Method and System for Conducting Secure Payments

• US 20100223186A1
• Filed: 09/08/2009
• Published: 09/02/2010
• Est. Priority Date: 04/11/2000
• Status: Abandoned Application

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Wankmueller, John, Campbell, Carl M., Hogan, Edward J., Garon, Gilles
• Application Number:
  US12/555,619
• Publication Number:
  US 20100223186A1
• Time in Patent Office: Days
• US Class Current: 705/71
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/4015 using location information
• CPC Class Codes: G06Q 20/403 Solvency checks
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/12 Card verification
• CPC Class Codes: G07F 7/122 Online card verification

Abstract

A proximity device transmits a first dynamic authentication value contactlessly to a terminal. The first authentication value is included in a discretionary data field of message data arranged in an ISO Track 1 and/or ISO Track 2 format. Message data is sent from the terminal to an issuer. The issuer separately derives a second authentication value and compares it with the first authentication value.

Claims

1. A method of conducting a transaction using a proximity device, comprising:

receiving at a terminal a first authentication value from the proximity device, the first authentication value being dynamically generated by said device;

including the first authentication value in a discretionary data field of message data, the message data being arranged in an ISO format; and

transmitting the message data from said terminal for verification.

2. The method of claim 1, further comprising:

generating a random number;

transmitting an authentication command contactlessly from said terminal to said proximity device, the authentication command including said random number, the step of dynamically generating the first authentication value comprising using a first authentication key by the proximity device to derive the first authentication value from data comprising at least said random number;

calculating a second authentication value by an issuer using a second authentication key and said message data; and

comparing said second authentication value to said first authentication value by said issuer to verify the transaction.

3. The method of claim 1, wherein the message data is arranged in at least one of an ISO Track 1 format and an ISO Track 2 format.

4. The method of claim 2, further comprising entering user data into the terminal by a user, wherein the step of generating the random number is performed by the terminal based on the user data.

5. The method of claim 1, wherein the step of including the first authentication value in the discretionary data field of the message data is performed by said terminal.

6. The method of claim 1, wherein the step of including the first authentication value in the discretionary data field of the message data is performed by said proximity device.

7. The method of claim 1, wherein the step of including the first authentication value in the discretionary data field of the message data is performed by an agent of an issuer.

8. The method of claim 1, wherein said proximity device is in a form of a credit card.

9. The method of claim 8, wherein said proximity device includes a magnetic stripe.

10. The method of claim 9, wherein said proximity device includes a printed authentication value.

11. The method of claim 1, wherein said proximity device is in a form of a key fob.

12. The method of claim 1, wherein said proximity device is included in a mobile telephone.

13. The method of claim 1, wherein said proximity device is included in a watch.

14. The method of claim 2, further comprising:

ensuring by the terminal that said proximity device is an only proximity device within an operating field of said terminal before attempting a transaction.

15. The method of claim 1, further comprising:

detecting multiple proximity devices by the terminal in an operating field of the terminal;

prompting a user to select one of said multiple proximity devices.

16. The method of claim 2, wherein said data comprising at least said random number further comprises at least one of a proximity chip counter, a representation of the random number, and a representation of the proximity chip counter.

17. The method of claim 2, wherein the proximity device has a counter, the method further comprising increasing the counter by said proximity device after a time at which the proximity device is coupled to the terminal.

18. The method of claim 1, further comprising converting the message data to a binary coded decimal format by said terminal before the step of transmitting the message data from said terminal to said issuer.

19. The method of claim 1, wherein the proximity device includes a proximity chip.

20. The method of claim 2, wherein the second authentication key is equal to the first authentication key.

21. The method of claim 2, wherein the first authentication key is a public key infrastructure private key and the second authentication key is a public key infrastructure public key, wherein said public key infrastructure public key is associated with said public key infrastructure private key.

22. The method of claim 2, wherein said message data further includes at least one of a proximity chip counter, the random number, a representation of the random number, and a representation of the proximity chip counter.

