Contactless data exchange between mobile devices and readers involving value information not necessary to perform a transaction
10103781 ยท 2018-10-16
Assignee
Inventors
- Thomas Bellenger (San Mateo, CA, US)
- Oleg Makhotin (Castro Valley, CA, US)
- Christian Aabye (Foster City, CA, US)
- Erick Wong (Menlo Park, CA)
- Sanjeev Sharma (Sunnyvale, CA, US)
- Hao Ngo (San Jose, CA, US)
Cpc classification
H04W4/80
ELECTRICITY
H04B5/20
ELECTRICITY
International classification
H04B5/00
ELECTRICITY
H04W4/00
ELECTRICITY
Abstract
Embodiments of the disclosure are directed to performing a transaction between a mobile device and an access device. Value information is provided to the access device by the mobile device. The value information is not necessary to complete the transaction.
Claims
1. A method for performing a transaction with an access device, the method comprising the following steps, in order: a) receiving, by a mobile device, an available applications request from the access device; b) transmitting, by the mobile device, an available applications response to the access device; c) receiving, by the mobile device from the access device, a select application identifier request, wherein the select application identifier request includes a provider identifier; c-1) retrieving, by the mobile device, value information not necessary to perform the transaction from a server by supplying the server with the provider identifier; d) transmitting, by the mobile device to the access device, a select application identifier response; e) receiving, by the mobile device from the access device, a transaction data request; and f) providing, by the mobile device to the access device, a transaction data response, wherein the value information not necessary to perform the transaction is provided to the access device in the select application identifier response or the transaction data response in steps d) or f); and wherein the mobile device stores, on the mobile device, value added services data including the retrieved value information not necessary to perform the transaction by indexing the value added services data based on the provider identifier and a payment application associated with an application identifier from the select application identifier request.
2. The method of claim 1, the method further comprising: identifying, by the mobile device, the value information as being associated with the provider identifier; and adding, by the mobile device, the value information to a file associated with an application file locator.
3. The method of claim 1, wherein the transaction data response includes a first application file locator and a second application file locator, the first application file locator for accessing transaction data to perform the transaction and the second application file locator for accessing the value information.
4. The method of claim 1, wherein the available applications response includes a value indicator, the value indicator indicating whether the mobile device has access to the value information.
5. The method of claim 1, wherein the value information is transmitted to the access device in a near-field communication (NFC) protocol.
6. A mobile device comprising: processing logic; an antenna coupled to the processing logic; and a non-transitory computer readable medium coupled to the processing logic, wherein the non-transitory computer readable medium comprises instructions executable by the processing logic, the instructions causing the mobile device to perform operations to perform a transaction, the operations comprising: a) receiving an available applications request from an access device; b) transmitting an available applications response to the access device; c) receiving a select application identifier request from the access device, wherein the select application identifier request includes a provider identifier; c-1) retrieving value information not necessary to perform the transaction from a server by supplying the server with the provider identifier d) transmitting a select application identifier response to the access device; e) receiving, from the access device, a transaction data request; and f) providing, to the access device, a transaction data response, wherein the value information not necessary to perform the transaction is provided to the access device in the select application identifier response or the transaction data response in steps d) or f); and wherein the mobile device stores, on the mobile device, value added services data including the retrieved value information not necessary to perform the transaction by indexing the value added services data based on the provider identifier and a payment application associated with an application identifier from the select application identifier request.
7. The mobile device of claim 6, the non-transitory computer readable medium comprising further instruction causing the mobile device to perform further operations comprising: identifying the value information as being associated with the provider identifier; and adding the value information to a file associated with an application file locator.
8. The mobile device of claim 6, wherein the antenna is configured for near-field communication (NFC), and wherein the value information is transmitted to the access device in an NFC protocol.
9. The mobile device of claim 6, wherein the mobile device is a mobile phone.
10. The mobile device of claim 6, wherein the available applications response includes a value indicator, the value indicator indicating whether the mobile device has access to the value information.
11. A method for performing a transaction, the method comprising the following steps, in order: a) transmitting, by an access device, an available applications request to a mobile device; b) receiving, by the access device, an available applications response from the mobile device; c) transmitting, by the access device, a select application identifier request to the mobile device, wherein the select application identifier request includes a provider identifier, the provider identifier usable by the mobile device for retrieving, from a server, value information not necessary to perform the transaction by supplying the server with the provider identifier; d) receiving, by the access device, a select application identifier response from the mobile device; e) transmitting, by the access device, a transaction data request to the mobile device; and f) receiving, by the access device, a transaction data response from the mobile device, wherein the value information not necessary to perform the transaction is provided to the access device in the select application identifier response or the transaction data response in steps d) or f); and wherein the mobile device stores, on the mobile device, value added services data including the retrieved value information not necessary to perform the transaction by indexing the value added services data based on the provider identifier and a payment application associated with an application identifier from the select application identifier request.
12. The method of claim 11, wherein the available applications response includes a list of applications of the mobile device for performing the transaction, the method further comprising: selecting, by the access device, a selected application from the list of applications to complete the transaction, the select application identifier response identifying the selected application.
13. The method of claim 11, wherein the transaction data response includes a first application file locator and a second application file locator, the first application file locator for accessing transaction data to perform the transaction and the second application file locator for accessing the value information.
14. The method of claim 11 further comprising: accessing a provider identifier assigned to the access device; and including the provider identifier in the select application identifier request, wherein the value information is included in the select application identifier response, the value information being associated with the provider identifier.
15. The method of claim 11, wherein the available applications response includes a value indicator, the value indicator indicating whether the mobile device has access to the value information.
16. The method of claim 15 further comprising: determining whether the value indicator indicates that the mobile device has access to the value information; and including a provider identifier in the select application identifier request when the value indicator indicates that the mobile device has access to the value information.
