CN101573723A - 安全金融交易 - Google Patents

安全金融交易 Download PDF

Info

Publication number
CN101573723A
CN101573723A CNA2007800427522A CN200780042752A CN101573723A CN 101573723 A CN101573723 A CN 101573723A CN A2007800427522 A CNA2007800427522 A CN A2007800427522A CN 200780042752 A CN200780042752 A CN 200780042752A CN 101573723 A CN101573723 A CN 101573723A
Authority
CN
China
Prior art keywords
financial
financial transaction
negotiator
transaction
simulation
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CNA2007800427522A
Other languages
English (en)
Inventor
瑟奇·克里斯蒂安·皮埃尔·贝拉芒
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
NET 1 UEPS TECHNOLOGIES Inc
Original Assignee
NET 1 UEPS TECHNOLOGIES Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by NET 1 UEPS TECHNOLOGIES Inc filed Critical NET 1 UEPS TECHNOLOGIES Inc
Publication of CN101573723A publication Critical patent/CN101573723A/zh
Pending legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q40/00Finance; Insurance; Tax strategies; Processing of corporate or income taxes
    • G06Q40/02Banking, e.g. interest calculation or account maintenance
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/04Payment circuits
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/08Payment architectures
    • G06Q20/10Payment architectures specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/08Payment architectures
    • G06Q20/10Payment architectures specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
    • G06Q20/105Payment architectures specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems involving programming of a portable memory device, e.g. IC cards, "electronic purses"
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/08Payment architectures
    • G06Q20/20Point-of-sale [POS] network systems
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/22Payment schemes or models
    • G06Q20/24Credit schemes, i.e. "pay after"
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/347Passive cards
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/382Payment protocols; Details thereof insuring higher security of transaction
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/382Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3823Payment protocols; Details thereof insuring higher security of transaction combining multiple encryption tools for a transaction
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/382Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3827Use of message hashing
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/385Payment protocols; Details thereof using an alias or single-use codes
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/40Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07FCOIN-FREED OR LIKE APPARATUS
    • G07F7/00Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/12Card verification
    • G07F7/122Online card verification
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0861Generation of secret information including derivation or calculation of cryptographic keys or passwords

Landscapes

  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Theoretical Computer Science (AREA)
  • Finance (AREA)
  • Computer Security & Cryptography (AREA)
  • Development Economics (AREA)
  • Economics (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Signal Processing (AREA)
  • Marketing (AREA)
  • Technology Law (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Cash Registers Or Receiving Machines (AREA)

Abstract

模拟了银行或其它金融机构传统贷方或借方账的主账号(“PAN”),它通过加密形式加入了实际账号。模拟PAN还需注入一定金额以便于从该账户借出。因此,将账号与金额加密及映射到数字串,而数字串中的号码看起来是正确有效的主账号。从而实际账号及交易额便嵌入PAN。然后,PAN由现行金融交易基础设施进行处理,其间,发行银行知道它不是主账号,同时对相应的数字进行解密以获得嵌入的账号及金额。在应用中,期望实现金融交易的交易人生成了PAN并将其提供给商品或服务提供商,该提供商为其提供上述商品或服务。提供商以传统方式输入PAN与交易金额。然后该数据传到收单银行,而收单银行再将其传给发行银行以获得批准。然后发行银行提取出嵌入的账号及金额,并检查嵌入的金额与提供的金额是否相同(以及其它传统检查方法),如果相同,则批准上述交易。本领域技术人员了解,多数情况下,交易人都被要求提供有效期及卡验证值(“CVV”)。可模拟和利用此二者或二者之一进行信息加密。

