US20120136796A1 - Device Enrollment System and Method - Google Patents
Device Enrollment System and Method Download PDFInfo
- Publication number
- US20120136796A1 US20120136796A1 US13/237,840 US201113237840A US2012136796A1 US 20120136796 A1 US20120136796 A1 US 20120136796A1 US 201113237840 A US201113237840 A US 201113237840A US 2012136796 A1 US2012136796 A1 US 2012136796A1
- Authority
- US
- United States
- Prior art keywords
- mobile device
- consumer
- verification token
- request message
- merchant
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Abandoned
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/08—Payment architectures
- G06Q20/12—Payment architectures specially adapted for electronic shopping systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
- G06Q20/322—Aspects of commerce using mobile devices [M-devices]
- G06Q20/3223—Realising banking transactions through M-devices
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/36—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes
- G06Q20/367—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes
- G06Q20/3674—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes involving authentication
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
- G06Q20/3821—Electronic credentials
- G06Q20/38215—Use of certificates or encrypted proofs of transaction rights
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
- G06Q20/3825—Use of electronic signatures
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/385—Payment protocols; Details thereof using an alias or single-use codes
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q20/401—Transaction verification
- G06Q20/4018—Transaction verification using the card verification value [CVV] associated with the card
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/42—Confirmation, e.g. check or permission by the legal debtor of payment
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
- H04W12/069—Authentication using certificates or pre-shared keys
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q2220/00—Business processing using cryptography
Definitions
- Payment card based electronic payment transactions can be characterized as two types. One type of transaction is a card present type of transaction, while another type transaction is a card not present type of transaction.
- a person may use a payment card such as a credit card to conduct the transaction.
- the merchant may obtain and check the person's payment card to confirm that he is the actual holder of the card. For example, the merchant may ask for the person's driver's license to confirm that the name on the driver's license is the same name that is on the payment card.
- the person may take the payment card and swipe it by the merchant's POS (point of service) terminal to start the process of authorizing the transaction.
- the POS terminal may generate and send an authorization request message to an issuer of the payment card.
- the issuer may subsequently approve or not approve of the transaction.
- Another type of payment transaction is a “card not present” type of transaction.
- An example of a card not present type of transaction is an online purchase transaction.
- the online merchant does not physically verify that the consumer is actually in possession of a payment card that is being used to conduct the transaction.
- CVV 2 card verification value
- a human being does not verify that the consumer purchasing the goods is in physical possession of the card that is used to conduct the transaction.
- card not present transactions may be subject to higher processing fees (e.g., interchange fees) than card present types of transactions.
- contactless devices e.g., an RF or radio frequency transmitter
- a mobile phone can be physically present at a physical point of sale when a person conducts a purchase transaction in person at a merchant, the purchase transaction would generally be considered card not present types of transactions. This is because a physical card is not present during the transaction and since the mobile phone would not possess the necessary security attributes (e.g., holograms, card verification values, secure chip) that a card might have.
- security attributes e.g., holograms, card verification values, secure chip
- Embodiments of the invention address these and other problems.
- Embodiments of the invention include methods and systems that can be used to improve the security and speed of payment transactions conducted using a mobile communication device such as a mobile phone.
- One embodiment of the invention is directed to a method comprising receiving payment data at an access device, and receiving an identifier for a mobile device at the access device.
- the method also includes generating and sending an authorization request message to a server computer, wherein the server computer generates a verification token, wherein the verification token is then sent to the mobile device and is stored in the mobile device, whereby the mobile device is thereafter used to conduct payment transactions.
- Another embodiment of the invention is directed to an access device comprising a processor and a computer readable medium coupled to the processor.
- the computer readable medium comprises, code executable by the processor, for implementing a method comprising receiving payment data, receiving an identifier for a mobile device, and generating and sending an authorization request message to a server computer.
- the server computer generates a verification token, where the verification token is then sent to the mobile device and is stored in the mobile device, whereby the mobile device is thereafter used to conduct payment transactions.
- Another embodiment of the invention is directed to a system comprising an access device comprising (a) a processor, and (b) a computer readable medium coupled to the processor.
- the computer readable medium comprises code executable by the processor, for implementing a method comprising receiving payment data, receiving an identifier for a mobile device, and generating and sending an authorization request message to a server computer, wherein the server computer generates a verification token. The verification token is then sent to the mobile device, whereby the mobile device is thereafter used to conduct payment transactions.
- the system also includes a mobile device configured to interact with the access device.
- Another embodiment of the invention is directed to a method comprising electronically transmitting payment data to a server computer, and electronically receiving, at a mobile device, a verification token from the server computer.
- the method also includes storing, in a memory on the mobile device, the verification token, whereby the mobile device is thereafter used to conduct payment transactions.
- Another embodiment of the invention is directed to a method comprising: receiving payment card data at an access device, receiving an identifier for a phone at the access device, and generating and sending an authorization request message to a server computer associated with a payment processing network.
- the server computer is associated with the payment processing network and generates a verification token.
- the verification token indicates that subsequent transactions conducted by the phone are to be processed as card present transactions.
- the verification token is then sent to the phone and is stored in the phone.
- the phone is thereafter used to conduct payment transactions, where the payment transactions are processed as card present transactions.
- Another embodiment of the invention is directed to an access device comprising: a processor, and a computer readable medium coupled to the processor.
- the computer readable medium comprises code executable by the processor, for implementing a method.
- the method comprises receiving payment card data, receiving an identifier for a phone, and generating and sending an authorization request message to a server computer associated with a payment processing network.
- the server computer is associated with the payment processing network and generates a verification token.
- the verification token indicates that subsequent transactions conducted by the phone are to be processed as card present transactions.
- the verification token is then sent to the phone and is stored in the mobile device.
- the mobile device is thereafter used to conduct payment transactions, where the payment transactions are processed as card present transactions.
- Another embodiment of the invention is directed to a system comprising an access device comprising (a) a processor, and (b) a computer readable medium coupled to the processor.
- the computer readable medium comprises, code executable by the processor, for implementing a method comprising receiving payment card data, receiving an identifier for a phone, and generating and sending an authorization request message to a server computer associated with a payment processing network.
- the payment processing network generates a verification token, and the verification token indicates that subsequent transactions conducted by the phone are to be processed as card present transactions.
- the verification token is then sent to the phone, whereby the phone is thereafter used to conduct payment transactions, and wherein the payment transactions are processed as card present transactions.
- the system also includes a phone configured to interact with the access device.
- Another embodiment of the invention is directed to a phone comprising: a processor; an antenna coupled to the processor; a computer readable medium, the computer readable medium comprising code for a verification token, wherein the verification token, is configured to allow the phone to be used to conduct transactions as a card present transactions.
- Another embodiment of the invention is directed to a server computer comprising: a processor; and a computer readable medium comprising code, executable by the processor for implementing a method comprising receiving a verification token from a phone during a payment transaction; and conducting the payment transaction as a card not present transaction.
- the verification token can be present in an authentication request message. In other embodiments, the verification token can be present in a request for a verification value, where the verification value is subsequently sent to the consumer and is subsequently received in an authorization request message.
- FIG. 1 shows a block diagram of an exemplary system that can be used in some embodiments of the invention.
- FIG. 2( a ) shows a block diagram of an exemplary consumer device in the form of a phone.
- FIG. 2( b ) shows an illustration of an exemplary payment card.
- FIG. 3 shows a block diagram of an exemplary access device according to an embodiment of the invention.
- FIG. 4 shows a block diagram of an exemplary computer readable medium of an access device according to an embodiment of the invention.
- FIG. 5 shows a block diagram of an exemplary payment processing network according to an embodiment of the invention.
- FIG. 6 shows a flowchart illustrating an exemplary method according to an embodiment of the invention.
- FIGS. 7-10 show a flowchart illustrating an exemplary enrollment method according to an embodiment of the invention.
- FIGS. 11-14 show a flowchart illustrating an exemplary method of conducting a purchase transaction according to an embodiment of the invention.
- FIG. 15 shows a block diagram of an exemplary computer apparatus according to an embodiment of the invention.
- FIG. 16 shows an exemplary user interface on a merchant website according to an embodiment of the invention.
- FIG. 17 shows an exemplary user interface on an access device according to an embodiment of the invention.
- FIGS. 18-19 show exemplary user interfaces on a mobile device during an enrollment according to an embodiment of the invention.
- FIGS. 20-22 show exemplary user interfaces on a mobile deice during a purchase transaction according to an embodiment of the invention.
- card present transactions can be distinguished from card not present types of transactions.
- a consumer is in possession of a portable consumer device, such as a payment card, at a point of sale at a merchant location.
- the consumer may also conduct a card present transaction with a mobile device, such as a phone, that is enabled with a near-field communication chip, or other suitable chip, to interact with a point of sale device at the merchant location.
- a mobile device such as a phone
- the merchant can verify the identity of a person wishing to make the transaction as a consumer associated with the payment card.
- card not present transaction the consumer does not have a payment card at the merchant location.
- card not present types of transactions include Internet transactions and mail order and telephone order types of transactions. Because a merchant is not able to verify the presence of a card or verify the identity of the person wishing to conduct the transaction, there are higher risks for merchants and issuers associated with conducting card not present transactions. Thus, card not present transactions can be subject to higher processing fees and/or interchange rates than card present types of transactions.
- Embodiments of the invention provide for greater security. Embodiments of the invention also allow a person to conduct a payment transaction with a mobile device (e.g., a phone) and that payment transaction can be treated as a card present type of payment transaction. This is the case even though the mobile device does not have the type of chip that would normally be required for a card present transaction. Because embodiments of the invention allow transactions conducted using a mobile device to be processed as a card present transaction, processing fees (e.g., interchange fees) can be reduced because the transactions are more secure.
- processing fees e.g., interchange fees
- a “verification token” may be any suitable piece of information that can be used to verify that a consumer has presented a payment card or other authentic payment credential to a merchant for verification. Verification tokens may be in any suitable form and any suitable length. Verification tokens may be in the form of numbers, letters, or combinations thereof. In some embodiments, a verification token according to an embodiment of the invention may be the form of an activation code or a portion thereof (e.g., half or less than half of an activation code). In some embodiments, the verification token may be static, while in other embodiments, it may be dynamic.
- Payment data may include any suitable information suitable for conducting a payment transaction. Payment data may include an account number, expiration date, service code, CVV (card verification value) and dCVV (dynamic card verification value) values, etc. Payment data can be stored on a mobile device, a payment card, or any other suitable portable consumer device.
- Payment card data may be an example of “payment data.” In the description below, reference to “payment data” may also be a reference to “payment card data” if the data is associated with a payment card. “Payment card data” may include any suitable information associated with a payment card suitable for conducting a payment transaction. Payment card data may be encoded on a magnetic stripe present the payment card, printed or embossed on the payment card, or any other suitable method of display or storage. Exemplary payment cards may include credit cards, debit cards, or any other suitable payment card.
- An “identifier” for a mobile device can be any suitable information that can be used to identify a mobile device such as a mobile phone.
- An example of an identifier for a mobile device may be a mobile phone number.
- a “mobile device” may be any suitable mobile communication device.
- a suitable mobile device may be in the form of a mobile phone, and may include an antenna, as well as a processor and a memory. It may also include a contactless element so that it can communicate using a short range wireless communication medium.
- a mobile device may be a device that can be easily transported, and can be in any suitable form.
- suitable mobile devices can be hand-held, compact, and enabled to communicate over a network interface, and may have an associated device identifier (e.g., mobile phone number).
- mobile devices may be enabled to download applications (e.g., apps) from a merchant website (e.g., iTunesTM) to perform specialized tasks. Examples of mobile devices include cellular phones, PDAs, personal computers (PCs), tablets, key fobs, and the like.
- An “access device” may be any suitable device that can interact with the mobile device and/or a payment card.
- Examples of access devices include point of sale (POS) devices, cellular phones, PDAs, personal computers (PCs), tablet PCs, handheld specialized readers, set-top boxes, electronic cash registers (ECRB), automated teller machines (ATMs), virtual cash registers (VCRs), kiosks, security systems, access systems, and the like.
- POS point of sale
- PCs personal computers
- ATMs automated teller machines
- VCRs virtual cash registers
- kiosks security systems, access systems, and the like.
- An “issuer” may be any business entity (e.g., a bank). Typically, an issuer is a financial institution, such as a bank. The issuer issues portable consumer devices to the consumer that may be used to conduct a transaction, such as a credit or debit card to the consumer.
- An “acquirer” is typically a business entity, e.g., a commercial bank that has a business relationship with a particular merchant. Some entities such as American Express perform both issuer and acquirer functions. Embodiments of the invention encompass such single entity issuer-acquirers.
- a “payment processing network” may include data processing subsystems, networks, and operations used to support and deliver authorization services, exception file services, and clearing and settlement services.
- An exemplary payment processing system may include VisaNetTM.
- Payment processing systems such as VisaNetTM are able to process credit card transactions, debit card transactions, and other types of commercial transactions.
- VisaNetTM in particular, includes a VIP system (Visa Integrated Payments system) which processes authorization requests and a Base II system which performs clearing and settlement services.
- a “server computer” can be a powerful computer or a cluster of computers.
- the server computer can be a large mainframe, a minicomputer cluster, or a group of servers functioning as a unit.
- the server computer may be a database server coupled to a Web server and may host a merchant website.
- An “authorization request message” can include a request for authorization to conduct an electronic payment transaction. It may further include an issuer account identifier.
- the issuer account identifier may be a payment card account identifier associated with a payment card.
- the authorization request message may request that an issuer of the payment card authorize a transaction.
- An authorization request message according to an embodiment of the invention may comply with ISO 8583, which is a standard for systems that exchange electronic transactions made by cardholders using payment cards.
