SYSTEMS AND METHODS FOR CONTACTLESS PAYMENT AUTHORIZATION

• US 20100203870A1
• Filed: 12/30/2008
• Published: 08/12/2010
• Est. Priority Date: 01/04/2008
• Status: Active Grant

• Current Assignee: SMK Corporation
• Original Assignee: Logomotion, S.R.O.
• Inventors: Hubinak, Emil, Florek, Miroslav, Masaryk, Michal
• Granted Patent: US 8,275,364 B2
• Time in Patent Office: Days
• US Class Current: 455/414.100
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists

Abstract

The method and system of authentication of authorized person and transaction approval principally at the direct debits by means of a mobile communication device (2) is based on the fact that an alphanumerical chain is sent from the mobile communication device (2) into energy passive identifier (3) approached to the mobile communication device (2), the identifier (3) is supplied contact free by electromagnetic field of the mobile communication device (2) while in the identifier the received alphanumerical chain is signed electronically and in such signed alphanumerical chain is sent back into the mobile communication device (2). Payment approval is realized by the correctness approval of the electronically signed alphanumerical chain and by approaching the mobile communication device (2) to the payment terminal (1). The invention enables to use a high level of cryptography security by using a passive identifier (3) which does not demand own energy source.

Claims

1-8. -8. (canceled)

9. A method for contactless payment authorization, the method comprising:

initiating a payment process in a mobile communication device;

communicating an alphanumeric string from the mobile communication device into an identifier located sufficiently near to the mobile communication device such that the identifier is supplied with energy from an electromagnetic field of the mobile communication device;

electronically signing the received alphanumeric string in the identifier;

sending the electronically signed alphanumeric string to the mobile communication device;

verifying the electronically signed alphanumeric string in the mobile communication device; and

placing the mobile communication device sufficiently near to the payment terminal to realize a payment.

10. The method of claim 9, further comprising locating the identifier within ten centimeters of the mobile communication device.

11. The method of claim 9, further comprising placing the mobile communication device within ten centimeters of the payment terminal to realize the payment.

12. The method of claim 9, wherein the mobile communication device is a mobile telephone.

13. The method of claim 9, wherein the mobile communication device is connected to a remote processing server through a public mobile network, and the mobile communication device uses the remote processing server for payment processing and/or authentication.

14. The method of claim 9, wherein the mobile communication device includes a near-field communication element that generates the electromagnetic field.

15. The method of claim 9, wherein the identifier comprises a memory that contains a key for use in electronically signing the received alphanumeric string, and wherein the received alphanumeric string is electronically signed in the processor using the key.

16. The method of claim 9, wherein mobile communication device comprises a receiving element for communication with the identifier, and wherein the electromagnetic field is generated by the receiving element.

17. A system for contactless payment authorization, the system comprising:

an identifier; and

a mobile communication device that communicates with a payment terminal over a near-field communication channel,

wherein the mobile communication device is equipped with a transmitting and receiving element for contactless communication with the identifier, and

wherein the identifier is supplied with electrical energy from an electromagnetic field of the mobile communication device and comprises a processor for electronically signing a received alphanumeric string, a transmitting and receiving element for communication with the mobile communication device, a block for transforming the electromagnetic field into the electrical energy, and a memory.

18. The system of claim 17, wherein the memory contains a stored identification number and a key for use in electronically signing the received alphanumeric string.

19. The system of claim 17, wherein the transmitting and receiving element in the mobile communication device and the transmitting and receiving element in the identifier are near-field communication units.

20. The system of claim 17, wherein the mobile communication device is a mobile phone.

21. The system of claim 17, wherein the mobile communication device is connected to a remote processing server through a public mobile network, and the mobile communication device uses the remote processing server for payment processing and/or authentication.

22. The method of claim 21, wherein the remote processing server is a Global System for Mobile communications (GSM) or General Packet Radio Services (GPRS) server.

23. An identifier for use in a contactless payment authorization system, the identifier for use with a mobile communications device in contactless communication with a payment terminal, the identifier comprising:

a processor for electronically signing an identifying code received from the mobile communications device;

a transmitting and receiving unit for communicating with the mobile communication device, the transmitting and receiving unit for receiving the identifying code and transmitting the electronically signed identifying code;

a memory that contains a stored identification number and a key for use in electronically signing the received identifying code;

a block for transforming an electromagnetic field of the mobile communication device into electrical energy that is supplied to the processor, the transmitting and receiving unit, and to the memory.

24. The identifier of claim 23, wherein the memory contains a private key for use in electronically signing the identifying code.

25. The identifier of claim 23, further comprising a near-field communication unit.

26. The identifier of claim 23, wherein at least a portion of the memory is configured for separately storing personal data associated with a user.

27. The identifier of claim 26, wherein the portion of the memory that is configured for separately storing the personal data is externally accessible via the transmitting and receiving unit.

28. The identifier of claim 23, wherein the identifier is located in a pendant, a key ring, a label, or an applique.