US6163771A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and device for generating a single-use financial account number
Assignee: PayPal Inc
•
Filing: 1997-08-28
•
Granted: 2000-12-19
•
Expires: 2017-08-28
Abstract
Abstract A device for facilitating financial account transactions is described which includes a processing unit including a cryptographic processor. The device also includes an input unit, a display unit and a memory device connected to the processing unit. The memory device contains a private cryptographic key, a first data element and a second data element. The processing unit encrypts the first data element using the private cryptographic key and the second data element, modifies the second data element, combines the encrypted first data element and the second data element to generate a single-use financial account identifier, and displays the single-use financial account identifier. This identifier is then transmitted to a central processor for authorization of the transaction. The central processor extracts and decrypts data elements from the transmitted identifier using the private cryptographic key, compares those data elements with data elements stored in a memory, and verifies the single-use financial account identifier in accordance with the comparison.
Inventors
- 👤 Jay S. Walker
- 👤 Bruce Schneier
- 👤 Sanjay K. Jindal
- 👤 Daniel E. Tedesco
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-07 12:34
CPC Classifications
G; G06; G06Q; G06Q20/00; G06Q20/04; G06Q20/08; G06Q20/10; G06Q20/105; G06Q20/20; G06Q20/38; G06Q20/385; G06Q20/40; G06Q20/401; G06Q20/4012; G06Q40/00; G06Q40/02; G06Q40/03; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1016
Claims Analysis
Total Claims: 27
Claim 1
Independent Claim
69 words
A method for providing a second account identifier for use in place of a first account identifier, comprising the steps of: accessing a first data element, specific to an account having a first account identifier; accessing a second data element including transaction-specific data; and combining said first data element and said second data element to produce a second account identifier for use in place of said first account identifier.
Claim 2
Independent Claim
69 words
A method for providing a second account identifier for use in place of a first account identifier, comprising the steps of: accessing a first data element, specific to an account having a first account identifier; accessing a second data element including transaction-specific data; and combining said first data element and said second data element to produce a second account identifier for use in place of said first account identifier.
Claim 3
Dependent Claim
20 words
The method of claim 1 wherein the step of accessing said first data element includes accessing the first account identifier.
Claim 4
Dependent Claim
13 words
The method of claim 2 wherein said first account identifier comprises alpha-numeric characters.
Claim 5
Dependent Claim
18 words
The method of claim 1 wherein the step of accessing said second data element includes accessing a time.
Claim 6
Dependent Claim
19 words
The method of claim 1 wherein the step of accessing said second data element includes accessing a payment amount.
Claim 7
Dependent Claim
19 words
The method of claim 1 wherein the step of accessing said second data element includes accessing a merchant identifier.
Claim 8
Dependent Claim
20 words
The method of claim 1 wherein the step of accessing said first data element includes encrypting said first data element.
Claim 9
Dependent Claim
17 words
The method of claim 7 wherein the encrypting step is based on a private key encryption technique.
Claim 10
Dependent Claim
15 words
The method of claim 1 wherein the combining step is based on a hashing function.
Claim 11
Dependent Claim
24 words
The method of claim 1 wherein the combining step includes encrypting at least one of said first data element and said second data element.
Claim 12
Dependent Claim
17 words
The method of claim 10 wherein the encrypting step is based on a private key encryption technique.
Claim 13
Dependent Claim
41 words
The method of claim 1, further comprising the step of accessing a third data element including a static account identifier, and wherein said combining step includes combining said third data element with said first data element and said second data element.
Claim 14
Dependent Claim
21 words
The method of claim 1, further comprising the step of updating said second data element to initialize for a future transaction.
Claim 15
Independent Claim
144 words
A device for providing a second account identifier for use in place of a first account identifier, comprising: a processing unit, said processing unit including a cryptographic processor; an input unit, connected to said processing unit, operable to input information thereto; a display unit, connected to said processing unit, operable to display a processing result therefrom; and a memory device connected to said processing unit, said memory device containing a private cryptographic key, a first data element, a second data element and a program, adapted to be executed by said processing unit, to encrypt the first data element using the private cryptographic key and the second data element, modify the second data element, combine the encrypted first data element and the second data element to generate an account identifier that indicates another account identifier, and display the generated account identifier using said display unit.
Claim 16
Independent Claim
144 words
A device for providing a second account identifier for use in place of a first account identifier, comprising: a processing unit, said processing unit including a cryptographic processor; an input unit, connected to said processing unit, operable to input information thereto; a display unit, connected to said processing unit, operable to display a processing result therefrom; and a memory device connected to said processing unit, said memory device containing a private cryptographic key, a first data element, a second data element and a program, adapted to be executed by said processing unit, to encrypt the first data element using the private cryptographic key and the second data element, modify the second data element, combine the encrypted first data element and the second data element to generate an account identifier that indicates another account identifier, and display the generated account identifier using said display unit.
