System and method for generating a dynamic card value

• US 8,930,273 B2
• Filed: 11/08/2013
• Issued: 01/06/2015
• Est. Priority Date: 01/27/2010
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Inventors: Varadarajan, Rammohan
• Primary Examiner(s): Borlinghaus, Jason M
• Assistant Examiner(s): Alladin, Ambreen A
• Application Number:
  US14/075,317
• Publication Number:
  US 20140067683A1
• Time in Patent Office: 424 Days
• Field of Search: None
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/3433 the counter having monetary units
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4018 using the card verification value [CVV] associated with the card

Abstract

A method and system is provided for generating a dynamic card value (DCV) from a mobile user device for use in a transaction between a user cardholder and a transaction provider. The DCV may be configured for use as a card verification value (CVV), also known as a card security code (CSC), a primary account number (PAN), or a portion of a PAN. The DCV may be generated using a DCV generator which may include an algorithm and a DCV generation key. The DCV generation key may be camouflaged. Obtaining a DCV from the user device may require inputting a PIN, a device identifier, a challenge or transaction information. The DCV may be used for any transaction requiring the input of a user identification number and a verification value, including, credit card transactions, debit card transactions, online or telephonic transactions.

Claims

1. A system for generating a dynamic card value (DCV) configured for use in a transaction between a user and a transaction provider, the system comprising:

a first user device including a DCV application;

wherein;

the first user device is configured to selectively communicate with a provisioning server;

the provisioning server is adapted to configure the DCV application for the first user device;

configuring the DCV application for the first user device includes;

generating a first device identifier using the DCV application;

wherein the first device identifier is defined by and unique to the first user device;

providing the first device identifier to the provisioning server via the first user device;

the DCV application includes a first DCV generator configured to generate a first provider DCV using the first device identifier;

the provider DCV is configured for use with a first transaction provider;

the first DCV generator is configured using the first device identifier; and

the DCV application receives the first DCV generator from the provisioning server via the first user device.

2. The system of claim 1, wherein the first provider DCV is configured as one of a Card Verification Code (CVC), Card Verification Value (CVV, CVV2 or CV2), Card Security Code (CSC), primary account number (PAN), account number, partial PAN and a portion of an account number.

3. The system of claim 1, wherein the DCV application includes a second DCV generator configured to generate a second provider DCV;

wherein the second provider DCV is configured for use with a second transaction provider; and

wherein the DCV application receives the second DCV generator from the provisioning server via the first user device.

4. The system of claim 1, wherein the DCV application is configured to:

automatically generate the first device identifier each time the first provider DCV is generated; and

automatically input the automatically generated first device identifier to the first provider DCV generator to generate the first provider DCV.

5. The system of claim 1, wherein the DCV application includes a DCV generation key configured by the provisioning server to generate the DCV.

6. The system of claim 1, wherein the DCV application configured for the first user device is further configured to:

automatically generate a hosting device identifier defined by and unique to a hosting user device;

wherein the hosting user device is a user device upon which the DCV application configured for the first user device is being executed;

identify the hosting user device as one of the first user device and a non-authorized device using the hosting device identifier; and

automatically generate an alert DCV when the user device is identified by the DCV application as the non-authorized device.

7. A method for generating a dynamic card value (DCV) configured for use in a transaction between a user and a transaction provider, the method comprising:

configuring a DCV application on a first user device, wherein configuring the DCV application on the first user device includes;

generating a first device identifier using the DCV application;

wherein the first device identifier is defined by and unique to the first user device; and

providing the first device identifier to a provisioning server via the first user device;

wherein the provisioning server is adapted to configure the DCV application for the first user device using the first device identifier;

receiving a first DCV generator from the provisioning server via the first user device;

wherein the first DCV generator is configured to generate a first provider DCV using the first device identifier; and

wherein the first provider DCV is configured for use with a first transaction provider.

8. The method of claim 7, wherein the first provider DCV is configured as one of a Card Verification Code (CVC), Card Verification Value (CVV, CVV2 or CV2), Card Security Code (CSC), primary account number (PAN), account number, partial PAN and a portion of an account number.

9. The method of claim 7, further comprising:

receiving a second DCV generator to the DCV application from the provisioning server via the first user device;

wherein the second DCV generator is configured to generate a second DCV; and

wherein the second provider DCV is configured for use with a second transaction provider.

10. The method of claim 7, further comprising:

automatically generating the first device identifier each time the first provider DCV is generated; and

automatically inputting the automatically generated first device identifier to the first provider DCV generator to generate the first provider DCV.

11. The method of claim 7, wherein the DCV application includes a DCV generation key configured by the provisioning server to generate the DCV.

12. The method of claim 7, further comprising:

automatically generating a hosting device identifier defined by and unique to a hosting user device using the DCV application;

wherein the hosting user device is a user device upon which the DCV application configured for the first user device is being executed;

identifying the hosting user device as one of the first user device and a non-authorized device using the hosting device identifier; and

automatically generating an alert DCV when the user device is identified by the DCV application as the non-authorized device.

13. A tangible, non-transitory computer-readable medium having instructions stored thereon that when executed by a processor perform a method for generating a dynamic card value (DCV) configured for use in a transaction between a user and a transaction provider, the method comprising:

configuring a DCV application on a first user device, wherein configuring the DCV application on the first user device includes;

generating a first device identifier using the DCV application;

wherein the first device identifier is defined by and unique to the first user device; and

providing the first device identifier to a provisioning server via the first user device;

wherein the provisioning server is adapted to configure the DCV application for the first user device using the first device identifier;

receiving a first DCV generator from the provisioning server via the first user device;

wherein the first DCV generator is configured to generate a first provider DCV using the first device identifier; and

wherein the first provider DCV is configured for use with a first transaction provider.

14. The tangible, non-transitory computer-readable medium of claim 13, wherein the first provider DCV is configured as one of a Card Verification Code (CVC), Card Verification Value (CVV, CVV2 or CV2), Card Security Code (CSC), primary account number (PAN), account number, partial PAN and a portion of an account number.

15. The tangible, non-transitory computer-readable medium of claim 13, the method further comprising:

receiving a second DCV generator to the DCV application from the provisioning server via the first user device;

wherein the second DCV generator is configured to generate a second DCV; and

wherein the second provider DCV is configured for use with a second transaction provider.

16. The tangible, non-transitory computer-readable medium of claim 13, the method further comprising:

automatically generating the first device identifier each time the first provider DCV is generated; and

automatically inputting the automatically generated first device identifier to the first provider DCV generator to generate the first provider DCV.

17. The tangible, non-transitory computer-readable medium of claim 13, wherein the DCV application includes a DCV generation key configured by the provisioning server to generate the DCV.

18. The tangible, non-transitory computer-readable medium of claim 13, the method further comprising:

automatically generating a hosting device identifier defined by and unique to a hosting user device using the DCV application;

wherein the hosting user device is a user device upon which the DCV application configured for the first user device is being executed;

identifying the hosting user device as one of the first user device and a non-authorized device using the hosting device identifier; and

automatically generating an alert DCV when the user device is identified by the DCV application as the non-authorized device.