Device, system and method for reducing an interaction time for a contactless transaction

• US 9,330,386 B2
• Filed: 05/15/2014
• Issued: 05/03/2016
• Est. Priority Date: 09/28/2005
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Hill, Trudy, Sahota, Jagdeep Singh, Aabye, Christian, Wagner, Kim R., Ochieano, Anita, Oppenlander, Carole, Chan, William Chi Yuen, Glendenning, Craig Allen
• Primary Examiner(s): Savusdiphol, Paultep
• Application Number:
  US14/278,766
• Publication Number:
  US 20140246492A1
• Time in Patent Office: 719 Days
• Field of Search: 235/375, 235/379, 235/380
• US Class Current: 1/1
• CPC Class Codes: G06K 7/0008 General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G07F 7/0826 Embedded security module
• CPC Class Codes: G07F 7/088 the card reader being part of the point of sale [POS] terminal or electronic cash register [ECR] itself
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

A method comprising, at a reader, performing at least one transaction-based risk management process prior to energizing a contactless interface, initiating communication with a card utilized for a contactless transaction, receiving information associated with the card, terminating communication with the card, and authorizing the contactless transaction.

Claims

1. A non-transitory computer readable medium embodying information indicative of instructions for causing a reader to perform operations comprising:

wirelessly sending from a reader to a contactless payment device in a command message a terminal unpredictable number and a transaction amount;

receiving from the contactless payment device in response to the command message a wireless message with a dynamic signature generated based on an application transaction counter (ATC), the terminal unpredictable number, the transaction amount, and a card unpredictable number, the dynamic signature sent with an application file locator (AFL); and

then

wirelessly transmitting from the reader to the contactless payment device a read record command message to request one or more records indicated in the AFL from the contactless payment device;

receiving from the contactless payment device the requested one or more records requested by the read record command message; and

causing a recalculation of the dynamic signature in order to authorize a contactless transaction if the dynamic signature received from the contactless payment device matches the recalculated dynamic signature.

2. The medium of claim 1, further comprising instructions for:

terminating communication between the reader and the contactless payment device prior to performing an online authorization.

3. The medium of claim 2, further comprising instructions for:

receiving a cryptogram that is based on the application transaction counter, the terminal unpredictable number, and the transaction amount; and

requesting the transaction be processed online with the cryptogram if the dynamic signature is not validated.

4. The medium of claim 1, further comprising instructions for:

terminating communication between the reader and the contactless payment device prior to performing an offline authorization.

5. The medium of claim 1, wherein the contactless payment device is configured to operate in chip-mode for wireless communication or magnetic stripe mode.

6. The medium of claim 1, wherein the contactless payment device is configured to increment the application transaction counter before generating the dynamic signature.

7. The medium of claim 1, further comprising instructions for:

wirelessly transmitting from the reader to the contactless payment device a request for a list of applications that are supported by the contactless payment device for conducting a transaction.

8. A method for minimizing an interaction time under 500 milliseconds for a contactless transaction between a reader and a contactless payment device, the method comprising:

wirelessly sending from a reader to a contactless payment device in a command message a terminal unpredictable number and a transaction amount;

receiving from the contactless payment device in response to the command message a wireless message with a dynamic signature generated based on an application transaction counter (ATC), the terminal unpredictable number, the transaction amount, and a card unpredictable number, the dynamic signature sent with an application file locator (AFL); and

then

wirelessly transmitting from the reader to the contactless payment device a read record command message to request one or more records indicated in the AFL from the contactless payment device;

receiving from the contactless payment device the requested one or more records requested by the read record command message; and

causing a recalculation of the dynamic signature in order to authorize a contactless transaction if the dynamic signature received from the contactless payment device matches the recalculated dynamic signature.

9. The method of claim 8, further comprising:

terminating communication between the reader and contactless payment device prior to performing an online transaction.

10. The method of claim 9, further comprising:

receiving a cryptogram that is based on the application transaction counter, the terminal unpredictable number, and the transaction amount; and

requesting the transaction be processed online with the cryptogram if the dynamic signature is not validated.

11. The method of claim 8, further comprising:

terminating communication between the reader and the contactless payment device prior to performing an offline authorization.

12. The method of claim 8, further comprising:

authorizing the contactless transaction if the dynamic signature received from the contactless payment device is equal to the recalculated dynamic signature.

13. The method of claim 8, further comprising:

receiving a request for a second contactless transaction;

re-establishing communication between the reader and the contactless payment device; and

completing the second contactless transaction with less than one-half second of interaction time between the reader and the contactless payment device.

14. The method of claim 13, wherein completing the second contactless transaction changes the application transaction counter.

15. The method of claim 13, wherein the second contactless transaction is for a non-financial transaction.

16. A system comprising:

a reader comprising a non-transitory computer readable medium embodying information indicative of instructions for causing the reader to perform operations comprising;

wirelessly sending from the reader to a contactless payment device in a command message a terminal unpredictable number and a transaction amount;

receiving from the contactless payment device in response to the command message a wireless message with a dynamic signature generated based on an application transaction counter (ATC), the terminal unpredictable number, the transaction amount, and a card unpredictable number, the dynamic signature sent with an application file locator (AFL); and

then

wirelessly transmitting from the reader to the contactless payment device a read record command message to request one or more records indicated in the AFL from the contactless payment device;

receiving from the contactless payment device the requested one or more records requested by the read record command message; and

causing a recalculation of the dynamic signature in order to authorize a contactless transaction if the dynamic signature received from the contactless payment device matches the recalculated dynamic signature; and

the contactless payment device comprising a non-transitory computer readable medium embodying information indicative of instructions for causing the contactless payment device to perform operations comprising;

sending from the contactless payment device to the reader the wireless message with the dynamic signature; and

then

sending from the contactless payment device to the reader the requested one or more records requested by the read record command message,

wherein the reader is configured to minimize an interaction time under 500 milliseconds for a contactless transaction between the reader and the contactless payment device.

17. The system of claim 16, further comprising instructions in the reader for:

receiving from the contactless payment device a cryptogram that is based on the application transaction counter, the terminal unpredictable number, and the transaction amount; and

requesting the transaction be processed online with the cryptogram if the dynamic signature is not validated.

18. The system of claim 16, wherein the contactless payment device is configured to operate in chip-mode for wireless communication or magnetic stripe mode.

19. The system of claim 16, further comprising:

a network coupled to the reader.

20. The system of claim 19, wherein the network is further coupled to an issuer.