SYSTEM AND METHOD FOR SECURING RF TRANSACTIONS USING A RADIO FREQUENCY IDENTIFICATION DEVICE INCLUDING A RANDOM NUMBER GENERATOR

• US 20110161235A1
• Filed: 03/04/2011
• Published: 06/30/2011
• Est. Priority Date: 07/10/2001
• Status: Abandoned Application

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Peart, Lee J., Saunders, Peter D., Rojewski, John, Beenau, Blayn W., Imada, Jon, McDonald, John, Fields, Seth W.
• Application Number:
  US13/040,513
• Publication Number:
  US 20110161235A1
• Time in Patent Office: Days
• US Class Current: 705/75
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/4093 Monitoring of device authentication
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G06Q 30/0267 Wireless devices
• CPC Class Codes: G06Q 30/0268 at point-of-sale [POS]
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence
• CPC Class Codes: G07C 9/29 the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A system and method for securing a Radio Frequency (RF) transaction using a RF identification device (RFID) transaction device is provided. The method includes a RFID transaction device including a random number generator for generating a random number. The random number may be used by an account issuer to verify the validity of a RFID transaction device or RFID reader communicating on the RF transactions network. The authorizing agent may receive the random number and compare the random number to a device validating code.

Claims

1. A system comprising:

a tangible, non-transitory memory communicating with a processor for securing a transaction,

the tangible, non-transitory memory having instructions stored thereon that, in response to execution by the processor, cause the processor to perform operations comprising;

receiving, by the processor, a transaction device random number;

looking up, by the processor using the transaction device random number, a previously stored decryption key; and

decrypting, by the processor using the previously stored decryption key, at least one of a transaction device identifier and a transaction device authentication tag.

2. The system of claim 1, wherein the receiving the transaction device random number is from an RFID transaction device.

3. The system of claim 1, wherein the transaction is a radio frequency (RF) transaction.

4. The system of claim 1, wherein the transaction device identifier is different from the transaction device authentication tag.

5. The system of claim 1, further comprising transmitting to a reader, both the transaction device identifier and the transaction device authentication tag for validation, wherein the validation is based at least in part on both the transaction device identifier and the transaction device authentication tag.

6. The system of claim 1, wherein the transaction device random number is converted to a validating code and used to validate a transaction device.

7. The system of claim 1, wherein a new transaction device random number is generated for each transaction.

8. The system of claim 1, further comprising a random number generator for producing a reader random number.

9. The system of claim 1, wherein a reader is operable to provide the transaction device random number to a point of sale device (POS).

10. The system of claim 1, wherein a reader is operable to provide the transaction device random number to a POS, and wherein the POS is configured to provide the transaction device random number to the account authorizing agent system.

11. The system of claim 1, wherein a reader is operable to provide the transaction device identifier to a point of sale device (POS).

12. The system of claim 1, wherein at least one of the transaction device identifier and the transaction device random number is provided to a reader in track 1/track 2 International Standards Setting Organization format.

13. The system of claim 1, wherein at least one of the transaction device identifier and the transaction device random number is provided to a reader in a POS pre-defined format.

14. The system of claim 1, wherein an authorizing agent system is configured to validate the transaction device identifier in accordance with the transaction device random number.

15. The system of claim 1, wherein a POS is configured to provide at least one of the transaction device random number, transaction device identifier, and reader RFID reader random number to an account authorizing agent system.

16. The system of claim 1, wherein a reader is operable to provide at least one of the transaction device random number, the transaction device identifier, and the random number to a merchant POS.

17. The system of claim 1, wherein an authorizing agent system is configured to validate at least one of a transaction device and a reader, in accordance with the at least one of the transaction device random number, the transaction device identifier, and the transaction device random number.

18. An article of manufacture including a non-transitory, tangible computer readable medium having instructions stored thereon that, in response to execution by a computer-based system for securing a transaction, cause the computer-based system to perform operations comprising:

receiving, by the computer-based system, a transaction device random number;

looking up, by the computer-based system using the transaction device random number, a previously stored decryption key; and

decrypting, by the computer-based system using the previously stored decryption key, at least one of a transaction device identifier and a transaction device authentication tag.

19. A method comprising:

receiving, by a computer-based system for securing a transaction, a transaction device random number;

looking up, by the computer-based system using the transaction device random number, a previously stored decryption key; and

decrypting, by the computer-based system using the previously stored decryption key, at least one of a transaction device identifier and a transaction device authentication tag.