WO2015107346A1 - Authentication method and system - Google Patents
Authentication method and system Download PDFInfo
- Publication number
- WO2015107346A1 WO2015107346A1 PCT/GB2015/050073 GB2015050073W WO2015107346A1 WO 2015107346 A1 WO2015107346 A1 WO 2015107346A1 GB 2015050073 W GB2015050073 W GB 2015050073W WO 2015107346 A1 WO2015107346 A1 WO 2015107346A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- code
- payment card
- mobile device
- card
- transaction
- Prior art date
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
- G06Q20/322—Aspects of commerce using mobile devices [M-devices]
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
- G06Q20/352—Contactless payments by cards
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q20/401—Transaction verification
- G06Q20/4012—Verifying personal identification numbers [PIN]
Definitions
- the present invention relates to a method and system that are particularly applicable for use in authentication of transactions using contactless chip payment cards, and secure Personal Identification Number (PIN) code entry using contactless chip payment cards.
- PIN Personal Identification Number
- Mobile devices such mobile phones, smart phones, personal computers, set top boxes, automotive dashboard computers and tablet computers can be used for financial transactions, such as credit card payments.
- This functionality is known generally as Mobile Payment or Mobile Commerce.
- a mobile device can run several software applications in the same fashion as computers, and there is a risk that some of the applications the users are downloading from the Internet may contain unwanted code or hidden functionality (“Malware”) which could detect, record, and misuse private and sensitive information, such as credit card numbers and PIN codes.
- Malware unwanted code or hidden functionality
- POS contactless mobile Point of Sale
- SIM Subscriber Identity Module
- WLAN wireless Local area Network
- the mobile POS terminal can use the phone as a card reader for Near Field Communication (NFC) and other contactless cards, as well as a display and a keypad for user input and as a modem to connect to a payment processing system.
- NFC Near Field Communication
- UICC Universal Integrated Circuit Card
- SIM cards used in mobile devices are tamper evident and designed to meet high security standards fulfilling the criteria for financial transactions.
- Malware software could monitor and record the keystrokes or touch screen activity when the user is typing the PIN code, copying a user's on-screen signature, recording voice commands or generally capturing any activity the user may do to interact with the device and its operating system.
- the cardholder verification PIN code used for card payments can be captured by a software application running in the phone before it reaches the POS application. Therefore, the mobile phone cannot be trusted as a PIN entry device.
- Contactless payment cards are available, such as Contactless EMV cards with an NFC interface, which allow the contactless payment card to interact with a contactless card reader without a physical contact. This feature enables very fast and convenient payment transactions. In some instances, card issuers accept that contactless payments below a certain threshold value can be allowed without the user verification PIN code. However, this may lead to a situation where a stolen contactless card could be used multiple times at or below the threshold level without ever needing to know or enter the secret PIN code.
- the Contactless EMV cards have implemented a counter, which forces the user to enter the PIN code after a certain number of repeated contactless transactions occur without using the PIN code.
- the cardholder then needs to use a POS terminal with a traditional chip card reader (ISO contacts) and insert the card in the card reader to complete the transaction with the PIN code to reset the non-PIN transaction counter. If the POS terminal does not have a certified PIN entry pad or a contact card reader, this could lead to a dead-lock situation where the contactless card requires the PIN code to continue operational, but the POS terminal is not capable of handling the PIN entry.
- the embodiment(s) relate to contactless chip payment cards and secure PIN code entry with a POS terminal application running on an Embedded Secure Element ("ESE") of a mobile device or on a UICC/SIM card (“UICC Card”) or similar inserted in a mobile device, which supports a short distance communication method, such as NFC.
- ESE Embedded Secure Element
- UICC/SIM card UICC/SIM card
- the present embodiment(s) creates a secured PIN code (a pseudo PIN code - PIN2) combined with an actual credit card PIN code (true PIN code), a credit card number, and a mobile phone number, and securely delivers the data to and stores it in the UICC (SIM) card in a mobile device. Furthermore, the present embodiment(s) enables the cardholder to conduct a contactless credit card transaction requiring a PIN code, and instead of the actual PIN code, enter the pseudo code (PIN2) on the mobile device and to the POS software residing on, e.g., the UICC card.
- the POS software will verify whether the user-provided pseudo PIN code (PIN2) matches the stored PIN code (PIN2) for the used credit card, it will, if required, encipher the actual PIN code and send it to the contactless credit card or to a payment processing system as a cardholder verification.
- PIN2 pseudo PIN code
- PIN2 stored PIN code
- a method for authenticating a user conducting a payment card transaction using a payment card includes comparing, in one or more of a secure element containing secured data including at least one first code and at least one first payment card information associated with the first code, and a mobile device to which the secure element is connected, the first code with a second code provided as an entry at the mobile device to determine whether or not there is a match between the first code and the second code, and comparing the first payment card information with second payment card information of the payment card read from the payment card via a card reader of the mobile device to determine whether or not there is a match between the first payment card information and the second payment card information when the payment card is in the vicinity of the card reader of the mobile device.
- the method also includes transmitting, by a transmission device from the mobile device, user authentication information for conducting the payment card transaction when it is determined that there is a match between the first code and the second code and it is determined that there is a match between the first payment card information and the second payment card information.
- a method of enabling a user to conduct a payment card transaction includes receiving an entry of a pseudo personal identification number (PIN) code in connection with a payment card, at a secure element connected with a mobile device, and obtaining user authentication information including a true PIN code associated with the pseudo PIN code.
- the method also includes transmitting, via a transmission device, the user authentication information confirming user authentication to authorize use of the payment card in a payment transaction, to the payment card or to an external authorization service or system.
- PIN personal identification number
- a system for enabling a user to conduct a payment card transaction includes a contactless payment card, a mobile device, a secure element, and a transmission device.
- the contactless payment card is configured to communicate via short distance communication.
- the mobile device includes one or more user interface components configured to receive an entry of a second code, and a card reader configured to read information from the payment card.
- the secure element is configured to communicate with the mobile device.
- the secure element receives and stores secured data including at least one first code and at least one first payment card information associated with the first code, and receives the second code from the mobile device.
- the secure element includes one or more processors executing a transaction authorization application.
- the transaction authorization application obtains user authentication information when the second code is compared with the stored first code that is associated with the payment card and a match is determined to be made between the first code and the second code, and when the stored first payment card information is compared with second payment card information read from the payment card via the card reader of the mobile device and a match is determined to be made between the stored first payment card information and the second payment card information read from the payment card via the card reader when the payment card is in the vicinity of the card reader of the mobile device.
- the transmission device is configured to transmit the user authentication information to one of the payment card and a payment processing system as user verification for conducting a transaction using the payment card with the mobile device.
- FIG. 1 is a schematic diagram of a contactless payment card, a secure element, and a mobile phone according to at least one embodiment
- FIG. 2 is a schematic diagram of a contactless payment card, a secure element, a mobile phone, and a payment processor according to at least one embodiment
- FIG. 3 is a schematic diagram of the contactless payment card, the mobile phone, and a payment processor according to at least one embodiment
- FIG. 4 is a schematic illustration of a transaction flow with the contactless payment card, a POS terminal application, a PIN application, a mobile phone, and an issuer/acquirer bank according to at least one embodiment
- FIG. 5 is a schematic illustration of a transaction flow with the contactless payment card, a POS terminal application, a PIN application, a mobile phone, and an issuer/acquirer bank according to at least one embodiment
- FIG. 6 is a schematic illustration of a transaction flow with the contactless payment card, a POS terminal application, a PIN application, a mobile phone, and an issuer/acquirer bank according to at least one embodiment
- FIG. 7 is a schematic diagram illustrating creation and delivery of a PIN certificate according to at least one embodiment
- FIG. 8 is a schematic diagram illustrating creation and delivery of a PIN certificate according to at least one embodiment
- FIG. 9 is a schematic diagram illustrating creation and delivery of a PIN certificate according to at least one embodiment
- FIG. 10 is a schematic diagram illustrating creation and delivery of a PIN certificate according to at least one embodiment.
- FIG. 11 is a block diagram of a UICC card according to at least one embodiment.
- FIG. 1 is a schematic diagram illustrating a system 100 including a contactless payment card 102, a mobile device 104, and a secure element 106.
- FIG. 1 is a schematic diagram illustrating a system 100 including a contactless payment card 102, a mobile device 104, and a secure element 106.
- FIG. 1 is a schematic diagram illustrating a system 100 including a contactless payment card 102, a mobile device 104, and a secure element 106.
- the mobile device 104 may include, but is not limited to, a cellular phone, a mobile tablet, a personal digital assistant, a personal communicator, a pager, a smart phone, or any other handheld computing device.
- the mobile device 104 includes a card reader 108 configured to read the contactless payment card 102 and a transmission device 110.
