Electronic authentication systems

• US 10,504,114 B2
• Filed: 09/14/2016
• Issued: 12/10/2019
• Est. Priority Date: 06/06/2013
• Status: Active Grant

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Mestre, Patrick, Smets, Patrik
• Primary Examiner(s): Niquette, Robert R
• Application Number:
  US15/265,170
• Publication Number:
  US 20170011370A1
• Time in Patent Office: 1,182 Days
• Field of Search: 705 35- 45
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: H04L 2209/08 Randomization, e.g. dummy operations or using noise
• CPC Class Codes: H04L 2209/16 Obfuscation or hiding, e.g. involving white box
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 9/0841 involving Diffie-Hellman or related key agreement protocols
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/3066 involving algebraic varieties, e.g. elliptic or hyper-elliptic curves

Abstract

Methods and devices are provided for use in carrying out a transaction between a transaction device and a point of interaction. In connection therewith, a device for interacting with a point of interaction to carry out a transaction by a consumer includes a processor comprising a payment application and a system environment module, where the system environment module is configured to determine whether the payment application is eligible for a transaction. The device also includes an input in communication with the processor and configured to receive transaction data from a point of interaction in connection with the transaction, and an output in communication with the processor and configured to transmit transaction data to the point of interaction in connection with the transaction when the system environment module determines that the payment application is eligible for the transaction.

Claims

1. A transaction device for interacting with a point of interaction to carry out a transaction by a consumer, the transaction device comprising:

an input configured to receive transaction data and functionality data from a point of interaction in connection with a transaction, the functionality data indicative of one or more terminal capabilities of the point of interaction;

a secure element comprising multiple payment applications, each of the multiple payment applications associated with one or more requirements, preferences, and/or services linked to the payment application;

a processor in communication with the input and the secure element, the processor comprising a system environment module separate from the secure element, and wherein the secure element is separate from the processor;

wherein the processor is configured to call the system environment module when the input receives the transaction data and the functionality data from the point of interaction before the transaction takes place;

wherein the system environment module, when called by the processor, is configured to;

interface with the multiple payment applications included in the secure element and gather the requirements, preference, and/or services from the multiple payment applications;

for each of the multiple payment applications, compare the transaction data received from the point of interaction for the transaction and the functionality data received from the point of interaction against the one or more requirements, preferences, and/or services gathered from the payment application;

based on the comparisons, determine whether each of the multiple payment applications is eligible to be used for the transaction; and

an output in communication with the processor and configured to transmit transaction data, from one of the multiple payment applications of the secure element, to the point of interaction in connection with the transaction, when the system environment module determines that the one of the multiple payment applications is eligible for the transaction, thereby configuring the transaction device in accordance with the one or more terminal capabilities of the point of interaction.

2. The transaction device of claim 1, wherein the one or more requirements, preferences, and/or services associated with the one of the multiple payment applications relates to one or more of consumer verification, transaction authorization, and/or at least one consumer service linked to the payment application.

3. The transaction device of claim 1, wherein the system environment module is further configured to generate a disposition for the transaction, in association with at least one other application and/or module at the transaction device, prior to the processor transmitting transaction data to the point of interaction.

4. The transaction device of claim 3, wherein the disposition includes an identification of one or more consumer services available to the consumer through the one of the multiple payment applications for the transaction, requirements for consumer verification through the one of the multiple payment applications, and/or requirements for transaction authorization through the one of the multiple payment applications.

5. The transaction device of claim 1, wherein the system environment module is further configured to display the eligible ones of the multiple payment applications for the transaction to a consumer, thereby permitting the consumer to select said one of the multiple payment applications.

6. The transaction device of claim 1, wherein the system environment module is further configured to determine, for each of the eligible ones of the multiple payment applications, one or more of consumer services available to the consumer through the payment application for the transaction, requirements for consumer verification through the payment application, and/or requirements for transaction authorization through the payment application.

7. The transaction device of claim 6, wherein the processor is further configured, for each of the multiple payment applications, to update one or more of the consumer services available to the consumer through the payment application, the requirements for consumer verification through the payment application, and/or the requirements for transaction authorization through the payment application.

8. The transaction device of claim 1, wherein the processor further comprises a communication module functionally disposed between (a) the input and output and (b) the one of the multiple payment applications;

and

wherein the communication module is arranged to map transaction data received via the input to a data format of the one of the multiple payment applications, and to reformat transaction data output from the one of the multiple payment applications to a data format suitable for the point of interaction, the reformatted data output from the one of the multiple payment applications being sent to the point of interaction via the output.

9. The transaction device of claim 8, wherein the processor further comprises an authentication module arranged to establish a secure communication channel between the one of the multiple payment applications and the point of interaction.