17. The method of claim 16, wherein the select application identifier response includes the value information, the value information being associated with the provider identifier.
18. The method of claim 11, wherein the value information is transmitted to the access device in a near-field communication (NFC) protocol.
Description
BRIEF DESCRIPTION OF THE DRAWINGS
(1)
(2)
(3)
(4)
(5)
(6)
(7)
DETAILED DESCRIPTION
(8) In the following description, various embodiments will be described. For purposes of explanation, specific configurations and details are set forth in order to provide a thorough understanding of the embodiments. However, it will also be apparent to one skilled in the art that the embodiments may be practiced without the specific details. Furthermore, well-known features may be omitted or simplified in order not to obscure the embodiment being described.
(9) Embodiments of the present invention are directed to systems, methods, apparatuses, and computer readable media for contactless transactions between mobile devices and access devices. In a contactless transaction, transaction data to perform the transaction may be communicated or exchanged. In a payment transaction, the transaction data may be account details to facilitate a purchase. However, value information that is not necessary to complete the payment transaction may be communicated with the transaction data. The value information may be relevant to the payment transaction and may even influence the transaction (e.g. influence price of the transaction). In one embodiment, value information includes a digital coupon that a buyer/consumer can apply to her purchase. In one embodiment, the value information includes a loyalty account number that accumulates points or rewards that may be redeemable for a loyalty reward in the future. The value information may be communicated in a contactless data communication by inserting the value information into an existing field of a defined contactless communication protocol that serves to communicate the transaction data.
(10) Prior to discussing embodiments of the invention, description of some terms may be helpful in understanding embodiments of the invention.
(11) A mobile device may comprise any electronic device that may be transported and operated by a user, which may also provide remote communication capabilities to a network. Examples of remote communication capabilities include using a mobile phone (wireless) network, wireless data network (e.g., 3G, 4G or similar networks), Wi-Fi, Wi-Max, or any other communication medium that may provide access to a network such as the Internet or a private network. Examples of mobile devices include mobile phones (e.g., cellular phones), PDAs, tablet computers, net books, laptop computers, personal music players, hand-held specialized readers, wearable devices (e.g., watches), vehicles (e.g., cars), etc. A mobile device may comprise any suitable hardware and software for performing such functions, and may also include multiple devices or components (e.g., when a device has remote access to a network by tethering to another devicei.e., using the other device as a relayboth devices taken together may be considered a single mobile device).
(12) A mobile application may be a computing program that is used on a mobile device for a specific purpose. A mobile application may be designed, published, and updated by a bank, a merchant, a company, or otherwise.
(13) An access device may be any suitable device that provides access to a remote system or to a site. An access device may also be used for communicating with a merchant computer, a transaction processing computer, an authentication computer, or any other suitable system. An access device may generally be located in any suitable location, such as at the location of a merchant. An access device may be in any suitable form. Some examples of access devices include POS or point of sale devices (e.g., POS terminals), cellular phones, PDAs, personal computers (PCs), tablet PCs, hand-held specialized readers, set-top boxes, electronic cash registers (ECRs), automated teller machines (ATMs), virtual cash registers (VCRs), kiosks, security systems, access systems, and the like. An access device may use any suitable contact or contactless mode of operation to send or receive data from, or associated with, a user mobile device. In some embodiments, where an access device may comprise a POS terminal, any suitable POS terminal may be used and may include a reader, a processor, and a computer-readable medium. A reader may include any suitable contact or contactless mode of operation. For example, exemplary card readers can include radio frequency (RF) antennas, optical scanners, bar code readers, or magnetic stripe readers to interact with a payment device and/or mobile device. In some embodiments, a cellular phone, tablet, or other dedicated wireless device used as a POS terminal may be referred to as a mobile point of sale or an mPOS terminal.
(14) Payment credentials may include any suitable information associated with an account (e.g. a payment account and/or payment device associated with the account). Such information may be directly related to the account or may be derived from information related to the account. Examples of account information may include a PAN (primary account number or account number), user name, expiration date, CW (card verification value), dCVV (dynamic card verification value), CVV2 (card verification value 2), CVC3 card verification values, etc. CVV2 is generally understood to be a static verification value associated with a payment device. CVV2 values are generally visible to a user (e.g., a consumer), whereas CW and dCVV values are typically embedded in memory or authorization request messages and are not readily known to the user (although they are known to the issuer and payment processors). Payment credentials may be any information that identifies or is associated with a payment account. Payment credentials may be provided in order to make a payment from a payment account. Payment credentials can also include a user name, an expiration date, a gift card number or code, and any other suitable information.
(15) An authorization request message may be an electronic message that is sent to a payment processing network and/or an issuer of a payment card to request authorization for a transaction. An authorization request message according to some embodiments may comply with ISO 8583, which is a standard for systems that exchange electronic transaction information associated with a payment made by a consumer using a payment device or payment account. The authorization request message may include an issuer account identifier that may be associated with a payment device or payment account. An authorization request message may also comprise additional data elements corresponding to identification information including, by way of example only: a service code, a CVV (card verification value), a dCVV (dynamic card verification value), an expiration date, etc. An authorization request message may also comprise transaction information, such as any information associated with a current transaction, such as the transaction amount, merchant identifier, merchant location, etc., as well as any other information that may be utilized in determining whether to identify and/or authorize a transaction.
(16) An authorization response message may be an electronic message reply to an authorization request message generated by an issuing financial institution or a payment processing network. The authorization response message may include, by way of example only, one or more of the following status indicators: Approvaltransaction was approved; Declinetransaction was not approved; or Call Centerresponse pending more information, merchant must call the toll-free authorization phone number. The authorization response message may also include an authorization code, which may be a code that a credit card issuing bank returns in response to an authorization request message in an electronic message (either directly or through the payment processing network) to the merchant's access device (e.g. POS equipment) that indicates approval of the transaction. The code may serve as proof of authorization. As noted above, in some embodiments, a payment processing network may generate or forward the authorization response message to the merchant.
