WO2013132426A1

WO2013132426A1 - Dual-interface adapter device

Info

Publication number: WO2013132426A1
Application number: PCT/IB2013/051730
Authority: WO
Inventors: Horatio Nelson HUXHAM; Alan Joseph O'REGAN
Original assignee: Fundamo (Pty) Ltd
Priority date: 2012-03-06
Filing date: 2013-03-05
Publication date: 2013-09-12
Also published as: EP2823436A4; AU2013229126A1; AU2013229126B2; EP2823436A1

Abstract

In accordance with the invention there is provided a dual-interface adapter device that enables a contact-based acceptance terminal to perform a contactless payment transaction. The dual-interface adapter device comprises a contact-based card interface which is insertable into a card slot of the contact-based acceptance terminal and is able to communicate with the contact-based acceptance terminal. The dual-interface adapter device further comprises a contactless interface, which is configured to receive power from the contact-based acceptance terminal via the contact-based card interface. The contactless interface also communicates with a contactless consumer portable payment device in a contactless manner. The adapter device further comprises an integrated circuit, which is in communication with the contact-based card interface and the contactless interface and is configured to perform cryptographic functions and translation functions.

Description

DUAL-INTERFACE ADAPTER DEVICE

CROSS-REFERENCES TO RELATED APPLICATIONS

[0001] This application claims priority to US provisional patent application number 61 /607,420 filed on 6 March 2012 and South African provisional patent application number 2012/06992 filed on 18 September 2012.

BACKGROUND OF THE INVENTION

[0002] Contactless payment transactions provide significant convenience to consumers as they allow consumers to make purchases more quickly and conveniently than in a contact-based environment. In a contactless payment transaction, a consumer presents a contactless enabled consumer portable payment device (CPPD) such as a contactless smart card or a mobile phone in close proximity with an acceptance terminal. Information is exchanged between contactless CPPD and the acceptance terminal in a wireless manner to carry out the payment transaction without requiring direct physical contact between the contactless CPPD and the acceptance terminal.

[0003] For example, in the case of a contactless smart card, a consumer can present the contactless smart card to make a purchase without removing the card from a wallet. The consumer does not have to physically provide the card to the merchant, await the merchant to properly read the card through physical means (e.g., insert the card into the acceptance terminal), receive the card back from the merchant, and place the card back into the wallet. Instead, in a contactless payment transaction, the purchase can be conducted without any physical exchange of the contactless smart card between the consumer and the merchant. This provides a significant reduction in the amount of time it takes to complete the transaction.

[0004] However, in order to carry out a contactless payment transaction, the merchant must have an acceptance terminal that is capable of communicating with the contactless CPPD in a contactless manner. Most acceptance terminals deployed at merchants today still use a contact-based interface to process payments. These legacy acceptance terminals lack a contactless interface to communicate with contactless CPPDs. While it may be relatively inexpensive to provide consumers with contactless smart cards or to enable mobile phones that already have a contactless interface to perform contactless payment transactions, replacing legacy contact-based acceptance terminals with new acceptance terminals that are capable of conducting contactless payment transactions comes at a significant cost. For this reason, wide adoption of contactless payment technology has been slow even though the technology has proven to be effective and secure.

BRIEF SUMMARY OF THE INVENTION

[0005] In accordance with the invention there is provided a dual-interface adapter device that enables a contact-based acceptance terminal to perform a contactless payment transaction, the dual-interface adapter device comprising: a contact-based card interface insertable into a card slot of the contact-based acceptance terminal to communicate with the contact-based acceptance terminal; a contactless interface, configured to receive power from the contact-based acceptance terminal via the contact-based card interface and to communicate with a contactless consumer portable payment device in a contactless manner; and, an integrated circuit, in communication with the contact-based card interface and the contactless interface and configured to perform cryptographic functions and translation functions.

[0006] Further features of the invention provide for the integrated circuit to comprise a secure crypto-processor, and for the secure crypto-processor to enable end-to-end secure communications between the contactless interface and the contact-based card interface. [0007] Still further features of the invention provide for the integrated circuit to be a hardware security module, and for the hardware security module to comprise a public processor and a private processor.

[0008] Yet further features of the invention provide for the contactless interface to include a contactless interface component which is capable of transmitting and receiving one or more wireless signals, the wireless signals being emitted from a consumer portable payment device, for the wireless signals to be near field communication (NFC), Bluetooth, Wi-Fi, and/or radio frequency (RF) signals, and for the wireless signals to contain payment credentials.

[0009] A further feature of the invention provides for the wireless signals to be according to the International Standards Organization and International Electrotechnical Commission (ISO/I EC) 14443 standard for contactless integrated circuit cards.

[0010] Further features of the invention provide for the contactless interface to include a microphone configured to capture a data encoded audio stream, for the data encoded audio stream to be a near sound communication audio stream being emitted from a consumer portable payment device, and for data encoded onto the audio stream to represent payment credentials.

[0011] Still further features of the invention provide for the contactless interface to be an optical reader interface configured to read optical images held in proximity to the optical reader, the optical images representing payment credentials.

[0012] Yet further features of the invention provide for the optical images to be images generated on a display of a consumer portable payment device; for the images to be text in which case the optical reader interface is configured to perform optical character recognition of the displayed text; for the images to be graphical codes such as two-dimensional barcodes or quick response (QR) codes in which case the optical reader interface is configured to read the graphical codes; or alternatively for the images to be formed from a visible light communication (VLC) modulation scheme, in which case the optical reader interface is configured to receive and decode VLC data streams. [0013] Further features of the invention provide for the optical reader interface to be a digital camera. In one embodiment the digital camera and contact-based card interface are mounted on opposite ends of a single card. In a different embodiment the digital camera is provided as a separate unit connected to the contact-based card interface by means of a connecting wire. [0014] Still further features of the invention provide for the dual-interface adapter device to receive the payment credentials for single use only so that payment credentials do not remain resident on the dual-interface adapter device after use.

[0015] Yet further features of the invention provide for the payment credentials represented by the optical image to be a single-use account number generated by the consumer portable payment device upon request by a user of the consumer portable payment device.

