Abstract:
Techniques are disclosed for systems and methods to conduct transactions using a Multi-mode Card. A Multi-mode Card may include various components of a Smart Card and be configured to interface directly with a personal electronic device (e.g., a smart phone, a tablet computer, a personal computer, and/or other personal electronic devices) to confirm presence of the Multi-mode Card in an unattended digital transaction, such as for e-commerce and Internet purchases. A transaction system may include a logic device and an interface embedded in or on the Card, a client device such as a personal electronic device, and a server configured to provide a sales interface to a user through the client device. The logic device in the Card may be configured to authorize, encrypt, and/or otherwise facilitate a transaction involving a sale and/or other type of communication between the client device and the server.

Description:
CROSS-REFERENCE TO RELATED APPLICATIONS 
       [0001]    This application is a continuation-in-part of International Patent Application No. PCT/US2015/063552 filed Dec. 2, 2015 and entitled “MULTIMODE SMART CARD SYSTEM WITH EMBEDDED USB CONNECTIVITY”, which claims priority to and the benefit of U.S. Provisional Patent Application No. 62/086,275 filed Dec. 2, 2014 and entitled “MULTIMODE SMART CARD SYSTEM WITH EMBEDDED USB (UNIVERSAL SERIAL PORT) CONNECTIVITY”, which are all hereby incorporated by reference in their entirety. 
         [0002]    This application is also a continuation-in-part of U.S. patent application Ser. No. 13/689,683 filed Nov. 29, 2012 and entitled “LAYERED SECURITY FOR AGE VERIFICATION AND TRANSACTION AUTHORIZATION”, which claims priority to and the benefit of U.S. Provisional Patent Application No. 61/564,588 filed Nov. 29, 2011 and entitled “LAYERED SECURITY SYSTEM FOR AGE VERIFICATION AND AUTHORIZING TRANSACTIONS USING SPECIALLY FORMATTED SMART CARDS”, which are all hereby incorporated by reference in their entirety. 
     
    
     TECHNICAL FIELD 
       [0003]    One or more embodiments of the invention relate generally to smart card systems and more particularly, for example, to systems and methods for facilitating transactions using smart cards. 
       BACKGROUND 
       [0004]    Smart card technology is increasingly used for retail, e-commerce and enterprise data security applications. Smart cards are improving upon the traditional magnetic stripe currently in use on many plastic cards. The smart card can act as a miniature PC with its own processor/memory architecture, using an operating system on which applications are executed, or it can be a secure storage device that limits access to its contents by its on board logic. 
       SUMMARY 
       [0005]    Techniques are disclosed for systems and methods to conduct transactions using a Multi-mode Card. In one embodiment, a Multi-mode Card may include various components of a Smart Card that may be configured to interface directly with a personal electronic device (e.g., a smart phone, a tablet computer, a personal computer, and/or other personal electronic devices) to confirm presence of the Multi-mode Card in an unattended digital transaction, such as for e-commerce and Internet purchases. A transaction system may include a logic device and an interface embedded in or on the Card, a client device such as a personal electronic device, and a server configured to provide a sales interface to a user through the client device. The logic device in the Card may be configured to authorize, encrypt, and/or otherwise facilitate a transaction involving a sale and/or other type of communication between the client device and the server. The interface may be adapted physically couple to and/or otherwise facilitate direct communication between the Card and the client device, for example, and/or between the Card and the server. 
         [0006]    In one embodiment, a multi-mode card comprises one or more of a substantially plastic support layer, a circuitry layer, a microprocessor, a contact and/or contactless interface, and/or a visible design layer. The contact and/or contactless interface may be implemented according to the radio frequency identification (RFID), near field communication (NFC), Bluetooth low energy (BTLE), universal serial bus (USB), FireWire, and/or other wired and/or wireless protocols and/or interfaces. The contact and/or contactless interface may be configured to facilitate data communication between the microprocessor and a personal electronic device. The microprocessor and the interface may be embedded within and/or formed from the materials used to form the support layer, the circuitry layer, the design layer, and/or the multi-mode card. 
         [0007]    In another embodiment, a method includes communicating card data and or value by means of a specialized smart card and embedded microprocessor chip that has multiple methods of interfacing. Such methods of interfacing may include Contact, Contactless, USB, and/or other interface variations. 
         [0008]    In another embodiment, a transaction system includes a multi-mode card that meets one or more normal ISO dimensional standards for Contact and/or Contactless industry-standard card bodies, including ID-1 CR80, ISO 7810, ISO7816-1, 2 and 3; and a built in physical USB interface conforming to the electrical standards of USB 1, 2, 3 and future iterations, wherein all card body standards are met with the exception of one card corner which is modified to accommodate circuitry that connects externally to a USB port/connector and/or a dual port converter. The multi-mode card may include a multi-mode card/chip operating system configured to recognize the card/reader interface being used and operate/communicate accordingly. The transaction system may include a compact two sided connector or port converter for inserting a multi-mode card into a USB port for a personal electronic device that communicates USB signals according to the correct version/form factor of USB for the USB port. 
         [0009]    In another embodiment, a method of multi-mode card assembly includes exposing partial circuitry or fingers of the multi-mode card that include electrical data connections for the USB interface. The assembly may be achieved by having an interlayer of the multi-mode card that carries the electrical data connections/circuitry exposed by a methodology that enables a partial cutting or removal of top layers of the multi-mode card. An area that will be exposed after final assembly may have a material selectively applied on its top surface that stops the lamination that occurs in card manufacturing thereby enabling the exposed area to be lifted after cutting. 
         [0010]    In another embodiment, a multi-mode card may be configured to, when inserted into a USB port, behave both as a smart card reader/writer and as a smart card or token. Such multi-mode card may include a microprocessor of the multi-mode card and a multi-mode card operating system that work in conjunction to pass data according to the correct formats and responses expected by the USB port. The multi-mode card may be implemented according to a multi-mode card system architecture including a smart card chip connected to circuitry via connections to a bottom of the smart card module or to a chip carrier of the microprocessor if there is no other contact to the chip. Such architecture may include custom tooling to use the same or similar types of connections used in dual interface smart cards. 
         [0011]    The scope of the invention is defined by the claims, which are incorporated into this section by reference. A more complete understanding of embodiments of the invention will be afforded to those skilled in the art, as well as a realization of additional advantages thereof, by a consideration of the following detailed description of one or more embodiments. Reference will be made to the appended sheets of drawings that will first be described briefly. 
     
