Onetime passwords for smart chip cards
View Patent ↗A financial transaction card is provided according to various embodiments described herein. The financial transaction card includes a card body with at least a front surface and a back surface. The financial transaction card may also include a near field communications transponder and/or a magnetic stripe, as well as a digital display configured to display alphanumeric characters on the front surface of the card body. The financial transaction card may also include a processor that is communicatively coupled with the near field communications transponder or magnetic stripe and the digital display. The processor may be configured to calculate one-time passwords and communicate the one-time passwords to both the near filed communications transponder or magnetic stripe and the digital display.
1. A onetime password server comprising:
an input-output interface;
memory; and a
a processor coupled with the input-output interface and the memory, wherein the processor includes instructions for
generating a first onetime password;
associating the first onetime password with a first account number;
looking up a mobile device phone number or identification number associated in the memory with the first account number;
transmitting the first onetime password to a mobile device through the input-output interface using the mobile device phone number or identification number;
receiving a second onetime password and a second account number from a point of sale device via the input-output interface;
determining whether the second onetime password and the first onetime password match;
in the event that the second onetime password and the first onetime password match, authenticating a transaction for use with the second account number; and
in the event that the second onetime password and the first onetime password do not match, denying authentication of a transaction for use with the second account number.
2. The onetime password server according to claim 1 wherein the processor further comprises instructions for storing the first onetime password in a relationship with the first account number in the memory.
3. The onetime password server according to claim 2 wherein the processor further comprises instructions for retrieving from the memory the first onetime password using the second account number.
4. The onetime password server according to claim 1 wherein the processor further comprises instructions for looking up a mobile device address associated in the memory with the first account number, wherein the onetime password is transmitted to the mobile device address associated with the account number.
5. The onetime password server according to claim 1 wherein the second onetime password is received from a point of sale device via the input-output interface.
6. The onetime password server according to claim 1 wherein the second onetime password is received from a financial institution via the input-output interface.
7. The onetime password server according to claim 1 wherein the second onetime password and the second account number is received from a financial institution via the input-output interface.
8. A method occurring at a one time password server that includes a processor and memory, the method comprising:
generating a first onetime password;
storing the first onetime passwords in association with the account number in memory;
looking up a mobile device phone number or identification number associated in the memory with the first account number;
transmitting the first onetime password to a mobile device using the mobile device phone number or identification number;
receiving a second onetime password and a second account number from a point of sale device;
retrieving a stored onetime password from memory associated with the second account number;
determining whether the second onetime password and the stored onetime password match;
in the event that the second onetime password and the stored onetime password match, authenticating a transaction for use with the second account number; and
in the event that the second onetime password and the stored onetime password do not match, denying authentication a transaction for use with the second account number.