Secure stored value device

Abstract

Embodiments of the invention are directed to a stored value device with increased data security by limiting access to access data. A stored value device may omit a magnetic stripe, and may not display access data. The stored value device can maintain functionality through chip-based communications, and the user can conduct online and / or mobile transactions by obtaining a token and / or virtual access data. The stored value device may be inactive until obtained be a user and activated through one or more activation processes. Modes in which the stored value device can be utilized can be limited to protect data.

Description

PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01SECURE STORED VALUE DEVICECROSS-REFERENCES TO RELATED APPLICATIONS

[0001] NoneBACKGROUND

[0002] User devices in publicly accessible spaces can be vulnerable to breaches in data security. For example, a user device with a magnetic stripe may be exposed to the risk of compromised data through magnetic stripe skimming.Additionally, a user device with displayed information can be exposed to the risk of compromised data through visual observation and photography. As another example, a legitimate user device may be swapped with an illegitimate user device. These risks are particularly relevant to groups of user devices that is are yet assigned to or in the possession of a particular person.

[0003] Embodiments of the present invention address these problems and other problems, individually and collectively.SUMMARY

[0004] Embodiments of the present invention are directed to a stored value device with increased data security by limiting access to access data. For example, stored value device may omit and not include a magnetic stripe with access data. Additionally, the stored value device may not display or otherwise include visually readable access data. The stored value device can still maintain functionality through chip-based communications, and the user can still conduct online and / or mobile transactions by obtaining a token and / or virtual access data.

[0005] Additionally, embodiments provide further improve data security by including an activation request, also referred to as a test transaction, for activating a stored value device and / or record associated with the stored value device. The activation request can be executed by presenting the stored value device to an1KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381Client Ref. No. 9389WO01 access device. The stored value device can provide access data (e.g., stored on a memory) and / or a cryptogram to an access device through contactless or contact communications. The access device can then send an authorization request message with the access data and / or cryptogram to an authorizing entity computer. The authorizing entity computer can verify the access data and / or cryptogram, and in response activate the record associated with the stored value device. The access device can communicate to the authorizing entity computer that the authorization request message is being sent as a test transaction to activate the record by including a zero-dollar amount, leaving an amount field empty, or including any other suitable flag or indicator in the authorization request message. In some embodiments, a second activation can also be executed for loading or unlocking a value at the record. As a result, the stored value device and record can be securely inactive, even when in a public space, until obtained and activated by a user.

[0006] Additionally, embodiments provide further improve data security by limiting modes through which a stored value device can transact without losing functionality. For example, an authorizing entity computer may be configured to reject transactions conducted through a magnetic stripe entry mode, while maintaining the ability to perform in-person transactions through chip-based communications. Additionally, the authorizing entity computer may be configured to reject transactions conducted by providing access data without a cryptogram. Additionally, the authorizing entity computer may be configured to reject transactions conducted by providing access data over the internet or through other card-not- present transaction modes, while maintaining the ability to perform online transactions via token and / or virtual access data associated with the access data.

[0007] One embodiment of the invention is directed to a method comprising: generating, by a stored value device comprising a memory storing access data but not displaying the access data, a cryptogram based on the access data and a key, wherein a record associated with the access data at an authorizing entity computer is in an inactive state; and transmitting, by the stored value device to an access device, the access data and the cryptogram, wherein the access device generates an authorization request message comprising the access data, the cryptogram, and2KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 a zero amount or no amount in an authorization amount field, the access device transmits the authorization request message to the authorizing entity computer, the authorizing entity computer updates the record to be in an active state after verifying the cryptogram, and the authorizing entity computer only allows the access data to be used for accessing the record when the access data is physically present at the access device or another access device.

[0008] Another embodiment of the invention is directed to a stored value device comprising a substrate, a memory, and a contactless element. The memory is coupled to the substrate and stores access data associated with a record and a key. The contactless element is electrically coupled to the memory. The stored value device does not display the access data.

[0009] Another embodiment of the invention is directed to a method comprising: receiving, by an access device, from a stored value device, access data and a cryptogram, wherein the stored value device comprises a memory storing the access data but the stored value device does not display the access data, the stored value device generated the cryptogram based on the access data and a key, and wherein a record associated with the access data at an authorizing entity computer is in an inactive state; generating, by the access device, an authorization request message comprising the access data, the cryptogram, and a zero amount or no amount in an authorization amount field; and transmitting, by the access device, the authorization request message to the authorizing entity computer, wherein the authorizing entity computer updates the record to be in an active state after verifying the cryptogram, and the authorizing entity computer only allows the record to be accessed in response to a transaction that is within a set of one or more predefined transaction modes.

[0010] Another embodiment of the invention is directed to a method comprising: receiving, by an authorizing entity computer, an authorization request message from an access device, the authorization request message comprising access data, a cryptogram, and a zero amount or no amount in an authorization amount field, wherein the access device received the access data and the3KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 cryptogram from a stored value device, and the stored value device used a first key to generate the cryptogram; identifying, by the authorizing entity computer, a record associated with the access data, the record including a second key, and the record being in an inactive state; verifying, by the authorizing entity computer, the cryptogram using the second key; and in response to verifying the cryptogram, updating the record to be in an active state.

[0011] Another embodiment of the invention is directed to a method comprising: obtaining, by a user, a stored value device comprising a memory storing a key and access data but not displaying the access data, wherein the access data is associated with a record at an authorizing entity computer; receiving, by the user, from a transaction terminal, a proof of a transaction for obtaining the stored value device, wherein the proof includes a record identifier associated with the stored value device; providing, by the user, the record identifier to a first webpage displayed by a computing device, wherein the computing device transmits the record identifier to a server computer, the server computer responds with virtual access data associated with the record, and the computing device displays the virtual access data; observing, by the user, the virtual access data displayed by the first webpage; and providing, by the user, the virtual access data to a second webpage for a transaction.

[0012] Further details regarding embodiments of the invention can be found in the Detailed Description and the Figures.BRIEF DESCRIPTION OF THE DRAWINGS

[0013] FIG. 1A shows a block diagram of a system and method for activating a stored valued device, according to embodiments.

[0014] FIG. 1 B shows a block diagram of a system and method for utilizing a stored valued device, according to embodiments.

[0015] FIG. 2 shows a diagram of a stored value device, according to embodiments of the invention.4KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0016] FIG. 3 shows a block diagram of an authorizing entity computer, according to embodiments of the invention.

[0017] FIG. 4 shows a block diagram of a system and method for obtaining a token, according to embodiments.

[0018] FIG. 5 shows a block diagram of a system and method for obtaining virtual access data, according to embodiments.

[0019] FIG. 6 shows a block diagram of a system and method for utilizing a token or virtual access data, according to embodiments.DETAILED DESCRIPTION

[0020] Embodiments of the invention are directed to a stored value device with increased data security by limiting access to access data. A stored value device may omit a magnetic stripe, and may not display access data. The stored value device can maintain functionality through chip-based communications, and the user can conduct online and / or mobile transactions by obtaining a token and / or virtual access data. The stored value device may be inactive until obtained be a user and activated through one or more activation processes. Modes in which the stored value device can be utilized can be limited to protect data.

[0021] Prior to discussing embodiments of the invention, some terms can be described in further detail.

[0022] A “user” may include an individual or a computing device. In some embodiments, a user may be associated with one or more personal accounts and / or user devices. In some embodiments, the user may be a cardholder, account holder, or consumer.

[0023] A “user device” may be any suitable device operated by a user. In some embodiments, a user device may be a tool used by a user to gain access, such as access to information, an account, a record, physical space, public transit, goods, services, etc. A user device may include evidence that the user is permitted to gain access. A user device can be configured to provide some information about5KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 the user and / or the user’s access permissions. In some embodiments, the user device can communicate electronically with an access control terminal in order to prove that the user is permitted to gain access. User devices may be in any suitable form. Some examples of user devices include cellular phones, smartphones, mobile phones, PDAs, personal computers (PCs), tablet computers, smartcards, access badges, transit fare cards, payment cards such as credit, debit, and prepaid card, loyalty cards, IDs such as driver’s licenses, and the like. In some embodiments, a smart card can serve as a security card, a payment card, an access card, or any other suitable type of card.

[0024] In some embodiments, a user device may comprise a substrate such as a paper or plastic card. Information may or may not be printed, embossed, encoded, or otherwise included at or near a surface of the substrate. The user device may include circuitry with, for example, permanent voltage values for storing information. Suitable user devices can be hand-held and compact so that they can fit into a user's wallet and / or pocket (e.g., pocket-sized). The user device may be able to operate in a contact mode and / or a contactless mode.

[0025] A “computing device” may be any suitable electronic device that can process and communicate information to other electronic devices. The computing device may include a processor and a computer readable medium coupled to the processor, the computer readable medium comprising code, executable by the processor. The computing device may also each include an external communication interface for communicating with each other and other entities. Examples of computing devices may include user devices, access devices, mobile devices, auxiliary devices, server computers, resource provider computers, processing network computers, authorizing entity computers, transport computers, token provider computers, and the like.

[0026] A “mobile device” may comprise any suitable electronic device that may be transported and operated by a user, which may also provide remote communication capabilities to a network. A mobile device such as a mobile communication device may communicate using a mobile phone (wireless) network,6KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 wireless data network (e.g., 3G, 4G or similar networks), Wi-Fi, Bluetooth, Bluetooth Low Energy (BLE), Wi-Max, or any other communication medium that may provide access to a network such as the Internet or a private network. Examples of mobile devices include mobile phones (e.g., cellular phones), PDAs, tablet computers, net books, laptop computers, wearable devices (e.g., a watch, earpiece, rings, bracelets, glasses), vehicles such as automobiles and motorcycles, personal music players, hand-held specialized readers, etc. A mobile device may comprise any suitable hardware and software for performing such functions, and may also include multiple devices or components (e.g., when a device has remote access to a network by tethering to another device - i.e. , using the other device as a modem - both devices taken together may be considered a single mobile device). The mobile device may include one or more processors capable of processing user input. The mobile device may also include one or more input sensors for receiving user input. There are a variety of input sensors capable of detecting user input, such as accelerometers, cameras, microphones, etc. The user input obtained by the input sensors may be from a variety of data input types, including, but not limited to, audio data, visual data, or biometric data.

[0027] “Short range communication” or “short range wireless communication” may comprise any method of providing short-range contact or contactless communications capability, such as RFID, BluetoothTM, infra-red, or other data transfer capability that can be used to exchange data between a user device and an access device. In some embodiments, short range communications may be in conformance with a standardized protocol or data transfer mechanism (e.g., ISO 14443 / NFC). Short range communication typically comprises communications at a range of less than 2 meters. In some embodiments, it may be preferable to limit the range of short-range communications (e.g., to a range of less than 1 meter, less than 10 centimeters, or less than 2.54 centimeters) for security, technical, and / or practical considerations.

[0028] An “antenna” can include a device used to transmit and / or receive signals. An antenna can be a rod, a wire, a chip, a chipset, etc. that is capable of receiving and / or transmitting radio signals. An antenna can be a near-field 7KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 communication antenna, an ultra-wideband antenna, or any other suitable type of antenna.

[0029] A “near-field communication antenna” can include a device used to transmit and / or receive near-field communication based signals. A near-field communication antenna can be a chip or a chipset that enables short-range wireless communication between two devices. A near-field communication antenna can be a near-field communication reader chip (e.g., active component) or a near-field communication tag (e.g., passive component). A near-field communication antenna that is a near-field communication reader chip can provide power and can send near- field communication commands to a near-field communication tag. Near-field communication is based on inductive coupling between two antennas present on two devices (e.g., on a user device and on an access device). The two devices can communicate in one or both directions, using a frequency of 13.56 MHz in the globally available unlicensed radio frequency ISM band using the ISO / IEC 14443 air interface standard at data rates ranging from 106 to 848 kbit / s.

[0030] An “interaction” may include a reciprocal action or influence. An interaction can include a communication, contact, or exchange between parties, devices, and / or entities. Example interactions include a transaction between two parties and a data exchange between two devices. In some embodiments, an interaction can include an identity interaction in which two devices interact to authenticate an identity. In some embodiments, an interaction can include a payment transaction in which two devices can interact to facilitate a payment.

[0031] “Interaction data” can include data related to and / or recorded during an interaction. In some embodiments, interaction data can be transaction data or network data. Transaction data can comprise a plurality of data elements with data values.

[0032] "Access data" may include any suitable data that can be used to access a resource or create data that can access a resource. In some embodiments, access data may be account information for a payment account. Account information may include a credential such as a PAN, a token such as a8KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 payment token, expiration date, card verification values (e.g., CVV, CVV2), dynamic card verification values (dCW, dCVV2), an identifier of an issuer with which an account is held, etc. In other embodiments, access data could include data that can be used to access a location or to access secure data. Such information may be ticket information for an event, data to access a building, transit ticket information, passwords, biometrics or other credentials to access secure data, etc.

[0033] “Credentials” may comprise evidence of authority, rights, ownership, worth, or entitlement to privileges. For example, access credentials may comprise permissions to access certain tangible or intangible assets, such as a building or a file. Examples of credentials may include passwords, account numbers, passcodes, secret messages, and / or any suitable string of such as a string of numbers, letters, or any other suitable characters.

[0034] “Payment credentials” may include any suitable information associated with an account (e.g., a payment account and / or payment device associated with the account). Such information may be directly related to the account or may be derived from information related to the account. Examples of account information may include a PAN (primary account number or “account number”), username, expiration date, CW (card verification value), dCW (dynamic card verification value), CW2 (card verification value 2), CVC3 card verification values, etc. CW2 is generally understood to be a static verification value associated with a payment device. CW2 values are generally visible to a user (e.g., a consumer), whereas CW and dCW values are typically embedded in memory or authorization request messages and are not readily known to the user (although they are known to the issuer and payment processors). Payment credentials may be any information that identifies or is associated with a payment account. Payment credentials may be provided to make a payment from a payment account. Payment credentials can also include a username, an expiration date, a gift card number or code, and any other suitable information.

[0035] A “record” may be a facts, evidence, or related items of information stored for later reference. For example, a record may include data digitally stored in9KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 a database. A record may be managed, issued, and / or stored by a server computer. Examples of records include a user account, a database entry, a set of permissions, and any other suitable type of stored data. A record can include a value, such as a monetary amount, an alphanumeric data value, or a password.

[0036] A “user account” may include a record associated with an individual or organization at an account provider. Examples of a user account include a payment account, an access account, a secure data account, a membership account, a mobile network account, an identity account, or any other suitable type of account. A user account may be associated with one or more user devices.

