Systems and methods for wireless authorization of transactions with mobile payment devices

A method for authorizing a wireless payment transaction from a mobile payment device to a vending machine wherein the vending machine comprises a vending controller (VIC1), and the mobile payment device comprises an encryption module and a mobile payment application, and the vending machine and a central server share a device key, the method comprising the steps of:

• downloading, by the mobile payment device, a central server public key and account token from the central server into mobile payment application;
• receiving, by the mobile payment device, user credentials;
• accessing, by the mobile payment device, the mobile payment application based on the received user credentials;
• generating, by the mobile payment device, a session key;
• encrypting, by the encryption module, the user credentials, session key and the account token using the public key;
• transmitting, by the mobile payment device, the encrypted user credentials, session key and the account token to the vending machine;
• generating, by the vending machine, a transaction identification number, authorization amount, and entry type and encrypting, by the vending machine, the encrypted user credentials, session key and the account token and the transaction identification number, authorization amount and entry type using its device key;
• transmitting, by the vending machine, the encrypted user credentials, session key, downloaded account token, transaction identification number, authorization amount and entry type to the central server;
• decrypting, by the central server, the transaction identification number, authorization amount and entry typed using its device key;
• decrypting, by the central server, the user credentials, session key, account token using a central server private key corresponding to the central server public key;
• determining authorization information for the transaction, by the central server, using the account token, user credentials and amount;
• encrypting, by the central server, the determined authorization information with its device key;
• transmitting, by the central server, the encrypted authorization to the VIC;
• decrypting, by the VIC, the received transmitted authorization information;
• determining, by the VIC, that the request transaction is authorized;
• and
• based on the determination, by the VIC, that the request is authorized, posting by the VIC, funds to the vending machine.