Description

安全金融交易
本发明涉及电子金融交易。具体来说就是,该发明涉及金融交易***,生成器算法载体、与生成器一起使用的存储器模块、金融机构处理设施、进行金融交易的方法、处理金融交易的方法、以及便利金融交易方法。
一般地,根据本发明,仿效或模拟了银行或其它金融机构传统贷方或借方账的主账号(“PAN”),其以加密形式包含了实际账号。模拟PAN可能还包含一定金额以便于从该账户借出。因此,将账号与金额加密及映射到一串数字,而这些数字看起来是有效的主账号。这样实际账号及交易额就被嵌入模拟PAN。然后,模拟PAN由现行金融交易基础设施进行处理,其间,发行银行知道它不是PAN,并对相应的数字进行解密以提供嵌入的账号及嵌入的金额。在一个应用中,期望实现金融交易的交易人生成模拟的PAN并将其提供给商品或服务提供商,该提供商为其提供所述商品或服务。提供商以传统方式输入模拟PAN与交易金额。然后该数据传到收单银行,而收单银行再将其传给发行银行以获得授权。然后发行银行提取出嵌入的账号及嵌入的金额,并检查嵌入的金额与提供的金额是否相同(以及其它传统的检查),如果相同,则授权交易。本领域的技术人员将了解,多数情况下,交易人都被要求提供有效期及卡验证值(“CVV”)。可模拟和利用此二者或二者之一进行信息加密。此外,本领域的技术人员将明白PAN的第一部分提供了银行识别码(“BIN”),且这依然是有关模拟PAN的问题。
因此可了解通过该发明,因特网安全、特别是电话交易安全将得到改善。
根据本发明的第一方面的内容,提供了一种金融交易***,用于生成唯一的交易号码,交易号码模拟传统贷方或借方卡主账号并在其中包含交易人的账号。
生成器还可在交易号码中合并交易金额。
此外,根据本发明的第一方面,还提供了一种进行金融交易的方法,包括生成模拟PAN,而该PAN包含嵌入其中的账号以及可能被一起嵌入的交易金额。
本发明的该方面在为商品或服务提供商提供这种模拟PAN,以及商品或服务提供商接收这种模拟PAN时均起作用。
模拟PAN可以采用人力能辨别的形式。特别是,为了利用现有的交易基础设施进行操作,它可能包括一串数位。本领域的技术人员将了解上述串可以具有16到23位数。
本领域技术人员还将了解模拟PAN的头6位将指定上文所述的能够使交易指向合适发行金融机构、并使得发行金融机构确认其已接收到的包含嵌入账号及交易金额的模拟PAN的BIN。相似地,本领域技术人员将了解模拟PAN的最后一位数为校验数位。
主账号生成器可以提供唯一的数位序列,它代表加密的信息,而且每次提供的都是新的序列。这样,生成器可以利用合适的加密算法在每次都提供唯一的加密序列。
如上所述,加密序列也可以包括交易金额。
此外,如上所述,CVV和/或有效期也可以是模拟的并包含加密信息。
生成器可以包含电子钱包,当模拟PAN被生成时,交易金额则被记入借方。
模拟PAN也可以以加密形式嵌入预期收款人的身份特征。这样,生成器可以提醒用户输入预期收款人姓名或账号,而这些也将随后被加密并嵌入模拟PAN。
如果模拟PAN是旨在为中间人使用而准备的,则可以中间的加密形式提供字母数字串,这需要单次使用密码来解密及提供有效的模拟PAN。然后将该中间形式通过一个渠道提供给中间人,而密码则通过不同的渠道提供。生成器然后可以具有与单次使用密码一起提供模拟PAN或者中间形式的装置。此外,生成器还可以具有接收中间形式及密码并解密字母数字串和提供有效的模拟PAN的装置。
此外,在模拟PAN中应指明经许可的交易媒介。这样,如果模拟PAN仅能用于ATM的POS设备、电话交易或因特网交易、或上述的任何一种情况,则它也可嵌入该模拟PAN中。
生成器可以包括电子处理设备,存储器单元、用于输入模拟PAN与交易金额请求的输入设备、及用于显示模拟PAN的显示器。将会了解有关账号与加密算法将被存储在存储器中。生成器可以是移动设备,特别是移动电话,在这种情况下存储器单元可以是用户识别模块(SIM)。将会了解,如果用户希望包括预期收款人的特征;并/或需要中间形式的字母数字串与相关密码;并/或希望指定特别的交易媒介,而这需要经由输入设备与显示器来实现,同时要有合适的提示和/或菜单。
因此,本发明提供了存储模块,诸如SIM,在其中存储适当的BIN;提供账号、用于账号加密的加密算法以及给出的交易金额以提供模拟PAN,而此PAN并入了BIN与嵌入有账号和交易金额的加密序列。
本发明还提供了一个用于为生成器提供加密算法的载体,这样生成器就拥有了加密算法,优选包括账号。
而且本发明还提供了便利金融交易的方法,在此方法中,交易人生成模拟传统贷方或借方卡主账号且已加入交易人账号的加密金融交易号码,包括为交易人提供存储模块,此存储模块则将交易人账号与加密算法存储其中。
同样地,本发明还提供了便利金融交易的方法,在此方法中,交易人生成模拟传统贷方或借方卡主账号且已加入交易人账号的加密金融交易号码,包括将其账号与加密算法发送给交易人。
此外,依照本发明第二方面的内容,本发明提供了用于处理金融交易号码的金融机构处理设备,而该理金融交易号码则模拟了传统的贷方或借方卡主账号且其中已加入交易人账号,同时该账户中包含了用于从模拟PAN中提取出账号的提取器。
本发明在这方面提供了用于处理金融交易的***,包括如上所述的金融机构处理设备以及上述金融交易***。
而且,依照本发明的该方面内容,本发明提供了一种处理金融交易的方法,包括
接收模拟传统的贷方或借方卡主账号且其中已加入交易人账号的虚假金融交易号码,同时请求批准支付交易金额;以及
从模拟主账号中提取出账号。
经由传统金融通信网络可接收到模拟PAN。
如上所述,PAN加入了BIN,同时模拟PAN的剩余位将被解密。因此,***可以具有用于从BIN分离加密位的分离装置。此外,如果交易金额也进行了加密,则解密装置也可解密交易金额。
如果,如上所述,CVV和/或有效期也进行了模拟且包含加密信息,则它们也被解密。
如果模拟PAN嵌入了交易金额,嵌入金额解密后与通过传统方式提供的交易金额利用对比方法进行比较。如果二者不同,则交易被拒绝。
类似地,如果模拟PAN加入了预期收款人的特征,然后这也被提取出来并与通过传统方式和模拟PAN一起提供的收款人详细信息进行比较;如果模拟PAN还加入了指定的交易媒介的话,则该交易媒介也会被提取出来,同时检查交易媒介是否使用正确。
该***还包括用来存储已接收的模拟PAN或至少其中的加密成分,以及用于比较接收到的模拟PAN(或其中加密成分)与存储模拟PAN(或存储的其中加密成分)的对比方式的存储方法,从而确保模拟PAN只被使用一次。
如果交易获批,则收单银行或商品或服务提供商将得到授权,同时交易金额将计入交易人的适当账户的借方账中。
现在将通过非限制性实例对本发明进行说明,请参考所附示意图,其中:
图1示出本发明的第一实施;
图2示出本发明的第二实施;
图3示出本发明的第三实施。
参考图1,示出了本发明第一实施。期望从商人处购买商品的交易人具有移动电话10形式的生成器。电话10具有显示器14,键盘16以及SIM卡18。SIM卡18中已装载应用程序以提供如上文中讨论的模拟PAN。这样,SIM卡18就存入了交易人的账号,BIN、加密算法以及PIN。交易人经由键盘16输入激活应用程序的请求及他的PIN码,然后在显示器发出提示时,使用键盘16输入交易金额。该应用程序然后生成模拟PAN,CVV以及有效期,这些都在显示器14上显示出来。电话10与SIM卡18能够提供虚拟贷方或借方卡则更好。
交易人将PAN、CVV以及有效期读给收银员听,而该收银员则手动将相关的数位,包括成交金额输入销售点(POS)设备20。POS设备20对模拟PAN进行检查以确保校验数位正确,且模拟PAN、CVV及有效期、以及成交金额经由传统金融网络24以传统方式传送到商人的收单银行22。收单银行22根据BIN识别适当发行银行26的身份并向发行银行26传送模拟PAN、CVV和有效期、以及成交金额。发行银行26具有通信接口28,处理器30以及存储器32。将模拟PAN、CVV和有效期、及交易金额提供给处理器30,处理器30将加密的部分从模拟PAN、CVV和有效期中分离出来。然后将其与存储在存储单元32中的全部先前接收的数字串列表进行比较。如果该串是唯一的且在以前没有使用过,则将其加入存储列表中。如果之前使用过并存储在列表中,则此交易被拒绝,并将先后给收单银行22及商人发送适当的消息。如果该串在之前没有使用过,则其将由处理器30利用适当的解密算法提取出交易人账号与嵌入的交易金额进行解密。发行银行不需要PIN或其它标识符。嵌入的交易金额被与提供的成交金额进行比较,如果它们不同,则拒绝交易。处理器30检查交易人是否有足够资金,交易人账户是否将款项计入借方账以及是否给收单银行22(该银行将款项计入商人账户贷方账并告知商人交易已实现)提供传统授权。
