Magnetic emissive use of preloaded payment card account numbers

• US 9,830,598 B2
• Filed: 12/30/2016
• Issued: 11/28/2017
• Est. Priority Date: 04/01/2010
• Status: Active Grant

• Current Assignee: Fitbit, Inc. (Alphabet Inc.)
• Original Assignee: Fitbit, Inc. (Alphabet Inc.)
• Inventors: Brown, Kerry D.
• Primary Examiner(s): Mai, Thien T
• Application Number:
  US15/395,678
• Publication Number:
  US 20170109738A1
• Time in Patent Office: 333 Days
• CPC Class Codes: G06K 19/06206 the magnetic marking being emulated
• CPC Class Codes: G06Q 20/202 Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: G06Q 20/347 Passive cards
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G07F 7/084 Additional components relating to data transfer and storing, e.g. error detection, self-diagnosis
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction

Abstract

A thin-client access card has a card body with partial or fully emissive magnetic data tracks. An emissive element is disposed in the card body under the location of the legacy magnetic data tracks. An electronic signal conditioner converts audio signals from a mobile device into magnetic data applied to the emissive element. A swipe sensor detects when the thin-client access card is being swiped by a legacy card reader, and triggers an output of magnetic data from the emissive element while proximal to the POS reader head. A cable attaches the thin-client access card as a peripheral to the mobile device with an audio output jack.

Claims

1. A method of operating a payment card, the payment card comprising a wireless receiver, a card body with an electromagnetic stripe area, an emissive inductive loop, a microcontroller, and a swipe sensor, the method comprising:

receiving, via the wireless receiver, a decrypted account number from a mobile device, the mobile device configured to receive an encrypted account number, decrypt the encrypted account number, and transmit the decrypted account number to the payment card;

converting, via the microcontroller, the decrypted account number received from the mobile device into magnetic data;

generating a swipe data signal, via the swipe sensor, in response to the payment card being swiped through a legacy card reader; and

in response to the swipe data signal, serially outputting, via the emissive inductive loop, the magnetic data to spoof a read head of the legacy card reader into accepting the magnetic data as conventional track data, the emissive inductive loop disposed in the card body along the length of the electromagnetic stripe area.

2. The method of claim 1, wherein the payment card comprises a digital display.

3. The method of claim 1, wherein the payment card comprises a piezo-electric generator.

4. The method of claim 1, wherein the mobile device comprises a WiFi receiver and the mobile device is configured to receive the encrypted account number via the WiFi receiver.

5. The method of claim 1, wherein the mobile device comprises a serial port and the mobile device is configured to receive the encrypted account number via the serial port.

6. The method of claim 5, wherein the serial port is a universal serial bus port.

7. A method of operating a payment card, the payment card comprising a wireless receiver, a card body with an electromagnetic stripe area, an emissive inductive loop, a microcontroller, and a swipe sensor, the method comprising:

receiving, via the wireless receiver, decrypted account number from a mobile device;

converting, via the microcontroller, the decrypted account number received from the mobile device into magnetic data;

signaling, via the swipe sensor, when the payment card has been swiped by a legacy card reader; and

in response to the signal from the swipe sensor, serially outputting, via the emissive inductive loop, the magnetic data to spoof a read head of a legacy card reader into accepting the magnetic data as conventional track data, the emissive inductive loop disposed in the card body along the length of the electromagnetic stripe area.

8. The method of claim 7, wherein the payment card comprises a digital display.

9. The method of claim 7, wherein the payment card comprises a piezo-electric generator.

10. A method of operating a payment card, the payment card comprising a wireless receiver, a card body with an electromagnetic stripe area, an emissive inductive loop, a microcontroller, and a swipe sensor, the method comprising:

receiving, via the wireless receiver, a decrypted use-once account number from a mobile device, the mobile device configured to;

i) receive an encrypted use-once account number from a computer, the use-once account number encrypted by the computer, ii) decrypt the encrypted use-once account number, and iii) transmit the decrypted use-once account number to the payment card;

converting, via the microcontroller, the decrypted account number received from the mobile device into magnetic data;

sensing, via the swipe sensor, when the payment card has been swiped by a legacy card reader;

in response to sensing when the payment card has been swiped, generating, via the swipe sensor, a swipe data signal; and

in response to the swipe data signal, serially outputting, via the emissive inductive loop, the magnetic data to spoof a read head of a legacy card reader into accepting the magnetic data as conventional track data, the emissive inductive loop disposed in the card body along the length of the electromagnetic stripe area.

11. The method of claim 10, wherein the computer is configured to transmit the encrypted use-once account number to the mobile device via Wi-Fi.

12. The method of claim 10, wherein the mobile device comprises a serial port and the mobile device is configured to receive the encrypted use-once account number via the serial port.

13. A method comprising:

generating, at a server, a use-once account number;

encrypting, at the server, the use-once account number;

transmitting the encrypted use-once account number from the server to a mobile device;

decrypting, at the mobile device, the use-once account number;

transmitting the decrypted use-once account number from the mobile device to a payment card;

converting, at the payment card, the decrypted use-once account number received from the mobile device into magnetic data;

signaling, by a swipe sensor of the payment card, that the payment card has been swiped by a legacy card reader;

in response to the signal, serially outputting from an emissive inductive loop of the payment card, the magnetic data to spoof a read head of the legacy card reader into accepting the magnetic data as conventional track data;

receiving the decrypted account number from the payment card at a point-of-sale (POS) terminal via the serially output magnetic data received at the legacy card reader;

generating, at the POS, a message for approval of a transaction based on the decrypted account number;

transmitting the message for approval from the POS to the server;

determining, at the server, that the transaction is approved based on the message for approval; and

transmitting a reply to the message for approval from the server to the POS terminal approving the transaction.

14. The method of claim 13, further comprising receiving, at the server, a second authentication factor from the POS terminal, wherein determining that the transaction is approved is further based on the second authentication factor.

15. The method of claim 13, wherein the use-once account number is associated with an expiry date and a sequence number, the method further comprising reconstructing, at the server, the expiry date and the sequence number based on the message for approval, wherein determining that the transaction is approved is further based on the reconstructed expiry date and the reconstructed sequence number.