Secure contactless payment systems and methods

• US 9,489,669 B2
• Filed: 12/27/2010
• Issued: 11/08/2016
• Est. Priority Date: 12/27/2010
• Status: Active Grant

• Current Assignee: Western Union
• Original Assignee: Western Union
• Inventors: Loevenguth, Rebecca, Mehew, Evans, Owen, Dave, Lyons, Dianna, Paintin, Scott
• Primary Examiner(s): Champagne, Luna
• Application Number:
  US12/978,704
• Publication Number:
  US 20120166295A1
• Time in Patent Office: 2,143 Days
• Field of Search: 705/16, 705/39, 705/44
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/4015 using location information
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

According to the invention, a system for providing payments to a point of sale device is disclosed. The system may include a mobile device having a storage medium, an input device, a wireless transmission device, and a processor. The storage medium may include individual authentication information and device authentication information. The input device may be configured to receive an input. The wireless transmission device may be configured to selectively transmit the device authentication information to a nearby point of sale device. The processor may be configured to compare the input with the individual authentication information, and activate the wireless transmission device to transmit the device authentication information if the input is correlated with the individual authentication information.

Claims

1. A system for approving, at a server, a payment request received from a mobile device at a point of sale device, the point of sale device remote from the server, wherein the system comprises:

a server, wherein the server is configured to;

store a device authentication table, wherein the device authentication table correlates particular authentication information with particular mobile device ID'"'"'s;

receive a device authentication request, wherein the device authentication request comprises authentication information and a mobile device ID;

determine whether the authentication information is correlated with the mobile device ID in the device authentication table;

receive a payment request;

approve the payment request if the server determines that the authentication information is correlated with the mobile device ID in the device authentication table; and

a point of sale device remote from the server, wherein the point of sale device is configured to;

receive authentication information and a mobile device ID;

transmit the device authentication request comprising the authentication information and the mobile device ID.

2. The system for approving, at a server, a payment request received from a mobile device at a point of sale device, the point of sale device remote from the server of claim 1, wherein the system further comprises:

a mobile device, wherein the mobile device is configured to transmit, wirelessly, the authentication information and the mobile device ID to the point of sale device.

3. The system for approving, at a server, a payment request received from a mobile device at a point of sale device, the point of sale device remote from the server of claim 1, wherein the server is further configured to:

receive a payment request comprising an amount of a transaction;

determine whether the authentication information is correlated with the mobile device ID in the device authentication table after receiving the payment request.

4. The system for approving, at a server, a payment request received from a mobile device at a point of sale device, the point of sale device remote from the server of claim 1, wherein the server is further configured to:

receive a payment request comprising an amount of a transaction;

determine whether the authentication information is correlated with the mobile device ID in the device authentication table prior to receiving the payment request.

5. The system for approving, at a server, a payment request received from a mobile device at a point of sale device, the point of sale device remote from the server of claim 4, wherein the server is further configured to:

not evaluate the payment request if the authentication information is not correlated with the mobile device ID in the device authentication table.

6. The system for approving, at a server, a payment request received from a mobile device at a point of sale device, the point of sale device remote from the server of claim 3, wherein the server is further configured to:

not evaluate the payment request if the authentication information is not correlated with the mobile device ID in the device authentication table.

7. The system for approving, at a server, a payment request received from a mobile device at a point of sale device, the point of sale device remote from the server of claim 1, wherein the device authentication request further comprises biometric information of a user of the mobile device.

8. The system for approving, at a server, a payment request received from a mobile device at a point of sale device, the point of sale device remote from the server of claim 1, wherein the device authentication request further comprises password information of a user of the mobile device.

9. The system for approving, at a server, a payment request received from a mobile device at a point of sale device, the point of sale device remote from the server of claim 1, wherein at least a portion of the authentication information or mobile device ID related to the mobile device are:

dynamic as a function of time; and

correlated to each other irrespective of time.

10. The system for approving, at a server, a payment request received from a mobile device at a point of sale device, the point of sale device remote from the server of claim 1, wherein the server comprises a device authentication server and a payment server, the device authentication server being remote from the payment server, and wherein:

the server being configured to determine whether the authentication information is correlated with the mobile device ID in the device authentication table comprises the device authentication server being configured to determine whether the authentication information is correlated with the mobile device ID in the device authentication table; and

the server being configured to approve the payment request comprises the payment server being configured to approve the payment request.

11. The system for approving, at a server, a payment request received from a mobile device at a point of sale device, the point of sale device remote from the server of claim 1, wherein the server is further configured to:

determine to transmit a secondary verification message based at least on the characteristics of the payment request;

transmit the secondary verification message to the mobile device,

receive a secondary response message from the mobile device; and

evaluate the payment request based at least in part on the secondary response message.

12. The system for approving, at a server, a payment request received from a mobile device at a point of sale device, the point of sale device remote from the server of claim 11, wherein the secondary verification message is sent from the server to the mobile device over a mobile telephone network.

13. The system for approving, at a server, a payment request received from a mobile device at a point of sale device, the point of sale device remote from the server of claim 11, wherein the secondary verification message is sent from the server to the mobile device via the point of sale device.

14. The system for approving, at a server, a payment request received from a mobile device at a point of sale device, the point of sale device remote from the server of claim 1, wherein the point of sale device is further configured to receive an unauthorized use message from the mobile device.

15. The system for approving, at a server, a payment request received from a mobile device at a point of sale device, the point of sale device remote from the server of claim 14, wherein the unauthorized use message indicates that the mobile device received incorrect individual authentication information from a user of the mobile device.

16. The system for approving, at a server, a payment request received from a mobile device at a point of sale device, the point of sale device remote from the server of claim 14, wherein the point of sale device is further configured to, in response to the unauthorized use message, send a disablement message to the mobile device causing the mobile device to disable itself.

17. The system for approving, at a server, a payment request received from a mobile device at a point of sale device, the point of sale device remote from the server of claim 1, wherein the server is further configured to, in response to the authentication information not being correlated with the mobile device ID in the device authentication table, send a disablement message to the mobile device causing the mobile device to disable itself.

18. The system for approving, at a server, a payment request received from a mobile device at a point of sale device, the point of sale device remote from the server of claim 17, wherein the disablement message is sent from the server to the mobile device over a mobile telephone network.

19. The system for approving, at a server, a payment request received from a mobile device at a point of sale device, the point of sale device remote from the server of claim 17, wherein the disablement message is sent from the server to the mobile device via the point of sale device.

20. A method for approving, at a server, a payment request received from a mobile device at a point of sale device, the point of sale device remote from the server, wherein the method comprises:

storing, with a server, a device authentication table, wherein the device authentication table correlates particular authentication information with particular mobile device ID'"'"'s;

receiving, at a point of sale device, authentication information and a mobile device ID;

transmitting, from the point of sale device, a device authentication request comprising the authentication information and the mobile device ID;

receiving, at the server, the device authentication request;

receiving, at the server, a payment request;

determining, with the server, whether the authentication information is correlated with the mobile device ID in the device authentication table; and

approving, with the server, the payment request if the server determines that the authentication information is correlated with the mobile device ID in the device authentication table.

21. A storage medium with instructions stored therein, the instructions executable by a processor to:

store a device authentication table, wherein the device authentication table correlates particular authentication information with particular mobile device ID'"'"'s;

receive a device authentication request comprising authentication information and a mobile device ID;

receive a payment request;

determine whether the authentication information is correlated with the mobile device ID in the device authentication table; and

approve the payment request if the server determines that the authentication information is correlated with the mobile device ID in the device authentication table.