System and method for a secure transaction module

• US 20060064391A1
• Filed: 09/14/2005
• Published: 03/23/2006
• Est. Priority Date: 09/20/2004
• Status: Abandoned Application

• Current Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Original Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Inventors: Goldthwaite, Scott, Petrov, Andrew, Graylin, William
• Application Number:
  US11/226,823
• Publication Number:
  US 20060064391A1
• Time in Patent Office: Days
• US Class Current: 705/65
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

A secure electronic payment transaction system includes a Secure Transaction Module (STM) and a host device. The STM includes hardware and software components that meet the security requirements of the payment card industry and provide secure payment transactions utilizing banking cards. The host device includes a communication modem for connecting to financial institutions via a network connection. The STM connects to the host device via an interface and communicates with the financial institutions via the host device'"'"'s communication modem. The STM is self-sufficient and can be connected to any host device over any interface.

Claims

1. A secure electronic payment transaction system comprising:

a secure transaction module (STM) comprising one or more hardware components and one or more software components for providing secure payment transactions utilizing banking cards;

a host device comprising a communication modem for connecting to a financial institution via a network;

wherein said STM is adapted to connect to said host device via an interface and to communicate with said financial institution via said communication modem; and

wherein said STM is further adapted to receive payment transaction commands from said host device via said interface.

2. The system of claim 1 wherein said STM provides a cryptographic boundary so that said secure payment transactions are not compromised by said host device or other external devices and wherein said cryptographic boundary comprises security measures that detect and prevent tampering with said one or more hardware components and said one or more software components.

3. The system of claim 2 wherein all sensitive information processed within said cryptographic boundary is encrypted before being exposed to said host device.

4. The system of claim 1 wherein said one or more hardware components are contained in a Printed Circuit Board Assembly (PCBA) of said STM and comprise a microprocessor, a secure microprocessor and a memory.

5. The system of claim 4 wherein said secure microprocessor is integrated within said microprocessor.

6. The system of claim 5 wherein said memory is selected from a group consisting of memory embedded in said microprocessor, memory embedded in said secure microprocessor, erasable secure memory embedded in said PCBA, and permanent secure storage memory embedded in said PCBA.

7. The system of claim 4 wherein said one or more hardware components further comprise a display screen, a keypad, a clock and a life-time battery providing power to said secure memory and said clock.

8. The system of claim 7 wherein said one or more hardware components further comprise a first connector adapted to connect to a magnetic card reader, a second connector adapted to connect to a smart card reader, and a third connector adapted to connect to a secure authentication module (SAM).

9. The system of claim 8 wherein said one or more hardware components further comprise additional connectors adapted to connect to card readers selected from a group consisting of contactless card readers and biometric readers.

10. The system of claim 4 wherein said one or more hardware components further comprise a crypto coprocessor, and wherein said crypto coprocessor is adapted to perform complex mathematical calculations required for cryptographic data transformations.

11. The system of claim 4 wherein said one or more hardware components further comprise additional interfaces for connecting to external devices and wherein said additional interfaces are selected from a group consisting of serial interfaces, parallel interfaces, infrared interfaces, and Bluetooth.

12. The system of claim 4 wherein said microprocessor is powered by an external power supply.

13. The system of claim 12 wherein said external power supply is provided by said host device.

14. The system of claim 1 wherein said interface provides a processor to processor interface between the STM and the host device and is selected from a group consisting of a serial interface, parallel interface, Subscriber Identification Module (SIM) card interface, and multimedia card interfaces.

15. The system of claim 1 wherein said host device is selected from a group consisting of a mobile phone, a personal computer, a point of sale (POS) terminal, a personal digital assistant (PDA), a set-top box, a vending machine, a wired telephone, a computer controlling a car, and an electronic lock preventing access to valuable assets.

16. The system of claim 1 wherein said one or more software components comprise a secure transaction application and a transaction application commanding protocol (TACP) and wherein said TACP allows external control of said secure transaction application.

17. The system of claim 16 wherein said one or more software components further comprise a printing device protocol and wherein said printing device protocol directs printed forms of said secure transaction application to a printer connected to said host device.

18. The system of claim 16 wherein said one or more software components comprise a screen control protocol and wherein said screen control protocol directs video output of said secure transaction application to a screen display of said host device.

19. The system of claim 16 wherein said one or more software components comprise a user input control protocol and wherein said user input control protocol directs user input to said secure transaction application to a keyboard of said host device.

20. The system of claim 16 wherein said one or more software components comprise a magnetic card reader control protocol and wherein said magnetic card reader control protocol directs magnetic card information input to a magnetic card reader connected to said host device.

21. The system of claim 16 wherein said one or more software components comprise a smart card reader control protocol and wherein said smart card reader control protocol directs smart card information input to a smart card reader connected to said host device.

22. The system of claim 1 wherein said STM is certifiable by international or national institutions of the payment industry.

23. The system of claim 1 wherein said one or more hardware components and said one or more software components are implemented in accordance with standards defined in a specification for PIN Entry Devices (PED) of the Payment Card Industry (PCI).

