Source: http://www.google.es/patents/US8843417
Timestamp: 2018-01-20 01:37:33
Document Index: 50737181

Matched Legal Cases: ['Application No. 2008268326', 'Application No. 2007261152', 'Application No. 2008268326', 'Application No. 2007261152', 'Application No. 08781002', 'Application No. 07798557', 'Application No. 07798557', 'Application No. 2009', 'Application No. 2009', 'Application No. 10', 'Application No. 2']

Patente US8843417 - Track data encryption - Google Patentes
A method for using a secondary PAN is disclosed. The method includes providing a secondary PAN associated with a primary PAN, where the secondary PAN has at least one end portion that is the same as the primary PAN, but has a middle portion of that is different than the primary PAN....http://www.google.es/patents/US8843417?utm_source=gb-gplus-sharePatente US8843417 - Track data encryption
Número de publicación US8843417 B2
Número de solicitud US 12/264,036
También publicado como CA2655015A1, CA2655311A1, CA2655423A1, CA2655423C, CA2655465A1, CA2655465C, CA2655748A1, CA2656058A1, EP2039038A2, EP2039038A4, EP2039052A2, EP2039052A4, EP2041663A2, EP2041663A4, EP2041714A2, EP2041714A4, EP2047621A2, EP2047621A4, US7810165, US7818264, US7819322, US8135647, US8375441, US8489506, US8494968, US8972303, US20070294182, US20080005037, US20080034221, US20080040271, US20080040276, US20080065553, US20080103982, US20090083191, US20090089213, US20090171849, US20110004526, US20110004553, US20110066516, US20120158591, US20130275310, WO2007149762A2, WO2007149762A3, WO2007149775A2, WO2007149775A3, WO2007149785A2, WO2007149785A3, WO2007149787A2, WO2007149787A3, WO2008016752A2, WO2008016752A3, WO2008027642A2, WO2008027642A3
Número de publicación 12264036, 264036, US 8843417 B2, US 8843417B2, US-B2-8843417, US8843417 B2, US8843417B2
Inventores Ayman Hammad
Citas de patentes (320), Otras citas (53), Citada por (4), Clasificaciones (32), Eventos legales (1)
US 8843417 B2
providing to a server, by an access device, a secondary primary account number (PAN)for a primary account, wherein the secondary PAN is created by modifying a primary PAN for the primary account using the access device, wherein the secondary PAN has a location identification data element, and wherein the location identification data element is the same as a corresponding location identification data element in the primary PAN, and wherein a middle portion of the secondary PAN is different than a corresponding middle portion of the primary PAN; and
receiving from the server, at the access device, an approval or disapproval for a payment transaction from the primary account after said providing the secondary PAN to the server;
wherein the secondary PAN and the primary PAN each comprise at least three corresponding digits having a same value; and
wherein the middle portion of the secondary PAN further comprises a digit selected to allow a checksum operation to be performed using the secondary PAN that will generate a same value as a checksum digit of the primary PAN.
2. The method of claim 1 wherein the location identification data element comprises a bank identification number (BIN).
3. The method of claim 1 wherein the middle portion of the secondary PAN comprises a modified version of the middle portion of the primary PAN.
4. The method of claim 3 further comprising encrypting the primary PAN.
5. The method of claim 4 wherein said encrypting the primary PAN comprises:
accessing the primary PAN from a first memory location;
encrypting the primary PAN; and
storing the encrypted primary PAN in a secondary memory location different from the first memory location.
6. The method of claim 5 wherein the providing the secondary PAN associated with the primary PAN to the server comprises sending the encrypted primary PAN and the secondary PAN with an authorization request.
7. A non-transitory computer readable storage medium comprising instructions which when executed by an access device cause the access device to perform operations comprising:
providing, from the access device to a server, a secondary Primary Account Number (PAN) created by modifying a primary PAN, wherein the secondary PAN has a location identification data element, and wherein the location identification data element is the same as a corresponding location identification data element in the primary PAN, and wherein a middle portion of the secondary PAN is different than a corresponding middle portion of the primary PAN; and
receiving, at the access device, an approval or disapproval for a payment transaction from a primary account after said providing the secondary PAN to the server;
wherein the middle portion of the secondary PAN comprises at least three digits having a same value and a digit selected to allow a checksum operation to be performed using the secondary PAN that will generate a same value as a checksum digit of the primary PAN; and
wherein the secondary PAN comprises at least three digits that each have a same value as a corresponding digit of the primary PAN.
