Cloud-based transactions methods and systems

Patent metadata

Field	Value
Publication number	US-10909522-B2
Application number	US-201916438178-A
Country	US
Kind code	B2
Filing date	Jun 11, 2019
Priority date	Dec 19, 2013
Publication date	Feb 2, 2021
Grant date	Feb 2, 2021

Abstract

Systems and methods provide for communication of transaction data that is formatted according to a transaction type that is support by an access device. First transaction data may be formatted according to a first type of transaction supported by a first access device and second transaction data may be formatted according to a second type of transaction supported by a second access device. The first transaction data may be transmitted over a first communication link to the first access device and the second transaction data may be transmitted to the second access over a second communication link.

First claim

What is claimed is:

1. A communication device comprising:
a processor circuit; and
a non-transitory computer-readable storage medium coupled to the processor circuit and storing code executable by the processor circuit for implementing a method for communicating comprising:
receiving a first signal for a first transaction from a first access device, the first signal being received over a first communication link and including a first transaction type indicator indicating a first type of transaction supported by the first access device and first terminal transaction data;
in response to receiving the first signal:
generating a first transaction cryptogram by encrypting the first terminal transaction data using a limited-use key (LUK); and
transmitting first transaction data including the first transaction cryptogram to the first access device over the first communication link, the first transaction data being formatted according to the first type of transaction;

receiving a second signal for a second transaction from a second access device, the second signal being received over a second communication link and including a second transaction type indicator indicating a second type of transaction supported by the second access device and second terminal transaction data;
in response to receiving the second signal:
determining, based on the second transaction type indicator, that a second transaction cryptogram for the second transaction is to be generated without the second terminal transaction data;
generating the second transaction cryptogram using a same LUK as the LUK used for the first transaction cryptogram, wherein the second transaction cryptogram has a different format than the first transaction cryptogram; and
transmitting second transaction data including the second transaction cryptogram to the second access device over the second communication link, the second transaction data being formatted according to the second type of transaction.

2. The communication device of claim 1 , wherein the first transaction data includes a token that is used as a substitute for an account identifier.

3. The communication device of claim 1 , wherein at least one of the first communication link or the second communication link is a wireless communication link.

4. The communication device of claim 1 , wherein the first communication link and the second communication link use the same type of communication protocol.

5. The communication device of claim 1 , wherein the first transaction cryptogram and the second transaction cryptogram are generated using the same encryption function.

6. The communication device of claim 1 , wherein the first transaction cryptogram and the second transaction cryptogram are generated using different encryption functions.

7. The communication device of claim 1 , wherein the second transaction cryptogram is transmitted with a key index to the second access device, wherein the key index contains information pertaining to generation of the LUK.

8. The communication device of claim 1 , wherein the method further comprises:
transmitting a first file locator over the first communication link, the first file locator being for first account data at a first file location of the communication device; and
transmitting a second file locator over the second communication link, the second file locator being for second account data at a second file location of the communication device, wherein the first file location is different from the second file location.

9. The communication device of claim 8 , wherein the method further comprises:
receiving a first account data request over the first communication link, the first account data request indicating the first file location; and
receiving a second account data request over the second communication link, the second account data request indicating the second file location.

10. The communication device of claim 1 , wherein the first type of transaction is an integrated chip based transaction, and the second type of transaction is a magnetic stripe based transaction.

11. A method comprising
receiving, by a communication device, a first signal for a first transaction from a first access device, the first signal being received over a first communication link and including a first transaction type indicator indicating a first type of transaction supported by the first access device and first terminal transaction data;
in response to receiving the first signal:
generating, by the communication device, a first transaction cryptogram by encrypting the first terminal transaction data using a limited-use key (LUK); and
transmitting, by the communication device, first transaction data including the first transaction cryptogram to the first access device over the first communication link, the first transaction data being formatted according to the first type of transaction;

receiving, by the communication device, a second signal for a second transaction from a second access device, the second signal being received over a second communication link and including a second transaction type indicator indicating a second type of transaction supported by the second access device and second terminal transaction data;
in response to receiving the second signal:
determining, by the communication device based on the second transaction type indicator, that a second transaction cryptogram for the second transaction is to be generated without the second terminal transaction data;
generating, by the communication device, the second transaction cryptogram using a same LUK as the LUK used for the first transaction cryptogram, wherein the second transaction cryptogram has a different format than the first transaction cryptogram; and
transmitting, by the communication device, second transaction data including the second transaction cryptogram to the second access device over the second communication link, the second transaction data being formatted according to the second type of transaction.

12. The method of claim 11 , wherein the first transaction data includes a token that is used as a substitute for an account identifier.

13. The method of claim 11 , wherein at least one of the first communication link or the second communication link is a wireless communication link.

14. The method of claim 11 , wherein the first communication link and the second communication link use the same type of communication protocol.

15. The method of claim 11 , wherein the first transaction cryptogram and the second transaction cryptogram are generated using the same encryption function.

16. The method of claim 11 , wherein the first transaction cryptogram and the second transaction cryptogram are generated using different encryption functions.

17. The method of claim 11 , wherein the second transaction cryptogram is transmitted with a key index to the second access device, wherein the key index contains information pertaining to generation of the LUK.

18. The method of claim 11 , further comprising:
transmitting, by the communication device, a first file locator over the first communication link, the first file locator being for first account data at a first file location of the communication device; and
transmitting, by the communication device, a second file locator over the second communication link, the second file locator being for second account data at a second file location of the communication device, wherein the first file location is different from the second file location.

19. The method o

Assignees

• Visa Int Service Ass

Inventors

• Wong Erick
• Flurscheim Christian
• Makhotin Oleg
• Lopez Eduardo
• Sharma Sanjeev
• Jones Christopher
• Guglani Abhishek
• Sevanto Jarkko Oskari
• Patel Bharatkumar
• Or Tai Lung Burnnet
• Aabye Christian
• Ngo Hao
• Sheets John F

Classifications

• H04L2209/24

  Key scheduling, i.e. generating round keys or sub-keys for block encryption · CPC title

• H04L2209/20

  Manipulating the length of blocks of bits, e.g. padding or block truncation · CPC title

• H04L9/14

  using a plurality of keys or algorithms · CPC title

• H04L9/088

  Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms (network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068) · CPC title

• H04L9/0866

  involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics · CPC title