SIM卡18可以作为电子钱包操作,在这种情况下,当提供模拟PAN、CVV以及有效期时,交易金额将计入钱包的借方账。
参考图2,示出了本发明第二实施,其中金融交易经由互联网40实现。在该实施中,生成器42为膝上型计算机,该计算机中装有可提供上述模拟PAN的应用程序。计算机42还存储了交易人的账号、BIN、加密算法以及PIN。
当交易人希望经由因特网从供应商处购买商品或服务,或获得预授权时,则其生成模拟PAN、CVV以及有效期,并经由互联网40将其提供给由供应商操作的服务器44。然后再传送给供应商收单银行22,再由该银行将其传送给发行银行26。然后,参考图1,该事件被如上所述安全地处理。
以相似地方式,如图3所示,可以通过电话进行安全交易。在本实施中,生成器仍为移动电话10,如图1中所示。这样,交易人将由电话10提供的模拟PAN、CVV及有效期经由电话网络50提供给呼叫中心52的操作员。然后上述内容与交易金额一起以传统方式传送给收单银行22及发行银行26。发行银行参考图1对交易进行上述处理。
现在说明模拟PAN是如何生成和进行处理的例子。
BIN        PAN        CD     CVV    EXP DATE
 6          9         1       3      4
XXXXXX|...............|X    (...)   MM/YY
1.客户USN=3字节
1st字节=Fl,可由BIN确定
设USN=9876 5432(最多8位)
-------------------------------------------------------------------------------------------
2.生成有效期
●卡的有效期采用5年-即60个月,减去12个月(为照顾本年度减去1年)。
●这样还剩下48个月。
EXPDATE=TRXTYPE[2bits].AID[4bits]
其中:
AID[2bits]=00,01,10,11
TRX TYPE[4bits]=0000,0001,0010,0011,0100,0101,0110,0111,1000,1001,1010,1011
MONTH=TRX TYPE+1(+1就不会使得结束时month=0)
MM=二进制ASCII码(月份)
YEAR=(本年度+1)+AID(CCYY)
YY=二进制ASCII码(年份的最后两位)
注释:
●MM和YY是可显示(ASCII)位。此四位作为要求的有效期输入终端。
●MONTH[1]=MM的等效二进制数(结果总为1字节)
●YEAR[2]=包括世纪的年份的等效二进制数(结果总为2字节)
●AID为计入借方账或贷方账的账户或钱包。
-------------------------------------------------------------------------------------------
3.生成有效期映射值(EDMV)(在此我们留出更多的空间)
●此步中为生成的月份与年份引入了某些随机性以及验证方法,而这将在终端上正确输入。
EDMV=1DES((YEAR[2]+00.MONTH[1])[2].YEAR[2].MONTH
[1].(YEAR[2]-00.MONTH[1])[2].FF)
注释:
●静态密钥用于生成加密块(EDMV密钥)
●(YEAR[2]+00.MONTH[1])结果总为2字节值
●(YEAR[2]-00.MONTH[1])结果总为2字节值
●EDMV1[2]=EDMV结果最后2字节
●EDMV1[2]=EDMV结果第二个2字节
●如果MM/YY没有在终端设备上正确输入,则EDMV将有所不同,因此加密块不会正确生成,而CVV匹配将失败。
-------------------------------------------------------------------------------
4.为USN生成检验和(Checksum)-(多变密钥)
CVV=3DES(USN[3].ULSN[2].ULP[1].EDMV1[2])
注释:
●在USN下使用三重DES,三重密钥,及多变密钥
●利用多变密钥(基于USN)生成加密块(主机密钥)
●将CVV转换为可显示数字(ASCII)
●CVV_1=可显示结果(ASCII)的最后3位。
此3位值作为要求的CVV输入终端(最终CVV)
●CVV_2=CVV_1的等效二进制数(总为2字节)
------------------------------------------------------------------------------------
5.为USN生成PIN加密检验和(Checksum)
●如果用户输入PIN,则PIN构成加密密钥的一部分。
●如果用户不输入PIN,则使用默认PIN密钥。
CVV_PIN=1DES(CVV[8])
注释:
●如果不需要PIN,则使用静态密钥(PIN_KEY)生成加密块
●如果需要PIN,则由用户生成PIN,其位数在4-8位之间(包括4和8位)。
每个数位代表一个十六进制等效半字节,而此半字节将PIN_KEY从最低有效半字节替换到最高有效半字节
●将CVV_PIN转换为可显示数字(ASCII)
●CVV_PIN1=可显示结果(ASCII)的最后3位数。此3位数值作为要求的CVV输入终端
●由于PIN的缘故,CVV被改变;因此,主机将再生成错误的CVV,而CVV匹配失败。
-------------------------------------------------------------------------------------
6.生成卸载签名
AMT[2]=4字节金额的最后2字节
CVV_PIN2[2]=CVV_PIN1的等效二进制数(结果总为2字节)
CVV_TEMP=(AMT[2]XOR CVV_PIN2[2])
SIGN=3DES(AMT[4].CVV_TEMP[2].EDMV2[2])
SIGN=9999 9999 99
注释:
●使用静态密钥生成卸载签名
●虽然卸载签名通常包含一个Unload LSN,但CVV_TEMP已含有Unload LSN。
7.SIGN=头8位。
PAN=USN+SIGN(结果最多为9位数).Optional-[(USN*YY+YY*MM)+SIGN]
PAN=9876 5432(USN)+999 99999(SIGN)
PAN=1987 6543 1
计算PAN的检验和(Checksum)
●将PAN码放入PAN缓冲存储器
●这时,生成完整的PAN、有效期、及CVV
-------------------------------------------------------------------------------------
8.关于主机:
1.重新生成有效期映射值(EDMV1与EDMV2)(步骤3)
-TRXTYPE与AID可以根据MM和YY进行确定
TRXTYPE[2bits].AID[3bits]=((YY-(本年度+1))*12)+MM
2.使用从终端设备接收到的CVV重新生成卸载签名(SIGN)(步骤4、5)
3.USN=PAN-SIGN
4.于是主机就能够获得HOST_KEY、ULSN及ULP
5.使用算出的USN重新生成CVV
6.将重新生成的CVV(步骤4)与从终端接收到的CVV进行比较
检验
1.3位CVV匹配情况
2.如果SIGN是错误的,则不会重新生成CVV
3.如果USN是错误的,则不会重新生成CVV
4.如果EDMV是错误的,则CVV没有正确匹配
卡总结
1.使用USN,ULSN及ULP生成CVV
2.使用CVV生成SIGN
3.然后,PAN=USN+SIGN
主机总结
1.使用接收到的CVV生成SIGN
2.通过使用PAN来使用SIGN求得USN(USN=PAN-SIGN)
3.使用USN得到HOST KEY、ULSN、ULP以生成CVV
4.将生成的CVV与从终端设备接收到的CVV进行比较
本领域技术人员会了解在根据本发明进行交易时,进行欺诈***易是非常困难的(如不是不可能的话)。

