Visa U.s.a. Inc.

Visa International Service Association

Other

Barbara Elizabeth Patterson

Patrick L Faith

Patrick Gauthier

Brian Maw

Ayman A Hammad

Andrew Carpenter

Paul Tait

Kimberly Lawrence

Dan Kurland

Edward Winfield Fordyce, Iii

Aparna Krishnan Girish

Thomas Bellenger

Lynn Kemper

Shaun Bodington

Gregory Charles Trifiletti

Thomas Purves

Amit Gupta

Loc Duc Nguyen

Phillip Kumnick

Jalpesh Chitalia

Stacy Sweeney Pourfallah

Matthew James Mullen

Sang Wook Lee

Ansar Ansari

Kevin Carvalho

Anjana Surin

Manoj Kannembath

Samuel Shrauger

David Chauncey Shepard

Janet Pruitt

Todd J Brockman

Mark Rockelman

Donald Rowberry

Nigel Smith

Marco Huerta

Lori Degliantoni

Steve Diamond

Richard Pileggi

Amy Dalziel

A method comprises a token requestor computer transmitting a first authorization request message comprising a token and first cryptogram for authorization of an interaction to a server computer. The token requestor computer receives a first authorization response message comprising a response code from the server computer, then generates a cryptogram request message comprising the token or a token identifier and the response code. The token requestor computer transmits the cryptogram request message to a token provider computer, which generates a second cryptogram. The token requestor computer receives the second cryptogram and credential and generates a second authorization request message comprising the second cryptogram and the credential. The token requestor computer transmits the second authorization request message to the server computer. A second authorization response message is received from the server computer in response to the second authorization request message. The second authorization response message indicates whether the interaction is authorized.

Token failsafe system and method

A technique for improving the security of a portable consumer device may include storing a first account identifier and a second account identifier associated with the first account identifier, the second account identifier and the first account identifier being associated with the same account on the portable consumer device. When the portable consumer device is interacting with a reader device to conduct a transaction, the portable consumer device may determine whether the transaction is a proximity transaction by sensing whether a wireless interrogation signal is being transmitted from the reader device, and determine which of the first account identifier and the second account identifier to provide to the reader device based on whether the transaction is a proximity transaction.

System and method for secured account numbers in wireless devices

Embodiments related to systems and methods comprising receiving payment data at an access device; receiving an identifier for a mobile device at the access device; and generating and sending an authorization request message to a payment processing network, wherein the payment processing network generates a verification token, which is then sent to the mobile device whereby the mobile device is thereafter used to conduct payment transactions.

Device enrollment system and method

Embodiments are directed to a first token vault managed by a token service provider and a second token vault managed by a second entity. The first token vault is continuously synchronized with the second token vault in real-time. That is, the data in the second token vault is updated simultaneously with or immediately after the data in the first token vault is updated. In some embodiments, the first token vault may be a master token vault and the second token vault may be a mirror token vault. The mirror token vault may store the same information as the master token vault. Alternatively, the mirror token vault may store a subset of the information stored at the master token vault. In other embodiments, the information stored at the first token vault and the information stored at the second token vault may be mutually exclusive.

Mirrored token vault

A method is disclosed. The method comprises receiving, from a communication device, a provisioning request message including a user device identifier and a cryptogram in a first message format, which is received from the user device by the communication device during a message exchange process between the user device and the communication device. The method also includes generating an authorization request message in a second message format, the authorization request message comprising the cryptogram, transmitting the authorization request message to an authorizing computer, and receiving an authorization response message from the authorizing computer. The method also includes providing access data to the communication device.

Provisioning method and system with message conversion

Symbols are used to represent payment accounts. The symbols may be programmed to represent accounts and the data for the accounts may be entered into appropriate fields when the symbol is selected. Once selected, account data is retrieved and is communicated to the proper field in the data entry screen. The account data is then used to complete the transaction.

Key-pad centric payments

A method includes providing an initial communication, by an access device to a user device. The access device can receive the user identifier and the access token and receive a secret associated with the user. The access device can determine, using the user identifier and/or the access token, if the transaction is authorized by an authorizing entity computer associated with the access device or by an authorizing entity not associated with the access device. If the transaction is authorized by the authorizing entity computer associated with the access device, the access device can transmit an authorization request message comprising the user identifier, the secret, and the access token to the authorizing entity computer. The authorizing entity computer validates the secret, retrieves a real credential of the user using the user identifier, and authorizes the transaction.

Token processing with selective de-tokenization for proximity based access device interactions

System and method for secured account numbers in proximily devices

A payment processing system enables a consumer to purchase items at a merchant using an account provided by an issuer. Financial data related to payment for the purchase are sent by the merchant through an acquirer and a transaction expeditor to the issuer. The issuer responds by determining whether to authorize the purchase and if authorized, sends a notification back to the merchant. The acquirer also issues non-financial data that is conveyed by the transaction expeditor to a recipient connected to the payment processing system. The financial and non-financial data for the same transaction may be sent in separate messages and a technique is provided for matching those messages at the recipient. Different types of non-financial data can be conveyed, such as identification of the items being purchased which the recipient uses to determine whether the consumer should receive a reward under a product purchase incentive program.

Payment account processing which conveys financial transaction data and non-financial transaction data

Embodiments of the invention are directed to systems and methods of providing secure remote transaction (SRT) transactions. In some embodiments, upon selection of a checkout element, a user may be identified with respect to a transaction to be completed. A number of accounts may then be identified in relation to that user. Upon selection of a particular account, the user may be authenticated using a facilitator application installed on a mobile computing device that supports authentication for the selected account. In some embodiments, the system may involve the use of a transaction-specific token generated upon receiving an authentication indicator from the facilitator application.

Secure remote transaction framework

Growing community of inventors

Foster City, CA, United States of America

Barbara Elizabeth Patterson