Systems and methods for code display and use

Patent metadata

Field	Value
Publication number	US-11080696-B2
Application number	US-201715421891-A
Country	US
Kind code	B2
Filing date	Feb 1, 2017
Priority date	Feb 1, 2016
Publication date	Aug 3, 2021
Grant date	Aug 3, 2021

Abstract

Embodiments of the present invention relate to systems and methods that allow users to use their communication devices to perform transactions (e.g., payment transactions, access transactions, etc.). To complete a transaction, a resource provider electronically generates a code representing transaction data and displays it on an access device. The user scans the code with his or her communication device using a camera associated with the communication device, for example. The code is interpreted by an application on the communication device. The user may request and receive a token at the communication device corresponding to sensitive information selected to perform the transaction (e.g., a primary account number). The user may then provide the token and the transaction data via the communication device to a server computer, which may facilitate completion of the transaction between the user and the resource provider using the transaction data and the token.

First claim

What is claimed:

1. A method of performing a transaction between a user and a resource provider, the method comprising the following steps, in order:
receiving at a communication device of the user, a code from an access device associated with the resource provider, wherein receiving the code from the access device comprises scanning the code displayed on the access device, wherein the code is a QR code and the access device is a point of sale device;
in response to receiving the code, determining, by the communication device, transaction data associated with the code;
in response to determining the transaction data associated with the code, displaying, by the communication device, a list of sensitive information comprising a list of primary account numbers;
in response to determining the transaction data associated with the code, receiving a selection of sensitive information comprising a primary account number from the list of primary account numbers using a data input element on a user interface of the communication device;
retrieving, by the communication device, a token reference identifier on the communication device corresponding to the selected sensitive information comprising the primary account number;
in response to retrieving the token reference identifier on the communication device, initiating, by the communication device, requesting a token corresponding to the selected sensitive information comprising the primary account number by transmitting the transaction data and the token reference identifier corresponding to the selected primary account number to an application provider computer, which generates a unique transaction identifier for the transaction and requests and receives the token from a token server computer, which retrieves the token using a stored mapping between the token reference identifier and the token, and transmits the unique transaction identifier, the token and the transaction data to a transport computer, which generates and transmits an authorization request message comprising the token and the transaction data to a transaction processing computer to request authorization for the transaction, receives an authorization response message from the transaction processing computer, and transmits the authorization response message comprising the unique transaction identifier to the access device, wherein the token is a payment token that has a same format as the primary account number;
after initiating requesting the token, receiving, by the communication device and from the application provider computer, the unique transaction identifier; and
providing, by the communication device, the unique transaction identifier to the access device, wherein the access device matches the unique transaction identifier provided by the communication device with the unique transaction identifier received in the authorization response message to complete the transaction with the access device.

2. The method of claim 1 , further comprising:
encrypting, by the communication device, the transaction data, prior to sending the transaction data to the application provider computer.

3. The method of claim 1 , wherein the transaction data comprises one or more of resource provider data, location data, and a transaction type.

4. The method of claim 1 , wherein the token and the primary account number are each 16 digits long.

5. The method of claim 1 , wherein the application provider computer requests and receives a verification value from the token server computer, and transmits the verification value along with the unique transaction identifier, the token, and the transaction data to the transport computer, which generates and transmits the authorization request message comprising the token, the verification value, and the transaction data to the transaction processing computer to request authorization for the transaction.

6. The method of claim 5 , wherein the verification value comprises one or more of a card verification number (CVN) and a token authentication verification value (TAVV).

7. A communication device comprising:
a processor; and
a memory coupled to the processor, the memory storing instructions, which when executed by the processor, cause the communication device to perform a method including the following steps, in order:
receiving, at the communication device operated by a user, a code from an access device associated with a resource provider for a transaction, wherein receiving the code from the access device comprises scanning the code displayed on the access device, wherein the code is a QR code and the access device is a point of sale device;
in response to receiving the code, determining, by the communication device, transaction data associated with the code;
in response to determining the transaction data associated with the code, displaying, by the communication device, a list of sensitive information comprising a list of primary account numbers;
in response to determining the transaction data associated with the code, receiving a selection sensitive information comprising of a primary account number using a data input element on a user interface of the communication device;
retrieving, by the communication device, a token reference identifier on the communication device corresponding to the selected sensitive information comprising the primary account number;
in response to retrieving the token reference identifier on the communication device, initiating, by the communication device, requesting a token corresponding to the selected sensitive information comprising the primary account number by transmitting the transaction data and the token reference identifier corresponding to the selected primary account number to an application provider computer, which generates a unique transaction identifier for the transaction and requests and receives the token from a token server computer, which retrieves the token using a stored mapping between the token reference identifier and the token, and transmits the unique transaction identifier, the token and the transaction data to a transport computer, which generates and transmits an authorization request message comprising the token and the transaction data to a transaction processing computer to request authorization comprising the unique transaction identifier for the transaction, receives an authorization response message from the transaction processing computer, and transmits the authorization response message to the access device, wherein the token is a payment token that has a same format as the primary account number;
after initiating requesting the token, receiving, by the communication device and from the application provider computer, the unique transaction identifier; and
providing, by the communication device, the unique transaction identifier to the access device, wherein the access device matches the unique transaction identifier provided by the communication device with the unique transaction identifier received in the authorization response message to complete the transaction with the access device.

8. The communication device of claim 7 , wherein the communication device is a mobile phone.

9. The communication device of claim 7 , wherein the transaction data comprises a resource provider identifier, location data, and a transaction type.

10. The communication device of claim 7 , wherein the step of initiating requesting the token corresponding to the selected sensitive information further comprises:
initiating requesting a verification value corresponding to the selected sensitive information.

11. The communication device of claim 10 , wherein the verification value comprises one or more of a card ver

Assignees

• Visa Int Service Ass

Inventors

• Flurscheim Christian
• Powell Glenn
• Aabye Christian
• Chitalia Jalpesh
• Wong Erick

Classifications

• G06Q20/4018

  using the card verification value [CVV] associated with the card · CPC title

• G06Q20/385 Primary

  using an alias or single-use codes · CPC title

• G06Q20/3821

  Electronic credentials · CPC title

• G06Q20/3276

  using a pictured code, e.g. barcode or QR-code, being read by the M-device · CPC title

• G06Q20/382

  insuring higher security of transaction · CPC title