# US 10,769,627 B2 · Systems, methods and devices for transacting

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,769,627 B2
- Document ID: US10769627B2
- Status: Granted
- Kind: B2
- Application number: 14/781,538
- Filed: 2014-04-04
- Published: 2016-02-18
- Granted: 2020-09-08
- Earliest claimed: 2013-04-05
- Assignees: Visa International Service Association
- Applicants: Visa International Service Association
- Inventors: Horatio Nelson Huxham; Alan Joseph O'Regan
- Web page: https://patentgrep.com/patent/US10769627B2

## CPC

- G06Q 20/3829: {involving key management}
- G06Q 20/02: involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
- G06Q 20/20: Point-of-sale [POS] network systems
- G06Q 20/3226: {Use of secure elements separate from M-devices}
- G06Q 20/3821: {Electronic credentials}
- G06Q 20/38215: {Use of certificates or encrypted proofs of transaction rights}
- G06Q 20/385: {using an alias or single-use codes}
- G06Q 20/405: {Establishing or using transaction specific rules}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

A mobile device of a consumer can have a mobile-based credential stored in a secure memory thereof and an associated alias. Techniques for conducting a transaction with the mobile device may involve receiving a request for the mobile-based credential from a remotely accessible server in response to a requestor device receiving the alias from the consumer. The mobile-based credential can be accessed from the secure memory and transmitted to the remotely accessible server. The mobile-based credential is then usable at the remotely accessible server in combination with a server-based credential stored thereat for obtaining payment credentials to complete the transaction.

## Claims

### Claim 1

A system for conducting a transaction based on account credentials associated with a consumer, the system comprising:
a mobile device of the consumer having an associated alias, the mobile device comprising:
a secure store integrated circuit including a first cryptoprocessor coupled to a first secure memory storing:
a mobile-based credential, the mobile-based credential being a decryption key corresponding to encrypted account credentials stored at a remotely accessible server as a server-based credential; and
a first set of instructions, which when executed by the first cryptoprocessor, causes the secure store integrated circuit to release the mobile-based credential in response to receiving a correct passcode associated with the mobile-based credential;
a secure accessing integrated circuit including a second cryptoprocessor coupled to a second secure memory storing a second set of instructions, which when executed by the second cryptoprocessor, causes the secure accessing integrated circuit to:
receive a request for the mobile-based credential from the remotely accessible server, the request being generated by the remotely accessible server in response to receiving the alias associated with the consumer from a merchant terminal;
prompt for entry of a passcode associated with the mobile-based credential;
receive the passcode associated with the mobile-based credential;
transmit the passcode to the secure store integrated circuit;
access the mobile-based credential from the secure store integrated circuit in response to the secure store integrated circuit verifying the passcode is correct; and
transmit the mobile-based credential to the remotely accessible server, the mobile-based credential being the decryption key decrypting the server-based credential stored at the remotely accessible server to obtain the account credentials for completing the transaction.

### Claim 2 (depends on 1)

The system as claimed in claim 1, wherein the alias is one of: a mobile subscriber integrated services digital network-number (MSISDN) of the mobile device; an email address registered by the consumer; an identity number of the consumer; a username registered by the consumer; or a near field communication (NFC) or radio frequency identification (RFID) transmittable alias.

### Claim 3 (depends on 1)

The system as claimed in claim 1, wherein the mobile-based credential is accessible from the secure store integrated circuit only over a certified communication interface.

### Claim 4 (depends on 3)

The system as claimed in claim 3, wherein the secure store integrated circuit and secure accessing integrated circuit are logically and physically separated from each other, and wherein the certified communication interface is provided by an International Organization for Standardization (ISO) 7816 communication interface.

### Claim 5 (depends on 1)

The system as claimed in claim 1, further comprising the remotely accessible server having the server-based credential stored therein, the remotely accessible server including:
a processor coupled to a memory storing a set of server instructions, which when executed by the processor, causes the remotely accessible server to:
receive the alias from the merchant terminal in response to the merchant terminal receiving the alias from the consumer;
identify the mobile device of the consumer corresponding to the alias;
request the mobile-based credential from the identified mobile device;
receive the mobile-based credential from the mobile device; and
obtain the account credentials from the mobile-based credential and the server-based credential.

### Claim 6 (depends on 5)

The system as claimed in claim 5, wherein the account credentials are obtained by decrypting the server-based credential with the mobile-based credential.

### Claim 7 (depends on 1)

The system as claimed in claim 1, further comprising the merchant terminal, the merchant terminal being configured to:
receive the alias from the consumer; and
transmit transaction information and the alias to the remotely accessible server.

### Claim 8 (depends on 7)

The system as claimed in claim 7, wherein the transaction information includes one or both of a transaction value and transaction product details; wherein the transaction product details include stock keeping unit information; and wherein the remotely accessible server is configured to receive the transaction information with the alias.

### Claim 9 (depends on 1)

The system as claimed in claim 1, wherein the secure store integrated circuit further includes tamper detection sensors.

### Claim 10 (depends on 1)

The system as claimed in claim 1, wherein account credentials is valid for only one transaction.

### Claim 11 (depends on 5)

The system as claimed in claim 5, wherein the set of server instructions further causes the remotely accessible server to perform zone-translation on the obtained account credentials.

### Claim 12 (depends on 11)

The system as claimed in claim 11, wherein zone-translation of the obtained account credentials include formatting of the obtained account credentials and re-encryption of the formatted account credentials.

### Claim 13 (depends on 1)

The system as claimed in claim 1, wherein the alias is variable over time.

### Claim 14 (depends on 1)

The system as claimed in claim 1, wherein the secure accessing integrated circuit further includes a secure-accessing-element-to-secure-store-element interface that interfaces to the secure store integrated circuit, the secure-accessing-element-to-secure-store-element interface comprising a clock signal and one or more input/output signals.

### Claim 15 (depends on 1)

The system as claimed in claim 1, wherein the secure accessing integrated circuit further includes a mobile device interface having a first set of electrical contacts and a communication device interface having a second set of electrical contacts.

### Claim 16 (depends on 1)

The system as claimed in claim 1, wherein the first cryptoprocessor includes a pipelined arithmetic logic unit.

### Claim 17 (depends on 1)

The system as claimed in claim 1, wherein the second cryptoprocessor includes a pipelined arithmetic logic unit.