23. The method of claim 22, further comprising comparing by said terminal said message data to at least one of the random number and a representation of the random number.

24. The method of claim 22, further comprising comparing by said issuer said message data to at least one of the random number and a representation of the random number.

25. The method of claim 2, wherein the step of generating the random number is performed by the terminal.

26. A system for conducting a transaction using a proximity device, comprising a processing arrangement configured to perform the steps of:

dynamically generating a first authentication value;

transmitting the first authentication value from the proximity device to a terminal;

including the first authentication value in a discretionary data field of message data, the message data being arranged in an ISO format; and

transmitting the message data from said terminal for verification.

27. A system according to claim 26, wherein the processing arrangement is further configured to perform the steps of:

generating a random number;

transmitting an authentication command contactlessly from said terminal to said proximity device, the authentication command including said random number, the step of dynamically generating the first authentication value comprising using a first authentication key by the proximity device to derive the first authentication value from data comprising at least said random number;

calculating a second authentication value by an issuer using a second authentication key and said message data; and

comparing said second authentication value to said first authentication value by said issuer to verify the transaction.

28. A system according to claim 26, wherein the message data is arranged in at least one of an ISO Track 1 format and an ISO Track 2 format.

29. A system according to claim 27, wherein the terminal is configured to receive user data from a user;

the terminal being configured to perform the step of generating the random number based on the user data.

30. A system according to claim 26, wherein the terminal is configured to perform the step of including the first authentication value in the discretionary data field of the message data.

31. A system according to claim 26, wherein the proximity device is configured to perform the step of including the first authentication value in the discretionary data field of the message data.

32. A system according to claim 26, further comprising an agent of an issuer, the agent being configured to perform the step of including the first authentication value in the discretionary data field of the message data.

33. A system according to claim 26, wherein said proximity device is in a form of a credit card.

34. A system according to claim 33, wherein said proximity device includes a magnetic stripe.

35. A system according to claim 34, wherein said proximity device includes a printed authentication value.

36. A system according to claim 26, wherein said proximity device is in a form of a key fob.

37. A system according to claim 26, wherein said proximity device is included in a mobile telephone.

38. A system according to claim 26, wherein said proximity device is included in a watch.

39. A system according to claim 27, wherein the terminal is configured to perform the step of ensuring that said proximity device is an only proximity device within an operating field of said terminal before attempting a transaction.

40. A system according to claim 26, wherein the terminal is configured to perform the steps of:

detecting multiple proximity devices in an operating field of the terminal;

prompting a user to select one of said multiple proximity devices.

41. A system according to claim 27, wherein said data comprising at least said random number further comprises at least one of a proximity chip counter, a representation of the random number, and a representation of the proximity chip counter.

42. A system according to claim 27, wherein the proximity device has a counter, the proximity device is configured to perform the step of increasing the counter by said proximity device after a time at which the proximity device is coupled to the terminal.

43. A system according to claim 26, wherein the terminal is configured to perform the step of converting the message data to a binary coded decimal format before the step of transmitting the message data from said terminal to said issuer.

44. A system according to claim 26, wherein the proximity device includes a proximity chip.

45. A system according to claim 27, wherein the second authentication key is equal to the first authentication key.

46. A system according to claim 27, wherein the first authentication key is a public key infrastructure private key and the second authentication key is a public key infrastructure public key, wherein said public key infrastructure public key is associated with said public key infrastructure private key.

47. A system according to claim 27, wherein said message data further includes at least one of a proximity chip counter, the random number, a representation of the random number, and a representation of the proximity chip counter.

48. A system according to claim 47, wherein the terminal is configured to perform the step of comparing said message data to at least one of the random number and a representation of the random number.

49. A system according to claim 47, wherein the issuer is configured to perform the step of comparing said message data to at least one of the random number and a representation of the random number.

50. A system according to claim 27, wherein the terminal is configured to perform the step of generating the random number.

