IL245965B - Method and system for secure authentication of users and mobile devices without secure components - Google Patents

Method and system for secure authentication of users and mobile devices without secure components

Info

Publication number
IL245965B
IL245965B IL245965A IL24596516A IL245965B IL 245965 B IL245965 B IL 245965B IL 245965 A IL245965 A IL 245965A IL 24596516 A IL24596516 A IL 24596516A IL 245965 B IL245965 B IL 245965B
Authority
IL
Israel
Prior art keywords
secure
user
mobile device
elements
authentication
Prior art date
Application number
IL245965A
Other languages
English (en)
Hebrew (he)
Other versions
IL245965A0 (en
Inventor
Mehdi Colligne
Patrik Smets
Axel Emile Jean Charles Cateland
Original Assignee
Mastercard Int Incoporated
Mehdi Colligne
Patrik Smets
Axel Emile Jean Charles Cateland
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Mastercard Int Incoporated, Mehdi Colligne, Patrik Smets, Axel Emile Jean Charles Cateland filed Critical Mastercard Int Incoporated
Publication of IL245965A0 publication Critical patent/IL245965A0/en
Publication of IL245965B publication Critical patent/IL245965B/en

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/08—Payment architectures
    • G06Q20/20—Point-of-sale [POS] network systems
    • G06Q20/204—Point-of-sale [POS] network systems comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/322—Aspects of commerce using mobile devices [M-devices]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/327—Short range or proximity payments by means of M-devices
    • G06Q20/3274—Short range or proximity payments by means of M-devices using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3823—Payment protocols; Details thereof insuring higher security of transaction combining multiple encryption tools for a transaction
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3829—Payment protocols; Details thereof insuring higher security of transaction involving key management

Landscapes

  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Finance (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Economics (AREA)
  • Development Economics (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Computer And Data Communications (AREA)
IL245965A 2013-12-02 2016-06-01 Method and system for secure authentication of users and mobile devices without secure components IL245965B (en)

Applications Claiming Priority (6)

Application Number Priority Date Filing Date Title
US201361910819P 2013-12-02 2013-12-02
US201461951842P 2014-03-12 2014-03-12
US201461955716P 2014-03-19 2014-03-19
US201461979132P 2014-04-14 2014-04-14
US201461980784P 2014-04-17 2014-04-17
PCT/US2014/067992 WO2015084755A1 (en) 2013-12-02 2014-12-02 Method and system for secure authentication of user and mobile device without secure elements

Publications (2)

Publication Number Publication Date
IL245965A0 IL245965A0 (en) 2016-07-31
IL245965B true IL245965B (en) 2022-05-01

Family

ID=53274011

Family Applications (1)

Application Number Title Priority Date Filing Date
IL245965A IL245965B (en) 2013-12-02 2016-06-01 Method and system for secure authentication of users and mobile devices without secure components

Country Status (16)

Country Link
EP (1) EP3077972A4 (es)
JP (2) JP6353537B2 (es)
KR (2) KR102025816B1 (es)
CN (1) CN106062799B (es)
AU (1) AU2014357381B2 (es)
BR (1) BR112016012527A2 (es)
CA (1) CA2932346C (es)
CL (1) CL2016001353A1 (es)
HK (1) HK1227146A1 (es)
IL (1) IL245965B (es)
MX (1) MX361793B (es)
NZ (1) NZ720688A (es)
RU (1) RU2663319C2 (es)
SG (1) SG10201800179UA (es)
UA (1) UA115500C2 (es)
WO (1) WO2015084755A1 (es)