Claims (60)

1.一种金融交易***,用于生成唯一的交易号码,所述交易号码模拟传统贷方或借方卡主账号并在其中包含交易人的账号。
2.如权利要求1所述的金融交易***,其中,所述交易号码还包含有交易金额。
3.如权利要求2所述的金融交易***,包括可由交易人操作的输入装置,这样交易人可以输入交易金额。
4.如权利要求1或2所述的金融交易***,其生成数字串,该串的号码基于传统协议,并且其初始预定号码是银行识别号码,用于识别批准交易以及负责交易金额支付的指定金融机构。
5.如权利要求3所述的金融交易***,其中,所述数字串中的最后一位数是校验位。
6.如权利要求1或2所述的金融交易***,还生成模拟有效期。
7.如权利要求1或2所述的金融交易***,还生成模拟卡验证值号码。
8.如权利要求1或2所述的金融交易***,其中,对模拟主账号进行加密,且该生成器包括根据预定加密算法提供加密主账号的加密机。
9.如权利要求1所述的金融交易***,其还在模拟主账号中包含指定收款人的标识符。
10.如权利要求1所述的金融交易***,还包含指定交易媒介的标识符。
11.如权利要求2所述的金融交易***,包括电子钱包,并且当模拟主账号被生成时,根据交易金额减少所述电子钱包中的贷方金额。
12.如权利要求8所述的金融交易***,包括存有交易人账号及加密算法的存储模块。
13.如权利要求2所述的金融交易***,其生成当使用预定解密算法时提供要求的模拟主账号的中间号码与密码。
14.如权利要求13所述的金融交易***,包括预定解密算法。
15.如权利要求1所述的金融交易***,其可由交易人操作。
16.一种用于为权利要求8所述的金融交易***提供加密算法的载体,该载体在其中或在其上具有所述加密算法。
17.一种用于如权利要求12所述的金融交易***的存储模块,包括交易人的账号与加密算法。
18.一种用于处理金融交易号码的金融机构处理设备,所述金融交易号码模拟传统的贷方或借方卡主账号且其包含交易人账号,所述金融机构处理设备包括
用于从模拟主账号提取账号的提取器。
19.如权利要求18所述的金融机构处理设备,其中,所述金融交易号码还包含交易金额,且金融交易号码是与有关批准交易金额支付的请求一起接收到的,且提取器还从模拟主账号中提取交易金额。
20.如权利要求18所述的金融机构处理设备,包括单词使用检查设备,用于确保收到的模拟主账号可以仅被使用一次。
21.如权利要求20所述的金融机构处理设备,其中,单次使用检查设备包括至少存储了先前接收到的模拟主账号的指定部分的存储器,及用于至少对接收到的模拟主账号指定部分与存储部分进行比较的比较器。
22.如权利要求19所述的金融机构处理设备,包括响应消息生成器,用于生成给交易人的、批准或拒绝所请求的交易的消息。
23.如权利要求22所述的金融机构处理设备,包括经由传统金融通信网络将响应消息传送给交易人的传送装置。
24.如权利要求18所述的金融机构处理设备,包括经由传统金融通信网络接收模拟主账号的接收装置。
25.如权利要求22所述的金融机构处理设备,包括交易检查装置,用于检查交易人是否有账号,交易人是否有足够的资金、以及提取出的交易金额是否和成交金额相同,并且所述交易检查装置用于在上述这些问题都是肯定的情况下批准交易,所述响应消息生成器对其作出响应。
26.如权利要求25所述的金融机构处理设备,包括借方账登记设备,用于在交易获得批准的情况下将成交金额计入交易人账户的借方账。
27.如权利要求18所述的金融机构处理设备,包括用于解密所加密的模拟主账号的解密机。
28.如权利要求18所述的金融机构处理设备,其中,金融交易号码已由交易人生成。
29.一种用于处理金融交易的***,包括:
如权利要求1至15中任一个所述的金融交易***;以及
如权利要求18至28中任一个所述的金融机构处理设备。
30.一种进行金融交易的方法,包括生成唯一的金融交易号码,所述金融交易号码模拟传统贷方或借方卡主账号且在其中包含交易人账号。
31.如权利要求30所述的进行金融交易的方法,其中,所述金融交易号码中包含有交易金额。
32.如权利要求31所述的进行金融交易的方法,其中,所述金融交易号码由交易人生成并包括由交易人进行的交易金额输入。
33.如权利要求30所述的进行金融交易的方法,包括生成数字串,该串的号码基于传统协议,并且其初始预定号码是银行识别号码,用于识别批准交易以及负责交易金额支付的指定金融机构。
34.如权利要求33所述的进行金融交易的方法,所述数字串的最后一位数是校验位。
35.如权利要求30所述的进行金融交易的方法,还包括生成模拟有效期。
36.如权利要求30所述的进行金融交易的方法,还包括生成模拟卡验证值号码。
37.如权利要求30所述的进行金融交易的方法,包括根据预定加密算法生成加密的模拟主账号。
38.如权利要求30所述的进行金融交易的方法,还包括在模拟主账号中包含指定收款人的标识符。
39.如权利要求30所述的进行金融交易的方法,还包括并入指定交易媒介的标识符。
40.如权利要求31所述的进行金融交易的方法,包括当模拟主账号被生成时,使电子钱包中的贷方金额根据交易金额而被减小。
41.如权利要求37所述的进行金融交易的方法,包括生成当使用预定解密算法时提供所需模拟主账号的中间号码与密码。
42.如权利要求41所述的进行金融交易的方法,包括解密中间加密号码,使用合适的密码与解密算法生成模拟主账号。
43.如权利要求30所述的进行金融交易的方法,其中,由交易人生成金融交易号码。
44.一种处理金融交易的方法,包括
与有关批准成交金额的支付的请求一起,接收模拟传统的贷方或借方卡主账号且其中已包含交易人账号的虚假的金融交易号码;以及
从模拟主账号提取所述账号。
45.如权利要求44所述的处理金融交易的方法,其中,接收到的金融交易号码还包含有交易金额,且所述方法还包括提取所述交易金额。
46.如权利要求44所述的处理金融交易的方法,包括确保收到的模拟主账号可以仅被使用一次。
47.如权利要求46所述的处理金融交易的方法,包括至少存储先前接收到的模拟主账号的指定部分以及至少对接收到的模拟主账号指定部分与存储部分进行比较。
48.如权利要求44所述的处理金融交易的方法,包括生成给交易人的、批准或拒绝所请求的交易的响应消息。
49.如权利要求48所述的处理金融交易的方法,包括经由传统金融通信网络将响应消息传送给交易人。
50.如权利要求44所述的处理金融交易的方法,包括经由传统金融通信网络接收模拟主账号。
51.如权利要求45所述的处理金融交易的方法,包括检查交易人是否有账号,交易人是否有足够的资金、以及提取出的交易金额是否和成交金额相同,并且在上述这些问题都是肯定的情况下授权所述交易。
52.如权利要求51所述的处理金融交易的方法,包括在交易被批准的情况下将成交金额计入交易人账户的借方账。
53.如权利要求44所述的处理金融交易的方法,包括解密所加密的模拟主账号。
54.如权利要求44所述的处理金融交易的方法,其中,金融交易号码是由交易人生成的。
55.一种便利金融交易的方法,其中,交易人生成模拟传统贷方或借方卡主账号且其中包含有交易人账号的加密的金融交易号码,所述方法包括为交易人提供存储模块,所述存储模块具有存储在其中的交易人账号与加密算法。
56.一种便利金融交易的方法,其中,交易人生成模拟传统贷方或借方卡主账号且其中包含有交易人账号的加密的金融交易号码,所述方法包括将交易人的账号与加密算法发送给所述交易人。
57.一种金融交易***,实质上如这里参考附图所述。
58.一种金融机构处理设备,实质上如这里参考附图所述。
59.一种启动金融交易的方法,实质上如这里参考附图所述。
60.一种处理金融交易的方法,实质上如这里参考附图所述。
CNA2007800427522A 2006-11-16 2007-11-16 安全金融交易 Pending CN101573723A (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
ZA200609533 2006-11-16
ZA2006/09533 2006-11-16

Publications (1)

Publication Number Publication Date
CN101573723A true CN101573723A (zh) 2009-11-04

Family

ID=39315582

Family Applications (1)

Application Number Title Priority Date Filing Date
CNA2007800427522A Pending CN101573723A (zh) 2006-11-16 2007-11-16 安全金融交易

Country Status (25)

