EP2715684A1

EP2715684A1 - Electronic system for quickly and securely processing transactions using mobile devices

Info

Publication number: EP2715684A1
Application number: EP12725384.7A
Authority: EP
Inventors: Heinz Bircher-Nagy; Peter Danz; Peter Kronegger
Original assignee: Avance Pay AG
Current assignee: Avance Pay AG
Priority date: 2011-05-31
Filing date: 2012-05-31
Publication date: 2014-04-09
Also published as: CN103562973A; US20140108256A1; BR112013029906A2; EP2530661A1; WO2012164036A1; CN103562973B

Abstract

The invention relates to a secured element (3) for securely and quickly processing transactions, said element being able to communicate with an external mobile device (1) and with an external billing center (6) such that transaction data (15) that is transmitted by the mobile device in order to authorize the transaction can be checked using authorization rules and parameters (8) of the billing center (6). According to the invention, the secured element (3) has a local proxy module (7) that acts on behalf of the billing center (6), wherein the current authorization rules and parameters (8) of the billing center (6) can be stored in said proxy module when communicating with the billing center (6) so that the proxy module (7) can authorize the transaction using the mobile device (1) in an autonomous manner, without a data connection to the billing center (6), and in a secured environment. The invention further relates to a method for securely and quickly processing a transaction between such a secured element, a mobile device (1), and a billing center (6).

Description

Electronic system for the fast and secure handling of transactions with mobile devices

The invention relates to a secure element for secure and rapid transaction processing, which is able to communicate with an external mobile device and with an external clearing center in such a way that transaction data transmitted by the mobile device for authorization of the transaction can be checked on the basis of authorization rules and parameters of the clearing center. Furthermore, the invention relates to a method for secure and rapid transaction processing, in particular a payment and / or authorization process, between a secure element and an external mobile device, in which for the authorization of the transaction transaction data of the mobile device, based on authorization rules and parameters of an external billing center be checked.

Payment systems are known, such as credit card terminals in supermarkets and gas stations, where the collection of transaction data is done in a special tamper-proof payment terminal and the authorization of the payment process is obtained online at the account-holding billing center. A disadvantage of these systems are long waiting times for the authorization, which arise through the connection to the central office. These systems are too slow for fast payment. Another disadvantage is the relatively high cost of the payment terminals. These usually have readers, PIN entry keys, keystores and a processing unit and must be designed to be tamper-proof as a whole device. The payment terminals are correspondingly expensive in terms of development, certification and production. Changes to the certified payment terminals or use for other applications are not permitted and would hardly be possible due to the security of intervention. Systems are also known, such as ticket systems for public transport in major cities, such as Paris, London or Tokyo, where no data connection to the billing center is required for a booking process. This principle is used for fast transactions when checking the driving permissions. The logic for the posting process runs in the processing unit of the terminal. For reasons of cost, these terminals are hardly protected against interventions. Another disadvantage of these systems is that in principle expensive cashpoints or ticket machines are needed to convert the fare into electronic driving rights. On the one hand, the high price of terminals and pay machines limits the proliferation of these systems and, on the other hand, a changeover of existing infrastructures, as would be necessary for the introduction of new payment schemes, would require expensive changes or the replacement of hardware.

Also known are systems from WO 2010/002541 A1 and US 201 1/0022482 A1, in which an attempt is made to realize low-cost mobile payment systems by means of near field communication (NFC) mobile telephones. All known systems are either online and therefore slow or offline and insufficiently secured. These systems thus have many of the above-mentioned disadvantages. The speed, the manageability, the reduced security and the insufficient standardization prove particularly problematic.

Also known is the approach to incorporate security-related functions in integrated secure elements, such as in SIM cards. Integrated secured elements consist at least of a memory unit, a computing unit and a communication interface integrated on a single chip and possibly with cryptographic auxiliary computing unit or other subunits. Various security mechanisms protect the chip against interference. Due to the high level of security, integrated secured elements are mainly used for storage and use of keys and other sensitive data. Integrated secured elements are therefore used, in particular, as payment means, public-access driving license cards, SIM cards for mobile telephones and key memories, for example as a Secure Access Module (SAM). The disadvantage with these applications is that the counterpart to authorizing the integrated secure element is a central computer connected via online connections, which is not suitable for fast transaction processing. In the case of driving license cards for public transport, authorization of the driving authorization is usually carried out offline, but in the terminal's computing unit, which is barely secured against intervention.