- An “authorization response message” can be a message that includes an authorization code, and may typically be produced by an issuer.
- the authorization response message can provide an indication of whether or not a transaction is authorized.
- Authorization request messages, authorization response messages, and other confidential data transmitted may be susceptible to interception, compromising secure data relating to the consumer or the consumer's payment information, such as a payment card identifier.
- Encryption allows merchants, issuers, acquirers, and other entities to verify the identity of the source of the information (e.g., a valid consumer) by altering data transmitted so that to anyone other than an intended recipient the data is unreadable or meaningless. When the intended recipient receives the data, the intended recipient decrypts the data.
- Security keys are often used to encrypt and decrypt messages, and may be used in conjunction with mathematical formulas or algorithms. Security keys are created in pairs, so that if someone encrypts a message with a key, only someone else with a matching key will be able to decrypt the message. There are secret key pairs and public key pairs. Public key encryption is typically used in Internet communications. In public key encryption, there is a “public key” and a “private key.” The public key is made freely available, whereas the private key is kept privately and secretly on a consumer's computer, consumer's mobile device, or merchant access device. The public key can encrypt messages, but only the private key can decrypt messages the public key has encrypted.
- Digital certificates use encryption to verify that an entity sending data, such as a consumer sending payment card information, is valid (e.g., a consumer sending the payment card information is the consumer associated with the payment card information sent).
- a digital certificate is unique for each entity, so when a consumer with a digital certificate goes to a merchant website, that digital certificate is presented to the merchant's website and verifies that the consumer is who he or she claims to be.
- Digital certificates are issued by certificate authorities or other suitable entity not directly involved in a transaction in which digital certificates are needed to verify identities of the parties conducting the transaction.
- FIG. 1 A system according to an embodiment of the invention is shown in FIG. 1 .
- FIG. 1 shows a system 20 that can be used in an embodiment of the invention.
- the system 20 includes a merchant computer 22 and an access device 34 operated by a merchant 21 , and an acquirer computer 24 associated with the merchant computer 22 .
- a consumer 30 may purchase goods or services at the merchant 21 using a portable consumer device such as a payment card 32 - 2 .
- the consumer 30 may be an individual (e.g., a user), or an organization such as a business that is capable of purchasing goods or services.
- the acquirer computer 24 can communicate with an issuer computer 28 via a payment processing network 26 .
- an “issuer” is typically a business entity (e.g., a bank) which maintains financial accounts for the consumer and often issues a portable consumer device such as a credit or debit card to the consumer.
- a “merchant” is typically an entity that engages in transactions, such as a store, person, or service provider.
- an “acquirer” is typically a business entity, e.g., a commercial bank that has a business relationship with a particular merchant or other entity. Some entities can perform both issuer and acquirer functions. Embodiments of the invention encompass such single entity issuer-acquirers.
- a consumer 30 is illustrated.
- Consumer 30 can use at least two different types of portable consumer devices including mobile device 32 - 1 and a payment card 32 - 2 .
- the mobile device 32 - 1 may be a mobile phone.
- the payment card 32 - 2 may be a credit, debit, or prepaid card.
- the mobile device 32 - 1 may be used to communicate with the issuer of the payment card via a telecommunications gateway 60 , a telecommunications network 70 , and a payment processing network 26 .
- the issuer may operate an issuer computer 28 .
- the mobile device 32 - 1 and the payment card 32 - 2 could be linked to the same issuer account number, or could be linked to respectively different issuer account numbers.
- consumer 30 may use a specific type of client computer 32 - 3 such as a personal computer to communicate with the merchant computer 22 via the Internet 72 .
- the payment processing network 26 may include data processing subsystems, networks, and operations used to support and deliver authorization services, exception file services, and clearing and settlement services.
- An exemplary payment processing network may include VisaNetTM.
- Payment processing networks such as VisaNetTM are able to process credit card transactions, debit card transactions, and other types of commercial transactions.
- VisaNetTM in particular, includes a VIP system (Visa Integrated Payments system) which processes authorization requests and a Base II system which performs clearing and settlement services.
- the payment processing network 26 may include a server computer.
- a server computer is typically a powerful computer or cluster of computers.
- the server computer can be a large mainframe, a minicomputer cluster, or a group of servers functioning as a unit.
- the server computer may be a database server coupled to a Web server.
- the payment processing network 26 may use any suitable wired or wireless network, including the Internet.
- the merchant computer 22 may also have, or may receive communications from, an access device 34 that can interact with the portable consumer device 32 .
- the access devices can be in any suitable form. Examples of access devices include point of sale (POS) devices, cellular phones, PDAs, personal computers (PCs), tablet PCs, handheld specialized readers, set-top boxes, electronic cash registers (ECRB), automated teller machines (ATMs), virtual cash registers (VCRs), kiosks, security systems, access systems, and the like.
- POS point of sale
- PCs personal computers
- ATMs automated teller machines
- VCRs virtual cash registers
- kiosks security systems, access systems, and the like.
- any suitable point of sale terminal may be used including card readers.
- the card readers may include any suitable contact or contactless mode of operation.
- exemplary card readers can include RF (radio frequency) antennas, magnetic stripe readers, etc. to interact with the portable consumer devices 32 .
- the access device 34 may comprise a processor, and a computer readable medium coupled to the processor.
- the computer readable medium comprises, code executable by the processor, for implementing a method comprising: receiving payment data; receiving an identifier for a mobile device; and generating and sending an authorization request message to a server computer, wherein the server computer generates a verification token, wherein the verification token is then sent to the mobile device and is stored in the mobile device, whereby the mobile device is thereafter used to conduct payment transactions
- FIG. 2( a ) shows a block diagram showing some components of a mobile device 32 ′ that can be used in embodiments of the invention.
- the exemplary mobile device 32 ′ e.g., mobile phone
- the computer readable medium 32 ( b ) may be present within the body 32 ( h ), or may be detachable from it.
- the body 32 ( h ) may be in the form a plastic substrate, housing, or other structure.
- the computer readable medium 32 ( b ) may be a memory that stores data (e.g., data relating to issuer specific payment services, verification token) and may be in any suitable form including a memory chip, etc.
- the memory preferably stores information such as financial information, transit information (e.g., as in a subway or train pass), access information (e.g., as in access badges), etc.
- Financial information may include information such as bank account information, bank identification number (BIN), credit or debit card number information, account balance information, expiration date, consumer information such as name, date of birth, verification token, etc. Any of this information may be transmitted by the mobile device 32 ′.
- information in the memory may also include data in the form of data tracks that are traditionally associated with credit and/or debit cards.
- Such tracks include Track 1 and Track 2 .
- Track 1 International Air Transport Association
- Track 2 (“American Banking Association”) is currently most commonly used. This is the track that is read by ATMs and credit card checkers.
- the ABA American Banking Association designed the specifications of this track and all world banks must abide by it. It contains the cardholder's account, encrypted PIN, plus other discretionary data.
- the mobile device 32 ′ may further include a contactless element 32 ( g ), which is typically implemented in the form of a semiconductor chip (or other data storage element) with an associated wireless transfer (e.g., data transmission) element, such as an antenna.
- Contactless element 32 ( g ) is associated with (e.g., embedded within) phone 32 and data or control instructions transmitted via a cellular network may be applied to contactless element 32 ( g ) by means of a contactless element interface (not shown).
- the contactless element interface functions to permit the exchange of data and/or control instructions between the mobile device circuitry (and hence the cellular network) and an optional contactless element 32 ( g ).
- Contactless element 32 ( g ) is capable of transferring and receiving data using a near field communications (“NFC”) capability (or near field communications medium) typically in accordance with a standardized protocol or data transfer mechanism (e.g., ISO 14443/NFC).
- NFC near field communications
- Near field communications capability is a short-range communications capability, such as RFID, BluetoothTM, infra-red, or other data transfer capability that can be used to exchange data between the phone 32 ′ and an interrogation device.
- the mobile device 32 ′ is capable of communicating and transferring data and/or control instructions via both cellular network and near field communications capability.
- the mobile device 32 ′ may also include a processor 32 ( c ) (e.g., a microprocessor) for processing the functions of the mobile device 32 ′ and a display 32 ( d ) to allow a consumer to see phone numbers and other information and messages.
- the mobile device 32 ′ may further include input elements 32 ( e ) to allow a consumer to input information into the device, a speaker 32 ( f ) to allow the consumer to hear voice communication, music, etc., and a microphone 32 ( i ) to allow the consumer to transmit her voice through the mobile device 32 ′.
- the mobile device 32 ′ may also include an antenna 32 ( a ) for wireless data transfer (e.g., data transmission).
- FIG. 2( b ) shows a payment card 32 ′′, which may include a magnetic stripe 32 ( n ) on a plastic body 32 ( m ). It may also have an embossed region 32 ( p ) with information such as the cardholder's name, as well as a contactless element 32 ( o ) for contactless communication.
- the contactless element 32 ( o ) may have the same or different features as the contactless element 32 ( g ) described above.
- FIG. 3 shows a block diagram of an access device 34 according to an embodiment of the invention.
- the access device 34 comprises a processor 34 ( c ) operatively coupled to a computer readable medium 32 ( d ) (e.g., one or more memory chips, etc.), input elements 32 ( b ) such as buttons or the like, a reader 32 ( a ) (e.g., a contactless reader, a magnetic stripe reader, etc.), an output device 32 ( e ) (e.g., a display, a speaker, etc.) and a network interface 32 ( f ).
- a computer readable medium 32 e.g., one or more memory chips, etc.
- input elements 32 ( b ) such as buttons or the like
- a reader 32 ( a ) e.g., a contactless reader, a magnetic stripe reader, etc.
- an output device 32 ( e ) e.g., a display, a speaker, etc.
- f
- the computer readable medium may comprise various software modules, such as a registration module 601 to determine if a mobile device in communication with the access device has been enrolled and to register the mobile device.
- an authorization module 602 may authorize the transaction, by generating an authorization request message.
- the authorization request message may contain data, including details of the purchase (e.g., purchase amount), which are determined by a purchase details module 606 .
- To secure the transmission of the authorization request message it may be encrypted by an encryption module 604 with security keys.
- a security key management module 605 may manage and store both private and public keys.
- the computer readable medium 34 ( d ) of the access device 34 may also comprise a digital certificate management module 603 to manage and store digital certificates for security and verification purposes.
- FIG. 5 shows a block diagram showing some elements of a payment processing network 26 according to an embodiment of the invention.
- the payment processing network 26 may comprise a server computer 700 , comprising a processor 26 ( c ) and a computer readable medium 26 ( d ).
- the computer readable medium 26 ( d ) may comprise software modules containing code executable by the processor 26 ( c ) to perform exemplary tasks shown in FIG. 2 .
- the software modules may include a registration module 701 to manage enrolling mobile devices to be registered to conduct transactions with access devices at merchant locations.
- the payment processing network 26 may also comprise a payment account database 26 ( a ) and a mobile device identifier database 26 ( b ) accessed by the processor 26 ( c ).
- the payment account database 26 ( a ) may store data associated with a plurality of payment accounts associated with a plurality of payment cards.
- the payment accounts may also be associated with a plurality of mobile devices, and the mobile device identifiers may be stored in the mobile device identifier database 26 ( b ). These databases may be used during the enrollment process of registering mobile devices to conduct transactions with access devices at merchant locations.
- the payment processing network 26 may generate a verification token using a verification token management module 702 .
- the verification token may be electronically transmitted to the mobile device. All transmissions received and transmitted, including authorization request messages, authorization response messages, and verification tokens, may be encrypted by an encryption module 704 using security keys.
- a security key management module 705 may manage and store both private and public keys.
- the computer readable medium 26 ( d ) of the payment processing network 26 may also comprise a digital certificate management module 703 to manage and store digital certificates for security and verification purposes.
- a processing fees module 707 may also be used to calculate fees associated with transactions, and can adjust fees based upon whether certain transactions are identified as card present or card not present transactions.
- the server computer 700 of the payment processing network 26 may communicate with hardware, such as a transaction gateway interface 26 ( e ) and a network interface 26 ( f ).
- the transaction gateway interface 26 ( e ) allows the payment processing network 26 to electronically receive authorization request messages and electronically transmit authorization response messages to other entities, such as an access device at a merchant, an issuer, an acquirer, or any other entity involved in the transaction.
- the network interface 26 ( f ) allows the payment processing network 26 to connect to a telecommunications network, the Internet, or any other suitable network to electronically communicate with other entities.
- FIG. 15 The various participants and elements in FIG. 1 may operate one or more computer apparatuses (e.g., a server computer) to facilitate the functions described herein. Any of the elements in FIG. 1 may use any suitable number of subsystems to facilitate the functions described herein. Examples of such subsystems or components are shown in FIG. 15 .
- the subsystems shown in FIG. 15 are interconnected via a system bus 775 . Additional subsystems such as a printer 774 , keyboard 778 , fixed disk 779 (or other memory comprising computer readable media), monitor 776 , which is coupled to display adapter 782 , and others are shown.
- Peripherals and input/output (I/O) devices which couple to I/O controller 771 , can be connected to the computer system by any number of means known in the art, such as serial port 777 .
- serial port 777 or external interface 781 can be used to connect the computer apparatus to a wide area network such as the Internet, a mouse input device, or a scanner.
- the interconnection via system bus allows the central processor 773 to communicate with each subsystem and to control the execution of instructions from system memory 772 or the fixed disk 779 , as well as the exchange of information between subsystems.
- the system memory 772 and/or the fixed disk 779 may embody a computer readable medium.
- Embodiments of the invention can allow a consumer to enroll in a program (such as a program to load a verification token on a phone, rewards program, alerts program, or other program) using an access device (e.g., a POS terminal) at a merchant.
