Method and secure device for performing a transaction

• US 10,528,943 B2
• Filed: 02/21/2013
• Issued: 01/07/2020
• Est. Priority Date: 02/22/2012
• Status: Active Grant

• Current Assignee: IDEMIA France (Advent International Corporation)
• Original Assignee: IDEMIA France (Advent International Corporation)
• Inventors: Dabosville, Guillaume, Dottax, Emmanuelle, Sierra, Yannick, Dos Santos, Elder, Condemine, Olivier, Laazimani, Omar
• Primary Examiner(s): Agwumezie, Chinedu C
• Application Number:
  US13/773,298
• Publication Number:
  US 20130218775A1
• Time in Patent Office: 2,511 Days
• Field of Search: None
• CPC Class Codes: G06F 1/1694 the I/O peripheral being a single or a set of motion sensors for pointer control or gesture input obtained by sensing movements of the portable computer
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha
• CPC Class Codes: G06F 3/0346 with detection of the device orientation or free movement in a 3D space, e.g. 3D mice, 6-DOF [six degrees of freedom] pointers using gyroscopes, accelerometers or tilt-sensors
• CPC Class Codes: G06F 3/04847 Interaction techniques to control parameter settings, e.g. interaction with sliders or dials
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/3274 using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 20/42 Confirmation, e.g. check or permission by the legal debtor of payment

Abstract

A method for determining the presence of a human being, comprising:

• • measuring (S6) a movement (MOV) of a first device (4) by a sensor (44) of said first device (4),
  • determining the presence of a human being on the basis of the measured movement (MOV).

Claims

1. A system for determining a presence of a user, and for securing a transaction between a server and a mobile device handled by said user, the system comprising:

means for measuring a movement of a first device in the mobile device, the means for measuring including a microelectromechanical (MEMS) sensor or an accelerometer and the first device being a secure element, said first device includes means for receiving, from a server, instructions for validating the transaction and means for determining a stimuli based on the instructions for validating the transaction, the stimuli comprising instructions for performing a predetermined movement; and

the mobile device comprising a user interface for displaying the stimuli;

wherein the first device includes;

means for determining data based at least on the measured movement from the sensor,

means for determining whether the measured movement and the predetermined movement match, the predetermined movement being based on the instructions,

means for determining a signature in response to the measured movement and the predetermined movement match by signing the determined data with a cryptographic key, and

means for transmitting the signature to the server to allow said server to validate the transaction based at least on the signature.

2. The system according to claim 1, wherein the mobile device includes means for receiving the stimuli from the server, wherein the mobile device is coupled to the first device, and wherein the means for transmitting of the first device is further for transmitting the signature from the first device to a secure device.

3. The system according to claim 1, wherein the transaction comprises a payment transaction, and wherein the means for receiving of the first device is further for receiving an amount of the payment transaction from the server.

4. The system according to claim 1, wherein the determined data comprise transaction data.

5. The system according to claim 4, wherein said transaction data comprise an amount of a payment transaction.

6. The system according to claim 1, wherein the first device is configured to determine the predetermined movement based on the instructions for validating the transaction.

7. The system according to claim 1, wherein the stimuli comprises an image comprising instructions for a user to perform the predetermined movement.

8. The system according to claim 1, wherein the instructions for validating the transaction comprise a number determined in a pseudo-random manner or based on data related to the transaction.

9. A method for determining a presence of a user, and for securing a transaction between a server and a second device, said second device being a mobile device handled by said user, the method comprising:

measuring a movement of a first device in the second device by a sensor of the first device, the sensor being a microelectromechanical (MEMS) sensor or an accelerometer and the first device being a secure element;

receiving instructions for validating the transaction from a server at the first device;

determining a stimuli based on the instructions for validating the transaction, the stimuli comprising instructions for performing a predetermined movement;

displaying the stimuli on a user interface of the second device;

determining data based at least on the measured movement from the sensor;

determining by the first device whether the measured movement and the predetermined movement match;

determining by the first device a signature in response to the measured movement and the predetermined movement match by signing the determined data with a cryptographic key; and

transmitting by the first device the signature to the server to allow the server to validate the transaction based at least on the signature.

10. The method according to claim 9, wherein the stimuli comprises an image comprising instructions for the user to perform the predetermined movement.

11. The method according to claim 9, wherein the instructions for validating the transaction comprise a number determined in a pseudo-random manner or based on data related to the transaction.