WO2013075819A1

WO2013075819A1 - Method for performing an electronic transaction between a mobile station and a terminal

Info

Publication number: WO2013075819A1
Application number: PCT/EP2012/004803
Authority: WO
Inventors: Dieter Weiss
Original assignee: Giesecke & Devrient Gmbh
Priority date: 2011-11-25
Filing date: 2012-11-20
Publication date: 2013-05-30
Also published as: EP2783335A1; DE102011119441A1

Abstract

The invention relates to a method for performing an electronic transaction between a mobile station (1) and a terminal (2). The method according to the invention involves the terminal (2) using a first contactless communication link (K1) to transmit a piece of information (IN), which needs to be confirmed by a user as part of the electronic transaction, to the station (1). The information (IN) is transmitted from the station (1) via a second contactless communication link (K2) to a portable data storage medium (3), fitted on the station (1), comprising a display unit (301) and an input unit (302) which can be operated by the user. This information (IN) is then displayed on the display unit (301) of the portable data storage medium (3), whereupon the user can confirm the information (IN) by using the input unit (302). Finally, when the information (IN) is confirmed by using the input unit (302), a confirmation signal (BS) is transmitted from the portable data storage medium (3) via the second contactless communication link (K2) to the station (1), whereupon confirmation data (BD) are transmitted from the station (1) via the first contactless communication link (K1) to the terminal (2).

Description

A method of performing an electronic transaction between a mobile terminal and a terminal

The invention relates to a method for carrying out an electronic transaction between a mobile terminal and a terminal, and to a corresponding system and a portable data carrier which can be used to carry out the electronic transaction.

As part of the implementation of electronic transactions between a mobile terminal and a terminal, it is usually required that corresponding information is confirmed by the user of the terminal. Conventionally, the mobile terminal itself is used to display this information or to confirm it, i. the information is displayed on the display of the terminal and corresponding keys of the terminal are used to confirm the information. It proves to be disadvantageous that this process for the user is often uncomfortable, especially when the mobile terminal must be removed by the user only from a corresponding protective cover. Furthermore, the use of the display and the keys of the terminal are safety-critical, because these components may not be able to be used. be manipulated by attackers.

The publication DE 102006 048 797 A1 describes a method for executing an application which can be used, for example, for a home banking application. In this case, a portable data carrier in the form of a chip card is used, which transactional data, which originate from a browser and are to be forwarded to a server, first transmitted to a mobile phone. The transaction data is displayed on the mobile phone and the user is requested to release the transaction data. The document DE 103 16 771 AI discloses a self-adhesive security label for security or value documents, which comprises an integrated circuit and a transponder for contactless communication. For example, user-specific data can be stored in the integrated circuit.

The object of the invention is to make the execution of an electronic transaction between a mobile terminal and a terminal secure and comfortable for the user.

The object of the invention is achieved by the measures described in the independent independent claims. Advantageous embodiments and further developments of the invention are described in the respective dependent claims.

The method according to the invention serves to carry out an electronic transaction between a mobile terminal and a terminal. The term of the mobile terminal is to be understood broadly and relates to any portable electronic device, in particular a mobile phone and preferably a smartphone, a PDA (PDA = Personal Digital Assistant), a laptop and the like. The terminal represents a counterpart in the electronic transaction and is e.g. a publicly accessible terminal through which transactions can be processed.

The terminal provides, for example, a connection to a remote server, which offers so-called e-services. Under E-Services, all services and activities are grouped together as transactions Computers can be created and executed interactively and / or statically via electronic media. The term server in this application is synonymous with the term application server. One transaction, for example, is an information and education service, such as e-education, e-learning, e-teaching, e-pubhshing, e-book and e-catalog, to provide bespoke, trade and ordering services such as e-business, e-business Commerce, e-procurement, e-cash, e-shop, e-intermediary, e-auction, to provide cultural and administrative services such as e-culture, e-government or e-voting to improve marketing, product or service the customer relationship to electronic consulting such as E-Consult or E-Advising.