[0037] A “payment account” may include a user account that is usable for making payments. Examples of a payment account include a credit card account, a bank account such as a checking account or savings account, a prepaid account, or any other suitable account associated with payments. In some embodiments, a payment account may be associated with one or more portable devices. A payment account may be identifiable based on payment account information, such as payment credentials. A payment account may include a stored value such as a dollar amount.

[0038] A “record identifier” may be any suitable information for identifying a record. For example, a record identifier can be an alphanumeric code or value. In some embodiments, a record identifier may be associated with an account, but may not be configured for using the account. For example, a record identifier may be a non-transactable identifier. A record identifier may take the form of a machine- readable code (e.g., a barcode) present on a package or device. For example, the record identifier can be a non-transactable machine-readable code.

[0039] A “mode” or “transaction mode” may indicate a manner, channel, area, or other circumstance in which a transaction is conducted, or access data is provided. A mode can include a combination of a type of data provided, a manner or technology through which data is provided, a type of device that provides the data, and / or an entity associated with the transaction. Types of information provided can include access data, a token, and / or virtual access data. Manners in which data is10KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 provided by a user or user device can include contactless transmission, contact transmission, magnetic stripe swipe, manual entry into a webpage, and / or token transmission by a mobile device, etc. Manners in which data is provided can be separated into two groups or channels including in-person transactions and remote transactions (e.g., eCommerce). In-person transactions can include situations where a user device is within physical proximity of an access device, such as contactless transmission, contact transmission, and / or magnetic stripe swipe. In-person modes can be referred to as PCS entry modes or presentment modes. Remote transactions can include situations where a data is transmitted to a remote server, such as manual entry into a webpage, token transmission by a computing device, etc. Types of devices can include a user device such as a stored value device, a mobile device, and / or a computing device. Examples of an entity associated with a transaction include a particular user, a particular device, and a particular resource provider. An entity may be identified by a phone number, an SMS text address, an Mobile Station International Subscriber Directory Number (MSISDN), an account number, a token requestor identifier, a name, an IP address, etc.

[0040] A “token” may be a substitute value for a credential. A token may be a string of numbers, letters, or any other suitable characters. Examples of tokens include payment tokens, access tokens, personal identification tokens, etc.

[0041] A “payment token” may include an identifier for a payment account that is a substitute for an account identifier, such as a primary account number (PAN).For example, a payment token may include a series of alphanumeric characters that may be used as a substitute for an original account identifier. For example, a token “4900 0000 0000 0001” may be used in place of a PAN “4147 0900 0000 1234.” In some embodiments, a payment token may be “format preserving” and may have a numeric format that conforms to the account identifiers used in existing transaction processing networks (e.g., ISO 8583 financial transaction message format). In some embodiments, a payment token may be used in place of a PAN to initiate, authorize, settle or resolve a payment transaction or represent the original credential in other systems where the original credential would typically be provided. In some embodiments, a payment token may be generated such that the recovery of the11KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 original PAN or other account identifier from the token value may not be computationally derived. Further, in some embodiments, the token format may be configured to allow the entity receiving the token to identify it as a token and recognize the entity that issued the token.

[0042] “Tokenization” is a process by which data is replaced with substitute data. For example, a payment account identifier (e.g., a primary account number (PAN)) may be tokenized by replacing the primary account identifier with a substitute number (e.g., a token) that may be associated with the payment account identifier. Further, tokenization may be applied to any other information that may be replaced with a substitute value (i.e. , token). Tokenization enhances transaction efficiency and security.

[0043] A “token issuer,” token provider,” “token service system,” or “token service computer” can include a system that services tokens. In some embodiments, a token service system can facilitate requesting, determining (e.g., generating) and / or issuing tokens, as well as maintaining an established mapping of tokens to primary account numbers (PANs) in a repository (e.g., token vault). In some embodiments, the token service system may establish a token assurance level for a given token to indicate the confidence level of the token to PAN binding. The token service system may include or be in communication with a token vault where the generated tokens are stored. The token service system may support token processing of payment transactions submitted using tokens by de-tokenizing the tokens to obtain the actual PANs. In some embodiments, a token service system may include a tokenization computer alone, or in combination with other computers such as a transaction processing network computer. Various entities of a tokenization ecosystem may assume the roles of the token service provider. For example, payment networks and issuers or their agents may become the token service provider by implementing the token services according to embodiments of the present invention.

[0044] A “token domain” may indicate an area and / or circumstance in which a token can be used. Examples of token domains may include, but are not limited to,12KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 payment channels (e.g., e-commerce, physical point of sale, etc.), POS entry modes (e.g., contactless, magnetic stripe, etc.), and merchant identifiers to uniquely identify where the token can be used. A set of parameters (i.e., token domain restriction controls) may be established as part of token issuance by the token service provider that may allow for enforcing appropriate usage of the token in payment transactions. For example, the token domain restriction controls may restrict the use of the token with particular presentment modes, such as contactless or e-commerce presentment modes. In some embodiments, the token domain restriction controls may restrict the use of the token at a particular merchant that can be uniquely identified. Some exemplary token domain restriction controls may require the verification of the presence of a token cryptogram that is unique to a given transaction. In some embodiments, a token domain can be associated with a token requestor.

[0045] A “token cryptogram” may include a token authentication verification value (TAW) associated with a token. A token cryptogram may be a string of numbers, letters, or any other suitable characters, of any suitable length. In some embodiments, a token cryptogram may include encrypted token data associated with a token (e.g., a token domain, a token expiry date, etc.). For example, a token cryptogram may be used to validate that the token is being used within a token domain and / or by a token expiry date associated with the token.

[0046] A “token request message” may be an electronic message for requesting token data. A token request message can request token data including a token and / or a token cryptogram. A token request message may include information usable for identifying an identity account or identity record, a payment account or digital wallet, and / or information for generating a payment token. For example, a token request message may include payment credentials, a mobile device identification information (e.g., a phone number or MSISDN), a digital wallet identifier, information identifying a tokenization service provider, a merchant identifier, a token cryptogram, information related to an electronic ID or authentication of an electronic ID, and / or any other suitable information. Information included in a token request message can be encrypted (e.g., with an issuer-specific key).13KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0047] A “token response message” may be a message that responds to a token request. A token response message may include an indication that a token request was approved or denied. A token response message may also include a payment token, mobile device identification information (e g., a phone number or MSISDN), a digital wallet identifier, information identifying a tokenization service provider, a merchant identifier, a token cryptogram, and / or any other suitable information. Information included in a token response message can be encrypted (e.g., with an issuer-specific key).

[0048] An “amount” can include a quantity of something. An amount can include a total of a thing or things in number, size, value, or extent.

[0049] The term "authentication" and its derivatives may include a process by which the credential of an endpoint (including but not limited to applications, people, devices, processes, and systems) can be verified to ensure that the endpoint is who they are declared to be.

[0050] The term "verification" and its derivatives may include a process that utilizes information to determine whether an underlying subject is valid under a given set of circumstances. Verification may include any comparison of information to ensure some data or information is correct, valid, accurate, legitimate, and / or in good standing.

[0051] A “key” may include a piece of information that is used in a cryptographic algorithm to transform input data into another representation. A cryptographic algorithm can be an encryption algorithm that transforms original data into an alternate representation, or a decryption algorithm that transforms encrypted information back to the original data. Examples of cryptographic algorithms may include triple data encryption standard (TDES), data encryption standard (DES), advanced encryption standard (AES), etc.

[0052] A "public key" may include an encryption key that may be shared openly and publicly. The public key may be designed to be shared and may be configured such that any information encrypted with the public key may only be14KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 decrypted using a private key associated with the public key (i.e., a public / private key pair).

[0053] A "private key" may include any encryption key that may be protected and secure. A private key may be securely stored at an entity and may be used to decrypt any information that has been encrypted with an associated public key of a public / private key pair associated with the private key.

[0054] A “public / private key pair” may refer to a pair of linked cryptographic keys generated by an entity. The public key may be used for public functions such as encrypting a message to send to the entity or for verifying a digital signature which was supposedly made by the entity. The private key, on the other hand may be used for private functions such as decrypting a received message or applying a digital signature. In some embodiments, the public key may be authorized by a body known as a Certification Authority (CA) which stores the public key in a database and distributes it to any other entity which requests it. The private key can typically be kept in a secure storage medium and will usually only be known to the entity. Public and private keys may be in any suitable format, including those based on Rivest- Shamir-Adleman (RSA) or elliptic curve cryptography (ECG).

[0055] A “cryptogram” may include a piece of obscured text such as encrypted text. A cryptogram may be formed by encrypting input data with an encryption key such as a symmetric encryption key. In some embodiments, a cryptogram is reversible so that the inputs that are used to form the cryptogram can be obtained using the same symmetric key to perform a decryption process. In some embodiments, if input data is encrypted using a private key of a public / private key pair, the cryptogram may also be a digital signature. A digital signature may be verified with a public key of the public / private key pair. In some embodiments, a cryptogram may include a dCW (dynamic card verification value).

[0056] An “authorization request message” may be an electronic message that requests authorization for a transaction. In some embodiments, it is sent to a payment processing network and / or an issuer of a payment account to request authorization for a payment transaction. An authorization request message15KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 according to some embodiments may comply with ISO 8583, which is a standard for systems that exchange electronic transaction information associated with a payment made by a consumer using a payment device or a payment account. An authorization request message may also comprise additional data elements corresponding to “identification information” including, for example, a service code, a CW (card verification value), a dCW (dynamic card verification value), an expiration date, etc. An authorization request message may also comprise “transaction data,” such as any information associated with a current transaction (e.g., the transaction amount, merchant identifier, merchant location, etc.), as well as any other information that may be utilized in determining whether to identify and / or authorize a payment transaction.

[0057] An “authorization response message” may be reply to an authorization request message. In some embodiments, an authorization response message may be an electronic message reply to an authorization request message generated by an issuing financial institution (i.e. , issuer) or a payment processing network. An authorization response message according to some embodiments may comply with ISO 8583, which is a standard for systems that exchange electronic transaction information associated with a payment made by a consumer using a payment device or a payment account. The authorization response message may include an authorization code, which may be a code that an account issuing bank returns in response to an authorization request message in an electronic message (either directly or through the payment processing network) to a merchant's access device (e.g., point of sale terminal) that indicates approval of the transaction. The code may serve as proof of authorization. As noted above, in some embodiments, a payment processing network may generate and / or forward the authorization response message to the merchant.

[0058] An “authorization computer” or “authorizing entity computer” may include any system involved in authorization of a transaction. The authorization computer may determine whether a transaction can be authorized and may generate an authorization response message including an authorization status (also may be known as an authorization decision). In some embodiments, an authorization 16KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 computer may be a payment account issuer computer. In some cases, the authorization computer may store contact information of one or more users. In other embodiments, the authorization computer may authorize non-financial transactions involving a user. For example, the authorization computer may make an authorization decision regarding whether the user can access a certain resource. In some cases, the authorization computer may be a content provider server computer associated with a content providing entity, which manages one or more resources that may be accessed by the user. The authorization computer may include an “access control server” that may be configured to authenticate a user.

[0059] A “network processing computer” or a “processing computer” may include a server computer used for interaction processing. In some embodiments, the network processing computer may be coupled to a database and may include any hardware, software, other logic, or combination of the preceding for servicing the requests from one or more client computers or user devices. The network processing computer may comprise one or more computational apparatuses and may use any of a variety of computing structures, arrangements, and compilations for servicing the requests from one or more client computers or user devices. In some embodiments, the network processing computer may operate multiple server computers. In such embodiments, each server computer may be configured to process an interaction for a given region or handles transactions of a specific type based on interaction data.

[0060] The network processing computer may include data processing subsystems, networks, and operations used to support and deliver authorization services, exception file services, and clearing and settlement services. An exemplary network processing computer may include VisaNet™. Networks that include VisaNet™ are able to process credit card transactions, debit card transactions, and other types of commercial transactions. VisaNet™, in particular, includes an integrated payments system (Integrated Payments system) which processes authorization requests and a Base II system, which performs clearing and settlement services. The network processing computer may use any suitable wired or wireless network including the Internet.17KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0061] The network processing computer may process transaction-related messages (e.g., authorization request messages and authorization response messages) and determine the appropriate destination computer (e.g., issuer computer / authorizing entity computer) for the interaction-related messages. In some embodiments, the network processing computer may authorize interactions on behalf of an issuer. The network processing computer may also handle and / or facilitate the clearing and settlement of financial transactions.

[0062] A “resource provider” may be an entity that can provide a resource such as goods, services, information, and / or access. Examples of resource providers includes merchants, data providers, transit agencies, governmental entities, venue and dwelling operators, etc. A “merchant” may typically be an entity that engages in transactions and can sell goods or services, or provide access to goods or services.

[0063] An “authorizing entity” may be an entity that authorizes a request. Examples of an authorizing entity may be an issuer, a governmental agency, a document repository, an access administrator, etc. An authorizing entity may operate an authorizing entity computer. An “issuer” may refer to a business entity (e.g., a bank) that issues and optionally maintains an account for a user. An issuer may also issue payment credentials stored on a user device, such as a cellular telephone, smart card, tablet, or laptop to the consumer, or in some embodiments, a portable device.

[0064] An “access device” may be any suitable device that provides access to a resource. An access device may be in any suitable form. Some examples of access devices include an energy supply terminal (e.g., an electric charger at a charging station), gasoline pumps, vending machines, kiosks, POS or point of sale devices (e.g., POS terminals), cellular phones, PDAs, personal computers (PCs), tablet PCs, hand-held specialized readers, set-top boxes, electronic cash registers (ECRs), automated teller machines (ATMs), virtual cash registers (VCRs), and the like. An access device may use any suitable contact or contactless mode of operation to send or receive data from, or associated with, a user communication device. In some embodiments, an access device may include a reader, a processor,18KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 and a computer-readable medium. A reader may include any suitable contact or contactless mode of operation. For example, exemplary readers can include contactless readers (e.g., radio frequency (RF) antennas), contact chip readers, optical scanners, bar code readers, or magnetic stripe readers to interact with a user device and / or mobile device.

[0065] A “processor” may include a device that processes something. In some embodiments, a processor can include any suitable data computation device or devices. A processor may comprise one or more microprocessors working together to accomplish a desired function. The processor may include a CPU comprising at least one high-speed data processor adequate to execute program components for executing user and / or system-generated requests. The CPU may be a microprocessor such as AMD's Athlon, Duron and / or Opteron; IBM and / or Motorola's PowerPC; IBM's and Sony's Cell processor; Intel's Celeron, Itanium, Pentium, Xeon, and / or XScale; and / or the like processor(s).

