Device including encrypted data for expiration date and verification value creation

Patent metadata

Field	Value
Publication number	US-10140598-B2
Application number	US-77863810-A
Country	US
Kind code	B2
Filing date	May 12, 2010
Priority date	May 20, 2009
Publication date	Nov 27, 2018
Grant date	Nov 27, 2018

Abstract

In order to make it more difficult to obtain numbers that can be used to conduct fraudulent transactions, a portion of a real account number is encrypted. The encrypted portion of the account number is used to generate a new account number, a new expiration date, and a new verification value. This information can be determined using processor that may reside in a point of sale terminal, a smart card, or a computer operated by a user. The new account number, the new expiration date, and the new verification value can be used in a payment transaction. A server computer in a central payment processing network may determine that the new account information is not the real account information, and may subsequently generate a modified authorization request message using the real account information and may send it to an issuer for approval. The transmission of data is more secure, since real account information is not sent from the merchant to the payment processing network.

First claim

What is claimed is:

1. A method comprising:
encrypting, using a processor, a first portion of a first account number, the first portion having less digits than the whole first account number, to form an encrypted account number portion, while leaving a remaining portion of the first account number unencrypted, the first account number being associated with a first expiration date and a first verification value;
determining a second account number based at least in part on a first segment of the encrypted account number portion and the remaining portion of the first account number;
determining a second expiration date based at least in part on a second segment of the encrypted account number portion;
determining a second verification value based at least in part on a third segment of the encrypted account number portion; and
participating in a transaction with respect to an account corresponding to the first account number utilizing the determined second account number, the determined second expiration date and the determined second verification value in place of the first account number, the first expiration date and the first verification value,
wherein (i) each segment of the encrypted account number portion contains less information than the whole encrypted account number portion and (ii) the first segment, the second segment and the third segment of the encrypted account number portion collectively contain all the information in the whole encrypted account number portion.

2. The method of claim 1 wherein the second expiration date is determined and determining the second expiration date comprises determining the second expiration date at least in part by mapping the second segment of the encrypted account number portion to a date.

3. The method of claim 1 , wherein the second account number comprises a signal segment, the third segment of the encrypted account number portion, and an unencrypted portion of the first account number, the signal segment of the second account number indicating that the second account number includes an encrypted portion.

4. The method of claim 1 , wherein an unencrypted portion of the first account number is incorporated into the second account number and the unencrypted portion consists of exactly four digits.

5. A computer readable medium comprising code, executable by at least one processor, for implementing a method comprising:
encrypting, using the at least one processor, a first portion of a first account number, the first portion having less digits than the whole first account number, to form an encrypted account number portion, while leaving a remaining portion of the first account number unencrypted, the first account number being associated with a first expiration date and a first verification value;
determining a second account number based at least in part on a first segment of the encrypted account number portion and the remaining portion of the first account number;
determining a second expiration date based at least in part on a second segment of the encrypted account number portion;
determining a second verification value based at least in part on a third segment of the encrypted account number portion; and
participating in a transaction with respect to an account corresponding to the first account number utilizing the determined second account number, the determined second expiration date and the determined second verification value in place of the first account number, the first expiration date and the first verification value,
wherein (i) each segment of the encrypted account number portion contains less information than the whole encrypted account number portion and (ii) the first segment, the second segment and the third segment of the encrypted account number portion collectively contain all the information in the whole encrypted account number portion.

6. The computer readable medium of claim 5 wherein the second expiration date is determined and determining the second expiration date comprises determining the second expiration date at least in part by mapping the second segment of the encrypted account number portion to a date.

7. The computer readable medium of claim 5 , wherein the second account number comprises a signal segment, the third segment of the encrypted account number portion, and an unencrypted portion of the first account number, the signal segment of the second account number indicating that the second account number includes an encrypted portion.

8. The computer readable medium of claim 5 , wherein an unencrypted portion of the first account number is incorporated into the second account number and the unencrypted portion consists of exactly four digits.

9. A computer apparatus comprising:
at least one processor; and
at least one computer readable medium communicatively coupled with the at least one processor and collectively having stored thereon code, executable by the at least one processor, that configures the computer apparatus to, at least:
encrypt a first portion of a first account number, the first portion having less digits than the whole first account number, to form an encrypted account number portion, while leaving a remaining portion of the first account number unencrypted, the first account number being associated with a first expiration date and a first verification value;
determine a second account number based at least in part on a first segment of the encrypted account number portion and the remaining portion of the first account number;
determine a second expiration date based at least in part on a second segment of the encrypted account number portion;
determine a second verification value based at least in part on a third segment of the encrypted account number portion; and
participate in a transaction with respect to an account corresponding to the first account number utilizing the determined second account number, the determined second expiration date and the determined second verification value in place of the first account number, the first expiration date and the first verification value,

wherein (i) each segment of the encrypted account number portion contains less information than the whole encrypted account number portion and (ii) the first segment, the second segment and the third segment of the encrypted account number portion collectively contain all the information in the whole encrypted account number portion.

10. The method of claim 1 , wherein determining the second expiration date comprises encoding the second segment of the encrypted account number portion as the second expiration date.

11. The method of claim 10 , wherein:
the method further comprises maintaining a map from a plurality of segment values to a corresponding plurality of dates; and
encoding the second segment of the encrypted account number portion comprises determining a date among the plurality of dates that corresponds to the second segment utilizing the map.

Assignees

• Faith Patrick
• Koganti Krishna Prasad
• Visa Int Service Ass

Inventors

• Faith Patrick
• Koganti Krishna Prasad

Classifications

• G06Q20/385

  using an alias or single-use codes · CPC title

• H04L9/32

  including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials} · CPC title

• G06Q20/10 Primary

  specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems · CPC title

• H04L2209/56

  Financial cryptography, e.g. electronic payment or e-cash · CPC title

• G06Q20/383

  Anonymous user system · CPC title