In the context of the method according to the invention, information which is to be confirmed by a user in the context of the transaction is transmitted to the terminal by the terminal via a first contactless communication link. Subsequently, this information is transmitted from the terminal via a second contactless communication link to a portable data carrier attached to the mobile terminal comprising a display unit and an input unit operable by the user. The portable data carrier can be attached directly and in particular also indirectly to the terminal. In a particularly preferred embodiment, the portable data carrier is provided on a protective cover attached to the terminal and preferably designed as a sticker (ie as a flat element), which is glued, for example, on the protective cover. The data carrier is in particular mounted on the terminal or provided on the protective cover, that the display unit by the user from the outside is perceptible and the input unit by the user from the outside (eg via the protective cover) can be actuated. The portable data carrier is in particular an RFID transponder. Conventionally, both the power supply of an RFID transponder in an RFID system and the data exchange between the

Transponder and the terminal using magnetic or electromagnetic fields. RFID transponders have an electronic circuit and, depending on the frequency range, an antenna coil (e.g., 13.56 MHz) or an electromagnetic antenna (e.g., 868 MHz). About the antenna, the field required for the operation of the transponder energy can be removed from the field and the data transmission can be performed. For this purpose, the terminal provides the corresponding energy. Alternatively, the power is provided by the terminal where the transaction is to be performed. Up to a certain distance between the terminal / terminal and the transponder, which is also referred to as the energy range, the transponder can draw just enough energy from the field of the terminal terminal to operate its own circuit. Typical energy ranges of such systems are about 10 cm for ISO 14443 and up to 1 m for ISO 15693 compatible systems. The range within which communication in the system is possible through data transmission can be increased by using active transponders, ie transponders with their own energy supply. The power supply of the active transponder, for example in the form of a battery or a charging capacitor, operates its electronic circuit. Conventional transponders without their own power supply are referred to as passive transponders.

RFID systems, for example for different types of coupling, as well as a load modulation using an auxiliary carrier in inductively coupled In particular, RFID systems are described in Chapter 3.2 of the "RFID Handbook" by Klaus Finkenzeller.

In mobile radio terminals, the so-called Nah Near Field Communication technology is integrated in order to enable communication between the terminals or with the terminal. The coupling of the devices / terminals takes place via coils, with the carrier frequency being 13.56 MHz, as in RFID systems. As described in more detail in the NFC standard ISO / IEC 18092, there is an active communication mode and a passive communication mode in NFC systems. In the active mode, two NFC units alternately generate their own RF field as signal carriers, switching back and forth between transmit and receive mode, as in a classic mobile radio system, both tuned to each other. In passive mode, however, the two NFC units must agree on which unit acts as a reader and creates a field that can then influence the other unit by means of load modulation.

Primarily due to the small antenna diameters used, in NFC systems - especially in passive mode - only low communication ranges are possible. The typical range of NFC end devices is about 20 cm. The methods used for data transmission are very similar to those of contactless data carriers. NFC devices are therefore also able to communicate with contactless data carriers. To realize the communication, the operating modes "Card Emulation", "Reader Emulation" and "Peer to Peer" (P2P) are possible.

In the method according to the invention, the information to be confirmed is displayed on the display unit of the portable data carrier, whereupon the user can confirm the information via the input unit. In the event that the user confirms this information via the input unit, an acknowledgment signal is transmitted from the portable data carrier via the second contactless communication link to the terminal, whereupon confirmation data are transmitted from the terminal via the first contactless communication link to the terminal and thereby complete the transaction becomes.

The portable data carrier is preferably an RFID sticker which can be attached mechanically detachably to the terminal. In particular, an adhesive layer on the disk ensures the appropriate liability between the device and the disk.

