identification number.