Managing customer uniqueness in tokenised systems

Patent metadata

Field	Value
Publication number	US-11210665-B2
Application number	US-201615235386-A
Country	US
Kind code	B2
Filing date	Aug 12, 2016
Priority date	Aug 14, 2015
Publication date	Dec 28, 2021
Grant date	Dec 28, 2021

Abstract

According to one aspect there is provided a method comprising a secondary payment device: receiving a device primary account number (DPAN) and a funding source proxy (FSP) derived from a funding primary account number (FPAN) of a funding source according to a predetermined algorithm; and transmitting a secondary payment device transaction request comprising said DPAN and said FSP to a payment terminal. According to another aspect there is provided a method comprising a payment terminal: receiving a secondary payment device transaction request comprising a device primary account number (DPAN) and a funding source proxy (FSP) derived from a funding primary account number (FPAN) of a funding source according to a predetermined algorithm; responsive thereto, determining that the FSP is not present on a deny list stored at the payment terminal; and responsive thereto, authorizing said secondary payment device transaction request.

First claim

What is claimed is:

1. A method of improving security of an electronic transaction comprising a secondary payment device:
receiving a device primary account number (DPAN) and a funding source proxy (FSP) derived from a funding primary account number (FPAN) of a funding source according to a predetermined algorithm; and
transmitting a secondary payment device transaction request comprising said DPAN and said FSP to a payment terminal;
wherein the DPAN is specific to said secondary payment device, and wherein the FSP corresponds to the funding source such that an identical FSP is derived for said secondary payment device and for at least another payment device associated with the funding source;
further comprising the payment terminal, prior to receiving said secondary payment device transaction request:
receiving a primary device transaction request comprising said FPAN;
responsive thereto, generating the FSP from the received FPAN according to said predetermined algorithm stored on the payment terminal;
responsive thereto, determining that the FSP is not present on a deny list stored at the payment terminal;
responsive thereto, authorizing said primary device transaction request;
issuing a request comprising the FPAN to a payment network for settlement of said transaction;
subsequent to issuing said request comprising the FPAN to said payment network, receiving a primary device transaction failed message from the payment network; and
responsive thereto, adding the FSP to a deny list stored at the payment terminal;
the payment terminal subsequently:
receiving said secondary payment device transaction request;
responsive thereto, determining that the received FSP is present on said deny list; and
responsive thereto, declining said secondary payment device transaction request;
wherein the FSP generated for the primary device transaction request is identical to the FSP derived for the secondary device transaction request.

2. A method of improving security of an electronic transaction comprising a payment terminal:
receiving a secondary payment device transaction request comprising a device primary account number (DPAN) and a funding source proxy (FSP) derived from a funding primary account number (FPAN) of a funding source according to a predetermined algorithm, wherein the DPAN is specific to a secondary payment device from which the transaction request is received, and wherein the FSP corresponds to the funding source such that an identical FSP is derived for said secondary payment device and for at least another payment device associated with the funding source;
responsive thereto, determining that the FSP is not present on a deny list stored at the payment terminal;
responsive thereto, authorizing said secondary payment device transaction request;
issuing a request comprising the DPAN to a payment network for settlement of said transaction;
subsequently receiving a secondary payment device transaction failed message from the payment network;
responsive thereto, adding the FSP to said deny list;
subsequently receiving a second primary device transaction request comprising said FPAN;
responsive thereto, generating the FSP from the received FPAN according to said predetermined algorithm stored on the payment terminal;
responsive thereto, determining that said generated FSP is present on the deny list; and
responsive thereto, declining said second primary device transaction request;
wherein the FSP generated for the second primary device transaction request is identical to the FSP derived for the secondary payment device transaction request.

3. The method of claim 2 , further comprising the payment terminal, prior to receiving said secondary payment device transaction request:
receiving a first primary device transaction request comprising said FPAN;
responsive thereto, generating the FSP from the received FPAN according to said predetermined algorithm stored on the payment terminal;
responsive thereto, determining that the FSP is not present on a deny list stored at the payment terminal;
responsive thereto, authorizing said first primary device transaction request;
issuing a request comprising the FPAN to a payment network for settlement of said transaction; and
subsequent to issuing said request comprising the FPAN to said payment network, receiving a primary device transaction approved message from the payment network.

4. A payment terminal for improving security of an electronic transaction comprising:
a receiver configured to receive from a secondary payment device a secondary payment device transaction request comprising a device primary account number (DPAN) and a funding source proxy (FSP) derived from a funding primary account number (FPAN) of a funding source according to a predetermined algorithm, and to receive from a primary device a primary device transaction request comprising the FPAN;
a memory storing a deny list; and
a processor, operatively coupled to said receiver and said memory, configured to:
determine that the FSP is not present on said deny list and, responsive thereto, authorize said secondary payment device transaction request;
issue a request comprising the DPAN to a payment network for settlement of said transaction;
subsequently receive a secondary payment device transaction failed message from the payment network;
responsive thereto, add the FSP to said deny list;
subsequently receive from a primary device a primary device transaction request comprising said FPAN;
responsive thereto, generate the FSP from the received FPAN according to said predetermined algorithm stored on the payment terminal;
responsive thereto, determine that said generated FSP is present on the deny list; and
responsive thereto, decline said primary device transaction request;

wherein the DPAN is specific to the secondary payment device from which the transaction request is received, and wherein the FSP corresponds to the funding source such that an identical FSP is derived for said secondary payment device and for said primary device associated with the funding source.

5. A system for improving security of an electronic transaction comprising:
a secondary payment device, in turn comprising:
a receiver configured to receive a device primary account number (DPAN) and a funding source proxy (FSP) derived from a funding primary account number (FPAN) of a funding source according to a predetermined algorithm;
a processor, operatively coupled to said receiver, configured to extract said DPAN and said FSP from one or more received messages; and
a transmitter, operatively coupled to said processor, configured to transmit a secondary payment device transaction request comprising the DPAN and the FSP to a payment terminal; and

a payment terminal, in turn comprising:
a receiver configured to receive from said secondary payment device a secondary payment device transaction request comprising a device primary account number (DPAN) and a funding source proxy (FSP) derived from a funding primary account number (FPAN) of a funding source according to a predetermined algorithm;
a memory storing a deny list; and
a processor, operatively coupled to said receiver and said memory, configured to:
determine that the FSP is not present on said deny list and, responsive thereto, authorize said secondary payment device transaction request;
issue a request comprising the DPAN to a payment network for settlement of said transaction;
subsequently receive a secondary payment device transaction failed message from the payment network;
responsive thereto, add the FSP to said deny list;
subsequently receive from a primary device a primary device transaction request comprising said FPAN;
responsive thereto, generate the FSP from the received FPAN according to said predet

Assignees

• Mastercard International Inc

Inventors

• Tierney John
• Noe James Christian

Classifications

• G06Q20/227 Primary

  characterised in that multiple accounts are available, e.g. to the payer · CPC title

• G06Q20/382

  insuring higher security of transaction · CPC title

• G06Q20/40 Primary

  Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists · CPC title

• G06Q20/385 Primary

  using an alias or single-use codes · CPC title

• G06Q20/3821

  Electronic credentials · CPC title