Device and method for secure identification of a user
AssigneeWorldline
InventorsMohamed Amine Youssef, Chistophe Cavigneux, Pierrot Baesens, Philippe Lesire
Life of this patent
Estimating the term…
Abstract
A portable payment or retail terminal with jack connector and a method for secure identification of a cardholder. The terminal comprises a set of devices and arrangement for implementing the method, which comprises at least detecting if the cardholder has a mobile device, configuring the terminal for launching an accessibility mode on the mobile device of the cardholder, and transmitting a request to the mobile device for sending a PIN to the terminal. When receiving a communication from the mobile device including information, the method includes deciphering the information to obtain the PIN code and validating the transaction.
Claims24
A portable payment or retail terminal with a jack connector for securing a transaction, the terminal comprising at least:
- a touch screen configured to at least input data or information;
- a first memory for storing a set of programs or sequence of instructions and at least a set of keys for authentication and/or ciphering non-readable from outside the terminal;
- a processor configured to execute at least the set of programs or sequence of instructions stored in the first memory;
- a first device, which is configured to be activated by the processor of the terminal to detect a cardholder mobile device used by a cardholder through a detection of wire/wireless communication device of the cardholder mobile device, the cardholder mobile device including at least a touch screen;
- a communication device configured to connect to the cardholder mobile device;
- and
- a transaction control module including an arrangement for configuring the terminal, wherein the transaction control module, when executed by the processor of the terminal, causes the processor of the terminal to perform at least actions including:
- launching an execution of an accessibility mode on a processor of the cardholder mobile device;
- transmitting a request to the cardholder mobile device for sending a personal identification number code (PIN code) to the terminal;
- and
- when receiving a communication from the cardholder mobile device including information, deciphering said information to obtain the PIN code, by the set of keys for authentication and/or ciphering, and validating the transaction,
- wherein the terminal further comprises at least:
- an operating system (OS) executed by the processor of the terminal and configured for creating a virtual machine if, when launching of the execution of the accessibility mode on the processor of the cardholder mobile device, the processor of the terminal checks that no accessibility mode application is installed on the cardholder mobile device, the created virtual machine being transmitted by the processor of the terminal to the cardholder mobile device so as to be installed on the cardholder mobile device by the processor of the cardholder mobile device;
- an instant-app which is pushed by the processor of the terminal from the terminal to the virtual machine running on the processor of the cardholder mobile device, which causes the processor of the cardholder mobile device to execute the accessibility mode on the cardholder mobile device, and
- wherein the terminal further comprises a sixth memory storing a set of keys,
- the set of keys stored in the sixth memory being non-readable from outside the terminal and matching with the set of keys stored in the first memory,
- the set of keys stored in the sixth memory being pushed by the processor of the terminal with the instant-app on the virtual machine running on the processor of the cardholder mobile device,
- the set of keys of the sixth memory being registered in a memory of the cardholder mobile device, and
- the set of keys stored in the sixth memory being used by the processor of the cardholder mobile device to secure exchange of data and/or information between the terminal and the cardholder mobile device.
A method for securing an identification of a cardholder with a portable payment or retail terminal, said method comprising at least the steps of:
- detecting a wire/wireless communication device of a cardholder mobile device;
- determine the detection of the cardholder mobile device and if the cardholder mobile device is detected:
- connecting to the cardholder mobile device;
- launching an accessibility mode on the cardholder mobile device;
- transmitting a request to the mobile device for sending a PIN code to the terminal;
- and
- receiving a communication from the cardholder mobile device including information, deciphering said information to obtain the PIN code and validating the transaction,
- determining that the processor of the terminal checks that no accessibility mode application is installed,
- responsive to the determination that no accessibility mode application is installed, launching the execution of the accessibility mode on the processor of the cardholder mobile device,
- computing an operation system (OS) to create a virtual machine,
- transmitting the created virtual machine to the detected cardholder mobile device,
- installing the virtual machine on the processor of the cardholder mobile device,
- pushing an instant-app from the terminal to the virtual machine running on the processor of the cardholder mobile device,
- pushing a set of keys with the instant-app from the terminal to the virtual machine,
- executing the accessibility mode on the cardholder mobile device, and
- securing the exchange of data and/or information between the cardholder mobile device and the terminal through the use of the pushed set of keys.
Dependencies are inferred from the claim text.