DK1636680T3 - Systemer og fremgangsmåder til gennemførelse af sikre betalingstransaktioner ved anvendelse af en formateret datastruktur - Google Patents

Systemer og fremgangsmåder til gennemførelse af sikre betalingstransaktioner ved anvendelse af en formateret datastruktur Download PDF

Info

Publication number
DK1636680T3
DK1636680T3 DK04776493.1T DK04776493T DK1636680T3 DK 1636680 T3 DK1636680 T3 DK 1636680T3 DK 04776493 T DK04776493 T DK 04776493T DK 1636680 T3 DK1636680 T3 DK 1636680T3
Authority
DK
Denmark
Prior art keywords
bytes
aav
authentication
cardholder
mac
Prior art date
Application number
DK04776493.1T
Other languages
English (en)
Inventor
Stephen W Orfei
Mark Wiesman
Arthur D Kranzley
Bruce J Rutherford
Original Assignee
Mastercard International Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from PCT/US2004/017756 external-priority patent/WO2005001618A2/en
Application filed by Mastercard International Inc filed Critical Mastercard International Inc
Application granted granted Critical
Publication of DK1636680T3 publication Critical patent/DK1636680T3/da

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/04—Payment circuits
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/02—Payment architectures, schemes or protocols involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/02—Payment architectures, schemes or protocols involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
    • G06Q20/027—Payment architectures, schemes or protocols involving a neutral party, e.g. certification authority, notary or trusted third party [TTP] involving a payment switch or gateway
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/08—Payment architectures
    • G06Q20/10—Payment architectures specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/08—Payment architectures
    • G06Q20/12—Payment architectures specially adapted for electronic shopping systems
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/36—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes
    • G06Q20/367—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes
    • G06Q20/3674—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes involving authentication
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3821—Electronic credentials
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3827—Use of message hashing
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G06Q20/4014—Identity check for transactions
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q30/00—Commerce
    • G06Q30/04—Billing or invoicing
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q30/00—Commerce
    • G06Q30/06—Buying, selling or leasing transactions
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3236—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions
    • H04L9/3242—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/56—Financial cryptography, e.g. electronic payment or e-cash

Landscapes

  • Business, Economics & Management (AREA)
  • Engineering & Computer Science (AREA)
  • Accounting & Taxation (AREA)
  • Strategic Management (AREA)
  • Physics & Mathematics (AREA)
  • General Business, Economics & Management (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Finance (AREA)
  • Computer Security & Cryptography (AREA)
  • Development Economics (AREA)
  • Economics (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Marketing (AREA)
  • Signal Processing (AREA)
  • Power Engineering (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Control Of Vending Devices And Auxiliary Devices For Vending Devices (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
  • Storage Device Security (AREA)

Claims (22)

