Granted Patent B2

US 12,373,809 · App. 18/914,532 · Granted Jul 29, 2025

Inventors: Jonathan Wall (San Francisco, CA); Ross Favero (Berkeley, CA); Eric Nelson Glass (San Francisco, CA)

Assignee: STRIPE, INC.

G06Q20/20G06Q20/3576G06Q20/3829G06Q20/4012G06Q20/105G06Q20/34

Abstract

Claims (86)

1. A method of a PIN pad device performing a transaction with a payment card comprising an integrated circuit, the method comprising:

interacting, by the PIN pad device, with an integrated circuit on the payment card, wherein the interacting comprises reading the integrated circuit with a reader of the PIN pad device;

determining, by a processor of the PIN pad device, a card brand, a card issuer, or a combination thereof of the payment card;

retrieving, by the processor of the PIN pad device from a memory of the PIN pad device, a map of the integrated circuit based, at least in part, on the determined card brand, the card issuer, or the combination thereof, the map comprising one of a plurality of different maps each associated with a different card brand, card issuer, or combination of card brand and card issuer, and the map comprises locations of records that exist on integrated circuits associated with the card brand, card issuer, or combination of card brand and card issuer;

identifying, by the processor of the PIN pad device, one or more locations of records on the integrated circuit containing a card number, card information, or a combination thereof on the integrated circuit, from the map;

reading, with the reader of the PIN pad device, the one or more identified locations to acquire the card number, the card information, or the combination thereof; and

using the read card number, card information, or combination thereof to complete processing of the transaction.

2. The method of claim 1 , wherein the card information comprises one or more of:

a cardholder name, a card expiration date, a customer's PIN verification Key, a PIN verification value, a card verification value, a card verification code, and signed data.

3. The method of claim 1 , further comprising:

storing information related to two or more parties comprising: processing requirements of a gateway, a card brand, a card issuer, a merchant, a store, and the payment card;

assigning a relative priority to the two or more parties for which the information is stored; and

determining whether to perform card validation to validate the payment card based, at least in part, on stored validation information from the two or more parties, based on the priority assigned to each of the two or more parties.

4. The method of claim 3 , wherein, when it is determined not to perform card validation, the method further comprises:

issuing a command to the integrated circuit to generate an authorization cryptogram;

receiving the authorization cryptogram;

determining whether a full online transaction is to be performed by the PIN pad device; and

when the full online transaction is determined not to be performed, issuing a deferred authorization to the integrated circuit, indicating that the transaction is completed.

5. The method of claim 3 , wherein, when it is determined that card validation is to be performed, the method further comprises:

inferring public key parameters for the payment card based, at least in part, on the card information;

retrieving the inferred public key parameters; and

attempting to validate signed data using the retrieved public key parameters.

6. The method of claim 5 , wherein, when the attempt to validate the signed data is successful, the method further comprises:

issuing a command to the integrated circuit to generate an authorization cryptogram;

receiving the authorization cryptogram;

determining whether a full online transaction is to be performed by the PIN pad device; and

when the full online transaction is not to be performed by the PIN pad device, issuing a deferred authorization to the integrated circuit, indicating that the transaction is completed.

7. The method of claim 5 , wherein, when the attempt to validate the signed data is not successful, the method further comprises:

attempting to validate the signed data with all available secure key parameters; and

when the attempt to validate the signed data is successful, the method further comprises:

issuing a command to the integrated circuit to generate an authorization cryptogram;

receiving the authorization cryptogram;

determining whether a full online transaction is to be performed by the PIN pad device; and

when the full online transaction is not to be performed by the PIN pad device, issuing a deferred authorization to the integrated circuit, indicating that the transaction is completed.

8. The method of claim 3 , further comprising:

determining that card validation is not to be performed;

issuing a command to the integrated circuit to generate an authorization cryptogram;

receiving the authorization cryptogram;

determining that a full online transaction processing is to be performed by the PIN pad device based, at least in part, on transaction related information the stored information related to the two or more parties, based on the priority assigned to each of the two or more parties;

sending a received transaction total to a payment gateway, via a network, for approvals; and

receiving an issuer response including an approval or denial, a response cryptogram of an issuing bank, and issuer scripts; and

loading the issuer scripts on the integrated circuit to complete the transaction.