(17) The term computer as used herein refers to a system comprising a processor and a computer readable medium, such as computer memory or other data storage device, coupled to the processor. The computer readable medium stores code executable by the processor.
(18) The term server computer may include a powerful computer or cluster of computers. For example, the server computer can be a large mainframe, a minicomputer cluster, or a group of servers functioning as a unit. In one example, the server computer may be a database server coupled to a Web server. The server computer may be coupled to a database and may include any hardware, software, other logic, or combination of the preceding for servicing the requests from one or more client computers. The server computer may comprise one or more computational apparatuses and may use any of a variety of computing structures, arrangements, and compilations for servicing the requests from one or more client computers.
(19) Processing logic may refer to any suitable data computation device or devices such as a processor, field-programmable gate array, or otherwise. A processor may comprise one or more microprocessors working together to accomplish a desired function. The processor may include a CPU comprising at least one high-speed data processor adequate to execute program components for executing user and/or system-generated requests. The CPU may be a microprocessor such as AMD's Athlon, Duron and/or Opteron; IBM and/or Motorola's PowerPC; IBM's and Sony's Cell processor; Intel's Celeron, Itanium, Pentium, Xeon, and/or XScale; and/or the like processor(s).
(20) A memory may be any suitable device or devices that can store electronic data. A suitable memory may comprise a non-transitory computer readable medium that stores instructions that can be executed by a processor to implement a desired method. Examples of memories may comprise one or more memory chips, disk drives, etc. Such memories may operate using any suitable electrical, optical, and/or magnetic mode of operation.
(21) As used herein, a provider identifier may identify an entity, organization, building, or site. One example of a provider identifier is a loyalty provider identifier or LPID, which may be an identifier associated with an entity that provides loyalty services. For example, merchants, transaction processors, acquirers, issuers, retail manufacturers, etc., may each provide different loyalty programs and services. Unique LPIDs may be associated with each different loyalty service provider, such that loyalty service providers can be easily identified and distinguished. An example of an LPID is A4 37 F2.
(22) As used herein, value information describes information that is not necessary to complete a given transaction. The value information may be relevant to the transaction or even influence an aspect of the transaction, in some embodiments. One example of value information is Value added services data (or VAS data). VAS data can include data associated with a value added service. Examples of VAS data include loyalty identifiers, coupons, promotional offer information, digital wallet identifiers, etc. Several additional examples of VAS data are described in the table below:
(23) TABLE-US-00001 Value-Added Services Data Tag Description Format 1 Merchant Proprietary DF01 The merchant and Mobile Variable VAS Data Application are responsible for (up to 256) defining the format and content. 2 Payment Account ID DF02 The Payment Account ID is 16 digits associated with the consumer PAN and linked to the tokens, which are issued by the Token Service Provider. 3 Digital Wallet DF03 This identifies the Digital 8 digits Provider ID Wallet Provider. The merchant (DWP ID) may provide discounts and/or rewards and value to consumers based on their relationship with the Digital Wallet Provider. 4 Merchant-Assigned DF04 This Loyalty ID is issued by the Alphanumeric Consumer Loyalty ID merchant to the consumer and (variable is processed by the POS. up to 16) 5 Telephone Number DF05 The consumer's telephone 13 digits number, which may be used as an alternate Loyalty ID for enrollment or merchant messaging. The POS and the Mobile Application may follow Personally Identifiable Information (PII) guidelines to store the consumer's telephone number. 6 Partner Loyalty ID DF06 The Loyalty ID of the Alphanumeric merchant's partner, with whom (variable consumers can earn rewards. up to 16) 7 Email Address DF07 The consumer's email address String can be used for receipts or (variable enrollment. It cannot be used up to 256) for QR codes due to payload size limitations, but can be used with other form factors. The POS and the Mobile Application may follow PII guidelines to store the consumer's email address. 8 Offers (multiple) DF10- The coupon or offer that can Alphanumeric 16 is the maximum DF1F be locally redeemed by the (variable number allowed merchant POS. up to16) 9 Consumer Intent DF08 This field represents Consumer Intents, which is defined as flags in the field. Two Consumer Intents are defined: Intent to pay with points or rewards. Intent to redeem card-linked offers in the transaction. 10 Order Confirmation DF09 This is the order number for Alphanumeric Number remote order and pickup. (variable up to 16) 11 Employee ID DF0A The merchant's employees Alphanumeric have an Employee ID, which (variable makes them eligible for special up to 10) discounts. 12 ZIP Code DF0B The ZIP code that may be Alphanumeric used for the purchase card (variable data provided at the POS. The up to10) POS and the Mobile Application may follow PII guidelines to store the consumer's ZIP code
(24) As used herein, a loyalty identifier or LID may be an identifier associated with an entity that is enrolled in a loyalty program. For example, a user may enroll in a loyalty program offered by a merchant, and an LID may be associated with that user for that loyalty program. A single user may participate in multiple loyalty programs. Accordingly, a single user may be associated with multiple LIDs. An LID may be associated with one or more LPIDs. For example, a LID associated with a certain merchant may also be associated with that merchant's LPID.
(25) In the following description, an acquirer is typically a business entity (e.g., a commercial bank) that has a business relationship with a particular merchant. An issuer is typically a business entity (e.g., a bank or credit union) which issues a payment device (such as a credit card, debit card, smart card, prepaid device or contactless device) to an account owner and which provides administrative and management functions for the payment account. Some entities may perform both issuer and acquirer functions. A payment account may be any account usable in a transaction, such as a credit, debit or prepaid account.
