System and method for using multiple payment accounts using a single payment device

Patent metadata

Field	Value
Publication number	US-9947001-B2
Application number	US-201313832931-A
Country	US
Kind code	B2
Filing date	Mar 15, 2013
Priority date	Mar 15, 2013
Publication date	Apr 17, 2018
Grant date	Apr 17, 2018

Abstract

A method and system for transmitting multiple payment accounts for use by a payment device. The method includes allocating a cryptographic personal account number (CPAN) and producing at least one cryptographic master key set relating to this CPAN and transmitting, by a transmitting device, at least one produced cryptographic master key set for storage in a payment device. Further, the method includes receiving, by a receiving device, at least one device personal account number (DPAN), wherein each of the at least one DPAN is associated with a payment account associated with a consumer; generating, by a processing device, a repersonalization script for each of the at least one DPAN, wherein the repersonalization script includes a set of data associated with the corresponding DPAN; and transmitting, by the transmitting device, at least one repersonalization script to the payment device. The payment device is configured to use the CPAN for selected cryptographic calculations, and use the DPAN and the associated set of data for other aspects of a financial transaction.

First claim

What is claimed is:

1. A computer-implemented method for transmitting multiple payment accounts for use by a payment device, comprising:
allocating, by a processing device of a processing server, a cryptographic personal account number (CPAN), from a plurality of stored CPANs, and producing at least one cryptographic master key set corresponding to the CPAN;
transmitting, by a transmitting device of the processing server, the at least one produced cryptographic master key set corresponding to the CPAN for storage in a payment device;
receiving, by a receiving device of the processing server, at least one device personal account number (DPAN) from a card issuer, wherein the at least one DPAN is associated with a payment account associated of a consumer;
generating, by the processing device of the processing server, a repersonalization script for the at least one DPAN, wherein the generated repersonalization script includes at least (i) the DPAN and (ii) a set of data received from the card issuer and associated with the DPAN; and
transmitting, by the transmitting device of the processing server, the at least one generated repersonalization script to the payment device for execution,
wherein execution of the repersonalization script causes the payment device to
exchange data, for any existing payment account, stored in the payment device with the DPAN and associated set of data included in the repersonalization script,
perform, using the CPAN, selected cryptographic calculations relating to data items exchanged between the payment device and the card issuer associated with the CPAN, and
perform, using the DPAN and the associated set of data, all other aspects of a financial transaction.

2. The method of claim 1 , wherein the repersonalization script is configured to cause the payment device to replace an existing DPAN and associated set of data in a secure storage with the DPAN and associated set of data included in the repersonalization script.

3. The method of claim 2 , wherein the payment device is further configured to store the repersonalization script for multiple uses.

4. The method of claim 2 , wherein the payment device is configured to store the repersonalization script in storage other than the secure storage.

5. The method of claim 4 , wherein the payment device is configured to transmit the repersonalization script to the secure storage prior to execution by the payment device.

6. The method of claim 5 , wherein the repersonalization script is transmitted to the secure storage in response to an instruction received by a user.

7. The method of claim 6 , wherein the user is the consumer associated with the payment account associated with the DPAN included in the repersonalization script.

8. The method of claim 1 , wherein the repersonalization script is protected from modification and any such modification can be detected by the payment device.

9. The method of claim 8 , wherein the repersonalization script is protected from unintended disclosure of its content by encrypting the script in such a way as only the payment device can decrypt and subsequently use the script.

10. The method of claim 1 , wherein the payment device is configured to store the CPAN at the same time as receipt and storage of the master cryptographic key set.

11. The method of claim 10 , wherein the payment device is further configured to provide the CPAN as additional data as part of the financial transaction.

12. The method of claim 1 , wherein the at least one cryptographic master key set is transmitted for storage in the payment device prior to a provisioning of the payment device to the consumer.

13. The method of claim 1 , wherein the payment device is associated with the consumer.

14. The method of claim 1 , wherein each repersonalization script is configured to be executed by a software application stored in and executed by the payment device.

15. The method of claim 14 , further comprising:
transmitting, by the transmitting device of the processing server, to the payment device, the software application.

16. The system of claim 1 , wherein the transmitting device, of the processing server, is further configured to transmit, to the payment device, the software application.

17. An electronic system for transmitting multiple payment accounts for use by a payment device, comprising:
a processing device, of a processing server, configured to allocate cryptographic personal account number (CPAN), from a plurality of stored CPANs, and produce at least one cryptographic master key set corresponding to the CPAN;
a transmitting device, of the processing server, configured to transmit the at least one produced cryptographic master key corresponding to the CPAN set for storage in a payment device; and
a receiving device, of the processing server, configured to receive at least one device personal account number (DPAN) from a card issuer, wherein the at least one DPAN is associated with a payment account of a consumer;
wherein the processing device, of the processing server, is further configured to generate a repersonalization script for the at least one DPAN, wherein the generated repersonalization script includes at least (i) the DPAN and (ii) a set of data received from the card issuer and associated with the DPAN,
wherein the transmission device, of the processing server, is further configured to transmit the at least one generated repersonalization script to the payment device for execution, and
wherein execution of the repersonalization script causes the payment device to
exchange data, for any existing payment account, stored in the payment device with the DPAN and associated set of data included in the repersonalization script,
perform, using the CPAN, selected cryptographic calculations relating to data items exchanged between the payment device and the card issuer associated with the CPAN, and
perform, using the DPAN and the associated set of data, all other aspects of a financial transaction.

18. The system of claim 17 , wherein the repersonalization script is configured to cause the payment device to replace an existing DPAN and associated set of data in a secure storage with the DPAN and associated set of data included in the repersonalization script.

19. The system of claim 18 , wherein the payment device is further configured to store the repersonalization script for multiple uses.

20. The system of claim 18 , wherein the payment device is configured to store the repersonalization script in storage other than the secure storage.

21. The system of claim 20 , wherein the payment device is configured to transmit the repersonalization script to the secure storage prior to execution by the payment device.

22. The system of claim 21 , wherein the repersonalization script is transmitted to the secure storage in response to an instruction received by a user.

23. The system of claim 22 , wherein the user is the consumer associated with the payment account associated with the DPAN included in the repersonalization script.

24. The system of claim 17 , wherein the repersonalization script is protected from modification and any such modification can be detected by the payment device.

25. The system of claim 24 , wherein the repersonalization script is protected from unintended disclosure of its content by encrypting the script in such a way as only the payment device can decrypt and subsequently use the script.

Assignees

• Mastercard International Inc

Inventors

• Smith Theresa
• Roberts David Anthony
• Sylvester David John

Classifications

• G06Q20/227 Primary

  characterised in that multiple accounts are available, e.g. to the payer · CPC title

• G06Q20/3829

  involving key management · CPC title

• G06Q20/363

  with the personal data of a user · CPC title

• G06Q20/3227

  using secure elements embedded in M-devices · CPC title

• G06Q20/3552

  Downloading or loading of personalisation data · CPC title