Method and system for secure authentication

US7702916B2 · kind B2 · utility

Assignee

• Visa U.S.A. Inc. · US

Inventors

• Robert W. Seaton, Jr. · Austin, US
• Terence Spielman · Austin, US
• Penny Cornwell · Austin, US
• Neal Blackwood · Austin, US
• Michael T. Clay · Austin, US

Key dates

• Filing date: Mar 31, 2004
• Grant date: Apr 20, 2010
• Expiry date: Jun 29, 2027

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L2463/102
• WIPO field: IT methods for management
• WIPO sector: Electrical engineering

Abstract

A system and method configured to provide secure Personal Identification Number (PIN) based authentication is disclosed. A passcode or PIN associated with a customer value card can be securely authenticated by an issuer prior to authorizing payment. An Access Control Server (ACS) can receive the PIN or passcode from a customer via a secure connection over a public network. The ACS can generate an encrypted PIN and can communicate the encrypted PIN to a remote issuer for authentication. The ACS can use one or more hardware security modules to generate the encrypted PIN. The hardware security modules can be emulated in software or implemented in hardware. The system can be configured such that the PIN is not exposed in an unencrypted form in a communication link or in hardware other than the originating customer terminal.