(26)
(27) The computer readable medium 10B may comprise instructions or code, executable by the processor for implementing a method of performing a transaction comprising receiving an available applications request from an access device, transmitting an available applications response to the access device, receiving a select application identifier request from the access device, transmitting a select application identifier response to the access device, receiving a transaction data request, and providing a transaction data response. Value information not necessary to perform the transaction is included in the select application identifier response or the transaction data response, in some embodiments. In some embodiments, the transaction is an access transaction to gain access to a building and the value information identifies a building that was accessed previously. In some embodiments, the transaction is a payment transaction and the value information is value added services (VAS) data. One example of VAS data is a coupon code for applying a discount to the payment transaction.
(28) In some embodiments, the mobile device 10 may further include a contactless element 10G, which is typically implemented in the form of a semiconductor chip (or other data storage element) with an associated wireless transfer (e.g., data transmission) element, such as an antenna 10k. Contactless element 10G may be coupled to (e.g., embedded within) the mobile device 10.
(29) The mobile device 10 may also include processing logic 10C (e.g., a microprocessor, field-programmable gate array) for processing the functions of the mobile device 10 and a display 10D to allow a consumer to see phone numbers and other information and messages. The mobile device 10 may further include input elements 10E (e.g. buttons, touchscreen) to allow a user to input information into the device, a speaker 10F to allow the user to hear voice communication, music, etc., and a microphone 10l to allow the user to transmit her voice through the mobile device 10.
(30) A memory 17 may be coupled to the processing logic 10C and may store a first application 17A, a second application 17B, a third application 17C, and a fourth application 17D. The memory 17 may be in the form of one or more memory devices (e.g., RAM, EEPROM, ROM chips), using any suitable mode of data storage. In some embodiments, the memory 17 in the mobile device 10 may also include a secure storage area for storing sensitive data such as payment credentials (account numbers, payment tokens, verification values, etc.) and access data. For example, the memory 17 may be part of or may contain a secure element.
(31) In some embodiments, the first application 17A is a mobile banking application. The mobile banking application may designed and maintained by a bank or payment processing network. The second application 17B may be a digital wallet application. The third application 17C may be designed and published by a first merchant and the fourth application 17D may be designed by a second merchant. Other applications not specifically mentioned may also reside in memory 17 of mobile device 10.
(32) System 100 also includes an access device 20. Access device 20 includes a contactless element 20G, processing logic 20C, a memory 22, and a communication port 20E. Contactless element 20G is configured to communicate with (send and/or receive data) with contactless element 10G. Processing logic 20C is configured to facilitate data exchanges between contactless element 20G and contactless element 10G. Contactless element 20G includes antenna 20K for sending and receiving wireless signals. Memory 22 and a communication port 20E are coupled to processing logic 20C. In one embodiment, communication port 20E is wired (e.g. Ethernet). In one embodiment, the communication port 20E includes hardware to facilitate wireless network communication (e.g. IEEE 802.11). In the illustrated embodiment, identifier 23 is stored in memory 22. In one embodiment, identifier 23 is a provider identifier that identifies a merchant that is operating the access device. Identifier 23 may be programmable by writing different identifier data to memory 22. Identifier 23 may also be hard-coded into hardware of access device 20. Identifier 23 may be passed from access device 20 to mobile device 10 to identify access device 20. In response to receiving identifier 23, mobile device 10 may send value information associated with identifier 23 to access device 20, as will be described below.
(33)
(34) The mobile device 210 may be able to communicate with the access device 220 via one or more communication pathways. For example, the mobile device 210 may be able to communicate with the access device 220 via contactless communications, such as NFC (Near Field Communication), BLE (Bluetooth Low Energy), RFID (Radio Frequency Identifier), or any other suitable form of short or medium range communications mechanism. In some embodiments, the mobile device 210 may also be able to generate and/or read QR codes.
(35) The mobile device 210 and the access device 220 may also be able to communicate with other entities. For example, the mobile device 210 may be able to communicate with cell towers (e.g., via cellular communications such as GSM, LTE, 4G) and wireless routers (e.g., via WiFi). Also, the access device 220 may be able to communicate with a merchant computer or other entities in a transaction processing system.
(36) The mobile device 210 may store or have access to certain types of user information. For example, the mobile device 210 may store the user's payment credentials, such as a PAN (primary account number), a payment token, a name, an address, a CVV, an expiration date, and any other suitable information. Such data may be securely stored via hardware (e.g., a secure element) or software.
(37) The mobile device 210 may also include a digital wallet application, which may include information about one or more user payment accounts. The user may be able to add payment accounts, set a default account, prepare the mobile device 210 for a payment, and perform other payment-related functions via the digital wallet application. In some embodiments, different payments account at the digital wallet application may be associated with different payment applications, and each payment application may be associated with an Application Identifier (AID).
(38) The mobile device 210 may also store value added services (VAS) data, which is an example of value information that is not required to execute a payment transaction. The digital wallet application or a separate VAS application may include information about one or more loyalty programs, such as LIDs associated with the user. The digital wallet application or VAS application may also include coupon identifiers, promotional offer information, and any other suitable information associated with the user, the merchant, or transaction processing. In some embodiments, VAS data may be indexed based on one or more LPIDs and/or one or more payment applications with which the VAS data is associated. For example, an LID or coupon may be identifiable based on an associated LPID.