- the secure element 106 may be a Universal Integrated Circuit Card (UICC) that is connected to the mobile device 104, typically by being inserted into the mobile device 104.
- UICC Universal Integrated Circuit Card
- the secure element 106 may be an embedded secure element (ESE) connected with the mobile device 104 by being embedded within the mobile device 104 itself.
- ESE embedded secure element
- the secure element 106 contains secured data, which has obtained in a manner described in more detail below.
- the secured data includes at least one first code, which may be a PIN code, and at least one first payment card information associated with the first code.
- the secured data may also include another code, which is a true PIN code.
- the user When a user wants to use the payment card 102, the user is authenticated by inputting a second code (e.g., ⁇ 2 code) to the mobile device 104.
- the PIN code is a pseudo PIN code and is not the actual (true) PIN code associated with the contactless payment card 102.
- the user enters the PIN code (PIN2) using a provided user interface running on the mobile device 104.
- the user-input PIN code (PIN2) is forwarded to a PIN/authorization application or Point of Sale (POS) application running on the secure element 106.
- PIN2 Point of Sale
- the POS application on the secure element 106 verifies whether the user-entered PIN2 code matches the code it received as secured data, which may include enciphered PIN data.
- the POS application at the secure element 106 also compares first payment card information stored as part of the secured data with second payment card information of the payment card 102 read from the payment card via the card reader 108 of the mobile device 104 to determine whether or not there is a match between the first payment card information and the second payment card information when the payment card 102 is in the vicinity of the card reader 108 of the mobile device 104.
- the term "in the vicinity" corresponds with being in a readable area of the card reader 108 of the mobile device 104 such that the card reader 108 is able to read information from the payment card 102.
- the POS application If the verification between the PIN codes and the payment card information is successful (i.e., there is a match between the entered code and the stored code and there is a match between the read payment card information and the stored payment card information), the POS application provides user authentication information for conducting a payment card transaction that is transmitted by the transmission device 110 from the mobile device 104.
- the POS application retrieves data, such as a true PIN code (e.g., a third code) securely stored in a memory, enciphers the true PIN code, and provides the enciphered PIN code.
- the true PIN code may be stored as plain text in a secured memory or as encrypted text in a non-secure memory.
- the user authentication information may include the enciphered actual (true) PIN code (e.g., a third code).
- the user authentication information which may include the enciphered PIN code, may be transmitted to the contactless payment card 102 for local validation (FIG. 1).
- the user authentication information which may include the enciphered PIN code, may be transmitted to a payment processing system 202, illustrated in FIG. 2, for online validation.
- the user authentication information may include a user verification status indicator, which may be transmitted to the payment processing system 202 (FIG. 2).
- the true PIN code (the third PIN code) linked with an account for the payment card 102, e.g., through a primary account number ("PAN"), and the secret, second PIN code (PIN2) may be created using a security certified device or system, such as an ATM or by a bank.
- the second PIN code (PIN2) may be signed by the issuer of the payment card 102 and encrypted.
- the user authentication information which includes the enciphered PIN data, can contain also other information, such as counter, expiration date, payment card number, and POS UICC card identification.
- the enciphered PIN data can be sent to the secure element 106, e.g., the POS UICC card of the mobile device 104 or the embedded secure element ("ESE") embedded in the mobile device 104, over any available network, short distance communication method, such as NFC, via the mobile device 104 or by using the card reader 108.
- the payment card's PIN and ⁇ 2 codes are residing in the same secure element (e.g., the smart card IC on the POS UICC) as the POS terminal application.
- the true PIN code for the payment card 102 is never outside a secured, tamper-evident device or chip card in clear text format
- the contactless payment card 102 when used in conjunction with the mobile device 104 with a POS application on a secure element 106, such as the UICC card or the ESE, and a PIN code is required for cardholder verification, the cardholder can enter the second PIN code (PIN2) instead of the actual PIN code (third code) of the payment card 102.
- PIN2 the second PIN code
- the PIN2 code can be used for cardholder verification only for the registered cardholder's payment card 102 used in conjunction with the cardholder's mobile device 104 holding the secure element (e.g., the cardholder's UICC card or embedded secure element embedded in the mobile device 104.
- the secure element e.g., the cardholder's UICC card or embedded secure element embedded in the mobile device 104.
- capturing and stealing the PIN2 code does not allow the payment card 102 to be used, for example, at an ATM to withdraw cash from the cardholder's bank account or to allow any purchases or cash-back transactions using the card at a Point of Sale terminal.
- the present embodiment(s) seek to guarantee that the payment card's PIN code is never outside a secured, tamper evident device or chip card in clear text format, i.e. not encrypted, and also that the user never needs to type the actual card PIN number on the mobile phone 104.
- the present embodiment(s) seek to significantly increases the security level and decreases fraudulent use because the actual payment card PIN code is never used with the mobile phone-based POS terminal. Therefore, capturing the PIN code, for example by malware running in the mobile device 104, cannot be used in conjunction with the payment card 102 at an ATM, at a POS terminal in a shop, etc.
- FIG. 3 is a diagram of the contactless payment card 102, the mobile phone 104, and the payment processor 202 according to at least one embodiment.
- FIG. 3 is an example of a payment transaction in accordance with at least one embodiment.
- FIG. 4 is a schematic illustration of a transaction flow with the contactless payment card, a POS terminal application, a PIN application, a mobile phone, and an acquirer bank according to at least one embodiment.
- FIG. 5 is a schematic illustration of a transaction flow with the contactless payment card, a POS terminal application, a PIN application, a mobile phone, and an issuer/acquirer bank according to at least one embodiment.
- FIG. 6 is a schematic illustration of a transaction flow with the contactless payment card, a POS terminal application, a PIN application, a mobile phone, and an issuer/acquirer bank according to at least one embodiment.
- the payment processor (“PP") 202 may receive the cardholder's phone number and fixed payment instruction including a merchant's remote POS terminal profile from a merchant.
- the PP 202 signs the Remote Payment Instruction with its secret key, encrypts it with a public POS Certificate key corresponding to the cardholder's phone number of the mobile phone 104, and sends it to the POS application 204 on the secure element 106, which may be a UICC card of the cardholder's mobile device 104 or an embedded secure element (ESE) embedded in the cardholder's mobile device 104, using the cardholder's phone number.
- ESE embedded secure element
- the POS application 204 on the secure element 106 receives the Remote Payment Instruction, decrypts it with its secret key and validates it with the PP's 202 public key.
- the POS application 204 interacts with a User Interface application 206 on the cardholder's mobile device 104 and displays the payment information for cardholder's approval or dismissal.
- the User Interface application 206 sends the cardholder's approval to the POS application 204.
- the POS application 204 activates the mobile device's NFC interface and begins the payment transaction process with the cardholder's payment card 102.
- the POS application 204 reads information from the card 102, including the card number, cardholder's name, and public PIN enciphering key, etc. depending on the payment card 102.
- a cardholder verification (authentication) PIN code is required by the POS application 204 at the secure element 106 or by the payment card 102.
- the POS application 204 requests a PIN code verification from a PIN application, which may be included in the POS application or may be separate from the POS application.
- the PIN application retrieves the payment card's registered PIN from its memory and requests a secret PIN code ( ⁇ 2) from the cardholder using the User Interface application 206.
- the cardholder enters the PIN2 code on the User Interface application 206 at the mobile phone 104, and the User Interface application 206 returns the ⁇ 2 code to the PIN application running on the secure element 106.
- the PIN application verifies the PIN2 code and the payment card number, and if the PIN2 code and the payment card number are verified successfully by matching with a stored code and payment card number, the PIN application enciphers a corresponding PIN code with the payment card's PIN enciphering key and returns the enciphered PIN code (e.g., the third code) to the POS application 204, which will forward the enciphered PIN code to the cardholder's payment card 102 for cardholder verification (FIG. 4).
- the payment card 102 recovers and verifies the PIN code with its PIN enciphering key, and either accepts or declines the payment and sends the result to the POS application 202 for further processing.
- the PIN application enciphers a corresponding PIN code associated with the PIN2 code and transmits the enciphered PIN code to the issuer/acquirer bank (payment processing system) 202, which provides verification to the POS application 204.
- the PIN application may provide the POS application 204 with an indication that the user verification is satisfied.
- the POS application 204 may transmit a user verification status indicator to the issuer/acquirer bank (payment processing system) 202.
- POS application and the PIN application are described above as two separate applications, the POS application and the PIN application can be integrated in the same application.
- FIGS. 7-10 illustrate the creation and delivery of the PIN certificate, which may store the secured data, including the PIN2 code.
- the PIN certificate contains various types of information associated with the payment card 102.