From FR 2 921 786 A1 a system is known in which a secure element serves as a SAM for authentication of cards and a so-called security module is used for checking commands before the commands are sent to the card via NFC. In the first step, the card is authenticated by the SAM with pre-stored keys. This is followed by the actual transaction processing by an applet, which runs in the unsecured area of the device. The debit commands generated by this applet are then compared to commands from a reference list before being sent in the security module of the NFC part. If the command is not included in this reference list, the command is not sent and optionally a negative message is issued to the user. The optionally encrypted reference list according to the system description is typically stored in the NFC part at the time of manufacture.

This system comprises at least three system components, namely the secure element as SAM for authenticating the card, the applet for handling the transaction in the unsecured computer of the device and the NFC part with a security module for comparing the transmission commands with a reference list. This system structure slows down the processing speed considerably due to the hardware-dependent communication paths. borrowed. In addition, the security is not integrated part of the transaction processing, but only upstream, through the card authentication by the SAM, respectively downstream, by checking the send commands in the NFC part. The transaction handling applet runs in an unsecured environment and is therefore barely protected against intrusion.

A system is also known from WO 2008/028989 A1, in which a list in the secured element makes it possible for the device to have the corresponding counterpart in the unsecured part of the device available for each application registered in this list. The list in the backed up item is refreshed when you install and update an application in the backed up item. The device can use the information from this list to obtain the corresponding counterpart through various channels and media. The adjustment is, however, one-sided. Furthermore, this takes place in the device itself and outside the secured element and is therefore hardly protected against interference.

The proposed invention has the purpose to greatly reduce the time required for electronic transactions while ensuring a very high level of security.

The object is achieved by a secure element and a method for secure and rapid transaction processing with the features of the independent claims.

The secure element according to the invention for secure and rapid transaction processing is designed such that it is able to communicate with an external mobile device and with an external clearing center in such a way that transaction data transmitted by the mobile device for authorization of the transaction can be checked on the basis of authorization rules and parameters of the clearing center. The transmitted transaction data are preferably the value of the payment, details for temporal and / or spatial authorization, information on user identification, security features and / or account data. The secured element has a local proxy module on behalf of the clearing center. The proxy module is designed in such a way that the current authorization rules and parameters of the billing center can be stored in communication with the billing center, so that the proxy module is able to autonomously authorize the transaction with the mobile device without data connection to the billing center and in a secure environment. This ensures a very fast and secure transaction processing.

It is advantageous if the representative module is designed such that it can be connected at a time, in particular by means of a communication interface of the secured element or a dedicated electronic device or terminal, either to the external mobile device or to the external billing center. The representative module or the communication interface of the secure element or the electronic device or terminal provided for this purpose can not be connected to the mobile device and the billing center at the same time. The proxy module is therefore, in particular via the communication interface formed in this way, connectable only sequentially to the mobile device, namely in particular at a first point in time, and to the clearing center, namely in particular at a second point in time. It is thus possible no parallel or simultaneous connection of the Substitute module with the mobile device and the billing center. In this way, a high degree of security can be ensured, since the data comparison between transaction data and the authorization rules and / or parameters always takes place in a secure environment, namely in the secure element or the likewise securely configured substitute module of the secured element. An increased security can be ensured, the proxy module is designed such that it is the transaction data in particular information for temporal and / or spatial authorization, user identification information, security features and / or account data, encrypted by the external mobile device and / or signed to receive.

In order to be able to trace the transactions made at a later time, it is advantageous if the substitute module is designed such that it contains booking data for each transaction, in particular a transaction receipt, data for confirming the transaction, payment parameters, preferably the value of the payment, Security features and / or account data, to generate and store, in particular between store, is able.

It is advantageous if the representative module is designed such that it is able to transmit the booking data, in particular the transaction acknowledgment, to the mobile device, in particular encrypted and / or signed. This allows the buyer to understand whether the transaction has been successful and traced transaction attempts or transactions at a later date on his mobile device. By means of encrypted and / or signed transmission the security can be improved.

In order to avoid unauthorized access, it is furthermore advantageous if the authorization rules, parameters and / or booking data are encrypted and / or signed to the billing center and / or can be reconciled with the billing center.

Furthermore, it is advantageous if the proxy module is used for evaluating the transaction data, for authorizing the transaction, for generating the booking data and / or for controlling the, preferably temporal, data Transfers has a protected computing unit. This can ensure a high level of security.