Country Link
US (2) US20100088227A1 (zh)
EP (1) EP2095311A2 (zh)
JP (1) JP2010510567A (zh)
KR (3) KR20170034920A (zh)
CN (1) CN101573723A (zh)
AP (1) AP3361A (zh)
AT (1) AT506775A2 (zh)
AU (1) AU2007320785B2 (zh)
BR (1) BRPI0718902A2 (zh)
CA (1) CA2669320C (zh)
CH (2) CH698351B1 (zh)
DE (1) DE112007002744T5 (zh)
EG (1) EG25664A (zh)
FI (1) FI20095662L (zh)
GB (1) GB2457204A (zh)
IL (1) IL198738A (zh)
MA (1) MA30987B1 (zh)
MX (1) MX2009005257A (zh)
MY (1) MY153194A (zh)
NZ (1) NZ577677A (zh)
PH (1) PH12015500674A1 (zh)
RU (1) RU2479032C2 (zh)
SE (1) SE0950453L (zh)
WO (1) WO2008059465A2 (zh)
ZA (1) ZA200903802B (zh)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107836004A (zh) * 2015-07-21 2018-03-23 万事达卡国际股份有限公司 用于处理对支付账户的交易的***和方法
CN108352986A (zh) * 2015-08-27 2018-07-31 万事达卡国际股份有限公司 用于增强基于云的***中的密码验证的方法和***
CN109389395A (zh) * 2017-08-09 2019-02-26 森斯通株式会社 虚拟代码提供***、生成装置、验证装置、提供方法及提供程序
CN109389382A (zh) * 2017-08-09 2019-02-26 森斯通株式会社 虚拟***生成装置及验证装置、金融交易提供***、方法及程序

