Secure remote payment transaction processing

• US 11,055,694 B2
• Filed: 11/27/2019
• Issued: 07/06/2021
• Est. Priority Date: 07/15/2013
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Sheets, John, Wagner, Kim, Aabye, Christian, Liu, Frederick, Karpenko, Igor, Powell, Glenn, Pirzadeh, Kiushan
• Primary Examiner(s): Nigh, James D
• Assistant Examiner(s): Neubig, Margaret M
• Application Number:
  US16/698,706
• Publication Number:
  US 20200097948A1
• Time in Patent Office: 587 Days
• Field of Search: 705 50- 79
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3829 involving key management

Abstract

Embodiments of the present invention are directed to methods, apparatuses, computer readable media and systems for securely processing remote transactions. One embodiment of the invention is directed to a method of processing a remote transaction initiated by a mobile device comprising a server computer receiving a payment request including encrypted payment information. The encrypted payment information being generated by a mobile payment application of the mobile device and being encrypted using a third party key. The method further comprises decrypting the encrypted payment information using the third party key, determining a transaction processor public key associated with the payment information, and re-encrypting the payment information using the transaction processor public key. The method further comprises sending a payment response including the re-encrypted payment information to a transaction processor. The transaction processor decrypts the re-encrypted payment information using a transaction processor private key and initiates a payment transaction.

Claims

1. A method comprising:

providing, by a mobile application on a mobile device to a transaction processor, encrypted payment information;

generating, by the transaction processor, a payment request including the encrypted payment information;

transmitting, by the transaction processor, the payment request to a server computer, wherein the server computer (i) receives the encrypted payment information, (ii) decrypts the encrypted payment information using a third party key, (iii), determines a transaction processor public key, (iv) re-encrypts the payment information with a transaction processor public key, and (v) transmits the re-encrypted payment information to the transaction processor;

decrypting, by the transaction processor, the re-encrypted payment information with a transaction processor private key to obtain the payment information; and

initiating, a payment transaction by the transaction processor using the payment information.

2. The method of claim 1, wherein the transaction processor is a transaction processor application on the mobile device.

3. The method of claim 1, wherein the transaction processor is a merchant computer or a merchant application.

4. The method of claim 1, wherein the payment request includes a transaction processor certificate, and wherein the server computer further

validates that the transaction processor certificate is authentic;

verifies that the transaction processor certificate is currently valid with a certificate authority; and

extracts the transaction processor public key from the transaction processor certificate.

5. The method of claim 1, wherein the server computer is a remote key manager computer.

6. The method of claim 1, wherein the payment transaction is initiated by the transaction processor by generating, by the transaction processor, an authorization request message and transmitting the authorization request message to an issuer computer for authorization.

7. The method of claim 1, wherein the encrypted payment information includes encrypted payment credentials and unencrypted transaction information.

8. The method of claim 1, wherein the method further comprises, before providing the encrypted payment information:

receiving, by the mobile application, payee information from the transaction processor.

9. The method of claim 1, wherein the payment information comprises a primary account number or a payment token.

10. The method of claim 1, wherein the third party key is a third party private key.

11. A mobile device comprising:

a processor; and

a computer readable medium comprising code, executable by the processor, for implementing a method comprising;

providing, by a mobile application on the mobile device to a transaction processor, encrypted payment information;

generating, by the transaction processor, a payment request including the encrypted payment information;

transmitting, by the transaction processor, the payment request to a server computer, wherein the server computer (i) receives the encrypted payment information, (ii) decrypts the encrypted payment information, (iii), determines a transaction processor public key, (iv) re-encrypts the payment information with a transaction processor public key, and (v) transmits the re-encrypted payment information to the transaction processor;

decrypting, by the transaction processor, the re-encrypted payment information with a transaction processor private key to obtain the payment information; and

initiating, a payment transaction by the transaction processor using the payment information.

12. The mobile device of claim 11, wherein the mobile device is a mobile phone.

13. The mobile device of claim 11, wherein the transaction processor is a merchant application.

14. The mobile device of claim 11, wherein

the transaction processor interacts with the mobile application before the mobile application provides the encrypted payment information.

15. The mobile device of claim 11, wherein the encrypted payment information includes an encrypted PAN.

16. The mobile device of claim 11, wherein the payment transaction is initiated by the transaction processor by generating, by the transaction processor, an authorization request message and transmitting the authorization request message to an issuer computer for authorization.

17. The mobile device of claim 11, wherein the encrypted payment information includes encrypted payment credentials and unencrypted transaction information.

18. The mobile device of claim 11, wherein the mobile application is a mobile payment application.