Integration of verification tokens with portable computing devices
Apparatuses, methods, and systems pertaining to the verification of portable consumer devices are disclosed. In one implementation, a verification token is communicatively coupled to a computer by a USB connection so as to use the computer's networking facilities. The verification token reads identification information from a user's portable consumer device (e.g., credit card) and sends the information to a validation entry over a communications network using the computer's networking facilities. The validation entity applies one or more validation tests to the information that it receives from the verification token. If a selected number of tests are passed, the validation entity sends a device verification value to the verification token, and optionally to a payment processing network. The verification token may enter the device verification value into a CVV field of a web page appearing on the computer's display, or may display the value to the user using the computer's display.
1. A verification token comprising:
an interface;
a computer-readable medium;
a data processor electrically coupled to the interface, and the computer-readable medium;
code embodied on the computer-readable medium that directs the data processor to transmit at least a portion of identification information to an entity that can provide a dynamic PAN;
code embodied on the computer-readable medium that directs the data processor to receive, after transmitting said identification information, the dynamic PAN from the entity; and
code embodied on the computer-readable medium that directs the data processor to locate a browser web page on the computer that has a form field, and to enter the dynamic PAN received from the entity in the form field,
wherein the verification token is configured to be located within a housing of the computer or a peripheral device electrically coupled to the computer, wherein the computer and the peripheral device comprise data processors that are separate from the data processor in the verification token.
2. The verification token of claim 1 further comprising:
a serial number and an encryption key, and wherein the verification token is configured to transmit the serial number and a message encrypted by the encryption key to the entity, the serial number and the encryption key being uniquely assigned to the verification token.
3. The verification token of claim 1 wherein the interface is a USB connector.
4. The verification token of claim 1 wherein the code that directs the data processor to receive the dynamic PAN from the entity further directs the data processor to receive address information from the entity; and wherein the verification token further comprises code embodied on the computer-readable medium that directs the data processor to locate a browser web page on the computer that has a plurality of form fields for address information, and to fill said fields with respective portions of the address information received from the entity.
5. The verification token of claim 1 further comprising: code embodied on the computer-readable medium that directs the data processor to prompt a user to enter a password on a keyboard of the computer, to read a password entered by the user, and to compare the entered password against a stored password embodied on the computer-readable medium.
6. The verification token of claim 1 further comprising:
code embodied on the computer-readable medium that directs the data processor to display the dynamic PAN received from the entity to the user on a display device of the computer.
7. The verification token of claim 1 further comprising:
a portable payment device reader coupled to the data processor.
8. The verification token of claim 1 further comprising a security module coupled to the data processor.
9. A peripheral device comprising the verification token of claim 1 .
10. A computer comprising the verification token of claim 1 .
11. A method comprising:
transmitting, by the data processor in a verification token, at least a portion of identification information to an entity that can provide a dynamic PAN, wherein the verification token is configured to be located within a housing of the computer or a peripheral device electrically coupled to the computer, wherein the computer and the peripheral device comprise data processors that are separate from the data processor in the verification token;
after transmitting said identification information, receiving the dynamic PAN from the entity;
locating a browser web page on the computer that has a field for the dynamic PAN; and
entering the dynamic PAN received from the entity in the form field.
12. The method of claim 11 further comprising:
transmitting a serial number and a message encrypted by an encryption key to the entity, the serial number and the encryption key being uniquely assigned to the verification token.
13. The method of claim 11 wherein the interface is a USB connector.
14. The method of claim 11 wherein receiving the dynamic PAN from the entity further comprises receiving address information from the entity, and wherein the method further comprises:
locating a browser web page on the computer that has a plurality of form fields for address information, and to fill said fields with respective portions of the address information received from the entity.
15. The method of claim 11 further comprising:
prompting a user to enter a password on a keyboard of the computer, to read a password entered by the user, and to compare the entered password against a stored password.
16. The method of claim 11 further comprising:
displaying the dynamic PAN received from the entity to the user on a display device of the computer.
17. The method of claim 11 wherein the verification token further comprises a portable payment device reader coupled to the data processor.
18. The method of claim 11 wherein the verification token further comprises further comprising a security module coupled to the data processor.
19. The method of claim 11 wherein the method is performed by the computer.
20. The method of claim 11 wherein the method is performed by the peripheral device.