- a program such as a program to load a verification token on a phone, rewards program, alerts program, or other program
- an access device e.g., a POS terminal
- the consumer 30 can use a payment card (e.g., payment card 32 - 2 ) to interact with the access device 34 (step 202 ).
- Payment data e.g., an account number, expiration date, service code, etc.
- the access device 34 can prompt the user to enter at least his phone number (and other information such as your device ID, e-mail address, etc.) to enroll his phone (e.g., portable mobile device 32 - 1 ) as a payment device (step 204 ).
- the consumer 30 may log onto a computer and may go to a host site or portal (e.g., iTunesTM) run by the merchant computer 22 .
- the consumer's information e.g., the phone number, e-mail address, birthday, etc.
- the access device 34 can then generate a first authorization request message with the phone number and payment card information (e.g., an account number, expiration date, etc.), and this can be sent to the payment processing network 26 (step 206 ).
- the phone number and card number can then be stored and linked in a database in the payment processing network 26 .
- the payment processing network 26 can then use this information to communicate with the consumer 30 .
- an alert message may be sent to the mobile device 32 - 1 of the consumer 30 informing the consumer 30 that he has been enrolled.
- the payment processing network 26 (or a server computer residing therein) can then send a verification token back to the phone (step 210 ). This may occur in any suitable manner.
- the payment processing network 26 can send the verification token to the phone (portable consumer device 32 - 1 ) via the acquirer 24 , merchant 22 , and access device 34 .
- it can send the verification token to the phone (portable consumer device 32 - 1 ) via the telecommunications gateway 60 .
- the verification token (which may take any suitable form including one or more characters, and which may be static or dynamic) may be stored in a memory in the phone. In some cases, the verification token is applicable only at a single merchant, or a single type of merchant. In other cases, it may be used at many different merchants.
- the mobile device can be used to conduct payment transactions like the payment card. For example, in a subsequent purchase transaction, the mobile device can be used at the access device 34 or some other access device at the same or different merchant (step 212 ).
- the mobile device can have a contactless element (as described above), which can then pass the token and other payment credentials (e.g., the account number) to the access device 34 (step 214 ).
- the access device 34 can then send a second authorization request message with the token to the payment processing network 26 (step 216 ).
- the mobile device identifier e.g., mobile phone number
- a purchase price e.g., the products purchased—SKU numbers
- purchase details e.g., the products purchased—SKU numbers
- the payment processing network 26 analyzes the authorization request message to determine the presence of the token (step 220 ). If the verification token is present, then “card present” processing is performed (step 222 ), as opposed to “card not present” processing.
- the payment processing network 220 can perform processing as if the card was present.
- the merchant 22 may obtain lower fees (e.g., interchange rate) and may also get chargeback protection. Such benefits would not be present in card not present type of transaction.
- the authorization request message is sent to the issuer 28 (step 224 ) and the issuer decides whether or not to approve the authorization request message. After it decides, it sends an authorization response message back to the access device 34 via the payment processing network 34 and the acquirer 24 (step 226 ).
- a clearing process is a process of exchanging financial details between and acquirer and an issuer to facilitate posting to a consumer's account and reconciliation of the consumer's settlement position. Clearing and settlement can occur simultaneously.
- FIGS. 7-22 Other methods according to embodiments of the invention are shown in FIGS. 7-22 .
- the consumer 30 may acquire a mobile device 32 , such as a mobile phone (e.g., an iPhoneTM).
- the consumer 30 may visit a merchant host site (e.g., iTunesTM), which may be a website, as shown in step S 2 , to create an account with the merchant website 22 ( a ) (e.g., an iTunesTM account).
- the consumer 30 may provide payment information (e.g., a payment card number), a username, a password, security questions to retrieve merchant website account information, and other information to the merchant website 22 ( a ).
- Other merchant website account information may include contact information (e.g., email address, home address, mobile phone number) and settings (e.g., notification preferences).
- FIG. 16 shows a user interface 1600 that can be associated with steps S 2 and S 3 (described below).
- the user interface 1600 may comprise an area to provide consumer information such as a username input region 1602 , a password input region 1604 , and a phone number input region 1614 .
- the user interface 1600 may also comprise a payment information area comprising a name input region 1606 , a payment card number input region 1608 , a card verification value input region 1610 , and a billing address input region 1612 .
- a selection box 1616 may also be provided to allow the consumer 30 to confirm enrollment in the program.
- the merchant website 22 ( a ) may ask the consumer 30 whether the consumer would like to use the merchant website account at a merchant access device 34 at a merchant location.
- the box 1616 may be selected by the consumer 30 .
- the merchant website 22 ( a ) electronically transmits a request to the merchant server 22 for a retail application download to the consumer's mobile device 32 , as shown in step S 5 .
- the request may be electronically transmitted from the merchant website 22 ( a ), displayed to the consumer 30 , to the merchant server 22 using a transport layer security protocol similar to Open SSL.
- the merchant website 22 ( a ) may use a secure http session for securely logging and transmitting the consumer 30 information to prevent eavesdropping and tampering of the consumer 30 information.
- the merchant server 22 electronically transmits a registration request to a transaction gateway 23 .
- the registration request may include any suitable information including any suitable combination of the following: a PAN (Primary Account Number) associated with a portable consumer device (e.g., payment card), a ZIP code, a mobile device identifier (e.g., mobile phone number or phone number alias), an electronic serial number (ESN), an International Mobile Equipment Identity (IMEI), a digital certificate, an application identifier, and merchant website account information (e.g., username, password, security questions).
- PAN Primary Account Number
- a portable consumer device e.g., payment card
- ZIP code e.g., a mobile device identifier
- ESN electronic serial number
- IMEI International Mobile Equipment Identity
- digital certificate e.g., an application identifier
- merchant website account information e.g., username, password, security questions.
- the transaction gateway 23 may create an AVS (account validation service) request and electronically transmits the AVS request to a payment processing network 26 (e.g., VisaNet).
- AVS account validation service
- the AVS request may include data from the registration request, such as the mobile device identifier, PAN, and merchant website account information.
- step S 8 the payment processing network 26 validates the account.
- the registration module 701 of the computer readable medium 26 ( d ) of the payment processing network 26 may perform the account validation, including associating the mobile device identifier, payment card, PAN, and other information with the account.
- the mobile device identifier may be stored in a mobile device identifier database 26 ( b ).
- the payment card, or other portable consumer device may be stored in a portable consumer device database 26 ( a ).
- the payment processing network 26 may generate an activation code for the retail application for the mobile device.
- the activation code may be generated by any suitable algorithm or a random generator.
- the activation code may be in any suitable form including, but not limited to, a sequence of letters, numbers, or a combination of both. It may also have a predetermined length.
- the activation code may be a two part activation code, with a first part and a second part used for verification.
- the activation code may be a 16-digit number, where the first part of the activation code may be the first 8 digits, and the second part of the activation code may be the latter 8 digits.
- the first part of the activation code may be electronically transmitted to the merchant server 22 .
- the second part of the activation code may be retained at the payment processing network 26 or transaction gateway 23 .
- the first part of the activation code e.g., first 8 digits
- the second part of the activation code e.g., latter 8 digits
- the first part of the activation code can form part or all of a verification token, which can be used to allow the mobile device 32 - 1 to be used as a device which can be used as a card present type of device.
- the payment processing network 26 may retain a hash (SHA1, SHA-256, MD5, etc.) of the activation code along with the second part of the activation code.
- the first part of the activation code may be discarded by the payment processing network 26 after electronically transmitting it to the merchant server 22 .
- the first part of the activation code (provided by the mobile device 32 ) and the second part of the activation code (provided by the payment processing network 26 ) are concatenated and hashed.
- the payment processing network may compare the newly generated hash of the concatenated activation code against the stored hash of the original activation code on the payment processing network 26 .
- the bifurcation of the activation code and separate storage of the two parts of the activation code requires authentication from both the consumer and the payment processing network 26 before the transaction can be authorized, adding an additional layer of security. Furthermore, storage of the two parts of the activation codes in separate geographic locations (first part on the mobile device 32 - 1 , and second part on the payment processing network 26 ) enables better security, since the transactions may only be authorized when the two parts of the activation code exist together.
- the merchant server 22 prepares the retail application for download, including the first part of the activation code from the transaction gateway 23 .
- the merchant server 22 may sign a consumer digital certificate including a unique identifier for the consumer (e.g., consumer account number, consumer phone number, serial number, etc.) and the mobile device 32 - 1 (e.g., UDID).
- the consumer digital certificate is then electronically transmitted to the consumer's mobile device 32 , where it may be stored on a memory on the mobile device 32 , including the public key.
- a digital certificate may be issued by a certificate authority (e.g., VeriSignTM) and may include a public key associated with the merchant 22 that is also transmitted to the mobile device 32 - 1 .
- the digital certificate from the certificate authority allows the mobile device 32 - 1 to attest the identity of the merchant server 22 signing the consumer digital certificate.
- step S 11 the consumer 30 downloads the retail application to the mobile device 32 - 1 .
- the retail application may be customized for different mobile devices and operating systems.
- the download may also include the first part of the activation code from the transaction gateway 23 .
- the digital certificate signed by the merchant server 22 may also be included in the download of the retail application to verify the identity of the merchant server 22 .
- the mobile device 32 - 1 may authenticate the download before installing the application and the digital certificate on the mobile device 32 - 1 .
- the mobile device 32 - 1 may have access to the public key of the merchant server 22 through a digital certificate issued by the certificate authority (e.g., VeriSign).
- the certificate authority e.g., VeriSign
- the mobile device 32 - 1 may authenticate that the digital certificate is signed by the merchant server 22 by using the public key attributed to the merchant server 22 .
- the mobile device 32 - 1 may also match the unique identifier for the mobile device 32 - 1 in the digital certificate against the mobile device's 32 unique identifier stored internally. Once the mobile device 32 - 1 authenticates the digital certificate and verifies that the digital certificate was issued for that particular device, the application, digital certificate and any associated data may be installed on the mobile device 32 - 1 .
- a message 1804 may be displayed on an interface 1800 on the consumer's mobile device 32 - 1 .
- the message may inform the consumer 30 to present the mobile device 32 - 1 at a merchant access device 34 at a merchant location to complete enrollment.
- FIG. 18 also shows an icon 1802 for the retail application.
- the message may be displayed only when a wireless communication protocol such as BluetoothTM is disabled when the retail application is launched. If the protocol is disabled, the retail application informs the consumer 30 that the protocol will be automatically enabled when using the mobile device 32 - 1 to conduct a transaction at a merchant access device 34 at a merchant location.
- a wireless communication protocol such as BluetoothTM
- a confirmation message may be electronically transmitted to the merchant server 22 .
- the confirmation message may indicate that the retail application download to the mobile device 32 - 1 was successful and complete.
- the confirmation message may be forwarded from the merchant server 22 to the transactions gateway 23 .
- step S 14 of the enrollment process the consumer 30 may visit a merchant access device 34 at a merchant location.
- the merchant location may be a physical store and the merchant access device 34 may be a kiosk that the consumer 30 can interact with.
- FIG. 17 shows an exemplary user interface 1700 that can be associated with step S 15 , described below.
- the user interface 1700 may be displayed on an access device at a merchant location.
- the user interface 1700 may comprise an area to request information such as a username input region 1704 , and a password input region 1704 , corresponding to a merchant website account username and password.
- the user interface 1700 may comprise a button 1702 to activate a connection between the mobile device 32 - 1 and the access device 34 .
- step S 15 the consumer 30 may be requested to provide the merchant website account login information at the merchant access device 34 (as shown in FIG. 17 ).
- the merchant access device 34 may also request the consumer 30 to present the portable consumer device (e.g., payment card) associated with the merchant website account of the consumer 30 .
- the consumer 30 may provide different types of information to the access device 34 .
- Such information may include an identifier (e.g., a phone number) for a mobile device, and other suitable information.
- the merchant website account login information e.g., username, password, mobile device identifier
- the consumer 30 may also present the portable consumer device to interact with the merchant access device 34 by swiping, tapping, or other suitable means of communicating the portable consumer device with the merchant access device 34 .
- payment data e.g., an account number, expiration date, service code, CVV, redundancy error code, etc.
- the merchant access device 34 electronically receives payment data associated with the portable consumer device.
- the payment data is similar to the information stored on a magnetic strip of a payment card. Receipt of the payment data by the access device 34 may increase the confidence that the portable consumer device is physically present at the time of enrollment before binding of the consumer's account to the portable consumer device by the payment processing network 26 . Including the payment data associated with a portable consumer device 32 in the transaction helps subvert attacks involving enrollment of mobile devices using stolen account information.
- the payment data and merchant website account information (e.g., username, password, mobile device identifier) provided by the consumer 30 at the merchant access device 34 may then be electronically transmitted to the merchant server 22 .
- a zero dollar authorization request is generated and electronically transmitted (sent) to the payment processing network 26 .
- the payment processing network 26 may then forward the zero authorization request message to an issuer (not shown).
- the zero dollar authorization request message may include the account identifier associated with the portable consumer device (e.g., a payment card), the mobile device identifier, or other data to verify that the portable consumer device is in good standing.
- step S 19 when the account identifier associated with the portable consumer device has been verified, the payment processing network 26 may receive an authorization response message from the issuer (not shown). The payment processing network 26 electronically transmits a zero dollar authorization response to the transaction gateway 23 .
- step S 20 the transaction gateway 23 receives the zero dollar authorization response in step S 20 , and if the zero dollar authorization response is positive, the transaction gateway 23 binds the account identifier associated with the portable consumer device (e.g., PAN) to the mobile device 32 - 1 .