- the PIN certificate may contain, for example, a payment card number (e.g, a Primary Account Number), the true PIN code, the pseudo PIN code (PIN2), a validity period, processing restrictions (e.g., value, usage counter, error counter, currency, country, card version, POS version, host device, etc.), issuer information, the date of issuance, and the issuer's signature.
- a payment card number e.g, a Primary Account Number
- PIN2 pseudo PIN code
- processing restrictions e.g., value, usage counter, error counter, currency, country, card version, POS version, host device, etc.
- issuer information e.g., the date of issuance, and the issuer's signature.
- the second code is provided from one or more stored secured data, each of the stored secured data being associated with a different condition associated with use of the payment card 102.
- the different condition for a specific stored secured data includes one or more of: (1) a value limit on the transaction associated with the user authentication, (2) a threshold level of transactions using only the payment card 102, (3) the transaction involving currency that is not indicated at an authentication application as domestic currency, (4) the transaction occurring in a foreign country to a home country of the payment card 102 or a home country of the mobile device 104, (5) the transaction being a forced transaction, and (6) a single-code transaction in which the stored secured code expires after the single-code transaction occurs.
- the secured data may be received via one or more of a mobile/cellular network (see FIG. 8), a short distance communication interface (see FIG. 9), an embedded camera in the mobile device, a microphone, another audio interface of the mobile device 104, a keypad of the mobile device 104, and a touchscreen of the mobile device 104.
- FIG. 7 is a schematic diagram illustrating creation and delivery of a PIN certificate using the payment card 102 as the delivery media.
- a POS Issuer installs a POS application 204 into the secure element 106 (e.g., the UICC Card) and launches POS enciphering key pair generation the secure element 106.
- the POS Issuer receives and verifies the initial POS Certificate, updates it with the phone number of the mobile phone 104 (MSISDN) and signs the updated POS Certificate with the POS Issuer's Secret key.
- the POS Issuer stores the POS Certificate (including MSISDN) in the POS Certificate database.
- the cardholder inserts in a card terminal 702 the card 102 to be registered with the POS application 204, and reads the Primary Account Number, the public IC PIN enciphering key, the cardholder's name, etc.
- the cardholder is verified by the PIN code (PIN2) entered using the keypad of the card terminal 702 and the payment card's Primary Account Number (PAN).
- PIN2 PIN2
- PAN Primary Account Number
- the cardholder enters the mobile phone number of the secure element 106, e.g., the POS UICC card (MSISDN).
- MSISDN POS UICC card
- the card terminal 702 or the Card Issuer requests the POS certificate using the MSISDN number.
- the card terminal 702 or the Card Issuer receives the UICC POS certificate and validates it by using the POS Issuer's public key.
- the card terminal 702 generates an unpredictable number, encrypts the number with the public POS key and send it to the POS application 204 on the secure element 106, e.g., UICC card, using the MSISDN number.
- the POS application 204 receives the encrypted data, decrypts the number, and presents the recovered unpredictable number on a display 704 of the mobile device 104.
- the cardholder and owner of the mobile device 104 enters the unpredictable number on the card terminal 702 for proof of having the mobile device 104 with the UICC card corresponding with the MSISDN number.
- Near Field communication may be used to verify the phone 104 with the POS app 204 on the secure element 106 at the card terminal 702.
- the card terminal 702 verifies the sent and user typed unpredictable numbers, and as a result, either proceeds or declines.
- the card terminal generates the pseudo code (PIN2), signs the POS PIN Certificate (MSISDN, PAN, PIN, PIN2) with a card issuer's secret key and encrypts it with a public POS key.
- the card issuer sends the encrypted and signed POS PIN Certificate to the secure element 106, e.g., UICC card, using the MSISDN number.
- the secure element 106 receives the encrypted POS PIN Certificate and decrypts it with its secret POS key, verifies the card issuer's signature, and stores the POS PIN Certificate in the secure element's secure memory.
- the card issuer then sends the ⁇ 2 code by secure mail to the cardholder's correspondence address.
- FIG. 8 is a schematic diagram illustrating creation and delivery of a PIN certificate using a network 802 as the delivery method to the to the POS application 204 on the secure element 106 (e.g., the UICC card).
- a network 802 as the delivery method to the to the POS application 204 on the secure element 106 (e.g., the UICC card).
- FIG. 9 is a schematic diagram illustrating creation and delivery of a PIN certificate using a NFC contactless card reader 902 as the delivery media to the POS application 204 on the secure element 106 (e.g., the UICC card).
- a NFC contactless card reader 902 as the delivery media to the POS application 204 on the secure element 106 (e.g., the UICC card).
- FIG. 10 is a schematic diagram illustrating creation and delivery of a PIN certificate using the payment card 102 as the delivery media with a feedback loop for proving that the mobile phone 104 is present.
- the POS Issuer installs the POS application 204 into the secure element 106 (e.g., UICC Card) and launches POS enciphering key pair generation in the secure element 106.
- the POS Issuer receives the public POS key, combines it with the phone number of the mobile phone 104 (MSISDN) and signs the public POS Certificate with the POS Issuer's Secret key.
- the POS Issuer stores the POS public key certificate (including MSISDN) in the UICC POS Certificate database.
- the cardholder inserts in the card terminal 702 the card 102 to be registered with the POS application, and reads the Primary Account Number, the public IC PIN enciphering key, the cardholder's name, etc.
- the cardholder is verified by the PIN code (PIN2) entered using the keypad of the card terminal 702 and the payment card's Primary Account Number (PAN).
- PIN2 PIN2
- PAN Primary Account Number
- the cardholder enters the mobile phone number of the secure element 106, e.g., the POS UICC card (MSISDN).
- MSISDN POS UICC card
- the card terminal 702 or the Card Issuer requests the POS certificate using the MSISDN number.
- the card terminal 702 or the Card Issuer receives the UICC POS certificate and validates it by using the POS Issuer's public key.
- the card terminal 702 generates an unpredictable number, encrypts the number with the public POS key and send it to the POS application 204 on the secure element 106, e.g., UICC card, using the MSISDN number.
- the POS application 204 receives the encrypted data, decrypts the number, and presents the recovered unpredictable number on the display 704 of the mobile device 104.
- the cardholder and owner of the mobile device 104 enters the unpredictable number on the card terminal 702 for proof of having the mobile device 104 with the UICC card corresponding with the MSISDN number.
- Near Field communication may be used to verify the phone 104 with the POS app 204 on the secure element 106 at the card terminal 702.
- the card terminal 702 verifies the sent and user typed unpredictable numbers, and as a result, either proceeds or declines.
- the card terminal generates the pseudo code (PIN2), signs the POS PIN Certificate (MSISDN, PAN, PIN, PIN2) with a card issuer's secret key and encrypts it with a public POS key.
- the card issuer sends the encrypted and signed POS PIN Certificate to the secure element 106, e.g., UICC card, using the MSISDN number.
- the secure element 106 receives the encrypted POS PIN Certificate and decrypts it with its secret POS key, verifies the card issuer's signature, and stores the POS PIN Certificate in the secure element's secure memory.
- the card issuer then sends the ⁇ 2 code by secure mail to the cardholder's correspondence address.
- FIG. 11 is a block diagram of one potential implementation of the UICC Card with a secure POS terminal application and PIN Certificate database.
- the transaction may be a payment transaction, such as an EMV transaction with corresponding security features, such as unpredictable numbers, transaction counters, challenge-response methods, random padding, PIN code and key enciphering as described in and required by the used transaction protocol.
- security features such as unpredictable numbers, transaction counters, challenge-response methods, random padding, PIN code and key enciphering as described in and required by the used transaction protocol.
- the payment card 102 can use Near Field Communication protocol or any other similar short distance radio frequency electromagnetic communication protocol, or an optical communication protocol using visible or non- visible wavelength.
- the PIN code cardholder verification method is not limited to financial transactions or for use with only a payment card, but can be used with any type of user authentication and verification purposes, for example, physical access control or logging into a web site.
- the PIN certificates on the secure element can be securely modified and deleted using either a remote connection or locally.
- the PIN code for a specific payment card may be encrypted and signed by a secured system and then transmitted to the POS terminal without using the mobile device 104 as the PIN entry device, but instead using a secure data communication channel from an external secure system.
- the secure channel can be, for example, via the NFC antenna of the mobile device, or a secure communication over a network.
- the present embodiment(s) thus enables secure cardholder verification without entering, and potentially exposing, the actual payment card PIN code by using a non-secure device, such as a mobile phone keypad or touch screen.
- aspects of the present embodiment(s) can also be embodied as software configured to be used with a processor to cause the processor to perform operations, or can be embodied as hardware on one or more connected or unconnected devices.
- the software can be stored on a non-transistory computer-readable media.