1. System til autentifikation af en kortholdertransaktion med en sælger på et elektronisk netværk, hvilket system omfatter: et udstederplatforms-lag med mindst ét 3-D Secure Authentification program; et sælger-plug-in, ”MPI”; en sikker betaling algoritme ”SPA”; og et datatransportlag, hvor udstederplatformen omfatter en adgangskontrolserver, ”ACS”, der anvender SPA'en til behandling af transaktions- og kortholderinformation til autentifikation med en autentifikationsmetode og generering af en kontoholderautentifikations-værdi, ”AAV”, og flytning af AAV'en gennem datatransportlaget til MPI'en, hvor AAV'en er en formateret datastruktur, der er kompatibel med 3-D Secure besked-protokoller, hvor den formaterede datastruktur har en længde på højst 20 bytes inklusive bytes, der identificerer en hash-værdi af udbyderens navn, bytes, der identificerer ACS'en, bytes, der identificerer autentifikationsme-toden, bytes, der identificerer hemmelige kryptografiske nøgler, og bytes, der inkluderer en sælgerautentifikationskode, "MAC”.
2. System ifølge krav 1, hvor AAV'en er en formateret datastruktur, der er kodet i Base 64.
3. System ifølge krav 1, hvor SPA'en omfatter en krypteringsalgoritme til generering af MAC'en, hvor krypteringsalgoritmen benytter en hemmelig nøgle identificeret i AAV'en til kryptering af en sammenkædning af kortholderens kontonummer og flere af felterne med bytes i AAV'en, bortset fra bytes repræsenterende MAC'en, og hvor en del af krypteringsresultatet danner MAC bytes i AAV'en.
4. System ifølge krav 1, hvor SPA'en omfatter en krypteringsalgoritme til generering af MAC'en, hvor krypteringsalgoritmen benytter et par hemmelige nøgler A og B, der er identificeret i AAV'en til kryptering af en sammenkædning af kortholderens kontonummer, kortudløbsdato og servicekode til generering af et trecifret CVC2-felt, og benytter resultatet til at besætte to bytes i MAC'en.
5. System ifølge krav 4, hvor parret af hemmelige nøgler A og B er nøgler i 64-bit datakrypteringsstandard ”DES”.
6. System ifølge krav 1, hvor ACS'en er konfigureret til generering af en AAV som svar på en betalingsautentifikation-anmodningsbesked fra MPI'en til ACS'en.
7. System ifølge krav 1, der er konfigureret til transport af AAV'en i en beta-lingsautentifikation-svarbesked fra ACS'en.
8. System ifølge krav 7, hvor ACS'en er yderligere konfigureret til placering af en digital signatur på betalingsautentifikation-svarbeskeden.
9. System ifølge krav 1, hvor MPI'en er konfigureret til verificering af den digitale signatur på en modtaget betalingsautentifikation-svarbesked.
10. System ifølge krav 1, hvor MPI'en er konfigureret til ekstrahering af MAC-felterne inkluderet i en betalingsautentifikation-svarbesked fra ACS'en og placering af den ekstraherede MAC i en betalingsautorisation-anmodningsbesked til en tredjepart.
11. Datastruktur til flytning af kortholdertransaktion-autentifikationsinformation mellem deltagere i et 3-D Secure-miljø, hvilken datastruktur har 20 bytes af Base 64 kodede tegn, hvor den første byte er en kontrolbyte, bytes 2-9 repræsenterer en hashværdi for et sælgernavn, byte 10 identificerer en adgangskontrolserver, ACS, der autentificerer kortholdertransaktionen med en autentifikationsmetode, byte 11 identificerer autentifikationsmetoden og de hemmelige krypteringsnøgler, der anvendes af ACS'en til generering af en sælgerautentifikationskode, ’’MAC”, bytes 12-15 repræsentereret transaktionssekvensnummer, som identificerer et transaktionsnummer behandlet af ACS'en, og bytes 16-20 repræsenterer MAC'en.
12. Datastruktur ifølge krav 11, hvor MAC'en omfatter dele af en kryptering af en sammenkædning af kortholderens kontonummer og flere af felterne i bytes 1-15 i datastrukturen, og hvor en enkelt nøgle identificeret i byte 11 anvendes til kryptering.
13. Datastruktur ifølge krav 11, hvor MAC'en omfatter dele af en kryptering af en sammenkædning af kortholderens kontonummer, kortudløbsdato og servicekode, og hvor et par nøgler A og B identificeret i byte 11 anvendes til kryptering.
14. Datastruktur ifølge krav 13, hvor et trecifret krypteringsresultat anvendes til at besætte to bytes af MAC bytes 16-20.
15. Datastruktur ifølge krav 13, hvor parret af hemmelige nøgler A og B er 64 bit datakrypteringsstandard, ”DES”, nøgler.
16. Fremgangsmåde til autentifikation af en kortholdertransaktion med en sælger på et elektronisk netværk i et 3-D Secure-miljø, hvilken fremgangsmåde omfatter: anvendelse af en adgangskontrolserver, ”ACS”, til behandling af kortholder-og transaktionsinformation til autentifikation af kortholderen med en autentifikati-onsmetode; deployering af en sikker betaling-algoritme, ”SPA”, til generering af en kon-toholderautentifikationsværdi, ”AAV”, til repræsentation af autentifikationsresulta-terne, og transport af AAV'en i 3-D Secure beskeder til sælgeren, hvor AAV'en er en formateret datastruktur, der har en længde på højst 20 bytes inkluderende bytes, der identificerer en hashværdi for sælgerens navn, bytes, der identificerer ACS'en, bytes, der identificerer autentifikationsmetoden, bytes, der inkluderer en sælgerautentifikationskode, ’’MAC”, og bytes, der identificerer hemmelige krypto-grafiske nøgler, der anvendes af SPA'en til generering af MAC'en.
17. Fremgangsmåde ifølge krav 16, hvor AAV'en er en formateret datastruktur, der er Base 64 kodet.
18. Fremgangsmåde ifølge krav 16, hvor deployering af en SPA omfatter: anvendelse af en hemmelig nøgle identificeret i AAV'en til kryptering af en sammenkædning af kortholderens kontonummer og i det mindste dele af bytes i AAV'en bortset fra bytes repræsenterende MAC'en; og designering af en del af krypteringsresultatet til MAC bytes i AAV'en.
19. Fremgangsmåde ifølge krav 16, hvor deployering af en SPA omfatter: anvendelse af et par hemmelige nøgler A og B identificeret i AAV'en til kryptering af en sammenkædning af kortholderens kontonummer, kortudløbsdato og servicekode til generering af et trecifret CVC2-felt; og designering af resultatet til besættelse af to bytes af MAC'en.
20. Fremgangsmåde ifølge krav 17, hvor parret af hemmelige nøgler A og B er 64 bit datakrypteringsstandard, ”DES”, nøgler.
21. Fremgangsmåde ifølge krav 16, hvor transport af AAV'en i 3-D Secure-be-skeder til sælgeren omfatter transport af AAV'en i en betalingsautentifikation-svarbesked, der er digitalt signeret af ACS'en.
22. Fremgangsmåde ifølge krav 21, yderligere omfattende: først, verifikation hos sælgeren af den digitale signatur på en modtaget be-talingsautentifikation-svarbesked; og dernæst, ekstraktion af MAC-felterne fra den modtagne betalingsautentifi-kation-svarbesked hos sælgeren.
DK04776493.1T 2003-06-10 2004-06-10 Systemer og fremgangsmåder til gennemførelse af sikre betalingstransaktioner ved anvendelse af en formateret datastruktur DK1636680T3 (da)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US47718703P 2003-06-10 2003-06-10
PCT/US2004/017756 WO2005001618A2 (en) 2003-06-04 2004-06-04 Customer authentication in e-commerce transactions
PCT/US2004/018658 WO2005001635A2 (en) 2003-06-10 2004-06-10 Systems and methods for conducting secure payment transactions using a formatted data structure

