HK1227146A1 - Method and system for secure authentication of user and mobile device without secure elements - Google Patents

Method and system for secure authentication of user and mobile device without secure elements Download PDF

Info

Publication number
HK1227146A1
HK1227146A1 HK16114270.4A HK16114270A HK1227146A1 HK 1227146 A1 HK1227146 A1 HK 1227146A1 HK 16114270 A HK16114270 A HK 16114270A HK 1227146 A1 HK1227146 A1 HK 1227146A1
Authority
HK
Hong Kong
Prior art keywords
secure
generating
processing device
session key
application cryptogram
Prior art date
Application number
HK16114270.4A
Other languages
Chinese (zh)
Inventor
Mehdi Collinge
Patrik Smets
Axel Emile Jean Charles CATELAND
Original Assignee
Mastercard International Incorporated
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Mastercard International Incorporated filed Critical Mastercard International Incorporated
Publication of HK1227146A1 publication Critical patent/HK1227146A1/en

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/327—Short range or proximity payments by means of M-devices
    • G06Q20/3274—Short range or proximity payments by means of M-devices using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/322—Aspects of commerce using mobile devices [M-devices]
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/08—Payment architectures
    • G06Q20/20—Point-of-sale [POS] network systems
    • G06Q20/204—Point-of-sale [POS] network systems comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3823—Payment protocols; Details thereof insuring higher security of transaction combining multiple encryption tools for a transaction
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3829—Payment protocols; Details thereof insuring higher security of transaction involving key management

Landscapes

  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Engineering & Computer Science (AREA)
  • General Business, Economics & Management (AREA)
  • Strategic Management (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Finance (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Development Economics (AREA)
  • Economics (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Computer And Data Communications (AREA)

Abstract

A method for generating payment credentials in a payment transaction includes: storing, in a memory, at least a single use key associated with a transaction account; receiving, by a receiving device, a personal identification number; identifying, by a processing device, a first session key; generating, by the processing device, a second session key based on at least the stored single use key and the received personal identification number; generating, by the processing device, a first application cryptogram based on at least the first session key; generating, by the processing device, a second application cryptogram based on at least the second session key; and transmitting, by a transmitting device, at least the first application cryptogram and second application cryptogram for use in a payment transaction.
HK16114270.4A 2013-12-02 2014-12-02 Method and system for secure authentication of user and mobile device without secure elements HK1227146A1 (en)

Applications Claiming Priority (10)

Application Number Priority Date Filing Date Title
US201361910819P 2013-12-02 2013-12-02
US61/910,819 2013-12-02
US201461951842P 2014-03-12 2014-03-12
US61/951,842 2014-03-12
US201461955716P 2014-03-19 2014-03-19
US61/955,716 2014-03-19
US201461979132P 2014-04-14 2014-04-14
US61/979,132 2014-04-14
US201461980784P 2014-04-17 2014-04-17
US61/980,784 2014-04-17

Publications (1)

Publication Number Publication Date
HK1227146A1 true HK1227146A1 (en) 2017-10-13

Family

ID=53274011

Family Applications (1)

Application Number Title Priority Date Filing Date
HK16114270.4A HK1227146A1 (en) 2013-12-02 2014-12-02 Method and system for secure authentication of user and mobile device without secure elements

Country Status (16)

Country Link
EP (1) EP3077972A4 (en)
JP (2) JP6353537B2 (en)
KR (2) KR101809221B1 (en)
CN (1) CN106062799B (en)
AU (1) AU2014357381B2 (en)
BR (1) BR112016012527A2 (en)
CA (1) CA2932346C (en)
CL (1) CL2016001353A1 (en)
HK (1) HK1227146A1 (en)
IL (1) IL245965B (en)
MX (1) MX361793B (en)
NZ (1) NZ720688A (en)
RU (1) RU2663319C2 (en)
SG (1) SG10201800179UA (en)
UA (1) UA115500C2 (en)
WO (1) WO2015084755A1 (en)

