WO2013130912A3 - In-card access control and monotonic counters for offline payment processing system - Google Patents

In-card access control and monotonic counters for offline payment processing system Download PDF

Info

Publication number
WO2013130912A3
WO2013130912A3 PCT/US2013/028466 US2013028466W WO2013130912A3 WO 2013130912 A3 WO2013130912 A3 WO 2013130912A3 US 2013028466 W US2013028466 W US 2013028466W WO 2013130912 A3 WO2013130912 A3 WO 2013130912A3
Authority
WO
WIPO (PCT)
Prior art keywords
card
contactless device
remote system
request
processing system
Prior art date
Application number
PCT/US2013/028466
Other languages
French (fr)
Other versions
WO2013130912A2 (en
Inventor
Michael William SPRINGER
Ismail Cem Paya
Malgorzata Monika LISOWIEC
Aneto Pablo Okonkwo
Patrick Pui Wah Leung
Fan Jiang
Gökhan Hassan BAKIR
Original Assignee
Google Inc.
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from US13/408,804 external-priority patent/US9020858B2/en
Priority claimed from US13/408,794 external-priority patent/US8898088B2/en
Priority claimed from US13/408,813 external-priority patent/US8959034B2/en
Application filed by Google Inc. filed Critical Google Inc.
Priority to AU2013202684A priority Critical patent/AU2013202684B9/en
Priority to BR112014021376A priority patent/BR112014021376A8/en
Publication of WO2013130912A2 publication Critical patent/WO2013130912A2/en
Publication of WO2013130912A3 publication Critical patent/WO2013130912A3/en

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/352—Contactless payments by cards
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/409—Device specific authentication in transaction processing
    • G06Q20/4097—Device specific authentication in transaction processing using mutual authentication between devices and transaction partners

Landscapes

  • Business, Economics & Management (AREA)
  • Engineering & Computer Science (AREA)
  • Accounting & Taxation (AREA)
  • Physics & Mathematics (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Finance (AREA)
  • Computer Security & Cryptography (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

Preventing fraud during an offline transaction by encoding a randomly-generated card verification code onto a smart card. The verification code is transmitted to a contactless device during each transaction, wherein it is cross-referenced with the account number to ensure presence of the card. Also, every transaction record is signed by an access key resident on the contactless device and certified by a signing key resident on a remote system. Funds may be deposited onto the card when the contactless device creates a deposit request, signs the request using an access key and transmits it to the remote system, which in turn processes the request and certifies it with a signing key. Funds may be withdrawn when the contactless device creates a withdrawal record and signs it using an access key. The remote system verifies the signatures and certifies the records using a signing key when the records are later transmitted.
PCT/US2013/028466 2012-02-29 2013-02-28 In-card access control and monotonic counters for offline payment processing system WO2013130912A2 (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
AU2013202684A AU2013202684B9 (en) 2012-02-29 2013-02-28 In-card access control and monotonic counters for offline payment processing system
BR112014021376A BR112014021376A8 (en) 2012-02-29 2013-02-28 CARD ACCESS CONTROL AND MONOTONIC COUNTERS FOR OFFLINE PAYMENT PROCESSING CONTROL SYSTEM

Applications Claiming Priority (6)

Application Number Priority Date Filing Date Title
US13/408,794 2012-02-29
US13/408,813 2012-02-29
US13/408,804 2012-02-29
US13/408,804 US9020858B2 (en) 2012-02-29 2012-02-29 Presence-of-card code for offline payment processing system
US13/408,794 US8898088B2 (en) 2012-02-29 2012-02-29 In-card access control and monotonic counters for offline payment processing system
US13/408,813 US8959034B2 (en) 2012-02-29 2012-02-29 Transaction signature for offline payment processing system

Publications (2)

Publication Number Publication Date
WO2013130912A2 WO2013130912A2 (en) 2013-09-06
WO2013130912A3 true WO2013130912A3 (en) 2013-11-21

Family

ID=49083459

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2013/028466 WO2013130912A2 (en) 2012-02-29 2013-02-28 In-card access control and monotonic counters for offline payment processing system

Country Status (1)

Country Link
WO (1) WO2013130912A2 (en)