In this regard, it is further advantageous if the proxy module has a protected memory for storing the authorization rules, parameters and / or the booking data.

It is advantageous if the secured element is designed as a SIM card and / or can be retrofitted into an electronic device, in particular a mobile telephone, a billing device and / or a terminal can be integrated. Thus, a fast, inexpensive and easy distribution through compatibility with standardized devices can be ensured.

In the method according to the invention for secure and rapid transaction processing, in particular a payment and / or authorization process, between a secure element and an external mobile device, transaction data of the mobile device are checked for authorization of the transaction using authorization rules and parameters of an external clearing center. The secured element is preferably formed according to the preceding description, wherein said features may be present individually or in any combination. Furthermore, the value of the payment, information on the temporal and / or spatial authorization, information on user identification, security features and / or account data are used as transaction data. The authorization of the transaction is carried out autonomously by a proxy module of the secure element, without data connection to the clearing center. This ensures a very fast and secure transaction processing.

Advantageously, the proxy module is connected at one time either to the external mobile device or to the external clearing center. The proxy module or the communication interface the secured element or the electronic device or terminal provided for this purpose can not be connected to the mobile device and the billing center at the same time. The proxy module is therefore, in particular via the communication interface formed in this way, connectable only sequentially to the mobile device, namely in particular at a first point in time, and to the clearing center, namely in particular at a second point in time. It is thus possible no parallel or simultaneous connection of the Substitute module with the mobile device and the billing center. In this way, a high degree of security can be ensured, since the data comparison between transaction data and the authorization rules and / or parameters always takes place in a secure environment, namely in the secure element or the likewise securely configured substitute module of the secured element.

It is also advantageous if first a data connection is set up between the proxy module and the billing center and the current authorization rules and parameters of the billing center are stored in the proxy module, in particular in a protected memory of the proxy module. Thus, the sensitive authorization rules and parameters are well protected against unauthorized access.

It is advantageous if, at a later time, in particular after the data connection between the secure element and the billing center is disconnected, a data connection is established between the proxy module and the mobile device and the proxy module prepares the transaction data of the mobile device, in particular payment parameters, preferably the value of the payment, information on temporal and / or spatial authorization, information on user identification, security features and / or account data, reads and / or writes. Thus, the transaction data can be checked in a secure environment, namely in a secure area of the secure element for authorization. It is also advantageous for data security reasons if the transaction data is encrypted and / or signed to the proxy module and the proxy module is able to decode it.

In order to avoid an unauthorized transaction, it is advantageous if the proxy module, in particular a protected arithmetic unit of the proxy module, then checks the transaction data based on the stored Autonsierungsregeln and parameters to authorize the transaction.

It is also advantageous if the proxy module generates booking data for each transaction, in particular a transaction acknowledgment, and stores these, in particular in the protected memory, and / or temporarily stores them. Thus, the transactions can also be traced at a later date.

It is advantageous if the proxy module transmits the booking data, in particular the transaction acknowledgment, to the mobile device, in particular encrypted and / or signed, so that the security of the system is improved.

In order to be able to verify the transactions made, it is advantageous if the representative module is connected to the clearing center and the autonegotiation rules, parameters and / or booking data are compared with the clearinghouse.

In order to avoid access by unauthorized persons, it is advantageous if the Autonsierungsregeln, parameters and / or booking data encrypted and / or signed transmitted to the billing center or provided for delivery. It is advantageous if, when matching, new authorization rules and parameters are stored in the proxy module. Thus, the security of the system can be sustained at a high level.

In an advantageous development of the invention, the local proxy module for the billing center is implemented in an integrated secure element. The delegate module can check and approve payments or authorizations without a data connection to the clearing house and deny or deny them. The integrated secured element is available in various embodiments and, if necessary, can be integrated into a mobile device, in particular a terminal and / or mobile device. The integrated secured element is, for example, an easily retrofittable part of a commercially available NFC mobile telephone, which is thereby formed into a secure payment terminal.

This is achieved by the proxy module having the rules for the authorization or the authorization rules and / or parameters of transactions, such as payment processes, locally available in the memory of the integrated secure element or the proxy module. The evaluation of the transaction data, in particular the value of the payment, information on temporal and / or spatial authorization, user identification information, security features and / or account data, and the authorization also run within the integrated secure element or proxy module in its protected computing unit, which Ensures safety of intervention to the highest degree.

