Integration of verification tokens with mobile communication devices

• US 9,317,848 B2
• Filed: 08/09/2013
• Issued: 04/19/2016
• Est. Priority Date: 05/15/2009
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Hammad, Ayman
• Primary Examiner(s): Lee, Michael G
• Assistant Examiner(s): CHEDEKEL, TABITHA F
• Application Number:
  US13/963,538
• Publication Number:
  US 20140110477A1
• Time in Patent Office: 984 Days
• Field of Search: 235/375, 235/379, 235/380, 235/435, 235/454, 235/455, 705 37- 43
• US Class Current: 1/1
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4018 using the card verification value [CVV] associated with the card
• CPC Class Codes: G06Q 20/42 Confirmation, e.g. check or permission by the legal debtor of payment
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: H04L 2209/12 Details relating to cryptographic hardware or logic circuitry
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/10 with particular housing, physical features or manual controls
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

Apparatuses, methods, and systems pertaining to the verification of portable consumer devices are disclosed. In one implementation, a verification token is communicatively coupled to a computer by a USB connection so as to use the computer'"'"'s networking facilities. The verification token reads identification information from a user'"'"'s portable consumer device (e.g., credit card) and sends the information to a validation entry over a communications network using the computer'"'"'s networking facilities. The validation entity applies one or more validation tests to the information that it receives from the verification token. If a selected number of tests are passed, the validation entity sends a device verification value to the verification token, and optionally to a payment processing network. The verification token may enter the device verification value into a CVV field of a web page appearing on the computer'"'"'s display, or may display the value to the user using the computer'"'"'s display.

Claims

1. A mobile communication device comprising:

a housing; and

a verification token disposed within the housing, the verification token comprising

a computer-readable medium;

a data processor electrically coupled to the verification token and the computer-readable medium;

code embodied on the computer-readable medium that directs the data processor to obtain identification information;

code embodied on the computer-readable medium that directs the data processor to transmit the identification information to an entity; and

code embodied on the computer-readable medium that directs the data processor to receive, after transmitting the identification information, a dynamic PAN from the entity; and

code embodied on the computer-readable medium that directs the data processor to locate a browser web page on the mobile communication device that has a form field for an account number and a form field for a verification value, and to enter the dynamic PAN received from the entity in the form field for the account number.

2. The mobile communication device of claim 1 further comprising code embodied on the computer readable medium for encrypting the identification information that is transmitted to the entity.

3. The mobile communication device of claim 1 wherein the verification token comprises a first processor, and the mobile communication device comprises a second processor, separate from the first processor.

4. The mobile communication device of claim 1 further comprising code embodied on the computer readable medium that directs the data processor to receive, after transmitting the identification information, a shipping address and a billing address, wherein the shipping address and the billing address are entered into other form fields on the browser web page or another browser web page.

5. The mobile communication device of claim 1 further comprising code embodied on the computer readable medium that directs the data processor to transmit an identifier for the verification token to the entity.

6. The mobile communication device of claim 1 wherein the entity is a gateway.

7. A system comprising the mobile communication device of claim 6 and the gateway in communication with the mobile communication device.

8. A system comprising:

the mobile communication device of claim 1; and

the entity, wherein the entity is a validation entity computer in communication with the mobile communication device, wherein the validation entity computer is configured to receive the dynamic PAN,

wherein an account number associated with the dynamic PAN is thereafter determined and a transaction conducted using the dynamic PAN is authorized by an issuer of the account number.

9. The system of claim 8 further comprising:

a merchant computer adapted to receive the dynamic PAN from the mobile communication device before the dynamic PAN is received by the validation entity computer; and

an issuer computer, wherein the issuer computer is operated by the issuer and receives the dynamic PAN after the dynamic PAN is received by the validation entity computer.

10. A method comprising:

obtaining, by a data processor in a verification token in a mobile communication device, identification information;

transmitting, by the mobile communication device, the identification information to an entity;

receiving, by the mobile communication device, after transmitting said identification information, a dynamic PAN from the entity;

locating, by the mobile communication device, a browser web page on the mobile communication device that has a form field for an account number and a form field for a verification value; and

entering, using the mobile communication device, the dynamic PAN received from the entity in the form field for the account number.

11. The method of claim 10 further comprising:

encrypting the identification information that is transmitted to the entity.

12. The method of claim 10 wherein the verification token comprises a first processor and the mobile communication device comprises a second processor, separate from the first processor.

13. The method of claim 10 further comprising:

receiving, after transmitting the identification information, a shipping address and a billing address at the mobile communication device, wherein the shipping address and the billing address are entered into other form fields on the browser web page or another browser web page.

14. The method of claim 10 further comprising:

transmitting an identifier for the verification token to the entity.

15. The method of claim 10 wherein the entity is a gateway.

16. A method comprising:

receiving, by an entity computer, identification information from a mobile communication device comprising a verification token; and

transmitting, by the entity computer, a dynamic PAN to the mobile communication device,

wherein the mobile communication device locates a browser web page on the mobile communication device that has a form field for an account number and a form field for a verification value and enters the dynamic PAN in the form field for the account number.

17. The method of claim 16 wherein the entity computer is a gateway computer.

18. The method of claim 16 wherein the identification information is encrypted, and wherein the method further comprises:

decrypting the identification information.

19. The method of claim 18 wherein the entity computer is a gateway computer.

20. An entity computer comprising:

a processor; and

a computer readable medium, the computer readable medium comprising code, executable by the processor for implementing a method comprising

receiving identification information from a mobile communication device comprising a verification token, and

transmitting a dynamic PAN to the mobile communication device,

wherein the mobile communication device locates a browser web page on the mobile communication device that has a form field for an account number and a form field for a verification value and enters the dynamic PAN in the form field for the account number.

21. The entity computer of claim 20, wherein the method further comprises:

receiving, by the entity computer, the dynamic PAN from the mobile communication device,

wherein an account number associated with the dynamic PAN is thereafter determined and a transaction conducted using the dynamic PAN is authorized by an issuer of the account number.