Systems and methods for real-time account access

Patent metadata

Field	Value
Publication number	US-12079805-B2
Application number	US-202015931357-A
Country	US
Kind code	B2
Filing date	May 13, 2020
Priority date	Mar 19, 2012
Publication date	Sep 3, 2024
Grant date	Sep 3, 2024

Abstract

Systems, methods, and computer-readable media are provided for processing and settling financial transactions. An example method comprises receiving a transaction from an originator. The transaction comprises information associated with an identification of an initiating user or the account. The method comprises determining the actual account number, transmitting a financial services transaction request comprising the actual account number to a financial institution, receiving a response, and transmitting a response back to the originator. Another method comprises receiving, from a user device, a request to associate a financial account with a user account. The method comprises generating and sending an association message to a payment network and receiving a key associated with the financial account for use in initiating financial transactions. Another method comprises utilizing such a key to generate and process a transaction request. Other systems, methods, and media are also provided.

First claim

What is claimed is:

1. A method for processing payment transactions via a network comprising:
receiving an authentication request associated with a user account from a transaction origination point system, wherein the transaction origination point system comprises one or more of a mobile wallet, a bill payment website, a mobile bill payment application, a teller station, a kiosk, an in-branch access terminal, or a funds transfer website, wherein the authentication request comprises a data element populated with snips wherein each snip is labeled with a tag wherein each of the tags indicates a length of the data element, wherein a plurality of the snips are obfuscated;
sending an account identification request comprising the snips to a financial institution system based on the authentication request;
validating the snips in the account identification request, wherein validating the snips comprises gathering corresponding data to the snips from a financial account of the financial institution system, obfuscating the gathered corresponding data in the same way that the plurality of the snips are obfuscated, comparing the gathered corresponding data with the snips to determine if they match, and validating the snips if there is a match;
receiving an account validation response from the financial institution system reflecting the match between the snips and data associated with the financial account, wherein the account validation response comprises a bit map that indicates which snips match data associated with the financial account;
determining that the user account is associated with the financial account if the bit map reflects that a majority number of snips match data associated with the financial account;
associating the financial account and the user account based on the validation response;
generating a participant authentication key based on the association between the financial account and the user account, wherein the participant authentication key comprises financial institution information;
generating a payment instruction key based on the financial account, using the participant authentication key as a key of the payment instruction key;
encrypting the payment instruction key using a key exchange key; and
sending the encrypted payment instruction key to the transaction origination point system;
generating an application request cryptogram;
receiving a transaction request, comprising the application request cryptogram, from the transaction origination point;
deriving the participant authentication key and the payment instruction key based on the application request cryptogram;
validating the application request cryptogram using the payment instruction key;
sending the transaction request to the financial institution;
receiving a transaction request response from the financial institution, the response approving or denying the transaction request; and
forwarding the transaction request response to the transaction origination point.

2. The method of claim 1 , wherein the authentication request comprises plaintext data.

3. The method of claim 1 , wherein receiving the authentication request validation comprises receiving the plurality of snips.

4. The method of claim 3 , wherein the account validation response comprises match data based on the plurality of snips and data associated with the financial account.

5. The method of claim 1 , wherein the account validation response reflects a match between a snip and obfuscated data associated with the financial account.

6. The method of claim 1 , wherein an identification data of a snip comprises at least one of:
a proposed current balance of the financial account;
a user identifier associated with the financial account;
a card verification value;
digits of a telephone number; or
a shared secret.

7. The method of claim 1 , wherein a tag corresponds to a snip and additional tags correspond to additional snips.

8. The method of claim 1 , wherein generating the participant authentication key comprises using a hardware security module.

9. The method of claim 1 , wherein generating a participant authentication key comprises encrypting information relating to the financial account using a service provider master key stored in a hardware security module.

10. The method of claim 9 , wherein the encrypted information includes at least one of a routing transit number or a bank identification number.

11. The method of claim 1 , wherein generating a payment instruction key comprises generating a keyed cryptographic hash.

12. The method of claim 1 , wherein generating a payment instruction key comprises hashing an identifier associated with the financial account.

13. The method of claim 1 , wherein the key exchange key is predetermined key exchange agreed to between the transaction origination point and a payment network.

14. A system for processing a payment transaction, comprising:
at least one processor; and
at least one memory containing instructions that, when executed by the at least one processor, cause the at least one processor to perform a method comprising:
receiving an authentication request associated with a user account from a transaction origination point system, wherein the transaction origination point system comprises one or more of a mobile wallet, a bill payment website, a mobile bill payment application, a teller station, a kiosk, an in-branch access terminal, or a funds transfer website, wherein the authentication request comprises a data element populated with snips wherein each snip is labeled with a tag wherein each of the tags indicates a length of the data element, wherein a plurality of the snips are obfuscated;
sending an account identification request comprising the snips to a financial institution system based on the authentication request;
validating the snips in the account identification request, wherein validating the snips comprises gathering corresponding data to the snips from a financial account of the financial institution system, obfuscating the gathered corresponding data in the same way that the plurality of the snips are obfuscated, comparing the gathered corresponding data with the snips to determine if they match, and validating the snips if there is a match;
receiving an account validation response from the financial institution system reflecting the match between the snips and data associated with the financial account, wherein the account validation response comprises a bit map that indicates which snips match data associated with the financial account;
determining that the user account is associated with the financial account if the bit map reflects that a majority number of snips match data associated with the financial account;
associating the financial account and the user account based on the validation response;
generating a participant authentication key based on the association between the financial account and the user account, wherein the participant authentication key comprises financial institution information;
generating a payment instruction key based on the financial account, using the participant authentication key as a key of the payment instruction key;
encrypting the payment instruction key using a key exchange key;
sending the encrypted payment instruction key to the transaction origination point system;
generating an application request cryptogram;
receiving a transaction request comprising the application request cryptogram from the transaction origination point;
deriving the participant authentication key and the payment instruction key based on the application request cryptogram;
vali

Assignees

• Fidelity Information Services Llc

Inventors

• Gordon Peter
• Marcous Neil
• Woodbury Robert

Classifications

• G06Q20/40

  Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists · CPC title

• G06Q20/023

  the neutral party being a clearing house · CPC title

• G06Q20/10 Primary

  specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems · CPC title

• G06Q20/3829 Primary

  involving key management · CPC title