# US 8,770,476 B2 · Device, system and method for reducing an interaction time for a contactless transaction

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 8,770,476 B2
- Document ID: US8770476B2
- Status: Granted
- Kind: B2
- Application number: 12/831,114
- Filed: 2010-07-06
- Published: 2010-10-28
- Granted: 2014-07-08
- Earliest claimed: 2005-09-28
- Assignees: Visa International Service Association
- Applicants: Trudy Hill; Jagdeep Singh Sahota; Christian Aabye; Kim R. Wagner; Anita Ochieano; Carole Oppenlander; William Chi Yuen Chan; Craig Allen Glendenning
- Inventors: Trudy Hill; Jagdeep Singh Sahota; Christian Aabye; Kim R. Wagner; Anita Ochieano; Carole Oppenlander; William Chi Yuen Chan; Craig Allen Glendenning
- Web page: https://patentgrep.com/patent/US8770476B2

## CPC

- G06Q 20/352: {Contactless payments by cards}
- G06K 7/0008: {General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer}
- G06Q 20/04: Payment circuits
- G06Q 20/3674: {involving authentication}
- G06Q 20/382: {insuring higher security of transaction}
- G06Q 20/38215: {Use of certificates or encrypted proofs of transaction rights}
- G06Q 20/3825: {Use of electronic signatures}
- G06Q 20/40: Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q 20/401: {Transaction verification}
- G06Q 20/4016: {involving fraud or risk level assessment in transaction processing}
- G06Q 20/409: {Device specific authentication in transaction processing}
- G06Q 30/06: Buying, selling or leasing transactions
- G07F 7/0826: {Embedded security module}
- G07F 7/088: {the card reader being part of the point of sale [POS] terminal or electronic cash register [ECR] itself}
- G07F 7/1008: {Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system}
- G07F 7/1016: {Devices or methods for securing the PIN and other transaction-data, e.g. by encryption (arrangements for secret communication, see H04L9/00)}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06K: GRAPHICAL DATA READING (image or video recognition or understanding G06V); PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
- G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00})

## Abstract

A method. The method comprises, at a reader, performing at least one transaction-based risk management process prior to energizing a contactless interface, initiating communication with a card utilized for the contactless transaction, receiving information associated with the card, and terminating communication with the card to authorizing the contactless transaction.

## Claims

### Claim 1

A reader comprising:
a contactless interface;
a transaction module coupled to the contactless interface, wherein the transaction module is configured to minimize an interaction time under 500 milliseconds for a contactless transaction between the reader and a card by:
wirelessly sending from the reader to a card in a command message a terminal unpredictable number, transaction amount, and transaction currency;
receiving from the card in response to the command message a wireless message with a dynamic signature generated based on an application transaction counter (ATC), the terminal unpredictable number, the transaction amount, the transaction currency, and a card unpredictable number, the dynamic signature sent with an application file locator (AFL); and then
wirelessly transmitting from the reader to the card a read record command message to request one or more records indicated in the AFL from the card; and
receiving from the card the requested one or more records requested by the read record command; and
a security module, coupled to the transaction module, configured for:
recalculating the dynamic signature; and
authorizing the contactless transaction if the dynamic signature received from card is validated.

### Claim 2 (depends on 1)

The reader of claim 1, wherein the transaction module is configured to terminate communication with the card prior to performing an online authorization.

### Claim 3 (depends on 2)

The reader of claim 2, wherein transaction module is configured for:
receiving a cryptogram that is based on the application transaction counter, the terminal unpredictable number, and transaction amount; and
requesting the transaction be processed online with the cryptogram if the dynamic signature is not validated.

### Claim 4 (depends on 1)

The reader of claim 1, wherein the transaction module is configured to terminate communication with the card prior to performing an offline authorization.

### Claim 5 (depends on 4)

The reader of claim 4, wherein the contactless transaction is authorized if the dynamic signature received from the card is equal to the recalculated dynamic signature.