    
     
       BRIEF DESCRIPTION OF THE FIGURES 
         [0012]      FIG. 1  illustrates an example of a Multi-mode Card in accordance with an embodiment of the disclosure. 
           [0013]      FIG. 2  illustrates an example of the internal layers of a Multi-mode Card in accordance with an embodiment of the disclosure. 
           [0014]      FIG. 3  illustrates an example of a two sided port converter in accordance with an embodiment of the disclosure. 
           [0015]      FIG. 4  illustrates an example of a transaction system utilizing a multi-mode card in accordance with an embodiment of the disclosure. 
       
    
    
       [0016]    Embodiments of the invention and their advantages are best understood by referring to the detailed description that follows. It should be appreciated that like reference numerals are used to identify like elements illustrated in one or more of the figures. 
       DETAILED DESCRIPTION 
       [0017]    This solution addresses the need for confirming that a card is present in an unattended digital transaction, such as for e-commerce and Internet purchases. In addition to the security of the smart card software, USB connectivity has been incorporated into the design of the card&#39;s chip and the card&#39;s physical design. This connectivity, or interface, can be one of three choices, depending on the selection of card reader: Contact, Contactless, or USB, for example. The addition of a USB interface provides a simple, low-cost solution for direct connection to a computing device via a USB port. The card system can include a supplied two sided port converter that communicates the USB signals to the correct version/form factor of USB. 
       Card Present Transactions 
       [0018]    Technology has gradually addressed the need to confirm a cardholder identity when a digital transaction is done. However, there is still no highly secure convenient and reliable way to identify the cardholder and the card together, to prevent unauthorized use by someone else. This problem has been especially problematic in the Financial Card industry, as cardholders can deny an online purchase, creating costly chargebacks for the card issuer. With face-to-face transactions and purchases, smart and/or mag-stripe cards are either swiped through a contact reader or waived on a contactless reader. The present solution is uniquely versatile, working with all three interfaces, in any type of transaction environment. 
         [0019]    This solution is also ideal for non-financial applications, such as Healthcare visits, to authenticate patient visits with providers, and streamline care and insurance claims. The addition of a USB port also enables faster secure data transfers of large data files and used in health informatics environments. 
       Solution Components 
       [0000]    
       
         1. An industry-standard card body: CR80, 78-10, 16, and ID-1. 
         2. A microprocessor chip, powered by magnetic induction and/or a wired connection (e.g., USB). 
         3. An enhanced chip/Card Operating System, capable of recognizing the reader interface being used and operating accordingly. 
         4. A supplied two sided port converter that communicates the USB signals to the correct version/form factor of USB. 
         5. A connector for inserting the card into a computer&#39;s USB port. 
         6. Compatibility with all industry standard contact (ISO7816) and contactless (ISO14443) smart card readers. 
         7. A local memory accessible by the microprocessor chip. 
       
