Authentication to authorization bridge using enriched messages
AssigneeCardinalCommerce Corporation
InventorsErik Nils Enright, Adam Ratica, Michael A. Keresman, III, Francis M. Sherwin, Chandra S. Balasubramanian
Life of this patent
Estimating the term…
Abstract
A system of electronic communication is disclosed. The system may: create a Pre-Authentication Transaction Number (Pre-ATN) by combining a number with a Special Encode Value (SEV), wherein the SEV is a single digit integer value; encrypt the Pre-ATN using a Format Preserving Encryption (FPE) to generate an encrypted Authentication Transaction Number (ATN); and send the encrypted ATN to an access control server (ACS) to use the encrypted ATN to generate a cardholder Authentication Verification Value (CAVV) or an Accountholder Authentication Value (AAV).
Claims16
A system for electronic communication, comprising:
- one or more processors of a third party configured to:
- create a Pre-Authentication Transaction Number (Pre-ATN) by combining a number with a Special Encode Value (SEV), wherein the SEV is a single digit integer value;
- encrypt the Pre-ATN using a Format Preserving Encryption (FPE) to generate an encrypted Authentication Transaction Number (ATN);
- and
- send the encrypted ATN to an access control server (ACS) to use the encrypted ATN to generate a cardholder Authentication Verification Value (CAVV) or an Accountholder Authentication Value (AAV).
A method for electronic communication, comprising:
- with one or more processors of a third party:
- creating a Pre-Authentication Transaction Number (Pre-ATN) by combining a number with a Special Encode Value (SEV), wherein the SEV is a single digit integer value;
- encrypting the Pre-ATN using a Format Preserving Encryption (FPE) to generate an encrypted Authentication Transaction Number (ATN);
- and
- sending the encrypted ATN to an access control server (ACS);
- and with the ACS:
- using the encrypted ATN to generate a cardholder Authentication Verification Value (CAVV) or an Accountholder Authentication Value (AAV).
A decoding entity comprising one or more processors, the one or more processors configured to:
- obtain a Special Encode Value (SEV), the SEV being a single digit integer value, by:
- receiving an authorization request including cardholder Authentication Verification Value (CAVV) or an Accountholder Authentication Value (AAV);
- deconstructing a Authentication Transaction Number (ATN) and a key indicator from the CAVV or AAV;
- and
- decrypting the ATN using a Format Preserving Decryption (FPD) routine;
- and
- use the SEV to look up a corresponding definition in a table to bridge information between an authentication procedure and an authorization procedure.
Dependencies are inferred from the claim text.