Landscapes
- Business, Economics & Management (AREA)
- Engineering & Computer Science (AREA)
- Accounting & Taxation (AREA)
- Physics & Mathematics (AREA)
- Strategic Management (AREA)
- General Business, Economics & Management (AREA)
- General Physics & Mathematics (AREA)
- Theoretical Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Microelectronics & Electronic Packaging (AREA)
- Computer Security & Cryptography (AREA)
- Finance (AREA)
- Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
Abstract
A method and system for authenticating a user conducting a payment card transaction using a payment card is described. The method includes comparing, in a secure element containing secured data including a first code and first payment card information associated with the first code, or a mobile device to which the secure element is connected, the first code with a second code provided as an entry at the mobile device, and the first payment card information with second payment card information of the payment card read from the payment card via a card reader of the mobile device when the payment card is near the card reader of the mobile device. The method includes transmitting user authentication information associated with the first code for conducting the payment card transaction when there is a match between the first and second codes and the first and second payment card information.
Description
AUTHENTICATION METHOD AND SYSTEM
CROSS REFERENCE TO RELATED APPLICATIONS
[0001] This application is based on and claims priority to U.S. Provisional Patent App. No. 61/927,536, filed on January 15, 2014 with the U.S. Patent Office, the contents of which priority application are hereby incorporated by reference in their entity.
BACKGROUND OF THE INVENTION FIELD OF THE INVENTION
[0002] The present invention relates to a method and system that are particularly applicable for use in authentication of transactions using contactless chip payment cards, and secure Personal Identification Number (PIN) code entry using contactless chip payment cards.
DESCRIPTION OF THE RELATED ART
[0003] Mobile devices, such mobile phones, smart phones, personal computers, set top boxes, automotive dashboard computers and tablet computers can be used for financial transactions, such as credit card payments. This functionality is known generally as Mobile Payment or Mobile Commerce.
[0004] A mobile device can run several software applications in the same fashion as computers, and there is a risk that some of the applications the users are downloading from the Internet may contain unwanted code or hidden functionality ("Malware") which could detect, record, and misuse private and sensitive information, such as credit card numbers and PIN codes.
[0005] Current methods implement a contactless mobile Point of Sale (POS) terminal as software in a mobile device or in a Subscriber Identity Module (SIM) card, which is inserted into the mobile phone, and implement external card readers and PIN pads connected to the mobile device either via wireless Local area Network (WLAN), Bluetooth or plugged into device headset connector. The mobile POS terminal can use the phone as a card reader for Near Field Communication (NFC) and other contactless
cards, as well as a display and a keypad for user input and as a modem to connect to a payment processing system.
[0006] Like the Europay, MasterCard, and Visa (EMV) credit cards with an embedded integrated circuit (IC), Universal Integrated Circuit Card (UICC)/SIM cards used in mobile devices are tamper evident and designed to meet high security standards fulfilling the criteria for financial transactions.
[0007] A problem that arises with respect to using a mobile phone for payment transactions, the mobile phone including the operating system software, hardware, and applications running in the memory of the mobile phone, is not considered secure enough for entering a secret credit card PIN code and/or passwords for financial transactions. Malware software could monitor and record the keystrokes or touch screen activity when the user is typing the PIN code, copying a user's on-screen signature, recording voice commands or generally capturing any activity the user may do to interact with the device and its operating system.
[0008] The cardholder verification PIN code used for card payments can be captured by a software application running in the phone before it reaches the POS application. Therefore, the mobile phone cannot be trusted as a PIN entry device.
[0009] Contactless payment cards are available, such as Contactless EMV cards with an NFC interface, which allow the contactless payment card to interact with a contactless card reader without a physical contact. This feature enables very fast and convenient payment transactions. In some instances, card issuers accept that contactless payments below a certain threshold value can be allowed without the user verification PIN code. However, this may lead to a situation where a stolen contactless card could be used multiple times at or below the threshold level without ever needing to know or enter the secret PIN code.
[0010] As a countermeasure, the Contactless EMV cards have implemented a counter, which forces the user to enter the PIN code after a certain number of repeated contactless transactions occur without using the PIN code. In practice, the cardholder then needs to use a POS terminal with a traditional chip card reader (ISO contacts) and insert the card in the card reader to complete the transaction with the PIN code to reset the non-PIN transaction counter. If the POS terminal does not have a certified PIN entry
pad or a contact card reader, this could lead to a dead-lock situation where the contactless card requires the PIN code to continue operational, but the POS terminal is not capable of handling the PIN entry.
[0011] In the case of a transaction with a value above the threshold, i.e. which could not be conducted without the PIN code, the only option is to use a POS terminal with contact card reader and a certified PIN entry pad. Mobile device-based POS terminals without a secure PIN Entry Device could not handle such transactions. The risk is that the credit card or the card information including the PIN code could be stolen or captured, and together those could be used for committing fraudulent purchases.
BRIEF SUMMARY OF THE INVENTION
[0012] According to an aspect of the present invention, there is provided a method as claimed in claim 1 or 25. According to another aspect of the present invention, there is provided a system as claimed in claim 27.
[0013] The embodiment(s) relate to contactless chip payment cards and secure PIN code entry with a POS terminal application running on an Embedded Secure Element ("ESE") of a mobile device or on a UICC/SIM card ("UICC Card") or similar inserted in a mobile device, which supports a short distance communication method, such as NFC.
[0014] Instead of using the phone's keypad or touch screen display or an external PIN entry device for providing the cardholder verification PIN code, the present embodiment(s) creates a secured PIN code (a pseudo PIN code - PIN2) combined with an actual credit card PIN code (true PIN code), a credit card number, and a mobile phone number, and securely delivers the data to and stores it in the UICC (SIM) card in a mobile device. Furthermore, the present embodiment(s) enables the cardholder to conduct a contactless credit card transaction requiring a PIN code, and instead of the actual PIN code, enter the pseudo code (PIN2) on the mobile device and to the POS software residing on, e.g., the UICC card. The POS software will verify whether the user-provided pseudo PIN code (PIN2) matches the stored PIN code (PIN2) for the used credit card, it will, if required, encipher the actual PIN code and send it to the contactless credit card or to a payment processing system as a cardholder verification.
[0015] The present embodiment(s) seek to guarantee that the payment card's true PIN code is never exposed in clear text format, but it is always encrypted in a security certified device or is stored in a secured chip card memory.
[0016] In one or more embodiments, a method for authenticating a user conducting a payment card transaction using a payment card is provided. The method includes comparing, in one or more of a secure element containing secured data including at least one first code and at least one first payment card information associated with the first code, and a mobile device to which the secure element is connected, the first code with a second code provided as an entry at the mobile device to determine whether or not there is a match between the first code and the second code, and comparing the first payment card information with second payment card information of the payment card read from the payment card via a card reader of the mobile device to determine whether or not there is a match between the first payment card information and the second payment card information when the payment card is in the vicinity of the card reader of the mobile device. The method also includes transmitting, by a transmission device from the mobile device, user authentication information for conducting the payment card transaction when it is determined that there is a match between the first code and the second code and it is determined that there is a match between the first payment card information and the second payment card information.
[0017] In one or more embodiments, a method of enabling a user to conduct a payment card transaction is provided. The method includes receiving an entry of a pseudo personal identification number (PIN) code in connection with a payment card, at a secure element connected with a mobile device, and obtaining user authentication information including a true PIN code associated with the pseudo PIN code. The method also includes transmitting, via a transmission device, the user authentication information confirming user authentication to authorize use of the payment card in a payment transaction, to the payment card or to an external authorization service or system.
[0018] In one or more embodiments, a system for enabling a user to conduct a payment card transaction is provided. The system includes a contactless payment card, a mobile device, a secure element, and a transmission device. The contactless payment
card is configured to communicate via short distance communication. The mobile device includes one or more user interface components configured to receive an entry of a second code, and a card reader configured to read information from the payment card. The secure element is configured to communicate with the mobile device. The secure element receives and stores secured data including at least one first code and at least one first payment card information associated with the first code, and receives the second code from the mobile device. The secure element includes one or more processors executing a transaction authorization application. The transaction authorization application obtains user authentication information when the second code is compared with the stored first code that is associated with the payment card and a match is determined to be made between the first code and the second code, and when the stored first payment card information is compared with second payment card information read from the payment card via the card reader of the mobile device and a match is determined to be made between the stored first payment card information and the second payment card information read from the payment card via the card reader when the payment card is in the vicinity of the card reader of the mobile device. The transmission device is configured to transmit the user authentication information to one of the payment card and a payment processing system as user verification for conducting a transaction using the payment card with the mobile device.
