System and method for securely validating transactions
AssigneeVisa International Service Associate
InventorAyman Hammad
Life of this patent
Estimating the term…
Abstract
Systems and methods for validating and processing payment transactions are disclosed. In the embodiments of the invention a first authorization request message and a first verification value are received at a server computer. The verification value is validated and a second authorization request message with a second verification value is generated. The first verification value may be a dynamic value and the second verification value may be static value. The second verification value is associated with portable device used to perform a transaction and it is what the issuer computers of the portable device expect to receive as part of an authorization request message in a payment transaction.
Claims20
A server computer comprising:
- a processor;
- and
- a non-transitory computer readable storage medium coupled to the processor having code stored thereon which is executable by the processor for implementing a method, the method comprising:
- receiving, at the server computer, a first authorization request message for a transaction, the first authorization request message comprising an account identifier and a dynamic verification value, the dynamic verification value being stored, in the first authorization request message, in a data field reserved for static verification values;
- determining, by the server computer, whether the dynamic verification value is a valid dynamic verification value;
- responsive to determining that the dynamic verification value is a valid dynamic verification value:
- generating, by the server computer, a second authorization request message comprising the account identifier and a static verification value that replaces the valid dynamic verification value stored in the data field reserved for static verification values, and
- sending, by the server computer to an issuer computer operated by an issuer of the account identifier, the second authorization request message comprising the static verification value instead of the first authorization request message comprising the valid dynamic verification value;
- and
- responsive to determining that the dynamic verification value is not a valid dynamic verification value:
- sending, by the server computer to the issuer computer operated by the issuer of the account identifier, the first authorization request message comprising the dynamic verification value stored in the data field reserved for static verification values, and
- receiving, from the issuer computer, an authorization response message indicating that the transaction is denied, because the dynamic verification value that was received by the issuer computer was not a correct static verification value associated with the account identifier.
A method comprising:
- receiving, at a server computer, a first authorization request message for a transaction, the first authorization request message comprising an account identifier and a dynamic verification value, the dynamic verification value being stored, in the first authorization request message, in a data field reserved for static verification values;
- determining, by the server computer, whether the dynamic verification value is a valid dynamic verification value;
- responsive to determining that the dynamic verification value is a valid dynamic verification value:
- generating, by the server computer, a second authorization request message comprising the account identifier and a static verification value that replaces the valid dynamic verification value stored in the data field reserved for static verification values, and
- sending, by the server computer to an issuer computer operated by an issuer of the account identifier, the second authorization request message comprising the static verification value instead of the first authorization request message comprising the valid dynamic verification value;
- and
- responsive to determining that the dynamic verification value is not a valid dynamic verification value:
- sending, by the server computer to the issuer computer operated by the issuer of the account identifier, the first authorization request message comprising the dynamic verification value stored in the data field reserved for static verification values, and
- receiving, from the issuer computer, an authorization response message indicating that the transaction is denied, because the dynamic verification value that was received by the issuer computer was not a correct static verification value associated with the account identifier.
Dependencies are inferred from the claim text.