Granted Patent B2

US 12,737,748 · App. 18/796,235 · Granted Sep 15, 2026

Inventor: David Wyatt (Austin, TX)

Assignee: Cardware, Inc.

G06Q20/341G06K19/06206G06K19/0716G06K19/07749G06Q20/06G06Q20/065G06Q20/223G06Q20/24G06Q20/346G06Q20/347G06Q20/352G06Q20/3827G06Q20/385G06Q20/4012G06Q20/409G07F7/0873G07F19/00

Abstract

Claims (147)

1 . A payment device comprising:

a thin card-shaped body having a security feature associated with a viewable surface of said thin card-shaped body;

a memory;

a processor coupled to the memory;

an information of an authorized user, an issuer account, and of an issuer, of said payment device;

a payment interface, including at least one interface selected from a set consisting of: a magnetic stripe interface, a smart card interface, an RF interface, an NFC interface, a display interface, and a wireless interface, and

wherein the payment interface is operable to generate a payment information of a payment transaction and said payment information comprises limited-use payment information, and

wherein further, the limited-use payment information is to be used for payment transactions by an authorized user of said payment device at supported payment facilities,

wherein at least a portion of said limited-use payment information is provided by a payment authority for use by the payment device, and

wherein the payment authority rejects as invalid any use of said limited-use payment information obtained at any payment facility other than a payment facility receiving said limited-use payment information via the payment interface.

2 . The device of claim 1 wherein the security feature associated with the viewable surface of the thin card-shaped body comprises no payment numbers susceptible to a misuse by theft, fixed thereon, and

wherein further generation of the limited-use payment information, including that generated by an authorized device connected to the payment device, obviates any need for said payment numbers fixed on said viewable surface.

3 . The device of claim 2 , wherein the viewable surface comprises fixed information disposed thereon and wherein the fixed information includes: a card-holder name; a payment issuing logo; and a card payment network logo, and

wherein further, the viewable surface is free of account numbers, expiration dates, card security codes, or other payment-usable numbers, susceptible to a misuse by theft.

4 . The device of claim 2 , wherein the payment information conveyed via the magnetic stripe interface is limited to the magnetic stripe interface for the issuer account,

wherein further the limited-use payment information is limited to use by the payment device and is operable for conveying payment information to a magnetic-stripe payment card reader,

wherein said limited-use payment information has a limited period of valid use, and

wherein said limited-use payment information is not valid when used other than at a magnetic stripe payment card reader facility.

5 . The device of claim 1 , wherein an information unique to said payment device and to an authorized user thereof, is operable to be conveyed to a personal computing device, for generation of an additional limited-use payment information on said personal computing device, and

wherein further, the additional limited-use payment information is operable to be used for performing payment transactions at payment facilities with which the payment device is limited in performing.

6 . The device of claim 5 , wherein a request for payment includes at least one of a set consisting of: payment information, transactional information, merchant information, payment facility information, payment interface information, and payment card reader information, and

wherein a card-present transaction is one performed by said authorized user presenting said payment device at a payment reader facility for payment, and

wherein a card-not-present transaction is one performed other than when said payment card device is presented for payment at a payment card reader facility; and,

wherein a payment processing facility is operable to approve as valid, a use of the limited-use payment information in a card-present payment transaction at supported facilities; and,

wherein said payment processing facility is also operable to reject, as invalid, a use of the limited-use payment information in a card-not-present payment transaction; and

wherein a payment authority receiving a validation said payment processing facility is operable to decline a payment transaction not approved as valid, and approve a payment transaction as valid, dependent-on said validation of said payment processing facility of said payment transaction.

7 . The device of claim 6 , wherein the payment processing facility shares at least a portion of a same information used in the limited-use payment information and in the additional limited-use payment information, and

wherein further, said payment processing facility is operable to receive said payment information from said payment transaction and to approve or not approve, said payment transaction performed within a valid set of limitations in usage, and

wherein further, said payment processing facility limits valid approval based on payment information matching an expected device generated limited-use payment information, and

wherein said payment processing facility declines as invalid a use of said limited-use payment information in payment transactions other than supported facility payment transactions, and

wherein the personal computing device is configured to receive an authorized user input approving or not approving, the payment transaction, via a user interface disposed of said personal computing device, and

wherein the personal computing device is configured to transmit to the payment processing facility, an approval or a denial via a wireless interface disposed of said personal computing device, and

wherein the payment processing facility limits as validated use for payment for payment transactions with the authorized user approving, and declines as invalid use when the authorized user is denying an approval.

