Next expected session key

Patent metadata

Field	Value
Publication number	US-9972007-B2
Application number	US-201715434370-A
Country	US
Kind code	B2
Filing date	Feb 16, 2017
Priority date	Aug 31, 2015
Publication date	May 15, 2018
Grant date	May 15, 2018

Abstract

A system, method, and computer readable medium (collectively, the “system”) are provided. The system may include a processor configured to perform operations and/or steps comprising storing, by a processor, a session key on a mobile device, wherein the session key is encrypted. The system receiving a transaction request, decrypting the session key, and broadcasting a signal configured for being received by a magnetic stripe reader. Track 1 data and/or track 2 data may be encoded in the signal. The track 1 data and/or the track 2 data may also comprise a dynamically generated value that is generated based on the session key.

First claim

What is claimed is:

1. A method comprising:
receiving, by a computer-based system, a transaction request from a transaction device;
decrypting, by the computer-based system, a next expected session key from a plurality of session keys, wherein the plurality of session keys have an expected order of use; and
transmitting, by the computer-based system, a signal comprising the dynamically generated value,
wherein the dynamically generated value is generated based on the next expected session key,
wherein the signal is configured to be received by the transaction device.

2. The method of claim 1 , further comprising transmitting, by the computer-based system, the signal to the transaction device.

3. The method of claim 1 , further comprising generating, by the computer-based system, the dynamically generated value based on the next expected session key.

4. The method of claim 1 , wherein at least one of track 1 data or track 2 data includes the dynamically generated value.

5. The method of claim 1 , wherein at least one of track 1 data or track 2 data are encoded in the signal.

6. The method of claim 1 , further comprising storing, by the computer-based system, the plurality of session keys with the expected order of use.

7. The method of claim 1 , further comprising storing, by the computer-based system, the plurality of session keys having the expected order of use on a mobile device.

8. The method of claim 1 , wherein the transmitting includes broadcasting.

9. The method of claim 1 , wherein the transaction device is a magnetic stripe reader.

10. The method of claim 1 , further comprising requesting, by the computer-based system, that a network trusted app encrypts the next expected session key.

11. The method of claim 1 , further comprising requesting, by the computer-based system, that a network trusted app encrypts the next expected session key, wherein the network trusted app comprises a trusted execution environment chip.

12. The method of claim 1 , further comprising receiving, by the computer-based system, the plurality of session keys from an enterprise wallet hub before the plurality of session keys are stored.

13. The method of claim 1 , further comprising clearing, by the computer-based system, the next expected session key in response to the transmitting the signal.

14. The method of claim 1 , wherein the signal is encoded in a magnetic field.

15. The method of claim 1 , further comprising selecting, by the computer-based system, magnetic stripe emulation as a communication medium, in response to not detecting a near field communication terminal.

16. A computer-based system, comprising:
a processor;
a tangible, non-transitory memory configured to communicate with the processor, the tangible, non-transitory memory having instructions stored thereon that, in response to execution by the processor, cause the processor to perform operations comprising:
receiving, by the processor, a transaction request from a transaction device;
decrypting, by the processor, a next expected session key from a plurality of session keys, wherein the plurality of session keys have an expected order of use; and
transmitting, by the processor, a signal comprising the dynamically generated value,
wherein the dynamically generated value is generated based on the next expected session key,
wherein the signal is configured to be received by the transaction device.

17. The system of claim 16 , further comprising generating, by the processor, the dynamically generated value based on the next expected session key.

18. The system of claim 16 , wherein at least one of track 1 data or track 2 data includes the dynamically generated value.

19. The system of claim 16 , wherein at least one of track 1 data or track 2 data are encoded in the signal.

20. An article of manufacture including a non-transitory, tangible computer readable storage medium having instructions stored thereon that, in response to execution by a computer-based system, cause the computer-based system to perform operations comprising:
receiving, by the computer-based system, a transaction request from a transaction device;
decrypting, by the computer-based system, a next expected session key from a plurality of session keys, wherein the plurality of session keys have an expected order of use; and
transmitting, by the computer-based system, a signal comprising the dynamically generated value,
wherein the dynamically generated value is generated based on the next expected session key,
wherein the signal is configured to be received by the transaction device.

Assignees

• American Express Travel Related Services Co Inc

Inventors

• Deliwala Manish K
• Lupton Jonathan
• Maddukuri Ajay B
• Mcdonald John G

Classifications

• G06Q20/351

  Virtual cards · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title

• H04L2209/56

  Financial cryptography, e.g. electronic payment or e-cash · CPC title

• H04L63/067

  using one-time keys (cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863) · CPC title

• H04L9/0863

  involving passwords or one-time passwords (network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067) · CPC title