[0066] A “memory” may be any suitable device or devices that can store electronic data. A suitable memory may comprise a non-transitory computer readable medium that stores instructions that can be executed by a processor to implement a desired method. Examples of memories may comprise one or more memory chips, disk drives, etc. Such memories may operate using any suitable electrical, optical, and / or magnetic mode of operation.

[0067] A “server computer” may include a powerful computer or cluster of computers. For example, the server computer can be a large mainframe, a minicomputer cluster, or a group of servers functioning as a unit. In one example, the server computer may be a database server coupled to a Web server. The server computer may comprise one or more computational apparatuses and may use any of a variety of computing structures, arrangements, and compilations for servicing the requests from one or more client computers.

[0068] FIG. 1A shows a block diagram of a system 100, according to embodiments. The system 100 comprises a stored value device 105, a user device 104, a first access device 110, a first resource provider computer 120, a first19KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 transport computer 130, a first processing computer 140, a first authorizing entity computer 150, a second processing computer 141 , and a second authorizing entity computer 151.

[0069] The stored value device 105 and the user device 104 can be in operative communication with the first access device 110, which may also be in operative communication with the first resource provider computer 120 and the first authorizing entity computer 150. The first resource provider computer 120 can be in operative communication with the first transport computer 130. The first transport computer 130 can be in operative communication with the first processing computer 140 and the second processing computer 141. The first processing computer 140 can be in operative communication with the first authorizing entity computer 150. The second processing computer 141 can be in operative communication with the second authorizing entity computer 151.

[0070] For simplicity of illustration, a certain number of components are shown in FIG. 1 A. It is understood, however, that embodiments of the invention may include more than one of each component. In addition, some embodiments of the invention may include fewer than or greater than all of the components shown in FIG. 1 A.

[0071] Messages between the devices in the system 100 in FIG. 1A can be transmitted using a secure communications protocols such as, but not limited to Secure Hypertext Transfer Protocol (HTTPS), SSL, ISO (e.g., ISO 8583) and / or the like. The communications network include any one and / or the combination of the following: a direct interconnection; the Internet; a Local Area Network (LAN); a Metropolitan Area Network (MAN); an Operating Missions as Nodes on the Internet (OMNI); a secured custom connection; a Wide Area Network (WAN); a wireless network (e.g., employing protocols such as, but not limited to a Wireless Application Protocol (WAP), l-mode, and / or the like); and / or the like. The communications network can use any suitable communications protocol to generate one or more secure communication channels. A communications channel may, in some instances, comprise a secure communication channel, which may be established in20KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 any known manner, such as through the use of mutual authentication and a session key, and establishment of a Secure Socket Layer (SSL) session.

[0072] The user device 104 may be any suitable device operated by a user, and may be a tool used by a user to gain access, such as access to information, an account, a record, physical space, public transit, goods, services, etc. The user device 104 can include second access data (e.g., payment credentials) associated with a second record (e.g., an account) at the second authorizing entity computer 151. In some embodiments, the user device 104 may be a payment card associated with a user.

[0073] The stored value device 105 may also be any suitable device operated by a user, and may be a tool used by a user to gain access, such as access to information, an account, a record, physical space, public transit, goods, services, etc. The stored value device 105 may include first access data (e.g., payment credentials) associated with a first record (e.g., an account) at the first authorizing entity computer 150.

[0074] In some embodiments, the stored value device 105 may be another user device (also referred to as a first user device) that is distinct from the user device 104 (also referred to as a second user device). The first record may include a stored value. In some embodiments, the stored value device 105 may be a payment card such as a prepaid card or gift card, and the stored value may be a monetary amount in the first record (e.g., an account). In some embodiments, the stored value device 105 and / or first record may not be associated with a specific user, at least before being obtained and / or purchased.

[0075] FIG. 2 shows a diagram of a stored value device 105, according to an embodiment of the invention. The stored value device 105 can include a substrate 208, a memory 206 and / or a contactless element 207.

[0076] The stored value device 105 can include any suitable displayed information, such as images, data, written messages, and / or decorations. Information can be displayed through printing, embossing, otherwise visually21KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 displayed. The stored value device 105 can also include blank space, upon which additional information can be written and / or printed at a later time. In some embodiments, the stored value device 105 is entirely blank in order to accommodate future customization.

[0077] For example, displayed information on the stored value device 105 can include a type 210. A type 210 can indicate a type of user device associated with the stored value device 105. For example, in some embodiments, the type 210 can include the words “gift card” or any other suitable indication of a gift card type.

[0078] As another example of displayed information, the stored value device 105 can include a name 211. The name 211 can indicate a name or title of an organization, group, network, individual, business, and / or any other suitable entity associated with the stored value device 105. For example, in some embodiments, the name 211 can include words and / or images associated with an entity that can process or authorize transactions for the stored value device 105, such as an entity operating the first processing computer 140 and / or the first authorizing entity computer 150.

[0079] As another example of displayed information, the stored value device 105 can include a symbol 212. The symbol 212 can indicate, for example, a communication capability or other technology associated with the stored value device 105, such as a contactless symbol associated with contactless communication capabilities.

[0080] In some embodiments, the stored value device 105 can omit, obscure, and / or exclude certain types of information from being displayed. For example, the stored value device 105 may not display information that may be useful in identifying a record (e.g., account) associated with the stored value device 105. The stored value device 105 may not display access data. The stored value device 105 may not display an account number, an expiration date, a verification code. In some embodiments, areas where access data may typically be displayed can instead be blank and / or include decorative imagery. In some embodiments, stored value device 105 may not display user identification information (e.g., a name, address, etc.).22KILPATRICK TOWNSEND 78970272 IPATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0081] In some embodiments, displayed information on the stored value device 105 may include only the type 210, the name 211 , and / or the symbol 212. No other information may be displayed. Some embodiments may further decoration with no other display that provides information, such as information related to the stored value device 105, records, and / or associated entities.

[0082] The substrate 208 can take any suitable shape, size, and / or dimensions. For example, the stored value device 105 can be in the form of a card due to a rectangular substrate. In one example, the substrate 208 may have a horizontal width of 85.6 millimeters and a vertical height of 54 millimeters.Embodiments allow the substrate 208 to have any other suitable shape, such as a circle, oval, square, rectangle of other dimensions, heart, star, flower, sports ball, other sports equipment, clothing shapes, mountain shape, tree shape, other nature shapes, animal shapes, person shapes, etc.

[0083] The substrate 208 can include one or more layers of material. The one or more layers may comprise one or more layers of plastic, metal, paper, and / or other suitable material. The one or more layers may be thin layers.

[0084] In some embodiments, the substrate 208 can include paper. One or more layers and / or types of paper can be used to create the substrate 208. Paper may be suitable for writing and / or printing additional custom information onto the stored value device 105 at a later time, such as a personal message, an amount description, a company logo, a name, an expiration date, a record identifier, an occasion, a decoration style or other design. Additionally, manufacturing processes for paper-based devices may be simpler and more cost effective than manufacturing processes for metal or plastic devices.

[0085] Any suitable type of paper can be included, such as card stock or other high-quality paper. Card stock, also called cover stock or pasteboard, is paper that is thicker and more durable than typical writing and printing paper, but thinner and more flexible than other forms of paperboard. The weight of cardstock can range from about 135 grams per square meter to about 300 grams per square meter.23KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0086] The substrate 208 can have a surface that is smooth, textured, metallic, glossy, or have any other suitable surface characteristics.

[0087] In some embodiments, the stored value device 105 can exclude one or more components that may be found in other types of user devices. For example, the stored value device 105 may not have a magnetic stripe. Typically, a user device includes a magnetic stripe which stores static data. Embodiments can specifically omit the magnetic stripe and thereby omit storage of access data (e.g., an account number, an expiration date, a verification code) on a magnetic stripe.

[0088] In some embodiments, access data may be digitally stored only in a memory 206, as discussed below. The access data may be transmittable and / or readable only from the memory 206 through the contactless element 207 and / or electrical contacts, as discussed below.

[0089] Exclusion of the magnetic stripe can facilitate the use of alternative materials in the substrate 208. For example, swiping or otherwise utilizing a magnetic stripe may rely on a rigid supporting substrate (e.g., plastic and / or metal) to maintain the shape and structure of the device while being swiped. Thus, it may be acceptable to use a more flexible, pliable, and / or delicate material, such as paper, for a stored value device 105 with no magnetic stripe that does not need to maintain the same amount of structural rigidity, support, or strength. For similar reasons, the substrate 208 can have an alternative shape, such a non-rectangular shape and / or a size that is different (e.g., larger or smaller) than a typical credit card size.

[0090] The memory 206 and / or the contactless element 207 can be present on and / or provided within the substrate 208. For example, the memory 206 and / or the contactless element 207 can be embedded or enclosed between two layers of material (e.g., layers of paper, plastic, or metal). Additionally, or alternatively, the memory 206 and / or the contactless element 207 can be attached (e.g., glued) to one or more layers of material.

[0091] The memory 206 and / or the contactless element 207 can be positioned in any suitable area of the substrate 208, such as near the right side, near the24KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 center, near the top, near the bottom, and / or at any intermediary zones of the substrate 208. The contactless element 207 may be located near an edge of the substrate 208, but preferably spaced at least 5 millimeters from the closest card edge. As shown in FIG. 1 , the memory 206 can be positioned within a perimeter of the contactless element 207. In other embodiments, the memory 206 can be positioned outside of and adjacent to the contactless element 207.

[0092] The memory 206 can include a computer readable medium and / or one or more hardware processers. For example, the memory 206 can include one or more packaged integrated circuit chips and may include suitable volatile and nonvolatile memories including DRAMs, EEPROMs, etc. The memory 206 may also be referred to as a chip. The memory 206 may also comprise a data processor. In some embodiments, the memory 206 is a secure element chip. The memory 206 can store data and computer code as well as execute the computer code to complete a task. For example, the memory 206 can store access data, cryptographic keys, one or more applications, and other suitable data for interacting with an access device to gain access to a desired resource. The memory 206 can also store personal information such as a name, address, email address, phone number, or any other suitable identification information of one or more users. In some embodiments, placeholder personal information that does not identify a real person can be used, as the stored value device 105 may not be associated with a specific person when created.

[0093] To execute an access transaction, the memory 206 can provide access data (e.g., credentials) to an access device through one or more (e.g., in conjunction with the contactless element 207 or electrical contacts). Additionally, the memory 206 can include instructions, executable by a processor, for generating a cryptogram. The cryptogram can be generated based on a key. For example, the key can be used to encrypt or otherwise generate an output based on inputs of the access data, a counter value, a timestamp, an access device identifier received from an access device, and / or any other suitable information. The memory 206 may include and / or take the form of a hardware security module (HSM) that safeguards and manages secrets, such as keys.25KILPATRICK TOWNSEND 78970272 IPATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0094] The stored value device 105 may be configured to response to communications from an external device, such as an access device, in a predefined manner. For example, the stored value device 105 may be configured to provide only the access data, the cryptogram, and / or other suitable information. The stored value device 105 may be configured to not provide the key, and instead keep the key securely stored and protected in the memory 206.

[0095] The contactless element 207, which can be present on or embedded within the substrate 208, may include any suitable type of wireless transceiver, such as an antenna. In some embodiments, the contactless element 207 conforms to the ISO / IEC 14443 standard. The contactless element 207 can be electrically coupled to the memory 206 so that the memory 206 can communicate with external devices via the contactless element 207. The contactless element 207 enables the stored value device 105 to communicate with the access device through over-the-air communications (e.g., short range wireless communications) with a contactless reader at the access device.

[0096] The contactless element 207 may be an antenna in the form of a single-turn coil, in some embodiments. In one example, the coil is rectangular with a width of 72 millimeters and a height of 42 millimeters. Embodiments allow the coil dimensions to vary in any suitable manner. For example, the coil can be larger if allowed by the size of the stored value device 105, or smaller if required by the size of the stored value device 105. As shown, in some embodiments, the contactless element 207 may encircle the memory 206. The contactless element 207 may thereby utilize more of the available width of the stored value device 105 so that a coil with a rectangular width of 72 millimeters can fit on a stored value device 105 width of 85.6 millimeters.

[0097] In some embodiments, in addition to or instead of the contactless element 207, the stored value device 105 can include electrical contacts, which may be in the form of electrically conductive lands, pads, or plates with any suitable configuration and shape. Electrical contacts can include conductive materials, such as copper, aluminum, gold, silver, or alloys. In some embodiments, the electrical26KILPATRICK TOWNSEND 78970272 IPATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 contacts can be configured according to the ISO / IEC 7816 standards. Electrical contacts can be electrically connected to the memory 206 so that the memory 206 can communicate with external devices via the electrical contacts. Through electrical contacts, the stored value device 105 can interface and communicate with an access device (e.g., through a physical contact connection between the electrical contacts and a contact chip reader at the access device). The electrical contacts may be printed electrical circuits produced by known circuit printing techniques. In some embodiments, electrical contacts can be excluded, which may allow more flexibility and variability in the shape, size, and / or materials of the substrate 208.

[0098] As mentioned above, the stored value device 105 can be associated with a first record. For example, the first record can be a prepaid debit account or an access account. The memory 206 can store access data (e.g., digitally encoded access data) that identifies the account and can be provided to use the account to conduct a transaction.

[0099] A prepaid account can, in some embodiments, include a predefined starting amount (e.g., $10, $50, or $100). The starting amount can be activated or attributed to the account when the stored value device 105 is purchased.

[0100] In other embodiments, the prepaid account can have a customizable amount. For example, a user can set a custom amount to load onto the prepaid account and / or a funding source from which to draw the amount. To load funds onto the prepaid account, the user can use a mobile device (or other computing device) to scan a machine-readable code (e.g., barcode or QR code) included on packaging to which the stored value device 105 is attached and / or enclosed within. The machine- readable code can include a first record identifier (which may be different than the access data), instructions for accessing a webpage for funding the prepaid account, and / or instructions for accessing a webpage for checking the account balance.

[0101] In some embodiments, the memory 206 may within a tamper-resistant security module (TRSM) of the stored value device 105. A TRSM may be a device that incorporates physical protections to prevent compromise of cryptographic security parameters that it contains. A TRSM may include tamper-resistance27KILPATRICK TOWNSEND 78970272 IPATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 properties that make intrusion difficult, such as by employing hardened casing. A TRSM may include tamper-evident properties that make intrusion attempts evident to subsequent viewers, such as by employing seals which must be broken during intrusion. A TRSM may include tamper-responsive properties that detect an intrusion attempt, destroy the contents (e.g., delete keys) of the TRSM in response to tampering, and / or otherwise make the memory 206 and / or stored value device 105 inoperable in response to tampering. Tampering may include probing the memory 206, scanning the memory 206, attempting to remove the memory 206 from the stored value device 105, or any other attempt to obtain data (e.g., access data and / or keys) from the memory 206. In some embodiments, the memory 206 can take the form of a secure element.