Publications (1)

Publication Number Publication Date
DK1636680T3 true DK1636680T3 (da) 2016-07-18

Family

ID=35985301

Family Applications (1)

Application Number Title Priority Date Filing Date
DK04776493.1T DK1636680T3 (da) 2003-06-10 2004-06-10 Systemer og fremgangsmåder til gennemførelse af sikre betalingstransaktioner ved anvendelse af en formateret datastruktur

Country Status (18)

Country Link
US (1) US7801825B2 (da)
EP (1) EP1636680B1 (da)
JP (1) JP2007517272A (da)
KR (1) KR20060070484A (da)
CN (1) CN1926567A (da)
AU (2) AU2004252882A1 (da)
BR (1) BRPI0411286B1 (da)
CA (1) CA2529011A1 (da)
CY (1) CY1117808T1 (da)
DK (1) DK1636680T3 (da)
ES (1) ES2581236T3 (da)
HU (1) HUE029807T2 (da)
MX (1) MXPA05013422A (da)
PL (1) PL1636680T3 (da)
PT (1) PT1636680T (da)
SI (1) SI1636680T1 (da)
WO (1) WO2005001635A2 (da)
ZA (1) ZA200600211B (da)

Families Citing this family (74)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7239226B2 (en) 2001-07-10 2007-07-03 American Express Travel Related Services Company, Inc. System and method for payment using radio frequency identification in contact and contactless transactions
US7493288B2 (en) 2001-07-10 2009-02-17 Xatra Fund Mx, Llc RF payment via a mobile device
US7249112B2 (en) 2002-07-09 2007-07-24 American Express Travel Related Services Company, Inc. System and method for assigning a funding source for a radio frequency identification device
US7360694B2 (en) 2003-01-23 2008-04-22 Mastercard International Incorporated System and method for secure telephone and computer transactions using voice authentication
US7740168B2 (en) 2003-08-18 2010-06-22 Visa U.S.A. Inc. Method and system for generating a dynamic verification value
US7761374B2 (en) 2003-08-18 2010-07-20 Visa International Service Association Method and system for generating a dynamic verification value
US20050279827A1 (en) * 2004-04-28 2005-12-22 First Data Corporation Methods and systems for providing guaranteed merchant transactions
JP4843208B2 (ja) * 2004-09-30 2011-12-21 株式会社東芝 デジタルコンテンツ編集装置、デジタルコンテンツ編集方法、デジタルコンテンツ編集プログラムおよびデジタルコンテンツ編集プログラムを記録した記録媒体
RU2301449C2 (ru) * 2005-06-17 2007-06-20 Закрытое Акционерное Общество "Интервэйл" Способ осуществления многофакторной строгой аутентификации держателя банковской карты с использованием мобильного телефона в среде мобильной связи при осуществлении межбанковских финансовых транзакций в международной платежной системе по протоколу спецификации 3-d secure (варианты) и реализующая его система
US20070162600A1 (en) * 2005-11-18 2007-07-12 Aol Llc Promoting interoperability of presence-based systems through the use of ubiquitous online identities
JP4564464B2 (ja) * 2006-01-05 2010-10-20 株式会社東芝 デジタルコンテンツ再生装置、方法およびプログラム
EP1999715A4 (en) * 2006-03-02 2014-07-09 Visa Int Service Ass METHOD AND SYSTEM FOR REALIZING TWO-FACTOR AUTHENTICATION IN CORRESPONDENCE OR TELEPHONE SALE TRANSACTIONS
US7818264B2 (en) 2006-06-19 2010-10-19 Visa U.S.A. Inc. Track data encryption
US9065643B2 (en) 2006-04-05 2015-06-23 Visa U.S.A. Inc. System and method for account identifier obfuscation
JP4913530B2 (ja) * 2006-10-16 2012-04-11 株式会社野村総合研究所 暗号処理装置、暗号処理方法および暗号処理プログラム
US7823774B2 (en) * 2007-03-26 2010-11-02 International Business Machines Corporation Method, apparatus, and article of manufacture for automatic verification of transactions made over an insecure network
US8423479B2 (en) 2007-05-07 2013-04-16 Yahoo! Inc. Trusted third party clearing house for lead tracking
US8121956B2 (en) * 2007-06-25 2012-02-21 Visa U.S.A. Inc. Cardless challenge systems and methods
US20100169218A1 (en) * 2007-06-27 2010-07-01 Koninklijke Philips Electronics N.V. Secure authentication of lectronic prescriptions
