System and method including chip-based device processing for transaction

• US 8,977,570 B2
• Filed: 05/21/2013
• Issued: 03/10/2015
• Est. Priority Date: 04/09/2010
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Hammad, Ayman
• Primary Examiner(s): JOHNSON, GREGORY L
• Application Number:
  US13/899,523
• Publication Number:
  US 20130254112A1
• Time in Patent Office: 658 Days
• Field of Search: None
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes

Abstract

Present embodiments are directed to a server computer. The server computer establishes a first channel of communication to receive payment device data in a first format (e.g., chip type) and establishes a second channel to receive the payment device data in a second format (e.g., legacy type). The server computer receives an authorization request message in the second format from a merchant and generates a new authorization request message in the first format. The server computer then forwards the new authorization request to the issuer for approval.

Claims

1. A method comprising:

receiving, at a server computer, a first authorization request from a merchant through a communications channel, wherein the first authorization request message includes an identifier of a financial account associated with an issuer, and wherein the first authorization request message is in a first format;

creating, by the server computer, a second authorization request message corresponding to the first authorization request message, wherein the second authorization request message is in a second format that is more secure than the first format, and wherein creating the second authorization request message comprises adding a data element to the first authorization request message; and

forwarding, by the server computer, the second authorization request message to the issuer for approval.

2. The method of claim 1, wherein the communications channel is a second communications channel, and wherein the method further comprises receiving, at the server computer, account information through a first communications channel between the server computer and a client computer.

3. The method of claim 2, wherein the data element is determined based upon the received account information.

4. The method of claim 2, wherein a verification token associated with the client computer previously interacted with a portable device, and wherein the method further comprises:

generating, by the server computer, a verification value associated with the received account information; and

forwarding, by the server computer, the verification value to the client computer through the first communications channel.

5. The method of claim 4, wherein the portable device is associated with the issuer, and wherein the first authorization request message includes the verification value.

6. The method of claim 5, wherein determining the data element based upon the received account information comprises identifying, by the server computer, the account information using the verification value.

7. The method of claim 1 further comprising:

receiving, at the server computer, a first authorization response message from the issuer, wherein the first authorization response message is in the second format that is more secure than the first format;

creating, by the server computer, a second authorization response message corresponding to the first authorization response message, wherein the second authorization response message is in the first format, and wherein creating the second authorization response message comprises removing the data element from the first authorization response message; and

forwarding, by the server computer, the second authorization response message to the merchant through the communications channel.

8. A server computer comprising:

a processor; and

a computer readable medium coupled to the processor, wherein the computer readable medium includes code executable by the processor for implementing a method comprising;

receiving a first authorization request from a merchant through a communications channel, wherein the first authorization request message includes an identifier of a financial account associated with an issuer, and wherein the first authorization request message is in a first format;

creating a second authorization request message corresponding to the first authorization request message, wherein the second authorization request message is in a second format that is more secure than the first format, and wherein creating the second authorization request message comprises adding a data element to the first authorization request message; and

forwarding the second authorization request message to the issuer for approval.

9. The server computer of claim 8, wherein the communications channel is a second communications channel, and wherein the method further comprises receiving account information through a first communications channel between the server computer and a client computer.

10. The server computer of claim 9, wherein the data element is determined based upon the received account information.

11. The server computer of claim 9, wherein a verification token associated with the client computer previously interacted with a portable device, and wherein the method further comprises:

generating a verification value associated with the received account information; and

forwarding the verification value to the client computer through the first communications channel.

12. The server computer of claim 11, wherein the portable device is associated with the issuer, and wherein the first authorization request message includes the verification value.

13. The server computer of claim 12, wherein determining the data element based upon the received account information comprises identifying the account information using the verification value.

14. The server computer of claim 8 further comprising:

receiving a first authorization response message from the issuer, wherein the first authorization response message is in the second format that is more secure than the first format;

creating a second authorization response message corresponding to the first authorization response message, wherein the second authorization response message is in the first format, and wherein creating the second authorization response message comprises removing the data element from the first authorization response message; and

forwarding the second authorization response message to the merchant through the communications channel.

15. A method comprising:

receiving, at a client computer, account information from a data storage of a portable device;

establishing, by the client computer, a secure communications channel with a remote server computer; and

forwarding, by the client computer, the account information to the server computer, wherein the server computer thereafter;

receives a first authorization request message from a merchant for a transaction, wherein the first authorization request message is received in a first format; and

sends a second authorization request message for the transaction in a second format to an issuer, wherein the second format is more secure than the first format.

16. The method of claim 15, wherein the server computer creates the second authorization request message by adding a data element to the first authorization request message.

17. The method of claim 16, wherein the server computer determines the data element based upon the account information.

18. The method of claim 15 further comprising receiving, at the client computer, a verification value associated with the forwarded account information from the server computer.

19. The method of claim 15, wherein the client computer uses a verification token to receive the account information from the data storage of the portable device.

20. The method of claim 19, wherein the verification token is embedded in the client computer.