[0016] The invention extends to a system for performing contactless payment transactions, the system comprising: a contact-based acceptance terminal having a card slot; a dual-interface adapter device, wherein the dual-interface adapter device comprises a contact-based card interface insertable into the card slot of the contact- based acceptance terminal and configured to communicate with the contact-based acceptance terminal, a contactless interface, configured to receive power from the contact-based acceptance terminal via the contact-based card interface and to communicate with a contactless consumer portable payment device in a contactless manner, for the dual-interface adapter device to further comprise an integrated circuit, for the integrated circuit to be configured to perform cryptographic functions and translation functions such that payment credentials may be transmitted to the contact-based acceptance terminal.

[0017] Further features of the invention provide for the integrated circuit to comprise a secure crypto-processor, and for the secure crypto-processor to enable end-to-end secure communications between the contactless interface and the contact-based card interface. [0018] Still further features of the invention provide for the integrated circuit to be a hardware security module and for the hardware security module to comprise a public processor and a private processor.

[0019] Yet further features of the invention provide for the contactless interface to include a contactless interface component which is capable of transmitting and receiving one or more wireless signals, the wireless signals being emitted from a consumer portable payment device, for the wireless signals to be near field communication (NFC), Bluetooth, Wi-Fi, and/or radio frequency (RF) signals, and for the wireless signals to contain payment credentials.

[0020] A further feature of the invention provides for the wireless signals to be according to the International Standards Organization and International Electrotechnical Commission (ISO/I EC) 14443 standard for contactless integrated circuit cards.

[0021] Still further features of the invention provide for the contactless interface include a microphone configured to capture a data encoded audio stream, for the data encoded audio stream to be a near sound communication audio stream being emitted from a consumer portable payment device, and for data encoded onto the audio stream to represent payment credentials.

[0022] Yet further features of the invention provide for the contactless interface to be an optical reader interface configured to read optical images held in proximity to the optical reader, the optical images representing payment credentials. [0023] Further features of the invention provide for the contactless interface to be an optical reader interface configured to read optical images held in proximity to the optical reader, the optical images representing payment credentials.

[0024] Still further features of the invention provide for the optical images to be images generated on a display of a consumer portable payment device; for the images to be text in which case the optical reader interface is configured to perform optical character recognition of the displayed text; for the images to be graphical codes such as two-dimensional barcodes or quick response (QR) codes in which case the optical reader interface is configured to read the graphical codes; or alternatively for the images to be formed from a visible light communication (VLC) modulation scheme, in which case the optical reader interface is configured to receive and decode VLC data streams.

[0025] Yet further features of the invention provide for the optical reader interface to be a digital camera. In one embodiment the digital camera and contact-based card interface are mounted on opposite ends of a single card. In a different embodiment the digital camera is provided as a separate unit connected to the contact-based card interface by means of a connecting wire. [0026] Further features of the invention provide for the dual-interface adapter device to receive the payment credentials for single use only so that payment credentials do not remain resident on the dual-interface adapter device after use.

[0027] Still further features of the invention provide for the payment credentials represented by the optical image to be a single-use account number generated by the consumer portable payment device upon request by a user of the consumer portable payment device.

[0028] Yet further features of the invention provide for the consumer portable payment device to be one of: A mobile phone, a personal digital assistant, a laptop computer, smart card or a tablet computer.

BRIEF DESCRIPTION OF THE DRAWINGS

[0029] Fig. 1 illustrates an exemplary dual-interface adapter device according to an embodiment of the invention; [0030] Fig. 2 illustrates another exemplary dual-interface adapter device according to an embodiment of the invention;

[0031] Fig. 3 illustrates a contactless interface component according to an embodiment of the invention;

[0032] Fig. 4 illustrates a system for performing contactless payment transactions according to an embodiment of the invention;

[0033] Fig. 5 illustrates a system for performing a payment transaction according to an embodiment of the invention;

[0034] Fig. 6 illustrates a flow diagram of a contactless payment transaction according to an embodiment of the invention; [0035] Fig. 7 illustrates another exemplary dual-interface adapter device according to an embodiment of the invention;

[0036] Fig. 8 illustrates another exemplary dual-interface adapter device according to an embodiment of the invention; [0037] Fig. 9 illustrates a system for performing contactless payment transactions making use of a dual-interface adapter device according to embodiments of the invention;

[0038] Fig. 10 illustrates a system for performing contactless payment transactions making use of a dual-interface adapter device according to embodiments of the invention;

[0039] Fig. 1 1 illustrates a flow diagram of a method for performing a financial transaction using the system of Fig. 9 or Fig. 10; and,

[0040] Fig. 12 illustrates a system for performing contactless payment transactions making use of a dual-interface adapter device according to embodiments of the invention.

DETAILED DESCRIPTION OF THE INVENTION

[0041] One way to encourage consumers to adopt contactless payment technology is to provide consumers with dual-interface consumer portable payment device (CPPD). A dual-interface CPPD has a contactless interface and a contact-based interface, and typically comes in the form of a card. The dual-interface CPPD uses the contactless interface to exchange data with a contactless acceptance terminal when such a terminal is available at a merchant location. When the dual-interface CPPD comes within a close proximity of the contactless acceptance terminal, an electromagnetic field emitted by the contactless acceptance terminal energizes and powers the contactless interface of the dual-interface CPPD. In other words, the contactless interface of the dual-interface CPPD receives power wirelessly from a contactless acceptance terminal. Account credentials such as a personal account number (PAN) that is stored and retained in the dual-interface CPPD can then be transmitted to the contactless acceptance terminal along with an exchange of appropriate security protocols to complete the contactless payment transaction. When a contactless acceptance terminal is unavailable at a merchant location, the dual-interface CPPD uses the contact-based interface to carry out the transaction by inserting the dual-interface CPPD into the card slot of the contact-based acceptance terminal. Although dual-interface CPPDs may encourage consumers to adopt contactless payment technology, they do not alleviate the costs associated with replacing existing legacy contact-based acceptance terminals with new contactless acceptance terminals.

[0042] Accordingly, embodiments of the present invention provide a dual-interface adapter device that enables an existing legacy contact-based acceptance terminal to conduct contactless payment transactions without replacing the contact-based acceptance terminal. The dual-interface adapter device according to embodiments of the invention includes a contactless interface to communicate with a contactless consumer portable payment device (CPPD) and a contact-based interface to communicate with the legacy contact-based acceptance terminal. The physical connection provides sufficient power for contactless interface to communicate with a contactless CPPD. Embodiments of the invention provide for contactless CPPDs to take the form of contactless smart cards or mobile devices (e.g. mobile phones).