- An enrollment request is generated by the transaction gateway and electronically transmitted to the payment processing network 26 , so that the consumer 30 may use the merchant website account, including the mobile device 32 - 1 that is associated with the PAN, to conduct transactions.
- step S 21 after the enrollment request has been received by the payment processing network 26 , the consumer's merchant website account is now enrolled and the consumer's mobile device 32 - 1 is bound to the PAN associated with the portable consumer device.
- the positive zero dollar authorization response message and/or positive authorization response message are electronically transmitted from the payment processing network 26 to the merchant server 22 .
- step S 22 the positive authorization response message is electronically forwarded to the merchant access device 34 .
- the merchant access device 34 may display to the consumer 30 a message informing the consumer 30 of the positive authorization response.
- the merchant access device 34 may communicate with the consumer's mobile device 32 - 1 , and the consumer 30 may receive a notification on the mobile device 32 - 1 .
- the notification may be a message 1904 , informing the consumer 30 that the merchant website account is now enrolled and enabled to conduct purchases at the merchant access device 34 at the merchant location using the mobile device 32 - 1 .
- the transaction gateway 23 may electronically transmit a notification to the consumer 30 .
- the notification from the transaction gateway 23 may notify the consumer 30 that the account identifier (e.g., PAN) associated with the portable consumer device recorded in the consumer's 30 merchant website account, including the consumer's mobile device 32 , may be used for future purchase transactions at the merchant access device 34 at the merchant location.
- PAN account identifier
- FIGS. 11-14 illustrate an exemplary method of conducting a purchase transaction after enrollment, using a mobile device 32 - 1 at a merchant access device at a merchant location according to an embodiment of the invention.
- the mobile device 32 - 1 may directly communicate with the payment processing network 26 through the transaction gateway 23 to retrieve a dynamic card verification value (dCVV 2 ) that is specific to that particular purchase transaction (detailed in steps P 8 -P 11 ).
- the mobile device 32 - 1 uses the dCVV 2 received from the payment processing network 26 to complete the purchase transaction with the merchant 22 .
- the use of a dCVV 2 value in embodiments of the invention is optional.
- step P 1 the consumer 30 goes to the merchant location to select an item for purchase.
- a merchant associate may assist the consumer 30 by scanning the item at the merchant access device 34 .
- the merchant associate may ask the consumer whether he wants to conduct the purchase transaction using the mobile device 32 - 1 .
- the mobile device 32 - 1 may have an associated mobile device identifier recorded with the consumer's 30 merchant website account.
- the merchant associate may ask the consumer 30 , or in other embodiments, the merchant access device 34 may prompt the consumer 30 on a display.
- step P 3 the consumer 30 may respond positively.
- the consumer may respond orally to the merchant associate, or by interacting with the merchant access device 34 to confirm that the consumer 30 wishes to conduct the purchase transaction using the mobile device 32 - 1 .
- the consumer 30 may open the retail application on the mobile device 32 - 1 .
- the consumer 30 may click on the retail application icon 1802 .
- the consumer 30 may be prompted to enter the merchant website login information (e.g., username and password) to access the retail application.
- the merchant website login information e.g., username and password
- the consumer 30 is able to log into the merchant website account.
- FIG. 20 shows an exemplary user interface 2000 on a mobile device 32 - 1 .
- the user interface 2000 may comprise an area requesting information, such as a username input region 2002 and a password input region 2004 , corresponding to the consumer's merchant website account.
- the consumer 30 may enter the username and password created and used to login into the consumer's merchant website account.
- the consumer 30 may use the mobile device 32 - 1 to interact with the merchant access device 34 , by tapping, holding the mobile device 32 - 1 in close proximity to the merchant access device 34 .
- the mobile device 32 - 1 electronically transmits, via BluetoothTM or other wireless network protocol, the consumer digital certificate to the merchant access device 34 .
- the consumer digital certificate may be associated with the mobile device 32 , and may be stored on the mobile device 32 - 1 . Referring to FIG. 8 , step S 10 , the consumer digital certificate was signed by the merchant server 22 and issued to the consumer 30 in the retail application download.
- the consumer digital certificate may contain the consumer's unique identifier (e.g., serial number) and may be encrypted by the public key stored on the mobile device 32 - 1 prior to transmission.
- step P 6 the merchant access device 34 electronically receives the consumer digital certificate and verifies whether the consumer's digital certificate is valid.
- a private key associated with the public key stored on the mobile device 32 - 1 may be used to decrypt the consumer digital certificate, thus verifying that the consumer's digital certificate is valid.
- the private key may be stored on a memory on the merchant access device 34 .
- the merchant access device 34 then encrypts with the consumer's public key and digitally signs with the merchant access device's private key, transaction data (e.g., item, SKU, amount) to be electronically transmitted to the mobile device 32 - 1 .
- the merchant access device 34 electronically communicates with the mobile device 32 - 1 .
- a merchant access device certificate may be issued by a certificate authority (e.g., VeriSignTM).
- the merchant access device 34 may encrypt and digitally sign the transaction data (e.g., item, SKU, amount) as discussed in step P 6 .
- the merchant access device certificate, as well as the encrypted and signed transaction data, may be electronically transmitted from the merchant access device 34 to the retail application on the mobile device 32 - 1 . Only the mobile device 32 - 1 can decrypt the electronically transmitted transaction data using the private key stored internally in the mobile device's 32 - 1 memory.
- the mobile device 32 - 1 has the public key associated with the merchant access device's 34 private key.
- the mobile device 32 - 1 can verify the authenticity of the transaction data electronically transmitted from the merchant access device 34 using the public key associated with the merchant access device 34 . Therefore, the consumer access device 32 can verify the confidentiality, authenticity and integrity of the transmitted transaction data from the merchant access device 34 .
- the merchant access device 34 and the mobile device 32 - 1 may communicate through BluetoothTM or other suitable wireless communications means.
- the transaction data may include a transaction identifier, descriptions of the purchased items, SKU's associated with the items, amount, tax, and the total purchase price.
- the transaction data may also include a nonce and a merchant access device 34 timestamp to be signed by the consumer's digital certificate. The nonce and the merchant access device 34 timestamp are used in step P 13 and P 14 to maintain confidentiality of the data transmitted and to secure the transaction against replay attacks (as further discussed in reference to step P 13 ).
- FIG. 21 shows an exemplary user interface 2100 on a mobile device 32 - 1 .
- the user interface 2100 may comprise a viewing area displaying transaction data 2102 .
- the transaction data displayed in viewing area 2102 includes a transaction ID, date, timestamp, terminal ID, items purchased (including quantity, SKU's, price), subtotal, tax, and total amount.
- the consumer's merchant account username and mobile phone number may also be displayed in viewing area 2102 .
- the user interface 2100 may also comprise an “OK” button 2104 for the consumer 30 to approve and continue the purchase transaction, or a “No” button 2106 to cancel the purchase transaction.
- a request for a dynamic card verification value may be electronically transmitted to the transaction gateway 23 .
- the dCW 2 request may also include the mobile device identifier (e.g., mobile phone number), transaction data (e.g., transaction identifier, items, amount), an access device (e.g., terminal) identifier, the retail application identifier, the first part of the activation code (i.e., verification token downloaded via the retail application during enrollment, see S 10 of FIG. 8 ), the consumer digital certificate, and a timestamp.
- the mobile device 32 - 1 verifies the certificate chain of trust, then verifies the signature of the encrypted transaction data, and decrypts the transaction data.
- the decrypted transaction data may be displayed on the mobile device 32 - 1 .
- the transaction data (e.g., transaction identifier), nonce, and timestamp sent by the merchant access device 34 may be hashed and signed by the consumer's private key stored on the mobile device 32 - 2 .
- the transaction gateway 23 electronically receives the dCVV 2 request.
- the transaction gateway 23 may use the retail application identifier, the first part of the activation code, the mobile device identifier or other data to determine the associated merchant website account.
- the transaction gateway 23 may communicate with the payment processing network 26 to retrieve records of mobile device identifiers and portable consumer device identifiers stored in the mobile device identifier database (see 26 ( c ) of FIG. 6 ) and the portable consumer device database (see 26 ( d ) of FIG. 6 ), respectively.
- step P 9 the transaction gateway electronically submits an account validation service (AVS) request to the payment processing network 26 to validate the determined consumer's merchant website account and the associated portable consumer device.
- the payment processing network 26 may check the associated account standing and provide a dCVV 2 .
- a dCVV 2 may be determined using an algorithm or a random number generator.
- the payment processing network 26 may also check if a valid first part of the activation code is submitted.
- the payment processing network 26 may concatenate the first part of the activation code electronically received with the second part of the activation code electronically stored in the payment processing network (during step S 9 ) and hash the concatenated value.
- the payment processing network 26 may compare the newly generated hash of the concatenated activation code against the stored hash of the original activation code on the payment processing network 26 (stored during step S 9 ). If the newly generated hash of the concatenated activation code matches the stored hash of the original activation code on the payment processing network 26 , then the transaction may be authorized.
- step P 10 the payment processing network 26 electronically transmits an AVS response message back to the transaction gateway 23 . If the AVS results are positive, the AVS response message may include the dCVV 2 .
- the transaction gateway 23 may use the consumer digital certificate to encrypt the dCVV 2 and electronically transmit the encrypted dCVV 2 to the mobile device 32 - 1 retail application.
- the AVS response associated with the mobile device 32 - 1 may be recorded at the transaction gateway 23 .
- step P 12 the consumer 30 may be prompted by the retail application on the mobile device 32 - 1 to approve the purchase transaction.
- the consumer 30 may click the “OK” button 2104 displayed via the retail application on the mobile device to approve and continue with the purchase transaction.
- step P 13 through the retail application on the mobile device 32 , the consumer's merchant website account information (e.g., username), nonce, and timestamp sent by the merchant access device 34 , in step P 7 , are used to construct a hash-based message authentication code (HMAC).
- HMAC hash-based message authentication code
- the nonce and the merchant access device 34 timestamp are encrypted along with other transaction data when electronically transmitted from the merchant access device 34 to the mobile device 32 - 1 .
- the confidentiality of the nonce and the merchant access device 34 timestamp is used to provide secure communication between the mobile device 32 - 1 and the merchant access device 34 .
- the nonce may be unique per transaction and per communication allowing a defense against replay attacks.
- the merchant access device 34 may discard that message and log a potential attack on the system.
- the merchant access device 34 timestamp may allow the merchant access device to expire transaction data associated with that particular merchant access device 34 timestamp and discard any messages associated with that merchant access device 34 timestamp if a response for the transaction is not received from the mobile device 32 - 1 in a pre-determined window of time.
- the encrypted dCVV 2 received by the mobile device 32 - 1 from the transaction gateway 23 , in step P 11 is also decrypted by the mobile device 32 - 1 using the private key associated with the consumer digital certificate.
- the dCVV 2 and the HMAC are electronically transmitted to the merchant access device 34 from the retail application of the mobile device 32 - 1 .
- the merchant access device 34 may verify the signature of the transmitted dCVV 2 and HMAC, by using the private key stored on the merchant access device 34 . Then, the merchant access device 34 electronically transmits the decrypted HMAC to the merchant server 22 for verification.
- step P 15 the merchant server 22 electronically transmits a HMAC validation response to the merchant access device 34 . If the signature and the HMAC are valid, the merchant access device 34 is instructed to generate an authorization request message.
- the authorization request message may include a serial number associated with the consumer digital certificate, verification value received by the mobile device 32 - 1 , and verification token.
- the merchant access device 34 electronically transmits the authorization request message, including the associated portable consumer device, the transaction data, verification value received by the mobile device 32 - 1 , verification token (i.e., first part of the activation code), and the consumer digital certificate serial number.
- the associated portable consumer device may be determined by the merchant access device 34 communicating with the merchant server 22 to electronically search for the associated merchant website account information, look up the associated mobile device, and retrieve the associated portable consumer device.
- step P 17 the payment processing network identifies the portable consumer device as enrolled and bound to the mobile device.
- the dCVV 2 may then be validated, and the payment processing network may electronically transmit the authorization request, including the consumer digital certificate's serial number to an issuer for authorization.
- the payment processing network may electronically transmit the authorization request, including the consumer digital certificate's serial number to an issuer for authorization.
- step P 18 the payment processing network 26 electronically receives an authorization response from the issuer.
- the authorization response is electronically transmitted to the merchant access device 34 .
- step P 19 the merchant access device 34 informs the merchant associate that the purchase transaction was approved.
- the merchant access device 34 may encrypt and sign a digital receipt.
- the digital receipt may be electronically transmitted to the mobile device 32 , thus completing the purchase transaction.
- a message 2202 may be displayed to inform the consumer 30 that the purchase transaction was approved and is complete.
- the user interface 220 may also include an area 2204 displaying the digital receipt or other transaction data.
- Embodiments of the invention have a number of advantages. For example, mobile device manufacturers do not need to modify their mobile devices with special security or near-field communication chips, merchants do not need to modify their access devices, and other existing infrastructure elements do not need to be changed in a significant manner in order to obtain card present types of transactions for devices that would not traditional satisfy card present types of transaction standards.
- Embodiments of the invention allow payments to be made with a mobile device (e.g., a phone) as a “card present” type of transaction, even though the mobile device does not have the type of chip that would normally be required for a card present transaction.
- the consumer may use the mobile device and does not need to present a portable consumer device (e.g., payment card) normally required to conduct the “card present” type of transaction, reducing the number of items or devices the consumer needs to carry.
- a portable consumer device e.g., payment card
- embodiments of the invention allow the transaction to be processed as a “card present” transaction, eliminating fees or interchange rates often associated with “card not present” transactions.
- the merchant may also operate a Website that has an account that is associated with the mobile device, and that requires a password for access. This password can also be used to access a verification token when enrollment of the phone with the payment processing network can takes place at the access device.