Families Citing this family (150)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20140019352A1 (en) 2011-02-22 2014-01-16 Visa International Service Association Multi-purpose virtual card transaction apparatuses, methods and systems
US8762263B2 (en) 2005-09-06 2014-06-24 Visa U.S.A. Inc. System and method for secured account numbers in proximity devices
US7818264B2 (en) 2006-06-19 2010-10-19 Visa U.S.A. Inc. Track data encryption
US9065643B2 (en) 2006-04-05 2015-06-23 Visa U.S.A. Inc. System and method for account identifier obfuscation
US8121942B2 (en) 2007-06-25 2012-02-21 Visa U.S.A. Inc. Systems and methods for secure and transparent cardless transactions
US7739169B2 (en) 2007-06-25 2010-06-15 Visa U.S.A. Inc. Restricting access to compromised account information
US7937324B2 (en) 2007-09-13 2011-05-03 Visa U.S.A. Inc. Account permanence
US10296874B1 (en) * 2007-12-17 2019-05-21 American Express Travel Related Services Company, Inc. System and method for preventing unauthorized access to financial accounts
US20090307140A1 (en) * 2008-06-06 2009-12-10 Upendra Mardikar Mobile device over-the-air (ota) registration and point-of-sale (pos) payment
US8219489B2 (en) 2008-07-29 2012-07-10 Visa U.S.A. Inc. Transaction processing using a global unique identifier
US8181861B2 (en) 2008-10-13 2012-05-22 Miri Systems, Llc Electronic transaction security system and method
BRPI0921124A2 (pt) 2008-11-06 2016-09-13 Visa Int Service Ass sistema para autenticar um consumidor, método implementado por computador, meio legível por computador, e, computador servidor.
GB2466676A (en) * 2009-01-06 2010-07-07 Visa Europe Ltd A method of processing payment authorisation requests
GB2466810A (en) 2009-01-08 2010-07-14 Visa Europe Ltd Processing payment authorisation requests
CA2753576A1 (en) * 2009-02-25 2010-09-02 Miri Systems, Llc Payment system and method
US9715681B2 (en) 2009-04-28 2017-07-25 Visa International Service Association Verification of portable consumer devices
US7891560B2 (en) 2009-05-15 2011-02-22 Visa International Service Assocation Verification of portable consumer devices
US9105027B2 (en) 2009-05-15 2015-08-11 Visa International Service Association Verification of portable consumer device for secure services
US8893967B2 (en) 2009-05-15 2014-11-25 Visa International Service Association Secure Communication of payment information to merchants using a verification token
US8602293B2 (en) 2009-05-15 2013-12-10 Visa International Service Association Integration of verification tokens with portable computing devices
US8534564B2 (en) 2009-05-15 2013-09-17 Ayman Hammad Integration of verification tokens with mobile communication devices
US10846683B2 (en) 2009-05-15 2020-11-24 Visa International Service Association Integration of verification tokens with mobile communication devices
US9038886B2 (en) 2009-05-15 2015-05-26 Visa International Service Association Verification of portable consumer devices
US10140598B2 (en) 2009-05-20 2018-11-27 Visa International Service Association Device including encrypted data for expiration date and verification value creation
US8364591B2 (en) 2009-08-10 2013-01-29 Visa International Service Association Track data mapping system for processing of payment transaction data
IN2012DN03242A (zh) 2009-10-05 2015-10-23 Miri Systems Llc
US10255591B2 (en) 2009-12-18 2019-04-09 Visa International Service Association Payment channel returning limited use proxy dynamic value
US10049356B2 (en) 2009-12-18 2018-08-14 First Data Corporation Authentication of card-not-present transactions
BR112012017000A2 (pt) 2010-01-12 2016-04-05 Visa Int Service Ass método
US10255601B2 (en) 2010-02-25 2019-04-09 Visa International Service Association Multifactor authentication using a directory server
US9245267B2 (en) 2010-03-03 2016-01-26 Visa International Service Association Portable account number for consumer payment account
CA2795167C (en) 2010-04-05 2018-09-04 Cardinal Commerce Corporation Method and system for processing pin debit transactions
US8473414B2 (en) 2010-04-09 2013-06-25 Visa International Service Association System and method including chip-based device processing for transaction
US9342832B2 (en) 2010-08-12 2016-05-17 Visa International Service Association Securing external systems with account token substitution
US10586227B2 (en) 2011-02-16 2020-03-10 Visa International Service Association Snap mobile payment apparatuses, methods and systems
AU2012217606A1 (en) 2011-02-16 2013-05-09 Visa International Service Association Snap mobile payment apparatuses, methods and systems
WO2012116125A1 (en) 2011-02-22 2012-08-30 Visa International Service Association Universal electronic payment apparatuses, methods and systems
AU2012225684B2 (en) 2011-03-04 2016-11-10 Visa International Service Association Integration of payment capability into secure elements of computers
US9280765B2 (en) 2011-04-11 2016-03-08 Visa International Service Association Multiple tokenization for authentication
KR101944504B1 (ko) * 2011-06-08 2019-02-14 주식회사 비즈모델라인 동적 계좌번호 기반 계좌거래를 제공하는 애플리케이션 등록 방법
US9355393B2 (en) 2011-08-18 2016-05-31 Visa International Service Association Multi-directional wallet connector apparatuses, methods and systems
US9582598B2 (en) 2011-07-05 2017-02-28 Visa International Service Association Hybrid applications utilizing distributed models and views apparatuses, methods and systems
AU2012278963B2 (en) 2011-07-05 2017-02-23 Visa International Service Association Electronic wallet checkout platform apparatuses, methods and systems
WO2013019567A2 (en) 2011-07-29 2013-02-07 Visa International Service Association Passing payment tokens through an hop/sop
US9710807B2 (en) 2011-08-18 2017-07-18 Visa International Service Association Third-party value added wallet features and interfaces apparatuses, methods and systems
US10242358B2 (en) 2011-08-18 2019-03-26 Visa International Service Association Remote decoupled application persistent state apparatuses, methods and systems
US10825001B2 (en) 2011-08-18 2020-11-03 Visa International Service Association Multi-directional wallet connector apparatuses, methods and systems
WO2013029014A2 (en) 2011-08-24 2013-02-28 Visa International Service Association Method for using barcodes and mobile devices to conduct payment transactions
US8862767B2 (en) 2011-09-02 2014-10-14 Ebay Inc. Secure elements broker (SEB) for application communication channel selector optimization
US10223730B2 (en) 2011-09-23 2019-03-05 Visa International Service Association E-wallet store injection search apparatuses, methods and systems
EP2602980B1 (en) * 2011-12-09 2017-02-15 BlackBerry Limited Transaction provisioning for mobile wireless communications devices and related methods
US8918855B2 (en) * 2011-12-09 2014-12-23 Blackberry Limited Transaction provisioning for mobile wireless communications devices and related methods
SG11201403861XA (en) 2012-01-05 2014-08-28 Visa Int Service Ass Data protection with translation
US10223710B2 (en) 2013-01-04 2019-03-05 Visa International Service Association Wearable intelligent vision device apparatuses, methods and systems
US9830595B2 (en) 2012-01-26 2017-11-28 Visa International Service Association System and method of providing tokenization as a service
AU2013214801B2 (en) 2012-02-02 2018-06-21 Visa International Service Association Multi-source, multi-dimensional, cross-entity, multimedia database platform apparatuses, methods and systems
US10282724B2 (en) 2012-03-06 2019-05-07 Visa International Service Association Security system incorporating mobile device
US20130297501A1 (en) 2012-05-04 2013-11-07 Justin Monk System and method for local data conversion
US9524501B2 (en) 2012-06-06 2016-12-20 Visa International Service Association Method and system for correlating diverse transaction data
US9547769B2 (en) 2012-07-03 2017-01-17 Visa International Service Association Data protection hub
US9846861B2 (en) 2012-07-25 2017-12-19 Visa International Service Association Upstream and downstream data conversion
US9256871B2 (en) 2012-07-26 2016-02-09 Visa U.S.A. Inc. Configurable payment tokens
US9665722B2 (en) 2012-08-10 2017-05-30 Visa International Service Association Privacy firewall
US10192216B2 (en) 2012-09-11 2019-01-29 Visa International Service Association Cloud-based virtual wallet NFC apparatuses, methods and systems
US10176478B2 (en) 2012-10-23 2019-01-08 Visa International Service Association Transaction initiation determination system utilizing transaction data elements
KR101316466B1 (ko) * 2012-11-20 2013-10-08 신한카드 주식회사 다이나믹 트랙 2 정보를 이용한 모바일 결제 시스템 및 방법
US9911118B2 (en) 2012-11-21 2018-03-06 Visa International Service Association Device pairing via trusted intermediary
KR101316489B1 (ko) * 2012-11-23 2013-10-10 신한카드 주식회사 다이나믹 ραn 이용한 트랜잭션 처리방법
US10304047B2 (en) 2012-12-07 2019-05-28 Visa International Service Association Token generating component
KR101330943B1 (ko) * 2012-12-10 2013-11-26 신한카드 주식회사 일회성 카드정보를 이용한 결제 방법
US9741051B2 (en) 2013-01-02 2017-08-22 Visa International Service Association Tokenization and third-party interaction
US10740731B2 (en) 2013-01-02 2020-08-11 Visa International Service Association Third party settlement
