US 11,893,580 B2 · Establishment of a secure session between a card reader and a mobile device

Abstract

In some examples, a mobile card reader includes a card interface to read information from a card, an interface to enable the mobile card reader to communicate with a mobile device, and a processor configured to send security related information of the mobile card reader to an application executing on the mobile device. The security related information may be for transmission by the mobile device to a remote server system. The mobile card reader may receive, from the application, an indication that the application has been validated by the remote server system based on validation of the security related information of the mobile card reader and security related information of the application. In response, the mobile card reader generates a secure session key with which to carry out encrypted communication between the application and the mobile card reader.

Claims20

Dependent claims

A mobile card reader comprising:

a card interface to read information from a card;
a processor coupled to the card interface;
an interface to enable the mobile card reader to communicate with a mobile device;
and
a memory storing instructions that, when executed by the processor, cause the mobile card reader to perform operations including, when the mobile card reader is in communication with the mobile device:
sending security related information of the mobile card reader to an application executing on the mobile device, the security related information for transmission by the mobile device to a remote server system;
receiving from the application an indication that the application has been validated by the remote server system, the indication indicating that the remote server system has validated the security related information of the mobile card reader and security related information of the application;
and
in response to receiving the indication that the application has been validated by the remote server system, generating a secure session key with which to carry out encrypted communication between the application and the mobile card reader.

6 more elements

One or more non-transitory computer readable media storing instructions executable by a processor of a mobile card reader to cause the processor to perform operations comprising:

determining that the mobile card reader is in communication with a mobile device via an interface;
based at least on determining that the mobile card reader is in communication with the mobile device, sending security related information of the mobile card reader to an application executing on the mobile device, the security related information for transmission by the mobile device to a remote server system;
receiving from the application an indication that the application has been validated by the remote server system, the indication indicating that the remote server system has validated the security related information of the mobile card reader and security related information of the application;
and
in response to receiving the indication that the application has been validated by the remote server system, generating a secure session key with which to carry out encrypted communication between the application and the mobile card reader.

2 more elements

Dependencies are inferred from the claim text.

Establishment of a secure session between a card reader and a mobile device

Life of this patent

Establishment of a secure session between a card reader and a mobile device

Life of this patent

Abstract

Claims20