Mastercard International Incorporated

Jonathan James Main

Simon Phillips

David Anthony Roberts

Patrik Smets

Ian David Alan Maddocks

Ronald D Carter

Brian John Piel

Sowmya Reddy Lakka

Vincenzo Palomba

Mehdi Collinge

Cristian Radu

Michael C Ward

Eric Alger

Eddy Van De Velde

Alan Wang

John Gaitanos

Igor Fabyshev

Chintan Oza

Brian Piel

Systems and methods are provided for authenticating users. An exemplary method includes receiving, by a directory server (DS), an authentication request for a transaction to an account where the request includes a token and a cryptogram, and transmitting the token and cryptogram to a digital service server (DSS). The method also includes mapping, by the DSS, the token to an account number for the account, validating the cryptogram, generating a directory server nonce (DSN) for the request, and transmitting the DSN and the account number to the DS. The method further includes transmitting, by the DS, the DSN and the account number to an access control server (ACS) associated with an issuer of the account and, in response to an issuer authentication value (IAV), compiling an accountholder authentication value (AAV) including the IAV, the DSN and an amount of the transaction and transmitting the AAV to a merchant or server.

Systems and methods for use in authenticating users in connection with network transactions

Provided are systems and methods for conducting secure remote transactions between mobile devices and merchants.

Secure mobile remote payments

Examples provide a system and method for initiating contactless communication sessions between computing devices using a variety of modalities. A user pre-registers a selected modality for triggering session initiation. A session initiation device generates trigger data based on a detected occurrence of a predetermined event corresponding to a user selected modality, such as, but not limited to, biometric data, a unique user identifier (ID), a vehicle identifier, or any other type of modality. The trigger data is mapped to a mobile device ID. The mobile device ID can be requested from a connection server. The communication session is established between the first computing device and the mobile user device using the mobile device identifier. The computing device transmits data to the mobile user device via the established communication session when the computing device is brought into proximity to the mobile user device.

Contactless communication session initiation between devices

A method for generating transaction credentials for a user in a transaction, comprising: storing in a mobile device, an encrypted session key, and an encrypted user authentication credential; receiving an authorisation request; initiating a user authorisation process wherein in the event that the user is an authenticated user, the method comprises: decrypting the encrypted session key and encrypted user authentication credential; generating a transaction cryptogram in dependence on the user authentication credential and the session key; transmitting the transaction cryptogram and a user authentication status to a transaction processing entity for use in a transaction.

Transaction cryptogram

Systems and methods are provided for authenticating users to payment accounts in connection with transactions. An exemplary method includes receiving, by at least one computing device, an authentication request for a transaction associated with a payment account where the authentication request includes a token associated with the payment account and a cryptogram, and mapping the token to a primary account number (PAN) for the payment account. The method also includes validating the cryptogram, generating a directory server nonce (DSN) for the authentication request, and transmitting the DSN and the account number to an access control server (ACS) associated with an issuer of the payment account. The method further includes, in response to an issuer authentication value (IAV), compiling an accountholder authentication value (AAV) including the IAV, the DSN and an amount of the transaction, and transmitting the AAV to one of a merchant and a server.

A method includes maintaining a digital wallet in a computer, and receiving a request for a transaction. The computer may receive and verify user authentication data, and then allow the user to access any payment card account in the digital wallet without requiring additional user authentication, regardless of the account selected for the transaction by the user. In some embodiments, cryptogram generation may be performed with an EMV server in association with the digital wallet, to enhance the level of security assurance for merchants, issuers and users.

Method and apparatus for streamlined digital wallet transactions

Methods and systems for receiving a proximity payment account number (PPAN) with payment transaction data for a payment transaction from a mobile device, the PPAN selected from at least one PPAN; mapping the received PPAN to a primary account number (PAN); generating an authorization request for the payment transaction based on the PAN and the payment transaction data; receiving an authorization response message; and providing an output including the authorization response message and the PPAN.

Method and system for multiple payment applications

Presented are apparatus and methods for utilizing coupons and the like in the context of a contactless payment process. A processor of a payment-enabled mobile device stores a Proximity Coupon System Environment (PCSE). The PCSE includes coupon applications that provide for an alternative form of payment and/or that influence a final transaction amount for a payment transaction. The method includes storing in a File Control Information (FCI) file of the PCSE a list of the coupon applications, and storing in a FCI file of a Proximity Payment System Environment (PPSE) an indication of the existence of the PCSE. When a payment transaction request is received from a proximity reader, the payment-enabled mobile device transmits the indication of the existence of the PCSE and the list of coupon applications that are to be considered before determining the final transaction amount.

Methods and apparatus for standard approach to coupon selection

In a payment-enabled smartphone, a shared cardholder verification method (CVM) applet serves a number of mobile payment cardlets. The shared CVM applet validates CVM information input by a user of the smartphone and in response issues a CVM token. The CVM token is passed to a particular one of the mobile payment cardlets that is selected for a current transaction. The selected mobile payment cardlet submits the CVM token back to the shared CVM applet for verification. Upon verifying the CVM token, the shared CVM applet enables the selected mobile payment cardlet to perform the current transaction.

Mobile secure element based shared cardholder verification

Example embodiments include methods and apparatus for exchanging, using a contactless interface included in a portable device, transaction information associated with an electronic merchant device when the portable device is brought into close proximity to a contactless interface associated with the electronic merchant device, with the information identifying the electronic merchant device and identifying a handover wireless network connected to the electronic merchant device and with information including security credentials required to form a secure connection, establishing a persistent, secure wireless connection with the electronic merchant device, using a wireless network interface in the portable device and the transaction information, over the handover wireless network and exchanging transaction messages between the portable device and the electronic merchant device over the persistent, secure wireless connection during a shopping interval.

Tap and wireless payment methods and devices

A mobile device includes a housing and an antenna mounted in or on the housing for exchanging transaction signals with a point-of-sale (POS) terminal. The mobile device also includes a user interface element, a transceiver coupled to the antenna, and a secure element including processing circuitry and a secure tick counter. The secure element stores a payment application operable to conduct a pre-sign procedure selected by a user before interfacing with a point-of-sale (POS) terminal. The processing circuitry verifies the user, obtains a first tick value, sets the mobile device into a transaction-enabled state, obtains, when the transceiver is interfaced with a POS terminal, a current tick value from the secure tick counter, calculates a difference value between the current tick value and the first tick value, and enforces a risk management decision.

Enforcing time-out periods in payment-enabled mobile device

A mobile device includes a housing and an antenna mounted in or on the housing. The antenna is for transmitting and receiving transaction signals to and from a point of sale (POS) terminal. The device also includes at least one user interface element mounted on the housing and a transceiver mounted in the housing and coupled to the antenna. Still further, the device includes a secure element mounted in the housing. The secure element is coupled to the transceiver and stores a payment application program. The payment application program is for handling exchanging of the transaction signals with the POS terminal. A tick counter is operated within the secure element. The tick counter is for enforcing at least one time-out period with respect to transactions handled by the payment application program.

Growing community of inventors

Hampshire, United Kingdom

Jonathan James Main