Alternatively, the data carrier is configured with security functionalities and designed, for example, as a smart card, chip card, token, mass storage card, multimedia card or electronic identity document.

The inventive method is characterized in that in the context of the confirmation of information, a separate, not belonging to the terminal portable data carrier with display unit and input unit is used. By attaching this disk to the terminal, the user has access to the disk directly through his terminal. As part of the transaction, he does not use the display unit or the keys of the terminal, but rather the display unit and the input unit of the data carrier. This increases user comfort and security. In particular, if the portable data carrier is provided on the protective cover of the terminal, the acceptance of the use of the terminal in carrying out the transactions is increased because a user does not need to remove the protective cover from the terminal to confirm this information.

In a particularly preferred embodiment, the first and / or the second communication link based on the now widespread near-field or NFC communication, with information over short ranges in the decimeter range are transmitted. The input unit of the portable data carrier can be configured differently. In one variant, the input unit comprises a single, operable by the user key with which the corresponding information displayed on the display unit can be confirmed. Optionally, the input unit may also include a plurality of keys for entering more complex acknowledgments in the manner of a PIN. Likewise, the input unit can be configured as a gesture recognition means or as a biometric sensor for the recognition of biometric features and in particular as a fingerprint sensor.

The inventive method can be used to carry out any electronic transactions in which a confirmation by a user is required. In a particularly preferred embodiment, the method is used for carrying out a payment transaction, in the case of information which is to be confirmed by the user in the context of the electronic transaction, being an amount of money to be paid to the terminal. To increase the security of the method, the terminal communicates in a particularly preferred embodiment by means of a known security element (English: Secure Element) and / or a secure runtime environment, which are provided in the terminal, via the first and / or the second contactless Kommurukationsstrecke. The security element is then configured in particular as a hardware component and arranged as a fixed integrated component in the mobile terminal, where it can not be removed either in the form of the mobile device, for example as M2M module, co-processor or Trusted Base or as a removable module with SicherheitsfunktionaHtät is connected to the mobile terminal, for example as a smart card, in particular a Subscriber Identification Module, SIM / USIM card short, smart card, mass memory card, USB token, multimedia card, Secure MicroSD card, mobile network token, eg a UMTS Surf stick.

Alternatively, the security element is designed as a software component as a trusted part of the operating system kernel of the mobile terminal or as a security software algorithm. Here, the use of secure runtime environments for executing programs or applications to call. In particular, the known per se ARM TrustZone ^® can be used as a secure runtime environment on the example which is also known operating system MobiCore ^® running.

In a further, particularly preferred embodiment, the security element signs the confirmation data to be transmitted via the first contactless communication link. In this way, it is possible to check at the terminal that the confirmation data actually comes from the terminal to which the information to be confirmed has previously been transmitted.

In a further preferred embodiment, the security of the method is increased by providing both a secure runtime environment and a security element in the terminal, wherein the secure runtime environment supports the portable data carrier and the security device. element is driving. By controlling the portable data carrier through the secure runtime environment, a tamper-proof display of the information on the display unit of the data carrier is achieved. By controlling the security element via the secure runtime environment, manipulation of the generation or processing of the confirmation data to be transmitted to the terminal can be avoided.

In a particularly preferred embodiment of the method according to the invention, the confirmation signal is transmitted from the portable data carrier to the terminal in the form of a rolling code, wherein the rolling code for each newly transmitted acknowledgment signal changes and wherein the rolling code on a shared secret between portable data carrier and Terminal or between portable data carrier and another (external) unit. In this way, attacks are prevented in which an attacker unauthorized attempts to simulate the confirmation signal and transmit to the terminal.