     
         [0027]      FIG. 1  illustrates an example of a Multi-mode Card  100  in accordance with an embodiment of the disclosure. In the embodiment shown in  FIG. 1 . Multi-mode Card  100  includes support layer  110 , design layer  112 , USB interface  120 , and microprocessor contacts  130 . The microprocessor under contacts  130  may interface with a personal electronic device using USB interface  120  and/or contacts  130 , for example, but the contacts typically require a physical card reader and separate drivers, whereas USB interface  120  does not require a physical card reader separate from card  100 , and card  100  may be configured to provide an appropriate driver over USB interface  120 . 
         [0028]      FIG. 2  illustrates an example of the internal layers of a Multi-mode Card  200  in accordance with an embodiment of the disclosure. In the embodiment shown in  FIG. 2 , Multi-mode Card  200  includes support layer  110 , USB interface  120 , USB interface circuitry layer  222  including contacts  234  to microprocessor  232  (shown in outline), and wireless interface circuitry layer  240  including contacts  242  to microprocessor  232 . As shown, card  200  may be configured to communicate with a personal electronic device using either or both of wireless interface circuitry layer  240  (e.g., using an inductive interface as shown) and USB interface  120 . 
         [0029]      FIG. 3  illustrates an example of a two sided port converter  300  in accordance with an embodiment of the disclosure. In the embodiment shown in  FIG. 3 , port converter  300  includes first side card USB interface  320  and second side computer USB interface  350 . In other embodiments, second side interface  350  may be implemented according to different wired interfaces, such as Firewire, Lightning, and/or other wired interfaces to personal electronic devices. 
         [0030]      FIG. 4  illustrates an example of a transaction system  400  utilizing a multi-mode card in accordance with an embodiment of the disclosure. In the embodiment shown in  FIG. 4 , transaction system  400  includes personal electronic device  462  attempting to transact with server  464  over network  460 . Network  460  may be a WAN (e.g., a cellular network, the Internet), one or more LANs (e.g., a WiFi, Bluetooth, and/or other wireless or wired local area networks), or a combination of both. Server  464  may be configured to provide a sales and/or other user interface to a user of personal electronic device  462 . Personal electronic device  462  may be a smart phone, tablet computer, personal computer, and/or other personal electronic device configured to transact with server  464  and able to interface with card  100  (e.g., implemented similarly to card  100  in  FIG. 1  and/or card  200  in  FIG. 2 ). Optionally, system  400  may include port converter  300  configured to, for example, convert a USB interface of card  100  to a USB interface of personal electronic device  462 . System  400  may be configured to implement any of the methods described herein. 
         [0031]    Smart card technology is increasingly used for retail, e-commerce and enterprise data security applications. Smart cards are improving upon the traditional magnetic stripe currently in use on many plastic cards. The smart card can act as a miniature PC with its own processor/memory architecture, using an operating system on which applications are executed, or it can be a secure storage device that limits access to its contents by its on board logic. 
         [0032]    The world is converting to the next-generation EMV credit card that combines smart card technology with existing magnetic stripes. In the United States, smart cards are currently in use in self-contained communities, such as college campuses and enterprise and government offices. The U.S. government uses smart card technology to secure the infrastructure surrounding the deployment of military forces. 
         [0033]    Colleges, universities, and the medical and healthcare industry are driving the wide-scale deployment of multi-application smart cards. These enterprises are integrating user identification capabilities and moving into other value-added applications. The industry group ICMA estimates that 1.65 billion smart cards will be deployed by 2015. 
         [0034]    Smart cards and transaction systems using these cards have been around for many years. In all of these systems the applications that utilize them are built to recognize and authorize cards either through a common on-line network such as the France Telecom network or any of the GSM phone systems used today. In the larger banking systems and stored value systems deployed today such as the EMV platform/Common Electronic Purse Standard or others, smart cards all are authenticated through a common network or the value exchange is through dedicated loaded applications. 
         [0035]    In many systems cards can be authenticated off-line by a dedicated application. The authentication application is often uploaded to terminals or resides on an additional type of smart card called a Secure Access Module or “SAM”. The oldest deployed system is VISA cash and Mondex; both systems employ SAMs. In these systems the first application receives the data from a card and requests authentication from the SAM. Another method is to dedicate the entire application and system to a card type, this type of system is common to many of the laundry and parking meter systems using smart cards today. 
       Enterprise Data Security 
       [0036]    In the past, network security was primarily the concern of enterprises engaged in security sensitive industries. Banks and financial institutions generally used some form of security technology, such as encryption to protect customer transactions such as inter-bank transfers. Increasingly, however, financial institutions and businesses are extending the services across the Internet and are implementing additional security measures adapted to the Internet infrastructure. 
         [0037]    The development of electronic commerce, and extranet and Intranet applications, has substantially increased network complexity for all users. The risk of network fraud and the challenge of maintaining online confidentially have increased at an astronomic pace. Unauthorized intrusions, falsifications, and damage on computer networks are extremely costly. Individuals and business increasingly rely upon computer networks, including the Internet, to communicate, access information, and conduct commerce. Businesses are now employing local area networks to connect computer users located in a single facility and wide area networks to connect to customers in remotely. This online business environment has different security requirements than traditional environments. Enterprise networks are no longer defined by the physical boundaries of a business location but often encompass remote sites and include mobile users and telecommuters around the world. These changes introduce additional security concerns because of the increased use of remote access and extranets and the reliance on shared public networks such as the Internet. Security requirements have become much more complex. 
         [0038]    The Internet significantly influences business operations, from the distribution of information to business logistics, from consumer retailing to entertainment, and from banking and finance to customer service. The migration towards Internet-dependent business models is occurring at a rapid pace and is changing the nature of how enterprises conduct business. Disparate transaction systems are common in today&#39;s retail environments even among the same company. Businesses are trying to develop strategies to manage the complexities brought on by growth and the opportunities made possible by the Internet. 
       Authentication is Necessary for Data Security 
       [0039]    Smart card security today requires products that are focused in enterprise information technology. Experts from government and industry organizations have standardized the classification of data security as follows: 
         [0000]    ACCESS CONTROL manages access rights to sensitive information and is a basic feature of operating system platforms and file systems.
 
