# US 10,482,450 B2 · Method for processing an authorization to implement a service, devices and corresponding computer program

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,482,450 B2
- Document ID: US10482450B2
- Status: Granted
- Kind: B2
- Application number: 15/542,436
- Filed: 2016-01-08
- Published: 2018-01-04
- Granted: 2019-11-19
- Earliest claimed: 2015-01-09
- Assignees: Ingenico Group
- Applicants: Ingenico Group
- Inventors: Pierre Quentin
- Web page: https://patentgrep.com/patent/US10482450B2

## CPC

- G06Q 20/401: {Transaction verification}
- G06F 21/53: by executing in a restricted environment, e.g. sandbox or secure virtual machine
- G06Q 20/02: involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
- G06Q 20/2295: {Parent-child type, e.g. where parent has control on child rights}
- G06Q 20/3227: {using secure elements embedded in M-devices}
- G06Q 20/351: {Virtual cards}
- G06Q 20/40: Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q 20/4012: {Verifying personal identification numbers [PIN]}
- G06Q 20/40145: {Biometric identity checks}
- G06Q 20/405: {Establishing or using transaction specific rules}
- G06Q 20/40975: {using encryption therefor}
- G06Q 20/42: Confirmation, e.g. check or permission by the legal debtor of payment
- H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/10: {for controlling access to devices or network resources}
- H04L 63/101: {Access control lists [ACL]}
- H04L 67/51: Discovery or management thereof, e.g. service location protocol [SLP] or web services
- H04W 12/08: Access security
- H04W 12/12: Detection or prevention of fraud
- G06Q 2220/00: Business processing using cryptography
- H04L 67/34: {involving the movement of software or configuration parameters (network booting or remote initial program loading [RIPL] G06F9/4416)}
- H04W 12/47: using near field communication [NFC] or radio frequency identification [RFID] modules
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

A method for processing, by a processing entity, of an authorization to implement a service and/or access an item. The method includes: reception, from a requesting device, of a request for implementing a service and/or accessing an item; searching for an indicator of dependency from at least one piece of data of said request for implementation; when an indicator of dependency is present, obtaining an authorization from a verification device to implement said service and/or access said item.

## Claims

### Claim 1

A method comprising:
processing by a processing entity, a payment transaction to implement a service and/or access an item, comprising:
receiving by the processing entity, from a requesting device, a payment request for implementing said service and/or accessing said item, said payment request comprising at least one payment information coming from a payment card;
searching by the processing entity for an indicator of dependency from at least one piece of data of said payment request, the indicator indicating dependency on additional payment authorization for the payment transaction having to be provided by a verification device; and
when the indicator of dependency is present, the processing entity obtaining the additional payment authorization from the verification device to implement said service and/or access said item, the obtaining said additional payment authorization comprising:
transmitting by the processing entity, to the verification device, a request for setting up a secured link;
setting up by the processing entity a secured link between the processing entity and a trusted execution environment of the verification device;
transmitting by the processing entity a notification to the verification device by using the secured link, accompanied by a request for entry of a PIN code;
receiving by the processing entity an encrypted PIN code transmitted through the secured link by the trusted environment of the verification device in reply to the notification, the PIN code having been entered on the verification device through a secured display module and a secured entry module; and
verifying by the processing entity validity of the entered PIN code by the processing entity.

### Claim 2 (depends on 1)

The method according to claim 1, obtaining the additional payment authorization, from the verification device, to implement said service and/or to access said item comprises:
obtaining a piece of data representing the verification device from which authorization must be requested;
transmitting the notification to the verification device from which said additional payment authorization must be requested; and
making a decision to issue the additional payment authorization according to a piece of data or an absence of data received from the verification device.

### Claim 3 (depends on 2)

The method according to claim 2, wherein the decision to issue the additional payment authorization according to a piece of data or an absence of data received from the verification device comprises receiving:
either an authorization, comprising an entry into the verification device, of a piece of information liable to be compared with a piece of reference information;
or an absence of authorization comprising:
a specific rejection, transmitted in a response to the above-mentioned notification; or
an absence of a response within an allotted time.

### Claim 4 (depends on 3)

The method for processing according to claim 3, wherein said piece of information liable to be compared with a piece of reference information is a personal identification code.

