TR201905756A2 - Yazılım tabanlı POSlara (SoftPOS) PIN girişi, saklanışı ve iletimi için yazılımsal güvenlik sistemi ve yöntemi. - Google Patents

Yazılım tabanlı POSlara (SoftPOS) PIN girişi, saklanışı ve iletimi için yazılımsal güvenlik sistemi ve yöntemi. Download PDF

Info

Publication number
TR201905756A2
TR201905756A2 TR2019/05756A TR201905756A TR201905756A2 TR 201905756 A2 TR201905756 A2 TR 201905756A2 TR 2019/05756 A TR2019/05756 A TR 2019/05756A TR 201905756 A TR201905756 A TR 201905756A TR 201905756 A2 TR201905756 A2 TR 201905756A2
Authority
TR
Turkey
Prior art keywords
pin
pos
software
application
secure
Prior art date
Application number
TR2019/05756A
Other languages
English (en)
Inventor
Akgün Ahmet
Yassibaş Hasan
Original Assignee
Kartek Kart Ve Bilisim Teknolojileri Ticaret Anonim Sirketi
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Kartek Kart Ve Bilisim Teknolojileri Ticaret Anonim Sirketi filed Critical Kartek Kart Ve Bilisim Teknolojileri Ticaret Anonim Sirketi
Priority to TR2019/05756A priority Critical patent/TR201905756A2/tr
Publication of TR201905756A2 publication Critical patent/TR201905756A2/tr
Priority to PCT/TR2020/050080 priority patent/WO2020214113A1/en
Priority to EP20791042.3A priority patent/EP3956843A4/en
Priority to US17/429,685 priority patent/US20220108297A1/en

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/322—Aspects of commerce using mobile devices [M-devices]
    • G06Q20/3227—Aspects of commerce using mobile devices [M-devices] using secure elements embedded in M-devices
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/82—Protecting input, output or interconnection devices
    • G06F21/84—Protecting input, output or interconnection devices output devices, e.g. displays or monitors
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/08—Payment architectures
    • G06Q20/20—Point-of-sale [POS] network systems
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/322—Aspects of commerce using mobile devices [M-devices]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G06Q20/4012—Verifying personal identification numbers [PIN]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G06Q20/4014—Identity check for transactions
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/0873—Details of the card reader
    • G07F7/088—Details of the card reader the card reader being part of the point of sale [POS] terminal or electronic cash register [ECR] itself
    • G07F7/0886—Details of the card reader the card reader being part of the point of sale [POS] terminal or electronic cash register [ECR] itself the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
    • G07F7/1025—Identification of user by a PIN code

Landscapes

  • Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • General Business, Economics & Management (AREA)
  • Strategic Management (AREA)
  • Computer Security & Cryptography (AREA)
  • Finance (AREA)
  • Computer Hardware Design (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Cash Registers Or Receiving Machines (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

POS yazılımları vasıtasıyla ödeme alan mobil cihazların (1) limit üzeri işlemlerde kart sahibini doğrulamak için güvenli bir şekilde PIN girişi sağlayan sistem olup, özelliği; Mobil cihaz (1) içerisinde bulunan, ödemenin alınmasını sağlayan ve sunucu uygulaması (2) tarafından yönetilen POS uygulaması (4), POS uygulamasının (4) kullanıcı arayüzü, deneyimi ve iş akışlarını yöneten L3 iş katmanı (8), POS uygulaması (4) için güvenlik, anahtar yaratımı ve kriptografik algoritmaların çalışmasını yazılımsal olarak sağlayan POS belleği (6), POS bellek (6) vasıtasıyla ödeme işleminin güvenli şekilde yapılmasını sağlayan POS güvenlik katmanı (10), Güvenli PIN girişi için kullanıcı arayüzü sunan ve güvenli bir şekilde PIN girişini POS uygulamasına (4) ileten PIN uygulaması (3), PIN için güvenlik, anahtar yaratımı ve kriptografik algoritmaların çalışmasını yazılımsal olarak sağlayan PIN belleği (5), PIN bellek (5) vasıtasıyla PIN?in güvenli şekilde alımı ve iletimini sağlayan PIN güvenlik katmanı (7), içermesidir. (Şekil 1)
TR2019/05756A 2019-04-18 2019-04-18 Yazılım tabanlı POSlara (SoftPOS) PIN girişi, saklanışı ve iletimi için yazılımsal güvenlik sistemi ve yöntemi. TR201905756A2 (tr)

Priority Applications (4)

Application Number Priority Date Filing Date Title
TR2019/05756A TR201905756A2 (tr) 2019-04-18 2019-04-18 Yazılım tabanlı POSlara (SoftPOS) PIN girişi, saklanışı ve iletimi için yazılımsal güvenlik sistemi ve yöntemi.
PCT/TR2020/050080 WO2020214113A1 (en) 2019-04-18 2020-02-06 Software security system and method for pin entry, storage and transmission to software-based pos (softpos)
EP20791042.3A EP3956843A4 (en) 2019-04-18 2020-02-06 SOFTWARE SECURITY SYSTEM AND METHOD FOR ENTRY, STORAGE AND TRANSMISSION OF PIN CODE TO SOFTWARE-BASED POS (SOFTPOS)
US17/429,685 US20220108297A1 (en) 2019-04-18 2020-02-06 Software security system and method for pin entry, storage and transmission to software-based pos (softpos)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
TR2019/05756A TR201905756A2 (tr) 2019-04-18 2019-04-18 Yazılım tabanlı POSlara (SoftPOS) PIN girişi, saklanışı ve iletimi için yazılımsal güvenlik sistemi ve yöntemi.

