Back to results
US 2022/0036347 A1Published application
Payment transaction process employing dynamic account expiry and dynamic token verification code
AssigneeMastercard International Incorporated
InventorsYen Tran, Sandeep Malhotra, Mostafa Hussein Sabet, Shanthan Subramaniam
Life of this patent
Estimating the term…
Abstract
A method includes receiving a request for payment credentials. The request indicates an account from which payment for a transaction is to be made. A payment token is looked-up that corresponds to the indicated account. Dynamic expiry data and a dynamic token verification code are generated. As a response to the request, the looked-up payment token, the generated dynamic expiry data and the generated dynamic token verification code are transmitted.
Claims18
A method comprising:
- receiving, by a computer, a request for payment credentials, the request indicating an account from which payment for a transaction is to be made;
- looking up, by the computer, a payment token that corresponds to said account;
- generating, by the computer, dynamic expiry data and a dynamic token verification code;
- and
- responding, by the computer, to the request by transmitting the looked-up payment token, the generated dynamic expiry data and the generated dynamic token verification code;
- wherein the generating step includes:
- (a) concatenating the looked up payment token with at least one item of numeric transaction data to form a first numeric string;
- (b) digitally signing the first numeric string with a cryptographic key to form a second numeric string;
- (c) selecting three leading digits of the second numeric string to be the dynamic token verification code;
- and
- (d) forming the dynamic expiry data by transforming four digits of the second numeric string, said four digits immediately following said three leading digits of the second numeric string.
8 more elements
3-4. (canceled)
A method comprising:
- operating a customer device to initiate an online shopping transaction with an e-commerce server computer over a browser interface;
- determining that the e-commerce server computer supports a dynamic-data payment method;
- interacting with a payment application of the customer device to confirm that the payment application supports said dynamic-data payment method;
- sending a request for payment credentials for the transaction;
- receiving the requested payment credentials, the received payment credentials including a payment token, dynamic expiry data and a dynamic token verification code;
- and
- transmitting the received payment credentials to the e-commerce server computer for use with the dynamic-data payment method;
- wherein the payment token, the dynamic expiry data and the dynamic token verification code collectively uniquely correspond to said transaction.
5 more elements
An apparatus comprising:
- a processor;
- and
- a memory in communication with the processor, the memory storing program instructions, the processor operative with the program instructions to perform functions as follows:
- receiving a request for payment credentials, the request indicating an account from which payment for a transaction is to be made;
- looking up a payment token that corresponds to said account;
- generating dynamic expiry data and a dynamic token verification code;
- and
- responding to the request by transmitting the looked-up payment token, the generated dynamic expiry data and the generated dynamic token verification code;
- wherein the generating step includes:
- (a) concatenating the looked up payment token with at least one item of numeric transaction data to form a first numeric string;
- (b) digitally signing the first numeric string with a cryptographic key to form a second numeric string;
- (c) selecting three leading digits of the second numeric string to be the dynamic token verification code;
- and
- (d) forming the dynamic expiry data by transforming four digits of the second numeric string, said four digits immediately following said three leading digits of the second numeric string.
11 more elements
15-16. (canceled)
Dependencies are inferred from the claim text.