Serial number and payment data based payment card processing

• US 9,349,127 B2
• Filed: 05/29/2008
• Issued: 05/24/2016
• Est. Priority Date: 11/29/2007
• Status: Active Grant

• Current Assignee: Visa USA, Inc. (Visa, Inc.)
• Original Assignee: Visa USA, Inc. (Visa, Inc.)
• Inventors: Hurry, Simon J.
• Primary Examiner(s): Qayyum, Zeshan
• Application Number:
  US12/129,470
• Publication Number:
  US 20090144205A1
• Time in Patent Office: 2,917 Days
• Field of Search: 705/75
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/4037 Remote solvency checks
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: H04N 21/2542 for selling goods, e.g. TV shopping payment schemes, payment architectures or payment protocols for electronic shopping systems G06Q20/12
• CPC Class Codes: H04N 21/2543 Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/4182 for identification purposes, e.g. storing user identification data, preferences, personal settings or data restricting access to computer systems by authenticating users using a predetermined code in combination with an additional device, e.g. dongle or smart card G06F21/123
• CPC Class Codes: H04N 21/42684 Client identification by a unique number or address, e.g. serial number, MAC address, socket ID network arrangements, protocols or services for addressing or naming H04L61/00
• CPC Class Codes: H04N 21/47815 Electronic shopping payment schemes, payment architectures or payment protocols for electronic shopping systems G06Q20/12

Abstract

A server is operable to receive a media device identifying number (ID) and establish an association between a media device and a payment account and, in one embodiment, supports at least one of payment authorization and payment clearing based at least in part on the media device ID and the payment account. A network and system includes a payment card processor server that is operable to receive a payment authorization request and to determine if an authorized media device generated a purchase selection message and to determine to approve a received payment authorization request based, in part, if the media device was authorized for the purchase selection based upon a received media device ID.

Claims

1. A method comprising:

receiving, by a server, a payment authorization request associated with a purchase selection message originating from a media device, wherein the payment authorization request includes encrypted user payment account information;

receiving, by the server, an ID of the media device that generated the purchase selection message associated with the payment authorization request;

determining, by the server, whether the media device is authorized to conduct transactions using the encrypted user payment account information, wherein determining whether the media device is authorized to conduct transactions includes;

determining a decryption key based on the received ID of the media device;

decrypting the encrypted user payment account information using the determined decryption key;

extracting an ID from the decrypted user payment account information; and

determining that the extracted ID corresponds to the ID of the media device; and

sending an approval message to a payment server based on the determination that the extracted ID corresponds to the ID of the media device.

2. The method of claim 1 wherein the encrypted user payment account information includes a user payment account identifier and the ID of the media device for an authorized media device associated with the user payment account identifier, wherein the encrypted user payment account information is generated using an encryption key based on the ID of the media device, the user payment account identifier being associated with a user payment account.

3. The method of claim 1 wherein determining the decryption key comprises consulting a mapping table using the received ID of the media device to select an encryption key corresponding to the received ID of the media device, wherein the mapping table includes association information between one or more authorized device ID'"'"'s and one or more encryption keys.

4. The method of claim 1 wherein the payment authorization request message is received from a payment card acquirer server, the method further comprising:

receiving transaction identification information from a payment card subscriber management server; and

associating the received ID of the media device with the payment authorization request message based on the transaction identification information.

5. The method of claim 1 wherein the encrypted user payment account information is from a smart card coupled to the media device and wherein the smart card was created by a smart card personalization service based on the ID of the media device.

6. The method of claim 1 further comprising:

receiving, by the server, a SKU number that can identify a merchant;

determining a merchant based at least in part on the SKU number; and

in response to determining that the media device that transmitted the purchase selection message is authorized to conduct transactions using a user payment account associated with the encrypted user payment account information, sending an approval to the merchant.

7. The method of claim 1 wherein the media device is an authorized media device that has an established association with a user payment account associated with the encrypted user payment account information, and wherein the media device that transmitted the purchase selection message is authorized to conduct transactions using the user payment account based on the established association.

8. The method of claim 5 wherein the smart card is delivered separately from the media device to a user of the media device.

9. The method of claim 5 wherein the smart card stores the ID of the media device in an encrypted form along with other account information to create an established association between the user payment account and the media device.

10. A system comprising:

one or more processors; and

one or more non-transitory computer-readable storage media containing instructions which when executed by the one or more processors cause the one or more processors to perform a method including;

receiving a payment authorization request associated with a purchase selection message originating from a media device, wherein the payment authorization request includes encrypted user payment account information;

receiving an ID of the media device that generated the purchase selection message associated with the payment authorization request;

determining whether the media device is authorized to conduct transactions using the encrypted user payment account information, wherein determining whether the media device is authorized to conduct transactions includes;

determining a decryption key based on the received ID of the media device;

decrypting the encrypted user payment account information using the determined decryption key;

extracting an ID from the decrypted user payment account information; and

determining that the extracted ID corresponds to the ID of the media device; and

sending an approval message to a payment server based on the determination that the extracted ID corresponds to the ID of the media device.

11. The system of claim 10 wherein determining the decryption key comprises consulting a mapping table using the ID of the media device to select an encryption key corresponding to the ID of the media device, wherein the mapping table includes association information between one or more authorized device ID'"'"'s and one or more encryption keys.

12. The system of claim 10 wherein the encrypted user payment account information includes a user payment account identifier and the ID of the media device for an authorized media device associated with the user payment account identifier, wherein the encrypted user payment account information is generated using an encryption key based on the ID of the media device, the user payment account identifier being associated with a user payment account.

13. The system of claim 10 wherein the payment authorization request message is received from a payment card acquirer server, the system further comprising instructions configured to cause the one or more processors to perform the method including:

receiving transaction identification information from a payment card subscriber management server; and

associating the received ID of the media device with the payment authorization request message based on the transaction identification information.

14. The system of claim 10 wherein the encrypted user payment account information is from a smart card coupled to the media device and wherein the smart card was created by a smart card personalization service based on the ID of the media device.

15. The system of claim 10 further comprising instructions configured to cause the one or more processors to perform operations including:

receiving, by the server, a SKU number that can identify a merchant;

determining a merchant based at least in part on the SKU number; and

in response to determining that the media device that transmitted the purchase selection message is authorized to conduct transactions using a user payment account associated with the encrypted user payment account information, sending an approval to the merchant.

16. The system of claim 10 wherein the media device is an authorized media device that has an established association with a user payment account associated with the encrypted user payment account information, and wherein the media device that transmitted the purchase selection message is authorized to conduct transactions using the user payment account based on the established association.

17. The system of claim 14 wherein the smart card is delivered separately from the media device to a user of the media device.

18. The system of claim 14 wherein the smart card stores the ID of the media device in an encrypted form along with other account information to create an established association between the user payment account and the media device.