Method for processing a transaction, corresponding device, system and program

Patent metadata

Field	Value
Publication number	US-12107975-B2
Application number	US-201917279287-A
Country	US
Kind code	B2
Filing date	Sep 25, 2019
Priority date	Sep 25, 2018
Publication date	Oct 1, 2024
Grant date	Oct 1, 2024

Abstract

A method for processing a transaction, wherein the method is implemented by an electronic device for processing transactions, accessible via a communication network. The includes a transaction processing phase. The transaction processing phase: obtaining a contextual cryptographic fingerprint, previously generated during an authentication of a user on a communication terminal; verifying validity of the contextual cryptographic fingerprint in a blockchain including a set of cryptographic fingerprints; and validating a transaction when the verifying the validity of the contextual cryptographic fingerprint in a blockchain is positive.

First claim

The invention claimed is:

1. A method for processing a payment transaction, the method being implemented by an electronic device for processing payment transactions, accessible via a communication network, said method comprising a payment transaction processing phase which comprises:
obtaining a contextual cryptographic fingerprint, previously generated during an authentication of a user on a communication terminal;
verifying validity of the contextual cryptographic fingerprint in a blockchain comprising a set of cryptographic fingerprints,
verifying that the contextual cryptographic fingerprint is the latest contextual cryptographic fingerprint for said user and/or said communication terminal, in the blockchain; and
validating a payment transaction in response to the verifying the validity of the contextual cryptographic fingerprint in the blockchain and the verifying that the contextual cryptographic fingerprint is the latest contextual cryptographic fingerprint for said user and/or said communication terminal, in the blockchain, being both positive.

2. The method for processing a payment transaction according to claim 1 , wherein the contextual cryptographic fingerprint (EC), of the set of cryptographic fingerprints, is embodied by an identification string ChIEC for identification of the cryptographic fingerprint EC which is obtained on the basis of a set D of constituent data (d0, ... ,dn) in the following manner:
ChIEC= F ( G ( d 0 , . . . ,dn ))
wherein:
G is a data-mixing function;
F is a cryptographic function for calculating the identification string.

3. The method for processing a payment transaction according to claim 1 , wherein the obtaining the contextual cryptographic fingerprint comprises:
receiving an address of location of the contextual cryptographic fingerprint in the blockchain;
obtaining the contextual cryptographic fingerprint at the address previously received.

4. The method for processing a payment transaction according to claim 1 , wherein the verifying the validity of the contextual cryptographic fingerprint comprises verifying the validity of a block of the blockchain into which the contextual cryptographic fingerprint is inserted.

5. The method for processing a payment transaction according to claim 1 , wherein the verifying the validity of the contextual cryptographic fingerprint comprises:
obtaining payment transaction data, coming from the communication terminal;
calculating, on the basis of this payment transaction data, a verification cryptographic fingerprint;
comparing the verification cryptographic fingerprint to the contextual cryptographic fingerprint; and
validating the contextual cryptographic fingerprint in response to the comparison being positive.

6. The method for processing a payment transaction according to claim 1 , wherein the verifying the validity of the contextual cryptographic fingerprint comprises a step of comparing at least one piece of data for constituting the contextual cryptographic fingerprint to at least one corresponding piece of data provided by the communication terminal.

7. The method for processing a payment transaction according to claim 1 , wherein the method further comprises a preliminary authentication phase, during which the contextual cryptographic fingerprint is created, said preliminary authentication phase comprising:
authenticating the user;
obtaining an authentication message, comprising confirmation of the authentication of the user and a set D of constituent data (d0, ... ,dn);
calculating the contextual cryptographic fingerprint using the data received.

8. The method for processing a payment transaction according to claim 7 , wherein the preliminary authentication phase further comprises:
inserting the contextual cryptographic fingerprint into the blockchain; and
in response to the block of the blockchain into which the contextual cryptographic fingerprint has been inserted being validated, transmitting the contextual cryptographic fingerprint to the communication terminal.

9. An electronic device for processing payment transactions, accessible via a communication network, said device comprising:
at least one processor; and
at least one non-transitory computer-readable medium comprising instructions stored thereon which when executed by the at least one processor configure the electronic device to process a payment transaction and:
obtain a contextual cryptographic fingerprint, previously generated during an authentication of a user on a communication terminal;
verify validity of the contextual cryptographic fingerprint in a blockchain comprising a set of cryptographic fingerprints,
verify that the contextual cryptographic fingerprint is the latest contextual cryptographic fingerprint for said user and/or said communication terminal, in the blockchain; and
validate a payment transaction implemented in response to the verifying the validity of the contextual cryptographic fingerprint in the blockchain and the verifying that the contextual cryptographic fingerprint is the latest contextual cryptographic fingerprint for said user and/or said communication terminal, in the blockchain, being both positive.

10. A non-transitory computer-readable medium comprising a computer program product thereon, which comprises program code instructions for executing a method, when the instructions are executed by a processor of an electronic device, wherein the instructions configure the electronic device to process a payment transaction and:
obtain a contextual cryptographic fingerprint, previously generated during an authentication of a user on a communication terminal;
verify validity of the contextual cryptographic fingerprint in a blockchain comprising a set of cryptographic fingerprints,
verify that the contextual cryptographic fingerprint is the latest contextual cryptographic fingerprint for said user and/or said communication terminal, in the blockchain; and
validate a payment transaction implemented in response to the verifying the validity of the contextual cryptographic fingerprint in the blockchain and the verifying that the contextual cryptographic fingerprint is the latest contextual cryptographic fingerprint for said user and/or said communication terminal, in the blockchain. being both positive.

Assignees

• Banks And Acquirers Int Holding

Inventors

• Quentin Pierre

Classifications

• G06Q20/3827

  Use of message hashing · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L9/3239

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title

• H04L9/50 Primary

  using hash chains, e.g. blockchains or hash trees · CPC title

• G06F2221/2101

  Auditing as a secondary aspect · CPC title