Patent ID: 9514458
Filing Date: 2016-12-06
CPC Classification: G06Q,G07F

Claim Text:
1. A system for authenticating a customer transaction on an electronic network, the system comprising: an access device for customer access to the electronic network; an integrated circuit card that is issued to the customer and contains customer-identifying data, a cryptogram application, and a bitmap that is proprietary to an issuer of the integrated circuit card; a reader that is provided to the customer and linkable to the access device; and an authentication request server (ARS) that in conjunction with an Access Control Server (ACS) is linked to the electronic network and can communicate with a party requesting authentication of the transaction, both the ARS and the ACS being remote from the access device, the ARS separately having the customer identification data and the bitmap, wherein the ACS is configured to receive transaction information from the requesting party over the electronic network and to communicate transaction data directly to the the customer's access device over the electronic network, wherein the customer's access device is configured to communicate the transaction data to the reader, wherein the reader is configured to receive the transaction data and to communicate a value based on the transaction data to the integrated circuit card, wherein the integrated circuit card is configured to generate, using the cryptogram application, an authentication cryptogram based on at least a portion of the value based on the transaction data and at least a portion of the customer-identifying data on the card, wherein the reader is further configured to read the authentication cryptogram and the bitmap from the card, to generate an authentication token comprising bits of the authentication cryptogram corresponding to the bitmap, and to communicate the authentication token to the customer's access device, wherein the customer's access device is configured to communicated the authentication token directly to the ACS, wherein the ACS is further configured to receive the authentication token directly from the customer's access device and communicate, to the ARS, the authentication token and the transaction data, wherein the ARS is further configured to generate a rebuilt cryptogram based on at least a same portion of a value based on the transaction data and at least a same portion of the customer-identifying data as used to generate the authentication cryptogram and to evaluate whether the authentication token matches bits of the rebuilt cryptogram corresponding to the bitmap validate the authentication token for authentication of the customer transaction.