- the enrollment of the consumer's mobile device can alternatively take place after a consumer swipes his portable consumer device (e.g., payment card) in an actual transaction. That is, for example, after a payment card is swiped in a transaction, the consumer may be asked to enroll in a particular program and enter a mobile device identifier (e.g., phone number).
- a mobile device identifier e.g., phone number
- a dynamic or static authentication code can be sent to the user's phone.
- This code can then be passed from the consumer's phone to the access device (e.g., via an RF link, via keyboard entry, or via some other communication link) in the payment process, and this code can be sent in the authorization request message back to the payment processing network.
- This is yet another way to authenticate the consumer. This can show the payment processing network that this transaction is authentic and the transaction may be eligible for a lower interchange rate.
- embodiments of the invention can provide customer registration and activation for a card present processing program. It can provide the merchant with services for registration of the consumer to participate in the card present program including in-store consumer registration, capture of consumer factors of identification (e.g., PAN, email, legal name, phone IMIS, MSIDN, etc.), invocation of “qualification evaluation” to confirm the consumer is qualified for the card present processing program, real-time “instant” activation of qualified consumers for the ‘CP’ program, and reporting and analytics on consumer registration and activation metrics.
- identification e.g., PAN, email, legal name, phone IMIS, MSIDN, etc.
- TID Transaction ID
- PAN Account Number
- MID Merchant ID
- iv store ID
- Embodiments of the invention may also provide standards and regulatory compliance. Embodiments of the invention may provide secure storage of PAN and transaction data while providing the merchant with a secure token so that the merchant can access data for analytics without compromising personal private information or account number information. Embodiments of the invention may also provide for multi-factor tokenization to enable consumer analytics across payment products, stores, and geographies. Embodiments of the invention may also be used to manage dispute resolution (approach for managing disputes, such as charge backs and refunds, as card present transactions for electronic music purchases).
- Embodiments of the invention are not limited to the above-described embodiments.
- functional blocks are shown for an issuer, payment processing network, and acquirer, some entities perform all of these functions and may be included in embodiments of invention.
- any of the software components or functions described in this application may be implemented as software code to be executed by a processor using any suitable computer language such as, for example, Java, C++ or Perl using, for example, conventional or object-oriented techniques.
- the software code may be stored as a series of instructions, or commands on a computer readable medium, such as a random access memory (RAM), a read only memory (ROM), a magnetic medium such as a hard-drive or a floppy disk, or an optical medium such as a CD-ROM.
- RAM random access memory
- ROM read only memory
- magnetic medium such as a hard-drive or a floppy disk
- optical medium such as a CD-ROM.
- Any such computer readable medium may reside on or within a single computational apparatus, and may be present on or within different computational apparatuses within a system or network.
Landscapes
- Business, Economics & Management (AREA)
- Accounting & Taxation (AREA)
- Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Physics & Mathematics (AREA)
- General Business, Economics & Management (AREA)
- Strategic Management (AREA)
- Finance (AREA)
- Theoretical Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
Priority Applications (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US13/237,840 US20120136796A1 (en) | 2010-09-21 | 2011-09-20 | Device Enrollment System and Method |
US13/401,121 US8793192B2 (en) | 2010-09-21 | 2012-02-21 | Device enrollment system and method |
US15/973,410 US11410142B2 (en) | 2010-09-21 | 2018-05-07 | Device enrollment system and method |
US17/858,934 US11880815B2 (en) | 2010-09-21 | 2022-07-06 | Device enrollment system and method |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US38512410P | 2010-09-21 | 2010-09-21 | |
US13/237,840 US20120136796A1 (en) | 2010-09-21 | 2011-09-20 | Device Enrollment System and Method |
Related Child Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US13/401,121 Continuation US8793192B2 (en) | 2010-09-21 | 2012-02-21 | Device enrollment system and method |
US15/973,410 Division US11410142B2 (en) | 2010-09-21 | 2018-05-07 | Device enrollment system and method |
Publications (1)
Publication Number | Publication Date |
---|---|
US20120136796A1 true US20120136796A1 (en) | 2012-05-31 |
Family
ID=45874156
Family Applications (4)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US13/237,840 Abandoned US20120136796A1 (en) | 2010-09-21 | 2011-09-20 | Device Enrollment System and Method |
US13/401,121 Active 2032-02-05 US8793192B2 (en) | 2010-09-21 | 2012-02-21 | Device enrollment system and method |
US15/973,410 Active 2034-10-24 US11410142B2 (en) | 2010-09-21 | 2018-05-07 | Device enrollment system and method |
US17/858,934 Active US11880815B2 (en) | 2010-09-21 | 2022-07-06 | Device enrollment system and method |
Family Applications After (3)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US13/401,121 Active 2032-02-05 US8793192B2 (en) | 2010-09-21 | 2012-02-21 | Device enrollment system and method |
US15/973,410 Active 2034-10-24 US11410142B2 (en) | 2010-09-21 | 2018-05-07 | Device enrollment system and method |
US17/858,934 Active US11880815B2 (en) | 2010-09-21 | 2022-07-06 | Device enrollment system and method |
Country Status (2)
Country | Link |
---|---|
US (4) | US20120136796A1 (fr) |
WO (1) | WO2012040377A1 (fr) |
Cited By (46)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20120226611A1 (en) * | 2011-03-01 | 2012-09-06 | Nimish Radia | Method and system for conducting a monetary transaction using a mobile communication device |
US20120310837A1 (en) * | 2011-06-03 | 2012-12-06 | Holden Kevin Rigby | Method and System For Providing Authenticated Access to Secure Information |
US20130191883A1 (en) * | 2012-01-20 | 2013-07-25 | Tien-Chun Tung | Device network sharing method and device controlling method thereof |
US20130212017A1 (en) * | 2012-02-14 | 2013-08-15 | N.B. Development Services Inc. | Transaction system and method of conducting a transaction |
US20140019365A1 (en) * | 2012-07-12 | 2014-01-16 | Google Inc. | Processing payment information for online orders at a local merchant's point of sale via direct payment |
US20140074633A1 (en) * | 2012-02-14 | 2014-03-13 | Boku, Inc. | Transaction authentication with a variable-type user-stored account identifier |
WO2014093390A1 (fr) * | 2012-12-10 | 2014-06-19 | Visa International Service Association | Authentification de transactions à distance à l'aide d'un dispositif mobile |
US20140310816A1 (en) * | 2013-04-10 | 2014-10-16 | Dell Products L.P. | Method to Prevent Operating System Digital Product Key Activation Failures |
WO2014186635A1 (fr) * | 2013-05-15 | 2014-11-20 | Visa International Service Association | Concentrateur de tokénisation pour mobile |
WO2015003518A1 (fr) * | 2013-07-11 | 2015-01-15 | 广州广电汇通金融服务有限公司 | Source d'alimentation intelligente et procédé de réalisation d'un paiement mobile l'utilisant |
US20150310434A1 (en) * | 2014-04-29 | 2015-10-29 | Dennis Takchi Cheung | Systems and methods for implementing authentication based on location history |
US20150334564A1 (en) * | 2014-05-15 | 2015-11-19 | Microsoft Corporation | Transparent two-factor authentication via mobile communication device |
US20150339662A1 (en) * | 2014-05-23 | 2015-11-26 | LoopPay Inc. | Systems and methods for linking devices to user accounts |
US20160042341A1 (en) * | 2010-11-11 | 2016-02-11 | Paypal, Inc. | Quick payment using mobile device binding |
US20160080157A1 (en) * | 2014-09-16 | 2016-03-17 | Keypasco Ab | Network authentication method for secure electronic transactions |
US20160080326A1 (en) * | 2014-09-16 | 2016-03-17 | Entersekt, LLC | System and method for secure authentication |
CN105427099A (zh) * | 2014-09-16 | 2016-03-23 | 卡巴斯克 | 安全电子交易的网络认证方法 |
US20160210628A1 (en) * | 2015-01-20 | 2016-07-21 | Keith McGuire | Secure payment processing using authorization request |
US20160260084A1 (en) * | 2015-03-06 | 2016-09-08 | Mastercard International Incorporated | Secure mobile remote payments |
US20160321637A1 (en) * | 2015-04-30 | 2016-11-03 | Kevin Carvalho | Point of sale payment using mobile device and checkout credentials |
US20160366592A1 (en) * | 2014-09-30 | 2016-12-15 | Sap Se | Authorization based on access token |
US20170032362A1 (en) * | 2015-07-31 | 2017-02-02 | Ca, Inc. | Streamlined enrollment of credit cards in mobile wallets |
JP2017512403A (ja) * | 2014-02-11 | 2017-05-18 | イーイノベーションズ ホールディングス ピーティーイー リミテッド | 認証システム及び方法 |
US20180006821A1 (en) * | 2015-02-17 | 2018-01-04 | Visa International Service Association | Token and cryptogram using transaction specific information |
JP2018519577A (ja) * | 2015-05-21 | 2018-07-19 | マスターカード インターナシヨナル インコーポレーテツド | 既存の支払ネットワーク上でブロックチェーンを基礎としたトランザクションを処理する方法及びシステム |
US20180309741A1 (en) * | 2012-02-13 | 2018-10-25 | Schlage Lock Company Llc | Credential management system |
US10282730B2 (en) * | 2014-07-10 | 2019-05-07 | Ingenico Inc. | Method for managing a transaction, corresponding server, computer program product and storage medium |
US20190180275A1 (en) * | 2017-12-13 | 2019-06-13 | Mastercard International Incorporated | Method and system for consumer-initiated transactions using encrypted tokens |
US10366391B2 (en) | 2013-08-06 | 2019-07-30 | Visa International Services Association | Variable authentication process and system |
US20190318382A1 (en) * | 2018-04-11 | 2019-10-17 | Intel Corporation | Secure visual transactions for mobile devices |
US20190362324A1 (en) * | 2012-06-05 | 2019-11-28 | Autoscribe Corporation | Processing A Payment By A Second Computing System From A Payer To A Payee Operating A First Computing System |
US10630669B2 (en) * | 2016-09-09 | 2020-04-21 | Cyphercor Inc. | Method and system for user verification |
WO2020103563A1 (fr) * | 2018-11-22 | 2020-05-28 | 阿里巴巴集团控股有限公司 | Procédé et appareil de paiement pour un dispositif |
CN111415734A (zh) * | 2020-03-20 | 2020-07-14 | 四川南格尔生物科技有限公司 | 一种有源医疗器械的使用期限管理方法 |
US10861019B2 (en) * | 2016-03-18 | 2020-12-08 | Visa International Service Association | Location verification during dynamic data transactions |
US11010759B1 (en) * | 2017-09-12 | 2021-05-18 | Wells Fargo Bank, N.A. | Vendor specific payment account identifier |
US20210201290A1 (en) * | 2019-12-31 | 2021-07-01 | Paypal, Inc. | Geographic location consensus determination |
US11062306B2 (en) | 2013-08-15 | 2021-07-13 | Visa International Service Association | Secure remote payment transaction processing using a secure element |
US11157902B1 (en) * | 2014-10-03 | 2021-10-26 | State Farm Mutual Automobile Insurance Company | Token generation in providing a secure credit card payment service without storing credit card data on merchant servers |
US11163870B2 (en) * | 2017-05-08 | 2021-11-02 | Siemens Aktiengesellschaft | Plant-specific, automated certificate management |
US11392880B2 (en) * | 2014-05-08 | 2022-07-19 | Visa International Service Association | Split shipment processing |
US11461761B2 (en) * | 2014-09-26 | 2022-10-04 | Citycheers Media Corp. | System for conducting transactions independent of point of sale system |
US11710120B2 (en) | 2013-09-20 | 2023-07-25 | Visa International Service Association | Secure remote payment transaction processing including consumer authentication |
US11810095B1 (en) * | 2012-02-19 | 2023-11-07 | Charles Schwab & Co., Inc. | System and method for mobile payments |
US11880815B2 (en) | 2010-09-21 | 2024-01-23 | Visa International Service Association | Device enrollment system and method |
US12039521B1 (en) * | 2021-05-11 | 2024-07-16 | Walgreen Co. | Contactless user identification by digital wallet to retailer point of sale |