In a further preferred embodiment, the common secret used in the generation of the rolling code is determined by a manual, user-paired pairing between the terminal and the portable data carrier. The pairing can be based on a barcode which is applied to the portable data carrier or its packaging and is read during the first use of the portable data carrier, for example via the terminal by means of a suitable reader. As a result, an assignment of the portable data carrier during its commissioning can be achieved in a simple manner to a corresponding terminal. In a further variant of the method according to the invention, the security element described above verifies the rolling code transmitted by the portable data carrier based on the shared secret and generates the confirmation signal upon successful verification. Preferably, it also signs the confirmation signal. Optionally, there is also the possibility that the secure runtime environment described above verifies the transmitted rolling code based on the shared secret and causes the security element to successfully generate the verification signal and possibly also to sign.

As mentioned above, the shared secret may also be defined between the portable data carrier and another (external) device. Preferably, the terminal transmits the rolling code as confirmation data or together with the confirmation data on the first con murtikationsstrecke to the terminal, whereupon the terminal causes the verification of the rolling code and only upon successful verification, the electronic transaction is completed. Optionally, the terminal may represent the external unit. However, the external unit may also be an external server of a background system to which the rolling code is forwarded by the terminal for verification.

In addition to the method described above, the invention further relates to a system for performing an electronic transaction between a mobile terminal and a terminal. The system includes the mobile terminal and the terminal as well as a portable data carrier. The system is designed such that in its operation, the method according to the invention or one or more variants of the method according to the invention can be carried out. The invention further relates to a portable data carrier for use in the method according to the invention or in one or more variants of the method according to the invention. It comprises a display unit, a contactless communication interface, in particular for NFC communication, and a user-operable input unit, which are configured such that the portable data carrier, in operation, has information to be confirmed by the user about the contact Kommunikationsssdinittstelle receives from the terminal and then displayed on the display unit, wherein the portable data carrier sends the acknowledgment signal via the contactless communication interface to the terminal after a subsequent confirmation of the information via the input unit. The portable data carrier is preferably provided on a protective cover, which can be attached to the terminal. The attachment takes place in particular mechanically detachable, for example by means of an adhesive layer on the portable data carrier. In this sense, the invention also relates to a protective cover with the portable data carrier provided thereon.

In particular, the portable data carrier is arranged in communication range with the mobile phone and is used instead of the terminal for confirming the transaction. The mobile phone performs the transaction without user interaction. User interaction in the meaning of the invention means, on the one hand, that the user does not have to carry out an interaction on the mobile phone either when setting up or when carrying out the transaction. In addition, the user does not have to remove the terminal from his storage, for example a pocket of the user. to perform the transaction as the acknowledgment is taken from the volume.

In the following, the invention or its embodiments and advantages of the invention will be explained in greater detail on the basis of a figure, the figures describing only exemplary embodiments of the invention. Identical components in the figure are given the same reference numerals. The figure is not to be considered as true to scale, it can be exaggerated in size or exaggerated simplified individual elements of the figure.

The invention is explained below based on an electronic transaction in the form of a payment transaction, which is performed between a user's mobile terminal and a Beza terminal. According to FIG. 1, a mobile telephone 1 is used as the mobile terminal, which communicates wirelessly via an IS 1 C communication link K 1 with a payment terminal 2. For contactless communication, the BezaH Terrrtinal includes a schematically indicated kontaküose NFC interface or antenna 201, which communicates with a corresponding NFC interface or antenna 103 (also shown schematically) of the mobile phone 1. The mobile telephone further comprises a display 101 and a per se known security element 102 (English: Secure Element), which is realized in the illustrated variant via the USIM / SIM card of the user.

