HANDY TERMINAL AND PAYMENT METHOD TO BE USED IN SAME

• US 20120173435A1
• Filed: 11/05/2010
• Published: 07/05/2012
• Est. Priority Date: 11/09/2009
• Status: Active Grant

• Current Assignee: NEC Platforms, Ltd. (NEC Corporation)
• Original Assignee: NEC Infrontia Corporation (NEC Corporation)
• Inventors: Komiyama, Tsuyoshi
• Granted Patent: US 10,491,395 B2
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3827 Use of message hashing
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G07F 7/1091 Use of an encrypted form of the PIN
• CPC Class Codes: G07F 7/122 Online card verification
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

There is provided a handy terminal in which inputting of an application program and of a PIN is executed and a keyboard and a display device are commonly used thus security is secured with a simple system. A card reader control program 23b in the keyboard unit memory 23 detects an insertion state of a credit card and notifies a detected key cord from the keyboard control program 23a to a payment program on the main board 2. A main CPU 12 calculates a program hash value provided to the payment program and a program hash value at the time of execution of a payment program 11b and encrypts and decrypts these hash values using a secret key, encrypted key, and public key so that these hash values are not stolen. The main CPU 12 compares the program hash value provided to the payment program 11b with the program hash value to be used at the time of the execution of the payment program 11b.

Claims

1. handy terminal having a payment capability in which inputting of an application program and inputting of a PIN of a credit card which is controlled by a payment program is able to be processed by a common keyboard, the handy terminal by comprising:

a payment program legitimateness judging unit to judge whether or not the payment program, inputting of which is required is, legitimately released when an inserted state of a credit card is detected, by using a program hash value of the payment program.

3. The handy terminal according to claim 1, wherein the payment program legitimateness judging unit, when judging that the payment program is legitimate, enables the execution of inputting of a PIN code of the credit card, and when judging that the payment program is illegitimate, denies the notification of a key cord and disables the execution of inputting of the PIN code.

2. A handy terminal having a payment capability the inputting of an application program and inputting of a PIN of a credit card which is controlled by the payment program is able to be processed by a common keyboard, the handy terminal comprising:

a detecting unit to detect a state of insertion and extraction of the credit card;

a hash value calculating unit to calculate a first program hash value provided to the payment program and a second program hash value to be used at a time of execution of a program;

an encryption unit to encrypt, by using a first key, a first program hash value and a second program hash value obtained by calculation of the hash value calculating unit;

a decryption unit to decrypt, by using a second key, the first program hash value and second program hash value encrypted by the encryption unit;

a hash value comparison unit to compare the first program hash value and the second program hash value decrypted by the decryption unit to judge whether or not the payment program is legitimately released; and

a key cord notification control unit to control notification of a key cord based on an insertion and extraction state of the credit card detected by the detecting unit when results from the comparison by the hash value comparison unit are aligned with each other;

4. The handy terminal according to claim 2, wherein, when the hash value comparison unit judges that the first program hash value is aligned with the second program hash value, the key cord notification control unit enables the inputting of the PIN cord of a credit card to be executed and when the hash value comparison unit judges that the first program hash value is not aligned with the second program hash value, the key code notification control unit denies the notification of a key cord and disables the execution of inputting of a PIN code.

5. The handy terminal according to claim 2, further comprising a coupling unit to couple the encrypted first program hash value to the payment program, in which the coupling unit installs a module obtained by coupling the encrypted first program hash value to the payment program into the main board memory.

6. The handy terminal according to claim 2, wherein the first key is an encryption key produced by using a secret key and a random number and the second key is the encryption key and public key and the first program hash value and the second program hash value are produced by encryption by using, at least one of the first program hash value and the encryption key, and the encrypted first program hash value and the second program hash value are decrypted by using the public key or the encrypted key.

7. A payment method to be used in a handy terminal in which, inputting of an application program and inputting of a PIN of a credit card which is controlled by a payment program is able to be processed by a common keyboard, the payment method comprising:

a first step of detecting a state of insertion of the credit card; and

a second step of judging, when a state of insertion of the credit card in the first step is detected, using a program hash value of the payment program, whether or not the payment program, inputting of which is requested, is legitimately released.

9. The payment method according to claim 7, wherein, when the payment program is judged as a legitimate one, the execution of inputting of a PIN code of the credit card is enabled and when the payment program is judged as an illegitimate one, the notification of a key cord is denied and the execution of the inputting of the PIN code is disabled.

8. A payment method to be used in a handy terminal in which, inputting of an application program and inputting of a PIN of a credit card which is controlled by a payment program is able to be processed by a common keyboard, the payment method comprising:

a first step of detecting an insertion and extraction state of a credit card;

a second step of calculating, in order to detect alteration of the payment program, a first program hash value provided by the payment program and the second program hash value to be used at a time of execution of a program;

a third step of encrypting, by using a first key the first program hash value and the second program hash value calculated in the second step;

a fourth step of decrypting, by using the second key, the first program hash value encrypted in the third step;

a fifth step of comparing the first program hash value decrypted by the fourth step with the second program hash value to judge whether the payment program is legitimately released; and

a sixth step of controlling the notification of a keyboard based on an insertion and extraction of the credit card detected in the first step when the comparison results are aligned with each other in the fifth step;

10. The payment method according to claim 8, wherein, when the first program hash value judged to be aligned with the second program hash value in the fifth step and the execution of the PIN code of the credit card is enabled in the sixth step and the first program hash value is judged not to be aligned with the second program hash value, the notification of a key cord is denied in the sixth step and the execution of the inputting of a PIN code is disabled in the sixth step.

11. The payment method according to claim 8, wherein, when the first program hash value and the second program hash value are encrypted in the third step, the encrypted first program hash value and the payment program are installed, as a coupled module, in the main board memory.

12. The payment method according to claim 8, wherein the first key to be used in the third step is an encrypted key produced by using the secret key and a random number,

wherein the second key to be used in the fourth step is the encrypted key and public key,

wherein the first program hash value and second program hash value are encrypted by using at least one of the secret key and encrypted key, and

wherein the encrypted first program hash value and second program hash value are decrypted by using the public key or the encrypted key.