8. The non-transitory computer readable storage medium of claim 7 wherein the location identification data element comprises a bank identification number (BIN).
9. The non-transitory computer readable storage medium of claim 7 wherein the middle portion of the primary PAN is changed to create the middle portion of the secondary PAN.
10. The non-transitory computer readable storage medium of claim 7, wherein the operations further comprise encrypting the primary PAN.
11. The non-transitory computer readable storage medium of claim 7 wherein the operations further comprise encrypting at least a portion of the secondary PAN.
12. The non-transitory computer readable storage medium of claim 11, wherein said encrypting at least the portion of the secondary PAN includes using an elliptical curve cryptography (ECC) encryption process.
13. A non-transitory computer readable storage medium comprising instructions which when executed by an access point cause the access point to authenticate a payment transaction by performing operations comprising:
receiving at the access point, from a portable consumer device, a data track comprising a primary Primary Account Number (PAN) at a first location of the data track, wherein the primary PAN comprises a location identification data element and a middle portion;
modifying, by the access point, the middle portion of the primary PAN to create a secondary PAN, wherein a middle portion of the secondary PAN comprises a digit selected to allow the checksum operation to be performed using the secondary PAN that will generate a same value as a checksum digit of the primary PAN;
providing to a server, by the access point, the secondary PAN, wherein the secondary PAN includes the location identification data element; and
receiving, at the access point, an approval or disapproval for a payment transaction after said providing the secondary PAN to the server;
wherein the primary PAN and the secondary PAN both have 13, 16 or 19 digits.
14. The non-transitory computer readable storage medium of claim 13, wherein the operations further comprise storing the secondary PAN at the first location of the data track of the portable consumer device to create a modified data track.
15. The non-transitory compute readable storage medium of claim 14, wherein the operations further comprise:
encrypting the primary PAN to create an encrypted primary PAN; and
wherein said providing the secondary PAN to the server further comprises providing the encrypted primary PAN to the server.
16. The non-transitory computer readable storage medium of claim 14, wherein said modifying the middle portion of the primary PAN to create the secondary PAN comprises modifying a digit of the middle portion so that the checksum operation using the secondary PAN will generate a same value as the checksum digit of the primary PAN.
17. The non-transitory computer readable storage medium of claim 15 wherein said modifying the middle portion of the primary PAN to create the secondary PAN comprises setting all the digits of the middle portion to zero values.
18. The non-transitory computer readable storage medium of claim 14 wherein the middle portion of the primary PAN is between 3 and 6 digits long.
This patent application is a divisional application of U.S. patent application Ser. No. 11/761,821, filed Jun. 12, 2007, which claims priority to and is a non-provisional of U.S. Patent Application Nos. 60/815,059, filed on Jun. 19, 2006, 60/815,430 filed on Jun. 20, 2006, and 60/884,089, filed on Jan. 9, 2007, and all of the above applications are herein incorporated by reference in their entirety for all purposes.
FIG. 4 shows a system 20 that can be used in an embodiment of the invention. The system 20 includes a merchant 22 and an acquirer 24 associated with the merchant 22. In a typical payment transaction, a consumer 30 may purchase goods or services at the merchant 22 using a portable consumer device 32. The acquirer 24 can communicate with an issuer 28 via a payment processing network 26.
