Dynamic primary account number (pan) and unique key per card

Abstract

Methods, systems, and machine-readable media are disclosed for handling information related to a financial transaction including utilizing dynamic cryptograms. According to one embodiment, a method of processing a financial transaction related to a financial account can comprise detecting initiation of the transaction with a device used as a presentation instrument in the transaction. A Dynamic Transaction Cryptogram (DTC) and a dynamic PAN can be generated at the device. The DTC can be used to authenticate the transaction and the dynamic PAN can comprise an encrypted form of a real PAN of the financial account that is valid for a single transaction. The DTC and the dynamic PAN can be provided by the device for use in the transaction.

What is claimed is: 
     
         1 . A method of processing a financial transaction by a user and related to a financial account having a real Primary Account Number (PAN), the method comprising:
 initiating a transaction with a device used as a presentation instrument in the transaction;   generating, with the processor, a Dynamic Transaction Cryptogram (DTC) at the device that is valid for a single transaction, the DTC encrypted at the device using a card key and based on personal information that is known to the user and that identifies the user;   generating, with the processor, a dynamic PAN at the device, the dynamic PAN comprising an encrypted form of the real PAN that is valid for the single transaction; and   providing both the DTC and the dynamic PAN from the device to a Point-of-Sale (POS) device for use in the transaction, wherein the provided dynamic PAN is decrypted in order to determine the real PAN for processing of the transaction, wherein the real PAN that is determined from the provided dynamic PAN is then used to retrieve a key corresponding to the card key, and wherein the DTC is provided in order to authenticate the transaction, using the retrieved key.   
     
     
         2 . The method of  claim 1 , wherein the DTC and dynamic PAN are provided to a payment processor through the Point-of-Sale (POS) device, and wherein the dynamic PAN is decrypted at the payment processor to determine the real PAN. 
     
     
         3 . The method of  claim 2 , further comprising authenticating the transaction at the payment processor system based on the DTC. 
     
     
         4 . The method of  claim 1 , wherein generating the dynamic PAN at the device is based on the real PAN, an Institution Key Card Variant (IKCV) that is a variant of an institution key of an issuer of the financial account stored in the device, and an undeterminable number generated or received by the device. 
     
     
         5 . The method of  claim 4 , wherein generating the dynamic PAN comprises:
 reading the real PAN from a memory of the device;   generating Pseudo-PAN-Dynamic-Data (PPDD) representing the real PAN by combining the real PAN with the undeterminable number; and   encrypting the PPDD using the IKCV.   
     
     
         6 . The method of  claim 5 , further comprising including an unencrypted portion of the real PAN in the dynamic PAN. 
     
     
         7 . The method of  claim 6 , wherein the portion of the real PAN comprises less than all of the real PAN and includes information for routing of the transaction to a financial institution. 
     
     
         8 . The method of  claim 7 , wherein the dynamic PAN is constructed with a new prefix of 6 or more left-most digits, such that routing of the transactions using the new prefix results in the transaction being delivered to a payment processor with keys and capability to decrypt the dynamic PAN. 
     
     
         9 . The method of  1 , further comprising determining the real PAN of the financial account at the payment processing system. 
     
     
         10 . The method of  claim 9 , further comprising submitting the real PAN from the payment processor system to a financial institution to affect processing of the transaction. 
     
     
         11 . The method of  claim 1 , wherein the DTC and the dynamic PAN are provided from the device to the POS device via contactless-based transmission. 
     
     
         12 . The method of  claim 1 , wherein the DTC and the dynamic PAN are provided from the device to the POS device via contact-based transmission. 
     
     
         13 . A method of processing a financial transaction by a user and related to a financial account having a real Primary Account Number (PAN), the method comprising:
 detecting, with one or more processors, initiation of the transaction with a device used as a presentation instrument in the transaction;   generating, with one of the processors, a Dynamic Transaction Cryptogram (DTC) at the device that is valid for a single transaction, the DTC encrypted using a card key associated with the device and the DTC based on personal information that is known to the user and that identifies the user;   generating, with one of the processors, a dynamic PAN at the device, the dynamic PAN comprising an encrypted form of the real PAN that is valid for the single transaction; and   providing the DTC and the dynamic PAN from the device to a payment processing system;   decrypting, at a payment processing system, the dynamic PAN in order to determine the real PAN;   using the real PAN to retrieve, with one of the processors, a key corresponding to the card key; and   determining whether the transaction is valid by authenticating, with one of the processors, the DTC using the retrieved key.   
     
     
         14 . The method of  claim 13 , further comprising submitting the real PAN from the payment processor system to a financial institution to affect processing of the transaction. 
     
     
         15 . The method of  claim 13 , wherein the DTC and the dynamic PAN are provided from the device via a POS device and contactless-based transmission. 
     
     
         16 . The method of  claim 13 , wherein the DTC and the dynamic PAN are provided from the device via POS device and contact-based transmission. 
     
     
         17 . A system for processing a financial transaction against a financial account having a real Primary Account Number (PAN), comprising:
 a device used as a presentation instrument by a user for conducting a transaction; and   a payment processor system for processing the transaction;   the presentation instrument programmed for:
 detecting initiation of the transaction with the device; 
 generating a Dynamic Transaction Cryptogram (DTC) at the device that is valid for a single transaction, the DTC encrypted using a card key associated with the device and the DTC based on personal information that is known to the user and that identifies the user; 
 generating a dynamic PAN at the device, the dynamic PAN comprising an encrypted form of the real PAN that is valid for the single transaction; and 
 providing the DTC and the dynamic PAN from the device to the payment processing system; 
   the payment processing system for:
 decrypting, at a payment processing system, the dynamic PAN in order to determine the real PAN; 
 using the real PAN to retrieve, with one of the processors, a key corresponding to the card key; and 
   determining whether the transaction is valid by authenticating, with one of the processors, the DTC using the retrieved key.   
     
     
         18 . The method of  claim 17 , further comprising submitting the real PAN from the payment processor system to a financial institution to affect processing of the transaction. 
     
     
         19 . The method of  claim 17 , wherein the DTC and the dynamic PAN are provided from the device via a POS device and contactless-based transmission. 
     
     
         20 . The method of  claim 17 , wherein the DTC and the dynamic PAN are provided from the device via a POS device and contact-based transmission.