Mastercard International Incorporated

Intel Corporation

Mastercard Ireland Limited

Duncan Garrett

David Anthony Roberts

Eddy Lodewijk Hortensia Van De Velde

Patrik Smets

Patrick Smets

Simon Phillips

John Beric

Ian David Alan Maddocks

Michael C Ward

James John Anderson

Eddy L H Van De Velde

Colin Tanner

Patrick Mestre

Eddy Van De Velde

John Robert Wankmueller

Cristian Radu

Patrick Mestré

Arthur D Kranzley

Jean-Paul Edmond Rans

Dave Anthony Roberts

James David Sinton

Dave Sylvester

Emil Johan Sjoberg

Bengt Horsma

Michael Ward

A contactless transaction terminal and method for interacting with a payment enabled mobile device to permit access to a location or to a service. The contactless transaction terminal includes a processor, a polling signal generator operably connected to the processor, an NFC circuit operably connected to the polling signal generator, and a receiver operably connected to the NFC circuit and to a data recovery circuit that is operably connected to the processor. Also included is a storage device operably connected to the processor. The storage device stores program instructions which when executed cause the processor to generate, via the polling signal generator, short-distance radio signals including at least three polling signals; emit, via the NFC circuit, the at least three polling signals at frequent intervals for detection by a payment-enabled mobile device; receive at least one of a Type A or Type B signal from the payment enabled mobile device; and permit access to at least one of a location or service.

Access control bypass on mobile for mass transit

A method of performing a contactless transaction between a payment device and a terminal is described. The method comprises establishing a data connection between the payment device and the terminal and then establishing if the payment device and the terminal both support an enhanced security architecture. If they do not, they will then perform the contactless transaction according to a basic transaction flow using a first cryptographic system. If they do, they will perform the contactless transaction according to an enhanced transaction flow using a second cryptographic system. The first cryptographic system and the second cryptographic system comprise different asymmetric cryptographic systems. Suitable payment devices and terminals, and methods at the payment devices and terminals, are described.

Security for contactless transactions

A method for trusted notifications comprises: receiving, at a first host having at least one trusted server, a request message from a sender computing device, the request message comprising a request identifier and instructions to: update, at a second host, a recipient account associated with a recipient computing device, and to make a corresponding update at the first host to a sender account associated with the sender computing device. The method further comprises authorizing, at the first host, the request message; updating the sender account; generating a secure message at the at least one trusted server, the secure message comprising the request identifier and an indication from the at least one trusted server that the update completed; and sending the secure message from the first host to the sender computing device. The secure message can be received at the sender computer device and conveyed to the recipient computing device.

Method and system for trusted notifications

A method of operating a payment-enabled mobile device to gain access to a location or a service. In an embodiment, a contactless front-end (CLF) component of a payment-enabled mobile device sequentially detects short-distance radio signals comprising at least two different polling signals, determines based on the sequence of the at least two different polling signals, that the payment-enabled mobile device is in proximity to a non-retail contactless transaction terminal, and then a payment application running on the payment-enabled mobile device bypasses a customary user verification feature. The process also includes the payment-enabled mobile device running the payment application performing a transaction with the non-retail contactless transaction terminal without invoking the customary user verification feature and then gaining access to at least one of a location or service. In some embodiments, the location or service includes one of a transit system, a hotel, a motor vehicle, a workplace, a room, a home, a bank branch, a vehicle charging station and a government facility.

A transaction device is described. The device comprises storage configured to store a first data record comprising first value data and a unique identifier associated with one other device; communications circuitry configured to receive an identifier and second value data from a device; and control circuitry configured to compare the received identifier with the unique identifier and in the event of a positive comparison, the control circuitry is further configured to update the stored first value data in accordance with the exchanged second value data.

Transaction device, computer program and transaction method

A method of operating a payment-enabled mobile device includes detecting, by the mobile device, that the mobile device is in proximity to a non-retail contactless transaction terminal. The method further includes permitting operation of an application program in the mobile device. The permitting of operation of the application program is in response to the detected proximity of the non-retail contactless transaction terminal. The operation of the application program is to engage in a transaction with the non-retail contactless transaction terminal while bypassing a user verification feature of the application program.