US4238853 5 Dic 1977 9 Dic 1980 International Business Machines Corporation Cryptographic communication security for single domain networks
US4852165 12 Jun 1987 25 Jul 1989 National Computer Print, Inc. Secure system and method for providing personal identifier
US5434388 7 Oct 1993 18 Jul 1995 E.G.O. Elektro-Gerate Blanc U. Fischer Electrical heater for media, particularly flow heater
US5745576 17 May 1996 28 Abr 1998 Visa International Service Association Method and apparatus for initialization of cryptographic terminal
US5835599 15 Abr 1996 10 Nov 1998 Vlsi Technology, Inc. Muti-cycle non-parallel data encryption engine
US6415386 10 Jul 1996 2 Jul 2002 Yi Shi Cryptogram lock system with automatically variable true random code tonglingge
US6523745 5 Ago 1997 25 Feb 2003 Enix Corporation Electronic transaction system including a fingerprint identification encoding
US6631482 11 Ene 2000 7 Oct 2003 International Business Machines Corporation Method and system for providing data output for analysis
US6830183 1 May 2003 14 Dic 2004 Semtek Innovative Solutions, Inc. Device for secure read, write and read/modify/write operation with divided track transducer head
US6839840 4 Nov 1999 4 Ene 2005 Gemplus Authenticating method between a smart card and a terminal
US6839845 6 Feb 2001 4 Ene 2005 Startek Engineering Incorporated Control system for image input device, especially fingerprint image input device
US7155411 28 Sep 2000 26 Dic 2006 Microsoft Corporation Integrating payment accounts and an electronic wallet
US7376629 3 Abr 2001 20 May 2008 Incogno Corporation Method of and system for effecting anonymous credit card purchases over the internet
US7415109 23 Ago 2002 19 Ago 2008 Qualcomm Incorporated Partial encryption and full authentication of message blocks
US7665657 * 10 Dic 2004 23 Feb 2010 Inghoo Huh Bank transaction method linking accounts via common accounts
US7731086 * 9 Jun 2006 8 Jun 2010 American Express Travel Related Services Company, Inc. System and method for mass transit merchant payment
US7761374 18 Ago 2003 20 Jul 2010 Visa International Service Association Method and system for generating a dynamic verification value
US20010056409 15 May 2001 27 Dic 2001 Bellovin Steven Michael Offline one time credit card numbers for secure e-commerce
US20020069240 6 Dic 2000 6 Jun 2002 Berk Donald J. Method and apparatus for electronically updating printed publications
US20020073044 10 Dic 2001 13 Jun 2002 Singhal Tara C. Method and apparatus for an integrated identity security and payment system
US20020073315 16 Ago 2001 13 Jun 2002 Brant Candelore Placing a cryptogram on the magnetic stripe of a personal transaction card
US20020077144 8 Ago 2001 20 Jun 2002 Ralf Keller Mobile terminal with zone-dependent operational parameter settings
US20020107798 8 Jun 2001 8 Ago 2002 Patrice Hameau Method for making secure the pre-initialising phase of a silicon chip integrated system, in particular a smart card and integrated system therefor
US20030074317 15 Oct 2001 17 Abr 2003 Eyal Hofi Device, method and system for authorizing transactions
US20030115142 12 Dic 2001 19 Jun 2003 Intel Corporation Identity authentication portfolio system
US20030126094 29 Ene 2002 3 Jul 2003 Fisher Douglas C. Persistent dynamic payment service
US20030169881 31 Ene 2003 11 Sep 2003 Niedermeyer Brian J. Location based fraud reduction system and method
US20030225703 4 Jun 2002 4 Dic 2003 Angel Albert J. Hierarchical authentication process and system for financial transactions
US20040156537 2 Feb 2004 12 Ago 2004 Chung Kevin Kwong-Taiq Generation, verification and reproduction of a digitized writing
US20050091152 22 Oct 2003 28 Abr 2005 Daniel Suisa Method and System for Approving Card Transactions
US20050125686 5 Dic 2003 9 Jun 2005 Brandt William M. Method and system for preventing identity theft in electronic communications
US20050228986 8 Abr 2005 13 Oct 2005 Canon Kabushiki Kaisha Data processing device, encryption communication method, key generation method, and computer program
US20060018523 22 Jul 2005 26 Ene 2006 Sanyo Electric Co., Ltd. Enrollment apparatus and enrollment method, and authentication apparatus and authentication method
US20060210071 16 Mar 2005 21 Sep 2006 Chandran Gayathiri R Encryption of security-sensitive data
US20060253687 9 May 2005 9 Nov 2006 Microsoft Corporation Overlapped code obfuscation
US20060265446 14 Abr 2005 23 Nov 2006 Ipass Inc. Dynamic executable
US20060278704 * 9 Jun 2006 14 Dic 2006 American Express Travel Related Services Co., Inc. System and method for mass transit merchant payment
