Presence-of-Card Code for Offline Payment Processing System

• US 20130226796A1
• Filed: 02/29/2012
• Published: 08/29/2013
• Est. Priority Date: 02/29/2012
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: JIANG, Fan, Lisowiec, Malgorzata Monika, OKONKWO, Aneto Pablo, LEUNG, Patrick Pui Wah, SPRINGER, Michael William
• Granted Patent: US 9,020,858 B2
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/0655 e-cash managed centrally
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3433 the counter having monetary units
• CPC Class Codes: G06Q 20/349 Rechargeable cards
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/354 Card activation or deactivation
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3676 Balancing accounts
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/407 Cancellation of a transaction
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

Preventing fraud during an offline transaction by encoding a randomly-generated card verification code onto a smart card. The verification code is transmitted to a contactless device during each transaction, wherein it is cross-referenced with the account number to ensure presence of the card. Also, every transaction record is signed by an access key resident on the contactless device and certified by a signing key resident on a remote system. Funds may be deposited onto the card when the contactless device creates a deposit request, signs the request using an access key and transmits it to the remote system, which in turn processes the request and certifies it with a signing key. Funds may be withdrawn when the contactless device creates a withdrawal record and signs it using an access key. The remote system verifies the signatures and certifies the records using a signing key when the records are later transmitted.

Claims

1. A computer-implemented method for providing offline payment processing of purchases, comprising:

storing, by a mobile communication device, smart card identification information for a plurality of smart card devices, the smart card identification information comprising, for each of the smart card devices, a smart card account number and corresponding verification number;

detecting a smart card device by the mobile communication device;

establishing, by the mobile communication device, a communication channel with the smart card device in response to detecting the smart card device;

receiving, by the mobile communication device, smart card identification information from the smart card device, the smart card identification information from the smart card device comprising a smart card account number and a verification number for the smart card device, wherein the verification number for the smart card device is encoded by data on a memory of the smart card device;

verifying, by the mobile communication device, the smart card device by determining that the smart card account number and verification number received from the smart card device matches a smart card account number and corresponding verification number stored by the mobile communication device; and

authorizing, by the mobile communication device, a transaction with the smart card device based on the verification of the smart card device.

2. The computer-implemented method of claim 1, wherein the communication channel is established using a near field communication (NFC) protocol.

3. The computer-implemented method of claim 1, wherein the mobile communication device is a mobile telephone.

4. The computer-implemented method of claim 1, wherein the mobile communication device comprises a stand-alone card reader.

5. The computer-implemented method of claim 1, further comprising,

receiving, by the mobile communication device, a transaction history from the smart card device, the transaction history comprising information regarding previous deposits and previous withdrawals to an account associated with the smart card device.

6. The computer-implemented method of claim 5, further comprising:

processing, by the mobile communication device, an offline debit transaction to debit a transaction amount from the smart card device without a network connection to a remote computer management system that manages an account associated with the smart card device, the transaction amount being equal to or less than a balance of funds on the smart card device;

transmitting, by the mobile communication device, a transaction record to the smart card device, the transaction record indicating the transaction amount debited from the smart card device; and

storing, by the mobile communication device, the smart card identification information, the transaction history, and the transaction record.

7. The computer-implemented method of claim 6, further comprising:

establishing, by the mobile communication device, a network connection with the remote computer management system; and

transmitting, by the mobile communication device, the card identification information, the transaction history, and the transaction record to the remote computer management system via the network connection to update the account managed by the remote computer management system.

8. The computer-implemented method of claim 5, further comprising:

processing, by the mobile communication device, a deposit transaction to credit a transaction amount to the smart card device;

establishing, by the mobile communication device, a network connection with the remote computer management system;

transmitting, by the mobile communication device, a deposit request to the remote computer management system, the deposit request comprising the card identification information and an amount of the deposit transaction;

receiving, by the mobile communication device, a deposit record from the remote computer management system, the deposit record comprising the amount of the deposit and a sum of deposit; and

transmitting, by the mobile communication device, the deposit record to the smart card device.

