PERSONAL POINT OF SALE (PPOS) DEVICE THAT PROVIDES FOR CARD PRESENT E-COMMERCE TRANSACTION

• US 20180130040A1
• Filed: 11/04/2016
• Published: 05/10/2018
• Est. Priority Date: 11/04/2016
• Status: Active Grant

• Current Assignee: NXP B.V. (NXP Semiconductors NV)
• Original Assignee: NXP B.V. (NXP Semiconductors NV)
• Inventors: Nuzum, Todd Raymond, Hunter, Melissa A., Snell, Derek Alan, Palliparambil, Suresh, Comiskey, Patrick Ryan, Dow, Michael
• Granted Patent: US 10,679,201 B2
• Time in Patent Office: Days
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction

Abstract

Within the EMV payment specification, the use of an unattended terminal to accept a payment is allowed. Creating a device that has both the EMV level 1 (L1) and level 2 (L2) payment components combined with a virtual merchant creates a “card present” transaction for an on-line or e-commerce merchant. This device can be called a personal Point of Sale (pPOS). This specification discloses personal Point of Sale (pPOS) devices and methods that can provide for card present e-commerce transactions. In some embodiments, a pPOS device can include only a secure microcontroller function (MCF), a payment kernel, a secure element, and an interface to an external system with an EMV level 3 (L3) payment application. In some embodiments, a pPOS device can further include a reader. In some embodiments, a pPOS device can still further include a sensor switch and/or a user interface function.

Claims

1. A device for providing a personal point of sale (pPOS) for card present e-commerce transactions, the device comprising:

a secure microcontroller function (MCF);

a reader, the reader configured to read a payment and/or identity instrument;

a payment kernel, the payment kernel configured to process payment;

a secure element, the secure element configured to store and process payment and identification application;

a sensor switch, the sensor switch configured to initiate and/or terminate a transaction.

2. The device of claim 1, wherein the secure MCF is configured to provide application and data level encryption and hardware/software tamper detection.

3. The device of claim 1, wherein the reader is a certified EMV level 1 contact and/or contact less reader, wherein EMV stands for Europay, MasterCard, and Visa.

4. The device of claim 3, wherein an antenna of the reader is enabled in a pPOS device enclosure, stand alone, or integrated into an external device, wherein the external device is one of the following:

wireless charging,

WiFi (wireless local area network) communication,

Bluetooth or Bluetooth low energy communication,

near field magnetic induction (NFMI) communication,

cellular communication.

5. The device of claim 1, wherein a user allows the payment kernel to be configured by a merchant and/or merchant acquirer for a merchant payment or a user authentication transaction.

6. The device of claim 5, wherein:

the payment kernel is EMV level 2 certified for contact and/or contact less transaction, wherein EMV stands for Europay, MasterCard, and Visa.

7. The device of claim 1, wherein the secure element is configured to execute:

a secure element application that is used for payment and/or authentication.

8. The device of claim 1, wherein the sensor switch is further configured to collect user authentication data and notify a user of a device status.

9. The device of claim 1 further comprising a user interface function, the user interface function providing a status of the device and a state of the transaction, wherein the user interface function uses one or more of the following interfaces:

a visual display,

a light,

a series of lights,

an audio interface,

a haptics interface.

10. The device of claim 1, wherein the secure MCF and/or a second MCF is configured to perform I/O (input/output) functions.

11. The device of claim 7, wherein the secure element application performs authentication using a multi-factor authentication method.

12. The device of claim 8,

wherein the sensor switch comprises a biometric sensor,

wherein the biometric sensor is used to collect user biometric data for enrollment and authentication of:

the user of the device, and/or

the transaction from the device to a merchant and/or a merchant acquirer.

13. The device of claim 12, wherein the biometric data is managed by the user of the device.

14. The device of claim 8,

wherein the sensor switch comprises a touch sensor,

wherein the touch sensor is used to collect user created data for enrollment and authentication of:

the user of the device, and/or

the transaction from the device to a merchant and/or a merchant acquirer.

15. The device of claim 14, wherein a touch pattern is managed by the user of the device.

16. The device of claim 7, wherein the secure element is further configured to execute:

a second secure element application that is used for customer biometric storage and validation.

17. The device of claim 10, wherein the secure MCF and/or the second MCF is configured to perform I/O (input/output) functions with a certified EMV level 3 (L3) payment application, wherein EMV stands for Europay, MasterCard, and Visa.

18. The device of claim 17, wherein the secure MCF and/or the second MCF is configured to perform I/O (input/output) functions with the certified EMV level 3 (L3) payment application using one or more of the following:

USB (Universal Serial Bus),

audio jack,

Bluetooth,

WiFi (wireless local area network),

NFC (near field communication),

near field magnetic induction (NFMI) communication,

a remote MCF,

any computer network.

19. The device of claim 1, wherein a customer initiates the transaction by presenting the payment and/or identity instrument to the device.

20. The device of claim 19, wherein the identity instrument enables authentication of a user and is comprised of one or more of the following:

a face of the user,

a finger of the user,

a fingerprint of the user,

an iris of the user,

a voice of the user,

a heart rhythm of the user,

a physical attribute of the user.

21. The device of claim 1, wherein a merchant initiates the transaction from an external system that requires a payment and/or authentication from a user.

22. A method for providing a personal point of sale (pPOS) for card present e-commerce transactions, the method comprising:

initiating, by a user and/or a merchant, a request for a payment transaction;

presenting, by the user, an instrument to a pPOS device, wherein no instrument data is entered into a website, a web page, or a mobile application;

authenticating and validating, by the pPOS device, the instrument for the merchant and/or an issuer of the instrument;

processing, by the pPOS device, the payment transaction.

23. The method of claim 22, wherein the instrument is:

a payment instrument, and/or

an identity instrument.

24. The method of claim 23, wherein the payment instrument is comprised of one or more of the following:

a card form factor,

a mobile phone,

a wearable.

25. The method of claim 23, wherein the identity instrument is comprised of one or more of the following:

a face of the user,

a finger of the user,

a fingerprint of the user,

an iris of the user,

a voice of the user,

a heart rhythm of the user,

a physical attribute of the user.

26. A device comprising:

a secure microcontroller function (MCF);

a payment kernel, the payment kernel configured to process payment;

a secure element, the secure element configured to store and process payment and identification application.

27. The device of claim 26, wherein the secure MCF and/or a second MCF is configured to perform I/O (input/output) functions.

28. The device of claim 27, wherein the secure MCF and/or the second MCF is configured to perform I/O (input/output) functions with one or more of the following:

a reader, the reader configured to read a payment and/or identity instrument,

a certified EMV level 3 (L3) payment application, wherein EMV stands for Europay, MasterCard, and Visa,

a sensor switch, the sensor switch configured to initiate and/or terminate a transaction,

a user interface function.