EP2526441A1 - Procédé d'exécution d'une transaction entre un support de données portatif et un terminal - Google Patents

Procédé d'exécution d'une transaction entre un support de données portatif et un terminal

Info

Publication number
EP2526441A1
EP2526441A1 EP11700614A EP11700614A EP2526441A1 EP 2526441 A1 EP2526441 A1 EP 2526441A1 EP 11700614 A EP11700614 A EP 11700614A EP 11700614 A EP11700614 A EP 11700614A EP 2526441 A1 EP2526441 A1 EP 2526441A1
Authority
EP
European Patent Office
Prior art keywords
terminal
data carrier
portable data
transaction
location
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
EP11700614A
Other languages
German (de)
English (en)
Inventor
Klaus Finkenzeller
Wolfgang Rankl
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Giesecke and Devrient GmbH
Original Assignee
Giesecke and Devrient GmbH
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Giesecke and Devrient GmbH filed Critical Giesecke and Devrient GmbH
Publication of EP2526441A1 publication Critical patent/EP2526441A1/fr
Ceased legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/327—Short range or proximity payments by means of M-devices
    • G06Q20/3278—RFID or NFC payments by means of M-devices
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/322—Aspects of commerce using mobile devices [M-devices]
    • G06Q20/3224—Transactions dependent on location of M-devices
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists

Definitions

  • the invention relates to a method for carrying out a transaction between a portable data carrier, in particular a chip card, and a terminal.
  • the transmitted transaction data is executed when a transaction is carried out between a payment card and a transaction terminal forward a transaction processing network, which determines the location of the transaction based on the transaction information.
  • the payment card is assigned to a mobile device whose position, for example, via a mobile network, is determined by a server or this is provided. Subsequently, a comparison of the location of the transaction with the position of the mobile device.
  • the document KR 2003 0043886 describes a system for confirming a payment process carried out via a credit card.
  • a terminal which reads the data from the credit card to make the payment, transmits the data read and its position to a confirmation system, in which the validity of the credit card is checked.
  • the verification system also initiates a check of the current position of the mobile device of the credit card owner via a mobile radio network. Subsequently, in the confirmation system, the position of the mobile device is compared with the position of the terminal. In the event that the two position data do not overstate, the payment process via the confirmation system is not authorized.
  • a mobile unit which checks the local position of a terminal.
  • the mobile unit contains a security element and a special trusted execution environment. In a secure storage unit, all security-relevant transaction data will be stored.
  • the terminal transmits a certificate to the mobile unit, which also contains the location of the terminal.
  • the certificate may be issued by an independent third party.
  • the mobile unit checks the certificate and then the location position, for which it determines its own location position.
  • the object of the invention is to provide a method for carrying out transactions and a corresponding portable data carrier, in which an improved protection against attacks by third parties in the execution of the transactions is ensured.
  • the inventive method is used to perform a transaction, in particular for carrying out a payment transaction, between a portable data carrier, such as a smart card, and a terminal, in particular a public, freely accessible terminal to which users with can initiate transactions corresponding to a portable data carrier.
  • a portable data carrier such as a smart card
  • a terminal in particular a public, freely accessible terminal to which users with can initiate transactions corresponding to a portable data carrier.
  • transaction data corresponding to the transaction are transmitted by means of a communication between the portable data carrier and the terminal, the transaction data comprising information about the terminal which is transmitted to the portable data carrier. From this information results for the portable data carrier a spatial position of the terminal.
  • the information about the terminal may already correspond to the location of the terminal. It is also possible that the location position is derived from the information to the terminal in the portable data carrier.
  • a spatial position of the portable data carrier is also determined, to which the portable data carrier has access. The spatial position can be determined, for example, with one or more of the localization methods described below.
  • the portable data carrier compares the location of the terminal with its location position and, in the event that a deviation between the two location positions exceeds a predetermined threshold, causes a measure to protect the transaction.
  • the threshold above which a corresponding protective measure is initiated is set in such a way in particular that, when the threshold is exceeded, it can be assumed that the terminal with which the portable data carrier is communicating does not lie in the immediate vicinity of the data carrier, but in one certain distance from this is arranged.
  • the threshold may be chosen to be greater than the correspondence range of an NFC communication between data carriers. ger and terminal.
  • the threshold can also take into account the accuracy of the positions determined for the terminal and the data carrier.
  • the method according to the invention has the advantage that a comparison of the location positions of terminal and data carrier is made directly from the portable data carrier without the need for sensitive transaction data to be transmitted to other locations for checking. In this way, the user of the portable data carrier has the certainty that the checking of the location positions is actually carried out and is not influenced by manipulations in background systems.
  • NFC Near Field Communication
  • the already mentioned ISTFC communication in accordance with ISO / IEC 18092 is compatible with ISO / IEC 14443 and is based, in particular, on the transmission protocol standardized therein. With this communication, data is transmitted over short ranges based on high-frequency magnetic alternating fields.
  • the information to the terminal comprises a terminal identification and in the portable data carrier is a list or table deposited, which as entries a plurality of terminal identifications with one or more , the location identifier associated with respective terminal identification, wherein the spatial position of the terminal is determined by comparing the transmitted terminal identification with the terminal identifications of the list. That is, by one Looking up the transmitted Terirunal identification in the list, one or more local positions of the Teirrünals arise.
  • a plurality of location positions of the corresponding terminal based on different localization methods may optionally be stored for a respective terminal identification.
  • these differently determined spatial positions include an identification of the mobile radio cell of a mobile radio network in which the terminal is located with the respective terminal identification, and / or from a local radio network, such as e.g. a WLAN network, derived location coordinates, in which case the terminal is within range of the corresponding radio network.
  • the spatial position may also be e.g. GPS (Global Positioning System) coordinates of the terminal or position coordinates of another position determination system. With the last-mentioned coordinates, the highest accuracy in the position determination is achieved.
  • the spatial position of the portable data carrier is determined in particular with at least one of the different localization methods, in order thereby to enable a meaningful comparison between the spatial positions of the data carrier and the terminal.
  • the advantage is achieved that in the event that a certain type of determination of the spatial position of the data carrier is not available, the location position is determined in another way and with the corresponding location in the list can be compared.
  • the position of the data carrier can be determined eg via GPS and compared with the GPS coordinates in the list.
  • additional information about the terminal with the respective terminal identification is stored in the list for a respective terrninal identification.
