Secure Open-Loop PLCC Transactions via RID Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Open-loop private label credit cards (PLCCs) face unintended authorization issues when used at third-party merchants, particularly in store and forward mode, leading to potential fraud and customer dissatisfaction due to incorrect transaction approvals.
Innovation Solution
A method involving a merchant transaction card with a card data processor and memory, utilizing a registered identifier (RID) and encryption keys to verify and secure transactions, ensuring only authorized transactions are processed by matching the RID and decrypting an encrypted security block using a merchant-unique key, thereby preventing unauthorized transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If open-loop PLCCs are used with third-party processors on card networks, then existing card network relationships are utilized, but unintended authorization occurs at third-party merchants in store and forward mode
Solution Approach 1:
The patent applies local quality by implementing merchant-specific encryption keys and RIDs (Registered Identifiers) that are unique to each merchant. The card provisioning system loads merchant-specific encryption keys and RIDs into the card memory, allowing the card to distinguish between different merchants. This ensures that a card issued for a specific merchant can only be authorized at that merchant's POS terminals, preventing unintended authorization at third-party merchants while maintaining compatibility with open-loop card networks.
2Ease of operation
If store and forward mode is implemented for offline transaction approval, then transactions can be processed offline, but fraud risk increases due to inability to verify in real-time
Solution Approach 1:
The patent implements preliminary action by pre-provisioning the card with merchant-specific encryption keys and RIDs during card issuance. The card is programmed with the ability to perform cryptographic operations locally, including decrypting security blocks and verifying RIDs against stored merchant identifiers. This preliminary setup enables the card to authenticate transactions offline without requiring real-time network verification, while still maintaining security through pre-loaded cryptographic credentials that prevent fraud.
3Reliability
If RID verification and encryption key matching are implemented, then transaction security is improved, but device complexity increases
Solution Approach 1:
The patent applies self-service by enabling the card itself to perform security verification operations. The card memory stores the merchant-specific encryption keys and RIDs, allowing the card to independently decrypt security blocks and verify merchant identification without requiring the POS terminal to perform complex cryptographic operations. This shifts the computational burden from the terminal to the card, simplifying the terminal's role while maintaining high security standards through the card's inherent cryptographic capabilities.
Data Source
AI summary
Systems and methods for provisioning and processing open-loop private label credit cards in store and forward transaction processing machines may include establishing communication between the transaction processing device operating in an offline store and forward transaction mode and a card data processor of a transaction card presented to a merchant for use in completing a point-of-sale (POS) transaction. The transaction processing device may receive card information from the card data processor including a card identifier and a card registered unique identifier (RID). The transaction processing machine may determine whether the card RID matches a merchant RID stored in a memory of the transaction processing device. Responsive to a determination that the card RID matches the merchant RID, the processing device may allow the POS transaction to continue processing through the transaction processing device as an open-loop, offline store and forward POS transaction.