Method, device and secure element for conducting a secured financial transaction on a device
First Claim
1. A method of operating a mobile device used as a payment terminal, the mobile device being distinct from a dedicated payment terminal, the mobile device being configured to run a point of sale (POS) application for receiving a payment from a customer and to operate a secure element, the mobile device comprising a central processing unit, a contactless interface comprising a Contactless Front End and a communication interface, the method comprising:
- establishing, through the communication interface of the mobile device, a secured communication channel between the secure element and a remote server, the secured communication channel being based on encryption keys;
sending, by a payment applet operated by the secure element, a request to enable a reader mode of the Contactless Front End;
receiving, by the secure element, via the contactless interface of the mobile device, and from a payment apparatus, data associated with the payment apparatus, the data identifying the customer'"'"'s account, at least a portion of the data associated with the payment apparatus being solely accessible by the secure element;
encrypting, by the secure element, the at least the portion of the data associated with the payment apparatus, thereby generating encrypted data;
sending over the secured communication channel, to the remote server, the encrypted data and a merchant identifier stored in the secure element so that a transaction may be processed;
receiving, from the remote server, an indicator that the transaction was authorized;
causing display of an indication that the transaction was authorized;
sending, by the payment applet, a request to deactivate the reader mode of the Contactless Front End; and
closing the secured communication channel.
6 Assignments
0 Petitions
Accused Products
Abstract
A device and a secure element for conducting a secured financial transaction are disclosed. The device comprises a central processing unit; a communication interface for establishing a communication between the device and a financial institution related to a financial account; an interface for acquiring data relating to the financial account; the secure element for processing at least a portion of the data relating to the financial account acquired by the interface; and control logic for acquiring a purchase amount to be debited from the financial account and for obtaining a transaction authorization from the financial institution related to the financial account, the transaction authorization being based, at least partially, on data processed solely by the secure element independently of data processed by the central processing unit. A method of conducting the secured financial transaction, and a computer program product for execution by the secure element are also disclosed.
-
Citations
20 Claims
-
1. A method of operating a mobile device used as a payment terminal, the mobile device being distinct from a dedicated payment terminal, the mobile device being configured to run a point of sale (POS) application for receiving a payment from a customer and to operate a secure element, the mobile device comprising a central processing unit, a contactless interface comprising a Contactless Front End and a communication interface, the method comprising:
-
establishing, through the communication interface of the mobile device, a secured communication channel between the secure element and a remote server, the secured communication channel being based on encryption keys; sending, by a payment applet operated by the secure element, a request to enable a reader mode of the Contactless Front End; receiving, by the secure element, via the contactless interface of the mobile device, and from a payment apparatus, data associated with the payment apparatus, the data identifying the customer'"'"'s account, at least a portion of the data associated with the payment apparatus being solely accessible by the secure element; encrypting, by the secure element, the at least the portion of the data associated with the payment apparatus, thereby generating encrypted data; sending over the secured communication channel, to the remote server, the encrypted data and a merchant identifier stored in the secure element so that a transaction may be processed; receiving, from the remote server, an indicator that the transaction was authorized; causing display of an indication that the transaction was authorized; sending, by the payment applet, a request to deactivate the reader mode of the Contactless Front End; and closing the secured communication channel. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14)
-
-
15. A mobile device to be used as a payment terminal, the mobile device being distinct from a dedicated payment terminal, the mobile device being configured to run a point of sale (POS) application for receiving a payment from a customer and to operate a secure element, the mobile device comprising a non-transitory computer readable storage medium comprising computer-executable instructions, a central processing unit, a contactless interface comprising a Contactless Front End and a communication interface, the computer-executable instructions, upon execution, causing to execute:
-
establishing, through the communication interface of the mobile device, a secured communication channel between the secure element and a remote server, the secured communication channel being based on encryption keys; sending, by a payment applet operated by the secure element, a request to enable a reader mode of the Contactless Front End; receiving, by the secure element, via the contactless interface of the mobile device, and from a payment apparatus, data associated with the payment apparatus, the data identifying the customer'"'"'s account, at least a portion of the data associated with the payment apparatus being solely accessible by the secure element; sending over the secured communication channel, to the remote server, the encrypted data and a merchant identifier stored in the secure element so that a transaction may be processed; sending, by the payment applet, a request to deactivate the reader mode of the Contactless Front End; and closing the secured communication channel. - View Dependent Claims (16, 17)
-
-
18. A non-transitory computer readable storage medium comprising computer-executable instructions for execution by a mobile device used as a payment terminal, the mobile device being distinct from a dedicated payment terminal, the mobile device being configured to run a point of sale (POS) application for receiving a payment from a customer and to operate a secure element, the mobile device comprising a central processing unit, a contactless interface comprising a Contactless Front End and a communication interface, the computer-executable instructions, upon execution, causing to execute:
-
establishing, through the communication interface of the mobile device, a secured communication channel between the secure element and a remote server, the secured communication channel being based on encryption keys; sending, by a payment applet operated by the secure element, a request to enable a reader mode of the Contactless Front End; receiving, by the secure element, via the contactless interface of the mobile device, and from a payment apparatus, data associated with the payment apparatus, the data identifying the customer'"'"'s account, at least a portion of the data associated with the payment apparatus being solely accessible by the secure element; encrypting, by the secure element, the at least the portion of the data associated with the payment apparatus, thereby generating encrypted data; sending over the secured communication channel, to the remote server, the encrypted data and a merchant identifier stored in the secure element so that a transaction may be processed; receiving, from the remote server, an indicator that the transaction was authorized; causing display of an indication that the transaction was authorized; sending, by the payment applet, a request to deactivate the reader mode of the Contactless Front End; and closing the secured communication channel. - View Dependent Claims (19, 20)
-
Specification