# US 12,602,687 B2 · Devices, methods and computer readable mediums for providing access control

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,602,687 B2
- Document ID: US12602687B2
- Status: Granted
- Kind: B2
- Application number: 18/625,143
- Filed: 2024-04-02
- Published: 2024-10-17
- Granted: 2026-04-14
- Earliest claimed: 2020-10-23
- Assignees: Mastercard International Incorporated
- Applicants: MasterCard International Incorporated
- Inventors: Simon Phillips; Alan Johnson; Michael John Cowen
- Web page: https://patentgrep.com/patent/US12602687B2

## CPC

- G06Q 20/401: {Transaction verification}
- G06Q 20/3278: {RFID or NFC payments by means of M-devices}
- G06Q 20/38215: {Use of certificates or encrypted proofs of transaction rights}
- G06Q 20/4014: {Identity check for transactions}
- G06Q 20/405: {Establishing or using transaction specific rules}
- G06Q 20/40975: {using encryption therefor}
- G07B 15/00: Arrangements or apparatus for collecting fares, tolls or entrance fees at one or more control points (handling coins or valuable papers, e.g. banknotes, G07D; apparatus for vending or hiring articles or services activated by coins, credit cards, paper currency or the like G07F7/00, G07F17/00)
- G07C 9/00182: {operated with unidirectional data transmission between data carrier and locks}
- G07C 9/00309: {operated with bidirectional data transmission between data carrier and locks}
- G07C 9/00563: {using personal physical data of the operator, e.g. finger prints, retinal images, voicepatterns}
- G07C 9/00571: {operated by interacting with a central unit}
- G07C 9/00904: {for hotels, motels, office buildings or the like}
- G07C 9/10: Movable barriers with registering means
- G07C 9/25: using biometric data, e.g. fingerprints, iris scans or voice recognition
- G07C 9/27: with central registration
- G07F 17/0014: {for vending, access and use of specific services not covered anywhere else in G07F17/00 (meter-controlled dispensing of liquid, gas or electricity G07F15/00)}
- G07C 2009/00769: {with data transmission performed by wireless means}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G07B: TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
- G07C: TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00})

## Abstract

Various implementation described herein are directed to a method for providing access control. User information is received at a device. A request to provide access control is generated by the device based on the received user information. The request is transmitted via a network to an access manager. A response to the request is received from the access manager. Access control via the device is provided based on the response to the request.

## Claims

### Claim 1

A system, comprising:
an access manager, comprising:
at least one processor; and
at least one memory including computer program code;
wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the access manager at least to:
receive, via a network, a payment authorization request from an access device to provide access control based on user information;
perform a lookup process based on the payment authorization request;
determine eligibility for access based on the user information in the payment authorization request; and
in response to determining the user information is eligible for access, forward the payment authorization request to an acquirer for the eligible user information; and
the acquirer, wherein the acquirer is configured to:
receive the payment authorization request from the access manager;
generate a cryptogram based on the payment authorization request; and
forward the payment authorization request, the payment authorization request including the cryptogram, to a payment processing entity or an issuer entity;
wherein the computer program code is further configured to, with the at least one processor, cause the access manager at least to:
receive a response to the payment authorization request from the acquirer, wherein the response to the payment authorization request is generated based on validation of the cryptogram; and
transmit, via the network, the response to the payment authorization request to the access device.

### Claim 2 (depends on 1)

The system of claim 1, wherein the payment authorization request comprises a zero-value or low-value payment authorization request.

### Claim 3 (depends on 1)

The system of claim 1, wherein the response comprises one of: a payment authorization response approving the access, a payment authorization response restricting the access, and another message.

### Claim 4 (depends on 1)

The system of claim 1, wherein the at least one memory and the computer program code are configured to, with the at least one processor, further cause the access manager to:
in response to determining the user information is ineligible for access, deny the access for the user information.

### Claim 5 (depends on 1)

The system of claim 1, wherein:
the system further comprises the access device; and
the acquirer is further configured to:
perform a payment authorization process based on the payment authorization request;
generate the response to the payment authorization request; and
transmit the response to the payment authorization request to the access manager.

### Claim 6 (depends on 1)

The system of claim 1, wherein:
the system further comprises the access device and the payment processing entity; and
the payment processing entity is configured to:
receive the payment authorization request from the access manager via the acquirer;
perform a payment authorization process based on the payment authorization request including validating the cryptogram;
generate the response to the payment authorization request based on the validation of the cryptogram; and
transmit the response to the payment authorization request to the access manager via the acquirer.

### Claim 7 (depends on 1)

The system of claim 1, wherein:
the system further comprises the access device, the payment processing entity, and the issuer entity; and
the issuer entity is configured to:
receive the payment authorization request from the access manager via the acquirer and the payment processing entity;
perform a payment authorization process based on the payment authorization request including validating the cryptogram;
generate the response to the payment authorization request based on the validation of the cryptogram; and
transmit the response to the payment authorization request to the access manager via the payment processing entity and the acquirer.

### Claim 8 (depends on 1)

The system of claim 1, wherein the at least one memory and the computer program code are configured to, with the at least one processor, further cause the access manager to:
send a notification to an account holder associated with the user information to inform the account holder of an attempt to gain access.

### Claim 9 (depends on 8)

The system of claim 8, wherein the at least one memory and the computer program code are configured to, with the at least one processor, further cause the access manager to:
receive a message from the account holder in response to the notification.

### Claim 10 (depends on 1)

The system of claim 1, wherein the acquirer is further configured to:
generate the cryptogram using public key cryptography.

### Claim 11 (depends on 5)

The system of claim 5, wherein the acquirer is further configured to:
perform the payment authorization process based on the payment authorization request including validating the cryptogram using one or more keys previously received from an issuer entity.

### Claim 12 (depends on 7)

The system of claim 7, wherein:
the acquirer is further configured to generate the cryptogram using a token number associated with a user account, and
the payment processing entity is further configured to validate the cryptogram including retrieving card record information from a database and determining whether a payment card associated with card record information is valid or in good standing.