9. A device for performing a transaction with a payment card comprising an integrated circuit, the device comprising:

a storage; and

a processor coupled with the storage to:

interact with an integrated circuit on the payment card, wherein the interacting comprises reading the integrated circuit with a reader of the device;

determine a card brand, a card issuer, or a combination thereof of the payment card;

retrieve, from the storage, a map of the integrated circuit based, at least in part, on the determined card brand, the card issuer, or the combination thereof, the map comprising one of a plurality of different maps each associated with a different card brand, card issuer, or combination of card brand and card issuer, and the map comprises locations of records that exist on integrated circuits associated with the card brand, card issuer, or combination of card brand and card issuer;

identify one or more locations of records on the integrated circuit containing a card number, card information, or a combination thereof on the integrated circuit, from the map;

read, using the reader, the one or more identified locations to acquire the card number, the card information, or the combination thereof; and

using the read card number, card information, or combination thereof to complete processing of the transaction.

10. The device of claim 9 , wherein the card information comprises one or more of:

a cardholder name, a card expiration date, a customer's PIN verification Key, a PIN verification value, a card verification value, a card verification code, and signed data.

11. The device of claim 9 , further comprising the processor configured to:

store information related to two or more parties comprising: processing requirements of a gateway, a card brand, a card issuer, a merchant, a store, and the payment card;

assign a relative priority to the two or more parties for which the information is stored; and

determine whether to perform card validation to validate the payment card based, at least in part, on stored validation information from the two or more parties, based on the priority assigned to each of the two or more parties.

12. The device of claim 11 , wherein, when it is determined not to perform card validation, the processor is further configured to:

issue a command to the integrated circuit to generate an authorization cryptogram;

receive the authorization cryptogram;

determine whether a full online transaction is to be performed; and

when the full online transaction is determined not to be performed, issuing a deferred authorization to the integrated circuit, indicating that the transaction is completed.

13. The device of claim 11 , wherein, when it is determined that card validation is to be performed, the processor is further configured to:

infer public key parameters for the payment card based, at least in part, on the card information;

retrieve the inferred public key parameters; and

attempt to validate signed data using the retrieved public key parameters.

14. The device of claim 13 , wherein, when the attempt to validate the signed data is successful, the processor is further configured to:

issue a command to the integrated circuit to generate an authorization cryptogram;

receive the authorization cryptogram;

determine whether a full online transaction is to be performed; and

when the full online transaction is not to be performed, issue a deferred authorization to the integrated circuit, indicating that the transaction is completed.

15. The device of claim 11 , wherein the processor is further configured to:

determine that card validation is not to be performed;

issue a command to the integrated circuit to generate an authorization cryptogram;

receive the authorization cryptogram;

determine that a full online transaction processing is to be performed based, at least in part, on transaction related information the stored information related to the two or more parties, based on the priority assigned to each of the two or more parties;

send a received transaction total to a payment gateway, via a network, for approvals; and

receive an issuer response including an approval or denial, a response cryptogram of an issuing bank, and issuer scripts; and

load the issuer scripts on the integrated circuit to complete the transaction.

16. A non-transitory computer-readable medium comprising code that, when executed by a processor of a PIN pad device, causes the PIN pad device to perform operations, comprising:

interacting, by the PIN pad device, with an integrated circuit on the payment card, wherein the interacting comprises reading the integrated circuit with a reader of the PIN pad device;

determining, by a processor of the PIN pad device, a card brand, a card issuer, or a combination thereof of the payment card;

retrieving, by the processor of the PIN pad device from a memory of the PIN pad device, a map of the integrated circuit based, at least in part, on the determined card brand, the card issuer, or the combination thereof, the map comprising one of a plurality of different maps each associated with a different card brand, card issuer, or combination of card brand and card issuer, and the map comprises locations of records that exist on integrated circuits associated with the card brand, card issuer, or combination of card brand and card issuer;

identifying, by the processor of the PIN pad device, one or more locations of records on the integrated circuit containing a card number, card information, or a combination thereof on the integrated circuit, from the map;

reading, with the reader of the PIN pad device, the one or more identified locations to acquire the card number, the card information, or the combination thereof; and

using the read card number, card information, or combination thereof to complete processing of the transaction.

Continuity (6)

References Cited (133)