G06Q20/40975

Method for carrying out a transaction, terminal, server and corresponding computer program

A method for processing a transaction of a communications terminal, asking a server, through a communications network, for processing of a transaction involving the use of payment data. The method is implemented within the communications terminal. The method includes: transmitting a request for obtaining a certification code to the payment method whose data is used for the transaction; receiving the certification code coming from the payment method; inserting the certification code into a transaction data structure; transmitting the transaction data structure to the server; and when the certification code received by the server is valid, receiving a piece of data representing the validation of the transaction by the server.

Terminal and method for mobile payment with trusted execution environment

A mobile terminal is adapted for mobile payment through payment in accordance with transaction data from the customer to a merchant via a payment service provider, and is adapted for a clearing of the payment between bank servers. The terminal is characterized in that a) in the secure runtime environment access data are stored for an authentication between the payment trust application and the payment service provider; and b) the agent is further adapted b1) upon an authentication between the payment trust application and the payment service provider, to transmit access data, or authentication data generated employing access data, between the secure runtime environment and the payment service provider, and b2) to accept from the payment trust application a transaction instruction for a payment in accordance with the transaction data and to send it to the payment service provider. A corresponding mobile payment method for a terminal is likewise specified.

Systems and methods for image capture signature data storage
11640612 · 2023-05-02 · ·

A transaction card construction and computer-implemented methods for a transaction card are described. The transaction card has vector formatted visible information lasered onto its surface. In some embodiments, systems and methods are disclosed for enabling the sourcing of visible information using a scalable vector format. The systems and methods may receive a request to add a first plurality of visible information to a transaction card and capture an image of the first plurality of visible information. The systems and methods may also map the image to a bounding box and convert the mapped image into vector format. In addition, the systems and methods may provide the converted image to a laser machine.

Booking management system

Secure authentication and delayed transaction processing for booking management systems is provided. Third-party services partner with booking management systems to aggregate and list offerings of the third-party services in a digestible display on a one-stop platform. A booking management system can manage the authentication of payment card information on behalf of any number of such third-party services. The booking management system can maintain and process authentication information associated with traveler payment cards, and provide virtual payment information to the third-party services for delayed transactions. The third-party services may later initiate the delayed transactions using the virtual payment information, without being required to perform authentication processing on the traveler payment card information maintained by the booking management system.

Terminal for conducting electronic transactions

The present disclosure is drawn to, among other things, a method of providing a payment terminal application on an electronic device, the electronic device comprising a volatile storage module, a user input module and a network interface module. In some aspects the method includes receiving user credentials from the user input module, transmitting an authentication request message to a remote data center via the network interface module, the authentication request message including the user credentials, receiving an authentication response message from the remote data center, the authentication response message including an indication as to whether authentication was successful, and if the authentication was successful, receiving at least one encryption key from the remote data center; and storing the at least one encryption key in the volatile storage module.

METHOD FOR MANAGING A BIOMETRIC SMART CARD

Provided is a method for managing a biometric sensor configured to collect a captured biometric data and a secure element able to communicate with the biometric sensor through a communication channel. The method comprises receiving a specific data by the biometric smart card, and checking the specific data by using a control data pre-stored in the biometric smart card. Only if said checking is successful, it then executes an erasing command for removing said reference biometric data from the biometric smart card and a disabling command for permanently deactivating the communication channel.

Cryptographic token with leak-resistant key derivation
09852572 · 2017-12-26 · ·

Methods and apparatuses for increasing the leak-resistance of cryptographic systems are disclosed. A cryptographic token maintains secret key data based on a top-level key. The token can produce updated secret key data using an update process that makes partial information that might have previously leaked to attackers about the secret key data no longer usefully describe the new updated secret key data. By repeatedly applying the update process, information leaking during cryptographic operations that is collected by attackers rapidly becomes obsolete. Thus, such a system can remain secure against attacks involving analysis of measurements of the device's power consumption, electromagnetic characteristics, or other information leaked during transactions. Transactions with a server can be secured with the token.

METHOD AND AN ASSEMBLY FOR GENERATING A MAGNETIC FIELD AND A METHOD OF MANUFACTURING AN ASSEMBLY
20170364784 · 2017-12-21 · ·

A credit card shaped element with a dynamic stripe which may be activated or deactivated, where the stripe is formed by a plurality of coils provided along the curve thereof, where the plurality of coils are activated in a sequential manner, where a plurality of proximity sensing coils are provided in series along the curve thereof, where the plurality of coils are formed by one coil contacted at multiple positions along its length by contact pads and where the signals fed to the coils cause an output of a reader coil to output a signals with a minimum slope or where one signal fed to one track has no peaks when the other signal is close to zero.

Digital Access Code

A method is disclosed. One embodiment of the invention is directed to a method. The method comprises: prompting, by an access device, a user to enter an access code; receiving, by the access device, the access code from the user; transmitting, by the access device, the access code to a validation computer, which validates the access code; receiving, by the access device, an access identifier or access token from the validation computer in response to validating the access code; transmitting, by the access device, an authorization request message including the access identifier or the access token to an authorizing computer; and receiving, by the access device, an authorization response message from the authorizing computer.

METHOD FOR PROCESSING A TRANSACTION FROM A COMMUNICATIONS TERMINAL
20170357960 · 2017-12-14 ·

A secure element integrated within a mobile communications terminal. Such an element includes: at least one first application for processing transactions, having at least one interface for communications with a communications network in a secured manner; and at least one second application for processing secured data, having at least one communications interface for communications with an executing environment of said communications terminal. The first application is able to request at least one piece of data from the second application.