As part of the method described here, a user wants to contactlessly pay a predetermined amount via his mobile phone 1. For example, the BezaW terminal 2 may be provided for the issue of public transport tickets, the payment of the ticket being made contactlessly via the correspondence link K1. As part of the payment process, it is necessary that the amount to be paid to the User is displayed and confirmed by this. In the variant of the invention described here, in addition to the mobile telephone 1, a portable data carrier 3 in the form of a so-called sticker is used for this purpose. This sticker is provided in a protective cover 4 into which the mobile telephone 1 is inserted. The protective cover is indicated by a thicker edge around the mobile phone 1. The sticker 3 comprises a separate display 301 as well as a button 302 and in turn an NFC interface or antenna 303, by means of which a Kornmunikation with the mobile phone via the antenna 103 based on the contactless Kornmunikationsstrecke K2. In addition, a barcode is attached to the sticker, which is indicated schematically by the reference numeral 304. By attaching the sticker on the protective cover 4, a display and confirmation of the amount to be paid in the context of the payment process via the display 301 and the button 302 can be achieved in a simple manner, as will be explained in more detail below.

The sticker used in the embodiment described here is very simple and preferably does not have its own power supply, i. it is only operated by the field energy received via the NFC interface 303 in the context of contactless communication. Nevertheless, there may also be the possibility that a buffer memory or a battery may be provided in the sticker which, depending on the application, supplies the sticker additionally or completely with energy.

In the following, the procedure of the payment process will be explained based on the devices shown in FIG. As part of the payment process, it is necessary that the user confirms the amount to be paid in an appropriate manner. Therefore, in step Sl, an information IN about the contactless Communication line Kl transmitted from the terminal 2. This information contains the amount of money to be paid by the user. After receiving the information IN in the mobile phone 1 or security element 102, this is - in contrast to known methods - not displayed on the display 101, but forwarded in step S2 via the contactless communication path K2 to the sticker 3. Since the sticker is provided in the protective cover 4 of the mobile phone, it is also ensured that it is in communication range with the mobile telephone 1. The information IN received in the sticker is then displayed on the display 301 of the sticker. The user can then read the amount without having to remove the protective cover 4 from the mobile phone 1. If the amount corresponds to the payment amount communicated to the user in the context of the transaction (eg via a display on the terminal), the user can now confirm the amount by pressing the key 302.

After this confirmation, a corresponding acknowledgment signal BS is transmitted from the sticker 3 to the mobile telephone 1 in step S3 via the contactless communication link K2. From this confirmation signal, corresponding confirmation data BD are generated in step S4, which are provided with a signature SIG via the security element 102. The confirmation data may possibly correspond to the confirmation signal. The signed confirmation data are finally transmitted to the terminal 2 via the first contactless communication link K 1 in step S 5. The received confirmation data inform the Terrninal that the payment process has been authorized by the user and that the transaction process is now complete. Via the signature of the confirmation data, the terminal can also check that the confirmation data actually originate from the mobile phone 1 of the user. In general, corresponding applications or applets that are integrated in the security element 102 of the terminal 1 are used to support electronic transactions. In a variant of the invention, the applet already supports the integration of the sticker 3 in the transaction in the security element. However, variants are also conceivable in which the applet does not support the integration of the sticker. In this case, a second sticker applet is installed on the terminal 1, which does not necessarily have to be stored on the security element 102. This applet then takes over the communication between the security element or the terminal and the sticker. In this case, the output of the payment applet on the terminal or on the mobile terminal intercepts and forwards the information relating to the amount to be paid to the sticker. Conversely, this applet receives the response from the sticker and generates a response that meets the requirements of the payment applet on the security element.

