User authentication and transaction staging

Patent metadata

Field	Value
Publication number	US-12182793-B2
Application number	US-201816156560-A
Country	US
Kind code	B2
Filing date	Oct 10, 2018
Priority date	Oct 13, 2017
Publication date	Dec 31, 2024
Grant date	Dec 31, 2024

Abstract

There is presented a method and a computing device for user authentication and transaction staging on a user device. The method comprises authenticating a user of the user device by a first device verification method and generating transaction credentials at the user device. The method further comprises generating at least one optical code data corresponding to the transaction credentials and displaying the at least one optical code on the user device in a form suitable for scanning by a second device to progress a transaction with the second device.

First claim

The invention claimed is:

1. A computer-implemented method at a user device comprising a main operating environment and a protected operating environment, the main operating environment comprising a processor and memories, the protected operating environment is at least one of a Subscriber Identity Module (SIM), Universal Integrated Circuit Card (UICC), a Secure Element, or a Trusted Execution Environment, the method comprising:
executing, by the protected operating environment of the user device, a wallet application; authenticating, by the protected operating environment of the user device, a user of the user device by a consumer device cardholder verification method (CDCVM);
receiving, by a user interface of the executing wallet application and from the user, transaction details of a transaction comprising at least a transaction amount;
displaying, by the executing wallet application, one or more payment cards on a display of the user device;
receiving, by the executing wallet application and from the user, a selection of a payment card of the one or more payment cards for the transaction;
generating, by the processor in the main operating environment, a time stamp of when the transaction details are received;
based on the authenticating of the user and the selection of the payment card, generating, by the executing wallet application and using the time stamp, a cryptogram and Europay, Mastercard, and Visa (EMV) data;
generating, by the executing wallet application, a 1-D barcode using the cryptogram and a 2-D barcode using the cryptogram and the EMV data, wherein the 1-D barcode and the 2-D barcode comprise the transaction amount;
simultaneously displaying, by the user interface of the executing wallet application at the user device, the 1-D barcode and the 2-D barcode on the display and to a merchant device;
receiving, by the processor in the main operating environment, a transaction delivery notification from a service provider computer; and
displaying, by the processor in the main operating environment, the notification on the display.

2. The method of claim 1 , wherein the 1-D barcode is a Code 128 barcode.

3. The method of claim 1 , wherein the 2-D barcode is an EMV Quick Response Code.

4. The method of claim 3 , wherein the time stamp comprises an unpredictable number.

5. The method of claim 1 , wherein authenticating the user of the user device by the consumer device cardholder verification method comprises authenticating the user of the user device using a method selected from a group comprising:
A personal identification number (PIN), a password, and a biometric authentication mechanism.

6. A user computing device comprising:
a display;
a main operating environment;
a protected operating environment;
wherein the main operating environment and protected operating environment are separate environments;
at least one processor;
at least one memory storing a wallet application and executable instructions that when executed by the at least one processor causes the at least one processor to perform the operations of:
executing the wallet application in the protected operating environment;
authenticating, via the executing wallet application, a user by a consumer device cardholder verification method (CDCVM);
receiving, via a user interface of the executing wallet application, and from the user, transaction details of a transaction comprising at least a transaction amount;
displaying, via the executing wallet application, one or more payment cards on the display;
receiving, via the executing wallet application, a selection of a payment card of the one or more payment cards for the transaction;
generating, via the executing wallet application and using a time stamp of when the transaction details are received, transaction information comprising a cryptogram and Europay, Mastercard, and Visa (EMV) data;
based on the authenticating of the user and the selection of the payment card, generating, via the executing wallet application and using the time stamp, a cryptogram and EMV data;
generating, via the executing wallet application, a 1-D barcode using the cryptogram and a 2-D barcode using the cryptogram and the EMV data, wherein the 1-D barcode and the 2-D barcode comprise the transaction amount; and
simultaneously displaying, via the user interface of the executing wallet application, the 1-D barcode and the 2-D barcode on the display and to a merchant device; and
generating, in the main operating environment, the time stamp of when the transaction details are received; and

receiving, in the main operating environment, a transaction delivery notification from a service provider computer; and
displaying, in the main operating environment, the transaction delivery notification on the display.

Assignees

• Mastercard International Inc
• Mastercard Int Incorporated Purchase

Inventors

• Hay Florent
• Chen Kuan Hua
• Roberts David Anthony

Classifications

• H04W12/06

  Authentication · CPC title

• G06Q2220/00

  Business processing using cryptography · CPC title

• G06Q20/40145

  Biometric identity checks · CPC title

• G06Q20/4012

  Verifying personal identification numbers [PIN] · CPC title

• G06K7/1417

  2D bar codes · CPC title