(39) An example diagram of links between different LPIDs and payment applications is shown in
(40) TABLE-US-00002 TABLE 0-1 Proximity Payment Applications and VAS Loyalty Links Example LPID 1 LPID 2 LPID 3 LPID 4 Payment ? App 1 Payment ? ? App 2 Payment ? ? ? App 3 Payment ? ? App 4 Payment ? ? App 5
(41) In one embodiment, a payment card (e.g., a credit card or debit card) may be used to interact with an access device instead of a mobile device. For example, some payment cards may have chip-based data storage and/or contactless communication capabilities (e.g., NFC, BLE, RFID). Accordingly, some payment cards may be able to interact with the access device 220 of
(42) A method according to embodiments of the invention can also be described with respect to
(43) In order to initiate the method, the user may select one or more goods and/or services for purchase at a merchant, and then initiate a payment transaction. The user may choose to pay via mobile device 210. In some embodiments, the user may activate a digital wallet application, select a payment account, and initiate payment functionality. In other embodiments, the payment functionality may be automatic. In either case, the user may hold the mobile device 210 near to (e.g., within communication proximity of) the access device 220.
(44) In some embodiments, a contactless transaction can then be carried out by exchanging messages (e.g., Application Protocol Data Unit (APDU) messages) between the mobile device 210 and the access device 220. The messages can be in the form of APDU commands sent from the access device 220 to the mobile device 210, and APDU responses sent from the mobile device 210 to the access device 220. As described in this method, NFC will be used for the communications. However, embodiments allow other communication means (e.g., BLE, RFID) to be used as well.
(45) At step S1, when access device 220 detects the presence of the mobile device 120, the access device 220 may initiate a transaction by sending an available applications request to the mobile device 120 to request information on which mobile payment applications (e.g., a list of AIDs) may be available on the digital wallet application of mobile device 120. In some embodiments, the available applications request may be in the form of a select PPSE (proximity payment system environment) command. The available applications request may include a payment environment identifier (e.g., a PPSE name such as 2PAY.SYS.DDF01) to identify the payment environment supported by access device 220 and the mobile payment application.
(46) At step S2, the mobile device 210 may respond by sending an available applications response back to access device 220. The available applications response may include a list of available AIDs, and may include the payment environment identifier (e.g., PPSE name). In some embodiments, the available applications response may be in the form of a select PPSE response.
(47) At step S3, the access device 220 may select a suitable application from the list of applications received in the available applications response (e.g., by selecting an AID from the available AIDs). For example, the access device 220 may select a proximity payment application that is supported by both the access device 220 and the mobile device 210. The access device 220 may also send an application selection message with the selected AID to the mobile device 210. In some embodiments, the application selection can be in the form of a select AID (or ADF[AJV1]) command.
(48) At step S4, the mobile device 210 may send a request for transaction data to the access device 220 which may be needed to execute the transaction using the selected application/AID. In some embodiments, the request may be in the form of a select AID (or ADF) response. The request may include a list of transaction data identifiers, and the list can be in the form of a processing options data object list (PDOL). The transaction data requested may include terminal transaction qualifiers (TTQ), authorized amount, other amount, terminal country code, terminal verification results, transaction currency code, transaction data, transaction type, and/or an unpredictable number. A request may also be included for the merchant's Loyalty Provider ID (LPID).
(49) At step S5, the access device 220 may send the requested terminal transaction data. In some embodiments, the terminal transaction data may be sent in the form of a get processing options (GPO) command, and may include the requested terminal transaction data in a processing options data object list (PDOL). The transaction data may include an LPID associated with the merchant. Alternatively, if the access device 220 does not support VAS data, the GPO command may have a zero-value in place of an LPID.
(50) At step S6, the mobile device 210 may generate dynamic transaction processing information using at least some of the received terminal transaction data, and send a set of transaction processing information to the access device 220. In some embodiments, the transaction processing information can be sent in the form of a GPO response. In some embodiments, the transaction processing information may include one or more application file locators (AFLs) that can be used as file addresses by access device 220 to read account data stored on mobile device 210.
(51) Additionally, the mobile device 210 may identify VAS data, such as loyalty information and coupon information, based on the received LPID. For example, the mobile device 210 may identify a user loyalty ID (LID) that is associated with the LPID, as well as coupon identifiers and other promotional offers that may be associated with the merchant or the goods and services being purchased. The mobile device 210 may then add the identified VAS data to a file associated with the AFL that was sent to the access device 220, such that the access device 220 can retrieve the VAS data along with the account data.
(52) In some embodiments, the mobile device 210 may be able to retrieve VAS data (e.g., loyalty information and coupons) from an online server over-the-air based on the LPID. For example, the user's VAS data may be stored on a digital wallet server. Further, in some embodiments, the mobile device 210 or digital wallet server may be able to search the web or consult a promotional offer database in order to locate new promotional offers and coupons based on the LPID. Accordingly, the mobile device 210 may be able to retrieve and utilize new VAS data (e.g., coupons) based on the LPID in real-time.
(53) At step S7, the access device 220 may send an account data request to the mobile device 210 to read account data stored at the mobile device 210. In some embodiments, the account data request may be in the form of a read record command, and may include an application file locator (AFL) indicating the location of the account data.
(54) At step S8, the mobile device 210 may send the account data to the access device 220. In some embodiments, the account data may be sent in the form of a read record response. The account data may include, for example, track-2 equivalent data and the cardholder name, and/or other account related data that is accessible at the AFL location. The account data may also include the identified VAS data (e.g., a loyalty ID, a coupon identifier, and/or promotional offer information).
(55) In some embodiments, the mobile device 210 may send VAS data to the access device 220 in the place of existing data fields. For example, the mobile device may send an LID in the Card Holder Name (CHN) field. An example data stream is shown for this case:
(56) TABLE-US-00003 ....<CHN Tag> <CHN Length> <Merchant Assigned Consumer Loyalty ID TLV>.... ....5F20 08 DF04 05 1234567890... ..... 5F20 : CHN tag 08 : Length of data in CHN tag DF04 : Merchant Assigned Consumer Loyalty ID tag 05 : Length of Loyalty ID 1234567890 : Loyalty ID value
(57) At the access device 220, the data can be parsed and used for value-added services if the tag values read in the CHN and CED fields match a valid tags for one of the types of value added services. The payment authorization flow may be executed even if the merchant finds an error in the Merchant VAS data tags. The access device 220 can ignore the error found in the Merchant VAS data and continue with payment processing as if there is no Merchant VAS data available in the CHN and/or CED tags.
