Electronic authorization system and method

• US 9,589,257 B2
• Filed: 05/13/2014
• Issued: 03/07/2017
• Est. Priority Date: 04/29/2005
• Status: Active Grant

• Current Assignee: Merchant-Link LLC (Shift4 Payments, Inc.)
• Original Assignee: Merchant-Link LLC (Shift4 Payments, Inc.)
• Inventors: Bauer Marshall, Stephanie, Freedman, Jonathan N., Lane, Daniel J., Jaffe, Miriam, Zloth, Susan M.
• Primary Examiner(s): PEARSON, DAVID J
• Application Number:
  US14/276,916
• Publication Number:
  US 20140249940A1
• Time in Patent Office: 1,029 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

An electronic authorization system comprising a data source system configured to transmit transaction data. A secure data system is coupled to the data source system over an open network, the secure data system is configured to receive the transaction data from the data source system, generate a unique encrypted identifier for the transaction data and to transmit the unique encrypted identifier to the data source system. The data source system is configured to receive the unique encrypted identifier and replace payment card data associated with the transaction data in a database with the unique encrypted identifier.

Claims

1. A method for securing payment transactions comprising:

capturing payment data at a data source system using one or more integrated circuits, the payment data comprising card data from a payment card and confidential data;

generating, using one or more integrated circuits, substitute payment data remote from the data source system as a function of the card data and confidential data; and

providing the substitute payment data to a data network interface system using one or more integrated circuits, thereby causing the data network interface system to use the substitute payment data in place of the card data when sending an authorization response, said substitute payment data not being valid payment data, but being capable of being treated as actual payment data by the data network interface system.

2. The method of claim 1, wherein providing the substitute payment data to the data network interface system prevents the captured payment data from being stored in an electronic data memory device contained within the data source system at a merchant location where the captured payment data is captured.

3. The method of claim 1, wherein capturing the payment data further comprises preventing the captured payment data from being provided to data network interface system by the data source system by storing the captured payment data in a location that is remote from the data source system and accessible over a network.

4. The method of claim 1, further comprising receiving the captured payment data from the data source system at a merchant location and generating the substitute payment data and a unique encrypted identifier.

5. The method of claim 1, wherein the substitute payment data comprises a unique encrypted identifier that excludes the confidential information.

6. The method of claim 5 further comprising associating the unique encrypted identifier with the payment data to enable the data network interface system to transmit multiple authorization messages using the substitute payment data that includes the unique encrypted identifier in place of the card data.

7. The method of claim 1 wherein generating the substitute payment data further comprises generating the substitute payment data that includes a unique encrypted identifier based, at least in part, on the payment data.

8. The method of claim 1 further comprising encrypting the substitute payment data and a unique identifier that was previously encrypted.

9. The method of claim 1 further comprising generating unique substitute payment data using one or more integrated circuits.

10. A method of generating payment data, the method comprising:

capturing payment data associated with a payment card using a processor;

the payment data comprising account data; and

performing a substitute payment data generation process with the processor on the payment data to obtain substitute payment data, said performing comprising;

generating, using one or more integrated circuits, the substitute payment data remote from the data source system as a function of the payment data associated with the payment card and confidential data by;

obtaining a unique encrypted identifier that excludes the payment data,

replacing at least a first portion of the account data with the unique encrypted identifier; and

preserving at least a second portion of the account data, wherein preserving the second portion of the account data enables a system to process the substitute payment data using one or more integrated circuits as if it were payment data.

11. The method of claim 10, wherein obtaining the unique encrypted identifier that excludes the payment data comprises generating the unique encrypted identifier that excludes the payment data.

12. The method of claim 10, wherein the unique encrypted identifier that excludes the payment data is generated in response to random data.

13. The method of claim 10, wherein performing the substitute payment data generation process further comprises preserving at least a third portion of the account data using one or more integrated circuits.

14. The method of claim 13, wherein the first portion of the account data comprises a portion of the account data within the second portion of the account data and the third portion of the account data.

15. A method for generating payment data comprising:

capturing payment data associated with a payment card using a processor;

the payment data comprising account data;

performing format preserving encryption on the payment data using the processor to obtain substitute payment data, said performing comprising;

generating, using one or more integrated circuits, the substitute payment data remote from the data source system as a function of the payment data associated with the payment card and confidential data by;

obtaining a unique encrypted identifier that is unique from any other encrypted identifier at the processor and that excludes the payment data;

replacing at least a first portion of the account data with the unique encrypted identifier that excludes the payment data; and

preserving at least a second portion of the account data, wherein preserving the second portion of the account data enables a system to process the substitute payment data as if it were payment data.

16. The method of claim 15, wherein obtaining the unique encrypted identifier that excludes the payment data comprises generating the unique encrypted identifier that excludes the payment data.

17. The method of claim 15, wherein the unique encrypted identifier that excludes the payment data is generated using one or more integrated circuits.

18. The method of claim 15, wherein performing the substitute payment data generation process further comprises preserving at least a third portion of the account data as a portion of the substitute payment data using one or more integrated circuits.

19. The method of claim 18, wherein the first portion of the account data comprises a portion of the account data within the second portion of the account data and the third portion of the account data that is extracted using one or more integrated circuits.