DATA PROTECTION WITH TRANSLATION
    1.
    发明申请
    DATA PROTECTION WITH TRANSLATION 审中-公开
    数据保护与翻译

    公开(公告)号:US20130212026A1

    公开(公告)日:2013-08-15

    申请号:US13735800

    申请日:2013-01-07

    IPC分类号: G06Q20/38

    摘要: Systems and methods are disclosed in which data associated with a transaction are protected with encryption. At an access device, a PIN associated with a payment account may be encrypted with a first key derived from an initial key of the access device and sensitive data associated with the payment account may be encrypted with a second key derived from the initial key. At a secure module associated with a host server encrypted sensitive data of an authorization request message may be decrypted. The secure module associated with the host server can re-encrypt the sensitive data using a zone encryption key associated with a payment processing network. A translated authorization request message including the re-encrypted sensitive data can be transmitted by the merchant server to the payment processing network.

    摘要翻译: 公开了与事务相关联的数据通过加密来保护的系统和方法。 在访问设备处,与支付帐户相关联的PIN可以用从访问设备的初始密钥导出的第一密钥加密,并且与支付帐户相关联的敏感数据可以用从初始密钥导出的第二密钥进行加密。 在与主机服务器相关联的安全模块中,可以解密授权请求消息的加密敏感数据。 与主机服务器相关联的安全模块可以使用与支付处理网络相关联的区域加密密钥来重新加密敏感数据。 包括重新加密的敏感数据的翻译的授权请求消息可以由商家服务器发送到支付处理网络。

    ONLINE CHALLENGE-RESPONSE
    2.
    发明申请
    ONLINE CHALLENGE-RESPONSE 有权
    在线挑战回应

    公开(公告)号:US20140244511A1

    公开(公告)日:2014-08-28

    申请号:US14273331

    申请日:2014-05-08

    IPC分类号: G06Q20/40 G06Q20/12 G06F21/31

    摘要: Embodiments of the invention enable cardholders conducting an online transaction to be authenticated in real-time using a challenge-response application. The challenge-response application can be administered by an issuer or by a third party on-behalf-of an issuer. A challenge question can be presented to the cardholder, and the cardholder's response can be verified. The challenge question presented can be selected based on an analysis of the risk of the transaction and potentially other factors. A variety of dynamic challenge questions can be used without the need for the cardholder to enroll into the program. Additionally, there are many flexible implementation options of the challenge-response application that can be adjusted based on factors such as the location of the merchant or the location of the consumer.

    摘要翻译: 本发明的实施例使得能够使用挑战响应应用实时地进行在线交易的持卡人被认证。 挑战响应应用程序可由发行人或第三方代表发行人管理。 可以向持卡人提出一个挑战性问题,并且可以验证持卡人的回复。 所提出的挑战性问题可以根据对交易风险的分析和潜在的其他因素进行选择。 可以使用各种动态挑战性问题,而不需要持卡人注册该计划。 另外,可以基于诸如商家的位置或消费者的位置的因素来调整挑战应答应用的许多灵活的实现选项。

    DEVICE INCLUDING ENCRYPTED DATA FOR EXPIRATION DATE AND VERIFICATION VALUE CREATION

    公开(公告)号:US20190066069A1

    公开(公告)日:2019-02-28

    申请号:US16171176

    申请日:2018-10-25

    摘要: In order to make it more difficult to obtain numbers that can be used to conduct fraudulent transactions, a portion of a real account number is encrypted. The encrypted portion of the account number is used to generate a new account number, a new expiration date, and a new verification value. This information can be determined using processor that may reside in a point of sale terminal, a smart card, or a computer operated by a user. The new account number, the new expiration date, and the new verification value can be used in a payment transaction. A server computer in a central payment processing network may determine that the new account information is not the real account information, and may subsequently generate a modified authorization request message using the real account information and may send it to an issuer for approval. The transmission of data is more secure, since real account information is not sent from the merchant to the payment processing network.

    DIRECT CONNECTION SYSTEMS AND METHODS
    5.
    发明申请
    DIRECT CONNECTION SYSTEMS AND METHODS 有权
    直接连接系统和方法

    公开(公告)号:US20150012346A1

    公开(公告)日:2015-01-08

    申请号:US14495437

    申请日:2014-09-24

    IPC分类号: G06Q20/40 G06Q30/02

    摘要: Embodiments of the invention are directed to passing a plurality of communications directly from a merchant to a payment processing network. A first communication may include payment information in an authorization request, while a second transaction may include non-payment transaction data. The communications may be linked with a transaction identifier. In other embodiments, a capture file process is disclosed where capture files are generated by the payment processing network, and transactions are subsequently cleared and settled.

    摘要翻译: 本发明的实施例涉及将多个通信直接从商家传递到支付处理网络。 第一通信可以包括授权请求中的支付信息,而第二交易可以包括不支付交易数据。 通信可以与事务标识符相关联。 在其他实施例中,公开捕获文件处理,其中捕获文件由支付处理网络生成,并且事务随后被清除和确定。

    Direct connection systems and methods
    6.
    发明授权
    Direct connection systems and methods 有权
    直接连接系统和方法

    公开(公告)号:US08924297B2

    公开(公告)日:2014-12-30

    申请号:US13405140

    申请日:2012-02-24

    IPC分类号: G06Q40/00 G06Q20/40 G06Q20/20

    摘要: Embodiment of the invention are directed to passing a plurality of communications directly from a merchant to a payment processing network. A first communication may include payment information in an authorization request, while a second transaction may include non-payment transaction data. The communications may be linked with a transaction identifier. In other embodiments, a capture file process is disclosed where capture files are generated by the payment processing network, and transactions are subsequently cleared and settled.

    摘要翻译: 本发明的实施例涉及将多个通信直接从商家传递到支付处理网络。 第一通信可以包括授权请求中的支付信息,而第二交易可以包括不支付交易数据。 通信可以与事务标识符相关联。 在其他实施例中,公开捕获文件处理,其中捕获文件由支付处理网络生成,并且事务随后被清除和确定。

    DIRECT CONNECTION SYSTEMS AND METHODS
    7.
    发明申请
    DIRECT CONNECTION SYSTEMS AND METHODS 有权
    直接连接系统和方法

    公开(公告)号:US20120221468A1

    公开(公告)日:2012-08-30

    申请号:US13405140

    申请日:2012-02-24

    IPC分类号: G06Q20/40

    摘要: Embodiments of the invention are directed to passing a plurality of communications directly from a merchant to a payment processing network. A first communication may include payment information in an authorization request, while a second transaction may include non-payment transaction data. The communications may be linked with a transaction identifier. In other embodiments, a capture file process is disclosed where capture files are generated by the payment processing network, and transactions are subsequently cleared and settled.

    摘要翻译: 本发明的实施例涉及将多个通信直接从商家传递到支付处理网络。 第一通信可以包括授权请求中的支付信息,而第二交易可以包括不支付交易数据。 通信可以与事务标识符相关联。 在其他实施例中,公开捕获文件处理,其中捕获文件由支付处理网络生成,并且事务随后被清除和确定。