Furthermore, the booking data, such as transaction receipts, stored in the memory of the integrated secure element or the proxy module. This allows a transaction to be processed quickly, securely and without data connection to the billing center. The booking data and authorization rules, preferably also parameters, are transferred at a different time in the case of an existing data connection with the invoice. the control center. This comparison takes place between the secured element, in particular the substitute module, and the clearing center, which also ensures the security of intervention during the adjustment to the highest degree. The application in the integrated secure element in the form of a chip card, SIM card, SAM card, SD card or secure element can be easily distributed by standardizing them on existing mobile devices or terminals, for example on NFC mobile phones.

Advantageously, the speed of the authorization can be increased by orders of magnitude by the local proxy module. The implementation of these functions in an integrated secure element ensures very high security of intervention, both in transaction processing and in the settlement with the clearinghouse. This enables end-to-end security from the mobile device via the proxy function or the proxy module in the secure element to the billing center. Security is ensured, in particular, by transaction handling and reconciliation taking place in two separate steps at two different times.

The standardized forms of integrated secured elements allow the infrastructure to be converted using existing NFC mobile phones or other terminals or mobile devices. The independence of the integrated secure element from the means of payment, respectively the authorization, guarantees its independent and secure verification by the substitution module. In summary, the system can therefore be realized very simply, quickly, inexpensively and safely.

Advantageously, in the electronic system for quickly and securely handling a transaction with a mobile device, the authorization of the transaction is realized in the integrated secure element, wherein the transaction is authorized by the proxy module without data connection to the clearinghouse at a first time and to a second time authorization rules and parameters and booking data, such as transaction receipts, are compared with the clearinghouse.

It is advantageous if the integrated secured element is integrated as hardware or as software or mixed in a chip card, in a chip with further functionality or in another form with contactless or contact-based or multiple executed communication interface, for example in a payment card, in a prepaid card, in an authorization card, in a SIM card, in a SAM, in a memory card, in an SD card, in a bracelet, in a wristwatch, in a key fob, in a dongle, in an NFC chip, as an applet in one secured computer and / or controller, as a secured applet in an unsecured computer or controller or in any other specific hardware.

It is also advantageous if the representative module is implemented as software or as hardware or in mixed form in the integrated secure element.

Likewise, it is advantageous if a smart card, a mobile phone or a mobile device of another form with contactless or contact-based or multiple-executed communication interface is used as a mobile device, for example in the form of a payment card, a prepaid card, an authorization card, a ticket, a SIM card , a memory card, an SD card, a wristband, a wristwatch, a key fob, a dongle, an electronic agenda, a cell phone and / or other mobile hardware.

Advantageously, it is a payment transaction, such as a loan, debit or debit, or an authorization transaction, such as an access control, entry control or driving authorization control, or a mixed transaction. Action, which includes both a payment transaction and an authorization transaction.

It is also advantageous if the integrated secured element is integrated, for example in the form of a secure element or a chip card, in a certified or uncertified terminal or mobile device, for example in a mobile telephone, in a tablet computer, in a chip card reader, in an RFID reader, a dongle, an electronic validator, a payment terminal, a vending machine and / or other specific terminal hardware.

Advantageously, the integrated secure element is transmitted by the mobile device, by a terminal, by a third device or by several of these devices when communicating with the mobile device or when preparing the transaction with the mobile device or during the post-processing or the transaction with the mobile device Device or when communicating with the billing center or when reconciling with the billing center supported.

In a further advantageous embodiment of the invention, a portion of the transaction data, such as the value of the payment, information on temporal or spatial authorization or user identification by entering the mobile device, the terminal, a third device and / or several of these devices is detected or otherwise made available, for example, via buttons, via a touch-sensitive screen or via a biometric input device.

It is advantageous if, during the processing of the transaction, a secure, for example encrypted or signed, transaction receipt is transmitted to the mobile device, to the terminal, to a third device or to several of these devices for manual or automatic checking or confirmation of the transaction. It is also advantageous for the result of the transaction to be communicated to the user via the mobile device, via the terminal, via a third device or via several of these devices, for example visually, haptically, acoustically or by releasing the passage in the case of an access lock.

Advantageously, the communication takes place wirelessly, wired or mixed, for example via ISO 14443, NFC, SWP, Bluetooth, USB or ISO 7816 between the mobile device and the secured element directly or indirectly via the mobile device, via the terminal, via a third device or over several of these devices, for example with the support of readers, controllers or computers.