(58) Having obtained the requisite data, the access device 220 may then utilize some or all of the obtained data elements (e.g., from the transaction processing information and the account data) to generate a transaction authorization request message. The access device 220 may also utilize the VAS data. For example, the access device 220 may reduce the transaction price based on a loyalty identifier, a coupon, rewards points, etc. The access device 220 may also update a loyalty account associated with the loyalty identifier (e.g., points may be credited to the user based on the current transaction).
(59) In
(60) Further embodiments of the invention can be described with respect to a system and method in
(61) The method in
(62) At step S12, the mobile device 210 may respond by sending an available applications response (e.g., a select PPSE response) back to access device 220. In some embodiments, this response message may include a VAS indicator. The VAS indicator may indicate whether VAS information is stored and available at the mobile device 210. For example, the VAS indicator may be a Boolean-type value (e.g., with a value of 0 or 1).
(63) At step S13, the access device 220 may determine, based on the VAS indicator, whether VAS data is available at the mobile device 210. If VAS data is available and the access device 220 supports VAS data, the access device 220 may send the merchant's LPID to the mobile device 210 in an application selection message (e.g., a select AID command). In some embodiments, the selected AID may be appended to include the LPID. For example, the AID may be A0 00 00 00 03 10 10 01, the LPID may be A4 37 F2, and the combined AID+LPID may be A0 00 00 00 03 10 10 01 A4 37 F2.
(64) At step S14, the mobile device 210 may determine whether there is any stored VAS data that is associated with the LPID. For example, if the user has a loyalty account at the merchant, there may be a user LID that is associated with and/or labeled by the LPID. The mobile device 210 may also send a request for transaction data (e.g., a select AID response) to the access device 220. If VAS data associated with the LPID was identified, the extended AID (i.e., the AID+LPID) may be included in the message.
(65) Additionally, the mobile device 210 may add the identified VAS data to a file associated with an AFL that will be sent to the access device 220, such that the access device 220 can retrieve the VAS data along with the account data.
(66) At step S15, the access device 220 may send the requested terminal transaction data (e.g., as a GPO command).
(67) At step S16, the mobile device 210 may send a set of transaction processing information (e.g., a GPO response) to the access device 220. In some embodiments, the transaction processing information may include one or more application file locators (AFLs) that can be used as file addresses by access device 220 to read account data stored on mobile device 210. In some embodiments, an additional AFL may be included that refers to a file including the VAS data. For example, the message may include both a first AFL titled SFI 2 Records 2-3, which refers to a first file including the account data, as well as a second AFL titled SFI 5 Record 1, which refers to a second file including the identified VAS data.
(68) At step S17, the access device 220 may send an account data request (e.g., one or more read record commands) to the mobile device 210 to read account data stored at the mobile device 210. The request may include one or more application file locators (AFL) indicating the location of the account data and/or the VAS data. For example, one or more requests may be sent that indicate a first AFL titled SFI 2 Record 2, a second AFL titled SFI 2 Record 3, and a third AFL titled SFI 5 Record 1.
(69) At step S18, the mobile device 210 may send the account data and/or the VAS data (e.g., via one or more read record responses) to the access device 220. An example of a VAS record with different VAS data elements that may be sent is shown in the table below. If there is no offline data authentication, the record may be associated with the AFL value 08030400. If there is offline data authentication, the record may be associated with the AFL value 0804040010020300.
(70) TABLE-US-00004 Command Data Element Name Read Record (0104) Record Template Merchant VAS Data Template Merchant Proprietary VAS Data Payment Account ID Digital Wallet Provider ID Merchant-Assigned Consumer Loyalty ID Telephone Number Partner Loyalty ID Email Address Consumer Intent Order Confirmation Number Employee ID ZIP Code Offer(s)
(71) Additionally, the following table provides examples of types of VAS data that may be sent to a merchant, as well as example tags for identifying the different data elements. The access device 220 may be able to recognize and process each of these tags and data elements.