BRIEF DESCRIPTION OF THE DRAWINGS
[0019] Embodiments of the present invention will now be described, by way of example only, with reference to the accompanying drawings in which:
FIG. 1 is a schematic diagram of a contactless payment card, a secure element, and a mobile phone according to at least one embodiment;
FIG. 2 is a schematic diagram of a contactless payment card, a secure element, a mobile phone, and a payment processor according to at least one embodiment;
FIG. 3 is a schematic diagram of the contactless payment card, the mobile phone, and a payment processor according to at least one embodiment;
FIG. 4 is a schematic illustration of a transaction flow with the contactless payment card, a POS terminal application, a PIN application, a mobile phone, and an issuer/acquirer bank according to at least one embodiment;
FIG. 5 is a schematic illustration of a transaction flow with the contactless payment card, a POS terminal application, a PIN application, a mobile phone, and an issuer/acquirer bank according to at least one embodiment;
FIG. 6 is a schematic illustration of a transaction flow with the contactless payment card, a POS terminal application, a PIN application, a mobile phone, and an issuer/acquirer bank according to at least one embodiment;
FIG. 7 is a schematic diagram illustrating creation and delivery of a PIN certificate according to at least one embodiment;
FIG. 8 is a schematic diagram illustrating creation and delivery of a PIN certificate according to at least one embodiment;
FIG. 9 is a schematic diagram illustrating creation and delivery of a PIN certificate according to at least one embodiment;
FIG. 10 is a schematic diagram illustrating creation and delivery of a PIN certificate according to at least one embodiment; and
FIG. 11 is a block diagram of a UICC card according to at least one embodiment.
DETAILED DESCRIPTION OF THE INVENTION
[0020] Reference will now be made in detail to the preferred embodiments of the present invention, examples of which are illustrated in the accompanying drawings, wherein like reference numerals refer to like elements throughout.
[0021] The present embodiment(s) seek to solve the above-described problem of unwanted exposure of the true PIN code, by typically encrypting the true PIN code in a security certified device before transmitting it and by storing the true PIN code in a secured chip card memory. The present embodiment(s) seek to enable full tracing of the PIN code using security certificates based on cryptographic algorithms, such as Public Key Infrastructure (PKI).
[0022] Turning now to FIG. 1, FIG. 1 is a schematic diagram illustrating a system 100 including a contactless payment card 102, a mobile device 104, and a secure element 106. FIG. 2 is a schematic diagram illustrating a system 200 including the contactless payment card 102, the mobile device 104, the secure element 106, and a payment card issuer 202. The mobile device 104 may include, but is not limited to, a cellular phone, a mobile tablet, a personal digital assistant, a personal communicator, a pager, a smart phone, or any other handheld computing device. The mobile device 104 includes a card reader 108 configured to read the contactless payment card 102 and a transmission device 110. The secure element 106 may be a Universal Integrated Circuit Card (UICC) that is connected to the mobile device 104, typically by being inserted into the mobile device 104. The secure element 106 may be an embedded secure element (ESE) connected with the mobile device 104 by being embedded within the mobile device 104 itself. The secure element 106 contains secured data, which has obtained in a manner described in more detail below. The secured data includes at least one first code, which may be a PIN code, and at least one first payment card information associated with the first code. The secured data may also include another code, which is a true PIN code.
[0023] When a user wants to use the payment card 102, the user is authenticated by inputting a second code (e.g., ΡΓΝ2 code) to the mobile device 104. The PIN code is a pseudo PIN code and is not the actual (true) PIN code associated with the contactless payment card 102. The user enters the PIN code (PIN2) using a provided user interface running on the mobile device 104. The user-input PIN code (PIN2) is forwarded to a PIN/authorization application or Point of Sale (POS) application running on the secure element 106.
[0024] Thereafter, the POS application on the secure element 106, either alone or in conjunction with the mobile device 104, verifies whether the user-entered PIN2 code matches the code it received as secured data, which may include enciphered PIN data. The POS application at the secure element 106 also compares first payment card information stored as part of the secured data with second payment card information of the payment card 102 read from the payment card via the card reader 108 of the mobile device 104 to determine whether or not there is a match between the first payment card
information and the second payment card information when the payment card 102 is in the vicinity of the card reader 108 of the mobile device 104. The term "in the vicinity" corresponds with being in a readable area of the card reader 108 of the mobile device 104 such that the card reader 108 is able to read information from the payment card 102.
[0025] If the verification between the PIN codes and the payment card information is successful (i.e., there is a match between the entered code and the stored code and there is a match between the read payment card information and the stored payment card information), the POS application provides user authentication information for conducting a payment card transaction that is transmitted by the transmission device 110 from the mobile device 104. The POS application retrieves data, such as a true PIN code (e.g., a third code) securely stored in a memory, enciphers the true PIN code, and provides the enciphered PIN code. The true PIN code may be stored as plain text in a secured memory or as encrypted text in a non-secure memory. The user authentication information may include the enciphered actual (true) PIN code (e.g., a third code). The user authentication information, which may include the enciphered PIN code, may be transmitted to the contactless payment card 102 for local validation (FIG. 1). The user authentication information, which may include the enciphered PIN code, may be transmitted to a payment processing system 202, illustrated in FIG. 2, for online validation. The user authentication information may include a user verification status indicator, which may be transmitted to the payment processing system 202 (FIG. 2).
[0026] The true PIN code (the third PIN code) linked with an account for the payment card 102, e.g., through a primary account number ("PAN"), and the secret, second PIN code (PIN2) may be created using a security certified device or system, such as an ATM or by a bank. The second PIN code (PIN2) may be signed by the issuer of the payment card 102 and encrypted.
[0027] The user authentication information, which includes the enciphered PIN data, can contain also other information, such as counter, expiration date, payment card number, and POS UICC card identification. The enciphered PIN data can be sent to the secure element 106, e.g., the POS UICC card of the mobile device 104 or the embedded secure element ("ESE") embedded in the mobile device 104, over any available network, short distance communication method, such as NFC, via the mobile device 104
or by using the card reader 108. The payment card's PIN and ΡΓΝ2 codes are residing in the same secure element (e.g., the smart card IC on the POS UICC) as the POS terminal application. Thus, the true PIN code for the payment card 102 is never outside a secured, tamper-evident device or chip card in clear text format
[0028] Thus, when the contactless payment card 102 is used in conjunction with the mobile device 104 with a POS application on a secure element 106, such as the UICC card or the ESE, and a PIN code is required for cardholder verification, the cardholder can enter the second PIN code (PIN2) instead of the actual PIN code (third code) of the payment card 102.
[0029] As a result, the PIN2 code can be used for cardholder verification only for the registered cardholder's payment card 102 used in conjunction with the cardholder's mobile device 104 holding the secure element (e.g., the cardholder's UICC card or embedded secure element embedded in the mobile device 104. In other words, capturing and stealing the PIN2 code does not allow the payment card 102 to be used, for example, at an ATM to withdraw cash from the cardholder's bank account or to allow any purchases or cash-back transactions using the card at a Point of Sale terminal.
[0030] The present embodiment(s) seek to guarantee that the payment card's PIN code is never outside a secured, tamper evident device or chip card in clear text format, i.e. not encrypted, and also that the user never needs to type the actual card PIN number on the mobile phone 104.
[0031] Consequently, the present embodiment(s) seek to significantly increases the security level and decreases fraudulent use because the actual payment card PIN code is never used with the mobile phone-based POS terminal. Therefore, capturing the PIN code, for example by malware running in the mobile device 104, cannot be used in conjunction with the payment card 102 at an ATM, at a POS terminal in a shop, etc.
[0032] Turning now to FIGS. 3-6, FIG. 3 is a diagram of the contactless payment card 102, the mobile phone 104, and the payment processor 202 according to at least one embodiment. FIG. 3 is an example of a payment transaction in accordance with at least one embodiment. FIG. 4 is a schematic illustration of a transaction flow with the contactless payment card, a POS terminal application, a PIN application, a mobile phone, and an acquirer bank according to at least one embodiment. FIG. 5 is a schematic
illustration of a transaction flow with the contactless payment card, a POS terminal application, a PIN application, a mobile phone, and an issuer/acquirer bank according to at least one embodiment. FIG. 6 is a schematic illustration of a transaction flow with the contactless payment card, a POS terminal application, a PIN application, a mobile phone, and an issuer/acquirer bank according to at least one embodiment.
[0033] The payment processor ("PP") 202 may receive the cardholder's phone number and fixed payment instruction including a merchant's remote POS terminal profile from a merchant. The PP 202 signs the Remote Payment Instruction with its secret key, encrypts it with a public POS Certificate key corresponding to the cardholder's phone number of the mobile phone 104, and sends it to the POS application 204 on the secure element 106, which may be a UICC card of the cardholder's mobile device 104 or an embedded secure element (ESE) embedded in the cardholder's mobile device 104, using the cardholder's phone number.
