Integration of verification tokens with mobile communication devices

Patent metadata

Field	Value
Publication number	US-10846683-B2
Application number	US-201916446984-A
Country	US
Kind code	B2
Filing date	Jun 20, 2019
Priority date	May 15, 2009
Publication date	Nov 24, 2020
Grant date	Nov 24, 2020

Abstract

Apparatuses, methods, and systems pertaining to the verification of portable consumer devices are disclosed. In one implementation, a verification token is communicatively coupled to a computer by a USB connection so as to use the computer's networking facilities. The verification token reads identification information from a user's portable consumer device (e.g., credit card) and sends the information to a validation entry over a communications network using the computer's networking facilities. The validation entity applies one or more validation tests to the information that it receives from the verification token. If a selected number of tests are passed, the validation entity sends a device verification value to the verification token, and optionally to a payment processing network. The verification token may enter the device verification value into a CVV field of a web page appearing on the computer's display, or may display the value to the user using the computer's display.

First claim

What is claimed is:

1. A mobile communication device comprising:
a housing;
a first processor disposed within the housing;
a first memory unit disposed within the housing;
an input-output controller coupled to the first processor;
a verification token disposed within the housing and communicatively coupled to the input-output controller, the verification token comprising a second processor separate from the first processor, and a second memory unit that is separate from the first memory unit, and wherein the verification token stores dynamic account information from a validation entity; and
a display coupled to the first processor and a button displayed on the display for activating the verification token.

2. The mobile communication device of claim 1 , wherein the verification token is configured to receive an identifier from a portable consumer device, store the identifier, request the dynamic account information from the validation entity using the identifier, and automatically erase the identifier.

3. The mobile communication device of claim 1 , wherein the mobile communication device is a mobile phone.

4. The mobile communication device of claim 1 , wherein the verification token is protected from attacks from hackers.

5. The mobile communication device of claim 1 , wherein the second memory unit is a security module.

6. The mobile communication device of claim 1 , wherein the verification token is configured to store a uniform resource identifier for the validation entity.

7. The mobile communication device of claim 1 , wherein the validation entity provides a device verification value to the verification token.

8. The mobile communication device of claim 7 , wherein the verification token stores the device verification value.

9. The mobile communication device of claim 7 , wherein the button is configured to cause the first processor to send an activation signal to the verification token.

10. The mobile communication device of claim 1 , wherein the verification token is configured to automatically power off after being activated.

11. A method comprising:
receiving dynamic account information at a verification token in a mobile communication device from an entity, the mobile communication device comprising (a) a housing, (b) a first processor disposed within the housing, (c) a first memory unit disposed within the housing, (d) an input-output controller coupled to the first processor, (e) a display coupled to the first processor, and (e) the verification token communicatively coupled to the input-output controller, the verification token comprising a second processor separate from the first processor, a second memory unit separate from the first memory unit:
displaying on the display of the mobile communication device, the display coupled to the first processor, a button;
receiving, at the mobile communication device a selection of the button; and
activating the verification token.

12. The method of claim 11 , wherein the second memory unit is a security module.

13. The method of claim 11 , further comprising:
storing, by the verification token, a uniform resource identifier for a validation entity.

14. The method of claim 11 further comprising:
receiving, by the mobile communication device, a device verification value from a validation entity.

15. The method of claim 14 further comprising:
storing, by the mobile communication device, the device verification value received from the validation entity.

16. The method of claim 11 , further comprising:
receiving an identifier from a portable consumer device;
storing the identifier; and
requesting the dynamic account information from a validation entity using the identifier, and automatically erase the identifier.

17. The method of claim 11 , wherein activating comprises:
causing the first processor to send an activation signal to the verification token.

18. The method of claim 11 , further comprising:
automatically powering off the verification token after being activated.

19. The method of claim 11 , wherein the mobile communication device is a mobile phone.

20. The method of claim 11 , wherein the verification token includes a USB connector.

Assignees

• Visa Int Service Ass

Inventors

• Hammad Ayman

Classifications

• G06Q20/3229

  Use of the SIM of a M-device as secure element · CPC title

• G06Q20/3227 Primary

  using secure elements embedded in M-devices · CPC title

• G06Q20/425

  using two different networks, one for transaction and one for security confirmation · CPC title

• H04L9/3231

  Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861) · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title