9. A computer program product, comprising:

a non-transitory computer-readable medium having computer-readable program code embodied therein for providing offline payment processing of purchases, the computer-readable medium comprising;

computer-readable program code for storing smart card identification information for a plurality of smart card devices, the smart card identification information comprising, for each of the smart card devices, a smart card account number and corresponding verification number;

computer-readable program code for receiving smart card identification information from the smart card device, the smart card identification information from the smart card device comprising a smart card account number and a verification number for the smart card device, wherein the verification number for the smart card device is encoded by data on a memory of the smart card device;

computer-readable program code for verifying the smart card device by determining that the smart card account number and verification number received from the smart card device matches a smart card account number and corresponding verification number stored by the mobile communication device; and

; and

computer-readable program code for authorizing a transaction with the smart card device based on the verification of the smart card device.

10. The computer program product of claim 9, further comprising,

computer-readable program code for receiving a transaction history from the smart card device, the transaction history comprising information regarding previous deposits and previous withdrawals to an account associated with the smart card device.

11. The computer program product of claim 10, further comprising:

computer-readable program code for processing an offline debit transaction to debit a transaction amount from the smart card device without a network connection to a remote computer management system that manages an account associated with the smart card device, the transaction amount being equal to or less than a balance of funds on the smart card device;

computer-readable program code for transmitting a transaction record to the smart card device, the transaction record indicating the transaction amount debited from the smart card device; and

computer-readable program code for storing the smart card identification information, the transaction history, and the transaction record.

12. The computer program product of claim 11, further comprising:

computer-readable program code for establishing a network connection with the remote computer management system; and

computer-readable program code for transmitting the card identification information, the transaction history, and the transaction record to the remote computer management system via the network connection to update the account managed by the remote computer management system.

13. The computer program product of claim 10, further comprising:

computer-readable program code for processing a deposit transaction to credit a transaction amount to the smart card device;

computer-readable program code for establishing a network connection with the remote computer management system;

computer-readable program code for transmitting a deposit request to the remote computer management system, the deposit request comprising the card identification information and an amount of the deposit transaction;

computer-readable program code for receiving a deposit record from the remote computer management system, the deposit record comprising the amount of the deposit and a sum of deposit; and

computer-readable program code for transmitting the deposit record to the smart card device.

14. A system for providing offline payment processing of purchases, the system comprising:

one or more information processing units for executing programs; and

an engine executable on the one or more information processing units, the engine comprising;

instructions for storing smart card identification information for a plurality of smart card devices, the smart card identification information comprising, for each of the smart card devices, a smart card account number and corresponding verification number;

instructions for receiving smart card identification information from the smart card device, the smart card identification information from the smart card device comprising a smart card account number and a verification number for the smart card device, wherein the verification number for the smart card device is encoded by data on a memory of the smart card device;

instructions for verifying the smart card device by determining that the smart card account number and verification number received from the smart card device matches a smart card account number and corresponding verification number stored by the mobile communication device; and

instructions for authorizing a transaction with the smart card device based on the verification of the smart card device.

15. The system of claim 14, wherein the engine further comprises:

instructions for receiving a transaction history from the smart card device, the transaction history comprising information regarding previous deposits and previous withdrawals to an account associated with the smart card device.

16. The system of claim 15, wherein the engine further comprises:

instructions for processing an offline debit transaction to debit a transaction amount from the smart card device without a network connection to a remote computer management system that manages an account associated with the smart card device, the transaction amount being equal to or less than a balance of funds on the smart card device;

instructions for transmitting a transaction record to the smart card device, the transaction record indicating the transaction amount debited from the smart card device; and

instructions for the smart card identification information, the transaction history, and the transaction record.

17. The system of claim 16, wherein the engine further comprises:

instructions for establishing a network connection with the remote computer management system; and

instructions the card identification information, the transaction history, and the transaction record to the remote computer management system via the network connection to update the account managed by the remote computer management system.

18. The system of claim 15, wherein the engine further comprises:

instructions for a deposit transaction to credit a transaction amount to the smart card device;

instructions a network connection with the remote computer management system;

instructions for transmitting a deposit request to the remote computer management system, the deposit request comprising the card identification information and an amount of the deposit transaction;

instructions for receiving a deposit record from the remote computer management system, the deposit record comprising the amount of the deposit and a sum of deposit; and

instructions for transmitting the deposit record to the smart card device.