In-card access control and monotonic counters for offline payment processing system

Abstract

Preventing fraud during an offline transaction by encoding a randomly-generated card verification code onto a smart card. The verification code is transmitted to a contactless device during each transaction, wherein it is cross-referenced with the account number to ensure presence of the card. Also, every transaction record is signed by an access key resident on the contactless device and certified by a signing key resident on a remote system. Funds may be deposited onto the card when the contactless device creates a deposit request, signs the request using an access key and transmits it to the remote system, which in turn processes the request and certifies it with a signing key. Funds may be withdrawn when the contactless device creates a withdrawal record and signs it using an access key. The remote system verifies the signatures and certifies the records using a signing key when the records are later transmitted.

1 . A computer-implemented method to verify withdrawal transaction histories for smart card devices, comprising:
 establishing, by a mobile computing device, a communication channel with a smart device;   calculating, by the mobile computing device, a record sum of withdrawals based on a listing of an amount of at least one previous withdrawal record associated with the smart device, the record sum of withdrawals equaling a total amount of withdrawal amounts in previous withdrawal records associated with the smart device;   reading, by the mobile computing device, a counter from the smart device, the counter comprising a value corresponding to a sum of previous withdrawal amounts made using the smart device;   determining, by the mobile computing device, that the value in the counter matches the calculated record sum of withdrawals; and   authorizing, by the mobile computing device, an offline debit transaction with the smart device in response to a determination that the value in the counter matches the record sum of withdrawals.   
     
     
         2 . The computer-implemented method of  claim 1 , wherein the counter comprises a total amount of withdrawal transactions. 
     
     
         3 . The computer-implemented method of  claim 1 , wherein the counter may only be incremented, not decremented. 
     
     
         4 . The computer-implemented method of  claim 1 , wherein the communication channel is established using a near field communication (NFC) protocol. 
     
     
         5 . The computer-implemented method of  claim 1 , wherein the mobile computing device comprises a mobile telephone. 
     
     
         6 . The computer-implemented method of  claim 1 , wherein the mobile computing device comprises a stand-alone card reader. 
     
     
         7 . The computer-implemented method of  claim 1 , wherein calculating the record sum of withdrawals comprises:
 sorting withdrawal transactions in order of withdrawal from a previous withdrawal W(n−1) to a latest withdrawal W(n); and   reviewing the latest withdrawal transaction to identify the current sum of withdrawals.   
     
     
         8 . The computer-implemented method of  claim 1 , wherein calculating the record sum of withdrawals comprises:
 sorting withdrawal transactions in order of withdrawal from a previous withdrawal W(n−1) to a latest withdrawal W(n); and   adding the latest withdrawal transaction to the previous withdrawal to identify the current sum of withdrawals.   
     
     
         9 . The computer-implemented method of  claim 1 , further comprising:
 receiving, by the mobile computing device, a transaction history from the smart device, the transaction history comprising information regarding at least one previous deposit record associated with the smart device; and   calculating, by the mobile computing device, a smart device balance, the smart device balance comprising a difference obtained by subtracting the record sum of withdrawals from a record sum of deposits, the record sum of deposits equaling a total amount of deposits in previous deposit records.   
     
     
         10 . The computer-implemented method of  claim 1 , further comprising:
 processing, by the mobile computing device, an offline debit transaction to debit a transaction amount from the smart card device without a network connection to a remote computer management system that manages an account associated with the smart device, the transaction amount being equal to or less than a balance of funds on the smart device;   transmitting, by the mobile computing device, a transaction record to the smart device, the transaction record indicating the transaction amount debited from the smart device; and   storing, by the mobile computing device, the smart device identification information, the transaction history, and the transaction record.   
     
     
         11 . The computer-implemented method of  claim 10 , further comprising:
 establishing, by the mobile computing device, a network connection with the remote computer management system; and   transmitting, by the mobile computing device, the smart device identification information, the transaction history, and the transaction record to the remote computer management system via the network connection to update the account managed by the remote computer management system.   
     
