Back to results
US 2019/0164166 A1Published application
Protecting online payments through one-time payment cards
AssigneeFair Isaac Corporation
InventorsBrian Kinch, Derek Dempsey
Life of this patent
Estimating the term…
Abstract
A system and method for a secure remote payments process and for generation of one-time only remote payment cards is presented. Use of the one-time payment (OTP) cards can use multi-factor authentication where one factor is a biometric technique. A process can include generating an OTP card number based on a first encryption algorithm, an expiry date, and a security code based on a second encryption algorithm. A purchase amount, and the OTP card information are decrypted by an issuer to approve payment for a remote payment, after which the OTP card is no longer valid.
Claims16
A computer-implemented method comprising:
- receiving, by a computer processor via a communication network, a request for a one-time payment card based on a payment request by a user for making a payment to a merchant over the communication network, the payment having an amount in a proposed currency, the request for the one-time payment card being initiated from an institution associated with a bank identification number (BIN) that receives the payment request from the user and approves the amount of the payment, the one-time payment card being represented as a virtual card with one-time payment details;
- authenticating, by the computer processor, an identity of the user using one or more credentials of the user;
- generating, by the computer processor, a primary account number (PAN) associated with the user, the PAN being generated at least in part based on the authenticated identity of the user and the amount approved by the institution;
- generating, by the computer processor, the one-time payment details of the virtual card associated with the one-time payment card, the one-time payment details comprising a card number including the BIN and the PAN, the last digit of the PAN being a check digit for a payment card validation algorithm used by the merchant, the one-time payment details further comprising an expiry date, the amount of the payment, and a card security code (CV2);
- and
- sending, by the computer processor via the communication network, the card number, the expiry date, the amount of the payment, and the CV2 to the institution for authorization.
3 more elements
A system comprising:
- a payment authorization system to receive, via a communication network, a payment request by a user for making a payment to a merchant over the communication network, the payment having an amount in a proposed currency, the payment authorization system generating a request for a one-time payment card based on the payment request for the one-time payment card being initiated from an institution associated with a bank identification number (BIN) that receives the payment request from the user and approves the amount of the payment;
- and
- a one-time payment card generating computer or application connected with the payment authorization system to generate the one-time payment card based on the request, the one-time payment card being represented as a virtual card with one-time payment details, the one-time payment card generating computer or application authenticating an identity of the user using one or more credentials of the user, generating a primary account number (PAN) associated with the user, the PAN being generated at least in part based on the authenticated identity of the user and the amount approved by the institution, and generating the one-time payment details of the virtual card associated with the one-time payment card, the one-time payment details comprising a card number including the BIN and the PAN, the last digit of the PAN being a check digit for a payment card validation algorithm used by the merchant, the one-time payment details further comprising an expiry date, the amount of the payment, and a card security code (CV2), the one-time payment details being transmitted electronically to the payment authorization system for authorization of the payment to the merchant using the one-time payment card.
A computer program product comprising a machine-readable medium storing instructions that, when executed by at least one programmable processor, cause at least one programmable processor to perform operations comprising:
- receiving, via a communication network, a request for a one-time payment card based on a payment request by a user for making a payment to a merchant over the communication network, the payment having an amount in a proposed currency, the request for the one-time payment card being initiated from an institution associated with a bank identification number (BIN) that receives the payment request from the user and approves the amount of the payment, the one-time payment card being represented as a virtual card with one-time payment details;
- authenticating an identity of the user using one or more credentials of the user;
- generating a primary account number (PAN) associated with the user, the PAN being generated at least in part based on the authenticated identity of the user and the amount approved by the institution;
- generating the one-time payment details of the virtual card associated with the one-time payment card, the one-time payment details comprising a card number including the BIN and the PAN, the last digit of the PAN being a check digit for a payment card validation algorithm used by the merchant, the one-time payment details further comprising an expiry date, the amount of the payment, and a card security code (CV2);
- and
- sending, via the communication network, the card number, the expiry date, the amount of the payment, and the CV2 to the institution for authorization.
3 more elements
Dependencies are inferred from the claim text.