US 12,711,497 B2 · Method and system for contactless transactions without user credentials

Abstract

A method for generation of an application cryptogram for use in a payment transaction includes: storing, in a first memory, a single use key associated with a transaction account; electronically transmitting the single use key to a processing server; receiving an encrypted session key and a server encryption key from the processing server; executing a first query to store the encrypted session key in the first memory and a second query to store the server encryption key in a second memory; decrypting the encrypted session key using the server encryption key; generating an application cryptogram based on the decrypted session key; and electronically transmitting the generated application cryptogram for use in a payment transaction.

Claims10

Dependent claims

A method for provisioning of a session key, said method comprising:

receiving, by a processing server, from a computing device, a session key request including a single use key and an account identifier, wherein the single use key is a payment token that is associated with a transaction account;
generating, by the processing server, a session key based on the received single use key and an account identification number included in an account profile;
encrypting, by the processing server, the generated session key using a server encryption key;
transmitting, by the processing server, the encrypted session key and the server encryption key to the computing device;
and
generating, by the computing device, an application cryptogram without requiring input of a personal identification number (PIN).

3 more elements

A system for provisioning of a session key, comprising:

a processing server;
and
a computing device,
wherein the processing server includes
a receiving device configured to receive a single use key and an account identifier from a computing device, wherein the single use key is a payment token that is associated with a transaction account, and
a processing device configured to (i) generate a session key based on the received single use key and an account identification number included in an account profile, and (ii) encrypt the generated session key using a server encryption key, and
a transmitting device configured to transmit the encrypted session key and the server encryption key to the computing device, and
wherein the computing device is configured to generate an application cryptogram without requiring input of a personal identification number (PIN).

5 more elements

Dependencies are inferred from the claim text.

Facts

Application

18/413,514Filed 16 Jan 2024 · continuation

Priority

21 Apr 2016

Published

US 2024/0152916 A19 May 2024

Granted

18 Aug 2026

Term ends

Not estimatedThe source records don’t support an estimate.

Classification22 codes

G06Q 20/3829
Insuring higher security of transaction: involving key management
G06Q 20/204
Point-of-sale [POS] network systems: comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
G06Q 20/3821
Insuring higher security of transaction: electronic credentials
G06Q 20/385
Payment protocols; Details thereof: using an alias or single-use codes

Family

Application62/325,722Us provisional application · filed 21 Apr 2016

Application15/493,759Parent of this division · filed 21 Apr 2017

Application17/451,699Parent of this continuation · filed 21 Oct 2021

US 11,182,779 B2Parent of this division · filed 23 Nov 2021

US 2024/0152916 A1Pre-grant publication · published 9 May 2024

US 11,915,233 B2Parent of this continuation

Application17/451,699Parent of this division

US 2017/0308895 A1Published application

US 2022/0036348 A1Published application

US 12,711,497 B2This patent

From the US filing history. Foreign family members aren’t listed.

Method and system for contactless transactions without user credentials

Life of this patent

Method and system for contactless transactions without user credentials

Life of this patent

Abstract

Claims10