[0102] Referring back to FIG. 1 , first resource provider computer 120 can include any suitable computational apparatus operated by a resource provider (e.g., a merchant). In some embodiments, the first resource provider computer 120 may be configured to send data to a first processing computer 140 via a first transport computer 130 as part of a payment verification and / or authentication process for a transaction between the user (e.g., consumer) and the resource provider. The first resource provider computer 120 may also be configured to generate authorization request messages for transactions between the resource provider and the user, and route the authorization request messages to a first authorizing entity computer 150 for transaction processing. In some embodiments, the first resource provider computer 120 may include one or more server computers that may host one or more websites associated with the resource provider (e.g., a merchant).

[0103] In some embodiments, the first resource provider can utilize the first access device 110 in addition to and / or instead of the first resource provider computer 120. For example, the first access device 110 can be configured to communicate with the user device 104 and / or stored value device 105 for in-person transactions. The first access device 110 can provide information received from the stored value device 105 to the first resource provider computer 120.28KILPATRICK TOWNSEND 78970272 IPATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0104] The first access device 110 may use any suitable contact or contactless mode of operation to send or receive data from a user device. Some examples of access devices include PCS devices, cellular phones, PDAs, personal computers (PCs), tablet PCs, hand-held specialized readers, set-top boxes, electronic cash registers (ECRs), automated teller machines (ATMs), virtual cash registers (VCRs), kiosks, security systems, access systems, Websites, and the like. In some embodiments, a mobile device or other user computing device can communicate directly with the first resource provider computer 120 for internet-based transactions without interacting with the first access device 110.

[0105] The first transport computer 130 can include a server computer. The first transport computer 130 may be associated with an acquirer, which may be an entity (e.g., a commercial bank) that has a business relationship with a particular merchant or other entity. Some entities can perform both issuer and acquirer functions. Some embodiments may encompass such single entity issuer-acquirers.

[0106] The first processing computer 140 may be disposed between the first transport computer 130 and the first authorizing entity computer 150. The first processing computer 140, the first transport computer 130, and the first authorizing entity computer 150 may operate suitable routing tables to route authorization request messages and / or authorization response messages using access data, token data, merchant identifiers, and / or other account identifiers.

[0107] The second processing computer 141 may be disposed between the first transport computer 130 and the second authorizing entity computer 151. The second processing computer 141, the first transport computer 130, and the second authorizing entity computer 151 may operate suitable routing tables to route authorization request messages and / or authorization response messages using access data, token data, merchant identifiers, and / or other account identifiers.

[0108] The first authorizing entity computer 150 can include a server computer operated by first authorizing entity. An authorizing entity may be an entity that authorizes a request. An example of an authorizing entity may be an issuer, which may typically refer to a business entity (e.g., a bank) that maintains an account for a29KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 user. An issuer may also issue and manage a record (e.g., an account) associated with a user device, access data, and / or a user. The first issuer may issue and / or manage a first record associated with the stored value device 105.

[0109] The second authorizing entity computer 151 can include a server computer operated by second authorizing entity, such a second issuer. The second issuer may issue and / or manage a second record associated with the user device 104.

[0110] In some embodiments, a single issuer may issue both the first record and the second record, and thereby may be associated with both the stored value device 105 and the user device 104. Accordingly, the first authorizing entity computer 150 and the second authorizing entity computer 151 can be combined, in some embodiments. Similarly, the user device 104 and stored value device may be associated with the same network such that the first processing computer 140 and the second processing computer 141 may be combined, in some embodiments.

[0111] FIG. 3 shows a block diagram of an authorizing entity computer 350. The authorizing entity computer 350 may include a processor 351 and a computer readable medium 354, a data storage 353, and a network interface 352 coupled to the processor 351 .

[0112] The computer readable medium 354 may comprise a communication module 355, an activation module 356, a verification module 357, and an authorization module 358.

[0113] The communication module 355 can comprise code, executable by the processor 351 to cause the processor 351 to communicate with external entities such as the first access device 110, a token service computer, and / or the first processing computer 340.

[0114] The activation module 356 may comprise code that causes the processor 351 to modify a record (e.g., an account) to indicate that the record is active. In some embodiments, the activation module 356 may comprise code for two separate activations. A first activation may be in response to an activation request30KILPATRICK TOWNSEND 78970272 IPATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01(also referred to as a test transaction or activation transaction) which may include an authorization request message with a zero-dollar value or other flag. A second activation may be in response to a receiving a loading message indicating that a value can be loaded and / or unlocked at the record. A record may be fully active and / or usable after both activations take place.

[0115] The verification module 357 may comprise code that causes the processor 351 to perform a verification. This can include verifying a cryptogram or digital signature, verifying that a record is active, verifying that a record includes sufficient value for a transaction, and / or any other suitable verification.

[0116] The authorization module 358 may comprise code that causes the processor 351 to authorize an interaction. An interaction may be authorized in response to one or more successful verifications, determining whether a record includes sufficient value, one or more risk analyses, and / or any other suitable consideration.

[0117] The computer readable medium 354 may comprise code executable by the processor 351 for performing operations comprising: receiving, by the authorizing entity computer, an authorization request message from an access device, the authorization request message comprising access data, a cryptogram, and a zero amount or no amount in an authorization amount field, wherein the access device received the access data and the cryptogram from a stored value device, and the stored value device used a first key to generate the cryptogram; identifying, by the authorizing entity computer, a record associated with the access data, the record including a second key, and the record being in an inactive state; verifying, by the authorizing entity computer, the cryptogram using the second key; and in response to verifying the cryptogram, updating the record to be in an active state.

[0118] A method according to embodiments of the invention can also be described with respect to FIG. 1A. The steps shown in the method may be performed sequentially or in any suitable order in embodiments of the invention. In some embodiments, one or more of the steps may be optional.31KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0119] A user may wish to obtain a stored value device 105. Additionally, the user may wish to activate the stored value device 105 and / or load value onto the stored value device.

[0120] In some embodiments, the stored value device 105 may not include a magnetic stripe. Additionally, the stored value device 105 may not display access data. However, the stored value device 105 may digitally store access data. For example, the stored value device 105 may comprise a memory storing a first key and first access data. The first access data may be associated with a first record at a first authorizing entity computer 150. Before the method begins, the first record may be in in an inactive state, may not be associated with a particular user, and / or may not include a loaded or otherwise available value.

[0121] In some embodiments, the first access device 110 may receive input indicating that the stored value device 105 is being presented for activation of the first record. For example, the user that is obtaining the stored value device 105 and / or an operator of the first access device 110 can select an option at the first access device 110 for activating a stored value device 105. The activation input may be received at the first access device 110 before the stored value device 105 is presented to the first access device 110, or at any other suitable time.

[0122] To initiate the method, the user or an access device operator may present the stored value device 105 to a first access device 110 to activate the stored value device 105. The first access device 110 and stored value device 105 may then begin an electronic communication exchange. For example, the first access device 110 may prompt the stored value device 105 to provide the first access data.

[0123] At step 1, the stored value device 105 may generate a first cryptogram. For example, the stored value device may generate the first cryptogram based on the first key, the first access data, a counter value, a timestamp, one or more random numbers, an access device identifier, and / or any other suitable information.32KILPATRICK TOWNSEND 78970272 IPATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0124] The stored value device 105 may then transmit the first access data, the first cryptogram, and / or any other suitable information to the first access device 110. For example, the stored value device 105 may transmit the first access data and the first cryptogram via short-range wireless communications such as an NFC communication exchange.

[0125] At step 2, the first access device 110 may generate a first authorization request message. The first authorization request message may comprise the first access data and the first cryptogram. The authorization request may include an authorization amount field. The authorization amount field have a zero amount (e.g., a data entry of zero dollars) or no amount (e.g., no value, no data, or null).

[0126] The first authorization request message can be generated to indicate the zero amount or no amount in the authorization amount field in order to indicate that the first authorization request message is being submitted to request activation of the first record, and to indicate that the first authorization request message is not being submitted to request authorization of a transaction. In some embodiments, the first access device 110 may format or configure the authorization amount field to have the zero amount or to be empty (e.g., no amount) in response to a received input at the first access device 110 indicating that the stored value device 105 is being presented for activation. Additionally or alternatively, the first authorization request message may include a flag or other indicator specifying that the message is being submitted to request activation of the first record. The first authorization request message may also be referred to as an activation request message.

[0127] The first access device 110 can then transmit the first authorization request message to a first authorizing entity computer 150 associated with the stored value device 105 and / or storing the first record associated with the first access data and / or the stored value device 105. In some embodiments, the first access device 110 may transmit the first authorization request message to the first authorizing entity computer 150 via one or more intermediary computers. For example, the first access device 110 may transmit the first authorization request message to the first resource provider computer 120 at step 2. Then, the first resource provider33KILPATRICK TOWNSEND 78970272 IPATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 computer 120 may transmit the first authorization request message to the first transport computer 130 at step 3. Then, the first transport computer 130 may transmit the first authorization request message to the first processing computer 140 at step 4. Then, the first processing computer 140 may transmit the first authorization request message to the first authorizing entity computer 150 at step 5.

[0128] At step 6, the first authorizing entity computer 150 may perform one or more actions to activate the first record.

[0129] For example, the first authorizing entity computer 150 may determine that the first authorization request message includes a zero amount or no amount in the authorization amount field. In response, the first authorizing entity computer 150 may determine that the first authorization request message is submitted to request record activation and not to request authorization for a transaction. Embodiments allow the first authorizing entity computer 150 to determine that the first authorization request message is submitted to request record activation based on any other suitable information or modification in the first authorization request message.

[0130] The first authorizing entity computer 150 may identify the first record associated with the first access data. The first record may be in an inactive state. Additionally, the first record may include a second key. The second key may correspond to the first key. For example, the first key and the second key may be an encryption key pair (e.g., symmetric or unsymmetric).

[0131] The first authorizing entity computer 150 may verify the first cryptogram included in the first authorization request message. For example, the first authorizing entity computer 150 may use the second key to verify the first cryptogram. The first authorizing entity computer 150 may verify the first cryptogram by regenerating the first cryptogram based on the second key and the first access data and confirming a match with the received first cryptogram, by decrypting the first cryptogram with the second key and validating the decrypted first access data, or through any other suitable verification process.34KILPATRICK TOWNSEND 78970272 IPATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0132] The first authorizing entity computer 150 may update the first record to be in an active state. For example, the first authorizing entity computer 150 may activate the first record in response to verifying the first cryptogram. The first record may be updated to include an indication that the first record has been activated.

[0133] The first authorizing entity computer 150 may then generate a first authorization response message. The first authorization response message can indicate that the first record has been successfully activated, and is now in the active state. For example, the first authorization response message can include a positive authorization result. In this case (e.g., responding to a request for activating a record), a positive authorization result can indicate that a record has been activated instead of indicating that a transaction has been authorized.

[0134] In some embodiments, the first authorizing entity computer 150 can provide a second record identifier associated with the first record. The second record identifier can be an alphanumeric code (e.g., 8HT5D784A) or random number that can be used to identify the record. The second record identifier can be distinct from the first access data (e.g., a different alphanumeric value) and may not be access data (e.g., not a PAN). In some embodiments, the first authorizing entity computer 150 may not accept the second record identifier for conducting a transaction or otherwise utilizing the first record. However, the second record identifier may be usable for identifying the first record and / or obtaining additional access data (e.g., virtual access data such as a virtual PAN). In some embodiments, the first authorizing entity computer 150 can include the second record identifier in the first authorization response message.

[0135] The first authorizing entity computer 150 can then transmit the first authorization response message to the first access device 110. In some embodiments, the first authorizing entity computer 150 may transmit the first authorization response message to the first access device 110 via one or more intermediary computers. For example, the first authorizing entity computer 150 may transmit the first authorization response message to the first processing computer 140 at step 6. Then, the first processing computer 140 may transmit the first35KILPATRICK TOWNSEND 78970272 IPATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 authorization response message to the first transport computer 130 at step 7. Then, the first transport computer 130 may transmit the first authorization response message to the first resource provider computer 120 at step 8. Then, the first resource provider computer 120 may transmit the first authorization response message to the first access device 110 at step 9.

[0136] At step 10, the first access device 110 can provide to the user and / or operator information indicating that the first record has been activated. For example, the first access device 110 can display information indicating that the first record has been activated, emit a sound associated with activation, etc.

[0137] In some embodiments, the first access device 110 can provide the second record identifier to the user. For example, the first access device 110 can display the second record identifier to the user and / or the first access device 110 can print a copy of the second record identifier. Additionally or alternatively, the second record identifier can be printed on a transaction receipt as discussed below with respect to step 20.

[0138] At this point, the first record may be in the active state. However, the first record may not include a value or balance, or a balance may be locked. Accordingly, the user may conduct a transaction to load or unlock a value at the first record. This can include purchasing the stored value device 105.

[0139] The user may present a user device 104 to the first access device 110 to initiate a transaction for loading a value and / or obtaining ownership of the stored value device 105.

[0140] At step 11 , the user device 104 may transmit second access data to the first access device 110. The user device 104 may also provide a cryptogram and / or any other suitable information for conducting the transaction. The user device 104 may transmit the second access data via short-range wireless communications, contact-based electronic communications, magnetic stripe (e.g., the user device 104 may include a magnetic stripe even when the stored value device 105 does not include a magnetic stripe), and / or any other suitable transmission mode.36KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0141] At step 12, the first access device 110 may generate a second authorization request message. The second authorization request message can comprise the second access data, a cryptogram, and / or any other suitable data. The second authorization request message can include an authorization amount field populated with an amount for the transaction. The amount may be associated with the stored value device 105. For example, the amount can include a value being loaded onto the first record associated with the stored value device 105 and / or a value being unlocked at the first record. The amount may also include a cost of acquiring the stored value device 105.

[0142] According to embodiments, in contrast with the first authorization request message discussed above with respect to step 2, the presence of the transaction amount in the second authorization request message can indicate that the second authorization request message is being submitted to request authorization of the transaction, and not being submitted to request activation of a record. In some embodiments, the first access device 110 may format or configure the authorization amount field to have the amount in response to a received input at the first access device 110 indicating that a transaction is being conducted.