US9589152B2 (en) * 2007-09-19 2017-03-07 Visa U.S.A. Inc. System and method for sensitive data field hashing
US8938793B2 (en) * 2007-10-03 2015-01-20 Gmx Sas System and method for secure management of transactions
US20100027786A1 (en) * 2008-02-14 2010-02-04 Patrick Faith Dynamic encryption authentication
US8935528B2 (en) * 2008-06-26 2015-01-13 Microsoft Corporation Techniques for ensuring authentication and integrity of communications
CA2742963A1 (en) 2008-11-06 2010-05-14 Visa International Service Association Online challenge-response
US8826397B2 (en) * 2009-01-15 2014-09-02 Visa International Service Association Secure remote authentication through an untrusted network
US8317090B2 (en) * 2009-03-27 2012-11-27 Mastercard International Incorporated Methods and systems for performing a financial transaction
US8261977B2 (en) * 2009-03-27 2012-09-11 Mastercard International Incorporated Methods and systems for using an interface and protocol extensions to perform a financial transaction
US9346998B2 (en) 2009-04-23 2016-05-24 The University Of Chicago Materials and methods for the preparation of nanocomposites
US9715681B2 (en) 2009-04-28 2017-07-25 Visa International Service Association Verification of portable consumer devices
US9105027B2 (en) 2009-05-15 2015-08-11 Visa International Service Association Verification of portable consumer device for secure services
US8534564B2 (en) 2009-05-15 2013-09-17 Ayman Hammad Integration of verification tokens with mobile communication devices
US8893967B2 (en) 2009-05-15 2014-11-25 Visa International Service Association Secure Communication of payment information to merchants using a verification token
US10846683B2 (en) 2009-05-15 2020-11-24 Visa International Service Association Integration of verification tokens with mobile communication devices
US9038886B2 (en) 2009-05-15 2015-05-26 Visa International Service Association Verification of portable consumer devices
MX2012005226A (es) * 2009-11-04 2012-08-15 Visa Int Service Ass Verificacion de dispositivos del consumidor portatiles para servicios 3-d seguros.
US9240005B2 (en) * 2009-11-06 2016-01-19 Mastercard International, Incorporated Methods for risk management in payment-enabled mobile device
WO2011136730A1 (en) * 2010-04-28 2011-11-03 Show & Pay Ab A method and an apparatus for improved electronic transaction security
SG10201506319WA (en) 2010-08-12 2015-09-29 Mastercard International Inc Multi-commerce channel wallet for authenticated transactions
US20120072346A1 (en) * 2010-09-16 2012-03-22 Yomir Sp System and method for securing and authenticating purchase transactions
WO2012122049A2 (en) 2011-03-04 2012-09-13 Visa International Service Association Integration of payment capability into secure elements of computers
WO2012142045A2 (en) 2011-04-11 2012-10-18 Visa International Service Association Multiple tokenization for authentication
US10282724B2 (en) 2012-03-06 2019-05-07 Visa International Service Association Security system incorporating mobile device
US9576279B2 (en) * 2012-06-05 2017-02-21 Autoscribe Corporation System and method for registering financial accounts
US10304047B2 (en) * 2012-12-07 2019-05-28 Visa International Service Association Token generating component
US20150039506A1 (en) * 2013-08-05 2015-02-05 Mastercard International Incorporated Methods and systems for providing 3-d secure service on-behalf-of merchants
GB2517723A (en) * 2013-08-29 2015-03-04 Belegin Ltd Token verification
US9471913B1 (en) * 2013-10-23 2016-10-18 Compass Plus US, Corp. Method and system for cardless processing of E-invoicing
