CLOUD-BASED TRANSACTIONS WITH MAGNETIC SECURE TRANSMISSION

• US 20160140545A1
• Filed: 01/22/2016
• Published: 05/19/2016
• Est. Priority Date: 12/19/2013
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Flurscheim, Christian, Aabye, Christian
• Granted Patent: US 9,922,322 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 9/0618 Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

Techniques for enhancing the security of a communication device when conducting a transaction using the communication device may include using a limited-use key (LUK) to generate a transaction cryptogram, and transmitting a token instead of a real account identifier and the transaction cryptogram to an access device to conduct the transaction. The token and the transaction cryptogram can be transmitted to a magnetic stripe reader by generating an emulated magnetic signal. The LUK may be associated with a set of one or more limited-use thresholds that limits usage of the LUK, and the transaction can be authorized based on at least whether usage of the LUK has exceeded the set of one or more limited-use thresholds.

Claims

1. A method for enhancing security of a communication device when conducting a transaction using the communication device, the method comprising:

receiving, from a remote computer, a token that is provisioned for conducting magnetic stripe reader transactions;

receiving, by the communication device, a limited-use key (LUK) that is associated with a set of one or more limited-use thresholds that limits usage of the LUK;

generating, by the communication device, a transaction cryptogram using the LUK; and

generating, by an inductive coil of the communication device, an emulated magnetic signal representing data that includes the token instead of a real account identifier and the transaction cryptogram to transmit the token and the transaction cryptogram to a magnetic stripe reader of an access device to conduct the transaction, wherein the transaction is authorized based on at least whether usage of the LUK has exceeded the set of one or more limited-use thresholds.

2. The method of claim 1, wherein the token is also usable for conducting contactless reader transactions.

3. The method of claim 1, wherein the emulated magnetic signal is generated in response to receiving user input on the communication device to initiate the transaction with the access device.

4. The method of claim 1, wherein the emulated magnetic signal is generated in response to receiving user input on the communication device to initiate the transaction, and without detecting a contactless transceiver in proximity to the communication device when the user input is received.

5. The method of claim 1, wherein the transaction cryptogram is generated by encrypting at least a transaction counter value with the LUK.

6. The method of claim 5, wherein the transaction cryptogram is generated by encrypting the transaction counter value and a predetermined static string with the LUK.

7. The method of claim 5, wherein the transaction counter value is incremented for each magnetic stripe reader transaction conducted by a mobile application of the communication device.

8. The method of claim 5, wherein the transaction counter value is incremented for each magnetic stripe reader transaction and each contactless reader transaction conducted by a mobile application of the communication device.

9. The method of claim 1, wherein the LUK is generated by encrypting a key index that includes at least one of:

time information indicating when the LUK is generated; and

a replenishment counter value indicating a number of times the LUK has been replenished.

10. The method of claim 1, wherein the inductive coil used for generating the emulated magnetic signals is also used for wireless charging of the communication device.

20. The communication device of claim 1, wherein the inductive coil used for generating the emulated magnetic signals is also used for wireless charging of the communication device.

11. A communication device comprising:

an inductive coil;

a processor; and

a memory coupled to the processor and storing a mobile application that performs operations for enhancing security of the communication device when conducting transactions using the communication device, the operations including;

receiving a token that is provisioned for conducting magnetic stripe reader transactions;

receiving a limited-use key (LUK) that is associated with a set of one or more limited-use thresholds that limits usage of the LUK;

generating a transaction cryptogram using the LUK; and

generating, by the inductive coil, an emulated magnetic signal representing data that includes the token instead of a real account identifier and the transaction cryptogram to transmit the token and the transaction cryptogram to a magnetic stripe reader of an access device to conduct the transaction, wherein the transaction is authorized based on at least whether usage of the LUK has exceeded the set of one or more limited-use thresholds.

12. The communication device of claim 11, wherein the token is also usable for conducting contactless reader transactions.

13. The communication device of claim 11, wherein the emulated magnetic signal is generated in response to receiving user input on the communication device to initiate the transaction with the access device.

14. The communication device of claim 11, wherein the emulated magnetic signal is generated in response to receiving user input on the communication device to initiate the transaction, and without detecting a contactless transceiver in proximity to the communication device when the user input is received.

15. The communication device of claim 11, wherein the transaction cryptogram is generated by encrypting at least a transaction counter value with the LUK.

16. The communication device of claim 15, wherein the transaction cryptogram is generated by encrypting the transaction counter value and a predetermined static string with the LUK.

17. The communication device of claim 15, wherein the transaction counter value is incremented for each magnetic stripe reader transaction conducted by the mobile application of the communication device.

18. The communication device of claim 15, wherein the transaction counter value is incremented for each magnetic stripe reader transaction and each contactless reader transaction conducted by the mobile application of the communication device.

19. The communication device of claim 11, wherein the LUK is generated by encrypting a key index that includes at least one of:

time information indicating when the LUK is generated; and

a replenishment counter value indicating a number of times the LUK has been replenished.