[0143] The first access device 110 can then transmit the second authorization request message to a second authorizing entity computer 151 (e.g., also referred to as another authorizing entity computer) associated with the user device 104 and / or storing a second record associated with the second access data and / or the user device 104. In some embodiments, the second record may be stored by the same authorizing entity as the first record, and the first access device 110 can therefore transmit the second authorization request message to the same first authorizing entity computer 150 (e.g., which can then perform step 16, discussed below).

[0144] In some embodiments, the first access device 110 may transmit the second authorization request message to the second authorizing entity computer 151 via one or more intermediary computers. For example, the first access device 110 may transmit the second authorization request message to the first resource provider computer 120 at step 12. Then, the first resource provider computer 12037KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 may transmit the second authorization request message to the first transport computer 130 at step 13. Then, the first transport computer 130 may transmit the second authorization request message to the second processing computer 141 at step 14. Then, the second processing computer 141 may transmit the second authorization request message to the second authorizing entity computer 151 at step 15.

[0145] At step 16, the second authorizing entity computer 151 may perform one or more actions to authorize the transaction

[0146] For example, the second authorizing entity computer 151 may determine that the second authorization request message includes an amount (e.g., a value other than zero or null) in the authorization amount field. In response, the second authorizing entity computer 151 may determine that the second authorization request message is submitted to authorize a transaction (e.g., and not to request record activation).

[0147] The second authorizing entity computer 151 may identify the second record associated with the second access data, verify a cryptogram included in the second authorization request message, verify that the second record includes sufficient value for the transaction, and / or perform any other suitable validations for the transaction and / or second record. The second authorizing entity computer 151 may thereby determine to authorize the transaction based on the transaction amount and / or the second record associated with the second access data.

[0148] The second authorizing entity computer 151 can then generate a second authorization response message. The second authorization response message can indicate that the transaction has been authorized.

[0149] The second authorizing entity computer 151 can then transmit the second authorization response message to the first access device 110. In some embodiments, the second authorizing entity computer 151 may transmit the second authorization response message to the first access device 110 via one or more intermediary computers. For example, the second authorizing entity computer 15138KILPATRICK TOWNSEND 78970272 IPATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 may transmit the second authorization response message to the second processing computer 141 at step 16. Then, the second processing computer 141 may transmit the second authorization response message to the first transport computer 130 at step 17. Then, the first transport computer 130 may transmit the second authorization response message to the first resource provider computer 120 at step 18. Then, the first resource provider computer 120 may transmit the second authorization response message to the first access device 110 at step 19.

[0150] At step 20, the first access device 110 can provide to the user and / or operator information indicating that the transaction is authorized. For example, the first access device 110 can display information indicating that the transaction is authorized, emit a sound associated with authorization, etc. The first access device 110 may provide to the user a digital or printed transaction receipt or any other suitable proof of transaction for obtaining and / or loading value to the stored value device. In some embodiments, the transaction receipt can include information about the transaction such as a transaction amount being charged to the second record, an amount being loaded or unlocked at the first record, and / or a second record identifier associated with the first record and stored value device (e.g., as discussed above with respect to step 10).

[0151] Accordingly, a first authorization request message can be generated, sent, and processed to activate a first record associated with the stored value device as part of steps 1-10, and a second authorization request message can be generated, sent, and processed to conduct a transaction for obtaining the stored value device as a part of steps 11-20. In other words, two different authorization request messages can be generated and sent for a single transaction (e.g., purchasing a stored value device).

[0152] In some embodiments, the first authorizing entity computer 150 may not yet be aware that the transaction was conducted for obtaining and / or loading value onto the stored value device 105. For example, if the transaction is conducted using a second record at the second authorizing entity computer 151 and not at the first authorizing entity computer 150, as discussed above, the first authorizing entity39KILPATRICK TOWNSEND 78970272 IPATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 computer 150 may not yet have received any communications about the transaction. Accordingly, to complete the loading of value at the first record, an additional communication can be sent to the first authorizing entity computer 150.

[0153] At step 21 , the first resource provider computer 120 (or the first access device 110) may transmit to first authorizing entity computer 150 a loading message. The loading message can indicate that the stored value device 105 has been obtained by a user and / or that a transaction for loading value to the first record was authorized. The loading message can the first access data, an authorized transaction amount, an authorization result received in the second authorization response message, and / or any other suitable information. The loading message may be sent in response to the second authorization response message in step 19.

[0154] The loading message may not be an authorization request message. It can have any other suitable format and be sent through any other channel (e.g., internet-based communications). For example, the first authorization request message and the second authorization request message may each have an ISO 8583 format and / or be communication through a transaction authorization communication channel, while the loading message may not have an ISO 8583 format and may not be transmitted through a transaction authorization communication channel. The loading message may be referred to as a third message (e.g., a third message sent by the first resource provider computer 120, the first access device 110, and / or a merchant or other resource provider associated with the first resource provider computer 120 and / or the first access device 110).

[0155] In some embodiments, the first resource provider computer 120 may be able determine where to transmit the loading message (e.g., to first authorizing entity computer 150) based on operator input and / or based on information attached to packaging of the stored value device 105. For example, a package of the stored value device 105 can include a first record identifier. The first record may may be an alphanumeric code (e.g., 5A87GH4TV), random number, or any other suitable value. The first record identifier can be distinct from the first access data (e.g., a different alphanumeric value) and may not be access data (e.g., not a PAN). The first40KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 identifier may be printed on the package and / or encoded in a machine-readable code (e.g., barcode or QR code) printed on the package. The first record identifier can identity the first record and / or the first authorizing entity computer 150. The first record identifier may be non-transactable. For example, while the first record identifier may be usable for identifying the first record, the first record identifier may not be considered access data and / or may not be usable for accessing or utilizing the first record.

[0156] The first record identifier can be distinct from the second record identifier discussed above with respect to steps 6, 10, and 20. For example, the first record identifier may be a different alphanumeric code or random number than the second record identifier. The first record identifier may be printed on a packaging and / or visible to the public before the stored value device is obtained by the user. In contrast, the second record identifier may be provided to the user (e.g., via receipt) upon obtaining the stored value device. The first authorizing entity computer 150 may be configured to respond to the first record identifier and the second record identifier differently. For example, the first record identifier may be usable for identifying the first authorizing entity computer 150 and / or first record for loading value, but not for obtaining access data. The second record identifier may be usable for obtaining access data (e.g., a virtual access data) associated for the first record. In some embodiments, neither of the first record identifier or the second record identifier may be usable conducting a transaction or otherwise utilizing the first record.

[0157] At step 22, the first authorizing entity computer 150 can update the first record to include the value. For example, the first authorizing entity computer 150 may load the value (e.g., an amount) to the first record or activate a predefined value at the first record. The first authorizing entity computer 150 may load the value in response to the loading message indicating that the transaction is authorized based another record (e.g., the second record), which can indicate that the value may be moved from the second record to the first authorizing entity.41KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0158] Accordingly, a value and be loaded to and / or activated at the first record as a as part of steps 21-22. In some embodiments, the value loading process of steps 21-22 can be referred to as a second activation as the record may not be usable or otherwise functional before a value is available or active. Thus, steps 1-10 can include an authorization request message (which may be referred to as a first activation message) for a first activation of the first record and / or stored value device, and steps 21-22 can include a loading message (which may be referred to as a second activation message) for a second activation of the same first record and / or the same stored value device. After both activations, the first record and / or stored value device may become usable for transactions.

[0159] According to embodiments, one or more alternative and / or additional steps can be taken to provide the value to the first record. For example, in response to authorizing the transaction at step 16, the second authorizing entity computer 151 (e.g., an issuer bank associated with the user device 104) may provide a value associated with the purchase and / or stored value device (e.g., $105) to the first transport computer 130 (e.g., an acquirer bank associated with the merchant). This can be accomplished through a clearing and settlement process. Further, the first transport computer 130 may then transfer the some or all of the value (e.g., the entire value such as $105, or the value minus a fee such as a $5 fee) to the first authorizing entity computer 150 (e.g., an issuer bank associated with the stored value device 105) through another clearing and settlement process. The first transport computer 130 may perform this second settlement in response to an instruction (e.g., which may also be referred to as a loading message) from the first resource provider computer 120 after the first resource provider computer 120 determines that the transaction associated with the stored value device 105 was settled and therefore the value can now be forwarded to the first record. As a result, the value can be transmitted from the second record at the second authorizing entity computer 151 to the first record at the first authorizing entity computer 150 (e.g., directly or indirectly). According to embodiments, such settlement steps for transferring the value to the first record can be sufficient for loading the value at the first record, and therefore can replace steps 21-22. In other embodiments, steps42KILPATRICK TOWNSEND 78970272 IPATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 21-22 can also be performed for specifically identifying the first record to be funded, for example. In some embodiments, steps 21-22 can also be performed before the value is settled or otherwise received from the second record.

[0160] In some embodiments, the user may provide user identifying information for associating with the first record, such as a name, phone number, email address, physical address, or any other suitable information. The user may provide user information to the first access device 110, and the first access device 110 and / or the first resource provider computer 120 can transmit the user information to the first authorizing entity computer 150 as a part of step 21 and / or step 2. Alternatively, the user may separately provide the user information to the first authorizing entity computer 150 at a later time via a webpage or physical terminal. Accordingly, the first record can become associated with a user after the stored value device is obtained, activated, and / or loaded with value. The user may also be able to provide value for loading to the first record at a via a webpage or physical terminal after obtaining the stored value device 105.

[0161] In some embodiments, the first authorizing entity computer 150 can respond to the loading message with a loading response. In some embodiments, the loading response can include the second record identifier (e.g., as discussed above with respect to steps 6, 10, and 20), and / or the first access device 110 can provide the transaction receipt (e.g., as discussed above with respect to step 20) after receiving the loading response.

[0162] After the stored value device 105 is obtained, the first record is activated, and / or the first record is loaded with value, a user may be able to use the stored value device 105 for a transaction (e.g., by accessing the value at the first record). The user that obtained the stored value device 105 may utilize the stored value device 105 for a transaction. Alternatively, the user may provide the stored value device 105 to a second user (e.g., as a gift), and the second user may use the stored value device 105 for a transaction. An example of such a transaction is discussed below with respect to FIG. 1B.43KILPATRICK TOWNSEND 78970272 IPATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0163] FIG. 1 B shows a block diagram of a system 200, according to embodiments. The system 200 comprises the stored value device 105, a second access device 111 , a second resource provider computer 121 , a second transport computer 131 , the first processing computer 140, and the first authorizing entity computer 150.

[0164] While FIG. 1 A illustrates a system 100 for obtaining a stored value device 105 and activating and / or funding a first associated with the stored value device 105, FIG. 1 B illustrates a system for using the stored value device 105 and the first record (e.g., stored at the first authorizing entity computer 150) to conduct a transaction. A transaction can be conducted with any suitable resource provider. While the second access device 111 and second resource provider computer 121 are illustrated as an example, the transaction may also be conducted at the same first access device 110 and / or a first resource provider computer 120 as in FIG. 1 A.

[0165] A further method, which can be a continuation of the method described with respect to FIG. 1 A, according to embodiments of the invention can also be described with respect to FIG. 1B. The steps shown in the method may be performed sequentially or in any suitable order in embodiments of the invention. In some embodiments, one or more of the steps may be optional.

[0166] In some embodiments, the second access device 111 may receive input indicating that the stored value device 105 is being presented for a transaction. For example, the user and / or an operator of the second access device 111 can select an option at the second access device 111 for conducting a transaction. The input may be received at the second access device 111 before the stored value device 105 is presented to the second access device 111 , or at any other suitable time.

[0167] To initiate the method, the user may present the stored value device 105 to a second access device 111 to conduct a transaction. The second access device 111 and stored value device 105 may then begin an electronic communication exchange. For example, the second access device 111 may prompt the stored value device 105 to provide the first access data.44KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0168] At step 23, the stored value device 105 can generate a second cryptogram. For example, the stored value device may generate the second cryptogram based on the first key, the first access data, a second counter value, a second or current timestamp, a second access device identifier, and / or any other suitable information.

[0169] The stored value device 105 may then transmit the first access data, the second cryptogram, and / or any other suitable information to the second access device 111. For example, the stored value device 105 may transmit the first access data and the first cryptogram via short-range wireless communications such as an NFC communication exchange.

[0170] At step 24, the second access device 111 may generate a third authorization request message. The third authorization request message may comprise the first access data and the second cryptogram. The third authorization request message can include an authorization amount field populated with an amount for the transaction. The amount may be, for example, a total amount for goods or services being purchased from the second resource provider. The third authorization request message may also be referred to as a second authorization request message, as it may be the second authorization request message generated based on access data and / or a cryptogram from the stored value device 105.

[0171] According to embodiments, in contrast with the first authorization request message discussed above with respect to step 2, the presence of the transaction amount in the third authorization request message can indicate that the third authorization request message is being submitted to request authorization of the transaction based on the first record, and not being submitted to request activation of the first record.

[0172] The second access device 111 can then transmit the third authorization request message to the first authorizing entity computer 150. In some embodiments, the second access device 111 may transmit the third authorization request message to the first authorizing entity computer 150 via one or more intermediary computers. For example, the second access device 111 may transmit the third authorization45KILPATRICK TOWNSEND 78970272 IPATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 request message to the second resource provider computer 121 at step 24. Then, the second resource provider computer 121 may transmit the third authorization request message to the second transport computer 131 at step 25. Then, the second transport computer 131 may transmit the third authorization request message to the first processing computer 140 at step 26. Then, the first processing computer 140 may transmit the third authorization request message to the first authorizing entity computer 150 at step 27.

[0173] At step 28, the first authorizing entity computer 150 may perform one or more actions to authorize the transaction.

[0174] For example, the first authorizing entity computer 150 may determine that the third authorization request message includes an amount (e.g., a value other than zero or null) in the authorization amount field. In response, the second authorizing entity computer 151 may determine that the third authorization request message is submitted to authorize a transaction (e.g., and not to request record activation). Embodiments allow the first authorizing entity computer 150 to determine that the third authorization request message is submitted to request transaction authorization based on any other suitable information in the third authorization request message.

[0175] The first authorizing entity computer 150 may identify the first record based on the first access data including in the third authorization request message.

[0176] The first authorizing entity computer 150 may verify that the first record is in an active state.

[0177] The first authorizing entity computer 150 may verify the second cryptogram included in the third authorization request message (e.g., similar to the first cryptogram verification described above with respect to step 6).

