Systems and methods for authenticating near field communcation financial transactions

• US 8,978,975 B2
• Filed: 07/18/2011
• Issued: 03/17/2015
• Est. Priority Date: 07/18/2011
• Status: Active Grant

• Current Assignee: First Data Merchant Services LLC (Fiserv Incorporated)
• Original Assignee: Accullink Incorporated
• Inventors: Barnett, Timothy W.
• Primary Examiner(s): Le, Thien M
• Assistant Examiner(s): Brown, Claude J
• Application Number:
  US13/185,079
• Publication Number:
  US 20130020389A1
• Time in Patent Office: 1,338 Days
• Field of Search: 235/380, 235/382, 235/382.5, 235/383, 235/451, 235/492, 340/5.23, 340/5.24, 340/5.26, 340 54- 542, 455/557, 455/558, 705/1.1, 705 17- 25
• US Class Current: 235/380
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 84/10 Small scale networks; Flat hierarchical networks

Abstract

A system for authenticating near field communication (NFC) transactions that has an NFC merchant reader that provides an electromagnetic field and an NFC hand-held device that senses the electromagnetic field and prompts a user for a personal identifier (PI) in response to the electromagnetic field. Additionally, the NFC hand-held device wirelessly transmits the PI, and the NFC hand-held-device receives an approval code transmitted to the NFC hand-held device in response to the PI. Further, the NFC hand-held device transmits the approval code to the NFC merchant reader, and the NFC merchant reader transmits a payment request comprising the approval code.

Claims

1. A system for authenticating near field communication (NFC) transactions, comprising:

an NFC merchant reader configured to provide an electromagnetic field; and

an NFC hand-held device configured to sense the electromagnetic field and to transmit an initialization request to a data server system in response to a first detection of the electromagnetic field, the initialization request for requesting the data server system to transmit to the NFC hand-held device location data identifying locations of graphical icons within a graphical key pad, the NFC hand-held device configured to display the graphical key pad based on the location data and to receive user input for selecting at least one of the graphical icons, the selected graphical icon corresponding to a character of a personal identifier (PI) for a financial transaction, the NFC hand-held device further configured to wirelessly transmit location data indicative of a location of the selected graphical icon within the graphical key pad, the NFC hand-held-device further configured to receive an approval code transmitted to the NFC hand-held device in response to the location data indicative of the location of the selected graphical icon within the graphical key pad, the approval code for use in approving a payment for the financial transaction, the NFC hand-held device further configured to transmit the approval code to the NFC merchant reader in response to a second detection of the electromagnetic field, wherein the NFC merchant reader is configured to transmit a payment request comprising the approval code for requesting approval of the payment for the financial transaction.

2. The system for authenticating the NFC transactions of claim 1, wherein the NFC merchant reader comprises an NFC chip that actively communicates with an NFC chip in the NFC hand-held device.

3. The system for authenticating the NFC transactions of claim 1, further comprising a hardware security module configured to receive the location data indicative of the location of the selected graphical icon, the hardware security module further configured to translate the location data indicative of the selected graphical icon into the PI and transmit the hand-held identifier and the PI.

4. The system for authenticating the NFC transactions of claim 3, further comprising a validating entity device configured to receive the PI and the hand-held identifier, the validating entity further configured to determine whether the hand-held identifier corresponds to an account and to determine whether the account is associated with the hand-held identifier and the PI.

5. The system for authenticating the NFC transactions of claim 4, wherein the validating entity device is further configured to randomly generate the approval code and transmit the approval code to the hand-held device.

6. The system for authenticating the NFC transactions of claim 1, further comprising a validating entity computing device configured to authenticate the user based on the location data wirelessly transmitted by the NFC hand-held device, the validating entity computing device further configured to transmit the approval code in response to authentication of the user by the validating entity computing device.

7. The system for authenticating the NFC transactions of claim 6, wherein the validating entity computing device is configured to receive the payment request and to authorize the payment based on the approval code.

8. The system for authenticating the NFC transactions of claim 7, wherein the data server system is configured to translate the location data indicative of the location of the selected graphical icon into the PI and to transmit the PI to the validating entity computing device.

9. The system for authenticating the NFC transactions of claim 8, wherein the data server system is configured to transmit the PI to the validating entity via a network.

10. The system for authenticating the NFC transactions of claim 9, wherein the validating entity is configured to transmit the approval code to the data server system via the network, and wherein the data server system is configured to transmit the approval code to the NFC hand-held device.

11. A method for authenticating near field communication (NFC) transactions, comprising:

sensing an electromagnetic field from an NFC merchant reader by an NFC hand-held device;

transmitting an initialization request to a data server system in response to the sensing, the initialization request for requesting the data server system to transmit to the NFC hand-held device coordinate data identifying coordinates of graphical icons in a graphical key pad;

displaying the graphical key pad by the hand-held device based on the coordinate data;

prompting a user for a personal identifier (PI) based on the displaying;

inputting into the NFC hand-held device at least one character of the PI, the inputting comprising selecting at least one of the graphical icons;

wirelessly transmitting from the NFC hand-held device coordinate data indicative of coordinates of the selected graphical icon;

translating the coordinate data indicative of the coordinates of the selected graphical icon into the PI;

transmitting an approval code to the NFC hand-held device based on the translated PI;

transmitting the approval code from the NFC hand-held device to the NFC merchant reader in response to a detection of the electromagnetic field by the NFC hand-held device;

transmitting, from the NFC merchant reader, a payment request comprising the approval code for requesting approval of a payment for a financial transaction;

approving the payment for the financial transaction in response to the payment request and based on the approval code; and

electronically transferring funds based on the approving.

12. The method of claim 11, further comprising wirelessly transmitting an approval request comprising the approval code and an identifier of the NFC hand-held device to the NFC merchant reader.

13. The method of claim 11, further comprising receiving the approval request by the NFC merchant reader.

14. A method for authenticating near field communication (NFC) transactions, comprising:

sensing an electromagnetic field from an NFC merchant reader by an NFC hand-held device;

wirelessly transmitting, from the NFC hand-held device in response to the sensing, an initialization request for requesting data identifying locations of graphical icons in a graphical key pad;

displaying the graphical key pad by the NFC hand-held device based on the data indicative of the locations of the graphical icons;

prompting a user for a personal identifier (PI) based on the displaying;

inputting into the NFC hand-held device at least one character of the PI, the inputting comprising selecting at least one of the graphical icons;

wirelessly transmitting from the NFC hand-held device data indicative of a location of the selected graphical icon within the graphical key pad;

translating the data indicative of the location of the selected graphical icon into the PI;

transmitting an approval code to the NFC hand-held device based on the translated PI;

transmitting the approval code from the NFC hand-held device to the NFC merchant reader in response to a detection of the electromagnetic field by the NFC hand-held device;

transmitting, from the NFC merchant reader, a payment request comprising the approval code for requesting approval of a payment for a financial transaction;

approving the payment for the financial transaction in response to the payment request and based on the approval code; and

electronically transferring funds based on the approving.