# US 11,443,321 B2 · Payment service authentication for a transaction using a generated dynamic verification value

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,443,321 B2
- Document ID: US11443321B2
- Status: Granted
- Kind: B2
- Application number: 16/693,108
- Filed: 2019-11-22
- Published: 2020-03-19
- Granted: 2022-09-13
- Earliest claimed: 2003-08-18
- Assignees: Visa International Service Association
- Applicants: Visa International Service Association
- Inventors: Jagdeep Singh Sahota; Christian Aabye
- Web page: https://patentgrep.com/patent/US11443321B2

## CPC

- G06Q 20/4018: {using the card verification value [CVV] associated with the card}
- G06Q 20/10: specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
- G06Q 20/20: Point-of-sale [POS] network systems
- G06Q 20/341: {Active cards, i.e. cards including their own processing means, e.g. including an IC or chip}
- G06Q 20/388: {using mutual authentication without cards, e.g. challenge-response}
- G06Q 20/401: {Transaction verification}
- G06Q 20/4093: {Monitoring of device authentication}
- G07F 7/1008: {Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00})

## Abstract

Methods and systems for dynamically generating a verification value for a transaction and for utilizing such value to verify the authenticity of the payment service application. The dynamically created verification value may be generated on a payment device, such as an integrated circuit credit card or smart card, embedded into the payment data, and transmitted to a point of sale terminal. Alternatively, payment data is sent by a payment device to a point of sale terminal, which generates a verification value and embeds it into the payment data. The embedded verification value is used by a service provider to verify the authenticity of the transaction. The methods and systems may be used in a contactless (wireless) environment or a non-wireless environment.

## Claims

### Claim 1

A method comprising:
receiving, at a service provider computer, payment data from a POS terminal, the payment data having a first dynamic verification value and an indicator and being received by the POS terminal from a payment device via a wireless data transmission before the payment data is received at the service provider computer, wherein the first dynamic verification value and the indicator are present in the payment device prior to the service provider computer receiving the payment data;
determining based on the indicator that a deployed payment service on the payment device provided the first dynamic verification value;
generating, at the service provider computer and in response to the indicator, a second dynamic verification value; and
determining if the first and second dynamic verification values match,
wherein the service provider computer allows a payment transaction to proceed if the first and second dynamic verification values match.

### Claim 2 (depends on 1)

The method of claim 1 wherein the payment device includes a cellular telephone.

### Claim 3 (depends on 1)

The method of claim 1 wherein the payment device includes an integrated circuit card.

### Claim 4 (depends on 1)

The method of claim 1 wherein the second dynamic verification value is generated using at least one static data element.

### Claim 5 (depends on 4)

The method of claim 4 wherein the static data element is a PAN.

### Claim 6 (depends on 1)

The method of claim 1 wherein the second dynamic verification value is derived using at least one uniquely derived key (UDK).

### Claim 7 (depends on 6)

The method of claim 6 wherein the at least one UDK is at least two or more UDKs.

### Claim 8 (depends on 1)

The method of claim 1 wherein the first dynamic verification value is generated on the payment device.

### Claim 9 (depends on 1)

The method of claim 1 wherein the payment device is in the form of a card.

### Claim 10 (depends on 1)

The method of claim 1 wherein the operations are performed in the order shown.

### Claim 11

A system comprising:
a processor;
a non-transitory computer readable medium, the non-transitory computer readable medium comprising code, executable by the processor, for implementing a method comprising:
receiving, at a service provider computer, payment data from a POS terminal, the payment data having a first dynamic verification value and an indicator and being received by the POS terminal from a payment device via a wireless data transmission before the payment data is received at the service provider computer, wherein the first dynamic verification value and the indicator are present in the payment device prior to the service provider computer receiving the payment data;
determining based on the indicator that a deployed payment service on the payment device provided the first dynamic verification value;
generating, at the service provider computer and in response to the indicator, a second dynamic verification value; and
determining if the first and second dynamic verification values match,
wherein the service provider computer allows a payment transaction to proceed if the first and second dynamic verification values match.

### Claim 12 (depends on 11)

The system of claim 11 wherein the second dynamic verification value is generated using at least an application transaction counter (ATC).

### Claim 13 (depends on 12)

The system of claim 12 wherein the generation of the second dynamic verification value includes overlaying the application transaction counter over a portion of the payment data.

### Claim 14 (depends on 11)

The system of claim 11 wherein the payment data includes a transaction amount and a user account identifier.

### Claim 15

A method comprising:
generating, at a payment device and in response to the payment device interacting with an access device to conduct a payment transaction, a first dynamic verification value; and
providing, to a POS terminal, payment data, the POS terminal transmitting the payment data to a service provider computer, the payment data having the first dynamic verification value and an indicator, signaling the presence of the first dynamic verification value within the payment data,
wherein the service provider computer generates, in response to the indicator, a second dynamic verification value, and determines if the first and second dynamic verification values match, and wherein the service provider computer allows the payment transaction to proceed if the first and second dynamic verification values match.

### Claim 16 (depends on 15)

The method of claim 15 wherein the first and second dynamic verification values each have a length of 3 digits.

### Claim 17 (depends on 15)

The method of claim 15 wherein the first dynamic verification value is derived using at least a bitwise operation.

### Claim 18 (depends on 15)

The method of claim 15 wherein an application transaction counter is stored on the payment device.

### Claim 19 (depends on 18)

The method of claim 18 wherein the application transaction counter is incremented after the payment transaction is completed.