     
         12 . A computer program product, comprising:
 a non-transitory computer-readable medium having computer-readable program code embodied therein that when executed by a computer cause the computer to perform the steps of:   calculating, a record sum of withdrawals based on a listing of an amount of at least one previous withdrawal record associated with a smart device, the record sum of withdrawals equaling a total amount of withdrawals in previous withdrawal records associated with the smart device;   reading a counter from the smart device, the counter comprising a value corresponding to a sum of previous withdrawal amounts made using the smart device;   determining that the value in the counter information matches the record sum of withdrawals; and   authorizing an offline debit transaction with the smart device in response to a determination that the value in the counter information matches the record sum of withdrawals.   
     
     
         13 . The computer program product of  claim 12 , wherein the counter may only be incremented, not decremented. 
     
     
         14 . The computer program product of  claim 12 , wherein calculating the record sum of withdrawals comprises performing the steps of:
 sorting withdrawal transactions in order of withdrawal from a previous withdrawal W(n−1) to a latest withdrawal W(n); and   reviewing the latest withdrawal transaction to identify the current sum of withdrawals.   
     
     
         15 . The computer program product of  claim 12 , wherein calculating the record sum of withdrawals comprises performing the steps of:
 sorting withdrawal transactions in order of withdrawal from a previous withdrawal W(n−1) to a latest withdrawal W(n); and   adding the latest withdrawal transaction to the previous withdrawal to identify the current sum of withdrawals.   
     
     
         16 . The computer program product of  claim 12 , further comprising performing the steps of:
 receiving a transaction history from the smart device, the transaction history comprising information regarding at least one previous deposit record associated with the smart device; and   calculating a smart device balance, the smart device balance comprising a difference obtained by subtracting the record sum of withdrawals from a record sum of deposits, the record sum of deposits equaling a total amount of deposits in previous deposit records.   
     
     
         17 . The computer program product of  claim 12 , further comprising performing the steps of:
 processing an offline debit transaction to debit a transaction amount from the smart device without a network connection to a remote computer management system that manages an account associated with the smart device, the transaction amount being equal to or less than a balance of funds on the smart device;   transmitting a transaction record to the smart device, the transaction record indicating the transaction amount debited from the smart device; and   storing the smart device identification information, the transaction history, and the transaction record.   
     
     
         18 . The computer program product of  claim 17 , further comprising performing the steps of:
 establishing a network connection with the remote computer management system; and   transmitting the smart device identification information, the transaction history, and the transaction record to the remote computer management system via the network connection to update the account managed by the remote computer management system.   
     
     
         19 . A system for verifying a withdrawal transaction histories for smart devices, the system comprising:
 a processor, and   a storage device comprising hardware storing executable instructions that when executed by the processor cause the processor to execute the steps of:
 calculating a record sum of withdrawals based on a listing of an amount of at least one previous withdrawal record associated with a smart device, the record sum of withdrawals equaling a total amount of withdrawals in previous withdrawal records associated with the smart device; 
 reading a counter from the smart device, the counter comprising a value corresponding to a sum of previous withdrawal amounts made using the smart device; 
   determining that the value in the counter matches the record sum of withdrawals; and   authorizing an offline debit transaction with the smart device in response to a determination that the value in the counter information matches the record sum of withdrawals.   
     
     
         20 . The system of  claim 19 , wherein the counter may only be incremented, not decremented. 
     
     
         21 . The system of  claim 19 , wherein the processor is further configured to execute instructions stored in the storage device to cause the processor to execute the steps of:
 receiving a transaction history from the smart device, the transaction history comprising information regarding at least one previous deposit record associated with the smart device; and   calculating a smart device balance, the smart device balance comprising a difference obtained by subtracting the record sum of withdrawals from a record sum of deposits, the record sum of deposits equaling a total amount of deposits in previous deposit records.   
     
     
         22 . The system of  claim 19 , wherein the processor is further configured to execute instructions stored in the storage device to cause the processor to execute the steps of:
 transmitting a transaction record to the smart device, the transaction record indicating the transaction amount debited from the smart device; and   storing the smart device identification information, the transaction history, and the transaction record.   
     
     
         23 . The system of  claim 22 , wherein the processor further configured to execute instructions stored in the storage device to cause the processor to execute the steps of:
 establishing a network connection with the remote computer management system; and   transmitting the smart device identification information, the transaction history, and the transaction record to the remote computer management system via the network connection to update the account managed by the remote computer management system.