8 . The device of claim 7 , wherein said limited-use payment information comprises a dynamically-generated one-time limited-use payment information portion generated by a processor of siad personal computing device when used at a payment facility accessible to said personal computing device, and

wherein the payment information conveyed to a payment facility, at a payment transaction time, includes at least one of a portion of: a static limited-use portion; and a dynamically-generated limited-use portion, and

wherein at least a portion of said static limited-use portion is provided by the payment authority or a payment processing facility approved by the payment authority, for use by the personal computing device, and

wherein a dynamically generated limited-use payment information includes at least one specific information selected from a set consisting of: a payment device specific information, a personal computing device specific information, a user specific information, a merchant specific information.

9 . The device of claim 5 , wherein a payment processing facility is operable to reject as invalid, a usage of the limited-use payment information, provided by the payment device in card reader facility transactions, when re-used in an online payment transaction, and

wherein said payment processing facility is operable to accept as valid a use of the additional limited-use payment information, when generated via the personal computing device, in a valid online payment transaction use, and

wherein said additional limited-use payment information combines at least one element selected from a set of unique identifying characteristics consisting of: an identifier of the payment device, an identifier of the personal computing device, an authorized user of the personal computing device, an authorized user of the payment device, a specific merchant for the online payment transaction, an identifier of a specific recipient of the online payment transaction, a sequential counter count of transactions, a limited number of payment uses, and an information specific to the online payment transaction.

10 . The device of claim 9 , wherein an interface of said personal computing device is operable to wirelessly receive information of the authorized user of the payment device, and

wherein said issuer of said payment device is operable to support a payment transaction on the personal computing device after receiving an information of the payment device via the personal computing device, and the authorized user of the payment device is verified on the personal computing device through at least one security challenge, selected from a set consisting of:

a device touch ID sensor identifying a recognized touch of a valid user;

a device touch sensor-array receiving a user entered valid user code;

a device key-pad receiving a user entered valid user code;

a device user interface receiving a user entered valid PIN or Key-Code;

a device user interface receiving a correct answer to a challenge presented on the personal computing device which a valid user would know;

a device user interface receiving a user entered valid password;

a device motion-sensing interface reading a user swipe or gesture;

a user tapping a predetermined sequence on the payment device;

a user motioning the payment device in accordance with a sequence;

a skin-contact sensor identifying a recognized valid user;

a device sensor array reading a touch of an identified user;

a device biometric recognition of a valid user; and

a biometric sensing of the payment device remaining continuously in possession of a valid user,

whereupon satisfying said at least one security challenge, an information relating to the payment device is operable to be displayed on the personal computing device through a user interface disposed of the personal computing device, including at least one payment device usage information selected from a set consisting of:

a transaction time;

a payment amount;

a merchant information;

a user information;

an online location;

a payment facility;

a payment device user information;

a payment device issuer information;

at least a numerical portion of the issuer account;

a graphical image representation of at least one of the above set of information;

a graphical image representation of the payment device; and

wherein upon satisfying said at least one security challenge, a user-interface is operable to receive an input, of at least one user action selected from a set comprising: a selection of said payment device in a payment transaction performed by said personal computing device, a selection of a limitation in a limited-use payment, a payment approval authorization; a payment denial; a review of a previous payment transaction, and an adjustment of a payment transaction, and

wherein a display of the personal computing device is operable to convey a status of processing the payment transaction.

