Personal point of sale (pPOS) device that provides for card present E-commerce transaction

• US 10,679,201 B2
• Filed: 11/04/2016
• Issued: 06/09/2020
• Est. Priority Date: 11/04/2016
• Status: Active Grant

• Current Assignee: NXP B.V. (NXP Semiconductors NV)
• Original Assignee: NXP B.V. (NXP Semiconductors NV)
• Inventors: Nuzum, Todd Raymond, Hunter, Melissa A., Snell, Derek Alan, Palliparambil, Suresh, Comiskey, Patrick Ryan, Dow, Michael
• Primary Examiner(s): Mitchell, Nathan A
• Application Number:
  US15/344,508
• Publication Number:
  US 20180130040A1
• Time in Patent Office: 1,313 Days
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction

Abstract

Within the EMV payment specification, the use of an unattended terminal to accept a payment is allowed. Creating a device that has both the EMV level 1 (L1) and level 2 (L2) payment components combined with a virtual merchant creates a “card present” transaction for an on-line or e-commerce merchant. This device can be called a personal Point of Sale (pPOS). This specification discloses personal Point of Sale (pPOS) devices and methods that can provide for card present e-commerce transactions. In some embodiments, a pPOS device can include only a secure microcontroller function (MCF), a payment kernel, a secure element, and an interface to an external system with an EMV level 3 (L3) payment application. In some embodiments, a pPOS device can further include a reader. In some embodiments, a pPOS device can still further include a sensor switch and/or a user interface function.

Claims

1. A device for providing a personal point of sale (pPOS) for card present e-commerce transactions, the device comprising:

a secure microcontroller function (MCF);

a reader, the reader configured to read a payment and/or identity instrument;

a payment kernel, the payment kernel configured to process payment, wherein the payment kernel is contained in the secure microcontroller function (MCF);

a secure element, the secure element configured to store and execute a payment application, an identification application, and customer validation methods (CVM) for a user of the device;

a first interface for directly connecting the reader to the secure element to allow processing of payment and authentication of a card by the secure element being read by the reader;

a sensor switch, the sensor switch configured to initiate and/or terminate a transaction; and

a second interface for directly connecting the secure element to the sensor switch to allow collection by the sensor switch of user biometric data.

2. The device of claim 1, wherein the secure MCF is configured to provide application and data level encryption and hardware/software tamper detection.

3. The device of claim 1, wherein the reader is a certified EMV level 1 contact and/or contact less reader, wherein EMV stands for Europay, MasterCard, and Visa.

4. The device of claim 3, wherein an antenna of the reader is enabled in a pPOS device enclosure, stand alone, or integrated into an external device, wherein the external device is one of the following:

a wireless charging device,

a WiFi (wireless local area network) communication device,

a Bluetooth or Bluetooth low energy communication device,

a near field magnetic induction (NFMI) communication device,

a cellular communication device.

5. The device of claim 1, wherein the user allows the payment kernel to be configured by a merchant and/or merchant acquirer for a merchant payment or a user authentication transaction.

6. The device of claim 5, wherein:

the payment kernel is EMV level 2 certified for contact and/or contact less transaction, wherein EMV stands for Europay, MasterCard, and Visa.

7. The device of claim 1, wherein the secure element is configured to execute:

a secure element application that is used for payment and/or authentication.

8. The device of claim 1, wherein the sensor switch is further configured to collect user authentication data and notify the user of a device status.

9. The device of claim 1 further comprising a user interface function, the user interface function providing a status of the device and a state of the transaction, wherein the user interface function uses one or more of the following interfaces:

a visual display,

a light,

a series of lights,

an audio interface,

a haptics interface.

10. The device of claim 1, wherein the secure MCF and/or a second MCF is configured to perform I/O (input/output) functions.

11. The device of claim 7, wherein the secure element application performs authentication using a multi-factor authentication method.

