Methods and apparatus for a secure proximity integrated circuit card transactions

1. A method for securing a transaction utilizing a proximity integrated circuit (PIC) transaction device and a merchant system comprising:

determining a first merchant action analysis result, at the merchant system, based at least in part on one of an authentication of the PIC transaction device using Offline Data Authentication (ODA), a transaction process restriction, and a merchant risk management factor, the first merchant action analysis result indicating at least one of approving the transaction offline, approving the transaction online, and denying the transaction;

requesting, by the merchant system, an application cryptogram from the PIC transaction device, the application cryptogram being one of a cryptogram for approving the transaction offline, a cryptogram for approving the transaction online, and a cryptogram for denying the transaction based on the first merchant action analysis result;

determining a first card action analysis result, at the PIC transaction device, the first card action analysis result indicating at least one of approving the transaction offline, approving the transaction online, and denying the transaction;

transmitting, by the PIC transaction device, the first card action analysis result to the merchant system, wherein the first card action analysis result includes the requested application cryptogram;

requesting, by the merchant system, based on at least one of the first merchant action analysis result and the first card action analysis result, an authorization response from a PIC issuer system; and

if the merchant system receives the authorization response from the PIC issuer system, determining, at the merchant system, based at least in part on a predetermined rule and at least one of the first merchant action analysis result and the first card action analysis result, whether to approve the transaction offline or deny the transaction offline.

2. A method of claim 1 , wherein the authentication includes authenticating, offline, a portion of application data stored in the PIC.

3. A method of claim 1 , comprising authorizing the transaction online.

4. A method of claim 1 , comprising authorizing the transaction offline.

5. A method of claim 4 , comprising authenticating the PIC issuer system online.

6. A method of claim 5 , comprising authorizing the transaction by requesting application data from the PIC transaction device.

7. A method of claim 5 , comprising receiving a response to a request for PIC issuer system authentication online, using the response to the request for authorization of the PIC issuer system as an input to a second merchant action analysis result.

8. A system for securing a transaction comprising:

a proximity integrated circuit (PIC) transaction device, the PIC transaction device being operable to;

determine a first card action analysis result, the first card action analysis result indicating at least one of approving the transaction offline, approving the transaction online, and denying the transaction; and

transmit the first card action analysis result to a merchant system, wherein the first card action analysis result includes a requested application cryptogram; and

the merchant system in communication with the PIC transaction device, the merchant system being operable to;

determine a first merchant action analysis result based at least in part on one of an authentication of the PIC transaction device using Offline Data Authentication (ODA), a transaction process restriction, and a merchant risk management factor, the first merchant action analysis result indicating at least one of approving the transaction offline, approving the transaction online, and denying the transaction;

request the application cryptogram from the PIC transaction device, the application cryptogram being one of a cryptogram for approving the transaction offline, a cryptogram for approving the transaction online, and a cryptogram for denying the transaction based on the first merchant action analysis result;

request, based on at least one of the first merchant action analysis result and the first card action analysis result, an authorization response from a PIC issuer system; and

determine if the merchant system receives the authorization response from the PIC issuer system, whether to approve the transaction offline or deny the transaction offline based at least in part on a predetermined rule and at least one of the first merchant action analysis result and the first card action analysis result.

9. A system of claim 8 , wherein the PIC transaction device is operable to provide a plurality of application cryptograms, a plurality of PIC issuer-predetermined transaction processing rulesa PIC issuer-defined dataset for use in performing a PIC issuer-defined risk management analysis, and a plurality of transaction disposition cryptograms in response to a command dataset for use in communicating with the PIC transaction device.

10. A system of claim 8 , wherein the merchant system is operable to generate a merchant transaction disposition in accordance with a merchant risk management analysis performed by a merchant risk management application.

11. A system of claim 10 , wherein the merchant system is operable to authenticate the PIC transaction device in response to receipt of at least one of the requested application cryptogram, a PIC issuer-predetermined transaction processing rule, a PIC issuer-defined dataset for use in performing a PIC issuer-defined risk management analysis, a transaction disposition cryptogram, and a merchant risk management analysis.

12. A system of claim 11 , wherein the merchant system is operable to authorize the transaction in response to receipt of at least one of the requested application cryptogram, a PIC issuer-predetermined transaction processing rule, a PIC issuer-defined dataset for use in performing a PIC issuer-defined risk management analysis, a PIC issuer-provided authentication cryptogram, a transaction disposition cryptogram, and a merchant risk management analysis.

13. A computer-readable storage medium having stored thereon sequences of instructions, the sequences of instructions including instructions which when executed by a computer system cause the computer system to perform:

determining a first merchant action analysis result, at a merchant system, based at least in part on one of an authentication of a proximity integrated circuit (PIC) transaction device using Offline Data Authentication (ODA), a transaction process restriction, and a merchant risk management factor, the first merchant action analysis result indicating at least one of approving a transaction offline, approving the transaction online, and denying the transaction;

requesting, by the merchant system, an application cryptogram from the PIC transaction device, the application cryptogram being one of a cryptogram for approving the transaction offline, a cryptogram for approving the transaction online, and a cryptogram for denying the transaction based on the first merchant action analysis result;

determining a first card action analysis result, at the PIC transaction device, the first card action analysis result indicating at least one of approving the transaction offline, approving the transaction online, and denying the transaction;

transmitting, by the PIC transaction device, the first card action analysis result to the merchant system, wherein the first card action analysis result includes the requested application cryptogram;

requesting, by the merchant system, based on at least one of the first merchant action analysis result and the first card action analysis result, an authorization response from a PIC issuer system; and

if the merchant system receives a the authorization response from the PIC issuer system, determining, at the merchant system, based at least in part on a predetermined rule and at least one of the first merchant action analysis result and the first card action analysis result, whether to approve the transaction offline or deny the transaction off line.