Processing of financial transactions using debit networks
View Patent ↗Methods and systems are disclosed for executing financial transactions between customers and merchants. An identifier of a financial account is received from the customer at a merchant system. A one-time password is also received from the customer at the merchant system, with the customer having been provided with the one-time password by a mobile electronic device or contactless presentation instrument. A cryptogram is generated to include the identifier of the financial account encrypted using the one-time password. An authorization request is formulated at the merchant system. The authorization request includes the cryptogram and transaction information describing at least a portion of the financial transaction. The authorization request is transmitted from the merchant system to an authorization processor for authorization of the financial transaction.
1. A method of executing a financial transaction between a customer and a merchant, the method comprising:
receiving, by a merchant system comprising a merchant point-of-sale device, an identifier of a financial account from a radio frequency identification chip, wherein the radio frequency identification chip is affixed to a customer's contactless presentation instrument;
receiving, by the merchant system comprising the merchant point-of-sale device, a one-time password from the customer, wherein the customer is provided with the one-time password by a cellphone that loads and displays the one-time password to the customer, in order to conduct a financial transaction;
generating, by the merchant system, a cryptogram comprising the identifier of the financial account encrypted using the one-time password;
formulating, by the merchant system, an authorization request, the authorization request comprising the cryptogram and transaction information describing at least a portion of the financial transaction, wherein:
the merchant system includes the merchant point-of-sale device; and
within the authorization request, the identifier of the financial account is present as part of the cryptogram;
transmitting, by the merchant system, the authorization request to an authorization processor for authorization of the financial transaction.
2. The method recited in claim 1 wherein the identifier comprises an account number of the financial account.
3. The method recited in claim 1 wherein the identifier comprises an identification number extracted from a presentation instrument, the method further comprising translating the identification number to an account number of the financial account.
4. The method recited in claim 1 wherein the one-time password comprises a two-factor one-time password.
5. The method recited in claim 1 wherein the one-time password is a second one-time password provided to the customer by the mobile electronic device or contactless presentation instrument after passage of an expiry time after a first one-time password is provided to the customer by the mobile electronic device or contactless presentation instrument.
6. The method recited in claim 1 wherein the merchant system comprises an Internet web server.
7. The method recited in claim 1 wherein the merchant system comprises a merchant point-of-sale device.
8. The method recited in claim 1 further comprising receiving a personal identification number from the customer at the merchant system, wherein the authorization request further comprises the personal identification number.
9. The method recited in claim 1 wherein the transaction information comprises data selected from the group consisting of a total cost for the financial transaction, a location, a point-of-sale-device identifier, a point-of-sale-device sequence number, a date, and a time.
10. The method recited in claim 1 wherein the financial account comprises an account selected from the group consisting of a debit account, a credit account, and a stored-value account.
11. A non-transitory computer-readable storage medium having a computer-readable program embodied therein for directing operation of a computer system, wherein the computer-readable program comprises instructions, which when executed cause the computer system to:
receive an identifier of a financial account from the customer at a point-of-sale device to conduct a debit or credit transaction, wherein the point-of-sale device is part of the merchant system, the identifier is stored on a contactless presentation instrument and the identifier is transmitted to the point-of-sale device by a radio frequency identification chip fixed to the contactless presentation instrument;
receive a one-time password from the customer at the point-of-sale device, wherein the customer is provided with the one-time password by a cellphone;
generate a cryptogram comprising the identifier of the financial account encrypted using the one-time password;
formulate an authorization request at the merchant system, the authorization request comprising the cryptogram and transaction information describing at least a portion of the financial transaction, wherein within the authorization request, the identifier of the financial account is present as part of the cryptogram; and
transmit the authorization request from the merchant system to an authorization processor for authorization of the financial transaction.
12. The system recited in claim 11 wherein the identifier comprises an account number of the financial account.
13. The system recited in claim 11 wherein;
the identifier comprises an identification number extracted from a presentation instrument; and
the computer-readable program further includes instructions for translating the identification number to an account number of the financial account.
14. The system recited in claim 11 wherein the one-time password comprises a two-factor one-time password.
15. The system recited in claim 11 wherein the one-time password is a second one-time password provided to the customer by the mobile electronic device or contactless presentation instrument after passage of an expiry time after a first one-time password is provided to the customer by the mobile electronic device or contactless presentation instrument.
16. The system recited in claim 11 wherein the merchant system comprises an Internet web server.
17. The system recited in claim 11 wherein the merchant system comprises a merchant point-of-sale device.
18. The system recited in claim 11 wherein:
the computer-readable program further includes instructions for receiving a personal identification number from the customer at the merchant system; and
the authorization request further comprises the personal identification number.
19. The system recited in claim 11 wherein the transaction information comprises data selected from the group consisting of a total cost for the financial transaction, a location, a point-of-sale-device identifier, a point-of-sale-device sequence number, a date, and a time.
20. The system recited in claim 11 wherein cryptographic keys used to generate the one-time password on the presentation instrument are generated on the presentation instrument and transmitted to an authentication processor or are generated on the authentication processor and transmitted to the presentation instrument.
21. The system recited in claim 11 wherein the debit presentation instrument does not divulge the one-time password until the merchant system has been validated using a mutual authentication scheme.
22. The system recited in claim 11 wherein the financial account comprises an account selected from the group consisting of a debit account, a credit account, and a stored-value account.