Handy terminal and payment method to be used in same

• US 10,491,395 B2
• Filed: 11/05/2010
• Issued: 11/26/2019
• Est. Priority Date: 11/09/2009
• Status: Active Grant

• Current Assignee: NEC Platforms, Ltd. (NEC Corporation)
• Original Assignee: NEC Platforms, Ltd. (NEC Corporation)
• Inventors: Komiyama, Tsuyoshi
• Primary Examiner(s): Choo, Johann Y
• Application Number:
  US13/496,159
• Publication Number:
  US 20120173435A1
• Time in Patent Office: 3,308 Days
• Field of Search: 705 67
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3827 Use of message hashing
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G07F 7/1091 Use of an encrypted form of the PIN
• CPC Class Codes: G07F 7/122 Online card verification
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

There is provided a handy terminal in which inputting of an application program and of a PIN is executed and a keyboard and a display device are commonly used thus security is secured with a simple system. A card reader control program 23b in the keyboard unit memory 23 detects an insertion state of a credit card and notifies a detected key code from the keyboard control program 23a to a payment program on the main board 2. A main CPU 12 calculates a program hash value provided to the payment program and a program hash value at the time of execution of a payment program 11b and encrypts and decrypts these hash values using a secret key, encrypted key, and public key so that these hash values are not stolen. The main CPU 12 compares the program hash value provided to the payment program 11b with the program hash value to be used at the time of the execution of the payment program 11b.

Claims

1. A handy terminal comprising a main board and a keyboard unit connected to each other through an interface,

the keyboard unit comprising:

a shared keyboard for inputting data based on execution of an application program and inputting a PIN of a credit card based on execution of a payment program;

a card reader to read information stored in the credit card;

a sub CPU to control the shared keyboard and the card reader; and

a keyboard unit memory configured to store control programs installed in the keyboard unit,

the main board comprising;

a main CPU (Central Processing Unit) to perform execution processing of the application program and the payment program each stored in the main board,

wherein the main CPU is configured to calculate a first program hash value provided to the payment program, in response to installing the payment program on the main board, and to calculate a second program hash value every time the payment program is executed, wherein each program hash value is used to detect alteration of the payment program, and is a random number of fixed length produced from given data in the payment program by using a specified calculation method,

wherein the main CPU is configured to encrypt the calculated first program hash value and the calculated second program hash value by using a first key, wherein the first key to encrypt the second program hash value is produced in the keyboard unit and is sent to the main board,

wherein the sub CPU is configured to decrypt the encrypted first program hash value and the encrypted second program hash value by using a second key, wherein the second key to decrypt the first program hash value is only stored in the keyboard unit, and the second key to decrypt the second program hash value is produced in the keyboard unit,

wherein the sub CPU is configured to compare the decrypted first program hash value and the decrypted second program hash value, and

wherein a control program stored in the keyboard unit memory is executed to;

notify the main board of an input of a key code into the shared keyboard and enable execution of inputting of the PIN of the credit card in response to determining that the first program hash value is aligned with the second program hash value based on a result from comparison by the sub CPU, and

deny notification to the main board of the input of the key code into the shared keyboard and disable the execution of inputting of the PIN of the credit card in response to determining that the first program hash value is not aligned with the second program hash value based on the result from the comparison by the sub CPU.

2. The handy terminal according to claim 1, wherein the encrypted first program hash value and the payment program are coupled and installed, as a coupled module, on the main board.

3. The handy terminal according to claim 1, wherein the first key to encrypt the second program hash value and the second key to decrypt the second program hash value are produced in the keyboard unit, every time the payment program is executed.

4. The handy terminal according to claim 2, wherein the first key to encrypt the second program hash value and the second key to decrypt the second program hash value are produced in the keyboard unit, every time the payment program is executed.

5. The handy terminal according to claim 1,

wherein the first key is a secret key or an encryption key produced by using a random number and that the second key is a public key or the encryption key.