[0178] The first authorizing entity computer 150 may verify that the first record includes sufficient value for the transaction and / or perform any other suitable validations for the transaction and / or first record.46KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0179] The first authorizing entity computer 150 may determine a mode of the transaction. For example, the third authorization request message may include information indicating a transaction mode, and the third authorization request message may indicate that the current transaction is being conducted via a first mode. The first mode may be, for example, an in-person contactless entry mode.

[0180] The first authorizing entity computer 150 may then verify that the first mode is included in a set of one or more predefined transaction modes. As an example, the set of one or more predefined transaction modes may include the first mode, a second mode, and / or a third mode for which the first access data is allowed to be used.

[0181] The first authorizing entity computer 150 may determine to authorize the transaction based on the first record (also referred to as allowing the first record to be accessed), the transaction amount, and / or one or more of the verifications described above. In response, the first authorizing entity computer 150 may generate a third authorization response message. The third authorization response message can indicate that the transaction has been authorized. For example, the third authorization response message can include a positive authorization result.

[0182] The first authorizing entity computer 150 can then transmit the third authorization response message to the second access device 111 . In some embodiments, the first authorizing entity computer 150 may transmit the third authorization response message to the second access device 111 via one or more intermediary computers. For example, the first authorizing entity computer 150 may transmit the third authorization response message to the first processing computer 140 at step 28. Then, the first processing computer 140 may transmit the third authorization response message to the second transport computer 131 at step 29. Then, the second transport computer 131 may transmit the third authorization response message to the second resource provider computer 121 at step 30. Then, the second resource provider computer 121 may transmit the third authorization response message to the second access device 111 at step 31.47KILPATRICK TOWNSEND 78970272 IPATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0183] In some embodiments, the second access device 111 can provide to the user and / or operator information indicating that the transaction is authorized. For example, the second access device 111 can display information indicating that the transaction is authorized, emit a sound associated with authorization, etc. The second access device 111 may provide to the user a digital or printed transaction receipt or any other suitable proof of transaction for purchasing the goods or services.

[0184] In some embodiments, the stored value device 105 and / or first record may only be used and / or accessed for certain types of transactions. Usage and access of the first record may be controlled by the first authorizing entity computer 150. As mentioned above with respect to step 28, the first authorizing entity computer 150 may be configured to permit the first record to be accessed if the transaction is within a set of one or more predefined transaction modes. According to embodiments, any suitable mode can be permitted and / or any other suitable mode can be automatically rejected.

[0185] As an example, the one or more predefined transaction modes can include a first mode, second mode, and / or third mode.

[0186] The first mode can include providing the access data for the transaction via in-person short-range wireless communications. For example, a user may physically present the stored value device 105 to an access device such that the stored value device 105 to an access device are physically within a communication range for short-range wireless communications (e.g., within 6 inches, 1 foot, 5 feet, 20 feet, or any other suitable distance). This can lead to the generation of an authorization request message including the access data and indicating an in-person transaction with a contactless transaction mode.

[0187] In some embodiments, other types of in-person transactions can be considered different modes than the first mode, and they separately may or may not be included in the one or more predefined transaction modes. For example, a magnetic stripe entry mode and / or a contact-type electronic communication entry48KILPATRICK TOWNSEND 78970272 IPATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 mode (e.g., via physical contact between the stored value device 105 and the access device) may be considered separate modes not included in the first mode.

[0188] The second mode can include providing over the internet a token associated with the access data. For example, if a user accesses webpage for an online purchase via a mobile device and provides a token for a transaction. This can lead to generation of an authorization request message including a token associated with the access data and indicating an internet-based transaction mode. The third mode can include providing over the internet a virtual set of access data associated with the first record. For example, if a user accesses webpage for an online purchase via a mobile device and provides virtual access data for a transaction. This can lead to generation of an authorization request message including virtual access data and indicating an internet-based transaction mode. These modes are discussed in more detail below with respect to FIGS. 4-6.

[0189] The first authorizing entity computer 150 may be configured to decline or reject access to the first record if the transaction is not within the first set of one or more predefined transaction modes (e.g., not included in a whitelist of modes). Additionally or alternatively, the first authorizing entity computer 150 may be configured to automatically decline or reject access to the first record if the transaction is within a second set of one or more predefined transaction modes (e.g., a blacklist of modes).

[0190] As an example, the one or more predefined transaction modes may not include a fourth mode, fifth mode, and / or a sixth mode. As discussed in more detail below, these modes and / or other modes can be excluded to improve data security.

[0191] The fourth mode can include a magnetic stripe entry mode. For example, if a user swipes a magnetic stripe card including the access data or a token at an access device. This can lead to generation of an authorization request message including the access data or a token and indicating an in-person transaction with a magnetic stripe entry mode.49KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0192] The fifth mode can include providing the access data (e.g., the access data itself, not a token or virtual access data) over the internet. For example, if a user enters access data into a webpage for an online purchase. This can lead to generation of an authorization request message including the access data (e.g., not a token or virtual access data) and indicating an internet-based transaction mode.

[0193] The sixth mode can include providing the access data (e.g., the access data itself, not a token or virtual access data) via mobile device. For example, if a mobile device provides the access device via mobile payment (e.g., not a card-type transaction). This can lead to generation of an authorization request message including the access data and indicating a mobile payment transaction mode.

[0194] Embodiments include a number of alternatives, additions, and modifications to the method steps described above. For example, the method above describes the first access device 110 generating the authorization request message at step 2. In some embodiments, the authorization request message may instead be generated by the first resource provider computer 120. The first access device 110 may transmit the access data, the cryptogram, and / or any other suitable information to the first resource provider computer 120 so that the first resource provider computer 120 can generate and send the authorization request message.

[0195] In some embodiments, sending the loading message as discussed above with respect to step 21 can be performed by the second authorizing entity computer 151 instead of the first resource provider computer 120 or the first access device 110. For example, the second authorizing entity computer 151 can receive information about the first authorizing entity computer 150 and / or the first record during the transaction (e.g., second the authorization request message received in step 15), and the second authorizing entity computer 151 can inform the first authorizing entity computer 150 that a value for the first record is being transmitted to the first authorizing entity computer 150 from the second record. The value may also be settled directly between the second authorizing entity computer 151 and first authorizing entity computer 150 (e.g., between corresponding settlement accounts).50KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0196] As discussed above with respect to steps 6, 10, and 20, a first record identifier can be provided to the user. In some embodiments, the first access data can be provided to the user additionally or instead of the first record identifier. As a result, the user can receive a printed (e.g., on a receipt) or displayed version of the first access data upon obtaining and / or activating the stored value device, thereby enabling the user to input the access data onto a webpage for an internet transaction.

[0197] Embodiments allow the method steps to occur in any suitable order. For example, in some embodiments, the activation request discussed above with respect to steps 1-10 can take place after or concurrently with the transaction request discussed above with respect to steps 11 -20.

[0198] In some embodiments, one or more steps and / or actions performed by the first authorizing entity computer 150 can instead be performed by the first processing computer 140. For example, steps for identifying a record, verifying a cryptogram, activating a record, verifying that a record is active, and / or verifying that a transaction mode is included in a set of one or more predefined transaction modes can be performed by the first processing computer 140. The first processing computer 140 may be able to automatically reject a transaction (e.g., based on an unaccepted transaction mode) and / or forward an authorization request message to the first authorizing entity computer 150 when one or more verifications are successful.

[0199] Embodiments can apply to any suitable type of transaction, stored value device, and / or record. For example, embodiments can be used in the context of payment transactions and payment authorization networks. The stored value device may be a prepaid card or gift card. A first user may purchase the gift card and provide it to a second user. The first record may be a prepaid account (e.g., a debit account), and the value may be a dollar amount. The first access data may be payment credentials associated with the first prepaid account, such as a PAN, CW, and / or expiry date. The transaction may be a payment transaction.51KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0200] In another example, embodiments can be used in the context of access transactions and access authorization networks. The stored value device may be an access badge, the first record may be a record of access rights, the first access data may be access credentials, and / or the transaction may be an access transaction for gaining physical access to restricted physical area (e.g., a building) or gaining digital access to digital information and / or a remote server (e.g., a database or user account for an internet-based service).

[0201] Various verifications and analyses are discussed above with respect to step 28 when the first authorizing entity computer 150 is determining whether to authorize the transaction. In some embodiments, the first authorizing entity computer 150 may determine to not authorize the transaction (also referred to as decline or reject the transaction). For example, if one or more of the verifications are unsuccessful (e.g., the record cannot be verified as active because it is currently inactive, or cryptogram verification fails due to a missing cryptogram or an inauthentic cryptogram), the first authorizing entity computer 150 may determine to decline the transaction.

[0202] When obtaining a token or conducting on internet transaction, a user may typically read displayed access data from a stored value device and then manually enter the access data into a webpage of a computing device. In embodiments, this may not be possible as the access data may not be displayed. However, the user may still be able to obtain a token, virtual access data, and / or conduct on online transaction through alternative processes. These are discussed below with respect to FIGS. 4-6.

[0203] A system 400 and method for obtaining a token can be described with respect to FIG. 4, according to embodiments of the invention. The system 400 can include the stored value device 105, a mobile device 170, and a token service computer 180.

[0204] The mobile device 170 can be operated by a user. Embodiments allow the mobile device 170 to take the form of any suitable computing device. In some embodiments, the mobile device 103 may comprise any suitable electronic device 52KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 that may be transported and operated by a user, which may also provide remote communication capabilities to a network. The mobile device 103 may use any suitable contact or contactless mode of operation to send or receive data from the stored value device 105. For example, the mobile device 103 can include a nearfield communications (NFC) reader.

[0205] The token service computer 180 can include a computer programmed to facilitate requesting, determining (e.g., generating) and / or issuing token data, as well as maintaining an established mapping of token data to credentials (e.g., primary account numbers), user data (e.g., a name, address, etc.), and / or any other suitable account information in a repository (e.g., token vault). The token service computer 180 may include or be in communication with a token vault where the generated tokens are stored. The token service computer 180 may support token processing of interactions submitted using tokens by de-tokenizing the tokens to obtain the actual credentials. In some embodiments, a token service computer 180 may include a tokenization computer alone, or in combination with other computers such as a network processing computer. For example, the token service computer 180 can, in some embodiments, be combined with and / or in communication with the first authorizing entity computer 150 of FIGS. 1A-1 B and / or the first processing computer 140 of FIGS. 1A-1B.

[0206] The steps shown in the method may be performed sequentially or in any suitable order in embodiments of the invention. In some embodiments, one or more of the steps may be optional.

[0207] A user may wish to enable the mobile device 170 to use the first record to conduct transactions (e.g., in-person contactless transactions and / or internetbased transactions). However, the stored value device may not display the first access data, so the user may not be able to manually enter the first access data at the mobile device 170. Instead, the user may operate the mobile device 170 to initiate a process for enabling mobile transactions (e.g., a tap-to-add process), and then the user may present the stored value device to the mobile device 170. The53KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 stored value device and mobile device 170 can then begin wireless communications (e.g., via NFC).

[0208] At step 41 , which can be similar to or the same as step 1 and / or step 23 described above with respect to FIGS. 1A-1 B, the stored value device can generate a cryptogram and / or provide the first access data and the cryptogram to a mobile device 170.

[0209] At step 42, the mobile device can generate a token request message and transmit the token request message to a token service computer 180. The token request message can include the first access data, the cryptogram, and / or any other suitable information.

[0210] At step 43, the token service computer 180 can perform one or more actions to provide a token to the mobile device 170. For example, the token service computer 180 may identify the first record based on the first access data, verify that the first record is in the active state, and / or verify the cryptogram (e.g., using the second key). In some embodiments, the token service computer 180 may communicate externally (e.g., with the first authorizing entity computer 150 and / or first processing computer 140) to perform one or more verifications. In some embodiments, the token service computer 180 may reject the token request (e.g., if one or more verifications are failed, such as verifying that the first record is active).

[0211] In response to one or more successful verifications, the token service computer 180 can generate and / or obtain a token associated with the first access data and / or first record. The token service computer 180 can then generate and transmit a token response message including the token to the mobile device 170.

[0212] In some embodiments, the token service computer 180 can also provide a key for generating cryptograms to the mobile device 170. The token service computer 180 can provide a copy of the first key or a separate third key (e.g., which may correspond to a fourth key stored by the token service computer 180, first authorizing entity computer 150, and / or first processing computer 140).54KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0213] As a result, the mobile device 170 may be equipped with a token usable for one or more transaction modes, such as internet-based transactions and / or in-person contactless entry mode transactions. An example transaction is discussed below with respect to FIG. 6.

[0214] A system 500 and method for obtaining virtual access data can be described with respect to FIG. 5, according to embodiments of the invention. The system 500 can include a user computing device 550 and a virtual access data computer 595. The user computing device 550 can be operated by a user. Embodiments allow the user computing device 550 to take the form of any suitable computing device. For example, the user computing device 550 can, in some embodiments, represent the mobile device 170 of FIG. 4. The virtual access data computer 595 can, in some embodiments, be combined with and / or in communication with the first authorizing entity computer 150 of FIGS. 1A-1 B and / or the first processing computer 140 of FIGS. 1A-1 B. In some embodiments, the virtual access data computer 595 can, in some embodiments, represent the token service computer 180 of FIG. 4.

[0215] The steps shown in the method may be performed sequentially or in any suitable order in embodiments of the invention. In some embodiments, one or more of the steps may be optional.

[0216] A user may wish to use a stored value device conduct a transaction over the internet (e.g., via a resource provider webpage). However, the stored value device may not display the first access data, so the user may not be able to enter the first access data into a checkout webpage. Instead, the user may operate the user computing device 590 to navigate to a webpage for requesting virtual access data (e.g., a digital set of access data). The webpage may be provided by the virtual access data computer 595 and displayed to the user by the user computing device 590. The user may navigate to the webpage by typing in a URL displayed on the stored value device 105 or associated packaging, by scanning a QR code displayed on the stored value device 105 or associated packaging, and / or by tapping the55KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 stored value device 105 to the user computing device 590 and receiving from the stored value device 105 a NFC Data Exchange Format (NDEF) URL message.

[0217] The user may then provide (e.g., manually enter) the second record identifier (e.g., as discussed above with respect to steps 6, 10, and 20 in FIG. 1A) to the webpage.

[0218] At step 51 , the user computing device 590 can transmit the second record identifier to the virtual access data computer 595. In some embodiments, the virtual access data computer 595 may send a one-time password to the user based on previously collected contact information, and the user may provide the password instead of or in addition to the second record identifier.