US20060290501 24 Jun 2005 28 Dic 2006 Visa U.S.A., Inc. Apparatus and method to electromagnetically shield portable consumer devices
US20060293027 24 Jun 2005 28 Dic 2006 Visa U.S.A., Inc. Apparatus and method for preventing wireless interrogation of portable consumer devices
US20070017970 20 Jul 2006 25 Ene 2007 Visa U.S.A., Inc. Compact protocol and solution for substantially offline messaging between portable consumer device and base device
US20070130062 * 10 Dic 2004 7 Jun 2007 Inghoo Huh Bank transaction method linking accounts via common accounts
US20080004121 12 Jun 2007 3 Ene 2008 Cyberview Technology, Inc. Universal game download system for legacy gaming machines
US20080052782 13 Mar 2007 28 Feb 2008 Searete Llc, A Limited Liability Corporation Of The State Of Delaware System for obfuscating identity
US20080172737 11 Ene 2007 17 Jul 2008 Jinmei Shen Secure Electronic Medical Record Management Using Hierarchically Determined and Recursively Limited Authorized Access
US20080203151 28 Feb 2007 28 Ago 2008 Visa U.S.A. Inc. Verification of a portable consumer device in an offline environment
US20080203152 28 Feb 2007 28 Ago 2008 Visa U.S.A. Inc. Authentication of a data card using a transit verification value
US20080203170 28 Feb 2007 28 Ago 2008 Visa U.S.A. Inc. Fraud prevention for transit fare collection
US20080275829 21 Abr 2007 6 Nov 2008 Direct Computer Resources, Inc. System and method for obfuscation of data across an enterprise
US20080303632 11 Jun 2007 11 Dic 2008 Ayman Hammad Shielding of portable consumer device
US20090089213 3 Nov 2008 2 Abr 2009 Ayman Hammad Track data encryption
US20090171682 28 Dic 2007 2 Jul 2009 Dixon Philip B Contactless prepaid Product For Transit Fare Collection
US20090171849 3 Nov 2008 2 Jul 2009 Ayman Hammad Track data encryption
US20090202081 8 Feb 2008 13 Ago 2009 Ayman Hammad Key delivery system and method
US20100027780 27 Nov 2007 4 Feb 2010 Searete Llc, A Limited Liability Corporation Of The State Of Delaware Systems and methods for anonymizing personally identifiable information associated with epigenetic information
US20110004553 16 Sep 2010 6 Ene 2011 Ayman Hammad Track data encryption
JP2000322486A Título no disponible
JP2002024719A Título no disponible
JP2002366868A Título no disponible
JP2003519420A Título no disponible
WO2005059795A1 * 10 Dic 2004 30 Jun 2005 Teachiworld Co., Ltd. Bank transaction method linking accounts via common accounts
1 Australian Examination Report mailed on Jun. 29, 2012 for AU Patent Application No. 2008268326, 3 pages.
2 Australian Notice of Acceptance mailed on Aug. 11, 2011 for AU Patent Application No. 2007261152, 3 pages.
3 Australian Office Action mailed on Feb. 21, 2013 for AU Patent Application No. 2008268326, 3 pages.
4 Australian Office Action mailed on Jul. 1, 2010, for AU Patent Application No. 2007261152, 2 pages.
5 European Communication mailed on Feb. 5, 2013 for EP Patent Application No. 08781002.4, 6 pages.
6 Extended European Search Report mailed Oct. 7, 2011 in EP Patent Application No. 07798557.0 issued on Oct. 7, 2011, 6 pages.
7 Extended European Search Report mailed on Jul. 10, 2011, for EP Patent Application No. 07798557.0, 6 pages.
8 Final Office Action for U.S. Appl. No. 11/761,821 mailed on Jul. 8, 2009, 15 pages.
9 Final Office Action for U.S. Appl. No. 12/263,933 mailed on Nov. 26, 2010, 21 pages.
10 Final Office Action for U.S. Appl. No. 12/263,982 mailed on Dec. 15, 2011, 14 pages.
11 Final Office Action for U.S. Appl. No. 12/883,413 mailed on Jul. 20, 2011, 16 pages.
12 Fujitsu Microelectronics America Announces New Fingerprint Identification Technology for Cell Phones, Mobile Devices Mar. 11, 2002 by Fujitsu Microelectronics America, Inc at www.fujitsu.com/us/news/pr/fma-20020311.html.
13 Fujitsu Microelectronics America Announces New Fingerprint Identification Technology for Cell Phones, Mobile Devices Mar. 11, 2002 by Fujitsu Microelectronics America, Inc at www.fujitsu.com/us/news/pr/fma—20020311.html.
14 International Search Report mailed on Dec. 6, 2007, for PCT Patent Application No. PCT/US07/071200, 1 page.
15 Japanese office action mailed Jun. 7, 2013 for JP Patent Application No. 2009-516638, 8 pages.
16 Japanese Office Action mailed Oct. 12, 2012 in Application No. 2009-516638, issued Oct. 10, 2012.
17 Korean Notice of Non-Final Rejection mailed Jan. 8, 2014 in KR Patent Application No. 10-2009-7000832, 6 pages.
18 Menezes, A.J., et al., "Handbook of Applied Cryptography," XP-002662759, Oct. 1997, CRC Press, LLC, USA; pp. 192-194, 330-331, 363, 490, 498-499, 551-553 (12 pages total).
