Method for processing transaction data, device and corresponding program

Patent metadata

Field	Value
Publication number	US-10915893-B2
Application number	US-201515304331-A
Country	US
Kind code	B2
Filing date	Apr 10, 2015
Priority date	Apr 18, 2014
Publication date	Feb 9, 2021
Grant date	Feb 9, 2021

Abstract

The invention relates to a method for processing transaction data representing a payment made by a user through a communications terminal (TC). According to the invention, such a method comprises
loading a virtual payment terminal (vPos) within a first secured memory space (SecSpace1) of the communications terminal (TC), said virtual terminal (vPos) taking the form of a software module recorded within a secured storage space of the communications terminal (TC); loading at least one virtual payment card (vCB) within a second secured space (SecSpace2); and
processing, by the virtual payment terminal (vPos), of a payment transaction using said at least one virtual payment card (vCB).

First claim

The invention claimed is:

1. A method for processing transaction data representing a payment made by a user through a communications terminal connected to a server through a communication network, the method comprising:
loading, by the communications terminal, a virtual payment terminal within a first secured memory space of the communications terminal, said virtual terminal taking the form of a software module recorded within a secured storage space of the communications terminal, which is accessible only by a secured portion of an operating system of the communications terminal, said virtual payment terminal comprising a module for transmitting and receiving APDU commands and an encapsulation module in charge of the encapsulation and de-encapsulation of APDU commands in IP frames;
loading, by the server, of at least one virtual payment card within a second secured space situated on the server, said at least one virtual payment card being instantiated by a software emulation module implemented by executing a virtual machine on the server; and
processing, by the virtual payment terminal of the communications terminal, a payment transaction using said at least one virtual payment card instantiated in the server, said processing comprising:
transmitting, by the virtual payment terminal, through the communications network, an APDU command to said at least one virtual payment card, said transmitting comprising:
encapsulating the APDU command in an IP frame comprising:
a frame header comprising an identifier of the virtual payment terminal and an identifier of the virtual payment card;
an ISO7816 frame comprising said APDU command;
a specific end-of-frame character; and

transmitting the IP frame to said server; and

receiving, at the virtual payment terminal, through the communications network, a response to said APDU command present in the ISO7816 frame from the at least one virtual payment card identified in the frame header of the IP frame.

2. The method for processing transaction data according to claim 1 , wherein loading a virtual payment card comprises:
loading said virtual payment card software emulation module;
obtaining a payment card data structure; and
instantiation, within the second secured space, of the virtual payment card by using the software emulation module and the payment card data structure.

3. The method for processing transaction data according to claim 1 , wherein loading a virtual payment card comprises:
displaying a set of virtual payment cards associated with the user on a communications terminal screen; and
selecting a virtual payment card from among the set of payment cards displayed.

4. The method according to claim 1 , further comprising, subsequently to loading said virtual payment terminal, displaying a piece of data, representing a passage into secured mode, on a communications terminal screen.

5. A communications terminal for processing transaction data representing a payment made by a user through the communications terminal connected to a server through a communication network, the communications terminal comprising:
a processor; and
a non-transitory computer-readable medium comprising instructions stored thereon, which when executed by the processor configure the communications terminal to performs acts comprising:
loading a virtual payment terminal, within a first secured memory space of the communications terminal, said virtual terminal taking the form of a software module recorded within a secured storage space of the communications terminal, which is accessible only by a secured portion of an operating system of the communications terminal, said virtual payment terminal comprising a module for transmitting and receiving APDU commands and an encapsulation module in charge of the encapsulation and de-encapsulation of APDU commands in IP frames; and
processing, by the virtual payment terminal, a payment transaction using at least one virtual payment card loaded within a second secured space situated on the server, said at least one virtual payment card being instantiated by a software emulation module implemented by executing a virtual machine on the server, said processing comprising:
transmitting, by the virtual payment terminal, through the communications network, an APDU command to said at least one virtual payment card, said transmitting comprising:
encapsulating the APDU command in an IP frame comprising:
a frame header comprising an identifier of the virtual payment terminal and an identifier of the virtual payment card;
an ISO7816 frame comprising said APDU command;
a specific end-of-frame character; and

transmitting the IP frame to said server; and

receiving, at the virtual payment terminal, through the communications network, response to said APDU command present in the ISO7816 frame from the at least one virtual payment card identified in the frame header of the IP frame.

6. At least one non-transitory computer-readable medium comprising program code instructions stored thereon, which when executed by at least one processor of a device implemented within a communications device connected to a server through a communication network, configure the at least one processor to execute a method for processing transaction data representing a payment made by a user through the communications terminal, the method comprising:
loading a virtual payment terminal within a first secured memory space of the communications terminal, said virtual terminal taking the form of a software module recorded within a secured storage space of the communications terminal, which is accessible only by a secured portion of an operating system of the communications terminal, said virtual payment terminal comprising a module for transmitting and receiving APDU commands and an encapsulation module in charge of the encapsulation and de-encapsulation of APDU commands in IP frames; and
processing, by the virtual payment terminal, a payment transaction using at least one virtual payment card loaded within a second secured space situated on the server, said at least one virtual payment card being instantiated by a software emulation module implemented by executing a virtual machine on the server, said processing comprising:
transmitting, by the virtual payment terminal, through the communications network, an APDU command to said at least one virtual payment card, said transmitting comprising:
encapsulating the APDU command in an IP frame comprising:
a frame header comprising an identifier of the virtual payment terminal and an identifier of the virtual payment card;
an ISO7816 frame comprising said APDU command;
a specific end-of-frame character; and

transmitting the IP frame to said server; and

receiving, at the virtual payment terminal, through the communications network, response to said APDU command present in the ISO7816 frame from the at least one virtual payment card identified in the frame header of the IP frame.

Assignees

• Ingenico Group

Inventors

• Quentin Pierre

Classifications

• G06Q20/20 Primary

  Point-of-sale [POS] network systems · CPC title

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• G06Q20/027

  involving a payment switch or gateway · CPC title

• G06Q20/3229

  Use of the SIM of a M-device as secure element · CPC title

• G06Q20/10

  specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems · CPC title