The communication between the device and the sticker should be as simple as possible. That is, the use of complex cryptographic algorithms should be omitted in the context of communication. In a preferred embodiment of the invention, therefore, the information IN transmitted in step S2 is transmitted unencrypted with regard to the payment amount. This is not a problem, because if this amount were corrupted by an attacker, the wrong amount would be visible to the user on the display 301 of the sticker 3 and therefore not confirmed by the user. In order to increase security, in step S2 it is also dispensed with transmitting further information, such as the identification of the terminal, together with the information IN. In contrast to the communication from the terminal 1 to the sticker 3, the reverse communication from the sticker 3 towards the terminal 1 is much more safety-critical. In particular, an attacker could readjust and send the acknowledgment signal BS sent on pressing the key 302 to the terminal 1, so that external transactions could be performed unnoticed. In order to avoid this, in a preferred variant of the invention corresponding safety mechanisms are provided, which should preferably be as simple as possible. In particular, so-called rolling codes can be used, which are always generated in the manner of a one-time password only once upon actuation of the key 302 and thus change from actuation to actuation. That is, the sticker 3 sends after displaying the amount to be paid on the display 301 and after the corresponding confirmation of the user via the key 302 in each payment transaction another code back to the terminal 1. This requires that the terminal can verify the code appropriately as a confirmation signal. In a preferred variant, this is achieved by a manual pairing (English: Pairing) between the terminal 1 and the sticker 3. This pairing ensures that the device and the sticker share a common secret upon which the corresponding rolling code is based. An attacker is then no longer possible to pretend the output of a confirmation signal to the terminal.

The manual pairing between the terminal 1 and the sticker 3 can be made in various ways. In the embodiment of FIG. 1, the barcode 304 printed on the sticker 3 is used, which can be one-dimensional or two-dimensional. If necessary, the barcode can also be applied to the packaging of the sticker, which then, after being unpacked, is placed on the protective cover of the mobile telephone, for example via a corresponding adhesive surface is attached. The barcode contains the part of the secret that the terminal needs to verify the rouoding code. As part of the implementation of manual pairing the corresponding barcode is read via a reader of the terminal for commissioning the sticker and then used to personalize the payment applet on the security element or the separate sticker applet. However, the manual pairing can possibly also be carried out in other ways, for example by entering a sequence of numbers using the keyboard of the terminal, similar to the pre-shared key in WLAN. The sequence of numbers can in turn be applied to the sticker or its packaging.

The process of the invention described above may be subject to various modifications. In particular, the sticker can be made more complex in order to further increase transaction security. For example, to confirm the amount displayed on the display 301, the input of a key combination in the manner of a PIN may be provided. In this case, additional buttons are provided on the sticker. Furthermore, the confirmation may be entered by means of a gesture of the user, e.g. can be detected by a strain gauge on the sticker. Likewise, in highly security-critical transactions, it is possible to capture biometric features of the user via a biometric sensor on the sticker. Preferably, a fingerprint sensor is used for this purpose. Only if a fingerprint detected via the sensor coincides with an imprint pattern deposited in the sticker is a corresponding confirmation signal BS emitted.

In a further variant, special security mechanisms can be provided for checking the roaming codes described above. Preferably, a trust zone known per se is provided on the microprocessor of the mobile terminal, within which the verification of the rolling codes takes place. The trust zone represents a secure runtime environment and uses the known per se operating system MobiCore in a preferred embodiment. In a further embodiment, the activation of the sticker 3 and the security element 102 is carried out exclusively via a TrustZone. By this control, the sticker display 301 is a so-called. Secure display, which is protected against manipulation. As a result, the amount of payment displayed on the display is trusted. The TrustZone also checks the receipt of a received acknowledgment signal and in particular a corresponding rolling code. Only when the signal is positively verified does the TrustZone trigger the security element 102 to sign corresponding confirmation data. Possibly. It is also possible that the rolling code is checked by the security element. For example, the rolling code can be linked to the confirmed payment amount, creating a kind of TAN.

In the variants of the invention just described, the correctness of the rolling codes is always checked by the terminal. If necessary, it is also possible for a remote, trustworthy server, for example the server of the payment system provider, to check the rolling codes. In this case, the code is sent together with the confirmation data BD via the communication links Kl from the terminal 1 to the terminal 2. The terminal then passes the code to the remote server, which checks it. This variant of the invention has the advantage that a Trojan attack on the terminal has much less chance of success. This is due to the fact that the terminal is no longer personalized and a Trojan thus has no access to the common Has secret between sticker and server. Consequently, a Trojan can no longer trigger hidden transactions, since this always requires the generation of an appropriate acknowledgment signal, but for which the shared secret is needed.