[0034] The POS application 204 on the secure element 106 receives the Remote Payment Instruction, decrypts it with its secret key and validates it with the PP's 202 public key. The POS application 204 interacts with a User Interface application 206 on the cardholder's mobile device 104 and displays the payment information for cardholder's approval or dismissal. The User Interface application 206 sends the cardholder's approval to the POS application 204.
[0035] The POS application 204 activates the mobile device's NFC interface and begins the payment transaction process with the cardholder's payment card 102. The POS application 204 reads information from the card 102, including the card number, cardholder's name, and public PIN enciphering key, etc. depending on the payment card 102.
[0036] A cardholder verification (authentication) PIN code is required by the POS application 204 at the secure element 106 or by the payment card 102. The POS application 204 requests a PIN code verification from a PIN application, which may be included in the POS application or may be separate from the POS application. The PIN application retrieves the payment card's registered PIN from its memory and requests a secret PIN code (ΡΓΝ2) from the cardholder using the User Interface application 206.
[0037] The cardholder enters the PIN2 code on the User Interface application 206 at the mobile phone 104, and the User Interface application 206 returns the ΡΓΝ2 code to the PIN application running on the secure element 106. Thereafter, the PIN application verifies the PIN2 code and the payment card number, and if the PIN2 code and the payment card number are verified successfully by matching with a stored code and payment card number, the PIN application enciphers a corresponding PIN code with the payment card's PIN enciphering key and returns the enciphered PIN code (e.g., the third code) to the POS application 204, which will forward the enciphered PIN code to the cardholder's payment card 102 for cardholder verification (FIG. 4). The payment card 102 recovers and verifies the PIN code with its PIN enciphering key, and either accepts or declines the payment and sends the result to the POS application 202 for further processing.
[0038] Alternatively, as shown in FIG. 5, when the second code (PIN2) and the payment card number are verified, the PIN application enciphers a corresponding PIN code associated with the PIN2 code and transmits the enciphered PIN code to the issuer/acquirer bank (payment processing system) 202, which provides verification to the POS application 204.
[0039] In another alternative, as shown in FIG. 6, when the second code (PIN2) and the payment card number are verified, the PIN application may provide the POS application 204 with an indication that the user verification is satisfied. The POS application 204 may transmit a user verification status indicator to the issuer/acquirer bank (payment processing system) 202.
[0040] While the POS application and the PIN application are described above as two separate applications, the POS application and the PIN application can be integrated in the same application.
[0041] Turning now to FIGS. 7-10, FIGS. 7-10 illustrate the creation and delivery of the PIN certificate, which may store the secured data, including the PIN2 code.
[0042] The PIN certificate contains various types of information associated with the payment card 102. The PIN certificate may contain, for example, a payment card number (e.g, a Primary Account Number), the true PIN code, the pseudo PIN code (PIN2), a validity period, processing restrictions (e.g., value, usage counter, error
counter, currency, country, card version, POS version, host device, etc.), issuer information, the date of issuance, and the issuer's signature.
[0043] The second code (PIN2) is provided from one or more stored secured data, each of the stored secured data being associated with a different condition associated with use of the payment card 102. The different condition for a specific stored secured data includes one or more of: (1) a value limit on the transaction associated with the user authentication, (2) a threshold level of transactions using only the payment card 102, (3) the transaction involving currency that is not indicated at an authentication application as domestic currency, (4) the transaction occurring in a foreign country to a home country of the payment card 102 or a home country of the mobile device 104, (5) the transaction being a forced transaction, and (6) a single-code transaction in which the stored secured code expires after the single-code transaction occurs.
[0044] The secured data may be received via one or more of a mobile/cellular network (see FIG. 8), a short distance communication interface (see FIG. 9), an embedded camera in the mobile device, a microphone, another audio interface of the mobile device 104, a keypad of the mobile device 104, and a touchscreen of the mobile device 104.
[0045] FIG. 7 is a schematic diagram illustrating creation and delivery of a PIN certificate using the payment card 102 as the delivery media.
[0046] A POS Issuer installs a POS application 204 into the secure element 106 (e.g., the UICC Card) and launches POS enciphering key pair generation the secure element 106. The POS Issuer receives and verifies the initial POS Certificate, updates it with the phone number of the mobile phone 104 (MSISDN) and signs the updated POS Certificate with the POS Issuer's Secret key. The POS Issuer stores the POS Certificate (including MSISDN) in the POS Certificate database.
[0047] The cardholder inserts in a card terminal 702 the card 102 to be registered with the POS application 204, and reads the Primary Account Number, the public IC PIN enciphering key, the cardholder's name, etc. The cardholder is verified by the PIN code (PIN2) entered using the keypad of the card terminal 702 and the payment card's Primary Account Number (PAN). The cardholder enters the mobile phone number of the secure element 106, e.g., the POS UICC card (MSISDN). The card terminal 702 or
the Card Issuer requests the POS certificate using the MSISDN number. The card terminal 702 or the Card Issuer receives the UICC POS certificate and validates it by using the POS Issuer's public key.
[0048] The card terminal 702 generates an unpredictable number, encrypts the number with the public POS key and send it to the POS application 204 on the secure element 106, e.g., UICC card, using the MSISDN number. The POS application 204 receives the encrypted data, decrypts the number, and presents the recovered unpredictable number on a display 704 of the mobile device 104.
[0049] The cardholder and owner of the mobile device 104 enters the unpredictable number on the card terminal 702 for proof of having the mobile device 104 with the UICC card corresponding with the MSISDN number. In the alternative, Near Field communication may be used to verify the phone 104 with the POS app 204 on the secure element 106 at the card terminal 702.
[0050] The card terminal 702 verifies the sent and user typed unpredictable numbers, and as a result, either proceeds or declines. The card terminal generates the pseudo code (PIN2), signs the POS PIN Certificate (MSISDN, PAN, PIN, PIN2) with a card issuer's secret key and encrypts it with a public POS key. The card issuer sends the encrypted and signed POS PIN Certificate to the secure element 106, e.g., UICC card, using the MSISDN number. The secure element 106 receives the encrypted POS PIN Certificate and decrypts it with its secret POS key, verifies the card issuer's signature, and stores the POS PIN Certificate in the secure element's secure memory. The card issuer then sends the ΡΓΝ2 code by secure mail to the cardholder's correspondence address.
[0051] FIG. 8 is a schematic diagram illustrating creation and delivery of a PIN certificate using a network 802 as the delivery method to the to the POS application 204 on the secure element 106 (e.g., the UICC card).
[0052] FIG. 9 is a schematic diagram illustrating creation and delivery of a PIN certificate using a NFC contactless card reader 902 as the delivery media to the POS application 204 on the secure element 106 (e.g., the UICC card).
[0053] FIG. 10 is a schematic diagram illustrating creation and delivery of a PIN certificate using the payment card 102 as the delivery media with a feedback loop for proving that the mobile phone 104 is present.
[0054] The POS Issuer installs the POS application 204 into the secure element 106 (e.g., UICC Card) and launches POS enciphering key pair generation in the secure element 106. The POS Issuer receives the public POS key, combines it with the phone number of the mobile phone 104 (MSISDN) and signs the public POS Certificate with the POS Issuer's Secret key. The POS Issuer stores the POS public key certificate (including MSISDN) in the UICC POS Certificate database.
[0055] The cardholder inserts in the card terminal 702 the card 102 to be registered with the POS application, and reads the Primary Account Number, the public IC PIN enciphering key, the cardholder's name, etc. The cardholder is verified by the PIN code (PIN2) entered using the keypad of the card terminal 702 and the payment card's Primary Account Number (PAN). The cardholder enters the mobile phone number of the secure element 106, e.g., the POS UICC card (MSISDN). The card terminal 702 or the Card Issuer requests the POS certificate using the MSISDN number. The card terminal 702 or the Card Issuer receives the UICC POS certificate and validates it by using the POS Issuer's public key.
[0056] The card terminal 702 generates an unpredictable number, encrypts the number with the public POS key and send it to the POS application 204 on the secure element 106, e.g., UICC card, using the MSISDN number. The POS application 204 receives the encrypted data, decrypts the number, and presents the recovered unpredictable number on the display 704 of the mobile device 104.
[0057] The cardholder and owner of the mobile device 104 enters the unpredictable number on the card terminal 702 for proof of having the mobile device 104 with the UICC card corresponding with the MSISDN number. In the alternative, Near Field communication may be used to verify the phone 104 with the POS app 204 on the secure element 106 at the card terminal 702.
