American Express Travel Related Services Company, Inc.

Jonathan Ward Lupton

Manish K Deliwala

John G McDonald

Ajay Babu Maddukuri

James H Marsden

Joanna Colegate

Charlie Craven

Christopher Adrian Kong

Upendra S Mardikar

Michael D Donovan

Carlos Eduardo Oliveira Do Valle Silvestre

Carlos Eduardo Silvestre

A system, method, and computer readable medium (collectively, the 'system') are provided. The system may include a processor configured to perform operations and/or steps comprising receiving a selection of a transaction account to be used as payment for a transaction; and transmitting a wireless signal carrying emulated track data for payment of the transaction, wherein the emulated track data emulates data in tracks of a magnetic card and includes alias transaction account data in place of actual transaction account data.

Magnetic card swipe emulation systems and methods

A system and method are disclosed herein leveraging financial networks standards with mobile device data and secure processing and storage environment knowledge to authenticate a device. For instance, a party to a transaction may utilize these elements of information, not traditionally associated with wireless transactions, to achieve a lower probability of fraud and/or a higher confidence associated with the transaction.

Authenticating based on a device identifier

A system, method, and computer readable medium (collectively, the 'system') are provided. The system may include a processor configured to perform operations and/or steps comprising receiving a wireless signal from a transaction device, wherein the wireless signal carries emulated track data for payment of a transaction; reading the emulated track data from the wireless signal; generating a transaction payload, wherein the transaction payload contains transaction account data and a dynamically generated digital signature value from the emulated track data of the wireless signal; transmitting the transaction payload to an authorization network server; receiving an authorization instruction from the authorization network server for handling payment of the transaction; and processing the payment of the transaction in accordance with the authorization instruction.

Transaction device use of a dynamically generated value based on a next expected session key

An authentication system may receive an authentication MAC, an integrity MAC, and data transmitted from a payment application and a payment terminal. A local integrity MAC may be generated using the data as an input to a first cryptographic operation. The system may compare the local integrity MAC to the received integrity MAC to authenticate the received integrity MAC. A local authentication MAC may be generated using a second cryptographic operation and compare the local authentication MAC to the received authentication MAC. The system may authenticate the payment application in response to a successful authentication of at least one of the received authentication MAC or the received integrity MAC.

Systems and methods for validating transmissions over communication channels

A system, method, and computer readable medium (collectively, the 'system') are provided. The system may include a processor configured to perform operations and/or steps comprising storing, by a processor, a session key on a mobile device, wherein the session key is encrypted. The system receiving a transaction request, decrypting the session key, and broadcasting a signal configured for being received by a magnetic stripe reader. Trackdata and/or trackdata may be encoded in the signal. The trackdata and/or the trackdata may also comprise a dynamically generated value that is generated based on the session key.

Authenticating based on a hardware identifier

A system may receive a transaction request for a transaction using a transaction authorization protocol. The transaction request may include a transaction amount and may also be associated with a transaction account. The system may transmit a request to authenticate a user associated with the transaction account. The request to authenticate uses the transaction authorization protocol. The system may also receive an authentication message using the transaction authorization protocol. The authentication message may comprise authentication metadata that indicates an authentication type and/or an authentication outcome. The authentication type may include biometric authentication techniques.

Systems and methods for processing metadata statements in payment flows

Multi-factor mobile user authentication

A system, method, and computer readable medium (collectively, the 'system') are provided. The system may include a processor configured to perform operations and/or steps comprising storing, by a processor, a session key on a mobile device, wherein the session key is encrypted. The system receiving a transaction request, decrypting the session key, and broadcasting a signal configured for being received by a magnetic stripe reader. Track 1 data and/or track 2 data may be encoded in the signal. The track 1 data and/or the track 2 data may also comprise a dynamically generated value that is generated based on the session key.

Next expected session key

A system and method are disclosed herein leveraging financial networks standards with mobile device data and SIM card chip knowledge to authenticate a device. For instance, a party to a transaction may utilize these elements of information, not traditionally associated with wireless transactions, to achieve a lower probability of fraud and/or a higher confidence associated with the transaction.

Growing community of inventors

West Sussex, United Kingdom

Jonathan Ward Lupton