According to some embodiments, a method comprises: storing, in a personalization token, information to personalize an identification token; issuing the personalization token to an account holder; and transmitting the information from the personalization token to the identification token using a wireless interface. According to some embodiments, apparatus comprises: a personalization token issued to an account holder, the personalization token comprising: information to personalize an identification token; and a wireless communication interface to transmit the information to the identification token.

Method and apparatus for use in personalizing identification token

A method of establishing a secure channel for communication between a first computing device and a second computing device is described. The method uses an elliptic curve Diffie-Hellman protocol, wherein G is an elliptic curve generator point and the first computing device has a unique private key dwith a public key Q=dG certified by a party trusted by the second computing device. The first computing device generates () a blinding factor r and sends () a blinded public key R=r&#xb7;Qto the second computing device. The second computing device generates () an ephemeral private key dand a corresponding ephemeral public key Q=dG and sends Qto the first computing device. The first computing device generates () K=KDF(r d&#xb7;Q) and the second computing device generates () K=KDF(d&#xb7;R), where KDF is a key derivation function used in both generation operations, to establish a secure channel between the first computing device and the second computing device. G is a point in the elliptic curve group E, wherein E is a group of prime order but E* is the quadratic twist of E and is a group of order m=z&#xb7;m' where m&#x2032; is prime and z is an integer, wherein r&#xb7;dis chosen such that z is a factor of r&#xb7;d. Suitable apparatus for performing the method is also described.

Secure channel establishment between payment device and terminal device

A first command is sent from a payment terminal assembly to a payment device with an on-device balance to compute a cryptogram to complete a putative transaction. It is detected that the cryptogram is not received as expected. In response, an identifier of the payment device and transaction recovery data associated with the putative transaction are stored in a storage area of a terminal memory of the payment terminal assembly. The payment terminal assembly obtains the identifier of the payment device, upon re-presentation of the payment device. Upon such re-presentation, the payment terminal assembly compares the obtained identifier of the payment device to contents of the storage area. Conditioned at least upon the comparing yielding a match, a second command is sent from the payment terminal assembly to the payment device to instruct the payment device to re-produce the cryptogram to complete the putative transaction.

Apparatus, method, and computer program product for recovering torn smart payment device transactions

Methods and devices are provided for use in detecting relay attacks between devices in a communications network. One method includes sending first data by a first device to a second device, and receiving, by the first device, a communication from the second device where the communication comprises second data generated at the second device and a time parameter related to the generation of the second data. The method also includes measuring a total transmission time at the first device between sending the first data and receiving the communication, and determining a further time parameter related to the generation of the second data based at least in part on the measured total transmission time. The method then further includes determining the presence of a relay attack between the first and second devices in dependence on a comparison of the time parameter and the further time parameter.

Electronic authentication systems

Embodiments allow loading and reloading contactless payment devices using only a contactless terminal interface, while providing user authentication. The contactless terminal interface could be at a merchant POS location, kiosk, or embedded or attached to a personal computing device with contactless read/write capability such as a personal computer or mobile phone or Internet device.

Methods and systems to securely load / reload acontactless payment device

Reference equipment including a reference card and a reference reader is provided for testing electronic payment devices such as cards and card readers. The reference equipment includes reference cards and reference readers that respectively can be used to verify compliance of product cards and product readers with product specifications The product specifications may, for example, be the ISO 14443 Standard specifications which are commonly accepted in the electronic payment industry The reference equipment is designed to enhance interoperability of product payment devices whose functional behaviors may vary because of vendor customization of device specifications or due to manufacturing tolerances In some embodiments, the reference equipment includes a reference card for testing card readers The exemplary reference card can comprise a current mirror to permit an electronically adjustable variable load using an external controller The reference card electronic circuit can exhibit variable load conditions.

Method and system for simulating a proximity-based transaction device

An identification token includes a body and an RFID IC embedded in the body. An antenna is also embedded in the body and is coupled to the RFID IC. A control integrated circuit (CIC) is embedded in the body and coupled to the antenna. A sensor is embedded in the body and is coupled to the CIC. The sensor is actuatable by a user of the identification token.

Growing community of inventors

London, United Kingdom

Duncan Garrett