[0043] Fig. 1 illustrates a block diagram of an exemplary dual-interface adapter device (100) according to embodiments of the invention. In this embodiment, the dual-interface adapter device (100) is in the form of a card. The size of the dual- interface adapter device (100) resembles the size of a payment card to allow the dual-interface adapter device (100) to be insertable into a contact-based acceptance terminal. The dual-interface adapter device (100) includes a contactless interface (1 10) that is coupled to a contact-based interface (120). The contactless interface (1 10) comprises a contactless interface component (1 15) which may, for example include a microphone, digital camera and/or wireless transmitter and receiver. The contactless interface (1 10) may accordingly be configured to receive payment credentials from a contactless CPPD via any one or more of near field communication (NFC), radio frequency identification (RFID), Wi-Fi, global system for mobile communication (GSM), visible light communication (VLC), optical character recognition (OCR), optical barcode scanning and near sound communication (NSC). Embodiments of the invention provide for the wireless communication between the contactless interface (1 10) of dual-interface adapter device (100) and a contactless CPPD to be according to the International Organization for Standardization and International Electrotechnical Commission (ISO/I EC) 14443 standard. [0044] In an exemplary embodiment, the contact-based interface (120) is compliant with the Europay-MasterCard-Visa (EMV) specification according to the ISO/I EC 7816 standard. The contact-based interface (120) provides eight conductive contact pads C1 -C8 at specific dimensions and locations on the dual-interface adapter device (100) in accordance with the EMV specification. The contact-based interface (120) provides a physical contact-based connection between the dual-interface adapter device (100) and the contact-based acceptance terminal when the dual- interface adapter device (100) is inserted into the contact-based acceptance terminal. The contact-based interface (120) includes a C1 contact pad that is coupled to the VCC input of the contactless interface component (1 15), a C2 contact pad that is coupled to the RST input of the contactless interface component (1 15), a C3 contact pad that is coupled to the CLK input of the of the contactless interface component (1 15), a C5 contact pad that is coupled to the GND input if the contactless interface component (1 15), and a C7 contact pad that is coupled to the serial data I/O of the contactless interface component (1 15). In the illustrated embodiment, the C7 contact pad is coupled to the serial data I/O of the contactless interface component (1 15) via an integrated circuit (108). In some embodiments, the contact pads C4, C6, and C8 are not used by the dual-interface adapter device (100), and hence these contact pads can be omitted from the contact-based interface (120) in these embodiments.

[0045] The invention further provides for the dual-interface adapter device (100) to include an integrated circuit (108). The integrated circuit (108) may perform auxiliary functions such as cryptographic functions (e.g., encryption, decryption) and translation functions to adapt the serial data I/O signal from the contactless interface (1 10) into character frames to comply with the EMV specification if required. As such, the serial data I/O signal from the contactless interface (1 10) is not directly connected to the C7 contact pad of the contact-based interface (120). Instead, the serial data I/O signal from the contactless interface (1 10) is first routed to the integrated circuit (108) to allow the integrated circuit (108) to perform any required cryptographic and translation functions on the serial data I/O signal as required by the EMV specification before transmitting the data onto the C7 contact pad to the contact-based acceptance terminal. Data sent from the contact-based acceptance terminal also passes through the integrated circuit (108) to allow the integrated circuit (108) to perform cryptographic and translation functions as required before sending the data to the contactless interface (1 10). The integrated circuit (108) may receive power (VCC and GND) and a clock signal (CLK) from the C1 , C5 and C3 contact pads respectively. The integrated circuit (108) may be any suitable circuit or microprocessor and in a preferred embodiment comprises a secure crypto- processor. Such an embodiment accordingly provides for the integrated circuit to be in accordance with those provided in conventional 'chip and pin' or integrated circuit (IC) credit cards. This enables end-to-end secure communications between the contactless interface (1 10) and the contact-based interface (120). [0046] Further embodiments of the invention provide for the integrated circuit (108) to be a hardware security module (HSM) which uses hardware to encrypt and decrypt data instead of solely performing the encryption/decryption in software, and accordingly provides enhanced protection over software encryption technologies. For example, the HSM might be able to provide secure key management to generate cryptographic keys, sets the capabilities and security limits of keys, implement key backup and recovery, prepare keys for storage and performs key revocation and destruction. In some embodiments, the HSM is implemented as a dual processor device that includes a secure processor with storage and a public processor with storage. The two processors may each comprise one or more secure crypto- processors and may be identical to each other. Alternatively the secure processor may be implemented with one or more secure crypto-processors while the public processor may be implemented with one or more processors. The HSM may also include a physical or logical separation between interfaces that are used to communicate critical security parameters and other interfaces that are used to communicate other data. The HSM can also provide a tamper-proof mechanism that provides a high risk of destroying the HSM and the cryptographic keys stored therein, if any attempt is made to remove or externally access the HSM. The HSM according to embodiments of the invention may be compliant with at least a security level 2 of the FIPS 140-2 standard. Preferably, the HSM in embodiments of the invention is compliant with security level 3 or level 4 of FIPS 140-2. In some embodiments, the HSM is a packaged semiconductor chip that includes both a secure processing unit (SPU) and a public processing unit (PPU) in a single package, but with a logical and physical separation between the SPU and the PPU. In other embodiments, the SPU and the PPU can be individually packaged semiconductor chips or semiconductor dies that are coupled together to implement the HSM.

[0047] In further embodiments, additional components may be present on the dual- interface adapter device (100). For example, the dual-interface adapter device (100) may further include a microcontroller that can be used to configure the integrated circuit (108) and/or the contactless interface component (1 15).

