Electronic authentication systems

Patent metadata

Field	Value
Publication number	US-10504114-B2
Application number	US-201615265170-A
Country	US
Kind code	B2
Filing date	Sep 14, 2016
Priority date	Jun 6, 2013
Publication date	Dec 10, 2019
Grant date	Dec 10, 2019

Abstract

Methods and devices are provided for use in carrying out a transaction between a transaction device and a point of interaction. In connection therewith, a device for interacting with a point of interaction to carry out a transaction by a consumer includes a processor comprising a payment application and a system environment module, where the system environment module is configured to determine whether the payment application is eligible for a transaction. The device also includes an input in communication with the processor and configured to receive transaction data from a point of interaction in connection with the transaction, and an output in communication with the processor and configured to transmit transaction data to the point of interaction in connection with the transaction when the system environment module determines that the payment application is eligible for the transaction.

First claim

What is claimed is:

1. A transaction device for interacting with a point of interaction to carry out a transaction by a consumer, the transaction device comprising:
an input configured to receive transaction data and functionality data from a point of interaction in connection with a transaction, the functionality data indicative of one or more terminal capabilities of the point of interaction;
a secure element comprising multiple payment applications, each of the multiple payment applications associated with one or more requirements, preferences, and/or services linked to the payment application;
a processor in communication with the input and the secure element, the processor comprising a system environment module separate from the secure element, and wherein the secure element is separate from the processor;
wherein the processor is configured to call the system environment module when the input receives the transaction data and the functionality data from the point of interaction before the transaction takes place;
wherein the system environment module, when called by the processor, is configured to:
interface with the multiple payment applications included in the secure element and gather the requirements, preference, and/or services from the multiple payment applications;
for each of the multiple payment applications, compare the transaction data received from the point of interaction for the transaction and the functionality data received from the point of interaction against the one or more requirements, preferences, and/or services gathered from the payment application;
based on the comparisons, determine whether each of the multiple payment applications is eligible to be used for the transaction; and

an output in communication with the processor and configured to transmit transaction data, from one of the multiple payment applications of the secure element, to the point of interaction in connection with the transaction, when the system environment module determines that the one of the multiple payment applications is eligible for the transaction, thereby configuring the transaction device in accordance with the one or more terminal capabilities of the point of interaction.

2. The transaction device of claim 1 , wherein the one or more requirements, preferences, and/or services associated with the one of the multiple payment applications relates to one or more of consumer verification, transaction authorization, and/or at least one consumer service linked to the payment application.

3. The transaction device of claim 1 , wherein the system environment module is further configured to generate a disposition for the transaction, in association with at least one other application and/or module at the transaction device, prior to the processor transmitting transaction data to the point of interaction.

4. The transaction device of claim 3 , wherein the disposition includes an identification of one or more consumer services available to the consumer through the one of the multiple payment applications for the transaction, requirements for consumer verification through the one of the multiple payment applications, and/or requirements for transaction authorization through the one of the multiple payment applications.

5. The transaction device of claim 1 , wherein the system environment module is further configured to display the eligible ones of the multiple payment applications for the transaction to a consumer, thereby permitting the consumer to select said one of the multiple payment applications.

6. The transaction device of claim 1 , wherein the system environment module is further configured to determine, for each of the eligible ones of the multiple payment applications, one or more of consumer services available to the consumer through the payment application for the transaction, requirements for consumer verification through the payment application, and/or requirements for transaction authorization through the payment application.

7. The transaction device of claim 6 , wherein the processor is further configured, for each of the multiple payment applications, to update one or more of the consumer services available to the consumer through the payment application, the requirements for consumer verification through the payment application, and/or the requirements for transaction authorization through the payment application.

8. The transaction device of claim 1 , wherein the processor further comprises a communication module functionally disposed between (a) the input and output and (b) the one of the multiple payment applications; and
wherein the communication module is arranged to map transaction data received via the input to a data format of the one of the multiple payment applications, and to reformat transaction data output from the one of the multiple payment applications to a data format suitable for the point of interaction, the reformatted data output from the one of the multiple payment applications being sent to the point of interaction via the output.

9. The transaction device of claim 8 , wherein the processor further comprises an authentication module arranged to establish a secure communication channel between the one of the multiple payment applications and the point of interaction.

10. A computer-implemented method for carrying out a transaction by a consumer, between a transaction device associated with the consumer and a point of interaction, the method comprising:
receiving, by an input of a transaction device, transaction data and functionality data from a point of interaction in connection with a transaction by a consumer using the transaction device, the functionality data relating to terminal capabilities of the point of interaction, the transaction device including a processor and a secure element comprising multiple payment applications, each of the multiple payment applications associated with one or more requirements, preferences, and/or services linked to the payment application;
calling, by the processor of the transaction device, a system environment module of the transaction device when the input receives the transaction data and the functionality data from the point of interaction before the transaction takes place;
when the system environment module is called by the processor, interfacing, by the system environment module of the transaction device, with the multiple payment applications included in the secure element and gathering the requirements, preferences, and/or services from the multiple payment applications;
for each of the multiple applications, comparing, by the system environment module of the transaction device, the functionality data received from the point of interaction against the one or more requirements, preferences, and/or services gathered from the payment application;
based on the comparison, determining, by the system environment module of the transaction device, whether each of the multiple payment applications included in the secure element at the transaction device is eligible for the transaction; and
when one or more of the multiple payment applications is eligible for the transaction, transmitting, by the secure element of the transaction device, via at least one of said one or more eligible payment applications, transaction data to the point of interaction in connection with the transaction.

11. The method of claim 10 , wherein determining whether each of the multiple payment applications is eligible for the transaction includes comparing the transaction data received from the point of interaction for the transaction and the functionality data received from the point of interaction against the one or more requirements, prefer

Assignees

• Mastercard International Inc

Inventors

• Mestré Patrick
• Smets Patrik

Classifications

• H04L2209/08

  Randomization, e.g. dummy operations or using noise · CPC title

• H04L9/0841

  involving Diffie-Hellman or related key agreement protocols · CPC title

• G06Q20/341

  Active cards, i.e. cards including their own processing means, e.g. including an IC or chip · CPC title

• H04L9/3066

  involving algebraic varieties, e.g. elliptic or hyper-elliptic curves · CPC title

• G06Q20/102

  Bill distribution or payments · CPC title