Visa International Service Association

Janet T Roth

Benedicto Dominguez

Thomas Manessis

Melody L Rutherford

Sandra Salvatori

James Donald Reno

Terence Paul Spielman

Jason Spielman

Pascal Achille Caillon

Benedicto H Dominguez

Virgil M Davis

Thomas J Manessis

Techniques for authenticating the identity and validating the profile of an individual ('a presenter') who presents him or herself to another party ('an acceptor') as having a certain identity and having certain corresponding profile data are described. The invention can be advantageously used in Internet transactions where such authentication and validation is difficult to perform. The techniques of the present invention allow the trusted party to give a definitive answer regarding the authentication of identity and validity of profile data. Other services such as profile data provisioning and profile data updating can also be performed.

Data authentication and provisioning method and system

A payment authentication service authenticates the identity of a payer during online transactions. The authentication service allows a card issuer to verify a cardholder's identity using a variety of authentication methods, such as with the use of tokens. Authenticating the identity of a cardholder during an online transaction involves querying an access control server to determine if a cardholder is enrolled in the payment authentication service, requesting a password from the cardholder, verifying the password, and notifying a merchant whether the cardholder's authenticity has been verified. Systems for implementing the authentication service in which a cardholder uses a mobile device capable of transmitting messages via the Internet are described. Systems for implementing the authentication service in which a cardholder uses a mobile device capable of transmitting messages through voice and messaging channels is also described.

Mobile account authentication service

Authenticating the identity and validating the profile of an individual who presents himself to another party as having a certain identity and corresponding profile data occurs during an Internet transaction. A trusted party gives a definitive answer regarding the authentication of identity and validity of profile data. The trusted party can be a financial institution that has an established relationship with the individual. For example, the financial institution can be a bank that issues a debit or credit card to the individual. The trusted party can also provide the profile data of the individual to the other party, rather than have the individual provide such data. The trusted party can also update the individual's profile data held by the other party when such data is no longer current.

Profile and identity authentication service

Secure activation of stored value cards at a point of distribution uses a portable activation secure application module (ASAM) within the card dispensing machine to activate each card. Each card has a standard user mode and a security user mode. In the standard user mode the card is activated and ready for use. In the security user mode the card is not active and cannot be used to make a purchase. An issuer supplies an issuer activation key to a card supplier who produces a security code which is stored on a stored value card. Cards are supplied to the issuer in security user mode, and stored in a dispensing machine. The issuer activation key is also relayed to the dispensing machine and stored on the ASAM. Upon purchase by a customer, the issuer activation key is used within the machine by the ASAM to reproduce the security code and to activate a card. An activation control counter (ACC) is stored within the ASAM and is decremented for every attempt at activation of a card. ASAMs are maintained in the field using a dial-up connection to a central computer with a control secure application module (CSAM), or using a field secure application module (FSAM) that is created at a central location using the CSAM. Each FSAM is able to update a limited number of ASAMs. A hierarchy of keys is used by the CSAM, the FSAMs and ASAMs to ensure security.

Card activation at point of distribution

Growing community of inventors

Oakland, CA, United States of America

Janet T Roth