[0048]

[0049] When the dual-interface adapter device (100) is inserted into a contact- based acceptance terminal, the dual-interface adapter device (100), including its contactless interface (1 10) and integrated circuit (108), draws power from the contact-based acceptance terminal through the C1 (for VCC) and C5 (for GND) contact pads. In one embodiment, the contact-based acceptance terminal may supply a voltage in the range of 1 V to 6 V to the dual-interface adapter device (100). The contactless interface (1 10) draws power from the contact-based acceptance terminal through the physical connection between the dual-interface adapter device (100) and the contact-based acceptance terminal at the C1 and C5 contact pads when the dual-interface adapter device (100) is inserted into the card slot of the contact-based acceptance terminal. One advantage of powering the dual-interface adapter device (100) through only a physical connection with the contact-based acceptance terminal is that any transaction data such as account certification and personal account information that may have been temporarily stored in volatile storage elements (i.e. storage elements that do not retain data once power is removed such as random-access memory (RAM), registers, buffers, etc.) in the dual- interface adapter device (100) would be erased if the dual-interface adapter device (100) is removed from the contact-based acceptance terminal. This provides a built- in security measure to prevent someone from maliciously obtaining personal account information by stealing the dual-interface adapter device (100) from the contact- based acceptance terminal. [0050] In one embodiment, the contact-based acceptance terminal provides a clock signal in a range of 1 MHz to 5 MHz to the dual-interface adapter device (100) through the C3 contact pad. The clock signal is used by the contact-based interface (120) as a reference clock to transmit and receive transaction data to and from the contact-based acceptance terminal through the serial data I/O signal at the C7 contact pad. The transaction data may include transaction information, account credentials and/or personal account information, and are arranged in character frames in accordance with the EMV specification. The clock signal may also be used by the contactless interface (1 10) to derive an internal clock frequency that is used by the contactless interface (1 10) to perform contactless communication with a contactless CPPD.

[0051] The contact-based acceptance terminal may also provide a reset signal to the dual-interface adapter device (100) through contact pad C2 to perform a reset of the components in the dual-interface adapter device (100). The reset signal may be used, for example, to clear the storage elements in the dual-interface adapter device (100) after each payment transaction to ensure account credentials and personal account information are not retained in the dual-interface adapter device (100) once the payment transaction is complete. This provides an additional security measure to erase any account credentials and personal account information that may have been temporarily stored in the dual-interface adapter device (100) without having to remove the dual-interface adapter device (100) from the contact-based acceptance terminal each time a payment transaction is complete. [0052] In a different embodiment of the invention, the dual-interface adapter device (100) can be provided to a consumer to enable the consumer to perform a payment transaction with a contact-based acceptance terminal when the consumer has a contactless CPPD such as a mobile phone. In this embodiment, the dual-interface adapter device (100) and its contactless interface (1 10) is able to communicate with the mobile phone when the dual-interface adapter device (100) is placed in close proximity with the mobile phone. Account credentials and personal account information that are stored in the mobile phone can be transferred to and be temporarily stored in the dual-interface adapter device (100). The dual-interface adapter device (100) can then be inserted into the contact-based acceptance terminal to perform the payment transaction through the contact-based interface (120). In some embodiments, once the payment transaction is complete, the account credentials and personal account information that are temporarily stored in the dual-interface adapter device (100) can be erased by the contact-based acceptance terminal, for example, by asserting the reset signal described above. Hence, in such embodiments, a consumer would load the account credentials and personal account information that are stored in the mobile phone onto the dual- interface adapter device (100) each time a payment transaction is performed. [0053] In another embodiment, the account credentials and personal account information that are temporarily stored on the dual-interface adapter device (100) is automatically erased when a timer on the dual-interface adapter device (100) expires. For example, the account credentials and personal account information can be erased after being stored on the dual-interface adapter device (100) for one minute if no payment transaction is carried out with the dual-interface adapter device within that one minute. This provides an added security measure to prevent someone from maliciously obtaining personal account information from the dual- interface adapter device (100) if the dual-interface adapter device (100) is lost or stolen. [0054] Fig. 2 illustrates a dual-interface adapter device (200) according to a preferred embodiment of the invention in which the contactless interface (210) includes a contactless interface component (215) that is capable of transmitting and receiving one or more wireless signals such as near field communication (NFC), Bluetooth, Wi-Fi, and/or radio frequency (RF) signals. [0055] The contactless interface component (215) may have at least a supply voltage (VCC) input, a ground (GND) input, a serial data input/output (I/O), a clock (CLK) input, a reset (RST) input, and an antenna (ANT) input(s). The contactless interface component (215) may operate with a VCC in a range of 1 .0 Volts (V) to 6.0 V. In one embodiment, the CLK input to the contactless interface component (215) is used to derive an internal clock signal at a frequency of about 13.56 Megahertz (MHz) for NFC. In other embodiments, the CLK input to the contactless interface (210) is used to derive an internal clock signal that may have another frequency depending on the type of wireless signal, such as a frequency in a range of 2.4-2.5 GHz for Bluetooth. [0056] The dual-interface adapter device (200) illustrated in Fig. 2 includes an embedded antenna (230) that is coupled to the ANT input(s) of the contactless interface component (215) to facilitate reception and transmission of the wireless signal. In one embodiment, the embedded antenna (230) is embedded along the perimeter of the dual-interface adapter device (200). Although the antenna (230) is shown in Fig. 2 to be embedded along the perimeter of the dual-interface adapter device (200), in other embodiments, the embedded antenna (230) may take on other forms or shapes, and may have more than one loop.

[0057] According to embodiments of the invention, the power provided to the contactless interface (210) of the dual-interface adapter device (200) is sufficient to enable the contactless interface (210) to generate an electromagnetic field to power a contactless CPPD such as a contactless smart card. In an exemplary embodiment, the contactless interface (210) emits a radio frequency (RF) field in accordance with the NFC standard to power a NFC-enabled contactless smart card. Hence, the contactless interface (210) acts as the initiator to establish a NFC communication link between the dual-interface adapter device (200) and the NFC- enabled contactless smart card. When the NFC-enabled contactless smart card comes in close proximity of the dual-interface adapter device (200) that is inserted into the contact-based acceptance terminal, the RF field emitted by the contactless interface (210) energizes and powers the NFC-enabled contactless smart card to provide the NFC-enabled contactless smart card with power to communicate with the dual-interface adapter device (200). [0058] In an alternative embodiment, the unused contact pads (C4, C6, and C8) may be adapted to provide additional power from the contact-based acceptance terminal to the dual-interface adapter device (200) if the electrical current provided through the single C5 contact pad is insufficient to properly power the dual-interface adapter device (200) and its contactless interface (210). In further embodiments, power to the dual-interface adapter device (200) and its contactless interface (210) may be provided by a battery or other power source that is in physical contact with the interface adapter device (200).