  • This additional information can be designed differently and include, for example, a photograph of the terminal, address data of the terminal, a logo of the point of sale, where the terminal is used for cashless payment, and the like.
  • the list described above is transmitted to the data carrier by a central location and / or updated by the central location in the data carrier, wherein the central office manages the list and, for example, represents the operator of the corresponding transaction application.
  • the list can be e.g. be transmitted to the portable data carrier at regular intervals or when changes or additions occur in the list. There is also the possibility that the portable data carrier itself requests the list from the central office.
  • the measures taken by the portable data carrier to protect the transaction can be configured as desired. If appropriate, the measure may also include the termination of the transaction. However, in a particularly preferred embodiment, the portable data carrier as a measure causes the issuance of a prompt for a user to manually confirm the transaction, using only manual Confirmation by the user completes the transaction. If such a manual confirmation does not occur, the transaction is not executed, so that, for example, a corresponding payment transaction is ultimately not triggered.
  • the request for manual confirmation of the transaction can in particular be issued via a mobile device to or in which the portable data carrier is arranged.
  • the portable data carrier can be used, for example, in the mobile device and is connected there via corresponding contacts with the mobile device.
  • the issuance of the request for manually confirming the transaction preferably takes place visually via a corresponding display on the mobile device, wherein the mobile device can be, for example, a mobile radio device and in particular a mobile telephone.
  • Transaction issued the additional information to the terminal.
  • the user can then verify whether the terminal on which the transaction is performed matches the terminal according to the terminal identification from the list. If the additional information shows, for example, a photograph of the terminal, the user can verify whether the terminal to which he is located has an overhang with the terminal of the photograph. Likewise, any displayed address information can be compared with the actual location of the terminal or displayed logos can be checked.
  • SIM Subscriber Identity Module
  • USIM Universal Subscriber Identity Module
  • the SIM or USIM module is used in a corresponding mobile device to allow communication of the device via a mobile network.
  • mobile devices can be used in addition to their actual function and to carry out appropriate transactions. It must only be ensured that a corresponding Kornmunikation between the mobile device and a corresponding terminal is possible.
  • suitable communication interfaces especially in the form of NFC interfaces.
  • the determined spatial position of the data carrier can optionally be determined by the data carrier itself or by a mobile device, on or in which the portable data carrier is arranged. If necessary, this mobile device can again be a mobile radio device which determines the location of the mobile cell in which it resides. This spatial position can then be compared with a corresponding spatial position of the terminal, which is stored in particular in the list described above as an identification of a corresponding mobile radio cell.
  • the position determination can alternatively or additionally also be carried out by a mobile GPS-capable device which determines its GPS position, which in turn is preferably compared with a corresponding GPS position in the list described above. Of course, instead of a GPS position, a position in another position a position in the planned Galileo system.
  • the spatial position can be determined, for example via a radio, which determines its position in a local radio network. This position is preferably again compared with a corresponding position from the list described above. If appropriate, one or more of the positioning functions described above can also be implemented in a single device, ie, for example, in a mobile radio device with GPS antenna and a radio module for a local radio network.
  • the invention further comprises a portable data carrier, in particular a chip card, for use in this method.
  • the portable data carrier is designed such that it can perform a comparison of a location position of a terminal with a spatial position of the portable data carrier, wherein in case that a deviation between the two positions exceeds a predetermined threshold, the portable data carrier a measure for protection the transaction.
  • the invention further relates to a mobile device, in particular a mobile device, which comprises the portable data carrier just described and which is usable in the above-described inventive method for carrying out a transaction.
  • the mobile device further comprises a communication interface, via which a communication between the portable data carrier and a terminal can be produced in order to transmit information to the terminal to the portable data carrier during the transmission of transaction data, from which the portable data carrier results in a spatial position of the terminal.
  • the mobile device contains a means for determining the spatial position. on the portable data medium to which the portable data carrier has access.
  • the portable data carrier compares the location position of the terminal with its location position during the execution of a transaction and, in the event that a deviation between the two location positions exceeds a predetermined threshold, initiates a measure to protect the transaction.
  • One or more of the features described above with respect to the inventive method may be part of the inventive portable data carrier or the mobile device according to the invention, as far as these features relate to properties of the portable data carrier or the mobile terminal.
  • FIG. 1 shows a schematic representation of the implementation of a cashless payment transaction based on a variant of the method according to the invention.
  • a user intends, by means of his mobile telephone 2 with SIM or USIM 1 inserted therein, to carry out a mobile function at a remote station 3 in the form of a payment terminal.
  • the transaction is carried out by means of a communication between the mobile phone 2 or the SIM / USIM 1 and the terminal 3 via a contactless NFC interface, based on NFC communication (also referred to as near field communication) by means of high-frequency magnetic alternating fields data be transmitted.
  • NFC communication also referred to as near field communication
  • the mobile phone 2 and the remote station 3 include corresponding NFC modules, wherein the contactless data exchange via these modules in Fig. 1 with the double arrow K is indicated.
  • the mobile telephone 2 is within range of a base station 4 of a mobile radio network in which the user can communicate with other subscribers via his telephone.
  • the double arrow K 'in FIG. 1 indicates the communication in the mobile radio network, wherein in the embodiment of the method according to the invention described below, however, it is not necessary for a mobile radio connection to be set up via the mobile telephone.
