Method and device for payment using token

Patent metadata

Field	Value
Publication number	US-2016125402-A1
Application number	US-201514927603-A
Country	US
Kind code	A1
Filing date	Oct 30, 2015
Priority date	Oct 31, 2014
Publication date	May 5, 2016
Grant date	—

Abstract

Methods and devices for payment using token are provided, one of methods comprises, receiving a public key and a payment device token from a payment device, creating a digital signature through encryption of the payment device token and a stored user token using the public key, and payment request data including the digital signature, transmitting the payment request data to the payment device and updating the user token through performing of a token update operation.

First claim

What is claimed is:

1 . A method for payment comprising:
receiving, from a payment device, a public key and a payment device token; generating a digital signature by encrypting, using the public key, the received payment device token and a stored user token; generating payment request data comprising the generated digital signature; transmitting, to the payment device, the generated payment request data; and updating the stored user token.

2 . The method of claim 1 , wherein the updating the stored user token comprises:
performing a predetermined operation in which the payment device token and the user token are operands; and updating the user token using a hash value that is mapped on a resultant value of the performed predetermined operation.

3 . The method of claim 2 , wherein the predetermined operation further comprises, as another operand, a time stamp that indicates a payment request time, and
the digital signature further comprises the time stamp that is encrypted using the public key.

4 . The method of claim 1 , wherein the updating the stored user token comprises:
receiving a payment message indicating one of payment success and payment failure; and in response to the receiving the payment message, updating the stored user token.

5 . A method for payment comprising:
receiving, from a first mobile device, a first payment request; in response to the receiving the first payment request, transmitting, to the first mobile device, a public key and a first payment device token; receiving, from the first mobile device, payment request data; transmitting, to a payment server, the received payment request data; in response to the transmitting the payment request data, receiving, from the payment server, a second payment device token and replacing the first payment device token with the second payment device token; receiving, from one of the first mobile device and a second mobile device, a second payment request; and in response to the receiving the second payment request, transmitting, to said one of the first mobile device and the second mobile device from which the second payment request is received, the public key and the second payment device token.

6 . A method for payment comprising:
receiving, from a payment device, payment request data comprising a digital signature which is generated based on a first payment device token and a first user token; verifying the digital signature using a private key; determining whether the first payment device token and the first user token match with a second payment device token and a second user token, respectively; in response to the determining indicating that the first payment device token and the first user token match with the second payment device token and the second user token, respectively, executing payment; and updating the second payment device token and the second user token by performing a token update operation in response to the first payment device token and the first user token matching with the second payment device token and the second user token, respectively.

7 . The method of claim 6 , wherein the executing the payment further comprises in response to at least one of: the first payment device token not matching with the second payment device token and the first user token not matching with the second user token, rejecting the payment.

8 . The method of claim 7 , wherein the updating the second user token comprises updating the second user token after storing the second user token in an update list in which the second user token is accumulatively recorded.

9 . The method of claim 8 , wherein the rejecting the payment further comprises:
identifying a rejected mobile device for which the payment has been rejected using the update list; and transmitting a warning message to the identified mobile device.

10 . The method of claim 9 , wherein the identifying the mobile device comprises:
searching for the first user token in the update list; and identifying the rejected mobile device as a mobile device that last authenticated using the first user token according to the update list.

11 . The method of claim 6 , wherein the token update operation performs a predetermined operation in which the first payment device token and the first user token are operands, and updates the first user token using a hash value that is mapped on a resultant value of the predetermined operation.

12 . A method for payment comprising:
transmitting, from a payment device to a mobile device, a public key and a first payment device token; generating, by the mobile device, a digital signature by encrypting the first payment device token and a first user token using the public key; and generating, by the mobile device, a payment request data comprising the generated digital signature; transmitting, to a payment server, the generated payment request data; and verifying, at the payment server, the digital signature using a private key, and determining whether the first payment device token and the first user token match with a second payment device token and a second user token, respectively; executing, at the payment server, a payment in response to determining indicating that the first payment device token and the first user token match with the second payment device token and the second user token, respectively, and updating the second payment device token to a third payment device token and the second user token to a third user token through a token update operation; receiving, at the payment device, the third payment device token from the payment server, and replacing the first payment device token with the third payment device token; and updating, at the mobile device, the first user token through the token update operation.

13 . A system for payment comprising:
a mobile device configured to generate a digital signature by encrypting a first payment device token and a first user token using a received public key, generate payment request data comprising the generated digital signature, and update the first user token through a token update operation; a payment device configured to transmit, to the mobile device, the public key and the first payment device token, receive, from the mobile device, the payment request data, receive a third payment device token, and replace the first payment device token with the third payment device token; and a payment server configured to receive, from the payment device, the payment request data, verify the digital signature using a private key, determine whether the first payment device token and the first user token match with a second payment device token and a second user token, respectively, execute payment, in response to the determining indicating that the first payment device token and the first user token match with the second payment device token and the second user token, respectively, and update the second payment device token to the third payment device token and the second user token to a third user token through the token update operation.

14 . The system of claim 13 , further comprising a messaging server configured to transmit, to the mobile device, in response to a request received from the payment server, one of a payment message indicating one of payment success and payment failure and a warning message.

Assignees

• Samsung Sds Co Ltd

Inventors

• Lee Jin Seong
• Park Hee Jin
• Lee Seung Hyun
• Youn Weon Young
• Kim Tae Hun

Classifications

• G06Q20/38215

  Use of certificates or encrypted proofs of transaction rights · CPC title

• G06Q20/10

  specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems · CPC title

• G06Q20/3829

  involving key management · CPC title

• G06Q20/367

  involving electronic purses or money safes · CPC title

• G06Q20/3825 Primary

  Use of electronic signatures · CPC title