System and method for contactless authorisation of payment

FIELD: radio engineering, communication.

SUBSTANCE: invention relates to a contactless electronic payment means. The technical result is safer electronic payments. The system consists of a POS terminal, a secure element, a mobile communication device with a display and a keyboard, such as a mobile telephone. The mobile communication device is equipped with a removable memory card, in which at least two physically separate secure elements are located. The mobile communication device is connected to the POS terminal through a wireless transmission channel and at least one secure element on the removable memory card contains a payment card unit. The removable memory card contains a NFC communication element. The system can also include a separate carrier for PIN entering. The carrier is powered from the received electromagnetic field. A control unit in the mobile communication device activates the required secure element corresponding to the chosen payment card unit on the memory card.

EFFECT: mobile communication device wirelessly communicates with a POS terminal.

10 cl, 1 dwg

The technical FIELD TO WHICH the INVENTION RELATES.

The invention relates to the field of contactless electronic payment systems, such as systems for making payments via mobile phone or payment terminal. Also the invention includes a method of payment confirmation via mobile devices, wireless way connected with the payment terminal.

The LEVEL of TECHNOLOGY

There are many tools for making payments as actual, and remaining at the stage of patent documents. These tools give the ability to authorize the payment through the payment terminal.

The invention described in the patent CN 1450782, describes the interaction between the device and the payment terminal, however, has nothing to do with the specific equipment, ensure the security of committed payments. There is also a variant embodiment of the invention CN 101136123, in accordance with which the mobile phone is used for a password, but the keypad is not an acceptable method of entering the PIN-code from a security point of view.

The solution in accordance with the patent US 2002/0147658 A1 describes the relationship between the participants of the electronic payment process, however, does not affect the technical organization of individual elements. Other similar image is the shadow, such as WO 03/012717 A1 and US2007/0106564 A1, offer a way of organizing the elements, but do not address the question of specific technical implementation, which would provide sufficient security payments. The invention according to WO 2008/105703 describes part of the mobile phone is in communication with the payment terminal, however, does not provide enough secure storage of payment card in a mobile phone. Certain messages of the mobile phone and the payment terminal is also described in such patents as THEIR 980562, US 6450407 B1 and GB 2432031A. However, in these patents are not offered configuration for simple security payments.

Existing tools do not allow you to combine the functionality of several payment cards, providing adequate security. However, after reviewing the reviews, you may find that they need a tool for easy and quick manipulation of payment instruments. It would be logical to use a common tool such as a mobile phone.

DISCLOSURE of INVENTIONS

Described inconveniences in General are eliminated when using contactless payment, consisting of the payment terminal, connected to the server payment processing, and item security. The system also includes a mobile device is the primary objective with display and keyboard, such as a mobile phone. The system provides for the installation in a mobile device memory card containing at least two separate secure element associated with the control device. The mobile device communicates with the payment terminal wirelessly, and at least one protected element on the removable memory card contains data payment card.

Placement of protected items on a removable memory card creates the preconditions for the expansion of existing phones with optional memory card. An important feature of this configuration is that the hardware of the devices, the physical separation of the protected elements; a solution that allows you to securely store information about payment cards belonging to various financial institutions. Protected components communicate with a control device that activates them. The control device is always activates the secure element with data from the selected payment card. In this embodiment the removable memory card may be a function of several payment cards in accordance with the number of protected items and even can store personal information.

To simplify the input PIN corresponding to the card within the secure element, it is logical to ensure that the system is neither a separate carrier for PIN entry. The carrier includes a storage unit PIN block encryption PIN and the wireless communication unit; it provides the message carrier with the payment terminal and/or mobile communication device.

The structure of the carrier enables the secure transfer of encrypted PIN code on the payment terminal, either directly or through the mobile communication device. To provide ease of working with the media assumes that he will be passive, without long-term power supply, and electricity will be supplied from the received electromagnetic field.

It is envisaged to equip card NDC element, providing the link mobile devices with payment terminal. In this case, you can use devices that are not originally equipped NDC element, but accessing it when you install the memory card. For ease of operation with memory card provides a supply of cards with NDC-element antenna for communication with the payment terminal.

For greater security when entering the PIN-code from the keypad of the mobile communication device provides accommodation block for the one-time password generation, secure element on the memory card. One-time password is generated only for the current payment.

For ease of operation, the device mobilisasi can be equipped with a start button of the application of contactless payment. Click the icon stands out payment may be in the form of the character of the local currency. Pressing the button automatically starts the application and/or confirmed by the individual process steps.