CN103561115B (zh) * 2013-11-19 2016-09-28 北京奇虎科技有限公司 实时获取电子码的方法、开放平台及系统
CN111160902B (zh) * 2013-12-02 2023-06-23 万事达卡国际股份有限公司 用于向不带有安全元件的移动设备安全传送远程通知服务消息的方法及系统
FR3018378A1 (fr) * 2014-03-12 2015-09-11 Enrico Maim Systeme et procede transactionnels a architecture repartie fondees sur des transactions de transferts d'unites de compte entre adresses
US20150317630A1 (en) * 2014-04-30 2015-11-05 MasterCard Incorporated International Method and system for authentication token generation
US11282082B2 (en) 2014-07-30 2022-03-22 Visa International Service Association Authentication system with message conversion
US9906367B2 (en) * 2014-08-05 2018-02-27 Sap Se End-to-end tamper protection in presence of cloud integration
DE102015011013B4 (de) 2014-08-22 2023-05-04 Sigma Additive Solutions, Inc. Verfahren zur Überwachung von generativen Fertigungsprozessen
SG10201406521TA (en) * 2014-10-10 2016-05-30 Mastercard Asia Pacific Pte Ltd Methods and systems for secure online payment
US10891622B2 (en) * 2014-11-13 2021-01-12 Mastercard International Incorporated Providing online cardholder authentication services on-behalf-of issuers
US10786948B2 (en) 2014-11-18 2020-09-29 Sigma Labs, Inc. Multi-sensor quality inference and control for additive manufacturing processes
CN105825371A (zh) * 2015-01-07 2016-08-03 阿里巴巴集团控股有限公司 业务处理方法和装置
EP3245045A4 (en) 2015-01-13 2018-10-31 Sigma Labs, Inc. Material qualification system and methodology
EP3257192B1 (en) * 2015-02-14 2020-08-12 Valimail Inc. Secure and delegated distribution of private keys via domain name service
US9825946B2 (en) * 2015-08-27 2017-11-21 Mastercard International Incorporated Method and system for enhanced validation of cryptograms in cloud-based systems
GB201516617D0 (en) * 2015-09-18 2015-11-04 Mastercard International Inc Verification for payment transations
US10207489B2 (en) 2015-09-30 2019-02-19 Sigma Labs, Inc. Systems and methods for additive manufacturing operations
US20170109752A1 (en) * 2015-10-15 2017-04-20 Mastercard International Incorporated Utilizing enhanced cardholder authentication token
GB201601796D0 (en) * 2016-02-01 2016-03-16 Comcarde Ltd Payment handling apparatus and method
EP3433811A1 (en) * 2016-03-21 2019-01-30 Mastercard International Incorporated Method and system for recording point to point transaction processing
ES2835784T3 (es) * 2016-04-05 2021-06-23 Zamna Tech Limited Método y sistema para gestionar información personal dentro de sistemas informáticos independientes y redes digitales
WO2018013961A1 (en) 2016-07-15 2018-01-18 Cardinalcommerce Corporation Authentication to authorization bridge using enriched messages
US11080697B2 (en) 2017-10-05 2021-08-03 Mastercard International Incorporated Systems and methods for use in authenticating users in connection with network transactions
ES3057935T3 (en) 2018-04-05 2026-03-05 Nokia Technologies Oy Unified subscription identifier management in communication systems
WO2020068587A1 (en) * 2018-09-28 2020-04-02 Jpmorgan Chase Bank, N.A. Methods for improved security for personal identification number (pin) transactions and devices thereof
US11283621B1 (en) * 2019-11-13 2022-03-22 Worldpay, Llc Methods and systems for enhanced endpoint identity validation in electronic transactions
US11722500B2 (en) 2020-04-01 2023-08-08 Paypal, Inc. Secure identity verification marketplace using hashed data and forward hashing search functions
US12413971B2 (en) 2023-04-19 2025-09-09 Bank Of America Corporation System and method for electronic resource transfers in a distributed network via network-paired resource transfer devices

