Cloud-based transactions methods and systems

• US 10,402,814 B2
• Filed: 04/05/2016
• Issued: 09/03/2019
• Est. Priority Date: 12/19/2013
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Wong, Erick, Flurscheim, Christian, Makhotin, Oleg, Lopez, Eduardo, Sharma, Sanjeev, Jones, Christopher, Guglani, Abhishek, Sevanto, Jarkko Oskari, Patel, Bharatkumar, Or, Tai Lung Burnnet, Aabye, Christian, Ngo, Hao, Sheets, John F.
• Primary Examiner(s): Lemma, Samson B
• Assistant Examiner(s): Cruz-Franqui, Richard W
• Application Number:
  US15/091,253
• Publication Number:
  US 20160217452A1
• Time in Patent Office: 1,246 Days
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/389 Keeping log of transactions for guaranteeing non-repudiation of a transaction
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds

Abstract

Systems and methods provide for communication of transaction data that is formatted according to a transaction type that is support by an access device. First transaction data may be formatted according to a first type of transaction supported by a first access device and second transaction data may be formatted according to a second type of transaction supported by a second access device. The first transaction data may be transmitted over a first wireless communication link to the first access device and the second transaction data may be transmitted to the second access over a second wireless communication link.

Claims

1. A communication device comprising:

a processor circuit; and

a non-transitory computer-readable storage medium coupled to the processor circuit and storing code executable by the processor circuit for implementing a method for communicating comprising;

receiving a first signal for a first transaction from a first wireless interface of a first access device, the first signal being received over a first wireless communication link and including a first transaction type indicator indicating a first type of transaction supported by the first access device and first terminal transaction data;

in response to receiving the first signal;

generating a first transaction cryptogram by encrypting the first terminal transaction data using a limited-use key (LUK); and

transmitting first transaction data including the first transaction cryptogram to the first wireless interface over the first wireless communication link, the first transaction data being formatted according to the first type of transaction;

receiving a second signal for a second transaction from a second wireless interface of a second access device, the second signal being received over a second wireless communication link and including a second transaction type indicator indicating a second type of transaction supported by the second access device and second terminal transaction data;

in response to receiving the second signal;

determining, based on the second transaction type indicator, that a second transaction cryptogram for the second transaction is to be generated by encrypting a predetermined numeric string without the second terminal transaction data;

generating a second transaction cryptogram by encrypting the predetermined numeric string without the second terminal transaction data using the LUK, wherein the second transaction cryptogram has a reduced length as compared to the first transaction cryptogram; and

storing the second transaction cryptogram in a memory location corresponding to an application file locator and sending the application file locator instead of the second transaction cryptogram to the second wireless interface over the second wireless communication link;

receiving the application file locator from the second wireless interface; and

in response to receiving the application file locator, transmitting second transaction data including the second transaction cryptogram to the second wireless interface over the second wireless communication link, the second transaction data being formatted according to the second type of transaction.

2. The communication device of claim 1, wherein at least one of the first wireless communication link or the second wireless communication link is a Bluetooth communication link or a Bluetooth Low Energy communication link.

3. The communication device of claim 1, wherein the first wireless communication link and the second wireless communication link use the same type of wireless communication protocol.

4. The communication device of claim 1, wherein the method further comprises:

transmitting a first file locator to the first wireless interface over the first wireless communication link, the first file locator being for first account data at a first file location of the communication device wherein the first file location is different from the memory location of the second transaction cryptogram.

5. The communication device of claim 4, wherein the method further comprises:

receiving a first account data request from the first wireless interface over the first wireless communication link, the first account data request indicating the first file location.

6. The communication device of claim 1, wherein the first type of transaction is an integrated chip based transaction, and the second type of transaction is a magnetic stripe based transaction.

7. The communication device of claim 4, wherein the first file locator is transmitted to the first wireless interface after transmitting the first transaction data including the first transaction cryptogram to the first wireless interface.

8. The communication device of claim 1, wherein the first transaction data includes a token that is used as a substitute for an account identifier.

9. The communication device of claim 8, wherein the method further comprises:

transmitting the token to the second wireless interface after receiving the application file locator from the second wireless interface.

10. The communication device of claim 1, wherein the first transaction cryptogram and the second transaction cryptogram are generated using the same encryption function.

11. The communication device of claim 1, wherein the first transaction cryptogram and the second transaction cryptogram are generated using different encryption functions.

12. A method for communication comprising:

receiving, by a communication device, a first signal for a first transaction from a first wireless interface of a first access device, the first signal being received over a first wireless communication link and including a first transaction type indicator indicating a first type of transaction supported by the first access device and first terminal transaction data;

in response to receiving the first signal;

generating a first transaction cryptogram by encrypting the first terminal transaction data using a limited-use key (LUK); and

transmitting, by the communication device, first transaction data including the first transaction cryptogram to the first wireless interface over the first wireless communication link, the first transaction data being formatted according to the first type of transaction;

receiving, by the communication device, a second signal for a second transaction from a second wireless interface of a second access device, the second signal being received over a second wireless communication link and including a second transaction type indicator indicating a second type of transaction supported by the second access device and second terminal transaction data;

in response to receiving the second signal;

determining, based on the second transaction type indicator, that a second transaction cryptogram for the second transaction is to be generated by encrypting a predetermined numeric string without the second terminal transaction data;

generating a second transaction cryptogram by encrypting the predetermined numeric string without the second terminal transaction data using the LUK, wherein the second transaction cryptogram has a reduced length as compared to the first transaction cryptogram; and

storing the second transaction cryptogram in a memory location corresponding to an application file locator and sending the application file locator instead of the second transaction cryptogram to the second wireless interface over the second wireless communication link;

receiving the application file locator from the second wireless interface; and

in response to receiving the application file locator, transmitting, by the communication device, second transaction data including the second transaction cryptogram to the second wireless interface over the second wireless communication link, the second transaction data being formatted according to the second type of transaction.

13. The method of claim 12, wherein at least one of the first wireless communication link or the second wireless communication link is a Bluetooth communication link or a Bluetooth Low Energy communication link.

14. The method of claim 12, wherein the first wireless communication link and the second wireless communication link use the same type of wireless communication protocol.

15. The method of claim 12, further comprising:

transmitting, by the communication device, a first file locator to the first wireless interface over the first wireless communication link, the first file locator being for first account data at a first file location of the communication device wherein the first file location is different from the memory location of the second transaction cryptogram.

16. The method of claim 15, further comprising:

receiving, by the communication device, a first account data request from the first wireless interface over the first wireless communication link, the first account data request indicating the first file location.

17. The method of claim 12, wherein the first type of transaction is an integrated chip based transaction, and the second type of transaction is a magnetic stripe based transaction.

18. The method of claim 15, wherein the first file locator is transmitted to the first wireless interface after transmitting the first transaction data including the first transaction cryptogram to the first wireless interface.

19. The method of claim 12, wherein the first transaction data includes a token that is used as a substitute for an account identifier.

20. The method of claim 19, further comprising:

transmitting the token to the second wireless interface after receiving the application file locator from the second wireless interface.