  • a user can carry out non-cash payment transactions via the terminal 3 by means of his mobile telephone 2, the mobile telephone being prepared in a manner known per se for performing contactless payment transaction applications.
  • a security element with a corresponding payment application is provided in the mobile phone, wherein the payment application may be included for example in the controller of the SIM / USIM or may be housed as an additional security chip in the SIM / USIM.
  • the payment application may be included for example in the controller of the SIM / USIM or may be housed as an additional security chip in the SIM / USIM.
  • a list L is stored in the SIM / USIM 1, which is indicated in the lower part of Fig. 1.
  • This list contains five columns Cl, C2,..., C5, where in column C4 an identification TID is stored by a plurality of terminals.
  • IFD Intelligent Field Device
  • the column Cl of the list L contains as location position the identity ZID of that mobile radio cell in which a respective terminal is located.
  • the column C2 contains as local position WID the local coordinates of a respective terminal determined via a local WLAN network, provided that the terminal is arranged within a WLAN network. Further, the list in column C3 contains the corresponding GPS coordinates GID of a respective terminal. If necessary, it is possible that also determined in another way
  • the list L further contains in the column C5 additional information ZIN characterizing the terminal in the corresponding line, for example a photograph of the terminal, a logo of the shop in which the terminal is located, the address of the terminal location and optionally other terminal-related information. This information can be output on the mobile phone, in particular on the display, as will be described in more detail below.
  • a user positions his mobile phone 2 within reach of the terminal 3, wherein subsequently based on an NFC Kornmunikation over a data exchange the transaction is carried out.
  • the Terrrdnal identification of the terminal 3 is transmitted to the mobile phone 2.
  • the received terminal identification is retrieved from the column C4 in the list L, so that in the mobile phone corresponding location positions based on a cell identity ZID and / or based on WLAN coordinates WID and / or GPS coordinates GID are available.
  • This location information is compared with the current location position of the mobile phone 2, this position being determined by the telephone itself via suitable means. The determined by the phone location position is indicated in Fig.
  • the most easily determined location position represents the identity of the mobile radio cell of the mobile radio operator in which the telephone is currently located. This information is immediately available to the SIM / USIM. This information can then be compared with the corresponding entry of the terminal 3 from the column Cl in the list L.
  • the mobile telephone 2 may also determine its position from information of a WLAN network, in which case the location information is compared with the corresponding entry of the terminal 3 in the column C2 of the list L. If the mobile phone 2 has a GPS antenna, it can also determine its GPS location position, which is then compared with the corresponding entry of the terminal 3 in the column C3 of the list L. In the embodiment described here, a comparison of one or more location positions determined via the mobile telephone with corresponding entries in the list L is thus carried out in the SIM / USIM.
  • the SIM / USIM preferably evaluates all available location positions, so that, for example, even with a non-available Mobile network depending on the situation, a location comparison, for example, based on GPS coordinates, can be performed.
  • the user Via the prompt issued on the display of the telephone 2, the user is asked to confirm the transaction with the associated payment manually, for example by entering a special key or a secret code. Only upon confirmation of the transaction will this be completed. This provides efficient protection against unauthorized relay attacks.
  • the additional information ZID already described above also becomes issued from the list L, with which the user can easily verify whether the terminal he uses also corresponds to the terminal, which is stored in the list of SIM / USIM.
  • the logo of the store, a photograph of the terminal or an address of the terminal site can be output, from which the user can infer whether the terminal he uses corresponds to the terminal according to the additional information.
  • the SIM / USIM sends a request for updating the list L via the mobile radio network at regular intervals or after each execution of a transaction to a central point which manages the contents of the list.
  • the central office can represent the network operator of the mobile network and / or the operator of the corresponding payment application.
  • the central office then sends a current list to the SIM / USIM. This ensures that the list is always up-to-date. In order to reduce the amount of data to be transmitted, only the changes that have been made since the last request of the SIM / USIM to the central point in the list can be transmitted from the central point.
  • the central office can transmit an up-to-date list or changes in the list to the mobile phone on its own.
  • Such a centralized transmission of the list is in particular necessary if the mobile operator renumbered the identities of its mobile cells, since this changes the corresponding location positions in the list. If necessary, there is also the possibility that the mobile phone does not receive the list with the renumbering, but is only informed by the central office that a renumbering of the mobile radio cells has been carried out. If the corresponding algorithm for renumbering is known in the mobile telephone, the telephone can then autonomously update the cell identities in its list.
  • the terminal identifications of all terminals to be integrated with the respective cell identities of the mobile radio network can be linked. A list based on this link is then stored in the SIM / USIM so that the oppositions of all terminals can be verified by the SIM / USIM via the corresponding cell identities.
  • the SIM / USIM or the mobile telephone can send the currently determined coordinates of the mobile telephone (for example determined by GPS) to a central database, the coordinates preferably being transmitted via a mobile radio connection. These coordinates are then stored as the position of the corresponding terminal.
  • the method according to the invention described above has a number of advantages.
  • it enables simple and efficient protection against unauthorized relay attacks, whereby an existing infrastructure can be used.
  • no background system has to be used to check the location of the terminal, so that no sensitive transaction data has to be sent to new locations, which can be problematic from a data protection point of view.
  • the method also allows location determination regardless of the availability of a cellular network, for example, when a location check is performed based on GPS coordinates.