In a preferred configuration of the mobile communication device, along with the placement of the removable memory card is protected items, you might have protected element installed on the circuit Board of the mobile communication device. This element or set them on a printed circuit Board may contain a virtual block is protected payment data terminal which includes a block encryption and, ideally, a block of temporary storage of data. This configuration allows the use of the mobile communication device directly as a payment terminal.

Payment terminal connects to the remote server data processing, which, in turn, connected to at least one database of a financial institution.

Base for NDC element is the frequency of 13.56 MHz. To ensure the best possible transmission of electromagnetic fields it is desirable to use a different frequency. While maintaining the existing hardware payment terminals this goal can be achieved by placement of a frequency Converter in the antenna of the payment terminal. The Converter feeds the electric power is the s of the electromagnetic field of the antenna. Antenna removable memory card is tuned to a new frequency.

Disadvantages of existing technologies to a large extent eliminated due to the method of payment authorization, used to make contactless payments made through a payment terminal and a mobile communication device, such as a mobile phone, as described in this invention. The subject of the invention is that the control device in the mobile communication device is used to activate the necessary secure element corresponding to the selected payment card, information for which is stored on the memory card. The mobile communication device communicates with the payment terminal by wireless communication. This part of the process eliminates the need to enter the card into the receiver of the payment terminal

If necessary, enter the PIN code entry can be arranged in several ways. The user can enter the PIN code using the keypad on the payment terminal. A configuration in which the PIN code is contained on a separate carrier, allows you to conveniently and safely enter the PIN code, only by holding the media to the communication terminal. For PIN payment terminal generates a public key and sends it to the media, where the key is used to encrypt the PIN. Then PIN the administration is placed on the terminal by wireless data transmission. The resulting encrypted PIN is decrypted using the private key in the payment terminal and then processed in the same manner as if it had been typed at the terminal.

You can also use the procedure when using the corresponding module is generated one-time password that is sent to the payment terminal.

When considering the use of mobile communications devices without own functions NDC messages it is advisable to use NDC element installed in the removable memory card.

BRIEF DESCRIPTION of DRAWINGS

The invention is described in greater detail in figure 1, illustrating the application to make contactless payments with a separate carrier PIN. The system also includes three separate module payment cards belonging to three different financial institutions contained on a removable memory card.

The IMPLEMENTATION of the INVENTION

Example 1

The system includes a mobile communication device 1 in the form of a mobile phone without its own NDC element. In slot 1 of a mobile phone installed memory card 3 format micro SD. A removable memory card with standard settings includes four protected element 2. Each of them is physically separate and independent. On the removable memory card 3 also R is spoelgen the control unit to switch the secure element 2 according to user's choice. The control unit is responsible for the activation of a particular protected item. One protected element 2 contains the module create a one-time password 12, and the remaining three of the protected element on the memory card contain information about payment cards, in this example, owned by various financial institutions such as VISA, EC/MC and LGM. Removable memory card 3 is connected through contacts to the printed circuit Board of the mobile phone 1 and through pathways hardware part of the phone to the control unit 4. The mobile communication device 1 is connected to the payment terminal 6 through a wireless channel 5 NDC-type. The mobile communication device 1 communicates with the payment terminal 6 through NDC element 7, the memory card 3.

Memory card 3 is equipped NDC element 7 with NDC antenna 8. The system includes a separate carrier 13 for PIN entry. Media contains the module storing a PIN code, an encryption module and a wireless communication module for connecting the carrier 13 to the payment terminal 6 and/or the mobile communication device 1. The carrier 13 looks like a keychain, securely transmitting the PIN on the payment terminal 6, as was presented to him. The carrier 13 receives power from the received electromagnetic field and does not have its own power source.

The mobile communication device 1 is equipped separate to opkay to run the application for the implementation of contactless payments, marked by the Euro currency symbol.

Server payment processing 10 is used for the same purpose with which it is used in the processing of payments in the payment terminal. Server payment processing 10 is also connected to the databases 11 financial institutions, such as banks, taking into account payments made and associating them with a particular customer and his account. The antenna 8 of the payment terminal 6 is attached to the frequency Converter. It gets power from the electromagnetic field of the antenna 8. The antenna 8 to the removable memory card 3 is configured on the converted frequency.

Payment using a mobile communication device 1 at the point of sale payment terminal 6 is as follows. The user selects from the menu the type of card, which will be payment (VISA, EC/MC or LGM), and then brings the mobile communication device 1 to the contactless NDC element on the payment terminal 6. The payment terminal 6 determines the user selected card type (VISA, EC/MC or LGM) and sends the authorization request to the payment server payment processing 10. The request is processed first tested on the cryptographic module on the authenticity of the application and then generates a request to access the database 11 financial institutions. The request is handled in the same manner as if the payment were made with payment cards.