Publications (1)

Publication Number Publication Date
TR201905756A2 true TR201905756A2 (tr) 2019-05-21

Family

ID=67955120

Family Applications (1)

Application Number Title Priority Date Filing Date
TR2019/05756A TR201905756A2 (tr) 2019-04-18 2019-04-18 Yazılım tabanlı POSlara (SoftPOS) PIN girişi, saklanışı ve iletimi için yazılımsal güvenlik sistemi ve yöntemi.

Country Status (4)

Country Link
US (1) US20220108297A1 (tr)
EP (1) EP3956843A4 (tr)
TR (1) TR201905756A2 (tr)
WO (1) WO2020214113A1 (tr)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP4035105A4 (en) * 2020-05-13 2022-12-21 Yazara Payment Solutions Inc. SECURE MOBILE PAYMENT ACCEPTABLE AS CONTACTLESS PAYMENT FOR HIGH STORAGE DEVICES AND BACK OFFICE APPLICATION SOLUTION

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2024507067A (ja) * 2021-02-23 2024-02-16 ブロック， インコーポレイテッド 組み込みカード・リーダ・セキュリティ
US11694178B2 (en) 2021-02-23 2023-07-04 Block, Inc. Embedded card reader security
US11640595B2 (en) 2021-02-23 2023-05-02 Block, Inc. Embedded card reader security

Family Cites Families (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20020123972A1 (en) * 2001-02-02 2002-09-05 Hodgson Robert B. Apparatus for and method of secure ATM debit card and credit card payment transactions via the internet
US20030002667A1 (en) * 2001-06-29 2003-01-02 Dominique Gougeon Flexible prompt table arrangement for a PIN entery device
US8352323B2 (en) * 2007-11-30 2013-01-08 Blaze Mobile, Inc. Conducting an online payment transaction using an NFC enabled mobile communication device
US8666377B2 (en) * 2010-03-03 2014-03-04 Htc Corporation Method, system and computer-readable medium for synchronizing spot information
US10339525B2 (en) * 2011-10-27 2019-07-02 Boom! Payments, Inc. Confirming local marketplace transaction consummation for online payment consummation
GB201212878D0 (en) * 2012-07-20 2012-09-05 Pike Justin Authentication method and system
CN111160902B (zh) * 2013-12-02 2023-06-23 万事达卡国际股份有限公司 用于向不带有安全元件的移动设备安全传送远程通知服务消息的方法及系统
AU2017322317B2 (en) * 2016-09-08 2020-07-30 Index Systems, Inc. Managed EMV kernel for faster processing
US11429970B2 (en) * 2016-09-08 2022-08-30 Stripe, Inc. Managed integrated payment environment
US10140612B1 (en) * 2017-12-15 2018-11-27 Clover Network, Inc. POS system with white box encryption key sharing

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP4035105A4 (en) * 2020-05-13 2022-12-21 Yazara Payment Solutions Inc. SECURE MOBILE PAYMENT ACCEPTABLE AS CONTACTLESS PAYMENT FOR HIGH STORAGE DEVICES AND BACK OFFICE APPLICATION SOLUTION

Also Published As

Publication number Publication date
US20220108297A1 (en) 2022-04-07
WO2020214113A1 (en) 2020-10-22
EP3956843A1 (en) 2022-02-23
EP3956843A4 (en) 2023-01-25

Similar Documents

Publication Publication Date Title
TR201905756A2 (tr) Yazılım tabanlı POSlara (SoftPOS) PIN girişi, saklanışı ve iletimi için yazılımsal güvenlik sistemi ve yöntemi.
CN103701609B (zh) 一种服务器与操作终端双向认证的方法及系统
CN102034323B (zh) 公交一卡通业务系统及其实现方法和业务平台及pos机
CN109493038B (zh) 一种运用于金融行业具备强制公证功能的前置系统及方法
MX2013000279A (es) Sistema para pago seguro sobre una red de comunicacion inalambrica.
CN102081769A (zh) 支付数据处理方法、系统、支付终端及支付服务器
CN105765951A (zh) 用于管理通信的系统、方法和计算机程序产品
NZ720688A (en) Method and system for secure authentication of user and mobile device without secure elements
WO2014141103A3 (en) Two-way, token-based validation for nfc-enabled transactions
NZ721223A (en) Method and system for generating an advanced storage key in a mobile device without secure elements
CN102938120A (zh) Ims交易支付系统
CN103530957A (zh) 自助存取款设备进行无卡取款交易的方法及系统
CN101916476A (zh) 一种基于sd加密卡与近距离无线通信技术相结合的移动数据传输方法
CN113034118B (zh) 业务审核方法、系统、可读存储介质和计算机程序产品
CN101118627A (zh) 移动电子商务支付交易系统及其安全认证方法
CN105931037A (zh) 一种电子现金圈存方法、装置及系统
CN105704092A (zh) 用户身份认证方法、装置和系统
CN103530768A (zh) 移动通信支付系统及其用于费用支付的方法
CN104318440A (zh) 一种ic卡
CN104102934B (zh) 一种便携式ic卡读写装置、系统及方法
TW201725543A (zh) 跨應用程式之交易方法
Ubaya Design of Prototype Payment Application System With Near Field Communication (NFC) Technology based on Android
CN102542445B (zh) 一种语音支付系统
EP4239554A3 (en) System, method, and computer program product for exchanging transaction data
CN204856595U (zh) 一种基于蓝牙的移动支付系统