Families Citing this family (26)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11334890B2 (en) 2013-12-02 2022-05-17 Mastercard International Incorporated Method and system for secure authentication of user and mobile device without secure elements
WO2015160385A1 (en) * 2014-04-14 2015-10-22 Mastercard International Incorporated Method and system for generating an advanced storage key in a mobile device without secure elements
US10614442B2 (en) 2014-12-03 2020-04-07 Mastercard International Incorporated System and method of facilitating cash transactions at an ATM system without an ATM card using mobile
US10185949B2 (en) * 2015-03-05 2019-01-22 American Express Travel Related Services Company, Inc. System and method for authentication of a mobile device configured with payment capabilities
US10248947B2 (en) * 2015-06-29 2019-04-02 Oberthur Technologies of America Corp. Method of generating a bank transaction request for a mobile terminal having a secure module
US11120436B2 (en) * 2015-07-17 2021-09-14 Mastercard International Incorporated Authentication system and method for server-based payments
SG10201508945YA (en) 2015-10-29 2017-05-30 Mastercard International Inc Method and system for cardless use of an automated teller machine (atm)
US10496982B2 (en) * 2016-02-03 2019-12-03 Accenture Global Solutions Limited Secure contactless card emulation
EP4177810A1 (en) * 2016-04-18 2023-05-10 Bancontact Payconiq Company Method and device for authorizing mobile transactions
WO2017184840A1 (en) * 2016-04-21 2017-10-26 Mastercard International Incorporated Method and system for contactless transactions without user credentials
WO2018045134A1 (en) 2016-09-04 2018-03-08 Mastercard International Incorporated Method and system for cardless atm transaction via mobile device
EP3340094B1 (en) * 2016-12-22 2021-04-28 Mastercard International Incorporated Method for renewal of cryptographic whiteboxes under binding of new public key and old identifier
US11244296B2 (en) * 2017-01-23 2022-02-08 Mastercard International Incorporated Method and system for authentication via a trusted execution environment
EP3364363A1 (en) 2017-02-21 2018-08-22 Mastercard International Incorporated Transaction cryptogram
EP3364352A1 (en) 2017-02-21 2018-08-22 Mastercard International Incorporated Determining legitimate conditions at a computing device
EP3364329B1 (en) 2017-02-21 2023-07-26 Mastercard International Incorporated Security architecture for device applications
CN107274183B (en) * 2017-03-21 2020-05-22 中国银联股份有限公司 Transaction verification method and system
US11468444B2 (en) * 2017-12-18 2022-10-11 Mastercard International Incorporated Method and system for bypassing merchant systems to increase data security in conveyance of credentials
KR101972599B1 (en) * 2018-06-19 2019-04-25 김승훈 Apparatus and Method for Processing Session Key and Recording Medium Recording Program thereof
US10581611B1 (en) * 2018-10-02 2020-03-03 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
EP3640878B1 (en) * 2018-10-17 2023-06-21 Swatch Ag Method and system for activating a portable contactless payment object
US10984416B2 (en) * 2019-03-20 2021-04-20 Capital One Services, Llc NFC mobile currency transfer
US11803827B2 (en) 2019-11-01 2023-10-31 Mastercard International Incorporated Method and system for enabling cardless transactions at an ATM for any institutional entity
CN111901109B (en) * 2020-08-04 2022-10-04 华人运通(上海)云计算科技有限公司 White-box-based communication method, device, equipment and storage medium
CN113421084B (en) * 2021-05-26 2023-03-24 歌尔股份有限公司 Bus card processing method, device, equipment and readable storage medium
US12562905B2 (en) 2024-01-22 2026-02-24 Bank Of America Corporation System and method for encrypting user device resource transactions

Family Cites Families (21)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH07297819A (en) * 1994-04-12 1995-11-10 Tandem Comput Inc Method and means for processing combination of individual collation with encipherment of message authentication to network transmission
JP4030027B2 (en) * 1997-08-22 2008-01-09 沖電気工業株式会社 Transaction information notification system
JP4183823B2 (en) * 1999-02-10 2008-11-19 富士通株式会社 Data verification device, data verification system, and data verification program storage medium
US7249093B1 (en) * 1999-09-07 2007-07-24 Rysix Holdings, Llc Method of and system for making purchases over a computer network
JP2002169959A (en) * 2000-11-30 2002-06-14 Laurel Intelligent Systems Co Ltd Financial system
JP2003006449A (en) * 2001-06-18 2003-01-10 Mist Wireless Technology Kk System and method for transaction processing, password number input device, transaction terminal, and host device
JP2004086599A (en) * 2002-08-27 2004-03-18 Toppan Printing Co Ltd Credit card information management device, management method and program thereof
JP4052158B2 (en) * 2003-03-25 2008-02-27 株式会社日立製作所 IC card system and IC card issuing method
US7873572B2 (en) * 2004-02-26 2011-01-18 Reardon David C Financial transaction system with integrated electronic messaging, control of marketing data, and user defined charges for receiving messages
ATE514271T1 (en) * 2006-04-10 2011-07-15 Trust Integration Services B V ARRANGEMENT AND METHOD FOR SECURE DATA TRANSMISSION
JP2008236449A (en) * 2007-03-22 2008-10-02 Oki Electric Ind Co Ltd Financial system, and method for confirming registration of master key
JP2009043196A (en) * 2007-08-10 2009-02-26 Icon:Kk Procedure proxy server device, stop processing proxy server device, stop processing proxy method and program
US8713655B2 (en) * 2008-04-21 2014-04-29 Indian Institute Of Technology Method and system for using personal devices for authentication and service access at service outlets
CA2958140C (en) * 2010-08-12 2019-05-07 Mastercard International, Inc. Multi-commerce channel wallet for authenticated transactions
US8746553B2 (en) * 2010-09-27 2014-06-10 Mastercard International Incorporated Purchase Payment device updates using an authentication process
KR20120110926A (en) * 2011-03-30 2012-10-10 주식회사 비즈모델라인 Method and system for card payment using program identity, smart phone
GB201105765D0 (en) * 2011-04-05 2011-05-18 Visa Europe Ltd Payment system
US20120317628A1 (en) * 2011-06-09 2012-12-13 Yeager C Douglas Systems and methods for authorizing a transaction
US20130041822A1 (en) * 2011-08-08 2013-02-14 Kim Wagner Payment Device with Integrated Chip
US10515359B2 (en) * 2012-04-02 2019-12-24 Mastercard International Incorporated Systems and methods for processing mobile payments by provisioning credentials to mobile devices without secure elements
CA2869208C (en) * 2012-04-18 2015-11-17 Google, Inc. Processing payment transactions without a secure element