Claim 17
Independent Claim
91 words
A method for providing a second account identifier for use in place of a first account identifier, comprising the steps of: providing a memory device containing a private cryptographic key, a first data element, and a second data element; encrypting the first data element using the private cryptographic key and the second data element; modifying the second data element; combining the encrypted first data element and the second data element to generate a second account identifier for use in place of a first account identifier; and displaying the second account identifier.
Claim 18
Independent Claim
91 words
A method for providing a second account identifier for use in place of a first account identifier, comprising the steps of: providing a memory device containing a private cryptographic key, a first data element, and a second data element; encrypting the first data element using the private cryptographic key and the second data element; modifying the second data element; combining the encrypted first data element and the second data element to generate a second account identifier for use in place of a first account identifier; and displaying the second account identifier.
Claim 19
Independent Claim
135 words
A device for providing a second account identifier for use in place of a first account identifier, said device comprising: a memory storing data representing a plurality of predetermined account identifiers, data representing a status for each of said plurality of predetermined account identifiers, and data representing a pointer to one of said plurality of predetermined account identifiers; an output device operable to present said one of said plurality of predetermined account identifiers; and a processor coupled to said memory and to said output device, said processor being configured to identify said one of said plurality of predetermined account identifiers based on said data representing a pointer, said processor being further configured to transmit a signal to said output device directing said output device to present said one of said plurality of predetermined account identifiers.
Claim 20
Independent Claim
135 words
A device for providing a second account identifier for use in place of a first account identifier, said device comprising: a memory storing data representing a plurality of predetermined account identifiers, data representing a status for each of said plurality of predetermined account identifiers, and data representing a pointer to one of said plurality of predetermined account identifiers; an output device operable to present said one of said plurality of predetermined account identifiers; and a processor coupled to said memory and to said output device, said processor being configured to identify said one of said plurality of predetermined account identifiers based on said data representing a pointer, said processor being further configured to transmit a signal to said output device directing said output device to present said one of said plurality of predetermined account identifiers.
Claim 21
Dependent Claim
55 words
A device according to claim 16, further comprising an input device adapted to transmit an input signal representing a request to present said one of said plurality of predetermined account identifiers, wherein said processor is coupled to said input device and said processor is further configured to receive said input signal from said input device.
Claim 22
Dependent Claim
27 words
A device according to claim 16, wherein said processor is further configured to update said data representing a pointer and to update said data representing a status.
Claim 23
Independent Claim
96 words
A method for providing a second account identifier for use in place of a first account identifier, comprising the steps of: providing a memory storing data representing a plurality of predetermined account identifiers, data representing a status for each of said plurality of predetermined account identifiers, and data representing a pointer to one of said plurality of predetermined account identifiers; identifying said one of said plurality of predetermined account identifiers based on said data representing a pointer; and transmitting a signal to an output device to present said one of said plurality of predetermined account identifiers.
Claim 24
Independent Claim
96 words
A method for providing a second account identifier for use in place of a first account identifier, comprising the steps of: providing a memory storing data representing a plurality of predetermined account identifiers, data representing a status for each of said plurality of predetermined account identifiers, and data representing a pointer to one of said plurality of predetermined account identifiers; identifying said one of said plurality of predetermined account identifiers based on said data representing a pointer; and transmitting a signal to an output device to present said one of said plurality of predetermined account identifiers.
Claim 25
Independent Claim
77 words
A method for providing a second account identifier for use in place of a first account identifier, comprising the steps of: receiving a plurality of requests to produce second account identifiers, each second account identifier for use in place of a first account identifier; and outputting, in response to each request, a respective second account identifier, each output second account identifier indicating the first account identifier, each second account identifier being different from remaining second account identifiers.
Claim 26
Independent Claim
77 words
A method for providing a second account identifier for use in place of a first account identifier, comprising the steps of: receiving a plurality of requests to produce second account identifiers, each second account identifier for use in place of a first account identifier; and outputting, in response to each request, a respective second account identifier, each output second account identifier indicating the first account identifier, each second account identifier being different from remaining second account identifiers.
Claim 27
Dependent Claim
20 words
The method of claim 20, in which the first account identifier and each second account identifier respectively comprise sixteen digits.
References Cited (Backward Citations)
US3376661A
Cited
US4599509A
Cited
US4048475A
Cited
US4023012A
Cited
US4395628A
Cited
US4667087A
Cited
US5485519A
Cited
US5585787A
Cited
US5231666A
Cited
US5485510A
Cited
US5361062A
Cited
US5317636A
Cited
US5509070A
Cited
US5311594A
Cited
US5649118A
Cited
US5457747A
Cited
US5590038A
Cited
US5748737A
Cited
US5559313A
Cited
US5754653A
Cited
US5799285A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-12-19 | 2004-06-19 | 2004-12-19 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-12-19 | 2008-06-19 | 2008-12-19 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-12-19 | 2012-06-19 | 2012-12-19 | $7700.00 | Window Closed / Lapsed |