Families Citing this family (24)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2015084797A1 (en) 2013-12-02 2015-06-11 Mastercard International Incorporated Method and system for secure tranmission of remote notification service messages to mobile devices without secure elements
AU2014391256B2 (en) * 2013-12-02 2017-07-13 Mastercard International Incorporated Method and system for generating an advanced storage key in a mobile device without secure elements
US10614442B2 (en) 2014-12-03 2020-04-07 Mastercard International Incorporated System and method of facilitating cash transactions at an ATM system without an ATM card using mobile
US10248947B2 (en) * 2015-06-29 2019-04-02 Oberthur Technologies of America Corp. Method of generating a bank transaction request for a mobile terminal having a secure module
US11120436B2 (en) * 2015-07-17 2021-09-14 Mastercard International Incorporated Authentication system and method for server-based payments
SG10201508945YA (en) 2015-10-29 2017-05-30 Mastercard International Inc Method and system for cardless use of an automated teller machine (atm)
US10496982B2 (en) 2016-02-03 2019-12-03 Accenture Global Solutions Limited Secure contactless card emulation
EP4177810A1 (en) * 2016-04-18 2023-05-10 Bancontact Payconiq Company Method and device for authorizing mobile transactions
WO2017184840A1 (en) 2016-04-21 2017-10-26 Mastercard International Incorporated Method and system for contactless transactions without user credentials
CN109716374B (zh) * 2016-09-04 2023-12-29 万事达卡国际公司 用于经由移动设备进行无卡atm交易的方法和系统
EP3340094B1 (en) * 2016-12-22 2021-04-28 Mastercard International Incorporated Method for renewal of cryptographic whiteboxes under binding of new public key and old identifier
EP3571652B1 (en) * 2017-01-23 2024-04-17 Mastercard International Incorporated Method and system for authentication via a trusted execution environment
EP3364329B1 (en) 2017-02-21 2023-07-26 Mastercard International Incorporated Security architecture for device applications
EP3364352A1 (en) 2017-02-21 2018-08-22 Mastercard International Incorporated Determining legitimate conditions at a computing device
EP3364363A1 (en) 2017-02-21 2018-08-22 Mastercard International Incorporated Transaction cryptogram
CN107274183B (zh) * 2017-03-21 2020-05-22 中国银联股份有限公司 交易验证方法及系统
US11468444B2 (en) * 2017-12-18 2022-10-11 Mastercard International Incorporated Method and system for bypassing merchant systems to increase data security in conveyance of credentials
KR101972599B1 (ko) * 2018-06-19 2019-04-25 김승훈 세션키 처리장치, 처리 방법 및 이를 위한 프로그램을 기록한 컴퓨터 판독 가능한 기록매체
US10581611B1 (en) * 2018-10-02 2020-03-03 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
EP3640878B1 (fr) * 2018-10-17 2023-06-21 Swatch Ag Procede et systeme d'activation d'un objet portable de paiement sans contact
US10984416B2 (en) * 2019-03-20 2021-04-20 Capital One Services, Llc NFC mobile currency transfer
US11803827B2 (en) 2019-11-01 2023-10-31 Mastercard International Incorporated Method and system for enabling cardless transactions at an ATM for any institutional entity
CN111901109B (zh) * 2020-08-04 2022-10-04 华人运通(上海)云计算科技有限公司 基于白盒的通信方法、装置、设备和存储介质
CN113421084B (zh) * 2021-05-26 2023-03-24 歌尔股份有限公司 公交卡处理方法、装置、设备及可读存储介质

Family Cites Families (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP4183823B2 (ja) * 1999-02-10 2008-11-19 富士通株式会社 データ照合装置、データ照合システムおよびデータ照合プログラム記憶媒体
US7249093B1 (en) * 1999-09-07 2007-07-24 Rysix Holdings, Llc Method of and system for making purchases over a computer network
JP2004086599A (ja) * 2002-08-27 2004-03-18 Toppan Printing Co Ltd クレジットカード情報管理装置および管理方法並びにそのプログラム
US7873572B2 (en) * 2004-02-26 2011-01-18 Reardon David C Financial transaction system with integrated electronic messaging, control of marketing data, and user defined charges for receiving messages
EP2011301B1 (en) * 2006-04-10 2011-06-22 Trust Integration Services B.V. Arrangement of and method for secure data transmission.
US8713655B2 (en) * 2008-04-21 2014-04-29 Indian Institute Of Technology Method and system for using personal devices for authentication and service access at service outlets
SG187832A1 (en) * 2010-08-12 2013-03-28 Mastercard International Inc Multi-commerce channel wallet for authenticated transactions
US8746553B2 (en) * 2010-09-27 2014-06-10 Mastercard International Incorporated Purchase Payment device updates using an authentication process
KR20120110926A (ko) * 2011-03-30 2012-10-10 주식회사 비즈모델라인 프로그램 식별을 통한 카드 결제 방법 및 시스템과 이를 위한 스마트폰
WO2012170895A1 (en) * 2011-06-09 2012-12-13 Yeager C Douglas Systems and methods for authorizing a transaction
US10515359B2 (en) 2012-04-02 2019-12-24 Mastercard International Incorporated Systems and methods for processing mobile payments by provisioning credentials to mobile devices without secure elements
JP5795453B2 (ja) * 2012-04-18 2015-10-14 グーグル・インコーポレーテッド セキュア要素を用いない支払取引処理