[0058] The card terminal 702 verifies the sent and user typed unpredictable numbers, and as a result, either proceeds or declines. The card terminal generates the pseudo code (PIN2), signs the POS PIN Certificate (MSISDN, PAN, PIN, PIN2) with a card issuer's secret key and encrypts it with a public POS key. The card issuer sends the encrypted and signed POS PIN Certificate to the secure element 106, e.g., UICC card, using the MSISDN number. The secure element 106 receives the encrypted POS PIN Certificate
and decrypts it with its secret POS key, verifies the card issuer's signature, and stores the POS PIN Certificate in the secure element's secure memory. The card issuer then sends the ΡΓΝ2 code by secure mail to the cardholder's correspondence address.
[0059] FIG. 11 is a block diagram of one potential implementation of the UICC Card with a secure POS terminal application and PIN Certificate database.
[0060] The transaction may be a payment transaction, such as an EMV transaction with corresponding security features, such as unpredictable numbers, transaction counters, challenge-response methods, random padding, PIN code and key enciphering as described in and required by the used transaction protocol.
[0061] The payment card 102 can use Near Field Communication protocol or any other similar short distance radio frequency electromagnetic communication protocol, or an optical communication protocol using visible or non- visible wavelength.
[0062] The PIN code cardholder verification method is not limited to financial transactions or for use with only a payment card, but can be used with any type of user authentication and verification purposes, for example, physical access control or logging into a web site.
[0063] The PIN certificates on the secure element, such as the UICC card, can be securely modified and deleted using either a remote connection or locally.
[0064] The PIN code for a specific payment card may be encrypted and signed by a secured system and then transmitted to the POS terminal without using the mobile device 104 as the PIN entry device, but instead using a secure data communication channel from an external secure system. The secure channel can be, for example, via the NFC antenna of the mobile device, or a secure communication over a network.
[0065] The present embodiment(s) thus enables secure cardholder verification without entering, and potentially exposing, the actual payment card PIN code by using a non-secure device, such as a mobile phone keypad or touch screen.
[0066] Aspects of the present embodiment(s) can also be embodied as software configured to be used with a processor to cause the processor to perform operations, or can be embodied as hardware on one or more connected or unconnected devices. The software can be stored on a non-transistory computer-readable media.
[0067] While in accordance with the provisions of the Patent Statutes the preferred forms and embodiments of the invention have been illustrated and described, it will be apparent to those skilled in the art that various changes may be made without deviating from the inventive concepts set forth above.
Claims
1. A method for authenticating a user conducting a payment card transaction using a payment card, the method comprising:
comparing, in one or more of a secure element and a mobile device to which the secure element is connected, a first code with a second code to determine whether or not there is a match between the first code and the second code, the secure element containing secured data including at least one first code and at least one first payment card information associated with the first code, the second code being provided as an entry at the mobile device;
comparing, in one or more of a secure element and a mobile device to which the secure element is connected, the first payment card information with second payment card information of the payment card read from the payment card via a card reader of the mobile device to determine whether or not there is a match between the first payment card information and the second payment card information; and
transmitting, by a transmission device from the mobile device, user authentication information for conducting the payment card transaction when it is determined that there is a match between the first code and the second code and it is determined that there is a match between the first payment card information and the second payment card information.
2. The method according to claim 1, wherein the secure element is a Universal Integrated Circuit Card (UICC) connected to the mobile device by being inserted into the mobile device or an embedded secure element (ESE) connected with the mobile device by being embedded within the mobile device.
3. The method according to claim 1 or 2, wherein the transmitting the user authentication information comprises one of: transmitting a third code that is associated with the first payment card information and is to be transmitted to a payment processing system for online validation; transmitting the third code to the payment card for a local
validation; and, transmitting a user verification status indicator to the payment processing system.
4. The method according to claim 1, 2 or 3, wherein the secured data is received via one or more of: a mobile/cellular network; the Internet; a wireless or wired local area network; a cable or memory card connected to the mobile device; a short distance communication interface; an embedded camera in the mobile device; a microphone; another audio interface of the mobile device; a keypad of the mobile device; and a touchscreen of the mobile device.
5. The method according to claim 4, wherein the short distance communication interface operates according to one of Near Field Communication (NFC) protocol, Bluetooth communication protocol, and Infrared communication protocol.
6. The method according to any preceding claim, wherein at least a part of the secured data is encrypted.
7. The method according to any preceding claim, further comprising using the secured data to form a digital certificate, wherein the digital certificate is signed by a trusted provider.
8. The method according to any of claims 1 to 6, wherein the secured data is a digital certificate encrypted by a trusted provider.
9. The method according to any of claims 1 to 8, wherein the secured data contains a public key certificate of a trusted provider.
10. The method according to claim 1, further comprising verifying the content of the secured data using the public key certificate of the trusted provider.
11. The method according to any preceding claim, further comprising encrypting the transmitted user authentication information prior to transmission from the transmission device.
12. The method according to any preceding claim, further comprising digitally signing the transmitted user authentication information by one or more of the mobile device, Embedded Secure Element, and a Universal Integrated Circuit Card (UlCCySubscriber Identity Module (SIM) card.
13. The method according to any preceding claim, further comprising executing an authentication application by a Universal Integrated Circuit Card, an Embedded Secure Element or one or more processors at the mobile device to compare the first code with the second code.
14. The method according to any preceding claim, wherein the user authentication information includes a third code associated with the first payment card information.
15. The method according to claim 14, further comprising encrypting the third code before transmitting the third code to one of the payment card and an external authentication service.
16. The method according to claim 15, wherein the first code and the second code are pseudo personal identification number (PIN) codes for user verification using an authentication application, and the third code is a true PIN code for user verification for using the payment card.
17. The method according to any preceding claim, wherein a transaction authorization application that provides the secured data runs on the secure element, the secured data being stored in a secure memory of the secure element.
18. The method according to any preceding claim, wherein the secured data is stored in a personal identification number (PIN) certificate containing various types of information associated with the payment card.
19. The method according to any preceding claim, wherein the second code is provided from one or more stored secured data, each of the stored secured data being associated with a different condition associated with use of the payment card.
20. The method according to claim 19, wherein the different condition for a specific stored secured data of the one or more stored secured data includes one or more of:
a value limit on the transaction associated with the user authentication, a threshold level of transactions using only the payment card, the transaction involving currency that is not indicated at an authentication application as domestic currency,
the transaction occurring in a foreign country to a home country of the payment card or a home country of the mobile device,
the transaction being a forced transaction, and
a single-code transaction in which the stored secured code expires after the single-code transaction occurs.
21. The method according to any preceding claim, wherein the third code is linked to an identifier of the payment card.
22. The method according to any preceding claim, wherein the payment card is a contactless payment card.
23. The method according to any preceding claim, wherein the contactless card communicates via short distance communication.
24. The method according to any preceding claim, wherein a transaction authorization application that provides the user authentication information is provided at the mobile device.
25. A method of enabling a user to conduct a payment card transaction, the method comprising:
receiving an entry of a pseudo personal identification number (PIN) code in connection with a payment card, at a secure element connected with a mobile device;
obtaining user authentication information including a true PIN code associated with the pseudo PIN code; and
transmitting, via a transmission device, the user authentication information confirming user authentication to authorize use of the payment card in a payment transaction, to the payment card or to an external authorization service or system.
26. The method according to claim 25, wherein the obtained user authentication information is obtained at the mobile device at which the pseudo PIN code is entered and transmitted from the mobile device to the payment card.
27. A system for enabling a user to conduct a payment card transaction, the system comprising:
a contactless payment card configured to communicate via short distance communication;
a mobile device including one or more user interface components configured to receive an entry of a second code, and a card reader configured to read information from the payment card;
a secure element configured to communicate with the mobile device, the secure element being arranged to receive and store secured data including at least one first code and at least one first payment card information associated with the first code, and receive the second code from the mobile device, the secure element comprising
one or more processors executing a transaction authorization application, the transaction authorization application being arranged to obtain user authentication information when the second code is compared with the stored first code that is associated with the payment card and a match is determined to be made between the first code and the second code, and when the stored first payment card information is compared with second payment card information read from the payment card via the card reader of the mobile device and a match is determined to be made between the stored first payment card information and the second payment card information; and a transmission device configured to transmit the user authentication information to one of the payment card and a payment processing system as user verification for conducting a transaction using the payment card with the mobile device.
28. The system according to claim 27, wherein the user authentication information includes a third code, the transmission device being arranged to transmit the third code to one of the payment processing system for online validation and the payment card for local validation.
29. The system according to claim 27, wherein the user authentication information includes a user verification status indicator, and the transmission device is arranged to transmit the user verification status indicator to the payment processing system.
30. The system according to claim 27, wherein the transmission device is provided at the mobile device.
31. A computer program comprising computer program code means for performing all of the steps of any of claims 1 to 26 when said program is executed by a computer.
