SYSTEM AND METHOD FOR A SECURE TRANSACTION MODULE

• US 20120084211A1
• Filed: 09/30/2011
• Published: 04/05/2012
• Est. Priority Date: 09/20/2004
• Status: Abandoned Application

• Current Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Original Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Inventors: PETROV, Andrew, GOLDTHWAITE, Scott, GRAYLIN, William
• Application Number:
  US13/250,619
• Publication Number:
  US 20120084211A1
• Time in Patent Office: Days
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

A secure electronic payment transaction system includes a Secure Transaction Module (STM) and a host device. The STM includes hardware and software components that meet the security requirements of the payment card industry and provide secure payment transactions utilizing banking cards. The host device includes a communication modem for connecting to financial institutions via a network connection. The STM connects to the host device via an interface and communicates with the financial institutions via the host device'"'"'s communication modem. The STM is self-sufficient and can be connected to any host device over any interface.

Claims

1. A secure electronic payment transaction system comprising:

a secure transaction module (STM) comprising one or more hardware components and one or more software components for providing secure payment transactions utilizing banking cards;

a host device comprising a communication modem for connecting directly to a financial institution via a network;

wherein said STM comprises an interface and connects with said host device via said interface and then communicates with said financial institution via said host device'"'"'s communication modem, and wherein said interface provides a processor-to-processor connection between the STM and the host device; and

wherein said STM receives payment transaction commands from said host device via said interface.

2. The system of claim 1 wherein said STM comprises a cryptographic boundary and wherein said cryptographic boundary comprises cryptographic hardware and software components that detect and prevent tampering with said one or more hardware components and said one or more software components.

3. The system of claim 2 wherein all sensitive information processed within said cryptographic boundary is encrypted before being exposed to said host device.

4. The system of claim 1 wherein said one or more hardware components are contained in a Printed Circuit Board Assembly (PCBA) of said STM and comprise a microprocessor, a secure microprocessor and a memory.

5. The system of claim 4 wherein said secure microprocessor is integrated within said microprocessor.

6. The system of claim 5 wherein said memory is selected from a group consisting of memory embedded in said microprocessor, memory embedded in said secure microprocessor, erasable secure memory embedded in said PCBA, and permanent secure storage memory embedded in said PCBA.

7. The system of claim 4 wherein said one or more hardware components further comprise a display screen, a keypad, a clock and a life-time battery providing power to said secure memory and said clock.

8. The system of claim 7 wherein said one or more hardware components further comprise a first connector adapted to connect to a magnetic card reader, a second connector adapted to connect to a smart card reader, and a third connector adapted to connect to a secure authentication module (SAM).

9. The system of claim 8 wherein said one or more hardware components further comprise additional connectors adapted to connect to card readers selected from a group consisting of contactless card readers and biometric readers.

10. The system of claim 2 wherein said cryptographic hardware components comprise a crypto coprocessor, and wherein said crypto coprocessor is adapted to perform complex mathematical calculations required for cryptographic data transformations.

11. The system of claim 4 wherein said one or more hardware components comprise additional interfaces and wherein said additional interfaces are selected from a group consisting of serial interfaces, parallel interfaces, infrared interfaces, and Bluetooth.

12. The system of claim 4 wherein said microprocessor is powered by an external power supply.

13. The system of claim 12 wherein said external power supply is provided by said host device.

14. The system of claim 1 wherein said interface is selected from a group consisting of a serial interface, parallel interface, Subscriber Identification Module (SIM) card interface, and multimedia card interfaces.

15. The system of claim 1 wherein said host device is selected from a group consisting of a mobile phone, a personal computer, a point of sale (POS) terminal, a personal digital assistant (PDA), a set-top box, a vending machine, a wired telephone, a computer controlling a car, and an electronic lock preventing access to valuable assets.

16. The system of claim 1 wherein said one or more software components comprise a secure transaction application and a transaction application commanding protocol (TACP) and wherein said TACP allows external control of said secure transaction application.

17. The system of claim 16 wherein said one or more software components further comprise a printing device protocol and wherein said printing device protocol directs printed forms of said secure transaction application to a printer connected to said host device.

18. The system of claim 16 wherein said one or more software components comprise a screen control protocol and wherein said screen control protocol directs video output of said secure transaction application to a screen display of said host device.

19. The system of claim 16 wherein said one or more software components comprise a user input control protocol and wherein said user input control protocol receives input entered through said host device'"'"'s keyboard and directs said input to said secure transaction application.

20. The system of claim 16 wherein said one or more software components comprise a magnetic card reader control protocol and wherein said magnetic card reader control protocol directs magnetic card information input to a magnetic card reader connected to said host device.

21. The system of claim 16 wherein said one or more software components comprise a smart card reader control protocol and wherein said smart card reader control protocol directs smart card information input to a smart card reader connected to said host device.

22. The system of claim 1 wherein said STM is certifiable by international or national institutions of the payment industry.

23. The system of claim 1 wherein said one or more hardware components and said one or more software components are implemented in accordance with standards defined in a specification for PIN Entry Devices (PED) of the Payment Card Industry (PCI).

24. The system of claim 1 wherein said host device further comprises a communication channel protocol for directing communications between said STM and said financial institutions via said interface.