[0219] At step 52, the virtual access data computer 595 can perform one or more actions to provide virtual access data to the user computing device 590. For example, the virtual access data computer 595 may identify the first record based on the second record identifier, verify that the second record identifier is valid for requesting virtual access data (e.g., verify that it was provided to a user that purchased the stored value device), and / or verify that the first record is in the active state. In some embodiments, the virtual access data computer 595 may communicate externally (e.g., with the first authorizing entity computer 150 and / or first processing computer 140) to perform one or more verifications.

[0220] In response to one or more successful verifications, the virtual access data computer 595 can generate and / or obtain virtual access data associated with the first access data and / or first record. Virtual access data can include separate access data (e.g., a PAN, expiry date, dynamic verification code, cryptogram, name, etc.) that is distinct from the first access data and associated with the first access data and / or the first record. Virtual access data may, in some embodiments, only be provided virtually or digitally, and may not be printed on or otherwise included in the stored value device. In some embodiments, virtual access data can include a token. The virtual access data may be valid for a limited timeframe, such as 10 minutes, 30 minutes, 24 hours, or any other suitable timeframe.56KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0221] The virtual access data computer 595 can then transmit the virtual access data to the user computing device 590. The user computing device 590 can display the virtual access data to the user (e.g., via the webpage provided by the virtual access data computer 595) or otherwise provide an option for copying and pasting the virtual access data. The user may then be able to use the virtual access data for an internet-based transaction. For example, the user can observe, read, and then manually enter the virtual access data into a resource provider checkout webpage, and / or the user can copy and paste the virtual access data into a checkout webpage. An example transaction is discussed below with respect to FIG. 6.

[0222] In some embodiments, the user may be able to enter user identification information instead of or in addition to the second record identifier for identifying the first record and obtaining the virtual access data.

[0223] A system 600 and method for conducting a transaction based on the first record can be described with respect to FIG. 6, according to embodiments of the invention. The system 600 can be similar to the system 200 described with respect to FIG. 1B. However, additional components for additional transaction modes are also illustrated, such as the user computing device 550, the virtual access data computer 595, the mobile device 170, and the token service computer 180. The third access device 113, a third resource provider computer 123, and / or third transport computer 133 can be associated with a third resource provider and / or acquirer. The first processing computer 140 and / or the first authorizing entity computer 150 can be associated with the first record and / or stored value device, as discussed above with respect to FIGS. 1A-1B.

[0224] The steps shown in the method may be performed sequentially or in any suitable order in embodiments of the invention. In some embodiments, one or more of the steps may be optional.

[0225] In steps 61-70 of FIG. 6, a transaction can be conducted based on the first record associated with the stored value device. The transaction process can be similar to the transaction process described above with respect to steps 23-31 of FIG. 1 B. However, alternative modes for the transaction will be described with57KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 respect to FIG. 6. For example, as described above with respect to step 23 of FIG. 1B, the stored value device can be physically presented in-person at an access device, and can transmit the access data to the access device via chip-based communications (e g., contact or contactless). FIG. 6 can instead relate transactions conducted using a token and / or virtual access data that are associated with the access data and / or record, but are not the same as the access data (e.g., different alphanumeric values). Additionally, FIG. 6 can relate to transactions where the data is provided by devices other than the stored value device, such as a mobile device or a computing device.

[0226] In the case of an in-person transaction, the user may initiate the method by presenting activating a payment mode on the mobile device 170 and presenting it to a third access device 113 to conduct a transaction. The third access device 113 and mobile device 170 may then begin an electronic communication exchange. For example, third access device 113 may prompt the mobile device 170 to provide the token. At step 60A, the mobile device 170 may transmit the token and any other suitable information to the third access device 113.

[0227] At step 61 , in the case of an in-person transaction, the third access device 113 may generate a fourth authorization request message comprising the token and a transaction amount. The third access device 113 can then transmit the fourth authorization request message to the third resource provider computer 123.

[0228] In the case of an internet-based transaction, the user may initiate the method by operating the mobile device 170 or the user computing device 590 a checkout webpage provided by the third resource provider computer 123. In this case, the third access device 113 may not be involved, and step 61 may be omitted. The user may manually enter the virtual access data at the webpage, or may operate the mobile device 170 to provide the token at the webpage. At step 60A, the user computing device 590 (or the mobile device 170) can then transmit the virtual access data or the token to the third resource provider computer 123.58KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0229] In the case of an internet-based transaction, the third resource provider computer 123 may generate the fourth authorization request message comprising the token or the virtual access data, and the transaction amount as a part of step 62.

[0230] At steps 62, 63, and / or 66, the third resource provider computer 123 can transmit the fourth authorization request message to the first authorizing entity computer 150 via the third transport computer 133 and the first processing computer 140, for example.

[0231] At steps 64A-65A, in the case of a token in the authorization request message, the first processing computer 140 may communicate with the token service computer 180 to obtain the first access data associated with the first record. The first processing computer 140 may provide the token, the token service computer 180 may identify the first access data associated with the token, and the token service computer 180 may provide the token to the first processing computer 140. The first processing computer 140 may update the fourth authorization request message to include the first access data.

[0232] At steps 64B-65B, in the case of virtual access data in the authorization request message, the first processing computer 140 may instead communicate with the virtual access data computer 595 to obtain the first access data based on the virtual access data. The first processing computer 140 may update the fourth authorization request message to include the first access data. In other embodiments, the virtual access data may be usable for the transaction without being exchanged for the first access data, and steps 64B-65B can be skipped.

[0233] In some embodiments, instead of communications with the first processing computer 140 and / or virtual access data computer 595, the virtual access data and / or the token can be detokenized to obtain the access data by the first processing computer 140 or the first authorizing entity computer 150.

[0234] At step 67, which may be similar to or the same as step 28 of FIG. 1B, the first authorizing entity computer 150 may take one or more actions to determine whether to authorize the transaction based on the access data, virtual access data,59KILPATRICK TOWNSEND 78970272 IPATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 and / or token. For example, the first authorizing entity computer 150 may determine a current mode of the transaction and verify that the mode is within the one or more predefined modes that are acceptable for transactions using the first record. In some embodiments, the one or more predefined modes can include online transaction with a token, an online transaction with virtual access data, and / or an in- person contactless transaction with a token.

[0235] The first authorizing entity computer 150 may then generate a fourth authorization response message indicating whether the transaction is authorized. At steps 67, 68, 69 and / or 70, first authorizing entity computer 150 may transmit the fourth authorization response message to the third resource provider computer 123 and / or third access device 113 via the first processing computer 140 and the third transport computer 133, for example.

[0236] Embodiments provide a number of technical advantages. For example, one technical advantage is that data security is improved by eliminating a security vulnerability posed by visual skimming. With visual skimming, a malicious actor may visually (or through photography) collect access data displayed on a stored access device. Certain stored access devices (e.g., gift cards) may be publicly viewable (e.g., present in a store) before being obtained by a purchasing user, and thus may be susceptible to visual skimming. Embodiments can remove this vulnerability by omitting visual access data (e.g., a PAN, expiration date, security code, etc.) so that it is not displayed on stored user device. A further advantage is that this can be accomplished without losing the functionality of adding a stored value device to a mobile device for mobile payment functionality, online transactions, or other scenarios where an authentic user may observe the visually displayed access data and then manually enter the access data. As described above, the stored value device can still be added to a mobile device for mobile payment functionality, as the integrated circuit included in the stored value device can be used to perform NFC communications with the mobile device for adding the access data (or an associated token) to the mobile device. Additionally, as described above, manual access data entry (e.g., for an internet transaction) can still be available as60KILPATRICK TOWNSEND 78970272 IPATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 the user can receive a record identifier that can then be used to obtain virtual access data that is usable for manual entry.

[0237] Another technical advantage is that data security is improved by eliminating a security vulnerability posed by magnetic stripe skimming. With magnetic stripe skimming, a malicious actor may inappropriately collect access data that is statically present on a magnetic stripe of a stored access device. Again, certain stored access devices (e.g., gift cards) may be publicly accessible (e.g., present in a store) before being obtained by a purchasing user, and thus may be susceptible to magnetic stripe skimming. Embodiments can remove this vulnerability by omitting the magnetic stripe form the stored user device, such that there is no magnetic stripe on the stored user device that stores the access data. A further advantage is that this is accomplished without losing the functionality of in-person transactions where the stored value device is physically presented to an access device. As described above, an integrated circuit can be added to the stored value device that can be used instead of the magnetic stripe to perform in-person transactions at an access device (e.g., contact and / or contactless chip-based transactions).

[0238] Another technical advantage is that data security is improved by eliminating a security vulnerability posed by NFC-based chip skimming. By adding an integrated circuit and contactless antenna to a stored value device that is publicly accessible (e.g., present in a store) before being obtained by a purchasing user, a malicious actor may be able to inappropriately initiate an NFC communication exchange with the stored value device (e.g., with a device mimicking an access device). The malicious actor may thereby be able to obtain information provided by the stored value device during an NFC communication, such as the access data (e.g., PAN) and / or a cryptogram. Embodiments can remove this vulnerability by using dynamically generated cryptograms for transactions. As discussed above, the stored value device can generate and provide a cryptogram (e.g., based on a timestamp or other dynamic input) along with the access data when communicating with an access device. The authorizing entity computer may be configured to decline a transaction when access data is provided without a valid cryptogram and / or when 61KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 access data (e.g., not a token or virtual access data) is provided for an internet transaction (or other card-not-present transactions). As a result, even if a malicious actor obtains static access data such as a PAN through skimming, the malicious actor may not be able to conduct a transaction with static access data alone or conduct an internet-based transaction using the access data. The malicious actor will not have the capability to generate a valid cryptogram, as the stored value device may be configured to not provide the encryption key during a communication exchange with an access device. Any cryptogram skimmed by the malicious actor may only be valid for a limited timeframe, and therefore may not be useful to the malicious actor. A further advantage is that this is accomplished without losing the capability of performing internet-based transactions or other scenarios where an authentic user may typically provide the access data without a cryptogram. As described above, the user can receive a record identifier that can then be used to obtain virtual access data, and the virtual access data can be provided in certain scenarios without a cryptogram (e.g., internet-based transactions where virtual access data is entered into a webpage). Additionally, as discussed above, a valid token can be obtained by a mobile device, and the token may be provided without a cryptogram in certain situations.

[0239] Another technical advantage is that data security is improved by eliminating a security vulnerability posed by counterfeit magnetic stripe stored value devices. A malicious actor may create a counterfeit stored value device with a magnetic stripe storing authentic access data that is associated with an authentic stored value device (e.g., authentic access data that may have been obtained through NFC-based chip skimming). Embodiments can remove this vulnerability by configuring the authorizing entity computer to reject transactions conducted through a magnetic stripe entry mode. Additionally, as discussed above, the authorizing entity computer may also be configured to decline a transaction when access data is provided without a valid dynamically generated cryptogram, which a counterfeit magnetic stripe stored value device may not be capable of generating or providing. A further advantage is that this is accomplished without losing the functionality of in- person transactions. As discussed above, an authentic stored value device may not62KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 include a magnetic stripe, so declining magnetic stripe entry modes may not affect an authentic stored value device. Instead, the authentic stored value device can conduct in-person transactions through chip-based entry modes.

[0240] Another technical advantage is that data security is improved by eliminating a security vulnerability posed by card swapping. With card swapping, a malicious actor may inappropriately obtain a stored value device by removing it from its packaging, and then replace the authentic stored value device with a counterfeit, value depleted, expired, or otherwise invalid stored value device that is not associated with the same record or account as the packaging. A user may not notice that the packaging and / or stored value device have been tampered with, and then proceed to purchase the invalid stored value device. The user may thereby load funds onto the authentic stored value device that is in the possession of the malicious actor, and the user may be left with the incorrect and / or unusable stored value device. Embodiments can remove this vulnerability by introducing a process for activating a record associated with the stored value device. As discussed above (e.g., with respect to steps 1-10 in FIG. 1A), a user obtaining the stored value device may physically present the stored value device to an access device to be activated (e.g., the record associated with the stored value device can be activated through communications between the access device and the authorizing entity computer).This can be referred to as tap-to-activate, or a first activation. This may be in addition to other steps for purchasing and / or loading value onto the stored value device (e.g., which can be referred to as a second activation or separate activation). As a result, an authentic stored value device obtained by a malicious actor through card swapping may not become active or usable even when a user loads value to the record (e.g., by inadvertently purchasing an invalid stored value device attached to packaging that is linked to the authentic stored value device), as the malicious actor may not be able to activate the record (e.g., without going through the proper process of purchasing the stored value device). Therefore, the malicious actor may have no way to benefit from card swapping, and may discontinue the practice.

[0241] The process of presenting the stored value device to an access device to be activated, according to embodiments, is not a typical part of obtaining a stored 63KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 value device. Typically, when a gift card is being obtained, a transaction may take place for purchasing the gift card, but the transaction is performed with a different device (e.g., a credit or debit card). The gift card typically would not interact with an access device to provide payment credentials until a future transaction (e.g., for other goods or services). Additionally, authorization request messages are designed for authorizing a transaction. It is not typical to use an authorization request message for another purpose, such as activating a gift card account. Further, typically an authorization request message includes an amount the transaction, and it is not typical to leave the amount field empty or with a value of zero.

[0242] Another technical advantage is that data security is improved by eliminating a security vulnerability posed by inappropriately obtaining access to a record through a tap-to-add process. A malicious actor may inappropriately present a stored value device with an integrated circuit and antenna to their mobile device in order to initiate contactless communications that can allow the mobile device to obtain a token or other access data associated the stored value device from a server computer. Embodiments can remove this vulnerability by configuring the server computer to reject requests to add a stored value device (e.g., an associated token or access data) to a mobile device until after the record has been activated and / or loaded with value. As a result, an appropriate user that legitimately purchased or obtained the stored value device can tap-to-add the stored value device to their mobile device, but a malicious actor cannot tap-to-add before that time (e.g., when the stored value device is publicly accessible).

[0243] Embodiments of the invention further provide a prepaid card in the form of paper. Paper is more customizable than plastic, as paper can be more receptive receive ink via writing, drawing, and / or printing (e.g., suitable for a consumer paper printer and not requiring an industrial plastic printer). A prepaid card that is in the form of paper can be inserted into a printer (e.g., a home printer), such that any desirable information can be printed on the prepaid card.

[0244] Additionally, processes for manufacturing a paper card are less complex than a plastic card. For example, inserting electronic components into a64KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 plastic card requires molding or etching a cavity out of the plastic to create space for the electronic components. In contrast, for a paper card, electronic components can be enclosed in two layers of paper. Adhering or otherwise combining two layers of paper is a relatively simpler task.