US11055710B2 (en) 2013-05-02 2021-07-06 Visa International Service Association Systems and methods for verifying and processing transactions using virtual currency
CN105359179B (zh) 2013-05-15 2019-12-10 维萨国际服务协会 移动令牌化枢纽
US10878422B2 (en) 2013-06-17 2020-12-29 Visa International Service Association System and method using merchant token
AU2014285769A1 (en) * 2013-07-02 2016-01-07 Visa International Service Association Payment card including user interface for use with payment card acceptance terminal
AU2014290143C1 (en) 2013-07-15 2019-01-03 Visa International Service Association Secure remote payment transaction processing
SG10201800629WA (en) 2013-07-24 2018-02-27 Visa Int Service Ass Systems and methods for communicating risk using token assurance data
CN115907763A (zh) 2013-07-26 2023-04-04 维萨国际服务协会 向消费者提供支付凭证
US10496986B2 (en) 2013-08-08 2019-12-03 Visa International Service Association Multi-network tokenization processing
CA2920661C (en) 2013-08-08 2019-05-21 Visa International Service Association Methods and systems for provisioning mobile devices with payment credentials
KR102552606B1 (ko) 2013-08-15 2023-07-06 비자 인터네셔널 서비스 어소시에이션 보안 요소를 이용한 보안 원격 지불 거래 처리
CN115358746A (zh) 2013-09-20 2022-11-18 维萨国际服务协会 包括消费者认证的安全远程支付交易处理
EP3937108A1 (en) 2013-10-11 2022-01-12 Visa International Service Association Network token system
US9978094B2 (en) 2013-10-11 2018-05-22 Visa International Service Association Tokenization revocation list
US10515358B2 (en) 2013-10-18 2019-12-24 Visa International Service Association Contextual transaction token methods and systems
US10489779B2 (en) 2013-10-21 2019-11-26 Visa International Service Association Multi-network token bin routing with defined verification parameters
US8886570B1 (en) * 2013-10-29 2014-11-11 Quisk, Inc. Hacker-resistant balance monitoring
US10366387B2 (en) 2013-10-29 2019-07-30 Visa International Service Association Digital wallet system and method
US9516487B2 (en) 2013-11-19 2016-12-06 Visa International Service Association Automated account provisioning
SG11201604906QA (en) 2013-12-19 2016-07-28 Visa Int Service Ass Cloud-based transactions methods and systems
US9922322B2 (en) 2013-12-19 2018-03-20 Visa International Service Association Cloud-based transactions with magnetic secure transmission
US10433128B2 (en) 2014-01-07 2019-10-01 Visa International Service Association Methods and systems for provisioning multiple devices
US9846878B2 (en) 2014-01-14 2017-12-19 Visa International Service Association Payment account identifier system
US10026087B2 (en) 2014-04-08 2018-07-17 Visa International Service Association Data passed in an interaction
US9942043B2 (en) 2014-04-23 2018-04-10 Visa International Service Association Token security on a communication device
WO2015168334A1 (en) 2014-05-01 2015-11-05 Visa International Service Association Data verification using access device
US9848052B2 (en) 2014-05-05 2017-12-19 Visa International Service Association System and method for token domain control
CN106465112A (zh) 2014-05-21 2017-02-22 维萨国际服务协会 离线认证
CN105429928A (zh) 2014-05-30 2016-03-23 阿里巴巴集团控股有限公司 数据通信方法和***及客户端和服务器
US11023890B2 (en) 2014-06-05 2021-06-01 Visa International Service Association Identification and verification for provisioning mobile application
US10373153B2 (en) * 2014-07-03 2019-08-06 Mastercard International Incorporated Method and system for maintaining privacy and compliance in the use of account reissuance data
US9780953B2 (en) 2014-07-23 2017-10-03 Visa International Service Association Systems and methods for secure detokenization
US10484345B2 (en) 2014-07-31 2019-11-19 Visa International Service Association System and method for identity verification across mobile applications
US9775029B2 (en) 2014-08-22 2017-09-26 Visa International Service Association Embedding cloud-based functionalities in a communication device
US10140615B2 (en) 2014-09-22 2018-11-27 Visa International Service Association Secure mobile device credential provisioning using risk decision non-overrides
CA2960319A1 (en) 2014-09-26 2016-03-31 Visa International Service Association Remote server encrypted data provisioning system and methods
US11257074B2 (en) 2014-09-29 2022-02-22 Visa International Service Association Transaction risk based token
US10015147B2 (en) 2014-10-22 2018-07-03 Visa International Service Association Token enrollment system and method
GB201419016D0 (en) 2014-10-24 2014-12-10 Visa Europe Ltd Transaction Messaging
US10325261B2 (en) 2014-11-25 2019-06-18 Visa International Service Association Systems communications with non-sensitive identifiers
CN113537988B (zh) 2014-11-26 2024-05-28 维萨国际服务协会 用于经由访问装置的令牌化请求的方法和设备
RU2707939C2 (ru) 2014-12-12 2019-12-02 Виза Интернэшнл Сервис Ассосиэйшн Платформа обеспечения для межмашинных устройств
US10257185B2 (en) 2014-12-12 2019-04-09 Visa International Service Association Automated access data provisioning
US10187363B2 (en) 2014-12-31 2019-01-22 Visa International Service Association Hybrid integration of software development kit with secure execution environment
US10096009B2 (en) 2015-01-20 2018-10-09 Visa International Service Association Secure payment processing using authorization request
US11250391B2 (en) 2015-01-30 2022-02-15 Visa International Service Association Token check offline
US11176554B2 (en) 2015-02-03 2021-11-16 Visa International Service Association Validation identity tokens for transactions
US10977657B2 (en) 2015-02-09 2021-04-13 Visa International Service Association Token processing utilizing multiple authorizations
US10164996B2 (en) 2015-03-12 2018-12-25 Visa International Service Association Methods and systems for providing a low value token buffer
SG11201706576TA (en) 2015-04-10 2017-09-28 Visa Int Service Ass Browser integration with cryptogram
US9998978B2 (en) 2015-04-16 2018-06-12 Visa International Service Association Systems and methods for processing dormant virtual access devices
US10552834B2 (en) 2015-04-30 2020-02-04 Visa International Service Association Tokenization capable authentication framework
JP2018530834A (ja) 2015-10-15 2018-10-18 ビザ インターナショナル サービス アソシエーション トークン即時発行システム
CN108370319B (zh) 2015-12-04 2021-08-17 维萨国际服务协会 用于令牌验证的方法及计算机
SG11201805266YA (en) 2016-01-07 2018-07-30 Visa Int Service Ass Systems and methods for device push provisioning
EP3411846A1 (en) 2016-02-01 2018-12-12 Visa International Service Association Systems and methods for code display and use
US11501288B2 (en) 2016-02-09 2022-11-15 Visa International Service Association Resource provider account token provisioning and processing
US10313321B2 (en) 2016-04-07 2019-06-04 Visa International Service Association Tokenization of co-network accounts
WO2017184121A1 (en) 2016-04-19 2017-10-26 Visa International Service Association Systems and methods for performing push transactions
US11250424B2 (en) 2016-05-19 2022-02-15 Visa International Service Association Systems and methods for creating subtokens using primary tokens
AU2016409079B2 (en) 2016-06-03 2021-07-22 Visa International Service Association Subtoken management system for connected devices
US11068899B2 (en) 2016-06-17 2021-07-20 Visa International Service Association Token aggregation for multi-party transactions
SG11201808737YA (en) 2016-06-24 2018-11-29 Visa Int Service Ass Unique token authentication cryptogram
BR112018076196A2 (pt) 2016-07-11 2019-03-26 Visa International Service Association método, e, dispositivos de comunicação portátil e de acesso.
WO2018017068A1 (en) 2016-07-19 2018-01-25 Visa International Service Association Method of distributing tokens and managing token relationships
US10509779B2 (en) 2016-09-14 2019-12-17 Visa International Service Association Self-cleaning token vault
AU2017364118A1 (en) 2016-11-28 2019-05-02 Visa International Service Association Access identifier provisioning to application
US10915899B2 (en) 2017-03-17 2021-02-09 Visa International Service Association Replacing token on a multi-token user device
US10902418B2 (en) 2017-05-02 2021-01-26 Visa International Service Association System and method using interaction token
US11494765B2 (en) 2017-05-11 2022-11-08 Visa International Service Association Secure remote transaction system using mobile devices
US11301826B2 (en) 2017-06-13 2022-04-12 Sony Corporation Information processing apparatus and information processing system
US10491389B2 (en) 2017-07-14 2019-11-26 Visa International Service Association Token provisioning utilizing a secure authentication system
KR101954446B1 (ko) * 2018-01-26 2019-03-05 주식회사 비즈모델라인 동적 계좌번호 기반 계좌거래 방법
CN111819555A (zh) 2018-03-07 2020-10-23 维萨国际服务协会 利用在线认证的安全远程令牌发布
US11256789B2 (en) 2018-06-18 2022-02-22 Visa International Service Association Recurring token transactions
EP3841498B1 (en) 2018-08-22 2024-05-01 Visa International Service Association Method and system for token provisioning and processing
US11469895B2 (en) 2018-11-14 2022-10-11 Visa International Service Association Cloud token provisioning of multiple tokens
SG11202108626QA (en) 2019-05-17 2021-09-29 Visa Int Service Ass Virtual access credential interaction system and method
EP3767569A1 (en) * 2019-07-18 2021-01-20 Mastercard International Incorporated An electronic transaction method and device using a flexible transaction identifier