Landscapes

  • Business, Economics & Management (AREA)
  • Engineering & Computer Science (AREA)
  • Accounting & Taxation (AREA)
  • General Business, Economics & Management (AREA)
  • Strategic Management (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Computer Security & Cryptography (AREA)
  • Finance (AREA)
  • Telephone Function (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Telephonic Communication Services (AREA)

Abstract

L'invention concerne un procédé d'exécution d'une transaction entre un support de données portatif (1), en particulier une carte à puce, et un terminal (3). Selon l'invention, dans la transmission de données de transaction par une communication (K) entre le support de données portatif (1) et le terminal (3), une information (TID) sur le terminal (3) est envoyée au support de données portatif (1), le support de données portatif (1) déterminant à partir de l'information une position locale (ZID, WID, GID) du terminal (3). Par ailleurs, une position locale (OP) du support de données portatif (1) est déterminée, à laquelle le support de données portatif (1) peut accéder. Enfin, le support de données portatif (1) compare la position locale (ZID, WID, GID) du terminal avec une position locale (OP) et commande une mesure de protection de la transaction si l'écart entre les deux positions locales (ZID, WID, GID ; OP) dépasse un certain seuil.
EP11700614A 2010-01-20 2011-01-13 Procédé d'exécution d'une transaction entre un support de données portatif et un terminal Ceased EP2526441A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE102010005051 2010-01-20
PCT/EP2011/000133 WO2011088970A1 (fr) 2010-01-20 2011-01-13 Procédé d'exécution d'une transaction entre un support de données portatif et un terminal

Publications (1)

Publication Number Publication Date
EP2526441A1 true EP2526441A1 (fr) 2012-11-28

Family

ID=43769310

Family Applications (1)

Application Number Title Priority Date Filing Date
EP11700614A Ceased EP2526441A1 (fr) 2010-01-20 2011-01-13 Procédé d'exécution d'une transaction entre un support de données portatif et un terminal

Country Status (5)

Country Link
US (1) US10074087B2 (fr)
EP (1) EP2526441A1 (fr)
CN (1) CN102725771A (fr)
DE (1) DE102011008500A1 (fr)
WO (1) WO2011088970A1 (fr)

Families Citing this family (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR101392047B1 (ko) * 2012-04-05 2014-05-07 주식회사 엘지씨엔에스 사용자 검증 방법, 이를 수행하는 사용자 검증 서버 및 모바일 단말
US20130268378A1 (en) * 2012-04-06 2013-10-10 Microsoft Corporation Transaction validation between a mobile communication device and a terminal using location data
US9047602B2 (en) 2012-06-08 2015-06-02 GM Global Technology Operations LLC In-vehicle mobile transactions
CN104937900B (zh) * 2013-01-25 2018-11-06 联邦印刷有限公司 定位系统、智能卡以及给智能卡提供位置数据的方法
US20150149357A1 (en) * 2013-11-22 2015-05-28 James Ioannidis Mobile payment hotspot
US9386181B2 (en) * 2014-03-31 2016-07-05 Google Inc. Device proximity detection
US9686642B2 (en) * 2015-03-06 2017-06-20 At&T Intellectual Property I, L.P. Method and apparatus for providing location information for a wireless communication device
US11087304B2 (en) * 2016-03-14 2021-08-10 Jpmorgan Chase Bank, N.A. Systems and methods for device authentication

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2009148387A1 (fr) * 2008-06-06 2009-12-10 Telefonaktiebolaget L M Ericsson (Publ) Services de carte sécurisés

Family Cites Families (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7376431B2 (en) * 2002-02-05 2008-05-20 Niedermeyer Brian J Location based fraud reduction system and method
KR20030043886A (ko) 2003-05-14 2003-06-02 김세권 신용카드와 휴대폰의 소유 상관관계를 이용한 신용카드승인방법
US7357309B2 (en) * 2004-01-16 2008-04-15 Telefonaktiebolaget Lm Ericsson (Publ) EMV transactions in mobile terminals
ES2714179T3 (es) * 2005-03-07 2019-05-27 Nokia Technologies Oy Método y dispositivo de terminal móvil que incluye módulo de tarjeta inteligente y medios de comunicaciones de campo cercano
US20090102712A1 (en) * 2005-04-26 2009-04-23 Guy Heffez Method and system for monitoring electronic purchases and cash-withdrawals
US8656458B2 (en) * 2005-08-25 2014-02-18 Guy Heffez Method and system for authenticating internet user identity
US7503489B2 (en) 2005-04-26 2009-03-17 Bpriv, Llc Method and system for monitoring electronic purchases and cash-withdrawals
US20070249288A1 (en) * 2006-04-14 2007-10-25 Kamran Moallemi Distance-based security
US8135952B2 (en) * 2006-10-10 2012-03-13 Recursion Ventures LLC Method and system for secure position determination
US7669760B1 (en) * 2006-10-31 2010-03-02 United Services Automobile Association (Usaa) GPS validation for transactions
US20080109375A1 (en) * 2006-11-08 2008-05-08 Ricci Christopher P Position-enhanced wireless transaction security
US20090012898A1 (en) 2007-07-02 2009-01-08 Lucent Technologies Inc. Location based credit card fraud prevention
US8041338B2 (en) * 2007-09-10 2011-10-18 Microsoft Corporation Mobile wallet and digital payment
US20090103730A1 (en) * 2007-10-19 2009-04-23 Mastercard International Incorporated Apparatus and method for using a device conforming to a payment standard for access control and/or secure data storage
DE102008004383A1 (de) 2008-01-15 2009-07-16 Giesecke & Devrient Gmbh Verfahren und System zum Schutz einer Transaktion
US20090254476A1 (en) 2008-04-04 2009-10-08 Quickreceipt Solutions Incorporated Method and system for managing personal and financial information
GB201310084D0 (en) * 2013-06-06 2013-07-17 Mastercard International Inc Improvements to electronic authentication systems