CONFIDENTIALITY involves the encryption of data transmissions so that only the intended recipient can access the information.
 
DATA INTEGRITY ensures that data is not compromised or manipulated.
 
NON-REPUDIATION provides undeniable proof that transactions, once committed, are valid, binding, and irrevocable.
 
AUTHENTICATION proves the identity of users and systems on the network.
 
         [0040]    Authentication is a critical component of access control, confidentiality, data integrity and non-repudiation. To provide access to the network or to sensitive information, the network must be able to identify the user accurately. Business systems, services and applications currently authenticate users with a variety of digital credentials, including passwords and digital signatures and smart cards. 
         [0041]    Public Key Infrastructure (PKI) is the leading technology for network security, including access control to information from web browsers, secure e-mail, signing digital forms, firewalls, routers supporting VPNs and directories. PKI employs a public-private key pair rather than solely a secret key to encrypt and decrypt data and generate digital signatures and certificates. 
         [0042]    Digital certificates are secure data files containing a user&#39;s public key along with other user identification information. The public key is made available to anyone who wants it, but only its owner holds the corresponding private key. Senders use the public key to encrypt data to be sent to a user, and the user then decrypts the data by employing the corresponding private key. Smart cards are the safest place to store and manage an individual&#39;s digital certificate and key pairs. 
         [0043]    In most high value transactional environments deploying smart cards today, the card is a microprocessor based device that can independently generate a key that is the starting point for a transaction session. The card and the system mutually authenticate each other and a session key is generated and used for that particular transaction. 
         [0044]    Other verification and/or transaction authentication methodologies are contemplated, such as those described in International Patent Application PCT/US2012/067141 filed Nov. 29, 2012 and entitled “LAYERED SECURITY FOR AGE VERIFICATION AND TRANSACTION AUTHORIZATION,” which is hereby incorporated by reference in its entirety. Such methodologies may be implemented using a multi-mode card and/or system as described herein. 
         [0045]    Where applicable, various embodiments provided by the present disclosure can be implemented using hardware, software, or combinations of hardware and software. Also where applicable, the various hardware components and/or software components set forth herein can be combined into composite components comprising software, hardware, and/or both without departing from the spirit of the present disclosure. Where applicable, the various hardware components and/or software components set forth herein can be separated into sub-components comprising software, hardware, or both without departing from the spirit of the present disclosure. In addition, where applicable, it is contemplated that software components can be implemented as hardware components, and vice-versa. 
         [0046]    Software in accordance with the present disclosure, such as non-transitory instructions, program code, and/or data, can be stored on one or more non-transitory machine readable mediums. It is also contemplated that software identified herein can be implemented using one or more general purpose or specific purpose computers and/or computer systems, networked and/or otherwise. Where applicable, the ordering of various steps described herein can be changed, combined into composite steps, and/or separated into sub-steps to provide features described herein. 
         [0047]    Embodiments described above illustrate but do not limit the invention. It should also be understood that numerous modifications and variations are possible in accordance with the principles of the invention. Accordingly, the scope of the invention is defined only by the following claims.