Method and secure device for performing a secure transaction with a terminal

Patent metadata

Field	Value
Publication number	US-9792606-B2
Application number	US-201213572459-A
Country	US
Kind code	B2
Filing date	Aug 10, 2012
Priority date	Aug 12, 2011
Publication date	Oct 17, 2017
Grant date	Oct 17, 2017

Abstract

A method for performing a secure transaction between a secure device ( 2 ) and a terminal ( 4 ), the method being carried out by the secure device ( 2 ) and comprising the steps of:
receiving transaction data from the terminal ( 4 ),

characterized in that it comprises, before the step of receiving transaction data from the terminal ( 4 ), the steps of
obtaining transaction data entered by a user of the secure device ( 2 ), and transmitting the transaction data to the terminal ( 4 ).

First claim

The invention claimed is:

1. A computer implemented method of performing a secure transaction between a user payment secure device and a delivery terminal, the method comprising:
receiving, via a processor of the user payment secure device, data related to the secure transaction conducted between the user payment secure device and the delivery terminal, the data comprising transaction requester identification information, the user payment secure device being inserted in a user communication device, and wherein receiving the data related to the secure transaction comprises obtaining data entered on an input interface of the user communication device:
establishing a link between the user payment secure device and the delivery terminal;
transmitting the data to the delivery terminal via the established link; and
receiving, by the user payment secure device, user identification data from the delivery terminal to compare with the transaction requester identification information received before the establishment of the link and the transmission of the data for validating the secure transaction so that the delivery terminal performs a delivery corresponding to the data related to the secure transaction without the user entering the data related to the secure transaction on the delivery terminal.

2. The method according to claim 1 , wherein the link comprises a wireless link.

3. The method according to claim 1 , wherein the step of transmitting the data to the delivery terminal is performed only if a predetermined condition is satisfied.

4. The method according to claim 3 , wherein the predetermined condition is satisfied if a predetermined time from the step of obtaining transaction data has not expired, and the predetermined condition is not satisfied if said predetermined time from the step of obtaining transaction data has expired.

5. The method according to claim 1 , encrypting the data related to the secure transaction, wherein transmitting the data to the delivery terminal comprises transmitting the encrypted data.

6. The method according to claim 1 , wherein transmitting the data to the delivery terminal is performed in response to a command received from the delivery terminal.

7. The method according to claim 1 , wherein receiving the user identification data from the delivery terminal comprises receiving a Verify EMV command from the delivery terminal.

8. The method according to claim 1 , wherein the data related to the secure transaction comprise an amount, the method further comprises sending the amount to the delivery terminal.

9. The method according to claim 1 , wherein the delivery terminal comprises a payment terminal, an ATM or a web server.

10. The method according to claim 1 , wherein the transaction requester identification information comprises at least one of a PIN code, a fingerprint and an iris image.

11. The method according to claim 1 , wherein transmitting the data to the delivery terminal comprises transmitting the data via short range telecommunications means.

12. The method according to claim 1 , wherein the secure transaction includes a delivery by the delivery terminal based on the data.

13. The method according to claim 1 , wherein receiving the user identification data from the delivery terminal comprises receiving transaction data and a transaction requester identification data verification command from the delivery terminal.

14. A non-transitory computer usable medium storing computer executable code for performing a secure transaction between a user payment secure device and a delivery terminal, the computer executable code causing at least one computer of the user payment secure device to:
receive data related to the secure transaction conducted between the user payment secure device and the delivery terminal, the data comprising transaction requester identification information, the user payment secure device being inserted in a user communication device, and wherein receiving the data related to the secure transaction comprises obtaining data entered on an input interface of the user communication device:
establish a link between the user payment secure device and the delivery terminal;
transmit the data to the delivery terminal via the established link; and
receive, by the user payment secure device, user identification data from the delivery terminal to compare with the transaction requester identification information received before the establishment of the link and the transmission of the data for validating the secure transaction so that the delivery terminal performs a delivery corresponding to the data related to the secure transaction without the user entering the data related to the secure transaction on the delivery terminal.

15. The computer usable medium according to claim 14 , further comprising code for:
executing in a secure domain of the user payment secure device including obtaining data entered by a user of the user payment secure device and transmitting the data related to the secure transaction to the delivery terminal; and
receiving the user identification data from the delivery terminal.

16. A user payment secure device for performing a secure transaction between the user payment secure device and a delivery terminal, comprising at least one processor configured for:
receiving data related to the secure transaction conducted between the user payment secure device and the delivery terminal, the data comprising transaction requester identification information, the user payment secure device being configured to be inserted in a user communication device, and wherein receiving the data related to the secure transaction comprises obtaining data entered on an input interface of the user communication device;
establishing a link between the user payment secure device and the delivery terminal;
transmitting the data to the delivery terminal via the established link if a predetermined time from the receiving of data has not expired;
receiving, by the user payment secure device, user identification data from the delivery terminal to compare with the transaction requester identification information received before the establishment of the link and the transmission for validating the secure transaction so that the delivery terminal performs a delivery corresponding to the data related to the secure transaction without the user entering the data related to the secure transaction on the delivery terminal.

17. The user payment secure device according to claim 13 , further comprising a secure element including the at least one processor.

18. The user payment secure device according to claim 17 , wherein the secure element comprises a smart card or a USB key.

19. The user payment secure device according to claim 16 , wherein receiving the user identification data from the delivery terminal comprises receiving transaction data and a transaction requester identification data verification command from the delivery terminal.

20. A system, comprising: a user communication device; a delivery terminal; and a secure device configured for:
receiving, via a processor of the secure device, data related to the secure transaction conducted between the user payment secure device and the delivery terminal, the data comprising transaction requester identification information, the user payment secure device being configured to be inserted in a user communication device, and receiving the data related to the secure transaction comprises obtaining data entered on an input interface of the user co

Assignees

• Aubin Yann-Loic
• Guerin Vincent
• Boisde Matthieu
• Oberthur Technologies

Inventors

• Aubin Yann-Loic
• Guerin Vincent
• Boisde Matthieu

Classifications

• G07F7/1008

  Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system · CPC title

• H04L9/3271

  using challenge-response · CPC title

• G07F7/1066

  PIN data being compared to data on card · CPC title

• G06Q20/3278

  RFID or NFC payments by means of M-devices · CPC title

• G06Q20/4014

  Identity check for transactions · CPC title