Method for deactivating a payment module, corresponding computer program product, storage medium and payment module

Patent metadata

Field	Value
Publication number	US-9785939-B2
Application number	US-201514689817-A
Country	US
Kind code	B2
Filing date	Apr 17, 2015
Priority date	Apr 18, 2014
Publication date	Oct 10, 2017
Grant date	Oct 10, 2017

Abstract

The invention concerns a method for deactivating a payment module attachable to a communications terminal, comprising:
a phase for deactivating comprising at least one step for erasing the main memory of said payment module with the exception of a non-volatile memory zone in which an encryption key k is stored, said encryption key k being available only when said main memory is empty; a phase for verifying comprising:
a step for verifying that said main memory is empty, delivering a positive or negative result of verification; if said result of verification is positive:
a step for computing a response to a challenge preliminarily received by said payment module from an entity distinct from said payment module, said computation being implemented by means of said encryption key k; a step for transmitting said response to said entity.

First claim

The invention claimed is:

1. A method for deactivating a payment module attachable to a communications terminal, the method comprising the following phases:
a phase of deactivating comprising at least one act of erasing an entire memory of the payment module, called a main memory, with the exception of a non-volatile memory zone in which an encryption key is stored, said encryption key being available only when the main memory of the payment module is empty; and
at least one phase of verifying said deactivation comprising the following acts:
verifying that said main memory is empty, delivering a positive or negative result of verification;

if said result of verification is positive:
computing a response to a challenge preliminarily received by said payment module from an entity distinct from said payment module, said computation being implemented by using said encryption key; and
for transmitting said response to said entity.

2. The method for deactivating a payment module according to claim 1 , wherein said phase of deactivating is triggered by reception, by said payment module, of at least one request for deactivation coming from said entity.

3. The method for deactivating a payment module according to claim 1 , wherein said encryption key stored in said non-volatile memory of said payment module is never accessible in read mode.

4. The method for deactivating a payment module according to claim 2 , wherein said computing a response to a challenge also uses at least one piece of data representing said request for deactivation, piece of data belonging to the group consisting of:
an identifier of said entity;
a timestamp of said request for deactivation.

5. A method for deactivating a payment module according to claim 1 , wherein said phase of deactivating is triggered after an act of validating an authorization of said entity to deactivate said payment module.

6. A payment module attachable to a communications terminal and comprising means of deactivation comprising:
a main memory comprising a non-volatile memory zone in which there is stored an encryption key;
means for erasing the entire main memory of said payment module, except for the non-volatile memory zone, said encryption key being available only when said main memory of said payment module is empty;
means for verifying that said main memory is empty, delivering a positive or negative result of verification;
means for computing a response to a challenge preliminarily received by said payment module, coming from an entity distinct from said payment module, said computation being implemented by using said encryption key, said computation means being activated by a positive result of verification;
means for transmitting said response to said entity.

7. A computer readable and non-transient storage medium storing a computer program comprising a set of instructions executable by a computer or a processor to implement a method for deactivating a payment module attachable to a communications terminal, the method comprising the following phases:
a phase of deactivating comprising at least one act of erasing an entire memory of the payment module, called a main memory, with the exception of a non-volatile memory zone in which an encryption key is stored, said encryption key being available only when the main memory of the payment module is empty; and
at least one phase of verifying said deactivation comprising the following acts:
verifying that said main memory is empty, delivering a positive or negative result of verification;
if said result of verification is positive:
computing a response to a challenge preliminarily received by said payment module from an entity distinct from said payment module, said computation being implemented by using said encryption key; and
transmitting said response to said entity.

Assignees

• Cie Ind Et Financiere D'Ingenierie “Ingenico”
• Ingenico Group

Inventors

• Naccache David
• Quentin Pierre
• Brier Eric
• Ghiliotto-Young Dorina

Classifications

• G06Q20/3829 Primary

  involving key management · CPC title

• G06Q20/3226 Primary

  Use of secure elements separate from M-devices · CPC title

• G06Q2220/00

  Business processing using cryptography · CPC title

• G06Q20/206

  comprising security or operator identification provisions, e.g. password entry · CPC title

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title