Personal token read system and method

• US 9,141,953 B2
• Filed: 08/15/2007
• Issued: 09/22/2015
• Est. Priority Date: 10/17/2006
• Status: Active Grant

• Current Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Original Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Inventors: Hazel, Patrick K., Yale, Scott, von Mueller, Clay
• Primary Examiner(s): Reagan, James A
• Application Number:
  US11/839,053
• Publication Number:
  US 20080091617A1
• Time in Patent Office: 2,960 Days
• Field of Search: 705/64
• US Class Current: 1/1
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

A system for facilitating secure transactions between a purchaser and a vendor is provided. The system might include a purchaser token data capture device for reading token data into the system, an encryption module for encrypting the token data and a network based vendor input form for communicating the encrypted token data to the vendor. The system might further include a purchaser terminal for routing the encrypted token data to a transaction processing network or a vendor for providing payment and confirmation to the vendor of an authorized token.

Claims

1. A method for facilitating secure transactions between a purchaser and a vendor, comprising:

the vendor providing a purchasing form to the purchaser via a communication network for bank card information, wherein the bank card information comprises a primary account number (PAN) and a bank identification number (BIN);

the vendor receiving the form from the purchaser with the bank card information populated therein, wherein a portion of the PAN is encrypted with a first encryption key and wherein a portion of the BIN is encrypted with a second encryption key; and

the vendor sending the encrypted bank card information to a gateway that routes the bank card information to a selected institution.

2. The method of claim 1, wherein the PIN and BIN are entered and encrypted at a purchaser data capture device, wherein the purchaser data capture device forwards the encrypted PIN and encrypted BIN to a purchaser terminal, and wherein the purchaser terminal sends the populated form to the vendor.

3. The method of claim 2, wherein the encrypted PIN and encrypted BIN are transparent to the vendor.

4. The method of claim 2, wherein the first encryption key is based on the purchaser terminal'"'"'s ID.

5. The method of claim 4, wherein the second encryption key is based on the vendor'"'"'s ID.

6. The method of claim 5, wherein the first encryption key is the purchaser'"'"'s terminal ID and wherein the second encryption key is the vendor'"'"'s ID.

7. The method of claim 2, wherein the bank card information is populated in the form after the purchaser swipes the bank card at the purchaser data capture device.

8. The method of claim 1, wherein the gateway decrypts the encrypted BIN prior to routing the bank card information to the selected institution.

9. The method of claim 8, wherein the gateway routes the decrypted BIN to the selected institution.

10. The method of claim 8, wherein the gateway:

decrypts the encrypted BIN to determine an appropriate routing institution;

reencrypts the decrypted BIN; and

routes the reencrypted BIN to the selected institution.

11. A method for conducting Internet transactions between a purchaser and a vendor, comprising:

the vendor providing html pages to the purchaser, the html pages including catalog pages or shopping cart pages and a purchase form for bank card information to enable the purchaser to purchase goods or services from the vendor via the Internet, wherein the bank card information comprises a primary account number (PAN) and a bank identification number (BIN);

the vendor receiving the form from the purchaser with the bank card information populated therein, wherein a portion of the PAN is encrypted with a first encryption key and wherein a portion of the BIN is encrypted with a second encryption key; and

the vendor sending the encrypted bank card information to a gateway that routes the bank card information to a selected institution.

12. The method of claim 11, wherein the PIN and BIN are entered and encrypted at a purchaser data capture device, wherein the purchaser data capture device forwards the encrypted PIN and encrypted BIN to a purchaser terminal, and wherein the purchaser terminal sends the populated form to the vendor.

13. The method of claim 12, wherein the encrypted PIN and encrypted BIN are transparent to the vendor.

14. The method of claim 12, wherein the bank card information is populated in the form after the purchaser swipes the bank card at the purchaser data capture device.

15. The method of claim 11, wherein the gateway decrypts the encrypted BIN prior to routing the bank card information to the selected institution.

16. The method of claim 15, wherein the gateway routes the decrypted BIN to the selected institution.

17. The method of claim 15, wherein the gateway:

decrypts the encrypted BIN to determine an appropriate routing institution;

reencrypts the decrypted BIN; and

routes the reencrypted BIN to the selected institution.

18. The method of claim 17, wherein the gateway does not have access to the first encryption key used to encrypt the PAN.

19. The method of claim 12, wherein the first encryption key is based on the purchaser terminal'"'"'s ID.

20. The method of claim 19, wherein the second encryption key is based on the vendor'"'"'s ID.

21. The method of claim 20, wherein the first encryption key is the purchaser'"'"'s terminal ID and wherein the second encryption key is the vendor'"'"'s ID.

22. The method of claim 11, wherein the populated form comprises unencrypted bank card information, the PIN encrypted with the first encryption key, and the BIN encrypted with the second encryption key.