Transaction device use of a dynamically generated value based on a next expected session key

Patent metadata

Field	Value
Publication number	US-10423953-B2
Application number	US-201815950390-A
Country	US
Kind code	B2
Filing date	Apr 11, 2018
Priority date	Aug 31, 2015
Publication date	Sep 24, 2019
Grant date	Sep 24, 2019

Abstract

A system, method, and computer readable medium (collectively, the “system”) are provided. The system may include a processor configured to perform operations and/or steps comprising storing, by a processor, a session key on a mobile device, wherein the session key is encrypted. The system receiving a transaction request, decrypting the session key, and broadcasting a signal configured for being received by a magnetic stripe reader. Track 1 data and/or track 2 data may be encoded in the signal. The track 1 data and/or the track 2 data may also comprise a dynamically generated value that is generated based on the session key.

First claim

What is claimed is:

1. A method comprising:
generating, by a transaction device, a dynamically generated value based on a next expected session key; and
transmitting, by the transaction device, a transaction request including the dynamically generated value,
wherein the next expected session key from a plurality of session keys in the transaction device is decrypted, and
wherein the plurality of session keys have an expected order of use.

2. The method of claim 1 , further comprising receiving, by the transaction device, a signal that is used for the generating the dynamically generated value.

3. The method of claim 1 , wherein at least one of track 1 emulated data or track 2 emulated data includes the dynamically generated value.

4. The method of claim 1 , wherein at least one of track 1 emulated data or track 2 emulated data are encoded in a signal transmitted to the transaction device.

5. The method of claim 1 , wherein the plurality of session keys are stored with the expected order of use.

6. The method of claim 1 , wherein the plurality of session keys are stored having the expected order of use on the transaction device.

7. The method of claim 1 , wherein the generating is in response to a signal being broadcasted.

8. The method of claim 1 , wherein the transaction device is at least one of a mobile device or a magnetic stripe reader.

9. The method of claim 1 , wherein a network trusted app encrypts the next expected session key.

10. The method of claim 1 , wherein a network trusted app encrypts the next expected session key, and wherein the network trusted app comprises a trusted execution environment chip.

11. The method of claim 1 , wherein the plurality of session keys are received from an enterprise wallet hub before the plurality of session keys are stored.

12. The method of claim 1 , wherein the next expected session key is cleared in response to a signal with the dynamically generated value being transmitted.

13. The method of claim 1 , wherein a signal with the dynamically generated value is encoded in a magnetic field.

14. The method of claim 1 , further comprising using, by the transaction device, a magnetic stripe emulation as a communication medium, in response to not detecting a near field communication terminal.

15. A transaction device, comprising:
a processor; and
a tangible, non-transitory memory configured to communicate with the processor, the tangible, non-transitory memory having instructions stored thereon that, in response to execution by the processor, cause the processor to perform operations comprising:
generating a dynamically generated value based on a next expected session key; and
transmitting a transaction request including the dynamically generated value,
wherein the next expected session key from a plurality of session keys in the transaction device is decrypted, and
wherein the plurality of session keys have an expected order of use.

16. The device of claim 15 , wherein at least one of track 1 emulated data or track 2 emulated data includes the dynamically generated value.

17. The device of claim 15 , wherein at least one of track 1 emulated data or track 2 emulated data are encoded in a signal.

18. An article of manufacture including a non-transitory, tangible computer readable storage medium having instructions stored thereon that, in response to execution by a transaction device, cause the transaction device to perform operations comprising:
generating, by the transaction device, a dynamically generated value based on a next expected session key; and
transmitting, by the transaction device, a transaction request including the dynamically generated value,
wherein the next expected session key from a plurality of session keys in the transaction device is decrypted, and
wherein the plurality of session keys have an expected order of use.

Assignees

• American Express Travel Related Services Co Inc

Inventors

• Deliwala Manish K
• Lupton Jonathan
• Maddukuri Ajay B
• Mcdonald John G

Classifications

• G06Q20/351

  Virtual cards · CPC title

• H04L9/0863

  involving passwords or one-time passwords (network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067) · CPC title

• H04L2209/56

  Financial cryptography, e.g. electronic payment or e-cash · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title

• H04L63/067

  using one-time keys (cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863) · CPC title