[0059] Fig. 3 illustrates a block diagram of an exemplary contactless interface component (310) that can be used in a contactless interface of a dual-interface adapter device according to embodiments of the invention. The contactless interface component (310) includes a contactless transceiver block (304), a buffer block (306), a serial input/output (I/O) block (309), and a clock control block (302). The contactless transceiver block (304) may include a modulator, a demodulator, a decoder, an encoder, an amplifier, and an analog-to-digital converter. The contactless transceiver block (304) is coupled to an antenna and can be used to send and receive a wireless signal such as a near field communication (NFC) signal, a Bluetooth signal, a Wi-Fi signal, or other radio frequency (RF) signal. In some embodiments, the contactless transceiver block (304) may have the capability to send and receive more than one type of wireless signal and can be configured to send and receive any one of these signals. The contactless transceiver block (304) can be configured, for example, by using a signal selection switch on the dual- interface adapter device or a microcontroller coupled to the contactless interface component (310). In an alternative embodiment, the contactless transceiver block (304) may also scan through the different wireless signal types until a compatible contactless CPPD is discovered, and automatically select the wireless signal type that is compatible with the discovered contactless CPPD. [0060] The buffer block (306) provides temporary buffering of the data that is being sent between a contactless CPPD and the contact-based acceptance terminal. The buffer block (306) compensates for any data rate differences between the contactless interface and the contact-based interface of the dual-interface adapter device. In one embodiment, the buffer block (306) can be implemented as a first-in- first-out (FIFO) buffer.

[0061] The serial I/O block (309) performs any serialize and de-serialize functions as required, and translates the data format received from buffer block (306) into character frames that is compliant with the EMV specification for transmission to the contact-based acceptance terminal, and vice versa. The serial I/O block (309) can also perform additional functions such as parity calculations for inserting parity bits into the character frames. In other embodiments, the translation function may be performed by a component that is external to the contactless interface component (310).

[0062] The clock control block (302) converts the CLK input signal provided from the contact-based acceptance terminal into an internal clock frequency that is used by the contactless transceiver block (304) according to the type of wireless signal being used. In one embodiment, the clock control block (302) generates a 13.56 MHz clock signal from the CLK input signal to perform NFC communication with a contactless CPPD. In another embodiment, if the internal clock frequency cannot be generated from the CLK input signal due to frequency denomination mismatches, the clock control block (302) may have an internal oscillator that is coupled to a clock crystal provided on the dual-interface adapter device to derive the appropriate internal clock frequency as needed depending on the type of wireless signal being used.

[0063] Fig. 4 illustrates a system (400) that uses a contact-based acceptance terminal to perform contactless payment transactions. The system (400) includes a contact-based acceptance terminal (410) and a dual-interface adapter device (420) that is inserted into a card slot of the contact-based acceptance terminal (410). The contact-based acceptance terminal (410) can be a point-of-sale (POS) terminal or an automated teller machine (ATM). The dual-interface adapter device (420) may be any one of the embodiments described above with references to Figs. 1 and 2. The contact-based acceptance terminal (410) does not have an integrated contactless interface to communicate with a contactless CPPD. Nevertheless, the dual-interface adapter device (420) according to embodiments of the present invention provides the contact-based acceptance terminal (410) with the capability to perform contactless payment transactions. [0064] When the dual-interface adapter device (420) is inserted into the contact- based acceptance terminal (410), the contact-based acceptance terminal (410) powers the dual-interface adapter device (420) through the physical connection in the card slot. Using the power supplied from the contact-based acceptance terminal (410), the dual-interface adapter device (420) emits an electromagnetic field. When a contactless CPPD, such as a contactless smart card (440), is brought within a proximity of the contact-based acceptance terminal (410), the electromagnetic field emitted by the dual-interface adapter device (420) energizes the contactless smart card (440) to enable the contactless smart card (440) to perform a payment transaction with the dual-interface adapter device (420) using a wireless signal such as an NFC signal (430).

[0065] In one embodiment, the contactless CPPD (440) performs the payment transaction as though the contactless CPPD (440) is communicating with a contactless acceptance terminal. In other words, the dual-interface adapter device (420) would present itself as a contactless acceptance terminal to the contactless CPPD (440). The contactless CPPD (440) then interacts with the dual-interface adapter device (420) according to the contactless payment protocol (which may, for example, be according to the ISO/I EC 14443 standard) to carry out the payment transaction. From the contactless CPPD (440) point of view, the payment transaction being carried out resembles a contactless payment transaction, and the contactless CPPD (440) is unaware that the acceptance terminal is a contact-based acceptance terminal (410). [0066] In a different embodiment, the contactless CPPD (440) communicates with the dual-interface adapter device (420) using a modified contactless process to transfer account credentials and personal account information onto the dual-interface adapter device (420). The dual-interface adapter device (420) then relays the account credentials and transaction data between the contactless smart card 440 and the contact-based acceptance terminal (410). From the contact-based acceptance terminal (410) point of view, the transaction is like any other EMV compliant payment transaction. Once the contactless payment transaction completes, the contactless smart device (440) can be moved away from the contact- based acceptance terminal (410) to disengage the communication between the contactless smart card (440) and the dual-interface adapter device (420). The dual- interface adapter device (420) can optionally be removed from the contact-base acceptance terminal (410).

[0067] Fig. 5 illustrates a system (500) that uses a contact-based acceptance terminal to perform a payment transaction with a contactless CPPD according to another embodiment. The system (500) includes a contact-based acceptance terminal (510) and a dual-interface adapter device (520). The contact-based acceptance terminal (510) can be a point-of-sale (POS) terminal or an automated teller machine (ATM). The dual-interface adapter device (520) may be any one of the embodiments described above with references to Figs. 1 and 2. The contact- based acceptance terminal (510) does not have an integrated contactless interface to communicate with a contactless CPPD. Nevertheless, the dual-interface adapter device (520) according to embodiments of the present invention provides the contact-based acceptance terminal (510) with the capability to perform a payment transaction with a contactless CPPD such as a mobile phone (540).

[0068] When the dual-interface adapter device (520) is placed in close proximity to the mobile phone (540), account credentials and personal account information are loaded onto and temporarily stored in the dual-interface adapter device (520) using a wireless signal such as a NFC signal (530). The dual-interface adapter device (520) can then be inserted into the contact-based acceptance terminal (510) to conduct a payment transaction. The dual-interface adapter device (520) then exchanges the account credentials and transaction data with the contact-based acceptance terminal (510). From the contact-based acceptance terminal (510) point of view, the transaction is like any other EMV compliant payment transaction. Once the payment transaction completes, the dual-interface adapter device (520) can be removed from the contact-based acceptance terminal (510).