11 . A payment device comprising:

a thin card-shaped body having a security feature associated with a viewable surface of said thin card-shaped body;

a memory;

a payment issuer account information;

a processor coupled to the memory;

a payment interface, including at least one supported interface selected from a set of interfaces consisting of: a magnetic stripe interface, a smart card interface, an RF interface, an NFC interface, a display interface, and a wireless interface, and

wherein the payment interface is operable to convey a payment information of a payment transaction, and comprises limited-use payment information,

wherein further an authority in processing of payment transactions is operable to approve as valid a use of the limited-use payment information for payment transactions by an authorized user of said payment device at a limited set of supported payment facilities, and

wherein said authority is operable to reject as invalid, a use of the limited-use payment information provided via the payment interface, in payment transactions not at supported payment facilities.

12 . The device of claim 11 wherein the security feature associated with the viewable surface of the thin card-shaped body comprises no payment numbers susceptible to a misuse by theft, fixed thereon, and

wherein further generating the limited-use payment information, including that generatable by an authorized device connected to the payment device, obviates any need for said payment numbers susceptible to a misuse by theft indicated on said viewable surface.

13 . The device of claim 11 wherein the viewable surface comprises a minimized set of payment information disposed thereon, and wherein the set of payment information includes: a card-holder name; a payment issuing logo; and a card payment network logo, and,

wherein further, the viewable surface is free of payment account numbers, expiration dates, card security codes, or other numbers susceptible to a misuse by theft.

14 . The device of claim 13 , wherein the payment information conveyed via the magnetic stripe interface is specifically limited to the magnetic stripe interface, and

wherein further the limited-use payment information is limited to use specifically by the payment device and is operable for conveying the payment information to a magnetic stripe payment card reader, and

wherein said limited-use payment information has a limited period of valid use, and

wherein said limited-use payment information is not valid when used other than at a magnetic stripe payment card reader facility during the limited period of valid use.

15 . The device of claim 11 , wherein further a payment device information including a unique identifier of said payment device, is operable to be wirelessly conveyed to a personal computing device, for generation of additional limited-use payment information on said personal computing device, and

wherein the personal computing device generated additional limited-use payment information is operable to be used in place of the payment issuer account information for performing payment transactions at payment facilities at which the payment device is limited in performing, and

wherein further a payment issuer approved authority in processing of payment transactions is operable to approve as valid, a use of said personal computing device generated additional limited-use payment information for valid payment transactions by said personal computing device, at payment facilities in addition to those supported by the payment device.

16 . The device of claim 11 , wherein a request for payment includes at least one of a set consisting of: payment information, transaction information, merchant information, payment facility information, payment interface information, and payment card reader information, and

wherein a card-present transaction includes valid payment card reader facility information receiving said payment information via said payment interface; and, wherein a card-not-present transaction is one including at least a portion of said payment information, and not including valid payment card reader facility information; and,

wherein an authority in payment processing is operable to approve or reject a payment transaction, based on an information of the payment transaction, including that of payment facilities involved in the payement transaction; and,

wherein said authority is operable to approve as valid, a valid use of the payment device in a card-present payment transaction; and,

wherein said authority is operable to reject, as not valid, a use or re-use of the limited-use payment information in a card-not-present payment transaction; and

wherein said authority receiving said request for payment is operable to decline a payment transaction not involving a valid card-present use of the limited-use payment information at payment facilities.

17 . The device of claim 11 , wherein a payment issuer approved authority in the processing of payments is operable store at least a portion of the limited-use payment information, for validating a valid use by the payment device; and,

wherein further said authority limits valid approval of said limited-use payment information to perform a card-present payment transaction by the payment device, and wherein said authority declines as invalid a use of said limited-use payment information in payment transactions other than wherein the payment device is present, and

wherein said authority limits said limited-use payment information to use for a finite amount of uses, and declines as invalid use when a count of said of uses has been exceeded, and

wherein said authority limits use to payment for payment transactions when an authorized user approves, and declines as invalid use when the authorized user denies an approval, and

wherein said authority limits said limited-use payment information to a valid use for payments by the payment device.