Family Cites Families (20)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6044205A (en) * 1996-02-29 2000-03-28 Intermind Corporation Communications system for transferring information between memories according to processes transferred with the information
US7133845B1 (en) * 1995-02-13 2006-11-07 Intertrust Technologies Corp. System and methods for secure transaction management and electronic rights protection
US6157721A (en) * 1996-08-12 2000-12-05 Intertrust Technologies Corp. Systems and methods using cryptography to protect secure computing environments
US5809144A (en) * 1995-08-24 1998-09-15 Carnegie Mellon University Method and apparatus for purchasing and delivering digital goods over a network
US5748740A (en) * 1995-09-29 1998-05-05 Dallas Semiconductor Corporation Method, apparatus, system and firmware for secure transactions
US6138107A (en) * 1996-01-04 2000-10-24 Netscape Communications Corporation Method and apparatus for providing electronic accounts over a public network
US6038551A (en) 1996-03-11 2000-03-14 Microsoft Corporation System and method for configuring and managing resources on a multi-purpose integrated circuit card using a personal computer
US6029150A (en) * 1996-10-04 2000-02-22 Certco, Llc Payment and transactions in electronic commerce system
US6590588B2 (en) * 1998-05-29 2003-07-08 Palm, Inc. Wireless, radio-frequency communications using a handheld computer
US7047416B2 (en) * 1998-11-09 2006-05-16 First Data Corporation Account-based digital signature (ABDS) system
FR2787273B1 (fr) 1998-12-14 2001-02-16 Sagem Procede de paiement securise
US6529885B1 (en) * 1999-03-18 2003-03-04 Oracle Corporation Methods and systems for carrying out directory-authenticated electronic transactions including contingency-dependent payments via secure electronic bank drafts
US7249097B2 (en) * 1999-06-18 2007-07-24 Echarge Corporation Method for ordering goods, services, and content over an internetwork using a virtual payment account
US20010032154A1 (en) * 1999-12-17 2001-10-18 Eric Schummer Internet communications and e-commerce platform
KR101015341B1 (ko) * 2000-04-24 2011-02-16 비자 인터내셔날 써비스 어쏘시에이션 온라인 지불인 인증 서비스
WO2002013444A2 (en) * 2000-08-04 2002-02-14 First Data Corporation Trusted authentication digital signature (tads) system
US6915279B2 (en) * 2001-03-09 2005-07-05 Mastercard International Incorporated System and method for conducting secure payment transactions
AU2002254513B8 (en) 2001-04-02 2008-02-21 Mastercard International Incorporated System and method for conducting secure payment transactions
US7707120B2 (en) * 2002-04-17 2010-04-27 Visa International Service Association Mobile account authentication service
US7349871B2 (en) * 2002-08-08 2008-03-25 Fujitsu Limited Methods for purchasing of goods and services