[0069] Fig. 6 illustrates a flow diagram (600) for performing a contactless payment transaction with a contact-based acceptance terminal according to one embodiment. In an embodiment according to, for example the system (400) illustrated in Fig. 4, prior to carrying out the contactless payment transaction, a dual-interface adapter device according to embodiments of the invention is inserted into the contact-based acceptance terminal. At block (602), the dual-interface adapter device discovers that a contactless CPPD is in close proximity. The discovery can be performed with any applicable method that is in accordance with techniques used in NFC, Bluetooth, Wi- Fi, or RF communications. For example, the dual-interface adapter device may emit an electromagnetic field according to the NFC standard and wait for a response from the contactless CPPD. Once a contactless CPPD in close proximity to the contact- based acceptance terminal is discovered, a communication channel is established between the contactless CPPD and the dual-interface adapter device. The communication channel can be established using a NFC signal, a Bluetooth signal, a Wi-Fi signal, or other RF signal. At block (604), the dual-interface adapter device acquires account credentials and personal account information from the contactless CPPD. In a different embodiment according to, for example the system (500) illustrated in Fig. 5, the operations of blocks (602) and (604) are performed prior to inserting the dual-interface adapter device into contact-based acceptance terminal. [0070] Once the dual-interface adapter device acquires account credentials and personal account information from the contactless CPPD, the dual-interface adapter device performs any decoding, encoding, encryption, decryption, and/or translation of the account credentials and personal account information to comply with the EMV specification. At block (606), the dual-interface adapter device sends the account credentials and personal account information in the proper EMV character frame format to the contact-based acceptance terminal. In one embodiment, the contact- based acceptance terminal may prompt the contactless CPPD user to enter a personal identification number (PIN) on the keypad of the contact-based acceptance terminal to verify the identity of the user.

[0071] Once the account credentials have been verified, at block (608), the dual- interface adapter device receives approval from the contact-based acceptance terminal to proceed with the payment transaction. At block (610), the payment transaction is carried out with the dual-interface adapter device exchanging transaction data between the contact-based acceptance terminal and the contactless CPPD. When the payment transaction completes, at block (612), any temporary storage of account credentials or personal account information in the dual-interface adapter device are flushed to ensure no such data is retained in the dual-interface adapter device. In one embodiment, the flushing operation can be initiated by the contact-based acceptance terminal, for example, by asserting a reset signal. In other embodiments, the dual-interface adapter device can be self-flushing, for example, by filling its internal buffers with junk data once a payment transaction is complete. The dual-interface adapter device can also be optionally removed from the contact-based acceptance terminal. [0072] Fig. 7 illustrates a block diagram of a dual-interface adapter device (700) according to another embodiment of the invention. The dual-interface adapter device (700) illustrated differs from that illustrated in Fig. 2 in that an external antenna (730) that is not embedded into the dual-interface adapter device (700) is provided. An external antenna (730) may provide the contactless interface (710) with a longer range, different operating frequency, etc., to communicate with a contactless CPPD because the shape and size of the external antenna (730) is not restricted by the shape and size of the dual-interface adapter device (700). However, the external antenna (730) is still configured in a way such that it does not interfere with the insertion of the dual-interface adapter device (700) into the contact- based acceptance terminal. In other embodiments, the external antenna (730) may take on other forms or shapes, and may have more than one loop.

[0073] Another embodiment of the invention is illustrated in Fig. 8, in which the contactless interface (810) of the dual-interface adapter device (800) includes a digital camera (815) which is configured to read optical images that are held in proximity to the digital camera (815). The contactless interface (810) may have at least a supply voltage (VCC) input, a ground (GND) input, a serial data input/output (I/O), a clock (CLK) input, and a reset (RST) input. The contactless interface (810) may operate with a VCC in a range of 1 .0 Volts (V) to 6.0 V. The contactless interface (810) may additionally include a microprocessor which is configured to extract payment credentials from the optical images read by the digital camera (815) and to transmit these to the contact-based card interface (820) via the integrated circuit (808). Alternatively, the contactless interface (810) may be provided without a microprocessor, in which case the integrated circuit (808) of the dual-interface adapter device (800) is configured to extract payment credentials from the optical images read by the digital camera (815) and to transmit these to the contact-based card interface (820). In this embodiment, the digital camera (815) and the contact- based card interface (820) are mounted on opposite ends of the dual-interface adapter device (800). The digital camera (815) can read the optical images by taking pictures or film recordings of the optical images that are held in proximity to the digital camera (815).

[0074] The optical images read by the digital camera (815) of the contactless interface (810) may be text, in which case the integrated circuit (808) is configured to extract the payment credentials by means of optical character recognition (OCR). Alternatively, the optical images may be graphical codes, such as two-dimensional barcodes or quick response (QR) codes, in which case the integrated circuit (808) is configured to extract the payment credentials from the graphical codes. Furthermore, the optical images may comprise visible light communication sequences, for example payment credentials modulated and/or encoded onto sequences of flashing light, which may be achieved by flashing pixels on a display of a mobile phone. The integrated circuit (808) may be accordingly configured to decode and/or demodulate such sequences detected by the digital camera (815) so as to extract the payment credentials contained in the visible light communication sequences.

[0075] The contactless interface (810) and/or integrated circuit (808) may be configured to format the payment credentials received at the digital camera (815) into character frames that are compliant with the EMV specification for transmission to the contact-based acceptance terminal and vice versa, and may also provide any encryption or decryption required such that a contact based acceptance terminal views the transaction as an EMV contact based transaction.

[0076] The integrated circuit (808) according to the illustrated embodiment may be any suitable circuit or microprocessor and in a preferred embodiment comprises a secure crypto-processor. Such an embodiment accordingly provides for the integrated circuit to be in accordance with those provided in conventional 'chip and pin' or integrated circuit (IC) credit cards. This enables end-to-end secure communications between the contactless interface (810) and the contact-based interface (820). Furthermore, the integrated circuit (808) may be a hardware security module (HSM) according to embodiments of the invention and in some cases may be implemented as a dual processor device that includes a secure processor with storage and a public processor with storage as described previously in this specification. [0077] Fig. 9 illustrates a system (900) for performing contactless payment transactions according to the invention. The system comprises a contact-based acceptance terminal (902) and a dual-interface adapter device (904) that is inserted into the card slot of the contact-based acceptance terminal (902). The contact-based acceptance terminal (902) may be a point-of-sale (POS) device or an automated teller machine (ATM). In the embodiment illustrated in Fig. 9, the system includes a dual-interface adapter device (904) in accordance with the embodiment illustrated in Fig. 8, and the contact-based acceptance terminal is a POS device.