It is also advantageous if the communication is wireless, wired or mixed, for example via ISO 14443, NFC, SWP, Bluetooth, USB, ISO 7816, WLAN, mobile or Ethernet between the secure element and the billing center directly or indirectly via the mobile device, via the terminal, via a third device or via several of these devices, for example with the support of readers, controllers or computers.

Further advantages of the invention are described in the following exemplary embodiments. Other embodiments are quite possible and partially mentioned at the end of the description. It shows:

Figure 1 is a schematic representation of a payment process with a secure element according to the invention and

Figure 2 is a flow chart of the invention integrated into the schematic

System overview of FIG. 1. The payment system shown in Figure 1 includes contactless payment cards as a mobile device 1, as used for example for electronic fare systems. On the contactless payment card or the mobile device 1 are transaction data 15, such as security features and details of the account of the payer or buyer, stored. In the present embodiment, a SIM card is used as an integrated secure element 3. The secured element 3 has a substitute module 7. The proxy module 7 is either loaded when initializing the SIM card in a secure environment or secured at a later date via a Trusted Service Manager secured transferred to the SIM card. The proxy module 7 has authorization rules and parameters 8 in order to autonomously authorize a transaction, that is to say a payment in the present case. The SIM card or the secured element 3 is inserted into an electronic device or a terminal 4. The terminal 4 is presently a commercial mobile phone with NFC.

The terminal 4 or the secure element 3 or the representative module 7 can be connected to a billing center 6 for communication with it. The account-managing clearing center 6 has a database server, which can be reached via data communication via the Internet.

At the beginning of the transaction, a seller at the electronic device or terminal 4 or in the present case the mobile phone to be paid amount. By means of a communication at a first time 2 via NFC of the mobile phone, the transaction data 15, in particular security features and account details, of the contactless payment card are read out. Thereafter, the first process step, namely the preparation of the transaction 10, completed in accordance with Figure 2.

The data or transaction data 15 are then according to Figure 2 by the proxy module 7 on the basis of the authorization rules and parameters 8 in a second process step, namely the authorization of Transaction 1 1, checked. Upon release of the transaction 12 or refusal of the transaction 13 corresponding booking data 9, namely a transaction receipt, generated by the representative module 7 and stored. The result of the transaction is displayed to the seller on a display, not shown here, of the mobile telephone or of the terminal 4 and, if necessary, reported back to the payment card or mobile device 1 via NFC.

At another time, an adjustment 14, in particular the authorization rules and parameters 8 and the booking data 9, that is to say the transaction acknowledgments, takes place between the substitute module 7 and the billing center 6 via the data communication 5 of the mobile telephone or the terminal 4.

In this embodiment, the integrated secure element 3 could also be incorporated as a secure element directly into the terminal 4 or integrated in another form, for example as an SD card. As terminal 4 could be used instead of the mobile phone and a contactless payment terminal.

As a payment card or mobile device 1, a mobile phone with NFC and a payment application could be used. In this case, a contactless chip card could be used as the integrated secured element 3. The communication 2 for payment application would be made via NFC of the mobile device 1 and the communication 5 to the billing center 6 via NFC and the data communication of the mobile device. 1 In this case, even the use of an independent terminal 4 could be dispensed with.

If the integrated secured element 3 is used in a conventionally constructed payment terminal, conventional payment cards with a chip or magnetic strip could also be authorized as mobile devices 1. Analogous A payment system for public transport or a ticketing system or mixed systems could also be set up for the payment systems mentioned above. In addition to the embodiments mentioned directly here, there are of course many other possible embodiments.

The present invention is not limited to the illustrated and described embodiments. Variations within the scope of the claims are also possible as a combination of features, even if they are shown and described in different embodiments.

LIST OF REFERENCES

Mobile device

Communication at a first time secured element

terminal

Communication at a second time

clearinghouse

substitute module

Authorization rules and parameters

booking data

Preparation of the transaction

Authorization of the transaction

Release of the transaction

Refusal of the transaction

Comparison with the clearing center

transaction data

Claims

Patent claims

1 . Secured element (3) for safe and fast transaction processing,

which is able to communicate with an external mobile device (1) and with an external clearing center (6) in such a way that transaction data (15) transmitted by the mobile device for authorizing the transaction can be checked on the basis of autonation rules and parameters (8) of the clearing center (6) .

characterized in that

the secured element (3) has a local representative module (7) as representative of the clearing center (6),

in which in communication with the billing center (6) the current Autonsierungsregeln and parameters (8) of the billing center (6) are stored,

such that the proxy module (7) handles the transaction with the mobile device (1) autonomously, without data connection to the clearing center (6), and

authorized in a secured environment.

