US 11,956,347 B2
Method and apparatus with mobile payment and verification
John Hongjip Kim, Seongnam-si (KR)
Assigned to Samsung Electronics Co., Ltd., Suwon-si (KR)
Filed by SAMSUNG ELECTRONICS CO., LTD., Suwon-si (KR)
Filed on Jun. 17, 2021, as Appl. No. 17/350,655.
Claims priority of application No. 10-2020-0080459 (KR), filed on Jun. 30, 2020; and application No. 10-2021-0017470 (KR), filed on Feb. 8, 2021.
Prior Publication US 2021/0409195 A1, Dec. 30, 2021
Int. Cl. H04L 9/06 (2006.01); G06Q 20/32 (2012.01); G06Q 20/38 (2012.01); H04L 9/32 (2006.01)
CPC H04L 9/0656 (2013.01) [G06Q 20/322 (2013.01); G06Q 20/3823 (2013.01); G06Q 20/3829 (2013.01); H04L 9/3239 (2013.01); H04L 2209/56 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A processor-implemented mobile payment method performed, by one or more processors of an electronic device, the method comprising:
generating, corresponding to a cryptography original one-time pad (OTP) key that is based on a plurality of true random numbers, a decrypted OTP key by decrypting a received encrypted OTP key for representing an encryption result of the original OTP key;
generating a first cryptographic hash by applying a cryptographic hash function to payment data corresponding to a current payment transaction between the electronic device and a commerce device, wherein the cryptographic hash function is configured to generate the first cryptographic hash to be uniquely representative of the payment data for guaranteeing an integrity of the payment data;
generating an encrypted payment token by encrypting the payment data concatenated with the first cryptographic hash using the decrypted OTP key, and transmitting the encrypted payment token to the commerce device; and
selectively, based on a decrypted portion of the encrypted payment token corresponding to the first cryptographic hash and a decrypted different portion of the encrypted payment token corresponding to the encrypted payment data using the original OTP key, confirming a payment of the current payment transaction to the commerce device, including:
receiving verification information representing whether a first decryption result matches a second cryptographic hash generated from a second decryption result using the cryptographic hash function, for confirming whether the integrity of the payment data is guaranteed;
confirming the payment when the received verification information represents that the first decryption result matches a second hash value and that the integrity of the payment data is guaranteed; and
not confirming the payment when the received verification information represents that the first decryption result does not match the second hash value and the integrity of the payment data is not guaranteed.