[0078] When the dual-interface adapter device (904) is inserted into the card slot of the contact-based acceptance terminal (902), the contact-based acceptance terminal powers the dual-interface adapter device (904) through the physical connection in the card slot. The power derived from the contact-based acceptance terminal is used to power the digital camera (906) of the contactless interface (908). When an optical image (910) is brought into close proximity to the dual-interface adapter device (904), the digital camera (906) will read the optical image (910) and transmit the data to the integrated circuit (912). The optical image (910) may be an image printed on a voucher card or it can be generated by a contactless CPPD and then displayed on the contactless CPPD. In the embodiment illustrated in Fig. 9, the optical image is a quick response (QR) code displayed on a display of a contactless CPPD, which in this case is a mobile phone (914).

[0079] The integrated circuit (912) is configured to extract payment credentials from the optical image (910) and translate these into character frames to comply with the EMV specification, if required, and may also provide any appropriate encryption or decryption of the payment credentials. The integrated circuit (912) then transmits the character frames to the contact-based card interface (not shown), and the contact- based acceptance terminal (902) initiates a payment transaction. From a viewpoint of the contact-based acceptance terminal (902), the transaction is like any other EMV compliant payment transaction. Once the contactless payment transaction has been completed, the mobile phone (914) displaying the optical image can be moved away from the contact-based acceptance terminal (902).

[0080] Fig. 10 illustrates a system (1000) for performing contactless payment transactions. The system illustrated in Fig. 10 is similar to the system illustrated in Fig. 9, however, the embodiment illustrated in Fig. 10 includes a dual-interface adapter device (1004) of which the digital camera (1006) is provided as a separate unit. The digital camera (1006) is connected to the dual-interface adapter device (1004) by means of a connecting wire (1007). The separate unit may have a pedestal or foundation for resting in a specific condition, such as face-up, and may have attachment points for removably fasting it to a surface such as a counter top. Furthermore, instead of the optical image being a QR code as illustrated in Fig. 9, the optical image is text (1005) which is displayed and read by means of optical character recognition (OCR). Preferably, the text (1005) is a single-use number.

[0081] Fig. 1 1 illustrates a flow diagram (1 100) for performing a contactless payment transaction with a contact-based acceptance terminal according to the invention. Prior to performing a contactless payment transaction, a dual-interface adapter device according to embodiments of the invention illustrated in either one of Figs. 9 and 10 is inserted into the card slot of a contact-based acceptance terminal. At a first stage (1 102), the consumer presents an optical image in close proximity to the digital camera of the dual-interface adapter device. The optical image may be displayed on a piece of paper such as a prepaid voucher or it may be generated by a contactless CPPD, such as a mobile phone. The optical image must be presented to the dual-interface adapter device in such a way that the digital camera is capable of reading the optical image.

[0082] At a next stage (1 104), the digital camera of the dual-interface adapter device reads the presented optical image, and transmits the data to the integrated circuit. Where the image presented is an image representing payment credentials (e.g. a two-dimensional barcode), the integrated circuit extracts the payment credentials from the data and if necessary translates the payment credentials into character frames that comply with the EMV specification. Once the payment credentials are in the proper format, the microprocessor transmits the data to the contact-based card interface.

[0083] At a next stage (1 106), the contact-based card interface transmits the payment credentials in the proper EMV character format to the contact-based acceptance terminal. In one embodiment, the contact-based acceptance terminal may request the consumer to enter a personal identification number (PIN) on the keypad of the contact-based acceptance terminal to verify the identity of the consumer.

[0084] Once the payment credentials have been verified, then at a next stage (1 108), the contact-based acceptance terminal initiates the payment transaction in the same way as any other EMV compliant payment transaction. Once the payment transaction has been completed, the optical image can be moved away from the dual-interface adapter device. If the payment credentials are not verified the contact- based acceptance terminal presents a payment failure notification.

[0085] Upon completion of the payment transaction, then at a next stage (1 1 10), any temporary storage of payment credentials in the dual-interface adapter device are deleted to ensure that no personal account information is retained on the dual- interface adapter device. In one embodiment, the deleting of any stored information may be initiated from the contact-based acceptance terminal by transmitting a reset signal. In another embodiment, the dual-interface adapter device may initiate the deleting operation itself, alternatively the dual-interface adapter device may simply be removed from the contact-based acceptance terminal, thereby terminating the power supply and causing all temporarily stored information to be deleted. In a further embodiment, the optical image presented to the dual-interface adapter device may represent a single-use account number, thereby preventing the optical image from being used more than once in which case deleting of the stored information may not be necessary.

[0086] Fig. 12 illustrates yet another embodiment of the invention in which contactless interface includes a microphone component (1225), thereby enabling the dual-interface adapter device (1220) to receive an audio stream (1230) being emitted from a contactless CPPD. In the illustrated embodiment, the audio stream (1230) is a near sound communication (NSC) audio stream having payment credentials encoded therein and the contactless CPPD is a mobile phone (1240). The audio stream (1230) is received by the microphone component (1225) and is decoded by the contactless interface and/or integrated circuit of the dual-interface adapter device (1220) so as to extract the payment credentials.