Also Published As

Publication number Publication date
RU2663319C2 (en) 2018-08-03
JP6353537B2 (en) 2018-07-04
KR20160091418A (en) 2016-08-02
AU2014357381A1 (en) 2016-06-16
WO2015084755A1 (en) 2015-06-11
KR101809221B1 (en) 2017-12-14
IL245965A0 (en) 2016-07-31
JP2018164281A (en) 2018-10-18
NZ720688A (en) 2017-09-29
EP3077972A1 (en) 2016-10-12
CN106062799A (en) 2016-10-26
KR20170139689A (en) 2017-12-19
IL245965B (en) 2022-05-01
EP3077972A4 (en) 2017-08-09
UA115500C2 (en) 2017-11-10
JP2017504871A (en) 2017-02-09
CA2932346A1 (en) 2015-06-11
BR112016012527A2 (en) 2017-08-08
AU2014357381B2 (en) 2017-03-23
CA2932346C (en) 2018-09-04
MX2016007217A (en) 2016-12-09
CL2016001353A1 (en) 2017-05-12
MX361793B (en) 2018-12-17
SG10201800179UA (en) 2018-02-27
KR102025816B1 (en) 2019-09-26
CN106062799B (en) 2022-04-29

Similar Documents

Publication Publication Date Title
MX2016007217A (en) Method and system for secure authentication of user and mobile device without secure elements.
HK1206900A1 (en) Systems and methods for processing mobile payments by provisioning credentials to mobile devices without secure elements
MX2020014235A (en) SYSTEMS AND METHODS FOR SECURE READ-ONLY AUTHENTICATION.
NZ629125A (en) Credential management system
PH12018502545A1 (en) Increased security through ephemeral keys for software virtual contactless card in mobile phone
WO2015025282A3 (en) Methods and systems for transferring electronic money
WO2016190918A3 (en) Multiple protocol transaction encryption
SG11201806344VA (en) Credit payment method and apparatus based on mobile terminal p2p
NZ628971A (en) Transaction processing system and method
WO2015042668A3 (en) Mobile authentication method and system for authenticated access to internet supported services and applications
EP4325806A3 (en) Geo-fence authorization provisioning
WO2012018528A3 (en) Methods for anonymous authentication and key agreement
EP4271016A3 (en) Enhanced authentication based on secondary device interactions
MX2015009491A (en) User authentication method and apparatus based on audio and video data.
WO2010093636A3 (en) Devices, systems and methods for secure verification of user identity
WO2014149498A3 (en) Remote secure transactions
EP2388744A3 (en) Method and device for conducting trusted remote payment transactions
WO2012021864A3 (en) Multi-commerce channel wallet for authenticated transactions
WO2010126509A3 (en) Systems and methods for randomized mobile payment
MX2015012794A (en) Methods and systems for authenticating a transaction with the use of a portable electronic device.
JP2015531112A5 (en)
MX392027B (en) MULTI-WAY PAYMENT SYSTEMS AND METHODS.
WO2013192564A3 (en) Aggregating online activities
HK1195995A2 (en) Electronic payment systems and electronic payment methods
WO2013030836A8 (en) Method and system for authorizing an action at a site