6. The handy terminal according to claim 2,

wherein the first key is a secret key or an encryption key produced by using a random number and that the second key is a public key or the encryption key.

7. The handy terminal according to claim 3,

wherein the first key is a secret key or an encryption key produced by using a random number and that the second key is a public key or the encryption key.

8. The handy terminal according to claim 1, wherein the second key to decrypt the second program hash value and the first key to encrypt the second program hash value are a same encryption key produced by using a random number.

9. The handy terminal according to claim 2, wherein the second key to decrypt the second program hash value and the first key to encrypt the second program hash value are a same encryption key produced by using a random number.

10. The handy terminal according to claim 3, wherein the second key to decrypt the second program hash value and the first key to encrypt the second program hash value are a same encryption key produced by using a random number.

11. A payment method to be used in a handy terminal including a main board and a keyboard unit connected to each other through an interface, the main board comprising a main CPU (Central Processing Unit) to perform execution processing of an application program and a payment program each stored in the main board, and the keyboard unit comprising a shared keyboard for inputting data based on execution of the application program and inputting a PIN of a credit card based on execution of the payment program;

a card reader to read information stored in the credit card;

a sub CPU to control the shared keyboard and the card reader; and

a keyboard unit memory configured to store control programs installed in the keyboard unit, the payment method comprising;

a calculating step, by the main CPU, of calculating a first program hash value provided to the payment program, in response to installing the payment program on the main board, and calculating a second program hash value every time the payment program is executed, wherein each program hash value is used to detect alteration of the payment program, and is a random number of fixed length produced from given data in the payment program by using a specified calculation method,

an encrypting step, by the main CPU, of encrypting the calculated first program hash value and the calculated second program hash value by using a first key, wherein the first key to encrypt the second program hash value is produced in the keyboard unit and is sent to the main board,

a decrypting step, by the sub CPU, of decrypting the encrypted first program hash value and the encrypted second program hash value by using a second key, wherein the second key to decrypt the first program hash value is only stored in the keyboard unit, and the second key to decrypt the second program hash value is produced in the keyboard unit,

a comparing step, by the sub CPU, of comparing the decrypted first program hash value and the decrypted second program hash value, and

a controlling step, by a control program stored in the keyboard unit memory and executed, of notifying the main board of an input of a key code into the shared keyboard and enabling execution of inputting of the PIN of the credit card in response to determining that the first program hash value is aligned with the second program hash value based on a result from comparison by the sub CPU, and denying notification to the main board of the input of the key code into the shared keyboard and disabling the execution of inputting of the PIN of the credit card in response to determining that the first program hash value is not aligned with the second program hash value based on the result from the comparison by the sub CPU.

12. The payment method according to claim 11, wherein the encrypted first program hash value and the payment program are coupled and installed, as a coupled module, on the main board.

13. The payment method according to claim 11, wherein the first key to encrypt the second program hash value and the second key to decrypt the second program hash value are produced in the keyboard unit, every time the payment program is executed.

14. The payment method according to claim 12, wherein the first key to encrypt the second program hash value and the second key to decrypt the second program hash value are produced in the keyboard unit, every time the payment program is executed.

15. The payment method according to claim 11, wherein the first key is a secret key or an encrypted key produced by using a random number, and

that the second key is a public key or the encrypted key.

16. The payment method according to claim 12, wherein the first key is a secret key or an encrypted key produced by using a random number, and

that the second key is a public key or the encrypted key.

17. The payment method according to claim 13, wherein the first key is a secret key or an encrypted key produced by using a random number, and

that the second key is a public key or the encrypted key.

18. The payment method according to claim 11, wherein the second key to decrypt the second program hash value and the first key to encrypt the second program hash value are a same encryption key produced by using a random number.

19. The payment method according to claim 12, wherein the second key to decrypt the second program hash value and the first key to encrypt the second program hash value are a same encryption key produced by using a random number.

20. The payment method according to claim 13, wherein the second key to decrypt the second program hash value and the first key to encrypt the second program hash value are a same encryption key produced by using a random number.