System and method for generating a dynamic card value
A method and system is provided for generating a dynamic card value (DCV) from a mobile user device for use in a transaction between a user cardholder and a transaction provider. The DCV may be configured for use as a card verification value (CVV), also known as a card security code (CSC), a primary account number (PAN), or a portion of a PAN. The DCV may be generated using a DCV generator which may include an algorithm and a DCV generation key. The DCV generation key may be camouflaged. Obtaining a DCV from the user device may require inputting a PIN, a device identifier, a challenge or transaction information. The DCV may be used for any transaction requiring the input of a user identification number and a verification value, including, credit card transactions, debit card transactions, online or telephonic transactions.
1. A method for generating a dynamic card value (DCV) configured for use in a transaction between a user and a transaction provider, comprising:
generating a DCV generation key using a provisioning server, wherein the DCV generation key is configured to generate the DCV;
camouflaging the DCV generation key using the provisioning server;
providing the camouflaged DCV generation key via the provisioning server to a user device;
generating the DCV using the camouflaged DCV generation key;
wherein the DCV is configured for input into a transaction interface configured to verify the DCV as a verified DCV;
inputting the DCV into the transaction interface; and
using the verified DCV as a user DCV for the transaction.
2. The method of claim 1 , wherein the DCV is configured for input into the transaction interface as one of a primary account number (PAN), account number, partial PAN and a portion of an account number.
3. The method of claim 1 , wherein the DCV is configured for input into the transaction interface as one of a character string of one or more alphanumeric or special characters, a datum or an electronic signal transmittable from the user device, a datum or an electronic signal generated by the user device, and a human-readable output.
4. The method of claim 1 , further comprising:
inputting a PIN into the user device prior to generating the DCV.
5. The method of claim 1 , further comprising:
generating a device identifier by the user device;
wherein the device identifier is unique to the user device; and
providing the device identifier as an input to generating the DCV.
6. The method of claim 4 , wherein the PIN is configured as an alarm code, the method further comprising:
inputting the alarm code as the PIN; and
responding to the inputting of the alarm code by at least one of:
generating an invalid DCV; and
terminating verification of the DCV by the transaction system.
7. The method of claim 1 , wherein generating the DCV from the user device further includes:
providing a DCV generator to the user device; and
generating the DCV using the DCV generator;
wherein the DCV generator includes a DCV generating algorithm.
8. The method of claim 5 , further comprising:
identifying the user device as one of an authorized device and a non-authorized device using the device identifier;
generating an alert DCV when the user device is identified as the non-authorized device; and
wherein the alert DCV is configured to be recognizable as an alert code by the transaction system.
9. The method of claim 1 ,
wherein the DCV generation key is camouflaged using cryptographic camouflage.
10. The method of claim 8 , wherein the DCV generation key is one of a symmetric key, a Data Encryption Standard (DES) key, an Advanced Encryption Standard (AES) key, a non-symmetric key, a secret, a secret byte array, a Card Verification Key (CVK), Unique DEA Key A (UDKA), a Unique DEA Key B (UDKB), a seed or an indexed key list.
11. The method of claim 1 , wherein generating the DCV from the user device further includes inputting a challenge into the user device.
12. The method of claim 1 , wherein:
the DCV is configured as an authentication value for a non-monetary transaction; and
the transaction is configured as a non-monetary transaction.
13. The method of claim 1 , wherein the transaction interface is one of an online interface, a secure access terminal, a telephone, a fax machine, a printed order form, an online order form, an online shopping cart, an automatic teller machine (ATM) terminal, a point of sale (POS) terminal, a transponder, a receptor, a scanner, a receiver, and a combination thereof.
14. The method of claim 1 , wherein the user device includes a telephone.
15. A system for generating a dynamic card value (DCV) configured for use in a transaction between a user and a transaction provider, comprising:
a provisioning server to perform a method comprising:
generating a DCV generation key using the provisioning server, wherein the DCV generation key is configured to generate the DCV;
camouflaging the DCV generation key using the provisioning server;
providing the camouflaged DCV generation key via the provisioning server to a user device;
generating the DCV using the camouflaged DCV generation key;
wherein the DCV is configured for input into a transaction interface configured to verify the DCV as a verified DCV;
inputting the DCV into the transaction interface; and
using the verified DCV as a user DCV for the transaction.
16. The system of claim 15 , wherein the DCV is configured for input into the transaction interface as one of a primary account number (PAN), account number, partial PAN and a portion of an account number.
17. The system of claim 15 , wherein the DCV is configured for input into the transaction interface as one of a character string of one or more alphanumeric or special characters, a datum or an electronic signal transmittable from the user device, a datum or an electronic signal generated by the user device, and a human-readable output.
18. The system of claim 15 , wherein the provider server is configured to:
provide a DCV generator including a DCV generating algorithm to the user device; and
wherein the DCV generator is configured to generate the DCV.
19. A tangible, non-transitory computer-readable medium having instructions stored thereon that when executed by a processor perform a method for generating a dynamic card value (DCV) configured for use in a transaction between a user and a transaction provider, the method comprising:
generating a DCV generation key using a provisioning server, wherein the DCV generation key is configured to generate the DCV;
camouflaging the DCV generation key using the provisioning server;
providing the camouflaged DCV generation key via the provisioning server to a user device;
generating the DCV using the camouflaged DCV generation key;
wherein the DCV is configured for input into a transaction interface configured to verify the DCV as a verified DCV;
inputting the DCV into the transaction interface; and
using the verified DCV as a user DCV for the transaction.
20. The tangible, non-transitory computer-readable medium of claim 19 , wherein the DCV is configured for input into the transaction interface as one of a character string of one or more alphanumeric or special characters, a datum or an electronic signal transmittable from the user device, a datum or an electronic signal generated by the user device, and a human-readable output.