10. A computer-implemented method for carrying out a transaction by a consumer, between a transaction device associated with the consumer and a point of interaction, the method comprising:

receiving, by an input of a transaction device, transaction data and functionality data from a point of interaction in connection with a transaction by a consumer using the transaction device, the functionality data relating to terminal capabilities of the point of interaction, the transaction device including a processor and a secure element comprising multiple payment applications, each of the multiple payment applications associated with one or more requirements, preferences, and/or services linked to the payment application;

calling, by the processor of the transaction device, a system environment module of the transaction device when the input receives the transaction data and the functionality data from the point of interaction before the transaction takes place;

when the system environment module is called by the processor, interfacing, by the system environment module of the transaction device, with the multiple payment applications included in the secure element and gathering the requirements, preferences, and/or services from the multiple payment applications;

for each of the multiple applications, comparing, by the system environment module of the transaction device, the functionality data received from the point of interaction against the one or more requirements, preferences, and/or services gathered from the payment application;

based on the comparison, determining, by the system environment module of the transaction device, whether each of the multiple payment applications included in the secure element at the transaction device is eligible for the transaction; and

when one or more of the multiple payment applications is eligible for the transaction, transmitting, by the secure element of the transaction device, via at least one of said one or more eligible payment applications, transaction data to the point of interaction in connection with the transaction.

11. The method of claim 10, wherein determining whether each of the multiple payment applications is eligible for the transaction includes comparing the transaction data received from the point of interaction for the transaction and the functionality data received from the point of interaction against the one or more requirements, preferences, and/or services gathered from the payment application.

12. The method of claim 11, wherein the one or more requirements, preferences, and/or services linked to each of the payment applications relates to one or more of consumer verification, transaction authorization, and/or at least one consumer service linked to the one or more of the multiple payment applications.

13. The method of claim 10, further comprising generating, by the transaction device, a disposition for the transaction, in association with at least one other application and/or module at the transaction device, prior to the secure element transmitting transaction data to the point of interaction;

wherein the disposition includes one or more of consumer services available to the consumer through the one or more of the eligible payment applications for the transaction, requirements for consumer verification through the one or more of the eligible payment applications, and/or requirements for transaction authorization through the one or more of the eligible payment applications.

14. The method of claim 10, further comprising updating, by the transaction device, one or more of consumer services available to the consumer through the one or more of the eligible payment applications, requirements for consumer verification through the one or more of the eligible payment applications, and/or requirements for transaction authorization through the one or more of the eligible payment applications.

15. A computer-implemented method for carrying out a transaction by a consumer, between a transaction device associated with the consumer and a point of interaction, the method comprising:

receiving, by an input of a transaction device, transaction data and functionality data from a point of interaction in connection with a transaction by a consumer using the transaction device, the functionality data relating to terminal capabilities of the point of interaction, the transaction device including a processor and a secure element comprising multiple payment applications, each of the multiple payment applications associated with one or more requirements, preferences, and/or services linked to the payment application;

calling, by the processor of the transaction device, a system environment module of the transaction device when the input receives the functionality data from the point of interaction before the transaction takes place;

when the system environment module is called by the processor, interfacing, by the system environment module of the transaction device, with one or more of the multiple payment applications included in the secure element and gathering the requirements, preferences, and/or services from each of said one or more of the multiple payment applications;

comparing, by the system environment module of the transaction device, the functionality data received from the point of interaction against the one or more requirements, preferences, and/or services gathered from each of said one or more of the multiple payment applications;

based on the comparison, determining, by the system environment module of the transaction device, whether at least one of said one or more of the multiple payment applications is eligible for the transaction; and

when one of said one or more of the multiple payment applications is eligible for the transaction, transmitting, by the transaction device, via said eligible payment application, transaction data to the point of interaction in connection with the transaction.

16. The method of claim 15, wherein comparing further includes comparing the transaction data received from the point of interaction for the transaction against the one or more requirements, preferences, and/or services gathered from each of said one or more of the multiple payment applications.

17. The method of claim 16, wherein the one or more requirements, preferences, and/or services gathered from each of the one or more of the multiple payment applications relates to one or more of consumer verification, transaction authorization, and/or at least one consumer service linked to the interfaced payment application.

18. The method of claim 15, further comprising generating, by the transaction device, a disposition for the transaction, in association with at least one other application and/or module at the transaction device, prior to the processor transmitting transaction data to the point of interaction;

wherein the disposition includes one or more of consumer services available to the consumer through the eligible payment application for the transaction, requirements for consumer verification through the eligible payment application, and/or requirements for transaction authorization through the eligible payment application.

19. The method of claim 15, further comprising reporting a list of eligible ones of said one or more of the multiple payment applications to the point of interaction, thereby permitting the point of interaction to display the eligible ones of said one or more of the multiple payment applications for the transaction to the consumer and thereby permitting the consumer to select said eligible payment application.