The embodiments of the invention described above have a number of advantages. The use of a terminal-mounted sticker with display and push-button ensures simple and convenient transaction processing with low additional costs. Since the sticker is preferably provided in the protective cover of the terminal, it is no longer necessary that the terminal must be removed from the protective envelope to complete the transactions, which increases the acceptance in the Durkriführung the transactions at the user. Furthermore, the risk is reduced that the terminal falls off during removal from the protective cover and thereby damaged or destroyed. For the realization of the electronic transactions, furthermore, only minor modifications are required in comparison with conventional transactions carried out without the interposition of a sticker. In particular, only the software on the terminal needs to be adapted. Thus, the inventive method can be easily integrated into existing payment systems. In addition, it is advantageous that a separate portable data carrier is used to confirm the transaction, because the keyboard on a mobile device is generally not considered safe. In an alternative embodiment, the data carrier 3 is not necessarily mounted on the protective cover 4 of the mobile phone 1. Rather, the disk 3 can also serve as a low-cost terminal, which makes handling of the mobile phone 1 superfluous. In this case, the data carrier 3 would be in the form of an ID-1 chip card. The described procedure of the transaction does not change. The customer / user just pulls the card out of his pocket and confirms the transaction. Since the communication range between disk 3 you terminal 1 as usual in RFID and NFC systems is up to 20cm, such a configuration is possible in principle. But more attractive for the user is a greater communication range for data transmission.

For the grain communication between terminal 1 and disk 3, an RFID system for transmission in Ultra High Frequency, UHF short range used, so that a greater communication range for transmitting the data from the terminal 1 to the disk 3 is made possible. The data carrier 1 has in particular a Energieversorugn 305 in the form of a battery. Alternatively, the data is transferred from the terminal 1 to the data carrier 3 before pulling out the data carrier 3 from a pocket of the user. After insertion into the bag, the confirmation from the disk 3 is sent back to the terminal 1. By this alternative method, the handling of the quite sensitive mobile phones 1, such as falling or theft is completely avoided. If the data carrier 1 is a chip card, its enormous robustness against environmental influences can be used. At the same time, a loss / theft of the chip card is not a problem, since a transaction according to the invention without the provision of energy and the data transmission with the terminal 1 is not possible. The card can therefore be stored in a much more insecure place, such as a trouser or shirt pocket of the user, which greatly facilitates handling for the customer / user. LIST OF REFERENCE NUMBERS

1 mobile device

101 display

102 security element

103 NFC interface

2 terminal

201 NFC interface

3 portable data carriers

301 display

302 button

303 NFC interface

304 barcode

305 energy supply

4 protective cover

Sl, S2, S3, S4, S5 steps

IN information for confirmation by the user

BS confirmation signal

BD confirmation data

SIG signature

Kl first contact Correlation section

K2 second contact communication line

Claims

Patent claims

A method of performing an electronic transaction between a mobile terminal (1) and a terminal (2), comprising:

- From the terminal (2) via a first contactless Kornmunikations- track (Kl) information (IN), which is to be confirmed in the context of the electronic transaction by a user, to the terminal (1) is transmitted;

the information (IN) from the terminal (1) via a second contactless communication line (K2) to a portable data carrier (3) attached to the terminal (1) comprising a display unit (301) and an input unit (302 ) is transmitted;

the information (IN) is displayed on the display unit (301) of the portable data carrier (3), whereupon the user can confirm the information (IN) via the input unit (302);

in the case of confirmation of the information (IN) via the input unit (302) an acknowledgment signal (BS) from the portable data carrier (3) via the second contactless communication path (K2) to the terminal (1) is transmitted, whereupon confirmation data (BD) of the terminal (2) via the first contactless communication link (Kl) to the terminal (2) are transmitted.

2. The method according to claim 1, characterized in that the portable data carrier (3) on one of the terminal (1) attached protective cover (4) is provided and is designed in particular as a sticker.

