# US 2018/0322497 A1 · Transaction authorisation

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2018/0322497 A1
- Document ID: US20180322497A1
- Status: Published application
- Kind: A1
- Application number: 15/773,958
- Filed: 2016-11-07
- Published: 2018-11-08
- Earliest claimed: 2015-11-06
- Assignees: Visa Europe Limited
- Applicants: Visa Europe Limited
- Inventors: GRAHAM Lewis
- Web page: https://patentgrep.com/patent/US20180322497A1

## CPC

- G06Q 20/4014: {Identity check for transactions}
- G06Q 20/3278: {RFID or NFC payments by means of M-devices}
- G06Q 20/3672: {initialising or reloading thereof}
- G06Q 20/3827: {Use of message hashing}
- G06Q 20/401: {Transaction verification}
- H04L 9/0816: {Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

There is discussed a method of authorising an electronic transaction in which a user device receives a shared secret and a shared secret identifier. Subsequently, on receipt of transaction data from a transaction terminal, the user device calculates a one-way hash of data comprising the shared secret to generate a hash value, generates authentication data comprising the hash value and the shared secret identifier, and transmits the authentication data to the transaction terminal.

## Claims

### Claim 1

A method of authorising an electronic transaction, the method comprising a user device:
receiving a shared secret and a shared secret identifier;
receiving transaction data from a transaction terminal;
calculating a one-way hash of data comprising the shared secret to generate a hash value;
generating authentication data comprising the hash value and the shared secret identifier; and
transmitting the authentication data to the transaction terminal.

### Claim 2 (depends on 1)

A method according to claim 1, wherein the user device receives a plurality of shared secrets and a plurality of shared secret identifiers, each shared secret identifier corresponding to a respective shared secret, and
wherein the authentication data comprises the shared secret identifier corresponding to the shared secret used in the calculation of the hash value.

### Claim 3 (depends on 1)

A method according to claim 1, wherein the user device receives the shared secret and the shared secret identifier via a first communication link, and wherein the user device transmits the authentication data via a second communication link different from the first communication link.

### Claim 4 (depends on 3)

A method according to claim 3, wherein the first communication link communicates data using the Internet Protocol.

### Claim 5 (depends on 3)

A method according to claim 3, wherein the second communication link is a wireless communication link.

### Claim 6 (depends on 5)

A method according to claim 5, wherein the second communication link communicates data using a Near Field Communication protocol.

### Claim 7 (depends on 1)

A method according to any preceding claim 1, further comprising verifying the identity of the user of the user device,
wherein the data used to calculate the hash value further comprises information relating to the identity verification.

### Claim 8 (depends on 7)

A method according to claim 7, wherein the verifying of the identity of the user comprises using a Fast Identity Online technique.

### Claim 9 (depends on 1)

A method according to claim 1, wherein the transaction comprises a contactless payment transaction, the payment terminal comprises a contactless payment terminal and the user device comprises a contactless payment device.

### Claim 10

A method of validating a transaction, the method comprising a validation platform:
provisioning a user device with a shared secret and a shared secret identifier;
receiving authentication data for a transaction, the authentication data identifying the user and comprising a transaction hash value and a transaction shared secret identifier;
verifying that the transaction shared secret identifier corresponds to a valid shared secret;
calculating a verification hash value by calculating a one-way hash of data comprising the shared secret corresponding to the transaction shared secret identifier; and
comparing the transaction hash value and the verification hash value to determine if the transaction is valid.

### Claim 11 (depends on 10)

A method according to claim 10, wherein the validation platform provisions the user device with a plurality of shared secrets and a plurality of shared secret identifiers, each shared secret identifier corresponding to a respective shared secret.

### Claim 12 (depends on 10)

A method according to claim 10, wherein following receipt of authentication data including a shared secret identifier, the validation platform invalidates the shared secret corresponding to the shared secret identifier for future transactions.

### Claim 13 (depends on 10)

A method according to claim 10, wherein the data used to calculate the verification hash value further comprises information relating to the identification of the user.

### Claim 14

A computer readable medium comprising code, executable by a processor, to:
receive a shared secret and a shared secret identifier;
receive transaction data from a transaction terminal;
calculate a one-way hash of data comprising the shared secret to generate a hash value;
generate authentication data comprising the hash value and the shared secret identifier; and
transmit the authentication data to the transaction terminal.

### Claim 15 (depends on 14)

A computer readable medium according to claim 14, wherein the code is executable to receive a plurality of shared secrets and a plurality of shared secret identifiers, each shared secret identifier corresponding to a respective shared secret, and
wherein the authentication data comprises the shared secret identifier corresponding to the shared secret used in the calculation of the hash value.

### Claim 16 (depends on 14)

A computer readable medium according to claim 14, wherein the code is further executable to verify the identity of the user of the user device, and
wherein the data used to calculate the hash value further comprises information relating to the identity verification.

### Claim 17 (depends on 16)

A computer readable medium according to claim 16, wherein the code is executable to verify the identity of the user using a Fast Identity Online technique.

### Claim 18

Apparatus comprising:
a first interface for receiving a shared secret and a shared secret identifier from a remote device via a first communication system; and
a second interface for receiving transaction data from a transaction terminal via a second communication system,
wherein the apparatus is configured to calculate a one-way hash of data comprising the shared secret to generate a hash value, generate authentication data comprising the hash value and the shared secret identifier, and transmit the authentication data to the transaction terminal.

### Claim 19 (depends on 18)

Apparatus according to claim 18, wherein the first interface is configured to receive data encoded in accordance with the Internet Protocol.

### Claim 20 (depends on 19)

Apparatus according to claim 19, wherein the second interface comprises short range wireless communication hardware for transmitting the authentication data to the transaction terminal.