Families Citing this family (59)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20140067675A1 (en) * | 2012-09-06 | 2014-03-06 | American Express Travel Related Services Company, Inc. | Authentication using dynamic codes |
US9652761B2 (en) * | 2009-01-23 | 2017-05-16 | Boku, Inc. | Systems and methods to facilitate electronic payments |
US9990623B2 (en) * | 2009-03-02 | 2018-06-05 | Boku, Inc. | Systems and methods to provide information |
US20100299220A1 (en) * | 2009-05-19 | 2010-11-25 | Boku, Inc. | Systems and Methods to Confirm Transactions via Mobile Devices |
US9595028B2 (en) * | 2009-06-08 | 2017-03-14 | Boku, Inc. | Systems and methods to add funds to an account via a mobile communication device |
US9519892B2 (en) | 2009-08-04 | 2016-12-13 | Boku, Inc. | Systems and methods to accelerate transactions |
US20110143710A1 (en) * | 2009-12-16 | 2011-06-16 | Boku, Inc. | Systems and methods to facilitate electronic payments |
CN105243313B (zh) | 2010-01-12 | 2018-12-25 | 维萨国际服务协会 | 用于对验证令牌的任何时候确认的方法 |
US20110213671A1 (en) * | 2010-02-26 | 2011-09-01 | Boku, Inc. | Systems and Methods to Process Payments |
WO2012058326A1 (fr) | 2010-10-26 | 2012-05-03 | Modopayments, Llc | Système et procédé de gestion d'interactions commerçant-consommateur |
US8699994B2 (en) | 2010-12-16 | 2014-04-15 | Boku, Inc. | Systems and methods to selectively authenticate via mobile communications |
US8543087B2 (en) | 2011-04-26 | 2013-09-24 | Boku, Inc. | Systems and methods to facilitate repeated purchases |
US9830622B1 (en) | 2011-04-28 | 2017-11-28 | Boku, Inc. | Systems and methods to process donations |
US9191217B2 (en) | 2011-04-28 | 2015-11-17 | Boku, Inc. | Systems and methods to process donations |
KR101671457B1 (ko) | 2012-04-18 | 2016-11-01 | 구글 인코포레이티드 | 보안 요소를 갖지 않는 지불 거래들의 처리 |
US10586260B2 (en) | 2012-07-19 | 2020-03-10 | Apple Inc. | Securing in-app purchases |
US20140067678A1 (en) * | 2012-09-02 | 2014-03-06 | Mpayme Ltd. | Dispute code system for secure mobile payment |
GB2506881A (en) * | 2012-10-10 | 2014-04-16 | Barclays Bank Plc | System and method for enrolment of payment transaction services |
KR20140051640A (ko) * | 2012-10-23 | 2014-05-02 | 삼성전자주식회사 | 휴대 단말에서의 결제 수행 방법 및 장치와 그 방법에 대한 프로그램 소스를 저장한 기록 매체 |
US9741051B2 (en) | 2013-01-02 | 2017-08-22 | Visa International Service Association | Tokenization and third-party interaction |
US10740731B2 (en) | 2013-01-02 | 2020-08-11 | Visa International Service Association | Third party settlement |
US8869306B2 (en) * | 2013-01-24 | 2014-10-21 | Bank Of America Corporation | Application usage in device identification program |
US10535060B2 (en) * | 2013-03-15 | 2020-01-14 | Mastercard International Incorporated | System and method for processing financial transactions using a mobile device for payment |
EP3053118A4 (fr) * | 2013-10-04 | 2016-09-21 | Modopayments Llc | Système et procédé de gestion d'interactions entre marchands et consommateurs |
FR3015228B1 (fr) | 2013-12-19 | 2018-03-09 | Commissariat A L'energie Atomique Et Aux Energies Alternatives | Article a appliquer sur la peau, les muqueuses ou une plaie |
AU2015214271B2 (en) * | 2014-02-04 | 2019-06-27 | Visa International Service Association | Token verification using limited use certificates |
FR3021799B1 (fr) * | 2014-05-28 | 2017-10-13 | Compagnie Ind Et Financiere Dingenierie Ingenico | Methode d'identification, dispositif et programme correspondant |
WO2016040576A1 (fr) * | 2014-09-11 | 2016-03-17 | Mastercard International Incorporated | Système et procédé de traitement de transactions financières utilisant un dispositif mobile pour le paiement |
FR3028639B1 (fr) * | 2014-11-17 | 2016-12-23 | Oberthur Technologies | Procede de securisation d'un jeton de paiement |
US10296885B2 (en) * | 2015-03-06 | 2019-05-21 | Mastercard International Incorporated | Extended-length payment account issuer identification numbers |
US20160267466A1 (en) * | 2015-03-13 | 2016-09-15 | Phillip Kumnick | Device with multiple identifiers |
US11037139B1 (en) | 2015-03-19 | 2021-06-15 | Wells Fargo Bank, N.A. | Systems and methods for smart card mobile device authentication |
US11188919B1 (en) | 2015-03-27 | 2021-11-30 | Wells Fargo Bank, N.A. | Systems and methods for contactless smart card authentication |
GB2541414A (en) * | 2015-08-18 | 2017-02-22 | Worldpay (Uk) Ltd | Identity validation |
WO2017044677A1 (fr) * | 2015-09-11 | 2017-03-16 | Alibaba Group Holding Limited | Procédé et appareil pour faciliter des paiements électroniques à l'aide d'un dispositif pouvant être porté |
CN110502887B (zh) * | 2015-09-11 | 2023-07-18 | 创新先进技术有限公司 | 电子支付方法和装置 |
GB2542617B (en) * | 2015-09-28 | 2020-06-24 | Touchtech Payments Ltd | Transaction authentication platform |
SE540498C2 (en) * | 2015-10-13 | 2018-09-25 | Surfboard Innovations Ab | Method for making an electronic payment |
CA3003287A1 (fr) | 2015-12-04 | 2017-06-08 | Visa International Service Association | Distribution de jeton securise |
US10699268B2 (en) | 2015-12-30 | 2020-06-30 | Thales Dis France Sa | Method, server and system for authorizing a transaction |
US10156842B2 (en) | 2015-12-31 | 2018-12-18 | General Electric Company | Device enrollment in a cloud service using an authenticated application |
US11113688B1 (en) | 2016-04-22 | 2021-09-07 | Wells Fargo Bank, N.A. | Systems and methods for mobile wallet provisioning |
CN107358419B (zh) * | 2016-05-09 | 2020-12-11 | 阿里巴巴集团控股有限公司 | 机载终端支付鉴权方法、装置以及*** |
US20170337550A1 (en) * | 2016-05-18 | 2017-11-23 | Amadeus S.A.S. | Secure exchange of a sensitive data over a network based on barcodes and tokens |
US11232433B1 (en) | 2016-08-23 | 2022-01-25 | Wells Fargo Bank, N.A. | Mobile wallet registration via on-line banking |
SE540668C2 (en) * | 2016-08-30 | 2018-10-09 | No Common Payment Ab | Generation and verification of a temporary card security code for use in card based transactions |
CN110383757B (zh) * | 2016-12-16 | 2022-08-30 | 维萨国际服务协会 | 用于安全处理电子身份的***和方法 |
EP3346429A1 (fr) * | 2017-01-06 | 2018-07-11 | Mastercard International Incorporated | Système et procédé de paiement iot |
CN107835193A (zh) * | 2017-11-30 | 2018-03-23 | 郑州云海信息技术有限公司 | 一种基于签名机制的安全通讯***及方法 |
US10922678B2 (en) * | 2018-04-24 | 2021-02-16 | Visa International Service Association | System, method and computer program product for automatic and remote control of NFC transaction processing |
CN108632044A (zh) * | 2018-04-27 | 2018-10-09 | 济南浪潮高新科技投资发展有限公司 | 一种基于自认证码的信息交互*** |
CN109698863A (zh) * | 2018-12-20 | 2019-04-30 | 杭州迪普科技股份有限公司 | 一种确定http报文安全性的方法、装置、设备及存储介质 |
CN110188137B (zh) * | 2019-04-19 | 2021-08-31 | 杭州电子科技大学 | 一种基于诚信的区块链共识机制 |
US11599871B1 (en) | 2019-09-18 | 2023-03-07 | Wells Fargo Bank, N.A. | Systems and methods for a transaction card having a cryptographic key |
SE545872C2 (en) | 2019-09-27 | 2024-02-27 | No Common Payment Ab | Generation and verification of a temporary authentication value for use in a secure transmission |
CN111680999B (zh) * | 2020-05-28 | 2021-08-03 | 韩永辉 | 一种基于大数据的互联网金融交易***及方法 |
US11423392B1 (en) | 2020-12-01 | 2022-08-23 | Wells Fargo Bank, N.A. | Systems and methods for information verification using a contactless card |
US12021861B2 (en) | 2021-01-04 | 2024-06-25 | Bank Of America Corporation | Identity verification through multisystem cooperation |
US20240144258A1 (en) * | 2021-03-12 | 2024-05-02 | Visa International Service Association | System, Method, and Computer Program Product for Secure Client Device and Consumer Authentication |
Citations (30)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5892900A (en) * | 1996-08-30 | 1999-04-06 | Intertrust Technologies Corp. | Systems and methods for secure transaction management and electronic rights protection |
US20020181710A1 (en) * | 2000-02-27 | 2002-12-05 | Kfir Adam | Mobile transaction system and method |
US20030061503A1 (en) * | 2001-09-27 | 2003-03-27 | Eyal Katz | Authentication for remote connections |
US20040098350A1 (en) * | 2002-08-08 | 2004-05-20 | Fujitsu Limited | Framework and system for purchasing of goods and srvices |
US20060206709A1 (en) * | 2002-08-08 | 2006-09-14 | Fujitsu Limited | Authentication services using mobile device |
US20060224470A1 (en) * | 2003-07-02 | 2006-10-05 | Lucia Garcia Ruano | Digital mobile telephone transaction and payment system |
US20080011825A1 (en) * | 2006-07-12 | 2008-01-17 | Giordano Claeton J | Transactions using handheld electronic devices based on unobtrusive provisioning of the devices |
US20080059375A1 (en) * | 2006-09-06 | 2008-03-06 | Basil Munir Abifaker | Payment Card Terminal for Mobile Phones |
US7379921B1 (en) * | 2004-11-08 | 2008-05-27 | Pisafe, Inc. | Method and apparatus for providing authentication |
US20080208742A1 (en) * | 2007-02-22 | 2008-08-28 | First Data Corporation | Provisioning of a device for mobile commerce |
US20080208743A1 (en) * | 2007-02-22 | 2008-08-28 | First Data Corporation | Transfer of value between mobile devices in a mobile commerce system |
US20090037285A1 (en) * | 2007-07-30 | 2009-02-05 | Murphy Timothy M | Method and system for dynamic funding |
US20090144193A1 (en) * | 2007-11-29 | 2009-06-04 | Bank Of America Corporation | Sub-Account Mechanism |
US20090173782A1 (en) * | 2008-01-04 | 2009-07-09 | Muscato Michael A | Dynamic Card Validation Value |
US20090307140A1 (en) * | 2008-06-06 | 2009-12-10 | Upendra Mardikar | Mobile device over-the-air (ota) registration and point-of-sale (pos) payment |
US20100106570A1 (en) * | 2008-10-28 | 2010-04-29 | Cristian Radu | Systems and methods for enrollment and participation in a loyalty program |
US20100125516A1 (en) * | 2008-11-14 | 2010-05-20 | Wankmueller John R | Methods and systems for secure mobile device initiated payments |
US20100153272A1 (en) * | 2007-04-17 | 2010-06-17 | David Wentker | Mobile device initiated transaction |
US20110022484A1 (en) * | 2009-07-23 | 2011-01-27 | Boku, Inc. | Systems and Methods to Facilitate Retail Transactions |
US20110022515A1 (en) * | 2009-07-23 | 2011-01-27 | Wausau Financial Systems, Inc. | Mobile payment system |
US20110035302A1 (en) * | 2009-08-04 | 2011-02-10 | Boku, Inc. | Systems and Methods to Accelerate Transactions |
US20110047045A1 (en) * | 2008-08-14 | 2011-02-24 | Michael Brody | System and method for paying a merchant by a registered user using a cellular telephone account |
US20110042456A1 (en) * | 2009-04-24 | 2011-02-24 | Logomotion, S.R.O. | Method and System of Electronic Payment Transaction, In Particular By Using Contactless Payment Means |
US20110078076A1 (en) * | 2009-09-29 | 2011-03-31 | Ebay, Inc. | Short codes for bill pay |
US20110153496A1 (en) * | 2009-12-18 | 2011-06-23 | First Data Corporation | Authentication of card-not-present transactions |
US20110165836A1 (en) * | 2009-07-09 | 2011-07-07 | Cubic Corporation | Id application for nfc phone |
US20110196782A1 (en) * | 2010-02-05 | 2011-08-11 | Bank Of America Corporation | Transferring Funds Using Mobile Devices |
US8380177B2 (en) * | 2010-04-09 | 2013-02-19 | Paydiant, Inc. | Mobile phone payment processing methods and systems |
US8566239B2 (en) * | 2007-02-22 | 2013-10-22 | First Data Corporation | Mobile commerce systems and methods |
US8700729B2 (en) * | 2005-01-21 | 2014-04-15 | Robin Dua | Method and apparatus for managing credentials through a wireless network |
Family Cites Families (48)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5371797A (en) * | 1993-01-19 | 1994-12-06 | Bellsouth Corporation | Secure electronic funds transfer from telephone or unsecured terminal |
US7403922B1 (en) * | 1997-07-28 | 2008-07-22 | Cybersource Corporation | Method and apparatus for evaluating fraud risk in an electronic commerce transaction |
US20020152180A1 (en) * | 1999-09-10 | 2002-10-17 | Paul Turgeon | System and method for performing secure remote real-time financial transactions over a public communications infrastructure with strong authentication |
US6895391B1 (en) * | 1999-11-09 | 2005-05-17 | Arcot Systems, Inc. | Method and system for secure authenticated payment on a computer network |
AU2001259013A1 (en) * | 2000-05-25 | 2001-12-03 | Wilson How Kiap Gueh | Transaction system and method |
WO2002025495A1 (fr) * | 2000-09-21 | 2002-03-28 | Trintech Limited | Procede et systeme informatises pour l'etablissement de transactions en ligne securisees par authentification des detenteurs de cartes |
