Method and System for Contactless Transmissions Using Off-the-Shelf Devices

A method for secured receipt and usage of payment credentials using a commercial-off-the-shelf (COTS) device, comprising:

• storing, in a memory of the COTS device, a secure application program and one or more cryptographic keys, where the cryptographic keys are accessible using the secure application program and inaccessible by any other application program or component in the COTS device;
• establishing, by the secure application program in the COTS device, a secure communication channel with a back-end system, where the secure communication channel is inaccessible by any other application program or component in the COTS device;
• exchanging, by the secure application program in the COTS device, attestation data with the back-end system using the communication channel;
• receiving, by a near field communication interface of the COTS device, payment credentials from a payment card position within a predetermined distance of the COTS device;
• transmitting, by the near field communication interface of the COTS device, the payment credentials to the secure application program;
• enciphering, by the secure application program of the COTS device, the payment credentials;
• and
• transmitting, by the secure application program of the COTS device, the enciphered payment credentials to the back-end system using the secure communication channel.