Transaction authorisation
AssigneeVisa Europe Limited
InventorGRAHAM Lewis
Life of this patent
Estimating the term…
Abstract
There is discussed a method of authorising an electronic transaction in which a user device receives a shared secret and a shared secret identifier. Subsequently, on receipt of transaction data from a transaction terminal, the user device calculates a one-way hash of data comprising the shared secret to generate a hash value, generates authentication data comprising the hash value and the shared secret identifier, and transmits the authentication data to the transaction terminal.
Claims20
A method of authorising an electronic transaction, the method comprising a user device:
- receiving a shared secret and a shared secret identifier;
- receiving transaction data from a transaction terminal;
- calculating a one-way hash of data comprising the shared secret to generate a hash value;
- generating authentication data comprising the hash value and the shared secret identifier;
- and
- transmitting the authentication data to the transaction terminal.
A method of validating a transaction, the method comprising a validation platform:
- provisioning a user device with a shared secret and a shared secret identifier;
- receiving authentication data for a transaction, the authentication data identifying the user and comprising a transaction hash value and a transaction shared secret identifier;
- verifying that the transaction shared secret identifier corresponds to a valid shared secret;
- calculating a verification hash value by calculating a one-way hash of data comprising the shared secret corresponding to the transaction shared secret identifier;
- and
- comparing the transaction hash value and the verification hash value to determine if the transaction is valid.
A computer readable medium comprising code, executable by a processor, to:
- receive a shared secret and a shared secret identifier;
- receive transaction data from a transaction terminal;
- calculate a one-way hash of data comprising the shared secret to generate a hash value;
- generate authentication data comprising the hash value and the shared secret identifier;
- and
- transmit the authentication data to the transaction terminal.
Apparatus comprising:
- a first interface for receiving a shared secret and a shared secret identifier from a remote device via a first communication system;
- and
- a second interface for receiving transaction data from a transaction terminal via a second communication system,
- wherein the apparatus is configured to calculate a one-way hash of data comprising the shared secret to generate a hash value, generate authentication data comprising the hash value and the shared secret identifier, and transmit the authentication data to the transaction terminal.
Dependencies are inferred from the claim text.