Granted Patent B2

US 12,499,445 · App. 18/808,594 · Granted Dec 16, 2025

Inventors: Mehdi Collinge (Mont-Sainte-Aldegonde, BE); Patrik Smets (Nijlen, BE); Axel Emile Jean Charles Cateland (Scarsdale, NY)

Assignee: MASTERCARD INTERNATIONAL INCORPORATED

G06Q20/4012G06Q20/3821G06Q20/3829H04L63/0428H04L63/06H04L63/062H04W12/041H04L63/083H04L2463/102

Abstract

Claims (46)

1 . A method for generating payment credentials in a payment transaction, comprising:

generating, by a processor of the processing server in the transaction system, a first session key based on a card master key associated with a transaction account;

receiving, by an input device interfaced with a mobile device in the transaction system, a personal identification number (PIN) input by a user;

transmitting, by the mobile device in the transaction system, the PIN to the processing server;

receiving, by a receiver of the processing server, the PIN from the mobile device; generating, by the processor of the processing server, a second session key using a single use key and the PIN;

initiating, by the mobile device in the transaction system, a transaction with a point of sale via near field communication; and

in response to the mobile device initiating the transaction, initiating, by the processor of the processing server, generation of two application cryptograms, wherein said initiating generation of two application cryptograms includes:

generating, by the processor of the processing server, a first application cryptogram based on the first session key; and

generating, by the processor of the processing server, a second application cryptogram based on the second session key; and

transmitting, by a transmitter of the processing server, via the point of sale, at least the first application cryptogram and second application cryptogram to a financial institution associated with the transaction account for use in the payment transaction.

2 . The method of claim 1 , further comprising:

storing, in a memory, a transaction account sequence number associated with the transaction account, wherein

the first session key is further based on the stored transaction account sequence number.

3 . The method of claim 1 , further comprising:

storing, in a memory, the first card master key and a second card master key associated with the transaction account.

4 . The method of claim 1 , further comprising:

receiving, by the receiver, a first corresponding application cryptogram and a second corresponding application cryptogram;

validating, by the processor, (i) the received first corresponding application cryptogram based on the generated first application cryptogram, and (ii) the received second corresponding application cryptogram based on the generated second application cryptogram; and

transmitting, by the transmitter, a result of the validation for use in the payment transaction.

5 . The method of claim 4 , wherein the first corresponding application cryptogram and the second corresponding application cryptogram are received from the point of sale device.

6 . The method of claim 4 , wherein the result of the validation is transmitted to a financial institution associated with the transaction account.

7 . A transaction system for generating payment credentials in a payment transaction, comprising:

a processing server including a receiver, a processor, and a transmitter; and

a mobile device comprising a mobile device processor, wherein

the processor of the processing server is configured to generate a first session key based on a card master key associated with a transaction account,

the mobile device processor is configured to

receive, via an input device interfaced therewith, a personal identification number (PIN) input by a user, and

transmit the PIN to the processing server,

the processor of the processing server is further configured to:

receive, using the receiver, the PIN from the mobile device, and

generate a second session key using a single use key and the PIN,

the mobile device processor is further configured to initiate a transaction with a point of sale via near field communication, and

the processor of the processing server is configured to:

initiate generation of two application cryptograms, in response to the mobile device initiating the transaction by generating a first application cryptogram based on the first session key and generating a second application cryptogram based on the second session key and

transmit, using the transmitter and via the point of sale, at least the first application cryptogram and second application cryptogram to a financial institution associated with the transaction account for use in the payment transaction.

8 . The system of claim 7 , wherein

a memory, of the processing server, is further configured to store a transaction account sequence number associated with the transaction account, and

the first session key is further based on the stored transaction account sequence number.

9 . The system of claim 7 , wherein

the memory, of the processing server, is further configured to store the first card master key and a second card master key associated with the transaction account.

10 . The system of claim 7 , wherein the processor of the processing server is further configured to:

receive, using the receiver, a first corresponding application cryptogram and a second corresponding application cryptogram,

validate (i) the received first corresponding application cryptogram based on the generated first application cryptogram, and (ii) the received second corresponding application cryptogram based on the generated second application cryptogram, and

transmit, using the transmitter, a result of the validation for use in the payment transaction.

11 . The system of claim 10 , wherein the first corresponding application cryptogram and the second corresponding application cryptogram are received from the point of sale device.

12 . The system of claim 10 , wherein the result of the validation is transmitted to a financial institution associated with the transaction account.

Assignments (1)

Continuity (11)

References Cited (192)