# US 10,504,102 B2 · Method, device and secure element for conducting a secured financial transaction on a device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,504,102 B2 - Document ID: US10504102B2 - Status: Granted - Kind: B2 - Application number: 16/251,885 - Filed: 2019-01-18 - Published: 2019-05-23 - Granted: 2019-12-10 - Earliest claimed: 2012-02-29 - Assignees: Mobeewave, Inc. - Applicants: Mobeewave Inc. - Inventors: Sebastien Fontaine; Luc Dolcino; Benjamin Du Hays; Maxime De Nanclas; Xavier Alberti - Web page: https://patentgrep.com/patent/US10504102B2 ## CPC - G06Q 20/3227: {using secure elements embedded in M-devices} - G06Q 20/20: Point-of-sale [POS] network systems - G06Q 20/32: using wireless devices - G06Q 20/322: {Aspects of commerce using mobile devices [M-devices]} - G06Q 20/3229: {Use of the SIM of a M-device as secure element} - G06Q 20/326: {Payment applications installed on the mobile devices} - G06Q 20/327: {Short range or proximity payments by means of M-devices} - G06Q 20/3278: {RFID or NFC payments by means of M-devices} - G06Q 20/34: using cards, e.g. integrated circuit [IC] cards or magnetic cards - G06Q 20/353: {Payments by cards read by M-devices} - G06Q 20/3825: {Use of electronic signatures} - G06Q 20/3829: {involving key management} - G06Q 20/388: {using mutual authentication without cards, e.g. challenge-response} - G06Q 20/4012: {Verifying personal identification numbers [PIN]} - G06Q 20/409: {Device specific authentication in transaction processing} - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract A device and a secure element for conducting a secured financial transaction are disclosed. The device comprises a central processing unit; a communication interface for establishing a communication between the device and a financial institution related to a financial account; an interface for acquiring data relating to the financial account; the secure element for processing at least a portion of the data relating to the financial account acquired by the interface; and control logic for acquiring a purchase amount to be debited from the financial account and for obtaining a transaction authorization from the financial institution related to the financial account, the transaction authorization being based, at least partially, on data processed solely by the secure element independently of data processed by the central processing unit. A method of conducting the secured financial transaction, and a computer program product for execution by the secure element are also disclosed. ## Claims ### Claim 1 A method of operating a mobile device used as a payment terminal, the mobile device being distinct from a dedicated payment terminal, the mobile device being configured to run a point of sale (POS) application for receiving a payment from a customer and to operate a secure element, the mobile device comprising a central processing unit, a contactless interface comprising a Contactless Front End and a communication interface, the method comprising: establishing, through the communication interface of the mobile device, a secured communication channel between the secure element and a remote server, the secured communication channel being based on encryption keys; sending, by a payment applet operated by the secure element, a request to enable a reader mode of the Contactless Front End; receiving, by the secure element, via the contactless interface of the mobile device, and from a payment apparatus, data associated with the payment apparatus, the data identifying the customer's account, at least a portion of the data associated with the payment apparatus being solely accessible by the secure element; encrypting, by the secure element, the at least the portion of the data associated with the payment apparatus, thereby generating encrypted data; sending over the secured communication channel, to the remote server, the encrypted data and a merchant identifier stored in the secure element so that a transaction may be processed; receiving, from the remote server, an indicator that the transaction was authorized; causing display of an indication that the transaction was authorized; sending, by the payment applet, a request to deactivate the reader mode of the Contactless Front End; and closing the secured communication channel. ### Claim 2 (depends on 1) The method of claim 1, where the secure element is characterized by software components operating a secured environment. ### Claim 3 (depends on 1) The method of claim 1, wherein the secure element is embedded in a chipset embedded on a circuitry of the mobile device. ### Claim 4 (depends on 1) The method of claim 1, wherein the POS application comprises a payment control application configured to interact with the secure element. ### Claim 5 (depends on 1) The method of claim 1, wherein the payment apparatus comprises a Proximity Integrated Circuit Card (PICC), wherein the data associated with the payment apparatus comprises payment credentials, and wherein acquiring, by the secure element, via the contactless interface of the mobile device, the data associated with the payment apparatus comprises: receiving, by the secure element, a start payment applet message; starting a payment applet operated by the secure element; and reading, by the Contactless Front End, the payment credentials associated with the PICC. ### Claim 6 (depends on 1) The method of claim 1, wherein acquiring, by the secure element, via the contactless interface of the mobile device, the data associated with the payment apparatus comprises: a sending of a Select Proximity Payment System Environment (PPSE) request to the payment apparatus; a receiving of a response from the payment apparatus indicating payment applications supported by the payment apparatus; and a selection of a payment application amongst those available. ### Claim 7 (depends on 4) The method of claim 4, wherein communications between the payment control application and the secure element are made through the Contactless Front End. ### Claim 8 (depends on 4) The method of claim 4, wherein acquiring, by the secure element, via the contactless interface of the mobile device, the data associated with the payment apparatus further comprises: retrieving, by the payment control application, a Personal Identification Number (PIN); receiving, by the secure element, the PIN; and validating the payment credentials based on the PIN. ### Claim 9 (depends on 4) The method of claim 4, wherein establishing, through the communication interface of the mobile device, the secured communication channel between the secure element and the remote server comprises a sending, by the secure element, of a request to establish the secured communication channel by the payment control application. ### Claim 10 (depends on 1) The method of claim 1, wherein the at least a portion of the data associated with the payment apparatus being solely accessible by the secure element comprises payment credentials. ### Claim 11 (depends on 1) The method of claim 1, further comprising: receiving, over the secured communication channel, from the server, a response to a transaction authorization request; and processing the response to the transaction authorization request to generate a status of a financial transaction. ### Claim 12 (depends on 1) The method of claim 1, further comprising: receiving, by the secure element, a stop payment applet message; and stopping a payment applet operated by the secure element. ### Claim 13 (depends on 1) The method of claim 1, wherein the payment apparatus is one of a payment card and another mobile device. ### Claim 14 (depends on 1) The method of claim 1, further comprising: retrieving user biometrics data; receiving, by the secure element, the user biometrics data; and validating a user's identity based on the user biometrics data. ### Claim 15 A mobile device to be used as a payment terminal, the mobile device being distinct from a dedicated payment terminal, the mobile device being configured to run a point of sale (POS) application for receiving a payment from a customer and to operate a secure element, the mobile device comprising a non-transitory computer readable storage medium comprising computer-executable instructions, a central processing unit, a contactless interface comprising a Contactless Front End and a communication interface, the computer-executable instructions, upon execution, causing to execute: establishing, through the communication interface of the mobile device, a secured communication channel between the secure element and a remote server, the secured communication channel being based on encryption keys; sending, by a payment applet operated by the secure element, a request to enable a reader mode of the Contactless Front End; receiving, by the secure element, via the contactless interface of the mobile device, and from a payment apparatus, data associated with the payment apparatus, the data identifying the customer's account, at least a portion of the data associated with the payment apparatus being solely accessible by the secure element; sending over the secured communication channel, to the remote server, the encrypted data and a merchant identifier stored in the secure element so that a transaction may be processed; sending, by the payment applet, a request to deactivate the reader mode of the Contactless Front End; and closing the secured communication channel. ### Claim 16 (depends on 15) The mobile device of claim 15, wherein the payment apparatus comprises a Proximity Integrated Circuit Card (PICC), wherein the data associated with the payment apparatus comprises payment credentials, and wherein acquiring, by the secure element, via the contactless interface of the mobile device, the data associated with the payment apparatus comprises: receiving, by the secure element, a start payment applet message; starting a payment applet operated by the secure element; and reading, by the Contactless Front End, the payment credentials associated with the PICC. ### Claim 17 (depends on 15) The mobile device of claim 15, wherein acquiring, by the secure element, via the contactless interface of the mobile device, the data associated with the payment apparatus comprises: a sending of a Select Proximity Payment System Environment (PPSE) request to the payment apparatus; a receiving of a response from the payment apparatus indicating payment applications supported by the payment apparatus; and a selection of a payment application amongst those available. ### Claim 18 A non-transitory computer readable storage medium comprising computer-executable instructions for execution by a mobile device used as a payment terminal, the mobile device being distinct from a dedicated payment terminal, the mobile device being configured to run a point of sale (POS) application for receiving a payment from a customer and to operate a secure element, the mobile device comprising a central processing unit, a contactless interface comprising a Contactless Front End and a communication interface, the computer-executable instructions, upon execution, causing to execute: establishing, through the communication interface of the mobile device, a secured communication channel between the secure element and a remote server, the secured communication channel being based on encryption keys; sending, by a payment applet operated by the secure element, a request to enable a reader mode of the Contactless Front End; receiving, by the secure element, via the contactless interface of the mobile device, and from a payment apparatus, data associated with the payment apparatus, the data identifying the customer's account, at least a portion of the data associated with the payment apparatus being solely accessible by the secure element; encrypting, by the secure element, the at least the portion of the data associated with the payment apparatus, thereby generating encrypted data; sending over the secured communication channel, to the remote server, the encrypted data and a merchant identifier stored in the secure element so that a transaction may be processed; receiving, from the remote server, an indicator that the transaction was authorized; causing display of an indication that the transaction was authorized; sending, by the payment applet, a request to deactivate the reader mode of the Contactless Front End; and closing the secured communication channel. ### Claim 19 (depends on 18) The non-transitory computer readable storage medium of claim 18, wherein the payment apparatus comprises a Proximity Integrated Circuit Card (PICC), wherein the data associated with the payment apparatus comprises payment credentials, and wherein acquiring, by the secure element, via the contactless interface of the mobile device, the data associated with the payment apparatus comprises: receiving, by the secure element, a start payment applet message; starting a payment applet operated by the secure element; and reading, by the Contactless Front End, the payment credentials associated with the PICC. ### Claim 20 (depends on 18) The non-transitory computer readable storage medium of claim 18, wherein acquiring, by the secure element, via the contactless interface of the mobile device, the data associated with the payment apparatus comprises: a sending of a Select Proximity Payment System Environment (PPSE) request to the payment apparatus; a receiving of a response from the payment apparatus indicating payment applications supported by the payment apparatus; and a selection of a payment application amongst those available.