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2009148387A1 (fr) * 2008-06-06 2009-12-10 Telefonaktiebolaget L M Ericsson (Publ) Services de carte sécurisés

Also Published As

Publication number Publication date
WO2011088970A1 (fr) 2011-07-28
US10074087B2 (en) 2018-09-11
CN102725771A (zh) 2012-10-10
DE102011008500A1 (de) 2011-07-21
US20120290481A1 (en) 2012-11-15

Similar Documents

Publication Publication Date Title
WO2011088970A1 (fr) Procédé d'exécution d'une transaction entre un support de données portatif et un terminal
EP2235978B1 (fr) Procédé pour gérer l'autorisation d'accès relative à des téléphones mobiles avec et sans carte sim
AT506619B1 (de) Verfahren zur zeitweisen personalisierung einer kommunikationseinrichtung
WO2008046575A1 (fr) Procédé pour l'exécution d'une application à l'aide d'un support de données portable
DE102014219502A1 (de) System und Verfahren für einen beschränkten Zugang zu einem Fahrzeug
AT505078B9 (de) Verfahren und system zum auslesen von daten aus einem speicher eines fernen geräts durch einen server
EP1802148B1 (fr) Procédé et dispositifs pour l'autorisation des modules d'un appareil radiotéléphonique mobile
EP2673731A1 (fr) Procédé de programmation d'une puce pour terminal mobile
EP1317824A2 (fr) Procede et systeme de controle d'acces
EP1326216A1 (fr) Procédé et dispositif pour paiements électroniques avec des dispositifs de communication portables
EP2584539B1 (fr) Procédé de configuration d'une serrure électromécanique
WO2014040724A1 (fr) Gestion de contenu pour station mobile dotée d'un environnement d'exécution
AT504633B1 (de) Verfahren zur authentifizierung eines mobilfunkendgerätes
EP3085132B1 (fr) Procédé et dispositifs pour mettre à disposition une souscription pour la communication via un réseau de communication mobile
EP1768316B1 (fr) Déblocage d'une carte mobile
EP3304804A1 (fr) Procédé de fourniture d'un code d'identification personnel d'un module de sécurité
EP2768199B1 (fr) Procédé de transmission, via un réseau de télécommunications, d'une information d'autorisation ou d'une autorisation associée à un terminal de télécommunication. terminal de télécommunication, système. programme informatique et produit de programme informatique
DE102005045887A1 (de) Entsperren von Mobilfunkkarten
EP1571591B1 (fr) Utilisation d'étiquettes RFID pour accéder à une page hypertexte depuis un appareil mobile
DE102014209191A1 (de) System und Verfahren zum Herunterladen von auf einem Tachografen gespeicherten Daten
DE10029755B4 (de) Verfahren zur Betriebssteuerung in einem Mobiltelefonnetz
DE102011112855A1 (de) Verfahren zur elektronischen Durchführung einer Zahlungstransaktion
WO2020088915A1 (fr) Sécurisation d'une communication multi-standardisée
EP3361436A1 (fr) Procédé d'autorisation d'une transaction
DE102007004486A1 (de) Verfahren zur Durchführung einer Transaktion

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20120820

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

DAX Request for extension of the european patent (deleted)
17Q First examination report despatched

Effective date: 20150911

REG Reference to a national code

Ref country code: DE

Ref legal event code: R003

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION HAS BEEN REFUSED

18R Application refused

Effective date: 20161213