Method for generating and updating alternate security codes for payment cards
AssigneeMastercard International Incorporated
InventorsMichael Powell, Joan Rohlfing, Alex Inovenkov, Rodney Pye, Puneet Bhalla, David Gilliland
Life of this patent
Estimating the term…
Abstract
An auxiliary security code called a CVC2a is generated to replace a CVC2 value that is presented on a payment card for verifying card-not-present (CNP) transactions without necessarily generating a replacement card. An enhanced card table/file is maintained by a payment network operator to facilitate transitional scenarios in which the payment cards are reissued or replaced.
Claims20
A method for replacing a first imprinted security code of a first payment card without necessarily generating a replacement payment card, the method comprising:
- updating a payment card authentication database record associated with a first payment card number by including in the database record an indicator that a non-imprinted security code is in use for authorizing payments with the first payment card;
- and
- generating the non-imprinted security code for the first payment card by inputting the first payment card number of the first payment card, a first expiration date of the first payment card, and an auxiliary issuer code into an algorithm, wherein the auxiliary issuer code is input to the algorithm in place of a primary issuer code that may otherwise be input to the algorithm to generate the first imprinted security code.
A system of machines configured for replacing a first imprinted security code of a first payment card without necessarily generating a replacement payment card when the first imprinted security code is compromised, the system comprising:
- a payment card data storage machine coupled in communication with a payment card network;
- and
- a payment card processor coupled in communication with the payment card data storage machine, the payment card processor being configured to:
- update a payment card authentication database record associated with a first payment card number on the payment card data storage machine by including in the database record an indicator that a non-imprinted security code is in use for authorizing payments with the first payment card;
- and
- generate the non-imprinted security code for the first payment card by inputting the first payment card number of the first payment card, a first expiration date of the first payment card, and an auxiliary issuer code into an algorithm, wherein the auxiliary issuer code is input to the algorithm in place of a primary issuer code that may otherwise be input to the algorithm to generate the first imprinted security code.
A method for activating a payment card, comprising:
- determining whether a CVC2 code of a payment card has been compromised;
- and
- in response to determining that the CVC2 code has been compromised:
- writing a new service code to a current/primary service code field in a payment card database and maintaining a previous/secondary service code field in the payment card database to zero;
- generating a CVC2a code using the current service code that is stored in the current/primary service code field;
- and
- activating the card for card-not-present (CNP) transactions with the CVC2a code.
A method for activating a payment card, comprising:
- generating an auxiliary CVC2 code (CVC2a) for a corresponding payment card based on service code;
- and
- storing the service code in either a first service code field of a payment card authorization database or a second service code field of the payment card authorization database.
An apparatus for activating a payment card, wherein the apparatus is configured to:
- determine whether a CVC2 code of a payment card has been compromised;
- write a new service code to a current/primary service code field of a payment card authorization database and setting a previous/secondary service code field of a payment card authorization database to an initial value in the event that the CVC2 code has been compromised;
- generate a CVC2a code using the current service code that is stored in the current/primary service code field;
- and
- activate the card for card-not-present (CNP) transactions with the CVC2a code.
Dependencies are inferred from the claim text.