32. A computer program as claimed in claim 31 embodied on a computer readable medium.
23
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP15706498.1A EP3095081A1 (en) | 2014-01-15 | 2015-01-15 | Authentication method and system |
Applications Claiming Priority (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US201461927536P | 2014-01-15 | 2014-01-15 | |
US61/927,536 | 2014-01-15 | ||
US201461934908P | 2014-02-03 | 2014-02-03 | |
US61/934,908 | 2014-02-03 |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2015107346A1 true WO2015107346A1 (en) | 2015-07-23 |
Family
ID=52589693
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/GB2015/050073 WO2015107346A1 (en) | 2014-01-15 | 2015-01-15 | Authentication method and system |
Country Status (2)
Country | Link |
---|---|
EP (1) | EP3095081A1 (en) |
WO (1) | WO2015107346A1 (en) |
Cited By (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US10198595B2 (en) | 2015-12-22 | 2019-02-05 | Walmart Apollo, Llc | Data breach detection system |
WO2021183073A1 (en) | 2020-03-12 | 2021-09-16 | Kartek Kart Ve Bi̇li̇şi̇m Teknoloji̇leri̇ Ti̇caret Anoni̇m Şi̇rketi̇ | A secure payment system with emv card transaction flow and pin confirmation without sharing card information of the mobile phone, computer or tablet of the cardholder and a method thereof |
US11587159B2 (en) * | 2017-04-24 | 2023-02-21 | Cpi Card Group—Tennessee, Inc. | Bridge application for user pin selection |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20100274677A1 (en) * | 2008-09-19 | 2010-10-28 | Logomotion, S.R.O. | Electronic payment application system and payment authorization method |
WO2012154915A1 (en) * | 2011-05-10 | 2012-11-15 | Dynamics Inc. | Systems, devices, and methods for mobile payment acceptance, mobile authorizations, mobile wallets, and contactless communication mechanisms |
US20130221092A1 (en) * | 2012-02-23 | 2013-08-29 | Mikhail Kushevsky | System and method of loading a transaction card and processing repayment on a mobile device |
-
2015
- 2015-01-15 EP EP15706498.1A patent/EP3095081A1/en not_active Withdrawn
- 2015-01-15 WO PCT/GB2015/050073 patent/WO2015107346A1/en active Application Filing
Patent Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20100274677A1 (en) * | 2008-09-19 | 2010-10-28 | Logomotion, S.R.O. | Electronic payment application system and payment authorization method |
WO2012154915A1 (en) * | 2011-05-10 | 2012-11-15 | Dynamics Inc. | Systems, devices, and methods for mobile payment acceptance, mobile authorizations, mobile wallets, and contactless communication mechanisms |
US20130221092A1 (en) * | 2012-02-23 | 2013-08-29 | Mikhail Kushevsky | System and method of loading a transaction card and processing repayment on a mobile device |
Non-Patent Citations (9)
Title |
---|
"Handbook of Information and Communication Security", 8 April 2010, SPRINGER, ISBN: 978-3-64-204116-7, article PETER STAVROULAKIS ET AL: "Handbook of Information and Communication Security", pages: 135 - 137, XP055179339 * |
ANONYMOUS: "Top 15+ Password Manager Apps for Android", INTERNET ARTICLE, 5 December 2013 (2013-12-05), XP055179536, Retrieved from the Internet <URL:http://www.topapps.net/android/top-password-manager-apps-for-android.html/> [retrieved on 20150326] * |
HENK C.A. VAN TILBORG ET AL: "Encyclopedia of Cryptography and Security", 6 September 2011, SPRINGER, ISBN: 978-1-44-195905-8, article MICHAEL WARD ET AL: "EMV", pages: 412 - 415, XP055178458 * |
JOSEF LANGER ET AL: "Anwendungen und Technik von Near Field Communication (NFC)", 16 September 2010, SPRINGER BERLIN HEIDELBERG, Berlin, Heidelberg, ISBN: 978-3-64-205497-6, XP055178840 * |
MEHDI KHOSROW-POUR: "Encyclopedia of Information Science and Technology, Second Edition", 9 September 2008, INFORMATION SCIENCE REFERENCE, ISBN: 978-1-60-566026-4, pages: 717 - 718, XP055178770 * |
NIKOLAY ELENKOV: "Using the SIM card as a secure element in Android", INTERNET ARTICLE, 27 September 2013 (2013-09-27), XP055178469, Retrieved from the Internet <URL:http://nelenkov.blogspot.de/2013/09/using-sim-card-as-secure-element.html> [retrieved on 20150323] * |
SARAH PEREZ: "CHARGE Anywhere Makes Nexus S an NFC Terminal", INTERNET ARTICLE, 28 March 2011 (2011-03-28), XP055178768, Retrieved from the Internet <URL:http://readwrite.com/2011/03/28/Charge_Anywhere_makes_nexus_s_an_nfc_terminal> [retrieved on 20150324] * |
WIKIPEDIA: "EMV", INTERNET ARTICLE, 13 January 2014 (2014-01-13), XP055178517, Retrieved from the Internet <URL:http://en.wikipedia.org/w/index.php?title=EMV&oldid=590522639> [retrieved on 20150323] * |
WIKIPEDIA: "Password manager", INTERNET ARTICLE, 2 January 2014 (2014-01-02), XP055178519, Retrieved from the Internet <URL:http://en.wikipedia.org/w/index.php?title=Password_manager&oldid=588856447> [retrieved on 20150323] * |
Cited By (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US10198595B2 (en) | 2015-12-22 | 2019-02-05 | Walmart Apollo, Llc | Data breach detection system |
US10482283B2 (en) | 2015-12-22 | 2019-11-19 | Walmart Apollo, Llc | Data breach detection system |
US11587159B2 (en) * | 2017-04-24 | 2023-02-21 | Cpi Card Group—Tennessee, Inc. | Bridge application for user pin selection |
WO2021183073A1 (en) | 2020-03-12 | 2021-09-16 | Kartek Kart Ve Bi̇li̇şi̇m Teknoloji̇leri̇ Ti̇caret Anoni̇m Şi̇rketi̇ | A secure payment system with emv card transaction flow and pin confirmation without sharing card information of the mobile phone, computer or tablet of the cardholder and a method thereof |
EP4118605A4 (en) * | 2020-03-12 | 2023-07-12 | Kartek Kart ve Bilisim Teknolojileri Ticaret Anonim Sirketi | A secure payment system with emv card transaction flow and pin confirmation without sharing card information of the mobile phone, computer or tablet of the cardholder and a method thereof |
Also Published As
Publication number | Publication date |
---|---|
EP3095081A1 (en) | 2016-11-23 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US20150199673A1 (en) | Method and system for secure password entry | |
US10826702B2 (en) | Secure authentication of user and mobile device | |
CN112602300B (en) | System and method for password authentication of contactless cards | |
CN113507377B (en) | Apparatus and method for transaction processing using a token and password based on transaction specific information | |
RU2648944C2 (en) | Methods, devices, and systems for secure provisioning, transmission and authentication of payment data | |
AU2020210294B2 (en) | Establishment of a secure session between a card reader and a mobile device | |
US9251513B2 (en) | Stand-alone secure PIN entry device for enabling EMV card transactions with separate card reader | |
JP2024084807A (en) | System and method for cryptographic authentication of contactless cards - Patents.com | |
CN106716916B (en) | Authentication system and method | |
CN112805737A (en) | Techniques for token proximity transactions | |
EP2733654A1 (en) | Electronic payment method, system and device for securely exchanging payment information | |
CN117252593A (en) | Transaction authorization | |
RU2741321C2 (en) | Cryptographic authentication and tokenized transactions | |
KR20060125835A (en) | Emv transactions in mobile terminals | |
JP2015513337A (en) | Hub and spoke PIN confirmation | |
US20220060889A1 (en) | Provisioning initiated from a contactless device | |
US11750368B2 (en) | Provisioning method and system with message conversion | |
US20230062507A1 (en) | User authentication at access control server using mobile device | |
KR101804182B1 (en) | Online financial transactions, identity authentication system and method using real cards | |
EP3095081A1 (en) | Authentication method and system | |
US11880840B2 (en) | Method for carrying out a transaction, corresponding terminal, server and computer program | |
KR102348823B1 (en) | System and Method for Identification Based on Finanace Card Possessed by User | |
WO2015162276A2 (en) | Secure token implementation | |
CN116830532A (en) | Mobile device privacy protection system and method | |
KR20200103615A (en) | System and Method for Identification Based on Finanace Card Possessed by User |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 15706498 Country of ref document: EP Kind code of ref document: A1 |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
REEP | Request for entry into the european phase |
Ref document number: 2015706498 Country of ref document: EP |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2015706498 Country of ref document: EP |