Granted Patent B2

US 11,836,706 · App. 14/395,457 · Granted Dec 5, 2023

Inventors: Simon Law (Mississauga, CA); Michael Shvartsman (Miami, FL); Pierre Antoine Roberge (Toronto, CA); Peter Thien Duong (Mississauga, CA)

G06Q20/351G06Q20/02G06Q20/20G06Q20/229G06Q20/3278G06Q20/385G06Q20/40G06Q20/409G06Q20/4012

Abstract

Claims (43)

1. A method at a payment gateway server, the method comprising:

prior to executing transactions associated with a mobile device:

(i) obtaining and storing a personal identification number (PIN), and a set of card data defining a funding card,

(ii) generating and storing a card identifier corresponding to the funding card, and distinct from the set of card data and from a user identifier associated with the mobile device; and and

(iii) sending the card identifier to the mobile device;

receiving, from the mobile device, a transaction request containing the card identifier and excluding the set of card data;

responsive to receiving the transaction request, generating a first subset of virtual card data defining a virtual funding card, the first subset excluding a dynamic value corresponding to the virtual funding card;

sending the first subset of virtual card data to the mobile device;

responsive to sending the first subset of virtual card data, receiving, from a merchant system, (i) the first subset of virtual card data, and (ii) a second subset of virtual card data including a candidate dynamic value generated at the mobile device and presented to the merchant system with the first subset of virtual card data;

generating the dynamic value using the stored PIN;

determining whether the candidate dynamic value matches the dynamic value;

responsive to determining that the candidate dynamic value matches the dynamic value, retrieving the set of card data and sending, to an issuer of the funding card, a payment authorization request containing the set of card data.

2. The method of claim 1 , wherein the set of card data includes an expiry date of the funding card; and

wherein generating the first subset of virtual card data includes generating a virtual expiry date.

3. The method of claim 2 , wherein the virtual expiry date is the same as the expiry date of the funding card.

4. The method of claim 2 , further comprising:

generating and storing an internal virtual expiry date distinct from the virtual expiry date, wherein the first subset of the virtual card data sent to the mobile device excludes the internal expiry date;

responsive to receiving the first subset of virtual card data from the merchant system, verifying that a current date does not exceed the internal expiry date.

5. The method of claim 4 , wherein the virtual expiry date exceeds the internal virtual expiry date.

6. The method of claim 4 , wherein generating the internal virtual expiry date includes incrementing a date on which the first subset of virtual card data was generated by a predefined number of days.

7. The method of claim 1 , further comprising encrypting the first subset of virtual card data prior to sending the first subset of virtual card data to the mobile device.

8. A payment gateway server, comprising:

one or more data processing apparatus configured to:

prior to executing transactions ssociated with a mobile device:

(i) obtain and storing a personal identification number (PIN), and a set of card data defining a funding card,

(ii) generate and storing a card identifier corresponding to the funding card, and distinct from the set of card data and from a user identifier associated with the mobile device; and

(iii) send the card identifier to the mobile device;

receive, from the mobile device, a transaction request containing the card identifier and excluding the set of card data;

responsive to receiving the transaction request, generate a first subset of virtual card data defining a virtual funding card, the first subset excluding a dynamic value corresponding to the virtual funding card;

send the first subset of virtual card data to the mobile device;

responsive to sending the first subset of virtual card data, receive, from a merchant system, (i) the first subset of virtual card data, and (ii) a second subset of virtual card data including a candidate dynamic value generated at the mobile device and presented to the merchant system with the first subset of virtual card data;

generate the dynamic value using the stored PIN;

determine whether the candidate dynamic value matches the dynamic value;

responsive to determining that the candidate dynamic value matches the dynamic value, retrieve the set of card data and send, to an issuer of the funding card, a payment authorization request containing the set of card data.

9. The payment gateway server of claim 8 , wherein the set of card data includes an expiry date of the funding card; and

wherein generating the first subset of virtual card data includes generating a virtual expiry date.

10. The payment gateway server of claim 9 , wherein the virtual expiry date is the same as the expiry date of the funding card.

11. The payment gateway server of claim 9 , further comprising:

generating and storing an internal virtual expiry date distinct from the virtual expiry date, wherein the first subset of the virtual card data sent to the mobile device excludes the internal expiry date;

responsive to receiving the first subset of virtual card data from the merchant system, verifying that a current date does not exceed the internal expiry date.

12. The payment gateway server of claim 11 , wherein the virtual expiry date exceeds the internal virtual expiry date.

13. The payment gateway server of claim 11 , wherein generating the internal virtual expiry date includes incrementing a date on which the first subset of virtual card data was generated by a predefined number of days.

14. The payment gateway server of claim 8 , further comprising encrypting the first subset of virtual card data prior to sending the first subset of virtual card data to the mobile device.

Assignments (9)

Continuity (4)