Visa International Service Association

Thomas Bellenger

Christian Aabye

Hao Ngo

Yuexi Chen

Barbara Elizabeth Patterson

Jalpesh Chitalia

Chunxi Jiang

Jing Jin

Simon Law

Mohamed Nosseir

Parveen Bansal

Bryan Carroll

Madhuri Chandoor

Gueorgui Petkov

Paul Van Oppen

Erick Wong

Oleg Makhotin

Sanjeev Sharma

Systems and methods are disclosed for securely communicating sensitive data (e.g., interaction data) during a process for offline authentication. A data packet may be received by an access device from a user device in a one-way communication. The data packet may be converted to obtain interaction data comprising a digital certificate certified by the certificate authority and a digital signature value generated by the user device. A second public key associated with the user device may be obtained utilizing the digital certificate and the first public key associated with the certificate authority. The validity of the interaction data may be determined based at least in part on the digital signature value and the second public key associated with the user device. When the interaction data is determined to be valid, an identifier of the interaction data may be authorized and access may be provided based on this authorization.

Techniques for securely performing offline authentication

A reader device may include a midrange wireless transceiver, a controller coupled to the midrange wireless transceiver, and a memory coupled to the controller. The memory may store executable code, which when executed by the controller, causes the reader device to implement various operations including maintaining a transaction service attributes database in the memory. The operations may also include broadcasting a beacon including a transaction service indicator at a periodic interval using the midrange wireless transceiver, receiving a connection request from a communication device, and establishing a wireless connection with the communication device. The operations may further include performing an application selection process with the communication device, performing application data processing with the communication device, and performing authorization request processing for the communication device.

Mid-range reader interactions

A method is disclosed. The method includes establishing, by a first device, a wireless connection to a second device; transmitting a request, by the first device and to the second device, for location data indicative of a location of the second device; receiving, by the first device and from the second device, the location data indicative of the location of the second device; determining, by the first device, a distance between the first device and the second device based at least in part on the received location data; generating, by the first device, an altered value based on the received location data and the determined distance; and transmitting, by the first device and to the second device, the altered value and an account identifier associated with a user of the first device.

Method and system for location-based resource access

A method is disclosed. The method comprises receiving, from a communication device, a provisioning request message including a user device identifier and a cryptogram in a first message format, which is received from the user device by the communication device during a message exchange process between the user device and the communication device. The method also includes generating an authorization request message in a second message format, the authorization request message comprising the cryptogram, transmitting the authorization request message to an authorizing computer, and receiving an authorization response message from the authorizing computer. The method also includes providing access data to the communication device.

Provisioning method and system with message conversion

Methods for wireless payments using the Bluetooth low energy (BLE) protocol are provided. A first method includes establishing a wireless-short range communication link from a communication device to a peripheral device associated with an access device. The communication device receives item level data associated with an item being processed by the access device. The communication device displays the item level data associated with the item and transmits payment data to the access device. A second method includes establishing wireless-short range communication link to from a peripheral device associated with an access device to a communication device. The peripheral device transmits item level data associated with an item being processed by the access device, wherein the communication device displays the item level data associated with the item and receives payment data from the communication device.

Wireless short range communication link transmission of line item data in real time

Techniques for provisioning access data may include receiving, by a first application installed on a communication device, user input selecting an account to provision to a second application installed on the communication device. The first application may invoke the second application and send a session identifier (ID) to the second application. The second application may send a user ID associated with the second application, a device ID, and the session ID to the first application. The first application may then generate encrypted provisioning request data and send the encrypted provisioning request data to the second application. The second application may send the encrypted provisioning request data to a remote server computer to request access data that can be used to access a resource. The second application may receive the access data provided by the remote server computer based on validation of the encrypted provisioning request data.

Systems and methods for device push provisioning

Systems and methods for device push provisoning

Embodiments of the disclosure are directed to performing a transaction between a mobile device and an access device. Value information is provided to the access device by the mobile device. The value information is not necessary to complete the transaction.

Growing community of inventors

San Mateo, CA, United States of America

Thomas Bellenger