Method and system for performing a transaction using a dynamic authorization code
AssigneeMastercard International Incorporated
InventorJohn Wankmueller
Life of this patent
Estimating the term…
Abstract
A method and apparatus for conducting a transaction involving transmission of a dynamic authentication code in place of a static PIN block using currently existing messaging standards or PIN acceptance devices. Minimal changes to existing processes an equipment are made while greatly improving security and fraud minimization.
Claims17
A method for authorizing a transaction between an account holder and a merchant over a transaction network employing an ISO 8583 standardized message format having a data portion reserved for a static PIN, comprising:
- providing an account holder with access to a code generating device;
- generating by said code generating device a dynamic code, said dynamic code being generated based on a value that changes before a new transaction and said dynamic code is insertable in said data portion reserved for said static PIN;
- receiving, at a PIN processing system comprising a static PIN authentication system and a dynamic code authentication system, a transaction message in said message format, said message including one of the static PIN or the dynamic code;
- determining, based on the transaction message, whether the received transaction message includes the static PIN or the dynamic code;
- in response to determining that the transaction message includes the dynamic code, generating by said dynamic code authentication system an expected dynamic code;
- comparing, by said dynamic code authentication system, the received dynamic code to the generated expected dynamic code;
- and
- authorizing the transaction in response to the comparing step.
A system for authorizing a transaction between an account-holder and a merchant, comprising:
- a transaction network employing an ISO 8583 standardized message format having a data portion reserved for a static PIN;
- a code generating device for generating a dynamic code based on a value that changes before a new transaction and the dynamic code is insertable into the data portion reserved for the static PIN;
- a receiver for receiving a transaction message in said message format, said transaction message including one of the static PIN or the dynamic code;
- and
- a PIN processing system comprising a static PIN authentication system and a dynamic code authentication system, the PIN processing system comprising a processor for (a) determining, based on the transaction message, whether the received transaction message includes the static PIN or the dynamic code, (b) in response to determining that the transaction message include the dynamic code, generating an expected dynamic code, (c) comparing the received dynamic code to the generated expected dynamic code, and(d) authorizing the transaction in response to the comparing step.
A system for authorizing a transaction between an account holder and a merchant over a transaction network employing an ISO 8583 standardized message format having a data portion reserved for a static PIN, comprising:
- a first non-transitory computer readable storage medium with a first executable program stored there, wherein the first program instructs a first processor to generate a dynamic code based on a value that changes before a new transaction and said dynamic code is insertable in said data portion reserved for said static PIN;
- and
- a second non-transitory computer-readable storage medium with a second executable program stored thereon, wherein the second program instructs a second processor to perform the following steps:
- receiving a transaction message in said message format, said transacion message including one of the static PIN or the dynamic code;
- determining, based on the transaction message, whether the received transaction message includes the static PIN or the dynamic code;
- in response to determining that the transaction message includes the dynamic code, generating an expected dynamic code;
- comparing the received dynamic code to the generated expected dynamic code;
- and
- authorizing the transaction in response to the comparing step.
Dependencies are inferred from the claim text.