(72) TABLE-US-00005 Name (Format; Tag; Length) Description Values F: b A constructed data The following context-specific tags are T: BF64 template that contains defined in this document for the Merchant L: var. BER-TLV coded data VAS Data Template and zero or more of the elements representing listed data elements may be present in the Merchant Value-Added Merchant VAS Data Template: Services (VAS) data. DF01: Merchant Proprietary VAS Data DF02: Payment Account ID DF03: Digital Wallet Provider ID DF04: Merchant Assigned Consumer Loyalty ID DF05: Telephone Number DF06: Partner Loyalty ID DF07: Email Address DF08: Consumer Intent DF09: Order Confirmation Number DF0A: Employee ID DF0B: ZIP Code DF1x: Offers (up to 16, where x = 0 to F) The Merchant VAS Data Template may also include additional data elements not listed in this document. Name (Format, Tag, Length) Description Values Merchant The merchant and Mobile Application Proprietary VAS can define the format and content. Data F: String T: DF01 L: Variable (256) Payment The Payment Account ID may be Account ID associated with the consumer PAN and F: Numeric linked to the tokens, which may be T: DF02 issued by the Token Service Provider. L: 16 digits Digital Wallet This identifies the Digital Wallet Provider ID Provider. The merchant may provide F: Numeric discounts and/or rewards and value to T: DF03 consumers based on their relationship L: 8 digits with the Digital Wallet Provider. Merchant- This Loyalty ID may be issued by the Assigned merchant to the consumer and may be Consumer processed by the POS. Loyalty ID F: Alphanumeric T: DF04 L: Variable (16) Telephone The consumer's telephone number, Number which may be used as an alternate F: Numeric Loyalty ID for enrollment or merchant T: DF05 messaging. The POS and the Mobile L: 13 digits Application may follow Personally Identifiable Information (PII) guidelines to store the consumer's telephone number. Partner Loyalty The Loyalty ID of the merchant's ID partner, with whom consumers can earn F: Alphanumeric rewards. T: DF06 L: Variable(16) Email Address The consumer's email address can be F: String used for receipts or enrollment. The T: DF07 POS and the Mobile Application may L: Variable(256) follow PII guidelines to store the consumer's email address. Consumer This field represents Consumer Intent, which Intent may be definded as flags in the field. Two F: Binary Consumer Intents are definded: T: DF08 1. Intent to pay with points or rewards. L: Variable (4 Intent to redeem card-linked offers in the bytes) transaction. b8 b7 b6 b5 b4 b3 b2 b1 Usage x Consumer intent to pay with points x Consumer intent to redeem rewards x Consumer intent to x x Consumer intent to y x x x X And so on . . . Order This may be the order number for remote Confirmation order and pickup. Number F: Alphanumeric T: DF09 L: Variable(16) Employee ID The merchants employees may have an F: Employee ID, which may make them eligible Alphanumeric for special discounts. T: DF0A L: Variable(10) ZIP Code The ZIP code that may be used for the F: purchase card data provided at the POS. The Alphanumeric POS and the Mobile Application may follow PII T: DF0B guidelines to store the consumer's ZIP code. L: Variable(10) Offer 1 The coupon or offer that can be locally F: redeemed by the merchant POS. Alphanumeric T: DF10 L: 16 Offer 2 The coupon or offer that can be locally F: redeemed by the merchant POS. Alphanumeric T: DF11 L: 16 Offer 3 The coupon or offer that can be locally F: redeemed by the merchant POS. Alphanumeric T: DF12 L: 16
(73) Having obtained the requisite data, the access device 220 may then utilize some or all of the obtained data elements (e.g., from the transaction processing information and the account data) to generate a transaction authorization request message. The access device 220 may also utilize the VAS data. For example, the access device 220 may reduce the transaction price based on a loyalty identifier, a coupon, rewards points, etc. The access device 220 may also update a loyalty account associated with the loyalty identifier (e.g., points may be credited to the user based on the current transaction).
(74) Embodiments of the invention have a number of technical advantages. For example, in embodiments of the invention, existing NFC communication flows can be leveraged to include loyalty information communications, such that the mobile device may automatically provide relevant loyalty information and other VAS data along with payment credentials. Multiple rounds of command and response communications between the access device and mobile device already take place, so it may not require additional time or messaging to include the access device's LPID and the mobile device's loyalty information in the communications. This saves on the time it takes to communicate the loyalty information as well as saving energy that would have been required for a separate contactless communication to transmit the loyalty information. The energy savings may be especially beneficial for the battery-powered mobile device.
(75) Further, since the mobile device receives information about the merchant LPID directly from the access device, separate systems (e.g., geolocation systems) for providing merchant identifying information to the mobile device may no longer be needed. From the user's perspective, loyalty information and payment credentials can thereby be provided with one tap (i.e., one instance of holding the mobile device up to the access device). This can be convenient and easy for the user, as the user may no longer need to manually retrieve, select, or provide loyalty information to the access device.
(76)
(77)
(78) The access data is the transaction data required to complete the access transaction. However, value information that is not necessary to complete the access transaction may also be communicated from the mobile device 510 to the access device 520. For example, access device 520 may provide a provider identifier to mobile device 510. Mobile device 510 provides the value information that is associated with the provider identifier to access device 520. For example, the value information may be the last building that was accessed by the mobile device. In one embodiment, the value information includes a coupon or notification for a purchase at a particular place in a venue. The value information may be included in a field of the access transaction and be communicated along with the access data. The value information may be stored in a particular mobile application that corresponds to the provider identifier.
(79)
(80) The payment processing network 650 may include data processing subsystems, networks, and operations used to support and deliver authorization services, exception file services, and clearing and settlement services. An exemplary payment processing network may include VisaNet?. Payment processing networks such as VisaNet? are able to process credit card transactions, debit card transactions, and other types of commercial transactions. VisaNet?, in particular, includes a VIP system (Visa Integrated Payments system) which processes authorization requests and a Base II system which performs clearing and settlement services. The payment processing network may use any suitable wired or wireless network, including the Internet.
(81) A typical payment transaction flow using a mobile device 610 at an access device 620 (e.g. POS location) can be described as follows. A user 606 presents his or her mobile device 610 to an access device 620 to pay for an item or service. The mobile device 610 and the access device 620 interact such that access data from the mobile device 610 (e.g. PAN, a payment token, verification value(s), expiration date, etc.) is received by the access device 620 (e.g. via contact or contactless interface). The merchant computer 630 may then receive this information from the access device 620 via an external communication interface. The merchant computer 630 may then generate an authorization request message that includes the information received from the access device 620 (i.e. information corresponding to the mobile device 610) along with additional transaction information (e.g. a transaction amount, merchant specific information, etc.) and electronically transmits this information to an acquirer computer 640. The acquirer computer 640 may then receive, process, and forward the authorization request message to a payment processing network 650 for authorization.