Also Published As

Publication number Publication date
AU2014357381A1 (en) 2016-06-16
HK1227146A1 (zh) 2017-10-13
RU2663319C2 (ru) 2018-08-03
UA115500C2 (uk) 2017-11-10
IL245965A0 (en) 2016-07-31
KR101809221B1 (ko) 2017-12-14
NZ720688A (en) 2017-09-29
CN106062799B (zh) 2022-04-29
JP6353537B2 (ja) 2018-07-04
CL2016001353A1 (es) 2017-05-12
EP3077972A4 (en) 2017-08-09
WO2015084755A1 (en) 2015-06-11
CA2932346C (en) 2018-09-04
EP3077972A1 (en) 2016-10-12
MX2016007217A (es) 2016-12-09
SG10201800179UA (en) 2018-02-27
CN106062799A (zh) 2016-10-26
CA2932346A1 (en) 2015-06-11
KR20170139689A (ko) 2017-12-19
KR102025816B1 (ko) 2019-09-26
JP2017504871A (ja) 2017-02-09
BR112016012527A2 (pt) 2017-08-08
MX361793B (es) 2018-12-17
AU2014357381B2 (en) 2017-03-23
KR20160091418A (ko) 2016-08-02
JP2018164281A (ja) 2018-10-18

Similar Documents

Publication Publication Date Title
HK1227146A1 (zh) 用於用戶及移動設備的安全認證之方法及系統(不帶有安全元件)
HK1209935A1 (en) Identity authentication method and device
ZA201509242B (en) User authentication system and method
GB201403428D0 (en) System and method of interaction for mobile devices
EP2892026A4 (en) AUTHENTICATION DEVICE AND AUTHENTICATION METHOD
HK1187201A2 (en) An nfc-based fingerprint authentication system and method
HK1205314A1 (en) Method for identity authentication and device thereof
PT3059689T (pt) Aparelho de autenticação e método de autenticação
EP3086505A4 (en) AUTHENTICATION SYSTEM, AUTHENTICATION METHOD, AND AUTHENTICATION DEVICE
HK1217243A1 (zh) 驗證設備和方法
SG11201506832WA (en) Portable communication device and system and method therefor
EP3086504A4 (en) AUTHENTICATION SYSTEM AND AUTHENTICATION PROCESS
SG10201406879PA (en) Transaction system and method using mobile device
SG2013038278A (en) Authentication device and method
EP3086252A4 (en) AUTHENTICATION SYSTEM AND AUTHENTICATION METHOD
EP3082057A4 (en) AUTHENTICATION PROCEDURE AND AUTHENTICATION SYSTEM
EP2941032A4 (en) METHOD AND NETWORK DEVICE FOR SECURE AUTHENTICATION OF A MOBILE COMMUNICATION SYSTEM
HK1199320A1 (en) System and method of mobile identity authentication and payment
HK1205387A1 (en) Mobile device-based authentication method and authentication apparatus
GB2523924B (en) Behaviometric signature authentication system and method
GB201312127D0 (en) Authentication System and Method
GB2540280B (en) Behaviometric signature authentication system and method
GB2530695B (en) Behaviometric signature authentication system and method
HK1210539A1 (zh) 認證方法和系統