[0087] The contactless interface may have at least a supply voltage (VCC) input, a ground (GND) input, a serial data input/output (I/O), a clock (CLK) input, and a reset (RST) input. The contactless interface may operate with a VCC in a range of 1 .0 Volts (V) to 6.0 V. The contactless interface may include a microprocessor which is configured to extract payment credentials from the audio stream (1230) received by the microphone component (1225) and to transmit these payment credentials to the contact-based card interface via the integrated circuit. Alternatively, the contactless interface may be provided without a microprocessor, in which case the integrated circuit of the dual-interface adapter device (1220) is configured to extract payment credentials from the audio stream (1230) and to transmit these to the contact-based interface. The extracted payment credentials are then translated into character frames that comply with the EMV specification and are communicated to the contact based acceptance terminal (1210) via the contact-based interface. From a viewpoint of the contact-based acceptance terminal (1210), the transaction is like any other EMV compliant payment transaction. [0088] The integrated circuit according to the embodiment illustrated in Fig. 12 may be any suitable circuit or microprocessor and in a preferred embodiment comprises a secure crypto-processor. Such an embodiment accordingly provides for the integrated circuit to be in accordance with those provided in conventional 'chip and pin' or integrated circuit (IC) credit cards. This enables end-to-end secure communications between the contactless interface and the contact-based interface. Furthermore, the integrated circuit may be a hardware security module (HSM) according to embodiments of the invention and in some cases may be implemented as a dual processor device that includes a secure processor with storage and a public processor with storage.

[0089] Embodiments of the invention provide for a contactless interface of a dual- interface adapter device to include a contactless interface component, a digital camera and a microphone such that the dual-interface adapter device may be configured to receive payment credentials from a contactless CPPD via any one or more of near field communication (NFC), radio frequency identification (RFID), Wi-Fi, global system for mobile communication (GSM), visible light communication (VLC), optical character recognition (OCR), optical barcode scanning and near sound communication (NSC). While various features and components (e.g., antenna, camera, microphone, etc.) of a dual-interface adapter device have been described with reference to specific embodiments, it should be understood that any one of the embodiments of the dual-interface adapter device described herein may include one or more features or components of any of the other embodiments.

[0090] Thus, according to embodiments of the invention, legacy contact-based acceptance terminals can be adapted to perform contactless payment transactions with a dual-interface adapter device. Because such a dual-interface adapter device is relatively inexpensive when compared to the cost of replacing a legacy acceptance terminal, the dual-interface adapter device can be provided to merchants at a relatively low cost to encourage a wider adoption of contactless payment technology. Furthermore, the dual-interface adapter device according to embodiments of the invention performs the contactless payment transaction in a secure manner because no account credentials or personal account information are retained on the dual-interface adapter device. [0091] The foregoing description of the embodiments of the invention has been presented for the purpose of illustration; it is not intended to be exhaustive or to limit the invention to the precise forms disclosed. Persons skilled in the relevant art can appreciate that many modifications and variations are possible in light of the above disclosure.

[0092] Some portions of this description describe the embodiments of the invention in terms of algorithms and symbolic representations of operations on information. These algorithmic descriptions and representations are commonly used by those skilled in the data processing arts to convey the substance of their work effectively to others skilled in the art. These operations, while described functionally, computationally, or logically, are understood to be implemented by computer programs or equivalent electrical circuits, microcode, or the like. Furthermore, it has also proven convenient at times, to refer to these arrangements of operations as modules, without loss of generality. The described operations and their associated modules may be embodied in software, firmware, hardware, or any combinations thereof.

[0093] Any of the steps, operations, or processes described herein may be performed or implemented with one or more hardware or software modules, alone or in combination with other devices. In one embodiment, a software module is implemented with a computer program product comprising a computer-readable medium containing computer program code, which can be executed by a computer processor for performing any or all of the steps, operations, or processes described.

[0094] Finally, the language used in the specification has been principally selected for readability and instructional purposes, and it may not have been selected to delineate or circumscribe the inventive subject matter. It is therefore intended that the scope of the invention be limited not by this detailed description, but rather by any claims that issue on an application based hereon. Accordingly, the disclosure of the embodiments of the invention is intended to be illustrative, but not limiting, of the scope of the invention, which is set forth in the following claims.

Claims

WHAT IS CLAIMED IS: 1 . A dual-interface adapter device that enables a contact-based acceptance terminal to perform a contactless payment transaction, the dual-interface adapter device comprising: a contact-based card interface insertable into a card slot of the contact- based acceptance terminal to communicate with the contact-based acceptance terminal ; a contactless interface, configured to receive power from the contact- based acceptance terminal via the contact-based card interface and to communicate with a contactless consumer portable payment device in a contactless manner; and, an integrated circuit, in communication with the contact-based card interface and the contactless interface and configured to perform cryptographic functions and translation functions.

2. The dual-interface adapter device of claim 1 , wherein the integrated circuit is a secure crypto-processor.

3. The dual-interface adapter device of claim 1 , wherein the integrated circuit is a hardware security module and the hardware security module is implemented as a dual processor device.

4. The dual-interface adapter device of any of the preceding claims, wherein the contactless interface includes a contactless interface component being capable of transmitting and receiving one or more wireless signals.

5. The dual-interface adapter device of claim 4, wherein the wireless signals contain payment credential data encoded therein.

6. The dual-interface adapter device of any of the preceding claims, wherein the contactless interface includes a microphone configured to capture a data encoded audio stream.

7. The dual-interface adapter device of claim 6, wherein the data encoded audio stream contains payment credential data encoded therein.

8. The dual-interface adapter device of any of the preceding claims, wherein the contactless interface includes an optical reader interface configured to read optical images held in proximity to the optical reader interface.

9. The dual-interface adapter device of claim 8, wherein the optical reader interface is a digital camera.

10. The dual-interface adapter device of any of the preceding claims, wherein the dual-interface adapter devices flushes payment credentials and/or personal information from the device so that the payment credentials and/or personal information do not remain resident on the dual-interface adapter device after use.

1 1 . A system for performing contactless payment transactions, the system comprising: a contact-based acceptance terminal having a card slot; a dual-interface adapter device, wherein the dual-interface adapter device comprises a contact-based card interface insertable into the card slot of the contact- based acceptance terminal and configured to communicate with the contact-based acceptance terminal, a contactless interface, configured to receive power from the contact-based acceptance terminal via the contact-based card interface and to communicate with a contactless consumer portable payment device in a contactless manner, the dual-interface adapter device further including an integrated circuit configured to perform cryptographic functions and translation functions such that payment credentials may be transmitted to the contact-based acceptance terminal.

12. The system of claim 1 1 , wherein the integrated circuit is a secure crypto-processor.

13. The system of claim 1 1 , wherein the integrated circuit is a hardware security module and the hardware security module is implemented as a dual processor device.

14. The system according to any of claims 1 1 to 13, wherein the dual-interface adapter device flushes payment credentials and/or personal information from the device so that the payment credentials and/or personal information do not remain resident on the dual-interface adapter device after use.