Secure payment card, method and system

• US 9,600,808 B1
• Filed: 06/22/2012
• Issued: 03/21/2017
• Est. Priority Date: 06/24/2011
• Status: Active Grant

• Current Assignee: Epic One Texas, LLC
• Original Assignee: Epic One Texas, LLC
• Inventors: Gomez, William Sr., Gomez, William Jr., Gomez, Oscar J.
• Primary Examiner(s): Kim, Steven
• Assistant Examiner(s): Oussir, El Mehdi
• Application Number:
  US13/530,620
• Time in Patent Office: 1,733 Days
• Field of Search: 705/75, 705/46
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 30/00 Commerce
• CPC Class Codes: H04M 17/30 using a code
• CPC Class Codes: H04M 2017/2531 wireless, e.g. Bluetooth, RFID
• CPC Class Codes: H04N 21/441 Acquiring end-user identification , e.g. using personal code sent by the remote control or by inserting a card

Abstract

A payment card system uses a static payment card identifying number and generates, for each attempted transaction, an authentication cryptogram based at least upon a seed value stored within the payment card and further based upon a temporal signal value that changes for each attempted use of the payment card. The authentication cryptogram may be alpha-numerically encoded, preferably using a radix-32 coding to provide 5-bits of information for each character or symbol, and may be communicated in a 26-character payment card account name field instead of communicating a payment account name in said payment card account name field, to thus convey up to 130-bits of information while maintaining compatibility with existing point-of-sale equipment and payment system infrastructure.

Claims

1. An authentication method for use in a payment card, said method comprising:

verifying, within the payment card, a credential presented to the payment card by a payment card user as being a valid credential for the payment card user;

then

generating, within the payment card, a temporal signal value;

generating, using a processor within the payment card, a message digest based at least in part on a seed value stored within the payment card and the temporal signal value;

encoding, using the processor within the payment card, at least a portion of the message digest using an alpha-numeric code to form an alpha-numeric authentication cryptogram;

communicating, using an interface device within the payment card, a payment card identifying number stored within the payment card to a payment processing system; and

communicating, using the interface device within the payment card, the alpha-numeric authentication cryptogram in a payment card account name field to the payment processing system instead of communicating a payment account name in said payment card account name field.

2. The method as in claim 1 wherein the alpha-numeric authentication cryptogram is encoded to represent any of at least 10²⁰ values.

3. The method as in claim 1 wherein the alpha-numeric authentication cryptogram is encoded to represent any of at least 32²⁰ values.

4. The method as in claim 1 wherein:

the alpha-numeric code has a radix greater than 10; and

the alpha-numeric authentication cryptogram is at least 20 alpha-numeric characters in length.

5. The method as in claim 4 wherein:

the radix is greater than 16.

6. The method as in claim 1 wherein the payment card identifying number is communicated using a payment card security code field together with a payment card account number field.

7. The method as in claim 1 wherein:

the temporal signal value comprises a real-time value; and

the method further comprises communicating the real-time value to the payment processing system.

8. The method as in claim 1 wherein:

the temporal signal value comprises a sequence value that changes for each attempted payment card use.

9. The method as in claim 1 wherein the payment card identifying number is a static number that represents an actual payment account number.

10. The method as in claim 1 wherein the payment card identifying number is a static number that does not represent an actual payment account number.

11. The method as in claim 10 wherein the payment card identifying number is at least 19 digits in length, and is communicated to the payment processing system using a payment card account number field and a payment card security code field.

12. The method as in claim 1 wherein the credential for the payment card user comprises a personal identification number (PIN) for the payment card user.

13. The method as in claim 1 wherein the credential for the payment card user comprises a fingerprint for the payment card user.

26. The method as in claim 1 wherein the temporal signal value comprises a real time value received from the payment processing system.

27. The method as in claim 1 wherein the payment processing system includes a point-of-sale merchant device.

28. The method as in claim 10 wherein:

the alpha-numeric code has a radix of at least 32; and

the alpha-numeric authentication cryptogram is 26 alpha-numeric characters in length.

14. A payment card comprising:

an input device operable to receive a credential presented by a payment card user;

a temporal value circuit operable to generate a temporal signal value;

a storage device operable to store a seed value corresponding to the payment card;

a processor operable to verify the credential presented by the payment card user, and further operable to generate a message digest based at least in part on the seed value and the temporal signal value, and to encode at least a portion of the message digest using an alpha-numeric code to form an alpha-numeric authentication cryptogram;

an interface device operable to communicate a payment card identifying number in a payment card account number field to a payment processing system, and further operable to communicate the alpha-numeric authentication cryptogram in a payment card account name field to the payment processing system instead of communicating a payment account name in said payment card account name field.

15. The payment card as in claim 14 wherein the input device comprises a keypad for entry of a personal identification number (PIN) for the payment card user.

16. The payment card as in claim 14 wherein the input device comprises a fingerprint reader.

17. The payment card as in claim 14 wherein the interface device comprises a near-field communications circuit.

18. The payment card as in claim 14 wherein the interface device comprises a re-writable magnetic stripe device.

19. The payment card as in claim 14 wherein:

the temporal value circuit comprises a real-time clock circuit;

the temporal signal value comprises a real-time value; and

the interface device is operable to convey the real-time value to the payment processing system.

20. The payment card as in claim 14 wherein:

the temporal value circuit comprises a sequential instance circuit; and

the temporal signal value comprises a sequence value that changes for each attempted payment card use.

21. The payment card as in claim 14 wherein:

the alpha-numeric code has a radix greater than 16; and

the alpha-numeric authentication cryptogram is at least 20 alpha-numeric characters in length.

22. The payment card as in claim 14 wherein the interface device is operable to communicate the payment card identifying number using a security code field in addition to the account number field.

23. The payment card as in claim 14 wherein the payment card identifying number is a static number that does not represent an actual payment account number.

24. The payment card as in claim 23 wherein the payment card identifying number is embossed or printed on the payment card in a manner discernable to a human eye.

25. The payment card as in claim 23 wherein the payment card identifying number is at least 19 digits in length, and is communicated to the payment processing system using the payment card account number field and a payment card security code field.