Mastercard International Incorporated

Paul Vanneste

Patrik Smets

Jean-Paul Edmond Rans

Simon Phillips

Mehdi Collinge

Cristian Radu

Michael C Ward

Patrick Mestré

Fikret Ates

Paul Michael Evans

Ronald D Carter

John Beric

Dave Anthony Roberts

Thomas Tan

Jonathan Grossar

Jean Somers

At least a first cryptogram and a second cryptogram are transmitted from a payment device reader component to a terminal component. A message including at least the first cryptogram and the second cryptogram is transmitted from the terminal component to an issuer of a payment device presented to the reader component, through a payment network. A message is obtained from the issuer, corresponding to authentication, by the issuer, of the payment device (and optionally the owner of the payment device) presented to the reader component, based at least on the first cryptogram and the second cryptogram. The payment network is configured in accordance with at least one of (i) a standard, and (ii) a specification, which normally employs only a single cryptogram for the message and the authentication. Apparatuses and computer program products are also disclosed.

Apparatus and method for combining cryptograms for card payments

The present disclosure proposes a computer implemented method for selecting test cases to be executed on a terminal by creating a configuration code and applying this code to a set of test case selection tuples. The present disclosure also proposes a method for automatically creating a set of test case selection tuples, taking a source code as an input. The created set of test case selection tuples can be used in the above-mentioned method for selecting test cases. Finally, the present disclosure proposes a method for operating a program for selecting test cases having a user interface and a selection logic. The program may apply the above-mentioned method for selecting test cases by creating a configuration code and applying this code to a set of test case selection tuples.

Systems and methods for selection of test cases for payment terminals

A payment-enabled mobile device such as a 'smart phone' incorporates risk management features that are applicable to its use in contactless payment transactions. Some features may govern when verification of the cardholder's identity is required for consummation of the current transaction. The features may be configurable by the payment card account issuer and/or the user of the mobile device.

Methods for risk management in payment-enabled mobile device

A system and method for generating an authentication token which is used by an issuer associated with a integrated circuit card to authenticate a transaction. A personal card reader receives data, including an authentication cryptogram, from the integrated circuit card. The personal card reader uses the data received from the integrated circuit card to select one of at least two default bitmaps stored in a memory portion of the personal card reader. The personal card reader uses the selected default bitmap and the authentication cryptogram to build the authentication token.

Authentication arrangement and method for use with financial transaction

Generating authentication data for use in a transaction by providing a contactless payment device or smart card configured to communicate with a mobile device, placing the contactless chip card in a proximity to the mobile device to instantiate communication between the contactless chip card and the mobile device, inputting a first input value into the mobile device, communicating data derived from the first input value from the mobile device to the contactless chip card, the contactless chip card converting a set of conversion data, including the first input value, into at least one dynamic value based at least in part on a secret value, communicating the dynamic value from the contactless chip card to the mobile device, and communicating authentication data based at least in part on the dynamic value to a user. In some embodiments the first input value is a Personal Identification Number (PIN), a challenge, or both a PIN and a challenge.

Methods and systems for two-factor authentication using contactless chip cards or devices and mobile devices or dedicated personal readers

Live payment terminals employing payment system public keys are evaluated. Dedicated test payment cards are internally issued by an operator of the payment system. Presentation of at least one of the cards to at least one of the terminals is facilitated. Testing the at least one of the terminals for proper management of the payment system public keys is facilitated. The testing can be in a test transaction conducted when the at least one of the cards is presented to the at least one of the terminals. The steps of facilitating presentation and facilitating testing can be conducted substantially without auditing.

Techniques for evaluating live payment terminals in a payment system

A one-way permutation over financial transaction card data provides a merchant with a unique card identifier for each financial transaction card that is used by a customer to purchase goods from a merchant. This card identifier, which is not the actual financial transaction card data, may then be permissibly stored by the merchant and used to uniquely identify the customer's financial transaction card, and may also be used to determine the frequency with which that customer makes purchases using that card.

Growing community of inventors

Ottignies, Belgium

Paul Vanneste