US20020091646A1 (en) * | 2000-11-03 | 2002-07-11 | Lake Lawrence L. | Method and system for verifying the identity of on-line credit card purchasers through a proxy transaction |
US7292999B2 (en) * | 2001-03-15 | 2007-11-06 | American Express Travel Related Services Company, Inc. | Online card present transaction |
US7225156B2 (en) * | 2001-07-11 | 2007-05-29 | Fisher Douglas C | Persistent dynamic payment service |
WO2003058391A2 (fr) * | 2001-12-26 | 2003-07-17 | Vivotech, Inc. | Procede de transactions financieres par micropaiement utilisant un traitement en reseau sans fil |
US8065235B2 (en) * | 2003-05-05 | 2011-11-22 | International Business Machines Corporation | Portable intelligent shopping device |
US7702577B1 (en) * | 2003-11-06 | 2010-04-20 | Jp Morgan Chase Bank, N.A. | System and method for conversion of initial transaction to final transaction |
US7584153B2 (en) * | 2004-03-15 | 2009-09-01 | Qsecure, Inc. | Financial transactions with dynamic card verification values |
EP1810243A4 (fr) * | 2004-08-18 | 2012-05-02 | Mastercard International Inc | Procede et systeme pour l'autorisation d'une transaction utilisant un code d'autorisation dynamique |
US7810720B2 (en) * | 2005-06-13 | 2010-10-12 | Robert Lovett | Account payment using barcode information exchange |
KR100833581B1 (ko) * | 2005-07-01 | 2008-05-30 | 주식회사 유에이치홀딩스 | 휴대폰 결제 리더기를 이용한 결제 방법 |
US8396747B2 (en) * | 2005-10-07 | 2013-03-12 | Kemesa Inc. | Identity theft and fraud protection system and method |
US7818264B2 (en) | 2006-06-19 | 2010-10-19 | Visa U.S.A. Inc. | Track data encryption |
US8489067B2 (en) * | 2006-07-06 | 2013-07-16 | Qualcomm Incorporated | Methods and systems for distribution of a mobile wallet for a mobile device |
US8121956B2 (en) * | 2007-06-25 | 2012-02-21 | Visa U.S.A. Inc. | Cardless challenge systems and methods |
US8359630B2 (en) * | 2007-08-20 | 2013-01-22 | Visa U.S.A. Inc. | Method and system for implementing a dynamic verification value |
US7849014B2 (en) | 2007-08-29 | 2010-12-07 | American Express Travel Related Services Company, Inc. | System and method for facilitating a financial transaction with a dynamically generated identifier |
US8565723B2 (en) | 2007-10-17 | 2013-10-22 | First Data Corporation | Onetime passwords for mobile wallets |
US10558961B2 (en) * | 2007-10-18 | 2020-02-11 | Wayne Fueling Systems Llc | System and method for secure communication in a retail environment |
US8412639B2 (en) * | 2007-11-01 | 2013-04-02 | American Expres Travel Related Services Company, Inc. | System and method for facilitating a secured financial transaction using an alternate shipping address |
US7802720B2 (en) | 2008-01-04 | 2010-09-28 | Intuit Inc. | Method and system for performing a card-present transaction using image capture on a portable device |
US8286865B2 (en) * | 2008-04-14 | 2012-10-16 | Lockstep Technologies Pty Ltd | Authenticating electronic financial transactions |
WO2009136404A2 (fr) * | 2008-04-17 | 2009-11-12 | Atom Technologies Limited | Système et procédé pour mettre en œuvre une transaction sécurisée par un dispositif de communication mobile |
KR101011767B1 (ko) * | 2008-07-28 | 2011-02-07 | 용순안 | 모바일 결제 서비스 시스템 |
US20100063893A1 (en) * | 2008-09-11 | 2010-03-11 | Palm, Inc. | Method of and system for secure on-line purchases |
KR20100034688A (ko) * | 2008-09-23 | 2010-04-01 | 주식회사 모빌리언스 | 결제 서버의 인증 기능을 이용하는 이동통신단말의 소액 결제 시스템 및 그 소액 결제 방법 |
LU91488B1 (en) * | 2008-10-17 | 2010-04-19 | Robert Carter | Multifactor Authentication |
US8244643B2 (en) * | 2008-11-08 | 2012-08-14 | Fonwallet Transaction Solutions, Inc. | System and method for processing financial transaction data using an intermediary service |
US8245044B2 (en) * | 2008-11-14 | 2012-08-14 | Visa International Service Association | Payment transaction processing using out of band authentication |
US8725574B2 (en) * | 2008-11-17 | 2014-05-13 | Mastercard International Incorporated | Methods and systems for payment account issuance over a mobile network |
KR101578391B1 (ko) * | 2008-12-31 | 2015-12-17 | 노틸러스효성 주식회사 | 모바일 단말의 인증키를 이용한 금융 거래를 제공하는 금융자동화 기기 |
WO2010078530A2 (fr) * | 2008-12-31 | 2010-07-08 | Vivotech Inc. | Procédés, systèmes et supports aptes à être lus par ordinateur pour rembourser et distribuer des certificats de récompense de fidélité électroniques à l'aide d'un dispositif mobile |
EP2199965A1 (fr) | 2009-04-22 | 2010-06-23 | Euro-Wallet B.V. | Client, serveur et système de transaction de paiement |
US8606232B2 (en) * | 2009-06-08 | 2013-12-10 | Qualcomm Incorporated | Method and system for performing multi-stage virtual SIM provisioning and setup on mobile devices |
US10255591B2 (en) * | 2009-12-18 | 2019-04-09 | Visa International Service Association | Payment channel returning limited use proxy dynamic value |
RU2565368C2 (ru) * | 2010-01-19 | 2015-10-20 | Виза Интернэшнл Сервис Ассосиэйшн | Аутентификация транзакции на основе жетона |
US8615468B2 (en) * | 2010-01-27 | 2013-12-24 | Ca, Inc. | System and method for generating a dynamic card value |
US20110238473A1 (en) | 2010-03-23 | 2011-09-29 | Sanjay Dattatreya Sankolli | Alternate mobile payment service |
FR2958102B1 (fr) * | 2010-03-23 | 2012-08-17 | Ingenico Sa | Procede et systeme de validation d'une transaction, terminal transactionnel et programme correspondants. |
US20110251910A1 (en) * | 2010-04-13 | 2011-10-13 | James Dimmick | Mobile Phone as a Switch |
US20120136796A1 (en) | 2010-09-21 | 2012-05-31 | Ayman Hammad | Device Enrollment System and Method |
US8955142B2 (en) * | 2011-03-21 | 2015-02-10 | Mocana Corporation | Secure execution of unsecured apps on a device |
IL267630A (en) * | 2018-06-28 | 2019-10-31 | AMOR Harel | A system and method for increasing security of information storage and retrieval |
-
2011
- 2011-09-20 US US13/237,840 patent/US20120136796A1/en not_active Abandoned
- 2011-09-21 WO PCT/US2011/052631 patent/WO2012040377A1/fr active Application Filing
-
2012
- 2012-02-21 US US13/401,121 patent/US8793192B2/en active Active
-
2018
- 2018-05-07 US US15/973,410 patent/US11410142B2/en active Active
-
2022
- 2022-07-06 US US17/858,934 patent/US11880815B2/en active Active
Patent Citations (30)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5892900A (en) * | 1996-08-30 | 1999-04-06 | Intertrust Technologies Corp. | Systems and methods for secure transaction management and electronic rights protection |
US20020181710A1 (en) * | 2000-02-27 | 2002-12-05 | Kfir Adam | Mobile transaction system and method |
US20030061503A1 (en) * | 2001-09-27 | 2003-03-27 | Eyal Katz | Authentication for remote connections |
US20040098350A1 (en) * | 2002-08-08 | 2004-05-20 | Fujitsu Limited | Framework and system for purchasing of goods and srvices |
US20060206709A1 (en) * | 2002-08-08 | 2006-09-14 | Fujitsu Limited | Authentication services using mobile device |
US20060224470A1 (en) * | 2003-07-02 | 2006-10-05 | Lucia Garcia Ruano | Digital mobile telephone transaction and payment system |
US7379921B1 (en) * | 2004-11-08 | 2008-05-27 | Pisafe, Inc. | Method and apparatus for providing authentication |
US8700729B2 (en) * | 2005-01-21 | 2014-04-15 | Robin Dua | Method and apparatus for managing credentials through a wireless network |
US20080011825A1 (en) * | 2006-07-12 | 2008-01-17 | Giordano Claeton J | Transactions using handheld electronic devices based on unobtrusive provisioning of the devices |
US20080059375A1 (en) * | 2006-09-06 | 2008-03-06 | Basil Munir Abifaker | Payment Card Terminal for Mobile Phones |
US20080208742A1 (en) * | 2007-02-22 | 2008-08-28 | First Data Corporation | Provisioning of a device for mobile commerce |
US20080208743A1 (en) * | 2007-02-22 | 2008-08-28 | First Data Corporation | Transfer of value between mobile devices in a mobile commerce system |
US8566239B2 (en) * | 2007-02-22 | 2013-10-22 | First Data Corporation | Mobile commerce systems and methods |
US20100153272A1 (en) * | 2007-04-17 | 2010-06-17 | David Wentker | Mobile device initiated transaction |
US20090037285A1 (en) * | 2007-07-30 | 2009-02-05 | Murphy Timothy M | Method and system for dynamic funding |
US20090144193A1 (en) * | 2007-11-29 | 2009-06-04 | Bank Of America Corporation | Sub-Account Mechanism |
US20090173782A1 (en) * | 2008-01-04 | 2009-07-09 | Muscato Michael A | Dynamic Card Validation Value |
US20090307140A1 (en) * | 2008-06-06 | 2009-12-10 | Upendra Mardikar | Mobile device over-the-air (ota) registration and point-of-sale (pos) payment |
US20110047045A1 (en) * | 2008-08-14 | 2011-02-24 | Michael Brody | System and method for paying a merchant by a registered user using a cellular telephone account |
US20100106570A1 (en) * | 2008-10-28 | 2010-04-29 | Cristian Radu | Systems and methods for enrollment and participation in a loyalty program |
US20100125516A1 (en) * | 2008-11-14 | 2010-05-20 | Wankmueller John R | Methods and systems for secure mobile device initiated payments |
US20110042456A1 (en) * | 2009-04-24 | 2011-02-24 | Logomotion, S.R.O. | Method and System of Electronic Payment Transaction, In Particular By Using Contactless Payment Means |
US20110165836A1 (en) * | 2009-07-09 | 2011-07-07 | Cubic Corporation | Id application for nfc phone |
US20110022484A1 (en) * | 2009-07-23 | 2011-01-27 | Boku, Inc. | Systems and Methods to Facilitate Retail Transactions |
US20110022515A1 (en) * | 2009-07-23 | 2011-01-27 | Wausau Financial Systems, Inc. | Mobile payment system |
US20110035302A1 (en) * | 2009-08-04 | 2011-02-10 | Boku, Inc. | Systems and Methods to Accelerate Transactions |
US20110078076A1 (en) * | 2009-09-29 | 2011-03-31 | Ebay, Inc. | Short codes for bill pay |
US20110153496A1 (en) * | 2009-12-18 | 2011-06-23 | First Data Corporation | Authentication of card-not-present transactions |
US20110196782A1 (en) * | 2010-02-05 | 2011-08-11 | Bank Of America Corporation | Transferring Funds Using Mobile Devices |
US8380177B2 (en) * | 2010-04-09 | 2013-02-19 | Paydiant, Inc. | Mobile phone payment processing methods and systems |
Cited By (91)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US11880815B2 (en) | 2010-09-21 | 2024-01-23 | Visa International Service Association | Device enrollment system and method |
US10152705B2 (en) * | 2010-11-11 | 2018-12-11 | Paypal, Inc. | Quick payment using mobile device binding |
US20160042341A1 (en) * | 2010-11-11 | 2016-02-11 | Paypal, Inc. | Quick payment using mobile device binding |
US20120226611A1 (en) * | 2011-03-01 | 2012-09-06 | Nimish Radia | Method and system for conducting a monetary transaction using a mobile communication device |
US20120310837A1 (en) * | 2011-06-03 | 2012-12-06 | Holden Kevin Rigby | Method and System For Providing Authenticated Access to Secure Information |
US20130191883A1 (en) * | 2012-01-20 | 2013-07-25 | Tien-Chun Tung | Device network sharing method and device controlling method thereof |
US20180309741A1 (en) * | 2012-02-13 | 2018-10-25 | Schlage Lock Company Llc | Credential management system |
US20130212017A1 (en) * | 2012-02-14 | 2013-08-15 | N.B. Development Services Inc. | Transaction system and method of conducting a transaction |
US9898738B2 (en) * | 2012-02-14 | 2018-02-20 | Boku, Inc. | Transaction authentication with a variable-type user-stored account identifier |
US20140074633A1 (en) * | 2012-02-14 | 2014-03-13 | Boku, Inc. | Transaction authentication with a variable-type user-stored account identifier |
US11810095B1 (en) * | 2012-02-19 | 2023-11-07 | Charles Schwab & Co., Inc. | System and method for mobile payments |
US11620621B2 (en) * | 2012-06-05 | 2023-04-04 | Autoscribe Corporation | Enrolling a payer by a merchant server operated by or for the benefit of a payee and processing a payment from the payer by a secure server |
US20190362324A1 (en) * | 2012-06-05 | 2019-11-28 | Autoscribe Corporation | Processing A Payment By A Second Computing System From A Payer To A Payee Operating A First Computing System |
US20140019365A1 (en) * | 2012-07-12 | 2014-01-16 | Google Inc. | Processing payment information for online orders at a local merchant's point of sale via direct payment |
US11978051B2 (en) * | 2012-12-10 | 2024-05-07 | Visa International Service Association | Authenticating remote transactions using a mobile device |
US10521794B2 (en) | 2012-12-10 | 2019-12-31 | Visa International Service Association | Authenticating remote transactions using a mobile device |
