Method and apparatus for using at least a portion of a one-time password as a dynamic card verification value

Patent metadata

Field	Value
Publication number	US-9251637-B2
Application number	US-55993106-A
Country	US
Kind code	B2
Filing date	Nov 15, 2006
Priority date	Nov 15, 2006
Publication date	Feb 2, 2016
Grant date	Feb 2, 2016

Abstract

Method and apparatus for using at least a portion of a one-time password as a dynamic card verification value (CVV) are disclosed. A credit/debit card is able to generate a dynamic card verification value (CVV). Such a card may also include an indication that the dynamic CVV is to be used as a security code for purchasing or other transactions. A card-based financial transaction can be authorized in accordance with the use of a dynamic CVV by receiving a transaction authorization request for a specific credit/debit card, wherein the transaction authorization request includes a dynamic CVV. The dynamic CVV can be compared to at least a portion of a one-time password generated for the specific credit/debit card, and a transaction authorization can be sent to the merchant or vendor when the dynamic CVV matches all or a portion of the one-time password.

First claim

The invention claimed is:

1. A method for authorizing a transaction, wherein the transaction involves a credit/debit card, the method comprising:
receiving a transaction authorization request associated with the transaction involving the credit/debit card, wherein the transaction authorization request comprises a prompt for a card verification value (CVV) for authenticating the transaction, wherein the credit/debit card comprises:
one or more input devices positioned on the credit/debit card enabling a user of the credit/debit card to input information into the credit/debit card including a challenge response, wherein the one or more input devices comprise a plurality of buttons corresponding to a plurality of alpha-numeric characters;
a processor in communication with the one or more input devices positioned on the credit/debit card, wherein the processor is configured to:
generate a challenge;
present, via a visual display and a speaker of the credit/debit card, the challenge;
receive, via the plurality of buttons on the credit/debit card, a challenge response comprising alpha-numeric characters; and
determine whether or not the challenge response received into the credit/debit card is successful;

a one-time password generator automatically generating a one-time password or value based at least partially on receiving the challenge response into the credit/debit card and determining that the challenge response is successful;
presenting, via the visual display and the speaker of the credit/debit card, the one-time password, wherein a portion of the one-time password comprises a dynamic card verification value (CVV) for authenticating the transaction;

receiving the dynamic CVV; and
authorizing the transaction involving the credit/debit card if the dynamic CVV generated by the credit/debit card matches at least a portion of an externally generated one-time password for the credit/debit card.

2. The method of claim 1 further comprising sending a transaction denial when the dynamic CVV does not match the at least a portion of the one-time password.

3. The method of claim 2 further comprising:
separating the dynamic CVV from credit/debit card data;
validating the credit/debit card data; and
merging the dynamic CVV with the credit/debit card data to produce the transaction authorization or the transaction denial.

4. The method of claim 1 wherein the at least a portion of the one-time password comprises three digits of a six-digit one-time password.

5. The method of claim 4 further comprising:
separating the dynamic CVV from credit/debit card data;
validating the credit/debit card data; and
merging the dynamic CVV with the credit/debit card data to produce the transaction authorization.

6. The method of claim 5 wherein the comparing of the dynamic CVV to the three digits of the six-digit one-time password is accomplished using a united authentication server.

7. A computer program product comprising a computer-readable medium having computer program code instructions for performing the method of claim 6 .

8. A computer program product comprising a computer-readable medium having computer program code instructions for performing the method of claim 4 .

9. The method of claim 1 further comprising:
separating the dynamic CVV from credit/debit card data;
validating the credit/debit card data; and
merging the dynamic CVV with the credit/debit card data to produce the transaction authorization.

10. A computer program product comprising a computer-readable medium having computer program code instructions for performing the method of claim 9 .

11. A computer program product comprising a computer-readable medium having computer program code instructions for performing the method of claim 1 .

12. The method of claim 1 , wherein the dynamic CVV was outputted to the user by displaying the dynamic CVV in a visual display and a speaker, the visual display and the speaker being disposed in a body of the credit/debit card.

13. The method of claim 1 , wherein the credit/debit card comprises a plurality of buttons corresponding to a plurality of characters, wherein the successful challenge response comprises a plurality of characters, and wherein the successful challenge response was inputted into the credit/debit card by the user using the plurality of buttons.

14. The method of claim 1 , wherein the successful challenge response is inputted into the credit/debit card by the user in response to a challenge being presented to the user.

15. The method of claim 14 , wherein the successful challenge response is different than the challenge.

16. The method of claim 14 , wherein the challenge is outputted by the credit/debit card to the user before the successful challenge response is inputted into the credit/debit card by the user.

17. The method of claim 16 , wherein the credit/debit card comprises a visual display, a speaker, and one or more input devices, wherein the challenge was outputted to the user via the visual display and the speaker, and wherein the successful challenge response was inputted by the user using the one or more input devices.

18. The method of claim 1 wherein the dynamic CVV is based at least partially on the challenge response input by the user into the credit/debit card.

19. An apparatus for authorizing a transaction, wherein the transaction involves a credit/debit card, the apparatus comprising:
means for receiving a transaction authorization request associated with a transaction involving the credit/debit card, wherein the transaction authorization request comprises a prompt for a card verification value (CVV) for authenticating the transaction, wherein the credit/debit card comprises:
one or more input devices positioned on the credit/debit card enabling a user of the credit/debit card to input information into the credit/debit card including a challenge response, wherein the one or more input devices comprise a plurality of buttons corresponding to a plurality of alpha-numeric characters;
a processor in communication with the one or more input devices positioned on the credit/debit card, wherein the processor is configured to:
generate a challenge;
present, via a visual display and a speaker of the credit/debit card, the challenge;
receive, via the plurality of buttons on the credit/debit card, a challenge response comprising alpha-numeric characters; and
determine whether or not the challenge response received into the credit/debit card is successful;

a one-time password generator automatically generating a one-time password or value based at least partially on receiving the challenge response into the credit/debit card and determining that the challenge response is successful;
presenting, via the visual display and the speaker of the credit/debit card, the one-time password, wherein a portion of the one-time password comprises a dynamic card verification value (CVV) for authenticating the transaction;

means for comparing the dynamic CVV to at least a portion of a one-time password externally generated for the credit/debit card; and
means for sending a transaction authorization when the dynamic CVV matches the at least a portion of the one-time password externally generated for the credit/debit card.

20. The apparatus of claim 19 further comprising means for sending a transaction denial when the dynamic CVV does not match the at least a portion of the one-time password.

21. The apparatus of claim 20 further comprising:
means for separating th

Assignees

• Ashfield James M
• Bank Of America

Inventors

• Ashfield James M

Classifications

• G06Q20/341

  Active cards, i.e. cards including their own processing means, e.g. including an IC or chip · CPC title

• G06Q20/40975

  using encryption therefor · CPC title

• G06Q20/409

  Device specific authentication in transaction processing · CPC title

• G06Q20/385

  using an alias or single-use codes · CPC title

• G06Q20/3827

  Use of message hashing · CPC title