Granted Patent B2

US 12,646,053 · App. 14/869,186 · Granted Jun 2, 2026

Inventors: Edison U. Ortiz (Orlando, FL); Terry W. Lee (Toronto, CA); Linda Mantia (Toronto, CA); Pawan Khandavilli (Toronto, CA)

Assignee: ROYAL BANK OF CANADA

G06Q20/382G06Q20/12G06Q20/322G06Q20/3221G06Q20/3227G06Q20/3672G06Q20/385G06Q20/40G06Q20/3278G06Q20/36G06Q20/367G06Q20/3823

Abstract

Claims (49)

1 . A system comprising:

a user communication device for securing communication of sensitive payloads using cryptogram data structures for exchanging secured transaction data for an enhanced security transaction, the enhanced security requiring data structure cryptogram validation to emulate a physical card present enhanced security requirement, during a duration of time in which electronic communications are available between the user communication device and a point of sale terminal but electronic communications are not available between the user communication device and a backend issuer terminal, the user communication device comprising:

at least one user communication device user input interface;

at least one user communication device graphical user interface (GUI);

at least one user communication device secure element (SE) comprising a plurality of payment protocols and applications;

at least one user communication device network communication system;

at least one user communication device data processor; and

at least one user communication device memory, the at least one user communication device memory comprising stored user communication device data representing at least:

at least one secure identification authorization token, the at least one secure identification authorization token comprising a transaction request data set including at least one of:

a user identifier associated with an authorized user of the user communication device;

one or more pseudo-unpredictable identifiers generated by an issuer backend computing system generated in advance of a transaction, wherein the one or more pseudo-unpredictable identifiers are configured as multi-use tokens which include fields indicating a total authorized amount, the one or more pseudo-unpredictable identifiers being usable for a plurality of transactions until the total authorized amount is consumed;

an account identifier associated with at least one authorized account of the authorized user of the user communication device; and

a device identifier associated with the user communication device; and

one or more sets of user communication device machine-interpretable instructions that when executed by the at least one user communication device data processor perform the steps of:

receiving, from a point of sale (POS) system of a merchant, transaction data for the transaction with the merchant, the transaction data including a purchase amount for the transaction and a pseudo-unpredictable number for validating a source of the transaction;

receiving, from the at least one user communication device user input interface, signals representing a user input for authorizing the transaction during the duration of time in which the electronic communications are available between the user communication device and the POS system, but the electronic communications are not available between the user communication device and a backend issuer terminal;

in response to receiving the user input:

configuring the at least one secure identification authorization token to include the transaction data from the merchant, a pseudo-random identifier of the one or more pseudo-unpredictable identifiers, and the pseudo-unpredictable number for validating the source of the transaction; and

receiving, via the at least one network communication system, a secure payment token from the transaction processing server, the secure payment token comprising payment transaction data representing:

a user-adjustable authorized payment amount value; and

a financial service provider identifier associated with the user-adjustable authorized payment amount value;

wherein the payment transaction data is randomized through the pseudo-unpredictable number;

adjusting, at the user communication device, the user-adjustable authorized payment amount value in the secure payment token based on the purchase amount;

converting, using an application from a plurality of applications, a secure cryptogram into 2D graphical representation;

displaying, on the user communication device GUI, the 2D graphical representation of the secure cryptogram; and

receiving a confirmation message that the transaction is authorized after the verification of the secure cryptogram data; and

the user communication device SE further comprising:

a user communication device SE processor; and

a user communication device SE memory storing user communication device SE instruction that when executed by the user communication device SE processor perform operations comprising:

selecting a payment protocol from the plurality payment protocols;

generating, using the selected payment protocol, the secure cryptogram based on the secure identification authorization token and secure payment token;

communicating, from the SE to the processor of the user communication device, the secure cryptogram; and

the system further comprising the point of sale (POS) system of the merchant comprising:

a POS system scanner;

a POS system graphical user interface (GUI);

a POS system processor; and

a POS system memory storing POS system instruction that when executed by the POS system processor perform operations comprising:

displaying, on the POS system GUI, a request for payment;

scanning, using the POS system scanner, the 2D graphical representation of the secure cryptogram displayed on the GUI of the user communication device;

buffering and forwarding, using the at least one network communication system through a secure pipeline established by the POS system to a transaction processing server, the 2D graphical representation of the secure cryptogram for authorization.

2 . The system of claim 1 , wherein:

the at least one data processor determines that the transaction data satisfies one or more transaction authorization criteria represented by the at least one user-adjustable authorized payment amount value.

3 . The system of claim 1 , wherein the user-adjustable authorized payment amount value represents at least a per-transaction value limit for the secure payment token.

4 . The system of claim 1 , wherein the at least one user-adjustable authorized payment amount value represents at least a cumulative transaction value limit for the payment token.

5 . The system of claim 1 , wherein the cumulative transaction value limit refers to a time period.

6 . The system of claim 1 , wherein the at least one user-adjustable authorized payment amount value represents at least a transaction frequency limit for the payment token.

7 . The system of claim 1 , wherein the at least one user communication device memory further comprises stored user communication device data representing at least one private key, the at least one private key for encrypting and decrypting the at least one secure payment token in accordance with a private key encryption protocol.

8 . The system of claim 1 , wherein the at least one user communication device data processor is adapted, by execution of the one or more sets of stored, machine-interpretable instructions, to:

receive the instruction from a remote communication device using the network communication system.

Assignments (2)

Continuity (17)

References Cited (381)