Sending a cryptogram to a POS while disconnected from a network
AssigneeAmerican Express Travel Related Services Company, Inc.
InventorsNaresh Bhandari, Manish K. Deliwala, Ajay Maddukuri, John G. McDonald, Curtis Watson
Life of this patent
Estimating the term…
Abstract
A system is configured for detecting a point of sale, receiving a personal identification number (PIN), generating a PIN based key using a message digest of the PIN, decrypting a data encryption key (DEK) using the PIN based key, and generating a DEK based dynamic key using the PIN based key. The system may also decrypt a session key using the DEK based dynamic key, generate a cryptogram from the session key, and send the cryptogram to the point of sale.
Claims19
A method comprising:
- displaying, by a user device, a prompt for a selection of a transaction account;
- determining, by the user device, that an encrypted limited use purchase credential (LUPC) is available for the transaction account that has been selected;
- retrieving, by the user device, a new LUPC while the user device is connected to a network in response to detecting a number of LUPCs stored on the user device is below a threshold;
- decrypting, by the user device, the encrypted LUPC using a data encryption key (DEK) based dynamic key to create a LUPC;
- wirelessly connecting, by the user device, with a point of sale;
- generating, by the user device, a cryptogram from the LUPC in response to wirelessly connecting with the point of sale;
- and
- sending, by the user device, the cryptogram to the point of sale, wherein the cryptogram is used to authorize a purchase through the wireless connection between the user device and the point of sale.
A user device, comprising:
- a processor;
- and a tangible, non-transitory memory configured to communicate with the processor, the tangible, non-transitory memory having instructions stored thereon that, in response to execution by the processor, cause the processor to perform operations comprising:
- displaying, by the processor, a prompt for a selection of a transaction account;
- determining, by the processor, that an encrypted limited use purchase credential (LUPC) is available for the transaction account that has been selected;
- retrieving, by the processor, a new LUPC while the user device is connected to a network in response to detecting a number of LUPCs stored on the user device is below a threshold;
- decrypting, by the processor, the encrypted LUPC using a data encryption key (DEK) based dynamic key to create a LUPC;
- generating, by the processor, a cryptogram from the LUPC in response to wirelessly connecting with a point of sale;
- and
- sending, by the processor, the cryptogram to the point of sale while the user device is without the connection to the network, wherein the cryptogram is used to authorize a purchase through the wireless connection between the user device and the point of sale.
An article of manufacture including a non-transitory, tangible computer readable storage medium having instructions stored thereon that, in response to execution by a processor of a user device, cause the processor to perform operations comprising:
- displaying, by the processor, a prompt for a selection of a transaction account;
- determining, by the processor, that an encrypted limited use purchase credential (LUPC) is available for the transaction account that has been selected;
- retrieving, by the processor, a new LUPC while the user device is connected to a network in response to detecting a number of LUPCs stored on the user device is below a threshold;
- decrypting, by the processor, the encrypted LUPC using a data encryption key (DEK) based dynamic key to create a LUPC;
- wirelessly connecting, by the processor, with a point of sale;
- generating, by the processor, a cryptogram from the LUPC in response to wirelessly connecting with the point of sale;
- and
- sending, by the processor, the cryptogram to the point of sale, wherein the cryptogram is used to authorize a purchase through the wireless connection between the user device and the point of sale.
Dependencies are inferred from the claim text.