US 2026/0289555 A1 · SECURE PROCESSING OF DATA

Abstract

Systems, methods, and machine-interpretable data representing executable instruction sets and/or other products for the processing of data for the secure creation, administration, manipulation, processing, and storage of electronic data useful in the processing of payment transactions and other secure data processes. Some embodiments provides secure means for the authorization of sensitive and other data processes subject to controlled access. Such processes include the creation, administration, authorization, virtualization, storage, and other manipulation or processing of electronic data representing characteristics of, instructions for, and information associated with consumer, business, and other payment accounts, and other forms of secure payment elements, such as payment tokens; and data useful in processing transactions using such accounts and elements. Information associated with particular payment means, such as accounts or payment tokens, can be stored in a data set, usually secure, sometimes referred to as a virtual or electronic wallet, or a secure payment token.

A system comprising:

a mobile communication device for securing communication of sensitive payloads using cryptogram data structures for exchanging secured transaction data for an enhanced security transaction using a digital wallet application, the enhanced security requiring data structure cryptogram validation to emulate a physical card present enhanced security requirement, during a duration of time in which electronic communications are available between the mobile communication device and a point of sale terminal but electronic communications are not available between the mobile communication device and a backend issuer terminal, the mobile communication device comprising:
at least one user input interface;
at least one graphical user interface (GUI);
at least one secure element (SE) comprising a plurality of payment protocols and a plurality of payment applications of the digital wallet application, each payment application of the plurality of payment applications being associated with a respective payment account of a plurality of payment accounts provisioned to the digital wallet application;
at least one network communication system;
at least one data processor;
and
at least one memory, the at least one memory comprising stored data representing at least:
at least one secure identification authorization token, the at least one secure identification authorization token comprising a transaction request data set including at least one of:
a user identifier associated with an authorized user of the digital wallet application;
one or more pseudo-unpredictable identifiers generated by an issuer backend computing system in advance of a transaction, wherein the one or more pseudo-unpredictable identifiers are configured as multi-use tokens which include fields indicating a total authorized amount, the one or more pseudo-unpredictable identifiers being usable for a plurality of transactions until the total authorized amount is consumed;
an account identifier associated with at least one authorized payment account of the plurality of payment accounts provisioned to the digital wallet application;
and
a device identifier associated with the mobile communication device;
and
one or more sets of machine-interpretable instructions of the digital wallet application that, when executed by the at least one data processor, perform the steps of:
receiving, from a point of sale (POS) system of a merchant, transaction data for the transaction with the merchant, the transaction data including a purchase amount for the transaction and a pseudo-unpredictable number for validating a source of the transaction;
receiving, from the at least one user input interface, signals representing a user input selecting a payment account from the plurality of payment accounts provisioned to the digital wallet application and authorizing the transaction during the duration of time in which the electronic communications are available between the mobile communication device and the POS system, but the electronic communications are not available between the mobile communication device and the backend issuer terminal;
in response to receiving the user input:
configuring the at least one secure identification authorization token to include the transaction data from the merchant, a pseudo-random identifier of the one or more pseudo-unpredictable identifiers, and the pseudo-unpredictable number for validating the source of the transaction;
and
receiving, via the at least one network communication system, a secure payment token from a transaction processing server, the secure payment token comprising payment transaction data representing:
a user-adjustable authorized payment amount value;
and
a financial service provider identifier associated with the user-adjustable authorized payment amount value;
wherein the payment transaction data is randomized through the pseudo-unpredictable number;
adjusting, at the mobile communication device, the user-adjustable authorized payment amount value in the secure payment token based on the purchase amount;
converting, using a payment application from the plurality of payment applications of the digital wallet application, a secure cryptogram into a 2D graphical representation;
displaying, on the GUI, the 2D graphical representation of the secure cryptogram;
and
receiving a confirmation message that the transaction is authorized after verification of the secure cryptogram;
the secure element further comprising:
a SE processor;
and
a SE memory storing SE instructions that, when executed by the SE processor, perform operations comprising:
selecting, for the selected payment account, a payment protocol from the plurality of payment protocols;
generating, using the selected payment protocol, the secure cryptogram based on the secure identification authorization token and the secure payment token;
and
communicating, from the secure element to the at least one data processor of the mobile communication device, the secure cryptogram;
and
the system further comprising the point of sale (POS) system of the merchant comprising:
a POS system scanner;
a POS system graphical user interface (GUI);
a POS system processor;
and
a POS system memory storing POS system instructions that, when executed by the POS system processor, perform operations comprising:
displaying, on the POS system GUI, a request for payment;
scanning, using the POS system scanner, the 2D graphical representation of the secure cryptogram displayed on the GUI of the mobile communication device;
and
buffering and forwarding, using the at least one network communication system through a secure pipeline established by the POS system to the transaction processing server, the 2D graphical representation of the secure cryptogram for authorization.

47 more elements

Secure processing of data

Life of this patent

Secure processing of data

Life of this patent

Abstract

Claims20