# US 2019/0172048 A1 · Security system incorporating mobile device

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2019/0172048 A1
- Document ID: US20190172048A1
- Status: Published application
- Kind: A1
- Application number: 16/269,222
- Filed: 2019-02-06
- Published: 2019-06-06
- Earliest claimed: 2012-03-06
- Assignees: Visa International Service Association
- Inventors: Ayman Hammad
- Web page: https://patentgrep.com/patent/US20190172048A1

## CPC

- G06Q 20/4018: {using the card verification value [CVV] associated with the card}
- G06Q 20/3227: {using secure elements embedded in M-devices}
- G06Q 20/401: {Transaction verification}
- G06Q 20/4093: {Monitoring of device authentication}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

In some embodiments, a first server computer may be provided. The first server computer may comprise a processor and a computer readable medium coupled to the processor. The computer readable medium may include code executable by the processor for implementing a method. The method may include the step of electronically receiving an authorization request message that includes a first device verification value from a merchant for a first transaction, where the first device verification value may have been received by the merchant from a mobile device based on an interaction between the mobile device and an access device. In some embodiments, the mobile device may have received the first verification value based on a first request. The method may further include the step of determining by a data processor if the first device verification value corresponds to a stored device verification value.

## Claims

### Claim at position 1

1-9. (canceled)

### Claim 10

A mobile device comprising:
a processor; and
a computer readable medium coupled to the processor, wherein the computer readable medium comprises code that when executed by the processor, causes the processor to:
generate a first request for a first device verification value, the first request including account information associated with a portable consumer device and information associated with the mobile device;
send the first request to a server computer;
receive the first device verification value from the server computer, wherein the first device verification value is a temporary first device verification value that is valid for a first predetermined number of transactions or for a first predetermined amount of time, wherein the temporary first device verification value includes information related to validation of the mobile device by the server computer;
interact with an access device of a first merchant in connection with a first transaction; and
transmit the first device verification value to the first merchant associated with the first transaction based on interaction between the mobile device and the access device of the first merchant.

### Claim 11 (depends on 10)

The mobile device of claim 10, wherein the code, when executed by the processor, further causes the processor to:
prior to generating the first request:
receive identification information stored on the portable consumer device based on an interaction between the portable consumer device and the mobile device.

### Claim 12

(canceled)

### Claim 13 (depends on 10)

The mobile device of claim 10, wherein the first device verification value is received if the first request is validated based at least in part on the account information.

### Claim 14 (depends on 10)

The mobile device of claim 10, wherein the first device verification value is transmitted to a payment processing network in an authorization request message associated with the first transaction.

### Claim 15

A method comprising:
generating, by a mobile device, a first request for a first device verification value, the first request including account information associated with a portable consumer device and information associated with the mobile device;
sending, by the mobile device, the first request to a server computer;
receiving, at the mobile device, the first device verification value from the server computer, wherein the first device verification value is a temporary first device verification value that is valid for a first predetermined number of transactions or for a first predetermined amount of time, wherein the temporary first device verification value includes information related to validation of the mobile device by the server computer; interacting, by the mobile device, with an access device of a first merchant in connection with a first transaction; and
electronically sending transmitting, by the mobile device the first device verification value to the first merchant associated with the first transaction based on interaction between the mobile device and the access device of the first merchant.

### Claim 16 (depends on 15)

The method of claim 15, further comprising:
prior to generating the first request:
receiving, at the mobile device, identification information stored on the portable consumer device based on an interaction between the portable consumer device and the mobile device.

### Claim 17

(canceled)

### Claim 18 (depends on 15)

The method of claim 15, wherein the first device verification value is received by the mobile device if the first request is validated based at least in part on the account information.

### Claim 19 (depends on 15)

The method of claim 15, further comprising:
prior to sending, by the mobile device, the first device verification value to the first merchant:
initiating the first transaction with the first merchant; and
interacting with the access device for the first merchant associated with the first transaction using the mobile device.

### Claim 20 (depends on 15)

The method of claim 15, further comprising:
wherein the interaction between the mobile device and the access device comprises short-range wireless communication; and
wherein the first device verification value is transmitted to a payment processing network in an authorization request message associated with the first transaction.

### Claim at position 13

21-25. (canceled)

### Claim 26 (depends on 15)

The method of claim 15, further comprising:
after the first device verification value becomes invalid:
generating, by the mobile device, a second request for a second device verification value;
sending, by the mobile device, the second request to the server computer; and
receiving, by the mobile device, the second device verification value from the server computer, wherein the second device verification value is a temporary second device verification value that is valid for a second predetermined number of transactions or for a second predetermined amount of time, wherein the temporary second device verification value includes information related to validation of the mobile device by the server computer.

### Claim 27 (depends on 26)

The method of claim 26, further comprising:
interacting, by the mobile device, with an access device of a second merchant in connection with a second transaction; and
sending, by the mobile device, the second device verification value to the second merchant associated with the second transaction based on interaction between the mobile device and an access device of the second merchant.

### Claim 28 (depends on 15)

The method of claim 15, wherein the first device verification value includes a dynamic card verification value 2 (dCVV2), a dynamic primary account number (dPAN), or a shared secret value.

### Claim 29 (depends on 15)

The method of claim 15, wherein the first request for the first device verification value includes information associated with an accountholder.

### Claim 30 (depends on 15)

The method of claim 15, further comprising:
receiving, at the mobile device, the first device verification value from the server computer via a secure communications session.

### Claim 31 (depends on 15)

The method of claim 15, further comprising:
registering, by the mobile device, for a secure communications session with the server computer, wherein registering establishes a session key, wherein the first device verification value is encrypted with the session key.

### Claim 32 (depends on 15)

The method of claim 15, wherein the information associated with the mobile device includes a SIM card information, an application specific information, an IP address information, a hardware specific information, or a serial number.

### Claim 33 (depends on 10)

The mobile device of claim 10, wherein the code, when executed by the processor, further causes the processor to:
after the first device verification value becomes invalid:
generate a second request for a second device verification value;
send the second request to the server computer; and
receive the second device verification value from the server computer, wherein the second device verification value is a temporary second device verification value that is valid for a second predetermined number of transactions or for a second predetermined amount of time, wherein the temporary second device verification value includes information related to validation of the mobile device by the server computer.

### Claim 34 (depends on 33)

The mobile device of claim 33, wherein the code, when executed by the processor, further causes the processor to:
interact with an access device of a second merchant in connection with a second transaction; and
send the second device verification value to the second merchant associated with the second transaction based on interaction between the mobile device and an access device of the second merchant.

### Claim 35 (depends on 10)

The mobile device of claim 10, wherein the first device verification value includes a dynamic card verification value 2 (dCVV2), a dynamic primary account number (dPAN), or a shared secret value.

### Claim 36 (depends on 10)

The mobile device of claim 10, wherein the first request for the first device verification value includes information associated with an accountholder.

### Claim 37 (depends on 10)

The mobile device of claim 10, wherein the code, when executed by the processor, further causes the processor to:
receive the first device verification value from the server computer via a secure communications session.

### Claim 38 (depends on 10)

The mobile device of claim 10, wherein the code, when executed by the processor, further causes the processor to:
register for a secure communications session with the server computer, wherein registering establishes a session key, wherein the first device verification value is encrypted with the session key.

### Claim 39 (depends on 10)

The mobile device of claim 10, wherein the information associated with the mobile device includes a SIM card information, an application specific information, an IP address information, a hardware specific information, or a serial number.