SECURE PIN ENTRY DEVICE FOR MOBILE PHONES

• US 20110071949A1
• Filed: 11/30/2010
• Published: 03/24/2011
• Est. Priority Date: 09/20/2004
• Status: Abandoned Application

• Current Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Original Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Inventors: GRAYLIN, William W., PETROV, Andrew, GOLDTHWAITE, Scott
• Application Number:
  US12/957,250
• Publication Number:
  US 20110071949A1
• Time in Patent Office: Days
• US Class Current: 705/72
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G07F 7/088 the card reader being part of the point of sale [POS] terminal or electronic cash register [ECR] itself
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A secure mobile phone-point of sale (POS) system includes a mobile phone integrated with a secure PED module. The secure PED module is integrated with the mobile phone via the phone'"'"'s serial port or directly to the phone'"'"'s Printed Circuit Board Assembly (PCBA). The secure PED module conforms to security standards imposed by the payment card industry. The secure mobile phone-POS system has the functionality of both the secure PED and the mobile phone and the look and feel of the mobile phone.

Claims

1. A secure mobile phone-point of sale (POS) system for reading an account number from a magnetic stripe card and for conducting a secure payment transaction using the account number from the magnetic stripe card, the system operable over a wireless network, the system comprising:

a mobile phone having hardware and software components that provide voice and data functionality over the wireless network, the phone including an internal memory, a microprocessor, and a connector coupled to the microprocessor, the phone programmed with a software component for processing a secure PIN entry;

a secure device including a magnetic stripe reader for reading the account number from the magnetic stripe card, the secure device further including a processor and a memory and encryption keys stored in the memory for encrypting the account number, the secure device encrypting the account number into an encrypted account number, the secure device including a connector, wherein the reader and phone are coupled by mating the respective connectors, and wherein the secure device sends the encrypted account number to the phone via the connectors during the secure payment transaction.

2. The system of claim 1 wherein the mobile phone has a form factor selected from the group consisting of a bar, a clamshell, a flip, and a slide.

3. The system of claim 1 wherein the mobile phone is between about 1.5-inches and 3-inches in width.

4. The system of claim 3 wherein the mobile phone is between about 2.0-inches and 8-inches in length.

5. The system of claim 1 wherein the mobile phone weighs between about 4-ounces and 9-ounces.

6. The system of claim 1 wherein the coupled reader and phone have a mobile phone form factor.

7. The system of claim 1 wherein the connector of the phone is a serial interface port and the secure device is integrated with the phone via the serial interface port.

8. The system of claim 1 wherein the connector of the phone is a SIM card and the connector of the secure device is a SIM card slot, and the secure device is integrated with the phone via the SIM card slot.

9. The system of claim 1 wherein the secure device lacks a keypad and wherein PIN entry is performed only via the phone.

10. The system of claim 1 wherein the secure device includes a detector switch that causes erasure of the encryption keys in the memory when an attempt to tamper with the device is made.

11. The system of claim 1 wherein the secure device includes a power supply for the memory, and the detection switch cuts off the power supply from the memory on the tamper attempt in order to erase the encryption keys.

12. The system of claim 1 wherein the phone includes a printed circuit board assembly (PCBA) and the secure device is coupled via the connectors to the PCBA of the phone.

13. The system of claim 1 for use in a payment industry, and wherein the secure device conforms to security standards imposed by the payment industry.

14. The system of claim 13 wherein the secure device is implemented in accordance with one or more standards selected from the group consisting of Payment Card Industry (PCI) PIN Entry Device specification, Europay MasterCardVISA Level 1 and Level 2 standard, and Bank Card Testing Center of China specification.

15. The system of claim 1 for use in a payment industry, and wherein the software component in the phone for processing the secure PIN entry conforms to security standards imposed by the payment industry.

16. The system of claim 15 wherein the software component in the phone for processing the secure PIN entry is implemented in accordance with one or more standards selected from the group consisting of Payment Card Industry (PCI) PIN Entry Device specification, Europay MasterCardVISA Level 1 and Level 2 standard, and Bank Card Testing Center of China specification.

17. The system of claim 1 wherein the mobile phone has a bar form factor.