12. The device of claim 8,

wherein the sensor switch comprises a biometric sensor,

wherein the biometric sensor is used to collect the user biometric data for enrollment and authentication of:

the user of the device, and/or

the transaction from the device to a merchant and/or a merchant acquirer.

13. The device of claim 12, wherein the biometric data is managed by the user of the device.

14. The device of claim 8,

wherein the sensor switch comprises a touch sensor,

wherein the touch sensor is used to collect user created data for enrollment and authentication of:

the user of the device, and/or

the transaction from the device to a merchant and/or a merchant acquirer.

15. The device of claim 14, wherein a touch pattern is managed by the user of the device.

16. The device of claim 7, wherein the secure element is further configured to execute:

a second secure element application that is used for customer biometric storage and validation.

17. The device of claim 10, wherein the secure MCF and/or the second MCF is configured to perform I/O (input/output) functions with a certified EMV level 3 (L3) payment application, wherein EMV stands for Europay, MasterCard, and Visa.

18. The device of claim 17, wherein the secure MCF and/or the second MCF is configured to perform I/O (input/output) functions with the certified EMV level 3 (L3) payment application using one or more of the following:

USB (Universal Serial Bus),

audio jack,

Bluetooth,

WiFi (wireless local area network),

NFC (near field communication),

near field magnetic induction (NFMI) communication,

a remote MCF,

any computer network.

19. The device of claim 1, wherein a customer initiates the transaction by presenting the payment and/or identity instrument to the device.

20. The device of claim 19, wherein the identity instrument enables authentication of a user and is comprised of one or more of the following:

a face of the user,

a finger of the user,

a fingerprint of the user,

an iris of the user,

a voice of the user,

a heart rhythm of the user,

a physical attribute of the user.

21. The device of claim 1, wherein a merchant initiates the transaction from an external system that requires a payment and/or authentication from the user.

22. A method for providing a personal point of sale (pPOS) for card present e-commerce transactions, the method comprising:

initiating, by a user and/or a merchant, a request for a payment transaction;

presenting, by the user, an instrument to a pPOS device, wherein no instrument data is entered into a website, a web page, or a mobile application;

authenticating and validating, by the pPOS device, the instrument for the merchant and/or an issuer of the instrument;

storing, in a secure element, a payment application, an identification application, and customer validation methods (CVM) for the user of the device;

directly interfacing the secure element to a sensor switch to collect and store biometric data;

directly interfacing a reader to the secure element to allow processing of payment and authentication of a card being read of the reader;

processing, by the pPOS device, the payment transaction,

wherein the pPOS device comprises a secure microcontroller function (MCF) and a payment kernel,

wherein the payment kernel is configured to process payment, wherein the payment kernel is contained in the secure microcontroller function (MCF).

23. The method of claim 22, wherein the instrument is:

a payment instrument, and/or

an identity instrument.

24. The method of claim 23, wherein the payment instrument is comprised of one or more of the following:

a card form factor,

a mobile phone,

a wearable.

25. The method of claim 23, wherein the identity instrument is comprised of one or more of the following:

a face of the user,

a finger of the user,

a fingerprint of the user,

an iris of the user,

a voice of the user,

a heart rhythm of the user,

a physical attribute of the user.

26. A device comprising:

a secure microcontroller function (MCF);

a payment kernel, the payment kernel configured to process payment, wherein the payment kernel is contained in the secure microcontroller function (MCF);

a secure element, the secure element configured to store and execute a payment application and an identification application;

a first interface for directly connecting a card reader to the secure element to allow processing of payment and authentication by the secure element of a card being read by the card reader;

a sensor switch, the sensor switch configured to initiate and terminate a transaction; and

a second interface for directly connecting the secure element to the sensor switch to allow collection of user biometric data by the sensor switch.

27. The device of claim 26, wherein the secure MCF and/or a second MCF is configured to perform I/O (input/output) functions.

28. The device of claim 27, wherein the secure MCF and/or the second MCF is configured to perform I/O (input/output) functions with

a certified EMV level 3 (L3) payment application, wherein EMV stands for Europay, MasterCard, and Visa.