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6163771A (en) * 1997-08-28 2000-12-19 Walker Digital, Llc Method and device for generating a single-use financial account number
US20010056409A1 (en) * 2000-05-15 2001-12-27 Bellovin Steven Michael Offline one time credit card numbers for secure e-commerce
EP1265202A1 (en) * 2001-06-04 2002-12-11 Orbis Patents Limited Business-to-business commerce using financial transaction numbers
WO2003038719A1 (en) * 2001-10-31 2003-05-08 Arcot Systems, Inc. One-time credit card number generator and single round-trip authentication

Family Cites Families (18)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5613012A (en) * 1994-11-28 1997-03-18 Smarttouch, Llc. Tokenless identification system for authorization of electronic transactions and electronic transmissions
EP0993645A4 (en) * 1997-07-03 2004-11-17 Citicorp Dev Ct SYSTEM AND METHOD FOR TRANSFERRING A VALUE ON A MAGNETIC TRACK OF A SERVICE CARD
US6000832A (en) * 1997-09-24 1999-12-14 Microsoft Corporation Electronic online commerce card with customer generated transaction proxy number for online transactions
US6327578B1 (en) * 1998-12-29 2001-12-04 International Business Machines Corporation Four-party credit/debit payment protocol
EP1028401A3 (en) * 1999-02-12 2003-06-25 Citibank, N.A. Method and system for performing a bankcard transaction
AU2202001A (en) * 1999-12-17 2001-06-25 Chantilley Corporation Limited Secure transaction systems
US20010029485A1 (en) * 2000-02-29 2001-10-11 E-Scoring, Inc. Systems and methods enabling anonymous credit transactions
AU2001243473A1 (en) * 2000-03-07 2001-09-17 American Express Travel Related Services Company, Inc. System for facilitating a transaction
AU2001249276A2 (en) * 2000-03-24 2001-10-08 Access Business Group International Llc System and method for detecting fraudulent transactions
US7181762B2 (en) * 2001-01-17 2007-02-20 Arcot Systems, Inc. Apparatus for pre-authentication of users using one-time passwords
US6983381B2 (en) * 2001-01-17 2006-01-03 Arcot Systems, Inc. Methods for pre-authentication of users using one-time passwords
UA64840C2 (uk) * 2001-10-12 2004-03-15 Віталій Євгенович Леонідов-Каневський Спосіб електронних платежів (варіанти)
US7100821B2 (en) * 2003-05-15 2006-09-05 Mehran Randall Rasti Charge card and debit transactions using a variable charge number
US7472829B2 (en) * 2004-12-10 2009-01-06 Qsecure, Inc. Payment card with internally generated virtual account numbers for its magnetic stripe encoder and user display
US7580898B2 (en) * 2004-03-15 2009-08-25 Qsecure, Inc. Financial transactions with dynamic personal account numbers
US7347361B2 (en) * 2005-06-13 2008-03-25 Robert Lovett System, method and program product for account transaction validation
US20090164381A1 (en) * 2006-12-20 2009-06-25 Brown Kerry D Method of making secure payment cards
US20080288403A1 (en) * 2007-05-18 2008-11-20 Clay Von Mueller Pin encryption device security

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6163771A (en) * 1997-08-28 2000-12-19 Walker Digital, Llc Method and device for generating a single-use financial account number
US20010056409A1 (en) * 2000-05-15 2001-12-27 Bellovin Steven Michael Offline one time credit card numbers for secure e-commerce
EP1265202A1 (en) * 2001-06-04 2002-12-11 Orbis Patents Limited Business-to-business commerce using financial transaction numbers
WO2003038719A1 (en) * 2001-10-31 2003-05-08 Arcot Systems, Inc. One-time credit card number generator and single round-trip authentication

Cited By (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107836004A (zh) * 2015-07-21 2018-03-23 万事达卡国际股份有限公司 用于处理对支付账户的交易的***和方法
CN108352986A (zh) * 2015-08-27 2018-07-31 万事达卡国际股份有限公司 用于增强基于云的***中的密码验证的方法和***
CN109389395A (zh) * 2017-08-09 2019-02-26 森斯通株式会社 虚拟代码提供***、生成装置、验证装置、提供方法及提供程序
CN109389382A (zh) * 2017-08-09 2019-02-26 森斯通株式会社 虚拟***生成装置及验证装置、金融交易提供***、方法及程序
CN109389382B (zh) * 2017-08-09 2022-05-31 森斯通株式会社 虚拟***生成装置及验证装置、金融交易提供***、方法及程序
US11354401B2 (en) 2017-08-09 2022-06-07 SSenStone Inc. System, method, and program for providing virtual code, virtual code generating device, and virtual code verifying device
CN109389395B (zh) * 2017-08-09 2022-06-21 森斯通株式会社 虚拟代码提供***、生成装置、验证装置、提供方法
US11609983B2 (en) 2017-08-09 2023-03-21 SSenStone Inc. System, method, and program for providing virtual code, virtual code generating device, and virtual code verifying device
US11960595B2 (en) 2017-08-09 2024-04-16 SSenStone Inc. System, method, and program for providing virtual code, virtual code generating device, and virtual code verifying device

Also Published As

Publication number Publication date
US20130297508A1 (en) 2013-11-07
MY153194A (en) 2015-01-29
GB2457204A (en) 2009-08-12
CA2669320C (en) 2017-10-31
RU2479032C2 (ru) 2013-04-10
IL198738A0 (en) 2010-02-17
AU2007320785B2 (en) 2012-09-27
WO2008059465A2 (en) 2008-05-22
MX2009005257A (es) 2009-10-12
AT506775A2 (de) 2009-11-15
CH709883B1 (de) 2016-01-29
IL198738A (en) 2015-05-31
AP3361A (en) 2015-07-31
BRPI0718902A2 (pt) 2013-12-10
CA2669320A1 (en) 2008-05-22
WO2008059465A3 (en) 2008-07-10
MA30987B1 (fr) 2009-12-01
KR20090102752A (ko) 2009-09-30
PH12015500674A1 (en) 2015-05-11
GB0910305D0 (en) 2009-07-29
NZ577677A (en) 2012-05-25
ZA200903802B (en) 2010-03-31
EP2095311A2 (en) 2009-09-02
KR20170034920A (ko) 2017-03-29
JP2010510567A (ja) 2010-04-02
US20100088227A1 (en) 2010-04-08
DE112007002744T5 (de) 2009-10-08
AP2009004889A0 (en) 2009-06-30
KR20160011698A (ko) 2016-02-01
RU2009122578A (ru) 2010-12-27
EG25664A (en) 2012-05-09
AU2007320785A1 (en) 2008-05-22
SE0950453L (sv) 2009-07-21
CH698351B1 (de) 2015-06-15
FI20095662L (fi) 2009-06-12

Similar Documents

Publication Publication Date Title
CN101573723A (zh) 安全金融交易
US20220156732A1 (en) Data protection with translation
CA2691789C (en) System and method for account identifier obfuscation
EP0047285B1 (en) A system for authenticating users and devices in on-line transaction networks
US8527427B2 (en) Method and system for performing a transaction using a dynamic authorization code
EP3255600B1 (en) Method and system for generating a dynamic verification value
US20020152180A1 (en) System and method for performing secure remote real-time financial transactions over a public communications infrastructure with strong authentication
JPH0334641A (ja) 特殊キーを用いた転送データの暗号化方法
KR20090021220A (ko) 검증 에러 감소 시스템
AU2001257019B2 (en) An improved method and system for conducting secure payments over a computer network
AU781671B2 (en) An improved method and system for conducting secure payments over a computer network
TW202109408A (zh) 管理帳戶支付系統及其方法
JP2003536181A (ja) 擬似或いは代理口座番号なしでコンピュータネットワークを越えて安全な支払いを処理するための改善された方法およびシステム
JP4334021B2 (ja) 読取り装置内の累積の証明方法
AU2012201255B2 (en) An improved method and system for conducting secure payments over a computer network
AU2007216920B2 (en) An improved method and system for conducting secure payments over a computer network

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
REG Reference to a national code

Ref country code: HK

Ref legal event code: DE

Ref document number: 1132823

Country of ref document: HK

RJ01 Rejection of invention patent application after publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20091104