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10192214B2 (en) * 2013-03-11 2019-01-29 Google Llc Pending deposit for payment processing system
US10970691B2 (en) 2014-12-22 2021-04-06 Capital One Services, Llc System, method, and apparatus for reprogramming a transaction card
US10554411B1 (en) 2018-10-02 2020-02-04 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
TW202127339A (en) * 2020-01-06 2021-07-16 宏碁智醫股份有限公司 Offline card transaction authentication system and offline card transaction authentication method

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH06259452A (en) * 1993-03-09 1994-09-16 Fujitsu Ltd Prepaid card system using ic card
WO2001009851A1 (en) * 1999-07-30 2001-02-08 Visa International Service Association Smart card transactions using wireless telecommunications network
US6839840B1 (en) * 1998-11-12 2005-01-04 Gemplus Authenticating method between a smart card and a terminal
US20070278291A1 (en) * 2005-12-22 2007-12-06 Rans Jean-Paul E Methods and Systems for Two-Factor Authentication Using Contactless Chip Cards or Devices and Mobile Devices or Dedicated Personal Readers
KR20110004043A (en) * 2009-07-07 2011-01-13 에스케이 텔레콤주식회사 Electronic cash system for offline transaction and controll method thereof

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH06259452A (en) * 1993-03-09 1994-09-16 Fujitsu Ltd Prepaid card system using ic card
US6839840B1 (en) * 1998-11-12 2005-01-04 Gemplus Authenticating method between a smart card and a terminal
WO2001009851A1 (en) * 1999-07-30 2001-02-08 Visa International Service Association Smart card transactions using wireless telecommunications network
US20070278291A1 (en) * 2005-12-22 2007-12-06 Rans Jean-Paul E Methods and Systems for Two-Factor Authentication Using Contactless Chip Cards or Devices and Mobile Devices or Dedicated Personal Readers
KR20110004043A (en) * 2009-07-07 2011-01-13 에스케이 텔레콤주식회사 Electronic cash system for offline transaction and controll method thereof

Also Published As

Publication number Publication date
WO2013130912A2 (en) 2013-09-06

Similar Documents

Publication Publication Date Title
WO2013106723A3 (en) Systems, methods, and computer program products providing payment in cooperation with emv card readers
MX2016001998A (en) Systems and methods for managing an account.
WO2008106270A3 (en) Improved methods and architecture for cashless system security
WO2008067313A3 (en) System and method for verification of identity for transactions
EP2545508A4 (en) Fuel dispenser payment system and method
WO2014149498A3 (en) Remote secure transactions
WO2012082899A9 (en) Atm/kiosk cash acceptance
WO2011103432A3 (en) System and method for financial transaction authentication using travel information
NZ570869A (en) Card authorization terminal system and card management method using the same
WO2014085478A3 (en) Systems and methods for processing electronic transactions based on consumer characteristics
WO2012030836A3 (en) Protecting express enrollment using a challenge
WO2014160347A3 (en) Methods and systems for authenticating a transaction with the use of a portable electronic device
MX351934B (en) Authorization of cash delivery.
NZ628971A (en) Transaction processing system and method
GB2505601A (en) Credential authentication methods and systems
WO2013101522A3 (en) Co-located groups as authorization mechanisms
WO2011106179A3 (en) Virtual fare card and virtual fare device
MX2015009820A (en) Transaction token issuing authorities.
WO2014013434A3 (en) A method and a system for facilitating credit based transactions
GB201120218D0 (en) Peer-to-peer payment registration and activation
WO2013112640A3 (en) Ticket transfer
MY164715A (en) Electronic currency and authentication system and method
WO2013130912A3 (en) In-card access control and monotonic counters for offline payment processing system
IN2015KN00479A (en)
JP2012226681A5 (en)

Legal Events

Date Code Title Description
WWE Wipo information: entry into national phase

Ref document number: 2013202684

Country of ref document: AU

121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 13754462

Country of ref document: EP

Kind code of ref document: A2

REG Reference to national code

Ref country code: BR

Ref legal event code: B01A

Ref document number: 112014021376

Country of ref document: BR

122 Ep: pct application non-entry in european phase

Ref document number: 13754462

Country of ref document: EP

Kind code of ref document: A2

ENP Entry into the national phase

Ref document number: 112014021376

Country of ref document: BR

Kind code of ref document: A2

Effective date: 20140828