IP Library › Granted Patent US 8,930,273

Granted Patent B2

US 8,930,273 · App. 14/075,317 · Granted Jan 6, 2015

System and method for generating a dynamic card value

Inventor: Rammohan Varadarajan (Cupertino, CA)

Assignee: CA, Inc.

View Patent ↗

Loading inventors, assignments & file history…

Monitor This Case

Get email alerts when status or documents change.

Order Certified Copies

Most orders are placed with the USPTO same day — all within 24 business hours.

Order via The Patent Place →

Pre-filled with this patent's details

Quick Facts

Patent No.: US 8,930,273
App. No.: 14/075,317
Granted: Jan 6, 2015
Kind: B2

External Links

USPTO Patent Center↗ Full Patent PDF↗

Abstract

A method and system is provided for generating a dynamic card value (DCV) from a mobile user device for use in a transaction between a user cardholder and a transaction provider. The DCV may be configured for use as a card verification value (CVV), also known as a card security code (CSC), a primary account number (PAN), or a portion of a PAN. The DCV may be generated using a DCV generator which may include an algorithm and a DCV generation key. The DCV generation key may be camouflaged. Obtaining a DCV from the user device may require inputting a PIN, a device identifier, a challenge or transaction information. The DCV may be used for any transaction requiring the input of a user identification number and a verification value, including, credit card transactions, debit card transactions, online or telephonic transactions.

Claims (72)

1. A system for generating a dynamic card value (DCV) configured for use in a transaction between a user and a transaction provider, the system comprising:

a first user device including a DCV application;

wherein:

the first user device is configured to selectively communicate with a provisioning server;

the provisioning server is adapted to configure the DCV application for the first user device;

configuring the DCV application for the first user device includes:

generating a first device identifier using the DCV application;

wherein the first device identifier is defined by and unique to the first user device;

providing the first device identifier to the provisioning server via the first user device;

the DCV application includes a first DCV generator configured to generate a first provider DCV using the first device identifier;

the provider DCV is configured for use with a first transaction provider;

the first DCV generator is configured using the first device identifier; and

the DCV application receives the first DCV generator from the provisioning server via the first user device.

2. The system of claim 1 , wherein the first provider DCV is configured as one of a Card Verification Code (CVC), Card Verification Value (CVV, CVV2 or CV2), Card Security Code (CSC), primary account number (PAN), account number, partial PAN and a portion of an account number.

3. The system of claim 1 , wherein the DCV application includes a second DCV generator configured to generate a second provider DCV;

wherein the second provider DCV is configured for use with a second transaction provider; and

wherein the DCV application receives the second DCV generator from the provisioning server via the first user device.

4. The system of claim 1 , wherein the DCV application is configured to:

automatically generate the first device identifier each time the first provider DCV is generated; and

automatically input the automatically generated first device identifier to the first provider DCV generator to generate the first provider DCV.

5. The system of claim 1 , wherein the DCV application includes a DCV generation key configured by the provisioning server to generate the DCV.

6. The system of claim 1 , wherein the DCV application configured for the first user device is further configured to:

automatically generate a hosting device identifier defined by and unique to a hosting user device;

wherein the hosting user device is a user device upon which the DCV application configured for the first user device is being executed;

identify the hosting user device as one of the first user device and a non-authorized device using the hosting device identifier; and

automatically generate an alert DCV when the user device is identified by the DCV application as the non-authorized device.

7. A method for generating a dynamic card value (DCV) configured for use in a transaction between a user and a transaction provider, the method comprising:

configuring a DCV application on a first user device, wherein configuring the DCV application on the first user device includes:

generating a first device identifier using the DCV application;

wherein the first device identifier is defined by and unique to the first user device; and

providing the first device identifier to a provisioning server via the first user device;

wherein the provisioning server is adapted to configure the DCV application for the first user device using the first device identifier;

receiving a first DCV generator from the provisioning server via the first user device;

wherein the first DCV generator is configured to generate a first provider DCV using the first device identifier; and

wherein the first provider DCV is configured for use with a first transaction provider.

8. The method of claim 7 , wherein the first provider DCV is configured as one of a Card Verification Code (CVC), Card Verification Value (CVV, CVV2 or CV2), Card Security Code (CSC), primary account number (PAN), account number, partial PAN and a portion of an account number.

9. The method of claim 7 , further comprising:

receiving a second DCV generator to the DCV application from the provisioning server via the first user device;

wherein the second DCV generator is configured to generate a second DCV; and

wherein the second provider DCV is configured for use with a second transaction provider.

10. The method of claim 7 , further comprising:

automatically generating the first device identifier each time the first provider DCV is generated; and

automatically inputting the automatically generated first device identifier to the first provider DCV generator to generate the first provider DCV.

11. The method of claim 7 , wherein the DCV application includes a DCV generation key configured by the provisioning server to generate the DCV.

12. The method of claim 7 , further comprising:

automatically generating a hosting device identifier defined by and unique to a hosting user device using the DCV application;

wherein the hosting user device is a user device upon which the DCV application configured for the first user device is being executed;

identifying the hosting user device as one of the first user device and a non-authorized device using the hosting device identifier; and

automatically generating an alert DCV when the user device is identified by the DCV application as the non-authorized device.

13. A tangible, non-transitory computer-readable medium having instructions stored thereon that when executed by a processor perform a method for generating a dynamic card value (DCV) configured for use in a transaction between a user and a transaction provider, the method comprising: