Secure remote payment transaction processing

Patent metadata

Field	Value
Publication number	US-12198124-B2
Application number	US-202117336213-A
Country	US
Kind code	B2
Filing date	Jun 1, 2021
Priority date	Jul 15, 2013
Publication date	Jan 14, 2025
Grant date	Jan 14, 2025

Abstract

Embodiments of the present invention are directed to methods, apparatuses, computer readable media and systems for securely processing remote transactions. One embodiment of the invention is directed to a method of processing a remote transaction initiated by a mobile device comprising a server computer receiving a payment request including encrypted payment information. The encrypted payment information being generated by a mobile payment application of the mobile device and being encrypted using a third party key. The method further comprises decrypting the encrypted payment information using the third party key, determining a transaction processor public key associated with the payment information, and re-encrypting the payment information using the transaction processor public key. The method further comprises sending a payment response including the re-encrypted payment information to a transaction processor. The transaction processor decrypts the re-encrypted payment information using a transaction processor private key and initiates a payment transaction.

First claim

What is claimed is:

1. A method comprising:
transmitting, by a transaction processor in a mobile device, a payment request comprising encrypted payment information to a server computer over a communications network, wherein the server computer receives the encrypted payment information, decrypts the encrypted payment information using a third party key to obtain payment information, determines a transaction processor public key, re-encrypts the payment information with the transaction processor public key, and transmits a payment response comprising the re-encrypted payment information to the transaction processor;
receiving, by the transaction processor from the server computer, the payment response including the re-encrypted payment information;
decrypting, by the transaction processor, the re-encrypted payment information using a transaction processor private key; and
initiating a payment transaction using the decrypted re-encrypted payment information,
wherein the transaction processor is an untrusted merchant application.

2. The method of claim 1 , wherein the payment request includes a transaction processor certificate, and the server computer determines the transaction processor public key by:
validating that the transaction processor certificate is authentic;
verifying that the transaction processor certificate is currently valid with a certificate authority; and
extracting the transaction processor public key from the transaction processor certificate.

3. The method of claim 1 , wherein the transaction processor public key is a merchant application public key, and the transaction processor private key is a merchant application private key.

4. The method of claim 1 , wherein the encrypted payment information includes encrypted payment credentials and unencrypted transaction information.

5. The method of claim 1 , wherein the encrypted payment information includes encrypted payment credentials and unencrypted transaction information, and wherein the payment credentials are stored in a secure memory of the mobile device and the mobile payment application obtains the payment credentials from the secure memory.

6. The method of claim 1 , wherein the encrypted payment information includes encrypted payment credentials including an encrypted account identifier and expiration date.

7. The method of claim 1 , wherein the encrypted payment information includes encrypted payment credentials including a dynamic value generated using a shared algorithm associated with a payment processing network.

8. The method of claim 1 , wherein the transaction processor initiates the payment transaction by mapping the decrypted re-encrypted payment information to an authorization request message configured to be processed by a payment processing network.

9. The method of claim 1 , wherein the server computer is a remote key manager.

10. A system comprising a mobile device comprising a transaction processor, the system comprising:
one or more processors; and
one or more computer-readable media coupled to the one or more processors, the one or more computer-readable media comprising code, executable by the one or more processors, for performing operations comprising:
transmitting, by the transaction processor in the mobile device, a payment request comprising encrypted payment information to a server computer in the system over a communications network, wherein the server computer is programmed to receive the encrypted payment information, decrypt the encrypted payment information using a third party key to obtain payment information, determine a transaction processor public key, re-encrypt the payment information with the transaction processor public key, and transmit a payment response comprising the re-encrypted payment information to the transaction processor;
receiving, by the transaction processor from the server computer, the payment response including the re-encrypted payment information;
decrypting, by the transaction processor, the re-encrypted payment information using a transaction processor private key; and
initiating a payment transaction using the decrypted re-encrypted payment information,
wherein the transaction processor is an untrusted merchant application.

11. The system of claim 10 , wherein the encrypted payment information includes encrypted payment credentials and unencrypted transaction information.

12. The method of claim 1 , further comprising, receiving by the transaction processor the encrypted payment information from a mobile application on the mobile device.

13. The method of claim 12 , wherein the payment information comprises account data and a cryptogram.

14. The method of claim 13 , wherein initiating the payment transaction comprises transmitting the payment information to a merchant computer, which transmits an authorization request message to an acquirer computer.

15. The method of claim 14 , wherein the payment request comprises a merchant certificate comprising a digital signature, wherein the server computer validates the digital signature using the transaction processor public key before re-encrypting the payment information.

16. The method of claim 15 , wherein the third party key is a symmetric key that is shared between the mobile application and the server computer.

17. The method of claim 16 , wherein the cryptogram is dCVV or dCVV2 value.

Assignees

• Visa Int Service Ass

Inventors

• Sheets John
• Wagner Kim
• Aabye Christian
• Liu Frederick
• Karpenko Igor
• Powell Glenn
• Pirzadeh Kiushan

Classifications

• G06Q20/322 Primary

  Aspects of commerce using mobile devices [M-devices] · CPC title

• G06Q20/3829

  involving key management · CPC title

• G06Q20/40

  Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists · CPC title

• G06Q20/3278 Primary

  RFID or NFC payments by means of M-devices · CPC title

• G06Q20/326

  Payment applications installed on the mobile devices · CPC title