US 2022/0101286 A1Published application

Method of authenticating a customer, method of carrying out a payment transaction and payment system implementing the specified methods

OwnerVadim Nikolaevich ALEKSANDROVinventor

Life of this patent

Estimating the term…

Loading patent…

Abstract

The invention relates to the field of technical infrastructures that ensure the implementation of financial transactions between economic entities, in particular to payment systems that provide ease of use and confidential data security. The present invention is the method of authenticating a customer, the method of carrying out a payment transaction comprising said authentication method, and the payment system implementing the specified methods, which ensure the achievement of a technical effect consisting in expanding the functionality of the payment system and reducing its vulnerability, in particular, by making it possible to conduct a payment transaction in a contactless way, on condition that the reference value of the customer authentication data is stored exclusively on the customer's device, as well as by combining the advantages of online and offline customer authentication procedures.

Claims26

Dependent claims

A method of authenticating a customer during a payment transaction, wherein a reference value of a customer authentication data is stored on a customer's payment device, the method comprising:

data exchange between a payment terminal and the customer's device,
input of a value of the customer authentication data by the customer through a terminal input device
and verification of that if the inputted value of the customer authentication data matches the reference one,
characterized in that
it comprises data exchange between the payment terminal and the customer's bank server,
wherein during the process of data exchange between the terminal and the customer's device
the customer's device
generates a session key of the customer's device using a unique key of the customer's device and a variable data that change with each transaction;
performs a one-way conversion of the reference value of the customer authentication data;
encrypts the converted reference value of the customer authentication data using the session key of the customer's device;
transmits to the terminal a customer's device data set comprising the converted reference value of the customer authentication data in an encrypted form, a customer's device identifier and the variable data;
during the process of data exchange between the payment terminal and the customer's bank server
the terminal
performs a one-way conversion of the inputted value of the customer authentication data;
transmits to the customer's bank server a terminal data set comprising the converted reference value of the customer authentication data in the encrypted form, the converted inputted value of the customer authentication data, the customer's device identifier and the variable data;
the customer's bank server
generates the unique key of the customer's device using a master key of the customer's bank server and the customer's device identifier;
generates the session key of the customer's device using the unique key of the customer's device and the variable data;
encrypts the converted inputted value of the customer authentication data using the session key of the customer's device;
verifies that the inputted value of the customer authentication data matches the reference one by comparing the converted inputted value of the customer authentication data with the converted reference value of the customer authentication data in the encrypted form.

17 more elements

A payment system comprising

at least one payment terminal configured to exchange data with a customer's payment device, a seller's server, a customer's bank server, and a seller's bank server and comprising a terminal input device;
the seller's server configured to exchange data with the payment terminal;
the customer's payment device configured to exchange data with the payment terminal;
the customer's bank server configured to exchange data with the payment terminal;
the seller's bank server configured to exchange data with the payment terminal;
wherein the customer's device comprises a reference value of a customer authentication data stored on a machine-readable medium of the customer's device,
characterized in that
it comprises program instructions stored on the machine-readable medium of the customer's payment device, which, when executed by at least one processor of the customer's device, allow
to generate a session key of the customer's device using a unique key of the customer's device and a variable data that change with each transaction;
to perform a one-way conversion of the reference value of the customer authentication data;
to encrypt the converted reference value of the customer authentication data using the session key of the customer's device;
to transmit a customer's device data set comprising the converted reference value of the customer authentication data in an encrypted form, a customer's device identifier and the variable data to the terminal;
it comprises program instructions stored on a machine-readable medium of the payment terminal, which, when executed by at least one processor of the payment terminal, allow
to perform a one-way conversion of a value of a customer authentication data inputted by a customer through the terminal input device;
to transmit a terminal data set comprising the converted reference value of the customer authentication data in the encrypted form, the converted inputted value of the customer authentication data, the customer's device identifier and the variable data to the customer's bank server;
it comprises program instructions stored on the computer-readable medium of the customer's bank server, which, when executed by at least one processor of the customer's bank server allow
to generate the unique key of the customer's device using a master key of the customer's bank server and the customer's device identifier;
to generate the session key of the customer's device using the unique key of the customer's device and the variable data;
to encrypt the converted inputted value of the customer authentication data using the session key of the customer's device;
to compare the converted inputted value of the customer authentication data with the converted reference value of the customer authentication data in the encrypted form.

17 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/034,001Filed 28 Sep 2020
Published: 31 Mar 2022
Term ends: Not estimatedThe source records don’t support an estimate.

Classification29 codes

G06Q 20/3829
Insuring higher security of transaction: involving key management
G06F 21/35
Involving the use of external additional devices, e.g. dongles or smart cards: communicating wirelessly
G06F 21/602
Protecting data: providing cryptographic facilities or services
G06Q 20/108
Specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems: remote banking, e.g. home banking