Method and system for implementing a dynamic verification value

• US 8,359,630 B2
• Filed: 08/19/2008
• Issued: 01/22/2013
• Est. Priority Date: 08/20/2007
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa USA, Inc. (Visa, Inc.)
• Inventors: Manessis, Thomas, Gerber, Gary
• Primary Examiner(s): ABYANEH, ALI S
• Application Number:
  US12/194,402
• Publication Number:
  US 20090055893A1
• Time in Patent Office: 1,617 Days
• Field of Search: 726/2, 726/9, 705/35, 705/39, 705/75
• US Class Current: 726/2
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 20/4018 using the card verification value [CVV] associated with the card
• CPC Class Codes: G06Q 20/403 Solvency checks

Abstract

A method is disclosed, which includes receiving a message including an account identifier and a first verification value. The method uses the account identifier to select a dynamic verification value process from at least two dynamic verification value processes. Then, using the selected dynamic verification value process, a second verification value is determined. Next, the method determines if the first verification value and the second verification value match or are within an expected range.

Claims

1. A method comprising:

receiving a message including an account identifier and a first verification value;

selecting, by a server computer, a dynamic verification value process from at least two dynamic verification value processes using the account identifier, wherein the at least two dynamic verification value processes are selected from a counter-based verification process, a time-based verification process, and a sequence-based verification process, wherein the counter-based verification process includes a verification value process specific for a card present type of transaction and a verification value process specific for a card not present type of transaction, and wherein the card not present type of transaction is a transaction that occurs where a payment device is not physically present at a merchant;

determining, by the server computer, a second verification value using the selected dynamic verification value process; and

determining if the first verification value and the second verification value match or are within a predetermined range.

2. The method of claim 1 wherein the payment device is a card.

3. The method of claim 1 wherein the payment device is authenticated if the first verification value and the second verification value match or are within a predetermined range.

4. The method of claim 3 wherein if the first verification value and second verification value do not match or are not in the predetermined range, a fraud alert is triggered.

5. The method of claim 4 wherein the fraud alert notifies an account holder, issuer, or merchant of potential fraudulent activity.

6. The method of claim 3 wherein if the first verification value and second verification value do not match or are not in the predetermined range, the account is blocked from further use.

7. The method of claim 1 wherein selecting the dynamic verification value process from the at least two dynamic verification value processes using the account identifier comprises selecting a verification algorithm from a plurality of verification algorithms.

8. The method of claim 1 wherein the message is an authorization request message.

9. The method of claim 8 wherein the authorization request message is generated in a transaction involving a payment device in the form of a phone.

10. The method of claim 9 wherein the phone has near field communications capability.

11. The method of claim 8 wherein the authorization request message is generated in a transaction involving a payment device in the form of a key fob.

12. The method of claim 1 wherein the second verification value is determined by retrieving a pre-determined verification value stored in a database.

13. A server computer comprising a micro-processor;

and a non-transitory computer readable medium coupled to the micro-processor,

the non-transitory computer readable medium comprising code, executable by the micro-processor for implementing a method comprising

receiving a message, including an account identifier and a first verification value,

selecting, by the server computer, a dynamic verification value process from at least two dynamic verification value processes using the account identifier, wherein the at least two dynamic verification value processes are selected from a counter-based verification process, a time-based verification process, and a sequence-based verification process, wherein the counter-based verification process includes a verification value process specific for a card present type of transaction and a verification value process specific for a card not present type of transaction, and wherein the card not present type of transaction is a transaction that occurs where a payment device is not physically present at a merchant;

determining, by the server computer, a second verification value using the selected dynamic verification value process, and

determining if the first verification value and the second verification value match or are within a predetermined range.

14. A method comprising:

generating, by an access device, a message including an account identifier and a first verification value; and

sending the message to a server computer, wherein the server computer is configured to select a dynamic verification value process from at least two dynamic verification value processes using the account identifier, wherein the at least two dynamic verification value processes are selected from a counter-based verification process, a time-based verification process, and a sequence-based verification process, wherein the counter-based verification process includes a verification value process specific for a card present type of transaction and a verification value process specific for a card not present type of transaction, and wherein the card not present type of transaction is a transaction that occurs where a payment device is not physically present at a merchant, determine a second verification value using the selected dynamic verification value process, and determine if the first verification value and the second verification value match or are within a predetermined range.

15. The method of claim 14 wherein the payment device is a card.

16. The method of claim 14 wherein the payment device is authenticated if the first verification value and the second verification value match or are within the predetermined range.

17. The method of claim 14 wherein the server computer is further configured to select a verification algorithm from a plurality of verification algorithms.

18. An electronic device comprising:

a micro-processor and a non-transitory computer readable medium coupled to the micro-processor,

wherein the non-transitory computer readable medium comprises code executable by the micro-processor for implementing a method comprising

generating, by the electronic device, a message including an account identifier and a first verification value,

sending the message to a server computer, wherein the server computer is configured to select a dynamic verification value process from at least two dynamic verification value processes using the account identifier, wherein the at least two dynamic verification value processes are selected from a counter-based verification process, a time-based verification process, and a sequence-based verification process, wherein the counter-based verification process includes a verification value process specific for a card present type of transaction and a verification value process specific for a card not present type of transaction, and wherein the card not present type of transaction is a transaction that occurs where a payment device is not physically present at a merchant, and

determining a second verification value using the selected dynamic verification value process, and determining if the first verification value and the second verification value match or are within a predetermined range.

19. The electronic device of claim 18 wherein the electronic device is in the form of a card.

20. The electronic device of claim 18 wherein the electronic device is an access device.