Visa International Service Association

Mastercard International Incorporated

Glenn Leon Powell

John F Sheets

Igor V Karpenko

Kiushan Pirzadeh

Krishna Prasad Koganti

Mark Andrew Carlson

Patrick Stan

Ryan Hagey

Christian Aabye

Joseph Bjorn Ovick

Margaret Reid

Patrick Wright

Kim R Wagner

Andrew Carpenter

Erick Wong

Phillip Kumnick

Prasanna L Narayan

Oleg Makhotin

Frederick Liu

Paul Tait

Matthew Leland Dill

Nancy L Kim

Bruce John Rutherford

James John Anderson

Gregory D Williamson

Phillip Lavender

Ashish Kulpati

Marc Perl

Hector Rodriguez

Koni Uttam Nayak

Susan Zloth

Pankaj Rajurkar

Gyan Prakash

Ajit Gaddam

Craig O'Connell

David William Wilson

Christian Flurscheim

Mark Allen Nelsen

Taeho Kgil

Sayeed Mohammed

Jalpesh Chitalia

Alan Johnson

Anjana Surin

Justin Chace

Guido Mangiagalli

David Tseselsky

Libby Annie Kurien

Murali Krishnan Sreenivasan

Galileo L Olmos

Anand Pandya

Bishenjit Paul Choudhury

Michael Kenji Mori

Gourab Basu

Vikram Modi

Steve Cracknell

Sue Zloth

L Prasanna Narayan

James Anderson

Bruce Rutherford

Gregory Williamson

Anjana Neera Surin

Systems and methods are disclosed in which data associated with a transaction are protected with encryption. At an access device, a PIN associated with a payment account may be encrypted with a first key derived from an initial key of the access device and sensitive data associated with the payment account may be encrypted with a second key derived from the initial key. At a secure module associated with a host server encrypted sensitive data of an authorization request message may be decrypted. The secure module associated with the host server can re-encrypt the sensitive data using a zone encryption key associated with a payment processing network. A translated authorization request message including the re-encrypted sensitive data can be transmitted by the merchant server to the payment processing network.

Data protection with translation

Systems and methods for interoperable network token processing are provided. A network token system provides a platform that can be leveraged by external entities (e.g., third party wallets, e-commerce merchants, payment enablers/payment service providers, etc.) or internal payment processing network systems that have the need to use the tokens to facilitate payment transactions. A token registry vault can provide interfaces for various token requestors (e.g., mobile device, issuers, merchants, mobile wallet providers, etc.), merchants, acquirers, issuers, and payment processing network systems to request generation, use and management of tokens. The network token system further provides services such as card registration, token generation, token issuance, token authentication and activation, token exchange, and token life-cycle management.

Systems and methods for communicating risk using token assurance data

Embodiments are described that are directed to optimizing the provisioning of payment account credentials to mobile devices utilizing mobile wallets. In some embodiments, one of multiple provisioning schemes may be selectively chosen for payment account credential provisioning based upon a determined risk involved with a particular provisioning request. A low risk provisioning request leads to an immediate provisioning of a payment credential, whereas a provisioning request of high risk results in the provisioning request being denied. In some embodiments, medium risk provisioning requests will cause an additional user authentication to be performed before the payment account provisioning is finalized. The additional user authentication may occur using a separate communication channel than the channel in which the provisioning request was received.

Methods and systems for provisioning mobile devices with payment credentials

Systems, apparatuses, and methods are provided for enabling a transaction using a token associated with a first payment network to be conducted using a second payment network. When a transaction using a token is submitted to a payment network, the payment network can determine the payment network associated with the token. If the token is associated with a second payment network, a token verification request including the token can be sent to the second payment network. The second payment network can then return a token verification response including a primary account identifier such as a primary account number (PAN) corresponding to the token and a validation result. The transaction may then be processed using the primary account identifier.

Multi-network tokenization processing

An authentication request message from a user conducting an interaction at a resource provider computer is received. It is determined that data representing an indication that the resource provider is trusted by the user and including a trusted marker is present in a database. Authentication to the user is provided, and information indicating that the user has been authenticated and the trusted marker are sent so that authorization request message for the interaction that includes the trusted marker is generated. The trusted marker is validated, and the authorization request message including information related to the interaction and the validated trusted marker is sent to an authorizing entity computer.

