Verification of a portable consumer device in an offline environment

• US 8,386,349 B2
• Filed: 02/28/2007
• Issued: 02/26/2013
• Est. Priority Date: 02/28/2007
• Status: Active Grant

• Current Assignee: Visa USA, Inc. (Visa, Inc.)
• Original Assignee: Visa USA, Inc. (Visa, Inc.)
• Inventors: Dixon, Philip B., Hammad, Ayman, El-Awady, Khalid
• Primary Examiner(s): Trammell, James
• Assistant Examiner(s): Malhotra, Sanjeev
• Application Number:
  US11/680,592
• Publication Number:
  US 20080203151A1
• Time in Patent Office: 2,190 Days
• Field of Search: 705/14, 705/21, 705/22, 705/35, 705/38, 705/39, 705/44, 705/50, 705/67, 705/74, 705/75, 235/380, 235/381, 235/382, 235/383, 235/435, 235/492, 234/34, 701/117, 340/10.41, 340/426.35, 340/572.7, 380/270, 709/203, 709/224, 194/205, 348/150, 379/91.02, 455/406, 707/9
• US Class Current: 705/35
• CPC Class Codes: G06K 17/00 Methods or arrangements for effecting co-operative working between equipments covered by two or more of main groups G06K1/00 - G06K15/00, e.g. automatic card files incorporating conveying and reading operations
• CPC Class Codes: G06K 19/06187 with magnetically detectable marking
• CPC Class Codes: G06K 19/067 Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components
• CPC Class Codes: G06K 5/00 Methods or arrangements for verifying the correctness of markings on a record carrier; Column detection devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists

Abstract

A portable consumer device includes a base, and a computer readable medium on the base. The computer readable medium comprises code for an issuer verification value and a supplemental verification value. The issuer verification value is used by an issuer to verify that the portable consumer device is authentic in an on-line transaction and the supplemental verification value is used to verify that the portable consumer device is authentic in an off-line transaction.

Claims

1. A method of processing a transaction, the processing method comprising:

receiving data from a portable consumer device at a reader, wherein the portable consumer device stores an issuer verification value associated with an issuer and verified using an online processing system in communication with the issuer, wherein the portable consumer device also stores a supplemental verification value, and wherein the data received from the portable consumer device includes the supplemental verification value, and wherein the supplemental verification value is verified using an offline processing system that is not in communication with the issuer;

processing the supplemental verification value at the reader, wherein processing the supplemental verification value comprises identifying an appropriate key and algorithm, and further comprises calculating a value corresponding to the portable consumer device and comparing the calculated value to the supplemental verification value received from the portable consumer device;

authorizing the transaction if the processing of the supplemental verification value indicates that the portable consumer device is authenticated;

wherein the issuer verification value and the supplemental verification value are stored in a memory in the portable consumer device in separate data fields in a predetermined data field format comprising a magnetic stripe data (MSD) configuration such that the issuer verification value and the supplemental verification value are both readable by the reader, and wherein the reader comprises a transit system reader and the supplemental verification value comprises a transit verification value; and

wherein the supplemental verification value is dynamically changed on the portable consumer device after issuance of the portable consumer device.

2. The method as defined in claim 1, wherein authorizing the transaction comprises permitting a user of the portable consumer device to enter a facility if the transaction is authorized.

3. The method as defined in claim 1, wherein the supplemental verification value is static on the portable consumer device.

4. The method as defined in claim 1, wherein the portable consumer device comprises a contactless payment card.

5. The method as defined in claim 4, wherein the portable consumer device comprises a consumer electronic device.

6. The method as defined in claim 5, wherein the consumer electronic device comprises a wireless telephone.

7. The method as defined in claim 1, wherein the issuer verification value is stored in a first data track of the memory that includes at least a data field for a primary account number, a data field for name data, a data field for additional data, and a data field for discretionary data, and wherein the supplemental verification value is stored in a second data track of the memory that includes at least a data field for a primary account number, a data field for additional data, and a data field for discretionary data.

8. The method as defined in claim 7, wherein the supplemental verification value is stored in the additional data field of the second data track.

9. The method of claim 7, wherein the supplemental verification value is stored at positions 25 to 29 of the second data track of the memory.

10. The method of claim 7, wherein the data field for primary account number is 19 digits, the data field for name data is 26 characters, the data field for additional data is 7 digits, and the data field for discretionary data is 8 digits in the first data track of the memory, and wherein the data field for primary account number is 19 digits, the data field for additional data is 7 digits, and the data field for discretionary data is 8 digits in the second data track of the memory.

11. The method of claim 1, wherein the appropriate key and algorithm comprises encryption algorithms and keys using a symmetric key infrastructure.

12. The method of claim 1, wherein the appropriate key and algorithm comprises encryption algorithms and keys using a public key infrastructure.