In PL the payment application, the control unit 4 activates the corresponding block is selected payment card 9 protected element 2 on the memory card 3. The mobile communication device 1 is connected with the payment terminal 6 through a wireless channel 5. In the described solution PIN code can be entered from the keyboard of the payment terminal 6. It may be easier to use a separate carrier 13 that transmits information about the PIN-code to the terminal 6, as was presented to him. The payment terminal 6 generates a public key, sends it to the media 13, where it is used to encrypt the PIN, whereupon the PIN is sent to the terminal 6. The data channel between the terminal 6 and the carrier 13 is wireless. The resulting encrypted PIN is decrypted on the terminal using the private key.

Example 2

The authorization system of contactless payment described in this example differs from that described in the example 1 in that the mobile communication device 1 is equipped with its own protected elements 2 on the circuit Board. Such a protected element 2 contains a protected part of the virtual payment terminal, containing the encryption unit and, if possible, block temporary storage of data. This configuration allows the use of the mobile communication device 1 as a personal virtual payment terminal. Removable memory card 3 is an element that contains the data block 9 on your credit card, and extends the capabilities of the mobile communication device 1 in which the quality NDC transmitter.

INDUSTRIAL APPLICABILITY

Practical application of the invention is obvious. In accordance with the invention, it is possible to manufacture and use of systems for the implementation of contactless payments, in which the mobile communication device of the user acts as an instrument to make payments.

LIST of USED SYMBOLS:

1 - Device mobile communication

2 - Reserved

3 is a Removable memory card

4 is a control Block

5 - Channel data

6 - Payment terminal

7 - NDC-

8 - Antenna

9 - Block data on the card

10 - Server payment processing

11 is a Database of financial institutions

12 - Unit create one-time password

13 - a Carrier PIN

1. System of contactless payment is authorized, containing the mobile communication device with keyboard, display and print the card with a secure element of virtual payment terminal and the application for contactless payments with a block encryption, as well as having connected through contacts to the printed circuit Board card that includes the element of the wireless communication channel and at least two independent secure element virtual payment terminal, one of which is a module create a one-time password, and Stalin the e - modules containing information on payment cards of the user, and a control unit for activating the memory card secure element, the corresponding card selected by the user, and the mobile communication device configured to connect the virtual payment terminal to the linked server payment processing fixed payment terminal via a wireless communication channel, the memory card with the possibility of transfer and acceptance of one-time password, the encryption key and the encrypted PIN code of the selected payment card of the user.

2. The system according to claim 1, characterized in that it is equipped with independent carrier for contactless PIN at the POS terminal includes a storage module PIN encryption module and the module of the wireless communication channel to connect this device to the payment terminal and/or mobile communication device.

3. The system according to claim 2, characterized in that the carrier is arranged to supply electric power from the rulings of the electromagnetic field.

4. System according to any one of claims 1 to 3, characterized in that the keyboard is equipped with a special button to run the application for the implementation of contactless payments, marked by a currency symbol.

5. System according to any one of claims 1 to 3, characterized in that irtually payment terminal is made from a block of temporary storage of data.

6. System according to any one of claims 1 to 3, characterized in that the element of the wireless communication channel is equipped with a frequency Converter and an antenna with electric power supply from the received antenna electromagnetic field.

7. System according to any one of claims 1 to 3, characterized in that the removable memory card is in the format microSD.

8. The authorization method of payment when making a contactless payment transaction in which the user appropriate buttons on the keypad mobile communication activates the virtual payment terminal on the PCB mobile communication devices and the control unit selects the menu card, which will be payment, and then brings the mobile communication device to the contactless NFC element of the wireless communication channel to a fixed payment terminal, which communicates with the element of the wireless communication channel, the memory card mobile communication devices, receives information about the selected payment card and sends a request to authorize payment to the remote server processing payments for request processing in which it is being tested on the cryptographic module on the authenticity of the application, with the subsequent formation of the request for access to the database of the financial institution, and the control unit advance is the duty to regulate corresponding to the selected payment card secure element on the memory card and connects a virtual payment terminal to the linked server payment processing fixed payment terminal through the element of the wireless channel, the memory card with the possibility of transfer and acceptance of one-time password, the encryption key and the encrypted PIN code of the selected payment card of the user.

9. The method according to claim 8, characterized in that the PIN is directly injected in the inpatient payment terminal with keyboard last.

10. The method according to claim 8, characterized in that the PIN is entered using stand-alone media for contactless PIN at the POS terminal, with fixed payment terminal generates a public key, sends it via the contactless communication channel on offline media, where it is used to encrypt the PIN, whereupon the PIN via the contactless communication channel is sent to the fixed payment terminal, where the encrypted PIN is decrypted using the private key.