Mastercard International Incorporated

Intel Corporation

Arthur D Kranzley

John Robert Wankmueller

Bruce John Rutherford

Stephen Orfei

Robert D Reany

Dennis J Hill

Sara E Fiebiger

Carole Lynne Kelly-Frank

Adam Gluck

Duncan Garrett

Carl M Campbell

Edward J Hogan

Mark Wiesman

Mark Wiseman

Duncan Garett

Kenneth J Mealey

Stephen W Orfei

Systems, methods, processes, computer program code and means for conducting a payment transaction are provided which include activating a payment application of a mobile device, generating, using the payment application, an optical image representing payment account information associated with the payment application, said payment account information including at least one of a payment account number, an expiry date of the payment account number, and a dynamic verification code generated by the payment application; and presenting the optical image to a merchant transaction terminal for scanning to conduct the payment transaction.

Methods and systems for secure mobile device initiated payment using generated image data

Embodiments allow loading and reloading contactless payment devices using only a contactless terminal interface, while providing user authentication. The contactless terminal interface could be at a merchant POS location, kiosk, or embedded or attached to a personal computing device with contactless read/write capability such as a personal computer or mobile phone or Internet device.

Methods and systems to securely load / reload a contactless payment device

Methods and systems for secure mobile device initiated payments using generated image data

Methods and systems to securely load / reload acontactless payment device

Example embodiments of the presently described subject matter are described that require a customer to use a secure payment token if, during a payment transaction, it is determined that the payment transaction poses a risk. A risk analysis may be performed based at least in part on data related to the payment transaction, such as data related to the customer, the transaction itself, the merchant, etc. If the results of the risk analysis indicate that an unacceptable amount of risk exists, the merchant or any interested party may require the customer to use a secure payment token, for example, a smart card, to conduct the transaction. Otherwise, the customer may proceed by using a static payment token, for example a credit card or PIN/password-based payment token.

Method and system for controlling risk in a payment transaction

Techniques for authorization of usage of a payment device include facilitating an issuer of the device obtaining an authorization message for an account number associated with the device, based on desired spending limit parameters established by a merchant and/or an issuer of the device; facilitating obtaining an issuer authorization decision; and responsive to the issuer authorization decision, facilitating setting a spending limit for the account number based on at least an appropriate one of the parameters.

Techniques for authorization of usage of a payment device

In a secure electronic payment system, authentication data based on a payment account (e.g., a credit card account) is sent from an authentication server, through a user's Web browser, to a merchant's computer. The merchant's computer sends the authentication data to a computer operated by the issuer of the payment account, either through a payment organization computer or through an acquirer computer operated by the merchant's acquirer. The issuer's computer verifies the authorization request message, thereby generating an authorization response message. The authorization response message is forwarded to the merchant's computer, either through the payment organization computer or through the acquirer computer. If the authorization response message indicates that the verification was successful, the transaction is completed.

System and method for conducting secure payment transaction

A formatted data structure is provided for conveying the results of ecommerce authentication programs that are used to authenticate a cardholder's on-line transactions. The data structure, which has at most a 20-byte length, is designed to be compatible with 3-D Secure message protocols used in e-commerce. The data structure includes designated fields that include a hash of the merchant's name, identify an authentication service provider, identify the authentication method used, and include a merchant authentication code which ties cardholder information to the transaction. Secure payment algorithms are provided for use by the e-commerce authentication programs to generate authentication results in the desired format. In one secure payment algorithm, a secret key is used to encrypt a concatenation of a cardholder account number with information from designated fields of the data structure. In another secure payment algorithm, a pair of secret keys is used to encrypt a concatenation of the cardholder's account number, card expiration date and service code. In both cases, portions of the encryption results are used to define the merchant authentication code.

Systems and methods for conducting secure payment transactions using a formatted data structure

A payment device includes an integrated circuit (IC) to store at least two account numbers. The payment device also includes an antenna coupled to the IC to selectively transmit a selected one of the account numbers. The IC includes at least three terminals by which the IC is coupled to the antenna and to at least one other device.

Multiple account wireless payment device

In accordance with the present invention, when an appropriate transaction message is received by a payment gateway, instead of requesting an authorization of the transaction through the payment network, the payment gateway instead sends an authorization response back to the message originator. The payment gateway may perform authentication functions and send transaction data back to the message originator. In this way, the payment gateway may be used for authentication functions while the message originator may use its existing payment system protocols to conduct authorization functions.

Method and system for conducting secure electronic commerce transactions with authorization request data loop-back

In a secure electronic payment system, authentication data is sent from a payment account issuer to user software operated by a purchaser. The user software sends the authentication data to a merchant using hidden fields on the Web page of the merchant. The merchant generates an authorization request message based upon the authentication data. The authorization request message is sent to a payment organization either directly from the merchant or via the merchant's acquirer. The payment organization forwards the authorization request message to a payment account issuer which verifies the authorization request message, thereby generating an authorization response message which is sent to the payment organization. The payment organization forwards the authorization response message to the merchant, either directly or via the acquirer.

Growing community of inventors

Pound Ridge, NY, United States of America

Arthur D Kranzley