Authentication of a data card using a transit verification value

• US 9,213,977 B2
• Filed: 03/09/2014
• Issued: 12/15/2015
• Est. Priority Date: 09/28/2006
• Status: Active Grant

• Current Assignee: Visa USA, Inc. (Visa, Inc.)
• Original Assignee: Visa USA, Inc. (Visa, Inc.)
• Inventors: Hammad, Ayman, Dixon, Philip B.
• Primary Examiner(s): Trammell, James
• Assistant Examiner(s): Malhotra, Sanjeev
• Application Number:
  US14/201,866
• Publication Number:
  US 20140183259A1
• Time in Patent Office: 646 Days
• Field of Search: 705/14, 705/21, 705/22, 705/26, 705/35, 705/38, 705/39, 705/41, 705/44, 705/50, 705/74, 705/75, 701/117, 709/203, 709/205, 709/224, 235/380, 235/381, 235/382, 235/383, 235/435, 235/492, 340/10.41, 340/426.35, 340/572.7, 380/270, 194/205, 725/78, 348/150, 379/91.02, 455/406, 707/9
• US Class Current: 1/1
• CPC Class Codes: G06K 17/00 Methods or arrangements for effecting co-operative working between equipments covered by two or more of main groups G06K1/00 - G06K15/00, e.g. automatic card files incorporating conveying and reading operations
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/3221 Access to banking information through M-devices
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners

Abstract

Transaction processing involves receiving data from an access transaction application of a portable consumer device, wherein the received data comprises data from an access transaction data string that includes a transit verification value wherein, with the exception of the transit verification value, the access transaction data string is substantially similar to a retail data string comprising retail data, wherein the access application data string is adapted for use with an access transaction processing system and the retail data string is adapted for use with a retail processing system. The transaction processing involves processing access transaction application data for selective authorization of the transaction.

Claims

1. A method of processing an access transaction, the method comprising:

receiving access transaction application data from a portable consumer device associated with the access transaction application data and retail application data, wherein the received data comprises data from an access transaction data string that includes a transit verification value adapted for offline verification processing in connection with the portable consumer device,

wherein the access transaction application data has an access data field configuration for use with a reader of an agency, wherein the retail application data has a retail data field configuration for use with a retail processing system of an issuer of the portable consumer device such that the issuer receives the retail application data and processes it to either authorize or deny a retail transaction and the retail data field configuration includes a retail primary account number (PAN) associated with the retail application data, wherein the retail data field configuration of the retail application data corresponds to a standardized format,

wherein the portable consumer device includes the access transaction data string and includes a retail data string, wherein receiving the access transaction application data comprises reading from the portable consumer device such that the retail data string is not accessible by an access transaction processing system, and wherein the access transaction data string is not accessible by a retail POS terminal of the retail processing system;

processing, by at least one processor, the received data, wherein processing the received data includes processing the transit verification value;

authenticating the portable consumer device by validating the received data; and

granting a holder of the portable consumer device access to a venue or through a transit fare collection device associated with the reader of the agency.

2. The method of claim 1, wherein the access data field configuration of the access transaction application data conforms to a magnetic stripe data (MSD) configuration, and wherein the transit verification value occupies a Personal Identification Number (PIN) data field of the MSD configuration.

3. The method of claim 1, wherein the access transaction application data includes an access transaction PAN that is used by the issuer to selectively authorize the access transaction.

4. The method of claim 3, wherein the access data field configuration of the access transaction application data conforms to a magnetic stripe data (MSD) configuration, and wherein the access transaction PAN is associated with merchant category code (MCC) data of the MSD configuration.

5. The method of claim 4, wherein the MCC data corresponds to a transit category, such that the issuer will deny any access transactions of the portable consumer device that is outside of a transit MCC.

6. The method of claim 1, further including processing data read from issuer discretionary data files of the portable consumer device that provide data storage in the access transaction application data.

7. The method of claim 6, wherein the access data field configuration of the access transaction application data conforms to a magnetic stripe data (MSD) configuration, and wherein the issuer discretionary data files are within the MSD data configuration.

8. The method of claim 1, wherein processing the received data comprises validating dynamically changed transit verification value data received from the portable consumer device.

9. The method of claim 8, wherein the transit verification value data is determined by the issuer of the portable consumer device and is statically stored in the portable consumer device.

10. The method of claim 1, wherein receiving the access transaction application data comprises reading from the portable consumer device comprising a contactless smart card device.

11. A system for processing an access transaction, the system comprising:

a memory device;

at least one processor coupled to the memory device, wherein the at least one processor is operable to;

receive access transaction application data from a portable consumer device associated with the access transaction application data and retail application data, wherein the received data comprises data from an access transaction data string that includes a transit verification value adapted for offline verification processing in connection with the portable consumer device,

wherein the access transaction application data has an access data field configuration for use with a reader of an agency, wherein the retail application data has a retail data field configuration for use with a retail processing system of an issuer of the portable consumer device such that the issuer receives the retail application data and processes it to either authorize or deny a retail transaction and the retail data field configuration includes a retail primary account number (PAN) associated with the retail application data, wherein the retail data field configuration of the retail application data corresponds to a standardized format,

wherein the portable consumer device includes the access transaction data string and includes a retail data string, wherein receiving the access transaction application data comprises reading from the portable consumer device such that the retail data string is not accessible by an access transaction processing system, and wherein the access transaction data string is not accessible by a retail POS terminal of the retail processing system;

process the received data, wherein processing the received data includes processing the transit verification value;

authenticate the portable consumer device by validating the received data; and

grant a holder of the portable consumer device access to a venue or through a transit fare collection device associated with the reader of the agency.

12. The system of claim 11, wherein the access data field configuration of the access transaction application data conforms to a magnetic stripe data (MSD) configuration, and wherein the transit verification value occupies a Personal Identification Number (PIN) data field of the MSD configuration.

13. The system of claim 11, wherein the access transaction application data includes an access transaction PAN that is used by the issuer to selectively authorize the access transaction.

14. The system of claim 13, wherein the access data field configuration of the access transaction application data conforms to a magnetic stripe data (MSD) configuration, and wherein the access transaction PAN is associated with merchant category code (MCC) data of the MSD configuration.

15. The system of claim 14, wherein the MCC data corresponds to a transit category, such that the issuer will deny any access transactions of the portable consumer device that are outside of a transit MCC.

16. The system of claim 11, wherein the at least one processor is further operable to process data read from issuer discretionary data files of the portable consumer device that provide data storage in the access transaction application data.

17. The system of claim 16, wherein the access data field configuration of the access transaction application data conforms to a magnetic stripe data (MSD) configuration, and wherein the issuer discretionary data files are within the MSD data configuration.

18. The system of claim 11, wherein processing the received access transaction application data comprises validating dynamically changed transit verification value data received from the portable consumer device.