(82) In general, prior to the occurrence of a credit or debit-card transaction, the payment processing network 650 has an established protocol with each issuer on how the issuer's transactions are to be authorized. In some cases, such as when the transaction amount is below a threshold value, the payment processing network 650 may be configured to authorize the transaction based on information that it has about the user's account without generating and transmitting an authorization request message to the issuer computer 660. In other cases, such as when the transaction amount is above a threshold value, the payment processing network 650 may receive the authorization request message, determine the issuer associated with the mobile device 610, and forward the authorization request message for the transaction to the issuer computer 660 for verification and authorization. Once the transaction is authorized, the issuer computer 660 may generate an authorization response message (that may include an authorization code indicating the transaction is approved or declined) and transmit this electronic message via its external communication interface to payment processing network 650. The payment processing network 650 may then forward the authorization response message to the acquirer computer 640, which in turn may then transmit the electronic message comprising the authorization indication to the merchant computer 630, and then to the access device 620.
(83) At the end of the day or at some other suitable time interval, a clearing and settlement process between the merchant computer 630, the acquirer computer 640, the payment processing network 650, and the issuer computer 660 may be performed on the transaction.
(84)
(85) In
(86) In
(87) In
(88) In one embodiment, the identifier 23 in
(89) In one embodiment, during a payment interaction between the mobile device 10 and the access device 20 to use the identifier 23 to make a payment between the access device 20 requesting the proximity payment system environment (PPSE) (817) and mobile device 10 transmitting the account information, the access device 20 transmits the identifier 23 to the mobile device 10. In response, the mobile device 10 identifies a matching VAS application identifier, retrieves the corresponding application data, and combines the retrieved application data with the payment data associated with the payment application identifier, including the payment information, and transmits the combined data in one transmission to the access device 20.
(90) In another embodiment, after the access device 20 requests the proximity payment system environment (PPSE), the mobile device 10 transmits the list of application identifiers to the access device 20 for selection. Each of the list of application identifiers represents a unique combination of a payment application and a VAS application. The access device 20 uses the identifier 23 to select an applicable identifier from the list and requests the mobile device 10 to supply the data for the selected application identifier. In response, the mobile device prepares the data corresponding to the selected combination of the payment application and the VAS application and transmits the data in one transmission.
(91) In addition to the embodiments that can be implemented in the building access and payment contexts, embodiments that may include just the payment contexts may include a method for performing a payment transaction with an access device where the method includes receiving, by a mobile device, an available applications request from the access device and transmitting, by the mobile device, an available applications response to the access device. The available applications response may include available payment applications for completing a payment transaction. The method may further include receiving, by the mobile device from the access device, a select application identifier request and transmitting, by the mobile device to the access device, a select application identifier response. The method may further include receiving, by the mobile device from the access device, a transaction data request and providing, by the mobile device to the access device, a transaction data response. The transaction data response may include transaction data that includes payment details, for example. VAS data not necessary to complete the transaction may be provided to the access device in the select application identifier response or the transaction data response.
(92) In another embodiment specific to the payment context, a method of performing a payment transaction may include transmitting, by an access device, an available applications request to a mobile device and receiving, by the access device, an available applications response from the mobile device. The available applications response may include available payment applications for completing a payment transaction. The method may further include transmitting, by the access device, a select application identifier request to the mobile device and receiving, by the access device, a select application identifier response from the mobile device. The method may further include transmitting, by the access device, a transaction data request to the mobile device and receiving, by the access device, a transaction data response from the mobile device. The transaction data response may include transaction data that includes payment details, for example. VAS data not necessary to complete the transaction may be provided to the access device in the select application identifier response or the transaction data response.
(93) It should be understood that any of the embodiments of the present invention can be implemented in the form of control logic using hardware (e.g. an application specific integrated circuit or field programmable gate array) and/or using computer software with a generally programmable processor in a modular or integrated manner. As used herein, a processor includes a single-core processor, multi-core processor on a same integrated chip, or multiple processing units on a single circuit board or networked. Based on the disclosure and teachings provided herein, a person of ordinary skill in the art will know and appreciate other ways and/or methods to implement embodiments of the present invention using hardware and a combination of hardware and software.
(94) Any of the software components or functions described in this application may be implemented as software code to be executed by a processor using any suitable computer language such as, for example, Java, C, C++, C#, Objective-C, Swift, or scripting language such as Perl or Python using, for example, conventional or object-oriented techniques. The software code may be stored as a series of instructions or commands on a computer readable medium for storage and/or transmission, suitable media include random access memory (RAM), a read only memory (ROM), a magnetic medium such as a hard-drive or a floppy disk, or an optical medium such as a compact disk (CD) or DVD (digital versatile disk), flash memory, and the like. The computer readable medium may be any combination of such storage or transmission devices.
(95) Such programs may also be encoded and transmitted using carrier signals adapted for transmission via wired, optical, and/or wireless networks conforming to a variety of protocols, including the Internet. As such, a computer readable medium according to an embodiment of the present invention may be created using a data signal encoded with such programs. Computer readable media encoded with the program code may be packaged with a compatible device or provided separately from other devices (e.g., via Internet download). Any such computer readable medium may reside on or within a single computer product (e.g. a hard drive, a CD, or an entire computer system), and may be present on or within different computer products within a system or network. A computer system may include a monitor, printer, or other suitable display for providing any of the results mentioned herein to a user.
(96) The above description is illustrative and is not restrictive. Many variations of the invention will become apparent to those skilled in the art upon review of the disclosure. The scope of the invention should, therefore, be determined not with reference to the above description, but instead should be determined with reference to the pending claims along with their full scope or equivalents.
(97) One or more features from any embodiment may be combined with one or more features of any other embodiment without departing from the scope of the invention.
(98) A recitation of a, an or the is intended to mean one or more unless specifically indicated to the contrary.
(99) All patents, patent applications, publications, and descriptions mentioned above are herein incorporated by reference in their entirety for all purposes. None is admitted to be prior art.