Dynamic card verification values and credit transactions

• US 9,858,567 B2
• Filed: 10/28/2013
• Issued: 01/02/2018
• Est. Priority Date: 03/27/2009
• Status: Active Grant

• Current Assignee: Aura Sub, LLC
• Original Assignee: Intersections Incorporated (Aura Sub, LLC)
• Inventors: Stanfield, Michael, Tsantes, George, Vacca, Joe
• Primary Examiner(s): Mikels, Matthew
• Application Number:
  US14/065,192
• Publication Number:
  US 20150120538A1
• Time in Patent Office: 1,527 Days
• Field of Search: 235375, 235379, 235380, 705 5, 705 35- 45
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/4018 using the card verification value [CVV] associated with the card
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/12 Card verification

Abstract

A system and method for providing card verification values for card-not-present transactions is described. In one example, a user'"'"'s computing device stores single-use CVVs to be provided from a secure wallet. The secure wallet may be software running on the user'"'"'s computing device. Alternatively, it may be an external device connectable to the user'"'"'s computing device, which accesses the external device to obtain the single-use CVV.

Claims

1. A method comprising:

receiving, by a computing device, a request to associate a card with a secure wallet on the computing device;

storing, in the secure wallet on the computing device, information related to card information, the information including an account identifier that is different from a card number printed on the card;

storing, on the computing device, a token associated with a user of the computing device and a card issuer of the card;

receiving, by the computing device, a request to provide, in connection with a purchase from a merchant, the information stored in the secure wallet on the computing device;

responsive to receiving the request to provide the information, requesting authentication from the user;

authenticating the user for access to the secure wallet;

generating new one-time-use information related to the information stored in the secure wallet; and

responsive to the authenticating, providing, from the computing device to the merchant via an electronic transmission, in connection with the purchase, the new one-time-use information related to the information stored in the secure wallet.

2. The method of claim 1, wherein generating the new one-time-use information related to the information stored in the secure wallet comprises generating a new card verification value,

wherein providing the new one-time-use information related to the information stored in the secure wallet comprises providing the new card verification value, and

wherein the method comprises designating the new card verification value as used.

3. The method of claim 1, comprising:

storing, in the secure wallet on the computing device, one or more card verification values related to the card information.

4. The method of claim 1, wherein authenticating the user for access to the secure wallet comprises authenticating, using a fingerprint of the user, the user for access to the secure wallet.

5. The method of claim 1, comprising:

requesting a phrase spoken by the user;

receiving, via a microphone of the computing device, the phrase spoken by the user; and

based on the phrase spoken by the user, analyzing a voice print of the user,

wherein the authenticating the user is based on the analyzing the voice print of the user.

6. The method of claim 5, wherein requesting the phrase spoken by the user comprises displaying a random phrase to be spoken by the user.

7. The method of claim 1, comprising:

capturing, using a camera of the computing device, an image of the user;

determining whether the image of the user is a new image captured in connection with the purchase;

determining whether the image of the user matches a previously obtained image of the user;

in a case that the image of the user matches the previously obtained image of the user, and the image of the user is the new image captured in connection with the purchase, proceeding with requesting the purchase; and

in a case that the image of the user does not match the previously obtained image of the user, or the image of the user is not the new image captured in connection with the purchase, not proceeding with requesting the purchase.

8. The method of claim 1, comprising:

displaying, by the computing device, a confirmation of providing, to the merchant in connection with the purchase, the new one-time-use information.

9. The method of claim 1, comprising:

displaying, by the computing device, content related to the card information.

10. The method of claim 1, comprising:

capturing, via a touch-sensitive surface of the computing device, a signature of the user; and

providing, in connection with the purchase, the signature of the user.

11. The method of claim 1, comprising:

storing the information related to the card information in an encrypted state in the secure wallet on the computing device.

12. The method of claim 1, comprising:

determining a location of the purchase from the merchant;

alerting the user of the location of the purchase from the merchant; and

after the alerting the user of the location of the purchase from the merchant, receiving authorization from the user to proceed with the purchase from the merchant.

14. The method of claim 1, comprising:

designating the new-one-time-use information related to the information stored in the secure wallet as used.

15. The method of claim 1, wherein providing, to the merchant via the electronic transmission, in connection with the purchase, the new one-time-use information related to the information stored in the secure wallet comprises sending encrypted credit card information.

16. The method of claim 1, comprising:

determining whether the merchant is in a predetermined set of merchants; and

authenticating the merchant.

17. The method of claim 1, comprising:

storing, in the secure wallet on the computing device, information about a supplemental account different from a credit card account associated with the card.

13. Non-transitory computer-readable media storing executable instructions that, when executed by at least one processor, cause a system to:

receive a request to associate a card with a secure wallet on the system;

store, in the secure wallet on the system, information related to card information, the information including an account identifier that is different from a card number printed on the card;

store a token associated with a user of the system and a card issuer of the card;

receive, by the system, a request to provide, in connection with a purchase from a merchant, the information stored in the secure wallet on the system;

responsive to receiving the request to provide the information, request authentication from the user;

authenticate the user for access to the secure wallet;

generate new one-time-use information related to the information stored in the secure wallet; and

responsive to authenticating the user, provide via an electronic transmission to the merchant, in connection with the purchase, the new one-time-use information related to the information stored in the secure wallet.

20. The non-transitory computer-readable media of claim 13, wherein authenticating the user for access to the secure wallet comprises authenticating, using a fingerprint of the user, the user for access to the secure wallet.

18. A system comprising:

at least one processor; and

non-transitory memory storing executable instructions that, when executed by the at least one processor, cause the system to;

receive a request to associate a card with a secure wallet on the system;

store, in the secure wallet on the system, information related to card information, the information including an account identifier that is different from a card number printed on the card;

store a token associated with a user of the system and a card issuer of the card;

receive, by the system, a request to provide, in connection with a purchase from a merchant, the information stored in the secure wallet on the system;

responsive to receiving the request to provide the information, request authentication from the user;

authenticate the user for access to the secure wallet;

generate new one-time-use information related to the information stored in the secure wallet; and

responsive to authenticating the user, provide via an electronic transmission to the merchant, in connection with the purchase, the new one-time-use information related to the information stored in the secure wallet.

19. The system of claim 18, wherein authenticating the user for access to the secure wallet comprises authenticating, using a fingerprint of the user, the user for access to the secure wallet.