Also Published As

Publication number Publication date
BRPI0411286A (pt) 2006-08-01
JP2007517272A (ja) 2007-06-28
WO2005001635A2 (en) 2005-01-06
EP1636680A4 (en) 2013-03-13
KR20060070484A (ko) 2006-06-23
ES2581236T3 (es) 2016-09-02
HK1090143A1 (zh) 2006-12-15
US20070143227A1 (en) 2007-06-21
AU2004252882A1 (en) 2005-01-06
CN1926567A (zh) 2007-03-07
AU2011201884A1 (en) 2011-05-19
MXPA05013422A (es) 2006-03-17
WO2005001635A3 (en) 2006-10-12
EP1636680A2 (en) 2006-03-22
HUE029807T2 (en) 2017-03-28
AU2011201884B2 (en) 2011-09-08
CA2529011A1 (en) 2005-01-06
SI1636680T1 (sl) 2016-08-31
US7801825B2 (en) 2010-09-21
EP1636680B1 (en) 2016-04-13
BRPI0411286B1 (pt) 2016-12-20
CY1117808T1 (el) 2017-05-17
PT1636680T (pt) 2016-07-15
ZA200600211B (en) 2007-04-25
PL1636680T3 (pl) 2016-10-31

Similar Documents

Publication Publication Date Title
DK1636680T3 (da) Systemer og fremgangsmåder til gennemførelse af sikre betalingstransaktioner ved anvendelse af en formateret datastruktur
US7983987B2 (en) System and method for conducting secure payment transaction
US6915279B2 (en) System and method for conducting secure payment transactions
US6990470B2 (en) Method and system for conducting secure payments over a computer network
US20020152180A1 (en) System and method for performing secure remote real-time financial transactions over a public communications infrastructure with strong authentication
GB2549118A (en) Electronic payment system using identity-based public key cryptography
CN112074835B (zh) 执行安全操作的技术
AU781671B2 (en) An improved method and system for conducting secure payments over a computer network
AU2011239307B2 (en) Systems and methods for conducting secure payment transactions using a formatted data structure
AU2002254513B8 (en) System and method for conducting secure payment transactions
KR100458526B1 (ko) 유·무선 복합 전자 결제 방법 및 시스템
AU2002254513A1 (en) System and method for conducting secure payment transactions
HK1090143B (en) Systems and methods for conducting secure payment transactions using a formatted data structure
WO2024187045A2 (en) Trusted qr code generation for financial transactions
ZA200307558B (en) System and method for conducting secure payment transactions.