Device, system and method for reducing an interaction time for a contactless transaction

• US 9,613,354 B2
• Filed: 03/22/2016
• Issued: 04/04/2017
• Est. Priority Date: 09/28/2005
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Hill, Trudy, Sahota, Jagdeep Singh, Aabye, Christian, Wagner, Kim R., Ochieano, Anita, Oppenlander, Carole, Chan, William Chi Yuen, Glendenning, Craig Allen
• Primary Examiner(s): Savusdiphol, Paultep
• Application Number:
  US15/077,784
• Publication Number:
  US 20160260092A1
• Time in Patent Office: 378 Days
• Field of Search: 235375, 235379, 235380
• CPC Class Codes: G06K 7/0008 General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G07F 7/0826 Embedded security module
• CPC Class Codes: G07F 7/088 the card reader being part of the point of sale [POS] terminal or electronic cash register [ECR] itself
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

Methods, devices, and systems are described for sending and receiving messages between a terminal reader and a payment device, such as a credit card. A dynamic signature is calculated on the payment device from an application transaction counter, a terminal unpredictable number, and a transaction amount, and it is sent with an application file locator (AFL) to the reader. The reader then sends a read record command to the payment device to get records associated with the AFL, among other normal processing. While the normal processing is occurring for the transaction, the dynamic signature can be recalculated and compared with that from the payment device in order to assure that nothing has surreptitiously changed the values in the messages.

Claims

1. A method comprising:

sending from a reader to a payment device a terminal unpredictable number and a transaction amount;

receiving from the payment device a message with a dynamic signature generated based on an application transaction counter (ATC), the terminal unpredictable number, and the transaction amount, the dynamic signature sent with an application file locator (AFL); and

then

transmitting from the reader to the payment device a command message to request one or more records indicated in the AFL from the payment device;

receiving at the reader from the payment device the requested one or more records requested by the command message, wherein the one or more records requested by the command message is received at the reader within 500 milliseconds of the reader sending the terminal unpredictable number and the transaction amount to the payment device; and

causing a recalculation of the dynamic signature in order to authorize a transaction if the dynamic signature received from the payment device matches the recalculated dynamic signature.

2. The method of claim 1, further comprising:

terminating communication between the reader and payment device prior to performing an online transaction.

3. The method of claim 2, further comprising:

receiving a cryptogram that is based on the application transaction counter, the terminal unpredictable number, and the transaction amount; and

requesting the transaction be processed online with the cryptogram if the dynamic signature is not validated.

4. The method of claim 1, further comprising:

terminating communication between the reader and the payment device prior to performing an offline authorization.

5. The method of claim 1, further comprising:

authorizing the transaction if the dynamic signature received from the payment device is equal to the recalculated dynamic signature.

6. The method of claim 1, further comprising:

receiving a request for a second transaction; and

re-establishing communication between the reader and the payment device.

7. The method of claim 6, wherein completing the second transaction changes the application transaction counter.

8. The method of claim 6, wherein the second transaction is for a non-financial transaction.

9. The method of claim 1, further comprising:

incrementing, at the payment device, the application transaction counter; and

then

generating, at the payment device, the dynamic signature.

10. The method of claim 1, further comprising:

transmitting from the reader to the payment device a request for a list of applications that are supported by the payment device for conducting a transaction.

11. The method of claim 1, wherein the sending, receivings, and transmitting are conducted wirelessly.

12. A non-transitory computer readable medium embodying information indicative of instructions for causing a reader to perform operations comprising:

sending from a reader to a payment device a terminal unpredictable number and a transaction amount;

receiving from the payment device a message with a dynamic signature generated based on an application transaction counter (ATC), the terminal unpredictable number, and the transaction amount, the dynamic signature sent with an application file locator (AFL); and

then

transmitting from the reader to the payment device a command message to request one or more records indicated in the AFL from the payment device;

receiving at the reader from the payment device the requested one or more records requested by the command message, wherein the one or more records requested by the command message is received at the reader within 500 milliseconds of the reader sending the terminal unpredictable number and the transaction amount to the payment device; and

causing a recalculation of the dynamic signature in order to authorize a transaction if the dynamic signature received from the payment device matches the recalculated dynamic signature.

13. The medium of claim 12, further comprising instructions for:

terminating communication between the reader and the payment device prior to performing an online authorization.

14. The medium of claim 13, further comprising instructions for:

receiving a cryptogram that is based on the application transaction counter, the terminal unpredictable number, and the transaction amount; and

requesting the transaction be processed online with the cryptogram if the dynamic signature is not validated.

15. The medium of claim 12, further comprising instructions for:

terminating communication between the reader and the payment device prior to performing an offline authorization.

16. The medium of claim 12, wherein the payment device is configured to operate in chip-mode for wireless communication or magnetic stripe mode.

17. The medium of claim 12, wherein the payment device is configured to increment the application transaction counter before generating the dynamic signature.

18. The medium of claim 12, further comprising instructions for:

transmitting from the reader to the payment device a request for a list of applications that are supported by the payment device for conducting a transaction.

19. A system comprising:

a reader comprising a non-transitory computer readable medium embodying information indicative of instructions for causing the reader to perform operations comprising;

sending from the reader to a payment device a terminal unpredictable number and a transaction amount;

receiving from the payment device a message with a dynamic signature generated based on an application transaction counter (ATC), the terminal unpredictable number, and the transaction amount, the dynamic signature sent with an application file locator (AFL); and

then

transmitting from the reader to the payment device a command message to request one or more records indicated in the AFL from the payment device;

receiving from the payment device the requested one or more records requested by the command message; and

causing a recalculation of the dynamic signature in order to authorize a transaction if the dynamic signature received from the payment device matches the recalculated dynamic signature; and

the payment device comprising a non-transitory computer readable medium embodying information indicative of instructions for causing the payment device to perform operations comprising;

sending from the payment device to the reader the message with the dynamic signature; and

then

sending from the payment device to the reader the requested one or more records requested by the command message, wherein the one or more records requested by the command message is sent to the reader within 500 milliseconds of the reader sending the terminal unpredictable number and the transaction amount to the payment device.

20. The system of claim 19, further comprising instructions in the reader for:

receiving from the payment device a cryptogram that is based on the application transaction counter, the terminal unpredictable number, and the transaction amount; and

requesting the transaction be processed online with the cryptogram if the dynamic signature is not validated.