Portable Consumer Device Configured to Generate Dynamic Authentication Data

• US 20110066516A1
• Filed: 09/01/2010
• Published: 03/17/2011
• Est. Priority Date: 06/19/2006
• Status: Active Grant

• Current Assignee: Ayman Hammad, Patrick Faith
• Original Assignee: Ayman Hammad, Patrick Faith
• Inventors: Faith, Patrick, Hammad, Ayman
• Granted Patent: US 8,375,441 B2
• Time in Patent Office: Days
• US Class Current: 705/17
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

Embodiments of the invention provide a portable consumer device configured to store dynamic authentication data in memory. The portable consumer device also includes an interface for transmitting data to and receiving power from an external device. The dynamic authentication data is read from the memory by a read-write device located on the portable consumer device. The authentication data is updated and the updated data may be written into memory using the read-write device. In some embodiments, an authentication value read from the memory may be used to generate another authentication value based on an algorithm. The portable consumer device is further configured to transmit authentication data to an external device. The process of reading, updating, generating, transmitting, and rewriting the authentication data may occur each time external power is provided to the portable consumer device via the interface. The power for operating the components of the portable consumer device may be drawn exclusively from the power received from the external device (i.e., the external power). In some embodiments, a portion of the external power may be temporarily stored on an energy storage means of the portable consumer device.

Claims

1. A portable consumer device comprising:

a batteryless portable body of a consumer device;

memory housed by the portable body, the memory storing dynamic authentication data;

a read-write device housed by the portable body and coupled to the memory, the read-write device being configured to change the dynamic authentication data; and

an antenna housed by the portable body and coupled to the read-write device,

wherein the read-write device is configured to function only when receiving power from an external device that is not of the consumer.

2. The portable device of claim 1, wherein each and every time the antenna is within range of an active energy field of the external device, the dynamic authentication data is communicated to the external device via the antenna.

3. The portable device of claim 2, wherein external device comprises a contactless point-of-sale device which requires no physical contact with the portable body in order to communicate to the antenna.

4. The portable device of claim 2, wherein the contactless point-of-sale device generates the active energy field in order to conduct a transaction with the consumer.

5. The portable device of claim 1, wherein the antenna comprises a coil which generates a charge to power the read-write device each and every time the charge is generated via an electromagnetic field generated by the external device.

6. The portable device of claim 1, wherein the portable body comprises a payment card.

7. The portable device of claim 6, wherein the external device is one of an ATM device and point-of-sale device.

8. The portable device of claim 1, wherein electrical energy used to temporarily power the read-write device is only sourced from the external device.

9. The portable device of claim 8, wherein the electrical energy is temporarily stored in an energy storage device within the portable body, and wherein the temporarily stored electrical energy is completely discharged from the energy storage device by the end of a transaction with the external device.

10. The portable device of claim 9, wherein each time the electrical energy is used to temporarily power the read-write device, the read-write device is further configured to generate a verification value based on the updated authentication data.

11. A portable device comprising:

a portable body; and

a payment authentication portion housed by the body, the payment authentication portion comprising;

authentication memory;

a read-write device coupled to the authentication memory, the read-write device configured to write updated dynamic authentication data to the authentication memory; and

a near-field antenna,

wherein the read-write device writes the updated dynamic authentication data only when the near-field antenna is within an active range of a contactless device,

wherein each and every time the near-field antenna is within the active range, the updated dynamic authentication data is communicated to the contactless device via the near-field antenna.

12. The portable communications device of claim 11, wherein electrical energy for operating the read-write device is only received by the read-write device when the near-field antenna is within the active range.

13. The portable device of claim 12, wherein the electrical energy for operating the read-write device is sourced exclusively from the contactless device.

14. The portable device of claim 13, wherein the active range comprises an effective range of an electromagnetic field generated by the contactless device, and wherein the electrical energy is generated via a coil coupled to the near-field antenna interfacing with electromagnetic field.

15. The portable device of claim 14, wherein the electrical energy is temporarily held by an energy store during an authentication operation of a transaction, and wherein the electrical energy is discharged from the energy store by the end of the transaction.

16. The portable device of claim 11, further comprising:

a wireless communications device portion physically coupled to the body, the device portion comprising;

a device processor;

a device computer readable medium, a device antenna; and

a device battery.

17. The portable device of claim 16, wherein electrical energy for operating the read-write device is exclusively sourced from the contactless device and not from the device battery.

18. The portable device of claim 11, wherein the dynamic authentication data comprises at least one of an automatic transaction counter and a dynamic card verification value.

19. The portable device of claim 11, wherein the contactless device comprises a point-of-sale transactional device.

20. The portable device of claim 19, wherein the portable body comprises a payment card configured to operationally interface with the point-of-sale transactional device.