2. Secured element according to the preceding claim, characterized in that the representative module (7) is designed such that it at one time, in particular by means of a communication interface of the secured element (1) or a dedicated electronic device or terminal (4) , either with the external mobile device (1) or with the external billing center (6) is connectable.

3. Secured element according to one or more of the preceding claims, characterized in that the proxy module (7) is designed such that it is the transaction data, in particular Information on the temporal and / or spatial authorization, user identification information, security features and / or account data, encrypted from the external mobile device (1) and / or signed to receive.

Secured element according to one or more of the preceding claims, characterized in that the proxy module (7) is designed such that for each transaction booking data (9), in particular a transaction receipt, data for transaction confirmation, payment parameters, preferably the value of the payment , Security features and / or account data, to generate and store, in particular caching, able.

Secured element according to one or more of the preceding claims, characterized in that the substitute module (7) is designed such that it encodes the booking data (9), in particular the transaction receipt, to the mobile device (1), in particular and / or signed, able to transmit.

Secured element according to one or more of the preceding claims, characterized in that the authorization rules, parameters (8) and / or booking data (9) encrypted and / or signed to the billing center (6) can be transferred and / or compared with the clearing center (6) are.

Secured element according to one or more of the preceding claims, characterized in that the proxy module (7) for evaluating the transaction data (15), for authorizing the transaction for generating the booking data (9) and / or for controlling the, preferably temporal, data transfer a having protected computing unit.

8. Secured element according to one or more of the preceding claims, characterized in that the proxy module (7) for storing the authorization rules, parameters (8) and / or the booking data (9) has a protected memory.

9. Secured element according to one or more of the preceding claims, characterized in that the secured element (3) is designed as a SIM card and / or retrofittable in an electronic device or terminal (4), in particular a mobile phone, can be integrated.

10. A method for secure and rapid transaction processing between a secure element (3), in particular according to one or more of the preceding claims, and an external mobile device (1),

in which for the authorization of the transaction transaction data (15) of the mobile device (1) are checked on the basis of authorization rules and parameters (8) of an external clearing center (6), characterized in that

the authorization of the transaction is carried out autonomously by a substitution module (7) of the secured element (3), without data connection to the clearing center (6).

1 1. Method according to the preceding claim, characterized in that the proxy module (7) is connected at a time either to the external mobile device (1) or to the external clearing center (6).

12. The method according to one or more of the preceding claims, characterized in that first between the proxy module (7) and the clearing center (6) a data connection is established and the current authorization rules and parameters (8) the Verrechungszentrale (6) in the proxy module (7), in particular in a protected memory of the proxy module (7) are stored.

13. The method according to one or more of the preceding claims, characterized in that then, in particular after the data connection between the secure element (3) and the billing center (6) would be separated, between the representative module (7) and the mobile device (1) a data connection is established and the proxy module (7) the transaction data (15) of the mobile device (1), in particular payment parameters, preferably the value of the payment, information on temporal and / or spatial authorization, information on user identification, security features and / or account information, reads out and / or writes.

14. The method according to one or more of the preceding claims, characterized in that the transaction data (15) encrypted and / or signed to the delegate module (7) are transmitted and the delegate module (7) is able to decode them.

15. The method according to one or more of the preceding claims, characterized in that the proxy module (7), in particular a protected computing unit of the proxy module (7), then to authorize the transaction, the transaction data (15) based on the stored authorization rules and parameters (8) checked.

16. The method according to one or more of the preceding claims, characterized in that the proxy module (7) for each transaction booking data (9), in particular a transaction receipt, generated and these, in particular in the protected memory, stores and / or cached.

17. The method according to one or more of the preceding claims, characterized in that the proxy module (7) the booking data (9), in particular the transaction receipt, to the mobile device (1), in particular encrypted and / or signed transmitted.

18. Method according to one or more of the preceding claims, characterized in that the proxy module (7) is connected to the central office (6) and the authorization rules, parameters (8) and / or booking data (9) are transferred to the clearing center (6 ).

19. The method according to one or more of the preceding claims, characterized in that the authorization rules, parameters (8) and / or booking data (9) encrypted and / or signed transmitted to the billing center (6) or provided for transmission.

20. The method according to one or more of the preceding claims, characterized in that when matching new authorization rules and parameters (8) in the delegate module (7) are stored.