US 12,755,275 B2Granted

System and method for secure transactions

AssigneeData Mesh Group Pty Ltd

InventorTareq Hafez

Life of this patent

Estimating the term…

Loading patent…

Abstract

Described herein is are systems and methods for conducting secure transactions. In one embodiment, a method (300) is provided of conducting a secure transaction between a merchant and a customer. Method (300) includes initiating a transaction between the customer and the merchant by capturing a primary account number of the customer and a transaction amount at a merchant terminal (104). A transaction identifier is generated that is unique to the transaction based on the primary account number and transaction amount. The transaction identifier is then encoded in a visual representation and presented on a display so that it can be captured by a camera on a customer device. In response, a customer app is launched on a customer device (106). The customer app is configured to: control the customer device (106) to present the customer with a user interface to enter a PIN number associated with the primary account number of the customer; and generate a PIN block for the PIN number and transmit the PIN block to a transaction server (102) for verification. A verification or rejection of the transaction is then generated from a financial institution associated with the customer account. Finally, the verification or rejection of the transaction is transmitted to the merchant terminal (104) to complete the transaction.

Claims31

Dependent claims

A method of conducting a secure transaction between a merchant and a customer, the method including:

initiating a first secure monitored session between a merchant terminal and a transaction server;
wherein the first secure monitored session refers to a mutually authenticated connection in which sensitive data is encrypted;
during the first secure monitored session, capturing a customer primary account number (PAN) at the merchant terminal, the customer primary account number being associated with a customer account at a financial institution;
wherein the PAN represents a debit or credit card number, a tokenized version thereof, or an encrypted version thereof that is associated with the customer account at the financial institution;
sending a request for a transaction from the merchant terminal to the transaction server, the request including the customer PAN and a transaction amount;
generating, at the transaction server, a transaction identifier (TRANS-ID) that is unique to the transaction and a timestamp (TIMESTAMP1) corresponding to a time when the transaction was requested or initiated, and sending TRANS-ID and TIMESTAMP1 to the merchant terminal;
encoding the TRANS-ID and TIMESTAMP 1 in a visual representation for presentation on a display;
allowing capture of the visual representation by a camera on a customer device;
in response to the capture of the visual representation on the customer device, launching a customer app on the customer device, wherein the customer app:
initiates a second secure monitored session between the customer device and the transaction server, wherein the second secure monitored session refers to a second mutually authenticated connection for providing a safe window in which a PIN number associated with the customer PAN is entered;
controls the customer device to present the customer with a user interface to enter the PIN number associated with the customer PAN;
generates a PIN block for the PIN number using a random primary account number downloaded from the server and transmit the PIN block to the transaction server for verification;
obtaining, at the transaction server, a verification or rejection of the transaction from the financial institution associated with the customer account;
and
transmitting the verification or rejection of the transaction to the merchant terminal to complete the transaction.

12 more elements

A computer server configured to facilitate a method of conducting a secure transaction between a customer mobile device and a merchant terminal, wherein the server comprises:

a non-transitory medium having instructions stored thereon, wherein the instructions cause the computer server to perform the following method:
conducting a first secure monitored session with the merchant terminal, wherein during the first secure monitored session, a customer primary account number (PAN) is captured at the merchant terminal, the customer PAN being associated with a customer account at a financial institution;
wherein the first secure monitored session refers to a mutually authenticated connection in which sensitive data is encrypted;
wherein the PAN represents a debit or credit card number, a tokenized version thereof, or an encrypted version thereof that is associated with the customer account at the financial institution;
receiving a request for a transaction from the merchant terminal, the request including the customer PAN and a transaction amount;
generating a transaction identifier (TRANS-ID) that is unique to the transaction and a timestamp (TIMESTAMP1) corresponding to a time when the transaction was requested or initiated, and sending TRANS-ID and TIMESTAMP1 to the merchant terminal, wherein TRANS-ID and TIMESTAMP1 are encoded in a visual representation and presented on a display for capture by a camera on the customer device;
conducting a second secure monitored session with the customer device, wherein the second secure monitored session refers to a second mutually authenticated connection which provides a safe window in which a PIN number associated with the customer PAN is entered, wherein during the second secure monitored session, the customer device is controlled to:
present the customer with a user interface to enter the PIN number associated with the customer PAN;
and
generate a PIN block for the PIN number using a random primary account number downloaded from the server and transmit the PIN block to the server for verification;
receiving the PIN block and obtaining a verification or rejection of the transaction from a financial institution associated with the customer account;
and
transmitting the verification or rejection of the transaction to the merchant terminal to complete the transaction.

10 more elements

Dependencies are inferred from the claim text.

Facts

Application: 18/281,895Filed 6 Apr 2022
Priority: AU 20219010449 Apr 2021
Published: US 2024/0152914 A19 May 2024
Granted: 6 Oct 2026
Term ends: Not estimatedThe source records don’t support an estimate.

Classification6 codes

G06Q 20/382
Payment protocols; Details thereof: insuring higher security of transaction
G06Q 20/3276
Short range or proximity payments by means of M-devices: using a pictured code, e.g. barcode or QR-code, being read by the M-device
G06Q 20/34
Characterised by the use of specific devices or networks: using cards, e.g. integrated circuit [IC] cards or magnetic cards
G06Q 20/4012
Transaction verification: verifying personal identification numbers [PIN]