19 Non-Final Office Action for U.S. Appl. No. 11/761,821 mailed on Jan. 21, 2010, 23 pages.
20 Non-Final Office Action for U.S. Appl. No. 11/761,821 mailed on Jan. 23, 2009, 14 pages.
21 Non-Final Office Action for U.S. Appl. No. 12/263,933 mailed on Jun. 9, 2010, 20 pages.
22 Non-Final Office Action for U.S. Appl. No. 12/263,982 mailed on Apr. 12, 2011, 13 pages.
23 Non-Final Office Action for U.S. Appl. No. 12/883,413 mailed on Jan. 5, 2011, 14 pages.
24 Non-Final Office Action mailed Jul. 7, 2014 in U.S. Appl. No. 12/146,150, 19 pages.
25 Office Action mailed Jul. 14, 2014 in CA Patent Application No. 2,655,465, 2 pages.
26 Restriction Requirement for U.S. Appl. No. 11/761,821 mailed Oct. 3, 2008, 6 pages.
27 The International Search Report of the International Searching Authority for Application No. PCT/US2008/068281, mailed Oct. 22, 2008, 1 page.
28 The International Written Opinion of the International Searching Authority for Application No. PCT/US2008/068281, mailed Oct. 22, 2008, 4 pages.
29 The Supplementary European Search Report for Application No. EP08781002.4, dated Nov. 15, 2011, 7 pages.
30 U.S. Appl. No. 10/642,878, filed Aug. 18, 2003.
31 U.S. Appl. No. 11/536,296, filed Sep. 26, 2006.
32 U.S. Appl. No. 11/566,614, filed Dec. 4, 2006.
33 U.S. Appl. No. 11/680,589, filed Feb. 28, 2007.
34 U.S. Appl. No. 11/680,592, filed Feb. 28, 2007.
35 U.S. Appl. No. 11/680,594, filed Feb. 28, 2007.
36 U.S. Appl. No. 11/761,370, filed Jun. 14, 2007.
37 U.S. Appl. No. 11/763,240, filed Jun. 14, 2007.
38 U.S. Appl. No. 11/764,343, filed Jun. 18, 2007.
39 U.S. Appl. No. 11/764,351, filed Jun. 18, 2007.
40 U.S. Appl. No. 11/764,361, filed Jun. 18, 2007.
41 U.S. Appl. No. 11/764,370, filed Jun. 18, 2007.
42 U.S. Appl. No. 11/764,376, filed Jun. 18, 2007.
43 U.S. Appl. No. 11/764,622, filed Jun. 18, 2007.
44 U.S. Appl. No. 11/811,875, filed Jun. 11, 2007.
45 U.S. Appl. No. 11/935,740, filed Nov. 6, 2007.
46 U.S. Appl. No. 11/940,074, filed Nov. 14, 2007.
47 U.S. Appl. No. 11/962,836, filed Dec. 21, 2007.
48 U.S. Appl. No. 11/963,736, filed Dec. 28, 2007.
49 U.S. Appl. No. 11/966,233, filed Dec. 21, 2007.
50 U.S. Appl. No. 12/022,060, filed Jan. 28, 2008.
51 U.S. Appl. No. 12/022,075, filed Jan. 29, 2008.
52 U.S. Appl. No. 12/028,220, filed Feb. 8, 2008.
53 Written Opinion of the International Searching Authority mailed on Dec. 6, 2007, for PCT Patent Application No. PCT/US07/071200, 6 pages.
US9652770 * 30 Abr 2014 16 May 2017 Wells Fargo Bank, N.A. Mobile wallet using tokenized card systems and methods
US9773243 * 15 Feb 2012 26 Sep 2017 Voltage Security, Inc. System for structured encryption of payment card track data with additional security data
US20130332746 * 11 Jun 2013 12 Dic 2013 Thomson Licensing Method, a device and a computer program support for execution of encrypted computer code
Clasificación de EE.UU. 705/64, 705/44, 705/67, 705/75
Clasificación internacional G06Q20/10, G06Q20/40, G06Q99/00, G06Q20/20, H04L9/32, G06Q20/08, G06Q40/00, G06Q20/36, G06Q20/38, G06Q30/06
Clasificación cooperativa G06Q2220/00, G06Q20/204, G06Q20/40, G06Q20/085, H04L2209/56, G06Q20/105, G06Q20/20, H04L9/3271, G06Q20/401, G06Q20/3672, G06Q20/367, G06Q20/385, G06Q20/382, G06Q20/3821, G06Q30/06, G06Q40/00, G06Q20/3674, G06Q20/3829