Efficient and secure authentication system

Systems and methods for processing a financial transaction are provided. In a method conducted at an issuing server computer associated with a first entity, a transaction request message is transmitted to an acquiring server computer associated with a second entity. The transaction request message is in respect of a push transaction in which funds from the first entity are transferred to the second entity and includes a first set of data elements. In response to transmitting the transaction request message, a transaction response message and a second set of data elements are received. The second set of data elements are associated with the first set of data elements and the financial transaction is processed using information contained in the first set of data elements and the second set of data elements.

Processing financial transactions

Embodiments of the invention are directed to methods, apparatuses, computer readable media and systems for providing, along with a token, a token assurance level and data used to generate the token assurance level. At the time a token is issued, one or more Identification and Verification (ID&V) methods may be performed to ensure that the token is replacing a PAN that was legitimately used by a token requestor. A token assurance level may be assigned to a given token in light of the type of ID&V that is performed and the entity performing the ID&V. Different ID&Vs may result in different token assurance levels. An issuer may wish to know the level of assurance and the data used in generating the level of assurance associated with a token prior to authorizing a payment transaction that uses the token.

Network token system

Embodiments of the present invention are directed to methods, apparatuses, computer readable media and systems for securely processing remote transactions. One embodiment of the invention is directed to a method of processing a remote transaction initiated by a mobile device comprising a server computer receiving a payment request including encrypted payment information. The encrypted payment information being generated by a mobile payment application of the mobile device and being encrypted using a third party key. The method further comprises decrypting the encrypted payment information using the third party key, determining a transaction processor public key associated with the payment information, and re-encrypting the payment information using the transaction processor public key. The method further comprises sending a payment response including the re-encrypted payment information to a transaction processor. The transaction processor decrypts the re-encrypted payment information using a transaction processor private key and initiates a payment transaction.

Secure remote payment transaction processing

Systems and methods for communicating token attributes associated with a token vault

A method and system for provisioning access data in a second application on a mobile device using a first application on the mobile device. Authentication data may be input into the first application, and an authentication code may be requested from a remote server. After the authentication code is received by the first application in the mobile device, it can pass the authentication code to a second application that initiates an access data provisioning process.

Method and system for provisioning access data to mobile device

Systems and methods are described for provisioning access credentials to a mobile device using device and authorization codes. Once provisioned, a mobile device can be used to conduct a transaction.

Provisioning of access credentials using device codes

Embodiments of the present invention are directed to methods, apparatuses, computer readable media and systems for securely processing remote transactions. One embodiment of the invention is directed to a method of processing a remote transaction initiated by a mobile device. The method comprises receiving, by a mobile payment application on a secure memory of the mobile device, transaction data from a transaction processor application on the mobile device. The method further comprises validating that the transaction processor application is authentic and in response to validating the transaction processor application, providing encrypted payment credentials to the transaction processor application. The transaction processor application further initiates a payment transaction with a transaction processor server computer using the encrypted payment credentials.

Secure remote payment transaction processing using a secure element

Described herein is a platform and method for determining a confidence level associated with a transaction that utilizes dynamic data. In some embodiments, the confidence level is determined based on location data received in relation to the transaction. For example, some embodiments are directed to storing first location information collected from a mobile device provided in a request for the dynamic data, receiving second location information related to a transaction conducted using the dynamic data, and comparing the two with respect to the amount of time that has elapsed between collection of each to determine a confidence level associated with a likelihood that the transaction is authentic.

Location verification during dynamic data transactions

A method for maintaining transaction integrity for transactions performed over a public network includes: receiving a transaction message corresponding to an original transaction, the transaction message including a unique, client-assigned, first identifier; in response to receiving the transaction message, assigning a unique, second identifier to the original transaction; generating a request to process the original transaction including at least a portion of the transaction message and the second identifier; transmitting the request to an issuer server to process the original transaction; receiving a first response from the issuer server in connection with the original transaction; in response to the first response, generating a second response corresponding to the original transaction including the first identifier and the second identifier; and transmitting the second response to the client. A system and computer program product for maintaining transaction integrity for transactions performed over a public network is also disclosed.

System, method, and computer program product for maintaining transaction integrity over public networks

Growing community of inventors

Fremont, CA, United States of America

Glenn Leon Powell