3. The method of claim 1 or 2, characterized in that the first and / or second communication link (Kl, K2) based on NFC communication cation and / or the input unit (302) of the portable data carrier one or more keys and / or a gesture recognition means and / or a sensor for detecting biometric features.

4. The method according to any one of the preceding claims, characterized in that the electronic transaction is a payment transaction, in which as information (IN), which is to be confirmed in the context of the electronic transaction by the user, one to the terminal (2) to pay Amount of money is

5. The method according to any one of the preceding claims, characterized in that the terminal (2) by means of a security element (102) and / or a secure runtime environment, which are provided in the terminal (1) via the first and / or second contactless communication route (Kl, K2) communicates.

6. Method according to claim 5, characterized in that the security element (102) signs the confirmation data (BD) to be transmitted via the first contactless communication path (K1).

7. The method according to claim 5 or 6, characterized in that the secure runtime environment controls the portable data carrier and the security element.

8. The method according to any one of the preceding claims, characterized in that the actuating signal (BS) is transmitted from the portable data carrier (3) to the terminal (2) in the form of a rolling code, wherein the roHierende code for each newly transmitted confirmation signal (BS) and wherein the rolling code is based on a shared secret between portable data carrier (3) and terminal (1) or between portable data carrier (3) and another unit.

9. The method according to claim 8, characterized in that the common secret of a manual, performed by the user pairing between the terminal (2) and portable data carrier (3) is set.

10. The method according to claim 8 or 9 in combination with one of claims 5 to 7, characterized in that the security element (102) verifies the transmitted rolling code based on the shared secret and upon successful verification generates the acknowledgment signal (BS) and / or that the secure runtime environment verifies the transmitted rolling code based on the shared secret and, upon successful verification, causes the security element (102) to generate the acknowledgment signal (BS).

11. The method according to any one of claims 8 to 10, characterized in that the terminal (1) transmits the rolling code as confirmation data (BD) or together with the confirmation data (BD) via the first communication link (Kl) to the terminal (2) whereupon the terminal (2) causes the verification of the rolling code and the electronic transaction is completed only upon successful verification.

12. System for carrying out an electronic transaction between a mobile terminal (1) and a terminal (2), the system being designed such that in its operation:

from the terminal (2) via a first contactless communication link (Kl) information (IN), which is to be confirmed in the context of the electronic transaction by a user, to the terminal (1) is transmitted the information (IN) from the terminal (1) via a second contactless communication path (K2) to a portable, on the terminal (1) mounted data carrier (3) comprising a display unit (301) and a user-operable input unit (302) transmits becomes;

- the information (IN) is displayed on the display unit (301) of the portable data carrier (3), whereupon the user can confirm the information (IN) via the input unit (302);

13. System according to claim 12, characterized in that the system for carrying out a method according to one of claims 2 to 11 is configured.

14. A portable data carrier for use in a method according to any one of claims 1 to 11, characterized in that the portable data carrier (3) comprises a display unit (301), a contactless communication interface (303) and a user-operable input unit (302 ) which are configured such that the portable data carrier (3) in operation receives information to be confirmed by the user via the contactless communication interface (303) from the terminal (1) and subsequently via the display unit (301) indicates, wherein the portable data carrier (3) after a subsequent confirmation of the information via the input unit (302) an acknowledgment signal (BS) via the contactless communication interface (303) to the terminal (1) emits.

15. A portable data carrier according to claim 14, characterized in that the portable data carrier to a protective cover (4) is mounted, wherein the protective cover (4) to the terminal (1) can be attached.

16. A portable data carrier according to claim 14, characterized in that the portable data carrier (3) is arranged in Koinmunikatiorisreichweite with the mobile phone (3) and instead of the terminal (1) is used to confirm the transaction and wherein the mobile phone (1) without user interaction performs the transaction.