Dynamic Card Verification Values and Credit Transactions

• US 20100258625A1
• Filed: 03/26/2010
• Published: 10/14/2010
• Est. Priority Date: 03/27/2009
• Status: Active Grant

• Current Assignee: Aura Sub, LLC
• Original Assignee: Intersections Incorporated (Aura Sub, LLC)
• Inventors: Tsantes, George, Stanfield, Michael, Vacca, Joseph
• Granted Patent: US 8,567,670 B2
• Time in Patent Office: Days
• US Class Current: 235/380
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/4018 using the card verification value [CVV] associated with the card
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/12 Card verification

Abstract

A system and method for providing card verification values for card-not-present transactions is described. In one example, a user'"'"'s computing device stores single-use CVVs to be provided from a secure wallet. The secure wallet may be software running on the user'"'"'s computing device. Alternatively, it may be an external device connectable to the user'"'"'s computing device, which accesses the external device to obtain the single-use CVV.

Claims

1. A process for providing a card verification value comprising:

storing a plurality of stored card verification values as received from a card issuer;

authenticating a user to a processor;

selecting one of the plurality of stored card verification values;

sending the selected card verification value to a merchant along with credit card information pertaining to a purchase.

2. The process according to claim 1, wherein authenticating includes receiving and checking user input to verify the user is an authorized user of a card.

3. The process according to claim 1, further comprising:

displaying generic information on a user interface in place of the selected card verification value.

4. A process for providing a card verification value comprising:

storing a plurality of stored card verification values as received from a card issuer;

authenticating a user to a processor;

selecting one of the plurality of stored card verification values;

sending the selected card verification value to a user interface configured to display the selected card verification value to a user.

5. The process according to claim 4, wherein authenticating includes receiving and checking user input to verify the user is an authorized user of a card.

6. A external secure wallet comprising:

a processor;

a memory configured to store a plurality of stored card verification values received from a card issuer; and

an interface configured to be connected to a user'"'"'s computing device,

wherein said processor is configured to receive user input from the user'"'"'s computing device and authenticate that the user is an authorized user of the external secure wallet, and

wherein, upon authentication of the user, the processor obtains a card verification value from the memory and forwards the card verification value to the user'"'"'s computing device via said interface.

7. An internal secure wallet in a user'"'"'s computing device comprising:

a secure memory configured to store a plurality of stored card verification values received from a card issuer; and

a processor configured to encrypt and decrypt information as being exchanged with the secure memory,

wherein said processor is configured to receive user input from the user'"'"'s computing device and authenticate that the user is an authorized user of the internal secure wallet, and

wherein, upon authentication of the user, the processor obtains a card verification value from the secure memory and forwards the card verification value to one of a display region on a display device of the user'"'"'s computing device and to a communication interface of the user'"'"'s computing device.