Confirming physical possession of plastic nfc cards with a mobile digital wallet application

Abstract

In an example embodiment, an issuer system receives payment card information from a payment processing system, wherein the payment card information is received from a payment card via a user computing device using near field communication. The issuer system generates an unpredictable number for the payment card and communicates the unpredictable number to the payment card via the payment processing system and the user computing device. The payment card calculates a cryptographic checksum based on the unpredictable number and a shared secret and communicates the checksum to the issuer system via the user computing device and payment processing system. The issuer system verifies the checksum using the shared secret and the unpredictable number. The issuer system generates a token associated with the payment card and transmits the token to the user computing device via the payment processing system for use in an online transaction.

What is claimed is: 
     
         1 . A computer-implemented method to provision a tokenized payment card to a user computing device, comprising:
 receiving, by one or more computing devices associated with a payment processing system, payment card information for a payment card device and a user computing device identifier from a user computing device, wherein the payment card device comprises a shared secret known to the payment card device and an issuer computing system associated with an issuer of the payment card device;   transmitting, by the one or more computing devices and to the issuer computing system, the payment card information and the user computing device identifier;   receiving, by the one or more computing devices and from the issuer computing system, an unpredictable number generated by the issuer system for the payment card device;   transmitting, by the one or more computing devices and to the user computing device, the received unpredictable number;   receiving, by the one or more computing devices and from the user computing device, a checksum, the checksum calculated by the payment card device based on the unpredictable number and the shared secret;   transmitting, by the one or more computing devices and to the issuer computing system, the received checksum, the payment card information, and the user computing device identifier;   receiving, by the one or more computing devices and from the issuer computing system, a token generated by the issuer system, wherein the token is associated with the payment card information and the user computing device identifier and is generated by the issuer computing system in response to validation of the checksum; and   communicating, by the one or more computing devices, the token to the user computing device.   
     
     
         2 . The method of  claim 1 , wherein the one or more computing devices communicates with a digital wallet application resident on the user computing device, wherein the payment processing system receives the payment card information and the checksum via the user computing device, and wherein the payment processing system communicates the unpredictable number to the payment card device via the user computing device. 
     
     
         3 . The method of  claim 2 , wherein the payment card device is a near field communication card device. 
     
     
         4 . The method of  claim 2 , wherein the user computing device communicates with the payment card device via near field communication. 
     
     
         5 . The method of  claim 1 , wherein the issuer computing system generates the shared secret for saving on an application resident on the payment card device, and wherein the application resident on the payment card device calculates the checksum. 
     
     
         6 . The method of  claim 1 , further comprising:
 receiving, by the one or more computing devices and at a time after communicating the token to the user computing device, a request to conduct a transaction with a merchant computing system using the token;   transmitting, by the one or more computing devices and to the issuer computing system, a payment authorization request comprising the token and the user computing device identifier associated with the user computing device wherein the token is stored;   receiving, by the one or more computing devices and from the issuer computing system, an authorization of the payment authorization request; and   processing, by the one or more computing devices, the transaction based on the authorization.   
     
     
         7 . A computer-implemented method to provision a tokenized payment card to a user computing device, comprising:
 receiving, by one or more computing devices associated with an issuer computing system, a request to provision a payment card device to a user computing device, the request comprising a user computing device identifier associated with the user computing device, and payment card information associated with the payment card device, wherein the issuer computing system and the payment card device both store a shared secret;   generating, by the one or more computing devices, an unpredictable number;   transmitting, by the one or more computing devices and to the user computing device, the unpredictable number;   receiving, by the one or more computing devices and from the user computing device, a checksum calculated by the payment card device, the payment card information, and the user computing device identifier, wherein the checksum is calculated by the payment card device based on the unpredictable number and the shared secret stored by the payment card device;   verifying, by the one or more computing devices, the checksum based on the unpredictable number and the shared secret stored by the issuer computing system;   generating, by the one or more computing devices, a token associated with the payment card information and the user computing device identifier; and   transmitting, by the one or more computing devices and to the user computing device, the token to the user computing device.   
     
     
         8 . The method of  claim 7 , wherein the payment card device is a near field communication card device. 
     
     
         9 . The method of  claim 7 , further comprising:
 generating, by the one or more computing devices and at a time before receiving the request for an unpredictable number, the shared secret; and   storing, by the one or more computing devices, the shared secret on the payment card device.   
     
     
         10 . A computer-implemented method to provision a tokenized payment card to a user computing device, comprising:
 establishing, by a user computing device, a wireless communication channel between the user computing device and a payment card device;   receiving, by the user computing device and via the wireless communication channel, payment card information;   transmitting, by the user computing device to an issuer computing system via a payment processing system communicating with the user computing device, a request to provision the payment card device to the user computing device, the request comprising the payment card information and a user computing device identifier associated with the user computing device, the issuer computing system being an issuer of the payment card device;   receiving, by the user computing device from the issuer computing system via the payment processing system, a data item generated by the issuer system;   transmitting, by the user computing device and to the payment card device via the wireless communication channel, the received data item;   receiving, by the user computing device from the payment card device via the wireless communication channel, a checksum generated by the payment card device, wherein the payment card device generated the checksum using the received data item and a secret shared by the payment card device and the issuer computing system;   transmitting, by the user computing device to the issuer computing system via the payment processing system, the checksum, the payment card information, and the user computing device identifier;   receiving, by the user computing device from the issuer computing system via the payment processing system, a token generated by the issuer computing system, the token being associated with the payment card information and the user computing device identifier and being generated by the issuer computing system after verification of the checksum by the issuer computing system; and   storing, by the user computing device, the token on the user computing device.   
     