### Claim 6 (depends on 1)

The reader of claim 1, wherein the card is configured to operate in chip-mode for wireless communication or magnetic stripe mode.

### Claim 7 (depends on 1)

The reader of claim 1, further comprising:
a network coupled to the reader.

### Claim 8 (depends on 7)

The reader of claim 7, wherein the network is further coupled to an issuer.

### Claim 9 (depends on 1)

The reader of claim 1, wherein the card increments the ATC before generating the dynamic signature.

### Claim 10 (depends on 1)

The reader of claim 1 wherein the transaction module is configured to:
wirelessly transmit from the reader to the card a request for a list of applications that are supported by the card for conducting a transaction.

### Claim 11

A system comprising:
a reader comprising:
a contactless interface;
a transaction module coupled to the contactless interface and configured to:
wirelessly send from the reader to a card in a command message a terminal unpredictable number, transaction amount, and transaction currency;
receive from the card in response to the command message a wireless message with a dynamic signature based on an application transaction counter (ATC), the terminal unpredictable number, the transaction amount, the transaction currency, and a card unpredictable number, the dynamic signature sent with an application file locator (AFL); and then
wirelessly transmit from the reader to the card a read record command message to request one or more records indicated in the AFL from the card; and
receive from the card the requested one or more records requested by the read record command; and
a security module, coupled to the transaction module, configured for:
recalculating the dynamic signature; and
authorizing the contactless transaction if the dynamic signature received from the card is validated; and
a card configured to:
send from the card to the reader the wireless message with the dynamic signature; and then
send from the card to the reader the requested one or more records requested by the read record command,
wherein the transaction module is configured to minimize an interaction time under 500 milliseconds for a contactless transaction between the reader and the card.

### Claim 12 (depends on 11)

The system of claim 11, wherein the transaction module is configured to:
receive from the card a cryptogram that is based on the application transaction counter, the terminal unpredictable number, and transaction amount; and
request the transaction be processed online with the cryptogram if the dynamic signature is not validated.

### Claim 13 (depends on 11)

The system of claim 11, wherein the card is configured to operate in chip-mode for wireless communication or magnetic stripe mode.

### Claim 14 (depends on 11)

The system of claim 11, further comprising:
a network coupled to the reader.

### Claim 15 (depends on 14)

The system of claim 14, wherein the network is further coupled to an issuer.

### Claim 16

A method for minimizing an interaction time under 500 milliseconds for a contactless transaction between a reader and a card, the method comprising:
wirelessly sending from a reader to a card in a command message a terminal unpredictable number, transaction amount, and transaction currency;
receiving at the reader from the card in response to the command message a wireless message with a dynamic signature generated based on an application transaction counter (ATC), the terminal unpredictable number, the transaction amount, the transaction currency, and a card unpredictable number, the dynamic signature sent with an application file locator (AFL); and then
wirelessly transmitting from the reader to the card a read record command message to request one or more records indicated in the AFL from the card; and
receiving at the reader from the card the requested one or more records requested by the read record command; and
recalculating the dynamic signature based on the application transaction counter, the terminal unpredictable number, transaction amount, and transaction currency; and
authorizing the contactless transaction if the dynamic signature received from card by the reader is validated.

### Claim 17 (depends on 16)

The method of claim 16, further comprising:
receiving a request for a second contactless transaction;
re-establishing communication between the reader and the card; and
completing the second contactless transaction with less than one-half second of interaction time between the reader and the card.

### Claim 18 (depends on 17)

The method of claim 17, wherein completing the second contactless transaction changes the application transaction counter.

### Claim 19 (depends on 17)

The method of claim 17, wherein the second contactless transaction is for a non-financial transaction.

### Claim 20 (depends on 16)

The method of claim 16, further comprising:
wirelessly transmitting from the reader to the card a request for a list of applications that are supported by the card for conducting a transaction.