US 11,972,419 B2
Method for authenticating payment data, corresponding devices and programs
Remi Geraud, Valence (FR)
Assigned to BANKS AND ACQUIRERS INTERNATIONAL HOLDING, Paris (FR)
Appl. No. 16/314,166
Filed by Banks and Acquirers International Holding, Paris (FR)
PCT Filed Jun. 30, 2017, PCT No. PCT/EP2017/066362
§ 371(c)(1), (2) Date Dec. 28, 2018,
PCT Pub. No. WO2018/002349, PCT Pub. Date Jan. 4, 2018.
Claims priority of application No. 1656239 (FR), filed on Jun. 30, 2016.
Prior Publication US 2021/0150520 A1, May 20, 2021
Int. Cl. G06Q 20/38 (2012.01); G06Q 20/32 (2012.01); H04L 9/08 (2006.01)
CPC G06Q 20/3825 (2013.01) [G06Q 20/3278 (2013.01); G06Q 20/38215 (2013.01); G06Q 20/3823 (2013.01); G06Q 20/3829 (2013.01); G06Q 20/388 (2013.01); H04L 9/0825 (2013.01)] 4 Claims
OG exemplary drawing
 
1. A contactless payment method between a communications terminal of a merchant and a user device communicating through a near field communication (NFC) wireless data link, the method comprising:
obtaining payment data by a general processing unit of the communication terminal;
obtaining, by the general processing unit, an identifier of the communications terminal;
transmitting, by the general processing unit, the payment data and the identifier of the communications terminal to a secured processing unit of the communication terminal;
generating, by the secured processing unit, a pair of signed data by signing the payment data and the identifier of the communication terminal, using a private key of a pair of private and public keys of the communication terminal;
transmitting, by the secured processing unit, the pair of signed data to the general processing unit;
transmitting, by the general processing unit, the pair of signed data to the user device using the NFC wireless data link;
receiving, by the general processing unit through the NFC wireless data link, from said user device, encrypted data establishing authentication of the pair of signed data;
decrypting, by the secured processing unit, the encrypted data to provide decrypted signed data;
comparing, by the secured processing unit, the decrypted signed data with the pair of signed data to verify the validity of the pair of signed data; and
when the pair of signed data is valid, transmitting, by the communication terminal, the pair of signed data to a payment transaction processing system, wherein the pair of signed data is not transmitted to the payment transaction processing system when the pair of signed data is not valid.