### Claim 5

An entity for processing a payment transaction for implementing a service and/or to access an item, the entity comprising:
a processor; and
a non-transitory computer-readable data medium comprising instructions of a computer program stored thereon, which when executed by the processor configure the processing entity to:
receive a payment request for implementing a service and/or accessing an item, said payment request comprising at least one payment information coming from a payment card;
search for an indicator of dependency from at least one piece of data of said payment request, the indicator indicating dependency on additional payment authorization for the payment transaction having to be provided by a verification device;
obtain, from the verification device, the additional payment payment authorization for implementing said service and/or accessing said item, when the indicator of dependency is present, the obtaining said additional payment authorization comprising:
transmitting, to the verification device, a request for setting up a secured link;
setting up a secured link between the processing entity and a trusted execution environment of the verification device;
transmitting a notification to the verification device by using the secured link, accompanied by a request for entry of a PIN code;
receiving an encrypted PIN code transmitted through the secured link by the trusted environment of the verification device in reply to the notification, the PIN code having been entered on the verification device through a secured display module and a secured entry module; and
verifying validity of the entered PIN code by the processing entity.

### Claim 6

A system for processing a payment transaction for implementing a service and/or accessing an item, wherein the system comprises:
a processing entity for processing an authorization for implementing a service and/or accessing an item, which comprises:
a first processor; and
a non-transitory computer-readable data medium comprising instructions of a computer program stored thereon, which when executed by the first processor configure the processing entity to:
receive a payment request from a requesting device for implementing a service and/or accessing an item, said payment request comprising at least one payment information coming from a payment card;
search for an indicator of dependency from at least one piece of data of said payment request, the indicator indicating dependency on additional payment authorization for the payment transaction having to be provided by a verification device;
obtain, from the verification device, the additional payment authorization for implementing said service and/or accessing said item, when the indicator of dependency is present, the obtaining said additional payment authorization comprising:
transmitting, to the verification device, a request for setting up a secured link;
setting up a secured link between the processing entity and a trusted execution environment of the verification device;
transmitting a notification to the verification device by using the secured link, accompanied by a request for entry of a PIN code;
receiving the encrypted PIN code from the verification device, through said secured link; and
verifying validity of the entered PIN code by the processing entity;
the verification device, which comprises:
a second processor; and
a non-transitory computer-readable data medium comprising instructions of a computer program stored thereon, which when executed by the second processor configure the verification device to:
receive the request for setting up the secured link;
set up the secured link between the processing entity and a trusted execution environment of the verification device;
receive the notification by using the secured link, accompanied by the request for entry of the PIN code;
implement a secured display module and a secured entry module, which enable entry of the PIN code;
encrypt the entered PIN code, by the trusted execution environment of the verification device; and
transmit the encrypted PIN code to the processing entity, through said secured link.

### Claim 7

A non-transitory computer-readable medium comprising a computer program product -stored thereon comprising program code instructions for executing a method for processing a payment transaction when the instructions are executed on a processor of a processing entity, wherein the instructions configure the processing entity to perform acts comprising:
processing a payment transaction to implement a service and/or access an item, comprising:
receiving by the processing entity, from a requesting device, a payment request for implementing said service and/or accessing said item, said payment request comprising at least one payment information coming from a payment card;
searching by the processing entity for an indicator of dependency from at least one piece of data of said payment request for implementing, the indicator indicating dependency on additional payment authorization for the payment transaction having to be provided by a verification device; and
when the indicator of dependency is present, obtaining the additional payment authorization from the verification device to implement said service and/or access said item, the obtaining said additional payment authorization comprising:
transmitting by the processing entity, to the verification device, a request for setting up a secured link;
setting up by the processing entity a secured link between the processing entity and a trusted execution environment of the verification device;
transmitting by the processing entity a notification to the verification device by using the secured link, accompanied by a request for entry of a PIN code;
receiving by the processing entity an encrypted PIN code transmitted through the secured link by the trusted environment of the verification device in reply to the notification, the PIN code having been entered on the verification device through a secured display module and a secured entry module; and
verifying validity of the entered PIN code by the processing entity.