18 . The device of claim 11 , wherein an information of the payment device and an authorized user thereof, is operable to be received by a personal computing device, via an interface of said personal computing device, and

wherein said personal computing device is operable to identify a valid user for performing payment transactions through at least one user-validation action, selected from a set consisting of:

a device touch ID sensor identifying a touch of the valid user;

a device touch sensor-array receiving a user entered valid user code;

a device key-pad receiving a user entered valid user code;

a device user interface receiving a user entered valid PIN or Key-Code;

a device user interface receiving a user entered valid password;

a device user interface reading a user swipe or gesture;

a user tapping a predetermined sequence on the payment device;

a user motioning the payment device in accordance with a sequence;

a skin-contact sensing identifying a valid user;

a device sensor array reading a touch of an identified user;

a device biometric recognition of a valid user; and

a biometric sensing of the payment device remaining continuously in possession of a valid user,

wherein a display of the personal computing device is operable to display payment transaction information through a user interface disposed of the personal computing device, including at least one information of a set consisting of:

a transaction time;

a payment amount;

a merchant information;

an user information;

an online location;

a payment facility;

a payment device information;

at least a portion of the payment issuer account information;

an image representational of the payment device; and

wherein upon validating the user, a user-interface is operable to receive a valid user input, of at least one user action selected from a set consisting of: a payment information, a user-desired limitation for a payment transaction, a payment approval authorization; a payment denial; and an adjustment of a payment transaction, and

wherein the personal computing device is operable to convey a status of processing the payment transaction, on the display of the personal computing device.

19 . The device of claim 11 , wherein an additional limited-use payment information comprises a dynamically generated limited-use payment information portion generated by a processor of a personal computing device when used at a payment facility accessible to said personal computing device, and

wherein the payment information conveyed to a payment facility, at a payment transaction time, includes at least one of a portion of: a static limited-use portion; and a dynamically-generated limited-use portion, and

wherein at least a portion of said static limited-use portion is provided by a payment issuer approved authority in the processing of payments for use in place of the payment device by a valid user of the personal computing device, and

wherein said dynamically-generated limited-use payment information portion combines at least one specific information selected from a set consisting of: a payment device specific information, a personal computing device specific information, an information supplied by an issuer of payment device, a user specific information, a merchant specific information.

20 . A payment card device comprising:

a thin card-shaped body having a security feature associated with a viewable surface of said thin card-shaped body;

a memory;

a processor coupled to the memory;

a near-field tag; and

a payment facility interface, including at least one supported interface selected from a set of facility interfaces consisting of: a magnetic-stripe, a smart card reader interface, a display interface, an RF interface, an NFC interface, a wireless interface, a visible information fixed thereon said thin card-shaped body, and

wherein an account identifying information for said payment card device is operable to be conveyable to a personal computing device by at least one interface selected from a set consisting of: the set of facility interfaces, and the near-field tag, and

wherein a payment information for a payment transaction is operable to be conveyed via the payment facility interface, for payment transactions by said payment card device at a limited set of supported payment facility types, and

wherein further the payment information is not valid for performing payment transactions not at supported payment facility types,

wherein at least a portion of said payment information comprises limited-use numbers which are limited to valid use at supported payment facility types, and

wherein said limited-use numbers are shared with a payment processing facility for recognition by said payment processing facility of valid usage within limitations upon a generation by the payment card device and a generation by said personal computing device, and

wherein the payment processing facility rejects as invalid any use of said limited-use numbers obtained at any payment facility other than a payment facility receiving generated limited-use numbers at an expected payment facility.

21 . The payment card device of claim 20 , wherein the security feature associated with the viewable surface of the thin card-shaped body comprises no payment numbers susceptible to a misuse by theft, fixed thereon, and

wherein further generation of the limited-use numbers obviates any need for said payment numbers susceptible to a misuse by theft fixed on said viewable surface.

22 . The payment card device of claim 21 , wherein a payment processing facility is operable to reject as invalid, an invalid re-use of limited-use numbers provided via a payment reader facility, in an online payment transaction.

23 . The payment card device of claim 21 , wherein a payment processing facility is operable to reject as invalid, a misuse of limited-use numbers provided via a payment facility other than an expected facility.

24 . The payment card device of claim 21 , wherein a payment processing facility is operable to approve as valid, a use of the limited-use numbers generated via the personal computing device when used at a payment facility accessible to said personal computing device, at payment facilities in addition to payment facility types to which the payment card device is limited.

Continuity (8)

References Cited (308)