[0245] Embodiments further provide simpler process for creating a custom shape for a prepaid card. Perforation tools can be readily used and / or programmed to create perforations of any desired shape and design. Thus, a prepaid card created by a perforation can be customized to have any desired shape with the same perforation tool. In contrast, a separate unique plastic mold must be created for each desired shape when creating plastic prepaid cards.

[0246] Embodiments further provide a configuration and set of components that are suitable for being enclosed and / or manufactured with paper. For example, modern memory chips and antenna can be configured to be flexible, so that bending and / or folding of a paper prepaid card may not be a concern. Especially for a prepaid card that will have a limited lifetime and amount of usage due to the limited prepaid balance, as there is limited opportunity for wear and tear. Additionally, in some embodiments, various other components can be excluded, such as a fingerprint sensor, electrical contacts, and / or a magnetic stripe. As a result, there can be less risk of components breaking. Additionally, there may be no need for creating electrical connections (e.g., via soldering) within the substrate, which may not be suitable for a paper substrate. Further, a fingerprint sensor may not be necessary for a prepaid card. Additionally, a contactless-only prepaid card that does not include electrical contacts or otherwise contact-based transaction capabilities may not need to be shaped for insertion into a card-reading terminal. Thus, a contactless-only prepaid card can have any desired shape (e.g., does not have to be a rectangle of a certain size).

[0247] Further embodiments include a method comprising: receiving, by an authorizing entity computer, an authorization request message from an access device, the authorization request message comprising access data, a cryptogram, and a zero amount or no amount in an authorization amount field, wherein the65KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 access device received the access data and the cryptogram from a stored value device, and the stored value device used a first key to generate the cryptogram; identifying, by the authorizing entity computer, a record associated with the access data, the record including a second key, and the record being in an inactive state; verifying, by the authorizing entity computer, the cryptogram using the second key; and in response to verifying the cryptogram, updating the record to be in an active state.

[0248] In further embodiments, the stored value device digitally stores the access data in a memory but does not display the access data, and the method further comprises: determining, based on the zero or no amount in the authorization amount field, that the authorization request message is submitted to request record activation and not submitted to request authorization for a transaction.

[0249] In further embodiments, the authorization request message is a first authorization request message, the cryptogram is a first cryptogram, and the method further comprises: receiving, by the authorizing entity computer, a second authorization request message comprising the access data, a second cryptogram, and a transaction amount for a transaction, wherein the stored value device used the first key to generate the second cryptogram; identifying, by the authorizing entity computer, the record based on the access data; verifying, by the authorizing entity computer, that the record is in the active state; verifying, by the authorizing entity computer, the second cryptogram using the second key; and authorizing, by the authorizing entity computer, the transaction based on the record and the transaction amount.

[0250] In further embodiments, the method further includes: determining, by the authorizing entity computer, based on the authorization request message, that the transaction is being conducted via a first mode; and verifying that the first mode is included in a set of one or more predefined transaction modes, wherein authorizing the transaction is further based on the verifying that the first mode is within the set of one or more predefined transaction modes.66KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0251] In further embodiments, the first mode is providing the access data for the transaction via short-range wireless communications.

[0252] In further embodiments, the first authorization request message and the second authorization request message both have an ISO 8583 format, and the method further includes: receiving, by the authorizing entity computer, a loading message from the access device informing the authorizing entity computer that the stored value device has been obtained by a user, wherein the loading message does not have an ISO 8583 format; and in response to the loading message, updating the record to include a value.

[0253] In further embodiments, the authorization request message is a first authorization request message, and the method further comprises: receiving, by the authorizing entity computer, a second authorization request message comprising the access data and a transaction amount for a transaction; identifying, by the authorizing entity computer, the record based on the access data; determining, by the authorizing entity computer, based on the authorization request message, that the transaction is being conducted via a second mode; and declining, by the authorizing entity computer, the transaction based on the second mode being included in a second set of one or more predefined transaction modes.

[0254] In further embodiments, the second mode is providing the access data over the internet or providing the access data via magnetic stripe.

[0255] In further embodiments, the authorization request message is a first authorization request message, the cryptogram is a first cryptogram, the stored value device provides the access data and a second cryptogram to a computing device, and further comprising: receiving, by a token service computer, from the computing device, a token request message including the access data and the second cryptogram; identifying, by the token service computer, the record based on the access data; verifying, by the token service computer, that the record is in the active state; verifying, by the token service computer, the second cryptogram using the second key; and transmitting, by the token service computer, a token response message including a token associated with the access data to the computing device.67KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0256] In further embodiments, the method further includes: receiving, by the authorizing entity computer, a second authorization request message comprising the token or access data for a transaction; identifying, by the authorizing entity computer, the access data associated with the token; identifying, by the authorizing entity computer, the record based on the access data; determining, based on the authorization request message, that the token was provided for the transaction over the internet; determining, based on the authorization request message, that the transaction is being conducted via a third mode, wherein the third mode is providing the token over the internet; and verifying that the third mode is included in a set of one or more predefined transaction modes; and authorizing, by the authorizing entity computer, the transaction based on the verifying that the third mode is within the set of one or more predefined transaction modes.

[0257] Further embodiments include a method comprising: obtaining, by a user, a stored value device comprising a memory storing a key and access data but not displaying the access data, wherein the access data is associated with a record at an authorizing entity computer; receiving, by the user, from a transaction terminal, a proof of a transaction for obtaining the stored value device, wherein the proof includes a record identifier associated with the stored value device; providing, by the user, the record identifier to a first webpage displayed by a computing device, wherein the computing device transmits the record identifier to a server computer, the server computer responds with virtual access data associated with the record, and the computing device displays the virtual access data; observing, by the user, the virtual access data displayed by the first webpage; and providing, by the user, the virtual access data to a second webpage for a transaction.

[0258] Although the steps in the flowcharts and process flows described above are illustrated or described in a specific order, it is understood that embodiments of the invention may include methods that have the steps in different orders. In addition, steps may be omitted or added and may still be within embodiments of the invention.68KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01

[0259] Any of the computing devices described herein may be an example of a computer system that may be used to implement any of the entities or components described above. The subsystems of such a computer system may be interconnected via a system bus. Additional subsystems include a printer, keyboard, storage device, and monitor, which is coupled to display adapter. Peripherals and input / output (I / O) devices, which couple to I / O controller, can be connected to the computer system by any number of means known in the art, such as a serial port. For example, I / O port or external interface can be used to connect the computer apparatus to a wide area network such as the Internet, a mouse input device, or a scanner. The interconnection via system bus may allow the central processor to communicate with each subsystem and to control the execution of instructions from system memory or the storage device, as well as the exchange of information between subsystems. The system memory and / or the storage device may embody a computer-readable medium.

[0260] As described, the inventive service may involve implementing one or more functions, processes, operations or method steps. In some embodiments, the functions, processes, operations or method steps may be implemented as a result of the execution of a set of instructions or software code by a suitably-programmed computing device, microprocessor, data processor, or the like. The set of instructions or software code may be stored in a memory or other form of data storage element which is accessed by the computing device, microprocessor, etc. In other embodiments, the functions, processes, operations or method steps may be implemented by firmware or a dedicated processor, integrated circuit, etc.

[0261] Any of the software components or functions described in this application may be implemented as software code to be executed by a processor using any suitable computer language such as, for example, Java, C, C++, C#, Objective-C, Swift, or scripting language such as Perl or Python using, for example, conventional or object-oriented techniques. The software code may be stored as a series of instructions or commands on a computer readable medium for storage and / or transmission, suitable media include random access memory (RAM), a read only memory (ROM), a magnetic medium such as a hard-drive or a floppy disk, or an 69KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 optical medium such as a compact disk (CD) or DVD (digital versatile disk), flash memory, and the like. The computer readable medium may be any combination of such storage or transmission devices.

[0262] Such programs may also be encoded and transmitted using carrier signals adapted for transmission via wired, optical, and / or wireless networks conforming to a variety of protocols, including the Internet. As such, a computer readable medium according to an embodiment of the present invention may be created using a data signal encoded with such programs. Computer readable media encoded with the program code may be packaged with a compatible device or provided separately from other devices (e.g., via Internet download). Any such computer readable medium may reside on or within a single computer product (e.g., a hard drive, a CD, or an entire computer system), and may be present on or within different computer products within a system or network. A computer system may include a monitor, printer, or other suitable display for providing any of the results mentioned herein to a user.

[0263] The above description is illustrative and is not restrictive. Many variations of the invention may become apparent to those skilled in the art upon review of the disclosure. The scope of the invention can, therefore, be determined not with reference to the above description, but instead can be determined with reference to the pending claims along with their full scope or equivalents.

[0264] One or more features from any embodiment may be combined with one or more features of any other embodiment without departing from the scope of the invention.

[0265] As used herein, the use of "a", "an" or "the" is intended to mean "at least one", unless specifically indicated to the contrary.70KILPATRICK TOWNSEND 78970272 1

Claims

PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01WHAT IS CLAIMED IS:1 . A method comprising: generating, by a stored value device comprising a memory storing access data but not displaying the access data, a cryptogram based on the access data and a key, wherein a record associated with the access data at an authorizing entity computer is in an inactive state; and transmitting, by the stored value device to an access device, the access data and the cryptogram, wherein the access device generates an authorization request message comprising the access data, the cryptogram, and a zero amount or no amount in an authorization amount field, the access device transmits the authorization request message to the authorizing entity computer, the authorizing entity computer updates the record to be in an active state after verifying the cryptogram, and the authorizing entity computer only allows the access data to be used for accessing the record when the access data is physically present at the access device or another access device.

2. The method of claim 1 , wherein the cryptogram is a first cryptogram, the authorization request message is a first authorization request message, and further comprising: generating, by the stored value device, a second cryptogram based on the access data and the key; and transmitting, by the stored value device, the access data and the second cryptogram, wherein a second authorization request message is transmitted to an authorizing entity, the second authorization request message comprising the access data, the second cryptogram, and a transaction amount for a transaction, the authorizing entity computer authorizes the transaction after verifying the second cryptogram, verifying that the record is in the active state, and verifying that the transaction is within a set of one or more predefined transaction modes.71KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO013. The method of claim 2, wherein the set of one or more predefined transaction modes include providing the access data to the access device or another access device via short-range wireless communications.

4. The method of claim 2, wherein the set of one or more predefined transaction modes include providing over the internet a token associated with the access data.

5. The method of claim 2, wherein the set of one or more predefined transaction modes does not include providing the access data via magnetic stripe, and the set of one or more predefined transaction modes does not include providing the access data over the internet.

6. The method of claim 1 , wherein the stored value device does not include a magnetic stripe, and the key is stored in the memory.

7. The method of claim 1 , wherein transmitting the access data and the cryptogram is performed via short-range wireless communications.

8. The method of claim 1 , wherein the zero amount or no amount in the authorization amount field indicates that the authorization request message is submitted to request record activation and not submitted to request a transaction authorization.

9. The method of claim 1 , wherein the record is not associated with a specific user until after the record is updated to be in the active state, and a non- transactable machine-readable code identifying the record is printed on a packaging of the stored value device.

10. A method comprising: receiving, by an access device, from a stored value device, access data and a cryptogram, wherein the stored value device comprises a memory storing the access data but the stored value device does not display the access data, the stored value device generated the cryptogram based on the access data and a key,72KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 and wherein a record associated with the access data at an authorizing entity computer is in an inactive state; generating, by the access device, an authorization request message comprising the access data, the cryptogram, and a zero amount or no amount in an authorization amount field; and transmitting, by the access device, the authorization request message to the authorizing entity computer, wherein the authorizing entity computer updates the record to be in an active state after verifying the cryptogram, and the authorizing entity computer only allows the record to be accessed in response to a transaction that is within a set of one or more predefined transaction modes.11 . The method of claim 10, wherein the authorization request message is a first authorization request message, the access data is first access data, the record is a first record, the authorization amount field is a first authorization amount field, and further comprising: receiving, by the access device, from a user device, second access data; generating, by the access device, a second authorization request message comprising the second access data and an amount in a second authorization amount field for the transaction, the amount being associated with the stored value device; and transmitting, by the access device, the second authorization request message to the authorizing entity computer or another authorizing entity computer, wherein the authorizing entity computer or another authorizing entity computer authorizes the transaction based on a second record associated with the second access data.

12. The method of claim 11 , further comprising: receiving, by the access device, an authorization response message indicating that the transaction is authorized; and in response to the authorization response message, transmitting, by the access device or a resource provider computer, to the authorizing entity computer, a loading message indicating that the stored value device has been73KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 obtained by a user and that the transaction was authorized, wherein the authorizing entity computer updates the record to include the amount in response to the loading message.

13. The method of claim 12, wherein the first authorization request message and the second authorization request message both have an ISO 8583 format, and wherein the loading message does not have an ISO 8583 format.

14. The method of claim 10, further comprising: receiving, by the access device, input indicating that the stored value device is being presented for record activation, wherein the zero amount or no amount in the authorization amount field indicates that the authorization request message is submitted to request the record activation and not submitted to request a transaction authorization.

15. The method of claim 10, further comprising: receiving, by the access device, an authorization response message indicating that the record is in the active state; and displaying, by the access device, information indicating that the record has been activated.

16. The method of claim 10, wherein receiving the access data and the cryptogram is performed via short-range wireless communications, and the stored value device does not include a magnetic stripe.

17. A stored value device including: a memory coupled to a substrate and storing access data associated with a record and a key; a contactless element electrically coupled to the memory; and the substrate, wherein the stored value device does not display the access data.

18. The stored value device of claim 17, wherein the memory includes a computer readable medium and a processor, wherein the computer74KILPATRICK TOWNSEND 78970272 1PATENTAttorney Docket No. 079900-1472381 Client Ref. No. 9389WO01 readable medium comprises instructions that, when executed by the processor, cause the processor to perform a method comprising: generating a cryptogram based on the access data and the key, wherein the record associated with the access data at an authorizing entity computer is in an inactive state; and transmitting, via the contactless element to an access device, the access data and the cryptogram, wherein the access device generates an authorization request message comprising the access data, the cryptogram, and a zero amount or no amount in an authorization amount field, the access device transmits the authorization request message to the authorizing entity computer, the authorizing entity computer updates the record to be in an active state after verifying the cryptogram.

19. The stored value device of claim 17, wherein the stored value device does not include a magnetic stripe, and the stored value device does not display any user identification information.

20. The stored value device of claim 17, wherein the substrate includes at least two layers, the contactless element is disposed between the two layers, the substrate includes paper, and the substrate is in a shape of a rectangle, a star, or a heart.75KILPATRICK TOWNSEND 78970272 1

Images