51. A computer-readable medium for conducting a transaction using a proximity device, the computer-readable medium having a set of instructions operable to direct a processor to perform the steps of:

dynamically generating a first authentication value;

transmitting the first authentication value from the proximity device to a terminal;

including the first authentication value in a discretionary data field of message data, the message data being arranged in an ISO format; and

transmitting the message data from said terminal for verification.

52. A computer-readable medium according to claim 51, wherein the set of instructions is further operable to direct the processor to perform the steps of:

generating a random number;

transmitting an authentication command contactlessly from said terminal to said proximity device, the authentication command including said random number, the step of dynamically generating the first authentication value comprising using a first authentication key by the proximity device to derive the first authentication value from data comprising at least said random number;

calculating a second authentication value by an issuer using a second authentication key and said message data; and

comparing said second authentication value to said first authentication value by said issuer to verify the transaction.

53. A computer-readable medium according to claim 51, wherein the message data is arranged in at least one of an ISO Track 1 format and an ISO Track 2 format.

54. A computer-readable medium according to claim 52, wherein the computer-readable medium is further operable to direct the terminal to receive user data from a user, the step of generating the random number being performed by the terminal based on the user data.

55. A computer-readable medium according to claim 51, wherein the step of including the first authentication value in the discretionary data field of the message data is performed by said terminal.

56. A computer-readable medium according to claim 51, wherein the step of including the first authentication value in the discretionary data field of the message data is performed by said proximity device.

57. A computer-readable medium according to claim 51, wherein the step of including the first authentication value in the discretionary data field of the message data is performed by an agent of an issuer.

58. A computer-readable medium according to claim 51, wherein said proximity device is in a form of a credit card.

59. A computer-readable medium according to claim 58, wherein said proximity device includes a magnetic stripe.

60. A computer-readable medium according to claim 59, wherein said proximity device includes a printed authentication value.

61. A computer-readable medium according to claim 51, wherein said proximity device is in a form of a key fob.

62. A computer-readable medium according to claim 51, wherein said proximity device is included in a mobile telephone.

63. A computer-readable medium according to claim 51, wherein said proximity device is included in a watch.

64. A computer-readable medium according to claim 51, wherein the set of instructions is further operable to direct the processor to perform the step of ensuring by the terminal that said proximity device is an only proximity device within an operating field of said terminal before attempting a transaction.

65. A computer-readable medium according to claim 52, wherein the set of instructions is further operable to direct the processor to perform the steps of:

detecting multiple proximity devices by the terminal in an operating field of the terminal;

prompting a user to select one of said multiple proximity devices.

66. A computer-readable medium according to claim 52, wherein said data comprising at least said random number further comprises at least one of a proximity chip counter, a representation of the random number, and a representation of the proximity chip counter.

67. A computer-readable medium according to claim 52, wherein the proximity device has a counter, the set of instructions is further operable to direct the processor to perform the step of increasing the counter by said proximity device after a time at which the proximity device is coupled to the terminal.

68. A computer-readable medium according to claim 51, wherein the set of instructions is further operable to direct the processor to perform the step of converting the message data to a binary coded decimal format by said terminal before the step of transmitting the message data from said terminal to said issuer.

69. A computer-readable medium according to claim 51, wherein the proximity device includes a proximity chip.

70. A computer-readable medium according to claim 52, wherein the second authentication key is equal to the first authentication key.

71. A computer-readable medium according to claim 52, wherein the first authentication key is a public key infrastructure private key and the second authentication key is a public key infrastructure public key, wherein said public key infrastructure public key is associated with said public key infrastructure private key.

72. A computer-readable medium according to claim 52, wherein said message data further includes at least one of a proximity chip counter, the random number, a representation of the random number, and a representation of the proximity chip counter.

73. A computer-readable medium according to claim 72, wherein the set of instructions is further operable to direct the terminal to perform the step of comparing said message data to at least one of the random number and a representation of the random number.

74. A computer-readable medium according to claim 72, wherein the set of instructions is further operable to direct an agent of the issuer to perform the step of comparing said message data to at least one of the random number and a representation of the random number.

75. A computer-readable medium according to claim 52, wherein the step of generating the random number is performed by the terminal.