     
         11 . The method of  claim 10 , wherein the payment card device is a near field communication card device, and wherein the wireless communication channel between the user computing device and a payment card device is a near field communication channel. 
     
     
         12 . The method of  claim 10 , wherein the data item is an unpredictable number. 
     
     
         13 . The method of  claim 10 , wherein the data item is a random number. 
     
     
         14 . The method of  claim 10 , wherein the data item is a data item to create a cryptographic checksum. 
     
     
         15 . The method of  claim 10 , wherein the user computing device communicates with the payment processing system via a digital wallet application resident on the user computing device, and wherein the payment processing system comprises a digital wallet account associated with a user associated with the user computing device. 
     
     
         16 . The method of  claim 10 , wherein the issuer computing system generates the shared secret for saving by an application resident on the payment card device, and wherein the application resident on the payment card device calculates the checksum. 
     
     
         17 . The method of  claim 10 , further comprising:
 receiving, by the user computing device, at a time after saving the token and from a user associated with the payment device and the user computing device, a request to conduct a transaction with a merchant computing system using the token;   transmitting, by user computing device and to the payment processing system, a notification of the request of the user to conduct a transaction using the token, wherein the payment processing system transmits a payment authorization request comprising the token and the user computing device identifier to the issuer system, wherein the payment processing system receives an approval of the payment authorization request from the issuer system, and wherein the payment processing system processes the online transaction requested by the user in response to receiving the approval.   
     
     
         18 . A computer program product, comprising:
 a non-transitory computer-readable medium having computer-readable program instructions embodied thereon that when executed by a computer cause the computer to provision a tokenized payment card to a user computing device, the computer-readable program instructions comprising:
 computer-readable program instructions to receive payment card information for a payment card device and a user computing device identifier from a user computing device, wherein the payment card device comprises a shared secret known to the payment card device and an issuer computing system associated with an issuer of the payment card device; 
 computer-readable program instructions to transmit, to the issuer computing system, the payment card information and the user computing device identifier; 
 computer-readable program instructions to receive, from the issuer computing system, an unpredictable number generated by the issuer system for the payment card device; 
 computer-readable program instructions to transmit, to the user computing device, the received unpredictable number; 
 computer-readable program instructions to receive, from the user computing device, a checksum, the checksum calculated by the payment card device based on the unpredictable number and the shared secret; 
 computer-readable program instructions to transmit, to the issuer computing system, the received checksum, the payment card information, and the user computing device identifier; 
 computer-readable program instructions to receive, from the issuer computing system, a token generated by the issuer system, wherein the token is associated with the payment card information and the user computing device identifier and is generated by the issuer computing system in response to validation of the checksum; and 
 computer-readable program instructions to communicate the token to the user computing device. 
   
     
     
         19 . The computer program product of  claim 18 , wherein the issuer computing system generates the shared secret for saving on an application resident on the payment card device, and wherein the application resident on the payment card device calculates the checksum. 
     
     
         20 . The computer program product of  claim 18 , further comprising:
 computer-readable program instructions to receive, at a time after communicating the token to the user computing device, a request to conduct a transaction with a merchant computing system using the token;   computer-readable program instructions to transmit, to the issuer computing system, a payment authorization request comprising the token and the user computing device identifier associated with the user computing device wherein the token is stored;   computer-readable program instructions to receive, from the issuer computing system, an authorization of the payment authorization request; and   computer-readable program instructions to process the transaction based on the authorization.   
     
     
         21 . A system to provision a tokenized payment card to a user computing device, comprising:
 a storage device; and   a processor communicatively coupled to the storage device, wherein the processor executes application code instructions that are stored in the storage device to cause the system to:
 receive payment card information for a payment card device and a user computing device identifier from a user computing device, wherein the payment card device comprises a shared secret known to the payment card device and an issuer computing system associated with an issuer of the payment card device; 
 transmit, to the issuer computing system, the payment card information and the user computing device identifier; 
 receive, from the issuer computing system, an unpredictable number generated by the issuer system for the payment card device; 
 transmit, to the user computing device, the received unpredictable number; 
 receive, from the user computing device, a checksum, the checksum calculated by the payment card device based on the unpredictable number and the shared secret; 
 transmit, to the issuer computing system, the received checksum, the payment card information, and the user computing device identifier; 
 receive, from the issuer computing system, a token generated by the issuer system, wherein the token is associated with the payment card information and the user computing device identifier and is generated by the issuer computing system in response to validation of the checksum; and 
 communicate the token to the user computing device. 
   
     
     
         22 . The system of  claim 21 , wherein the issuer computing system generates the shared secret for saving on an application resident on the payment card device, and wherein the application resident on the payment card device calculates the checksum 
     
     
         23 . The system of  claim 21 , wherein processor is further configured to execute computer-readable program instructions stored in the storage device to cause the system to:
 receive, at a time after communicating the token to the user computing device, a request to conduct a transaction with a merchant computing system using the token;   transmit, to the issuer computing system, a payment authorization request comprising the token and the user computing device identifier associated with the user computing device wherein the token is stored;   receive, from the issuer computing system, an authorization of the payment authorization request; and   process the transaction based on the authorization.