Mastercard International Incorporated

Advanced Sensors Limited

John Tierney

James Christian Noe

Michael John Cowen

Florent Hay

Khalid Thabeth

James Christian Noë

James Noe

Joseph Pitcher

Raymond Acheson

James Christian NoË

Deborah Corness

The present invention provides a technical solution by which a consumer can be successfully authenticated in the scenario where the payment card or payment token provided by the consumer in an e-commerce/card not present transaction does not correspond to the payment account that is to provide the funds for effecting payment. This technical solution advantageously ensures that authentication security is not compromised whilst also enabling the consumer to enjoy the increased flexibility that comes with funding a transaction using a payment account that is not associated with the payment card/token provided by the consumer. Additionally, the present invention requires relatively little change to the configuration of the computing devices that collectively function to enable the transaction to take place (e.g. payment network computing devices, merchant computing devices, access control servers (ACS)).

Techniques for performing authentication in ecommerce transactions

A method of providing access to securely held data is provided. A user interacts with the service provider to obtain access to a service by using a device to provide a digital identifier to the service provider, without the digital identifier being made known to the user. At a later date the user wishes to retrieve securely stored data relating to their use of the service. However, because the user does not know the digital identifier, they are unable to identify themselves to the service provider using the digital identifier. The present disclosure provides a secure method for exchanging private identifiers, which allows the user to identify themselves to the service provider in order to gain access to securely stored data relating to the user's previous use of the service. The user can do this using the device on which the digital identifier is stored, or another device.

Retrieving hidden digital identifier

The present disclosure relates to credential management for mobile devices that can be used for access to secured physical environments. One aspect comprises a computer implemented method comprising a server system: receiving, from a mobile computing device, a provisioning request, which includes an account credential; authenticating the provisioning request based on the mobile computing device being linked to an account indicated by the account credential; generating an account token, which is bound to the account credential; generating one or more limited-use credentials (LUCs), using an application sequence counter, each of the one or more LUCs associated with a corresponding application sequence counter value; generating one or more emergency credentials; and transmitting, to the mobile computing device, the account token, the one or more LUCs, the application sequence counter values, and the one or more emergency credentials.

Credential management for mobile devices

The present disclosure relates to credential management for mobile devices that can be used for access to secured physical environments. One aspect comprises a computer implemented method comprising a mobile computing device: receiving, from a server system, and storing, on the mobile computing device: one or more application sequence counter values, one or more limited use credentials (LUCs), each LUC being bound to a corresponding one of the application sequence counter values; one or more emergency credentials, and an account token; subsequently receiving an authentication request from a terminal; in response to receiving the authentication request, determining that no LUC is available for fulfilling the request; and in response to determining that no LUC is available for fulfilling the request: transmitting, to the terminal, the account token and an application cryptogram generated from an emergency credential of said one or more emergency credentials; and updating a current application sequence counter.

According to one aspect there is provided a method comprising a secondary payment device: receiving a device primary account number (DPAN) and a funding source proxy (FSP) derived from a funding primary account number (FPAN) of a funding source according to a predetermined algorithm; and transmitting a secondary payment device transaction request comprising said DPAN and said FSP to a payment terminal. According to another aspect there is provided a method comprising a payment terminal: receiving a secondary payment device transaction request comprising a device primary account number (DPAN) and a funding source proxy (FSP) derived from a funding primary account number (FPAN) of a funding source according to a predetermined algorithm; responsive thereto, determining that the FSP is not present on a deny list stored at the payment terminal; and responsive thereto, authorizing said secondary payment device transaction request.

Managing customer uniqueness in tokenised systems

According to a first aspect there is provided a method of identifying the funding source of an electronic transaction, said method comprising a payment terminal: receiving a transaction request comprising one or more credentials from a payment device; and determining whether said credentials comprise a funding source proxy (FSP) and, if not, generating the FSP from one or more of said credentials according to a predetermined algorithm stored on said payment terminal; wherein the funding source proxy is derived from a funding primary account number (FPAN) of a funding source of said payment device. Other aspects provide a method of blocking an electronic transaction, a method of authorising an electronic transaction, a method performed by a payment terminal and a method of provisioning a device with payment capability.

During recent years, chip-based transactions has been changing from mainly physical, like a chipcard, to mainly virtual, such as a software application on a mobile device. Although such mobile devices are very powerful compared to a conventional chip card, the data interactions with POI terminals must still be compliant with relevant specifications and standards such as the EMV standards. A computer implemented transaction method is provided that enables a first application to be switched with a second application whilst the transaction is in progress, and without loss of information relating to the transaction. The switching process can be facilitated by either instructing a user to remove an identification device, such as a mobile phone or a chipcard, out of a field produced by a terminal and subsequently return the identification device to within the field produced by the terminal, or turning an antenna of the identification device off, waiting a predetermined length of time and turning the antenna back on again. This enables the transaction to be completed using an optimal application whilst also providing a positive user experience throughout.

Non-default application selection during a transaction

An electronic equipment enclosure (), especially for an oil-in-water analyzer. The enclosure has a metal body () including an expandable folded section () that expands in response to increased pressure within the enclosure thereby increasing the volume defined by the enclosure. The enclosure is capable of containing internal explosions and is suitable for use in hazardous environments where the electronic equipment can come into contact with explosive gases.

Growing community of inventors

Heswall, United Kingdom

John Tierney