24. The system of claim 1 wherein said host device further comprises a communication channel protocol for directing communications between said STM and said financial institutions via said interface.

25. A method for performing secure electronic payment transactions comprising:

providing a secure transaction module (STM) comprising one or more hardware components and one or more software components for providing secure payment transactions utilizing banking cards;

providing a host device comprising a communication modem for connecting to a financial institution via a network;

connecting said STM to said host device via an interface; and

communicating between said STM and said financial institution via said communication modem and performing said secure electronic payment transactions.

26. The method of claim 25 further comprising said STM receiving payment transaction commands from said host device via said interface.

27. The method of claim 25 wherein said STM provides a cryptographic boundary so that said secure payment transactions are not compromised by said host device or other external devices and wherein said cryptographic boundary comprises security measures that detect and prevent tampering with said one or more hardware components and said one or more software components.

28. The method of claim 27 wherein all sensitive information processed within said cryptographic boundary is encrypted before being exposed to said host device.

29. The method of claim 25 wherein said one or more hardware components are contained in a Printed Circuit Board Assembly (PCBA) of said STM and comprise a microprocessor, a secure microprocessor and a memory.

30. The method of claim 29 wherein said secure microprocessor is integrated within said microprocessor.

31. The method of claim 30 wherein said memory is selected from a group consisting of memory embedded in said microprocessor, memory embedded in said secure microprocessor, erasable secure memory embedded in said PCBA, and permanent secure storage memory embedded in said PCBA.

32. The method of claim 30 wherein said one or more hardware components further comprise a display screen, a keypad, a clock and a life-time battery providing power to said secure memory and said clock.

33. The method of claim 32 wherein said one or more hardware components further comprise a first connector adapted to connect to a magnetic card reader, a second connector adapted to connect to a smart card reader, and a third connector adapted to connect to a secure authentication module (SAM).

34. The method of claim 33 wherein said one or more hardware components further comprise additional connectors adapted to connect to card readers selected from a group consisting of contactless card readers and biometric readers.

35. The method of claim 30 wherein said one or more hardware components further comprise a crypto coprocessor, and wherein said crypto coprocessor is adapted to perform complex mathematical calculations required for cryptographic data transformations.

36. The method of claim 30 wherein said one or more hardware components further comprise additional interfaces for connecting to external devices and wherein said additional interfaces are selected from a group consisting of serial interfaces, parallel interfaces, infrared interfaces, and Bluetooth.

37. The method of claim 30 wherein said microprocessor is powered by an external power supply.

38. The method of claim 37 wherein said external power supply is provided by said host device.

39. The method of claim 25 wherein said interface provides a processor to processor interface between the STM and the host device and is selected from a group consisting of a serial interface, parallel interface, Subscriber Identification Module (SIM) card interface, and multimedia card interfaces.

40. The method of claim 25 wherein said host device is selected from a group consisting of a mobile phone, a personal computer, a point of sale (POS) terminal, a personal digital assistant (PDA), a set-top box, a vending machine, a wired telephone, a computer controlling a car, and an electronic lock preventing access to valuable assets.

41. The method of claim 25 wherein said one or more software components comprise a secure transaction application and a transaction application commanding protocol (TACP) and wherein said TACP allows external control of said secure transaction application.

42. The method of claim 41 wherein said one or more software components further comprise a printing device protocol and wherein said printing device protocol directs printed forms of said secure transaction application to a printer connected to said host device.

43. The method of claim 41 wherein said one or more software components comprise a screen control protocol and wherein said screen control protocol directs video output of said secure transaction application to a screen display of said host device.

44. The method of claim 41 wherein said one or more software components comprise a user input control protocol and wherein said user input control protocol directs user input to said secure transaction application to a keyboard of said host device.

45. The method of claim 41 wherein said one or more software components comprise a magnetic card reader control protocol and wherein said magnetic card reader control protocol directs magnetic card information input to a magnetic card reader connected to said host device.

46. The method of claim 41 wherein said one or more software components comprise a smart card reader control protocol and wherein said smart card reader control protocol directs smart card information input to a smart card reader connected to said host device.

47. The method of claim 25 wherein said STM is certifiable by international or national institutions of the payment industry.

48. The method of claim 25 wherein said one or more hardware components and said one or more software components are implemented in accordance with standards defined in a specification for PIN Entry Devices (PED) of the Payment Card Industry (PCI).

49. The method of claim 25 wherein said host device further comprises a communication channel protocol for directing communications between said STM and said financial institutions via said interface.

50. A secure transaction module (STM) adapted to provide secure payment transactions utilizing banking cards, said STM comprising:

one or more hardware components,

one or more software components,

a cryptographic boundary comprising security measures that detect and prevent tampering with said one or more hardware components and said one or more software components;

wherein said STM is adapted to connect to a host device via an interface and to communicate with a financial institution via a communication modem of said host device; and

wherein said cryptographic boundary does not allow said secure payment transactions to be compromised by said host device or other external devices.

51. The STM of claim 51 wherein said STM is adapted to receive payment transaction commands from said host device via said interface.