US20200090182A1 (en) * | 2012-12-10 | 2020-03-19 | Visa International Service Association | Authenticating remote transactions using a mobile device |
WO2014093390A1 (fr) * | 2012-12-10 | 2014-06-19 | Visa International Service Association | Authentification de transactions à distance à l'aide d'un dispositif mobile |
US20140310816A1 (en) * | 2013-04-10 | 2014-10-16 | Dell Products L.P. | Method to Prevent Operating System Digital Product Key Activation Failures |
US9703937B2 (en) * | 2013-04-10 | 2017-07-11 | Dell Products, L.P. | Method to prevent operating system digital product key activation failures |
WO2014186635A1 (fr) * | 2013-05-15 | 2014-11-20 | Visa International Service Association | Concentrateur de tokénisation pour mobile |
KR102058175B1 (ko) * | 2013-05-15 | 2019-12-20 | 비자 인터네셔널 서비스 어소시에이션 | 모바일 토큰화 허브 |
CN105359179A (zh) * | 2013-05-15 | 2016-02-24 | 维萨国际服务协会 | 移动令牌化枢纽 |
US11861607B2 (en) | 2013-05-15 | 2024-01-02 | Visa International Service Association | Mobile tokenization hub using dynamic identity information |
US9978062B2 (en) | 2013-05-15 | 2018-05-22 | Visa International Service Association | Mobile tokenization hub |
US11341491B2 (en) | 2013-05-15 | 2022-05-24 | Visa International Service Association | Mobile tokenization hub using dynamic identity information |
WO2015003518A1 (fr) * | 2013-07-11 | 2015-01-15 | 广州广电汇通金融服务有限公司 | Source d'alimentation intelligente et procédé de réalisation d'un paiement mobile l'utilisant |
US10366391B2 (en) | 2013-08-06 | 2019-07-30 | Visa International Services Association | Variable authentication process and system |
US11928678B2 (en) | 2013-08-06 | 2024-03-12 | Visa International Service Association | Variable authentication process and system |
US11847643B2 (en) | 2013-08-15 | 2023-12-19 | Visa International Service Association | Secure remote payment transaction processing using a secure element |
US11062306B2 (en) | 2013-08-15 | 2021-07-13 | Visa International Service Association | Secure remote payment transaction processing using a secure element |
US11188901B2 (en) * | 2013-08-15 | 2021-11-30 | Visa International Service Association | Secure remote payment transaction processing using a secure element |
US11710120B2 (en) | 2013-09-20 | 2023-07-25 | Visa International Service Association | Secure remote payment transaction processing including consumer authentication |
EP3105883A4 (fr) * | 2014-02-11 | 2017-10-04 | Einnovations Holdings Pte. Ltd. | Système et procédé d'authentification |
CN106716916A (zh) * | 2014-02-11 | 2017-05-24 | 电子创新控股私人有限公司 | 认证***和方法 |
JP2017512403A (ja) * | 2014-02-11 | 2017-05-18 | イーイノベーションズ ホールディングス ピーティーイー リミテッド | 認証システム及び方法 |
US20150310434A1 (en) * | 2014-04-29 | 2015-10-29 | Dennis Takchi Cheung | Systems and methods for implementing authentication based on location history |
US11392880B2 (en) * | 2014-05-08 | 2022-07-19 | Visa International Service Association | Split shipment processing |
US20150334564A1 (en) * | 2014-05-15 | 2015-11-19 | Microsoft Corporation | Transparent two-factor authentication via mobile communication device |
US9690924B2 (en) * | 2014-05-15 | 2017-06-27 | Microsoft Technology Licensing, Llc | Transparent two-factor authentication via mobile communication device |
AU2015264040B2 (en) * | 2014-05-23 | 2017-04-27 | Samsung Electronics Co., Ltd. | Systems and methods for linking devices to user accounts |
JP2017503384A (ja) * | 2014-05-23 | 2017-01-26 | サムスン ペイ、インコーポレイテッド | デバイスをユーザ・アカウントにリンクするシステム及び方法 |
KR101802682B1 (ko) * | 2014-05-23 | 2017-11-28 | 삼성 페이, 인코포레이티드 | 장치를 사용자 계정에 링크하는 시스템 및 방법 |
US20150339662A1 (en) * | 2014-05-23 | 2015-11-26 | LoopPay Inc. | Systems and methods for linking devices to user accounts |
WO2015179726A1 (fr) * | 2014-05-23 | 2015-11-26 | Looppay, Inc. | Systèmes et procédés pour relier des dispositifs à des comptes d'utilisateur |
RU2665869C2 (ru) * | 2014-05-23 | 2018-09-04 | Самсунг Электроникс Ко., Лтд. | Системы и способы привязки устройств к счетам пользователя |
CN105339963A (zh) * | 2014-05-23 | 2016-02-17 | 鲁普支付有限公司 | 用来连接设备至用户账户的***和方法 |
US10282730B2 (en) * | 2014-07-10 | 2019-05-07 | Ingenico Inc. | Method for managing a transaction, corresponding server, computer program product and storage medium |
US20160080157A1 (en) * | 2014-09-16 | 2016-03-17 | Keypasco Ab | Network authentication method for secure electronic transactions |
US20160080326A1 (en) * | 2014-09-16 | 2016-03-17 | Entersekt, LLC | System and method for secure authentication |
US9686245B2 (en) * | 2014-09-16 | 2017-06-20 | Entersekt International Limited | System and method for secure authentication |
CN105427099A (zh) * | 2014-09-16 | 2016-03-23 | 卡巴斯克 | 安全电子交易的网络认证方法 |
US9838205B2 (en) * | 2014-09-16 | 2017-12-05 | Keypasco Ab | Network authentication method for secure electronic transactions |
US11461761B2 (en) * | 2014-09-26 | 2022-10-04 | Citycheers Media Corp. | System for conducting transactions independent of point of sale system |
US20160366592A1 (en) * | 2014-09-30 | 2016-12-15 | Sap Se | Authorization based on access token |
US9736694B2 (en) * | 2014-09-30 | 2017-08-15 | Sap Se | Authorization based on access token |
US11157902B1 (en) * | 2014-10-03 | 2021-10-26 | State Farm Mutual Automobile Insurance Company | Token generation in providing a secure credit card payment service without storing credit card data on merchant servers |
US11989728B2 (en) | 2014-10-03 | 2024-05-21 | State Farm Mutual Automobile Insurance Company | Systems and methods for securely transmitting credit card payments |
US10496965B2 (en) | 2015-01-20 | 2019-12-03 | Visa International Service Association | Secure payment processing using authorization request |
US20180322478A1 (en) * | 2015-01-20 | 2018-11-08 | Visa International Service Association | Secure payment processing using authorization request |
US20160210628A1 (en) * | 2015-01-20 | 2016-07-21 | Keith McGuire | Secure payment processing using authorization request |
US11010734B2 (en) * | 2015-01-20 | 2021-05-18 | Visa International Service Association | Secure payment processing using authorization request |
US10096009B2 (en) * | 2015-01-20 | 2018-10-09 | Visa International Service Association | Secure payment processing using authorization request |
US11068895B2 (en) * | 2015-02-17 | 2021-07-20 | Visa International Service Association | Token and cryptogram using transaction specific information |
US20210312448A1 (en) * | 2015-02-17 | 2021-10-07 | Visa International Service Association | Token and cryptogram using transaction specific information |
US11943231B2 (en) * | 2015-02-17 | 2024-03-26 | Visa International Service Association | Token and cryptogram using transaction specific information |
US20180006821A1 (en) * | 2015-02-17 | 2018-01-04 | Visa International Service Association | Token and cryptogram using transaction specific information |
US11475447B2 (en) * | 2015-03-06 | 2022-10-18 | Mastercard International Incorporated | Secure mobile remote payments |
US20160260084A1 (en) * | 2015-03-06 | 2016-09-08 | Mastercard International Incorporated | Secure mobile remote payments |
US20160321637A1 (en) * | 2015-04-30 | 2016-11-03 | Kevin Carvalho | Point of sale payment using mobile device and checkout credentials |
JP2021184283A (ja) * | 2015-05-21 | 2021-12-02 | マスターカード インターナシヨナル インコーポレーテツド | 既存の支払ネットワーク上でブロックチェーンを基礎としたトランザクションを処理する方法及びシステム |
JP7219310B2 (ja) | 2015-05-21 | 2023-02-07 | マスターカード インターナシヨナル インコーポレーテツド | 既存の支払ネットワーク上でブロックチェーンを基礎としたトランザクションを処理する方法及びシステム |
JP2020115394A (ja) * | 2015-05-21 | 2020-07-30 | マスターカード インターナシヨナル インコーポレーテツド | 既存の支払ネットワーク上でブロックチェーンを基礎としたトランザクションを処理する方法及びシステム |
JP2018519577A (ja) * | 2015-05-21 | 2018-07-19 | マスターカード インターナシヨナル インコーポレーテツド | 既存の支払ネットワーク上でブロックチェーンを基礎としたトランザクションを処理する方法及びシステム |
JP2019079551A (ja) * | 2015-05-21 | 2019-05-23 | マスターカード インターナシヨナル インコーポレーテツド | 既存の支払ネットワーク上でブロックチェーンを基礎としたトランザクションを処理する方法及びシステム |
US20170032362A1 (en) * | 2015-07-31 | 2017-02-02 | Ca, Inc. | Streamlined enrollment of credit cards in mobile wallets |
US11810116B2 (en) | 2016-03-18 | 2023-11-07 | Visa International Service Association | Location verification during dynamic data transactions |
US10861019B2 (en) * | 2016-03-18 | 2020-12-08 | Visa International Service Association | Location verification during dynamic data transactions |
US10630669B2 (en) * | 2016-09-09 | 2020-04-21 | Cyphercor Inc. | Method and system for user verification |
US11163870B2 (en) * | 2017-05-08 | 2021-11-02 | Siemens Aktiengesellschaft | Plant-specific, automated certificate management |
US11010759B1 (en) * | 2017-09-12 | 2021-05-18 | Wells Fargo Bank, N.A. | Vendor specific payment account identifier |
US20190180275A1 (en) * | 2017-12-13 | 2019-06-13 | Mastercard International Incorporated | Method and system for consumer-initiated transactions using encrypted tokens |
US11227284B2 (en) * | 2017-12-13 | 2022-01-18 | Mastercard International Incorporated | Method and system for consumer-initiated transactions using encrypted tokens |
CN109919604A (zh) * | 2017-12-13 | 2019-06-21 | 万事达卡国际公司 | 用于使用加密令牌的消费者发起的交易的方法和*** |
US20190318382A1 (en) * | 2018-04-11 | 2019-10-17 | Intel Corporation | Secure visual transactions for mobile devices |
US11301897B2 (en) * | 2018-04-11 | 2022-04-12 | Intel Corporation | Secure visual transactions for mobile devices |
WO2020103563A1 (fr) * | 2018-11-22 | 2020-05-28 | 阿里巴巴集团控股有限公司 | Procédé et appareil de paiement pour un dispositif |
US11699140B2 (en) * | 2019-12-31 | 2023-07-11 | Paypal, Inc. | Geographic location consensus determination |
US20210201290A1 (en) * | 2019-12-31 | 2021-07-01 | Paypal, Inc. | Geographic location consensus determination |
CN111415734A (zh) * | 2020-03-20 | 2020-07-14 | 四川南格尔生物科技有限公司 | 一种有源医疗器械的使用期限管理方法 |
US12039521B1 (en) * | 2021-05-11 | 2024-07-16 | Walgreen Co. | Contactless user identification by digital wallet to retailer point of sale |
Also Published As
Publication number | Publication date |
---|---|
US20120143768A1 (en) | 2012-06-07 |
WO2012040377A1 (fr) | 2012-03-29 |
US8793192B2 (en) | 2014-07-29 |
US11410142B2 (en) | 2022-08-09 |
US11880815B2 (en) | 2024-01-23 |
US20180255460A1 (en) | 2018-09-06 |
US20230004947A1 (en) | 2023-01-05 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US11880815B2 (en) | Device enrollment system and method | |
US11978051B2 (en) | Authenticating remote transactions using a mobile device | |
US11392880B2 (en) | Split shipment processing | |
US10579977B1 (en) | Method and system for controlling certificate based open payment transactions | |
US11995633B2 (en) | Security system incorporating mobile device | |
US10592899B2 (en) | Master applet for secure remote payment processing | |
US10311433B2 (en) | Secure authorizations using independent communications and different one-time-use encryption keys for each party to a transaction | |
US9818112B2 (en) | Method and system for payment authorization and card presentation using pre-issued identities | |
US9558492B2 (en) | Secure authorizations using independent communications and different one-time-use encryption keys for each party to a transaction | |
US10614457B2 (en) | Secure authorizations using independent communications and different one-time-use encryption keys for each party to a transaction | |
CN116711267A (zh) | 移动用户认证***和方法 | |
US12003500B2 (en) | Token processing system and method | |
WO2016195764A1 (fr) | Autorisations sécurisées utilisant des communications indépendantes et des clés de chiffrement à usage unique différentes pour chaque partie à une transaction | |
WO2016175894A1 (fr) | Autorisations sécurisées utilisant des communications indépendantes et différentes clés de chiffrement à usage unique pour chaque partie à une transaction | |
AU2008254851B2 (en) | Method and system for payment authorization and card presentation using pre-issued identities |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AS | Assignment |
Owner name: VISA INTERNATIONAL SERVICE ASSOCIATION, CALIFORNIA Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:HAMMAD, AYMAN;PATTERSON, BARBARA;SIGNING DATES FROM 20110926 TO 20120119;REEL/FRAME:027708/0467 |
|
AS | Assignment |
Owner name: UNITED STATE DEPARTMENT OF ENERGY, DISTRICT OF COL Free format text: CONFIRMATORY LICENSE;ASSIGNOR:GENERAL MOTORS GLOBAL TECHNOLOGY OPERATIONS;REEL/FRAME:027882/0496 Effective date: 20111207 |
|
STCB | Information on status: application discontinuation |
Free format text: ABANDONED -- FAILURE TO RESPOND TO AN OFFICE ACTION |