Orange

Mouhannad Alattar

Mohammed Achemlal

Mohamed Sabt

The invention relates to a method for securing a contactless service transaction, said service () being stored in the mobile terminal (), said transaction involving the mobile terminal, a contactless reader () and a remote server (), said server storing at least one piece of data and/or sensitive function of the service, said terminal comprising a security module (), said method being characterised in that the terminal also stores a contactless security application () and that it comprises: receiving (E) a first value (&#x3b1;) for determining a session key; receiving (E) a second value for determining a session key (&#x3b2;) and a first one-time password (OTPin); sending (E) the second value for determining a session key and a message (MAC) for authenticating at least the first password, intended for being verified by the reader, said first and second determination values being used to calculate (E, E) a session key (K) intended for being used to secure the exchanges.

Method for securing contactless transactions

The invention relates to a method for making a transaction of a contactless application secure, said application () being stored in the mobile terminal (), said transaction taking place between the mobile terminal and a contactless reader (), said terminal including a security element (), said method comprising the following steps carried out by the mobile terminal: the application sends (E) a token representing a piece of sensitive data and a first authentication value relating to the token to the reader, the security element receives (E) the token and the related first authentication value from the reader, the security element calculates (E) a second authentication value from the received token and compares the first authentication value with the second authentication value, and sending (E) the result of the comparison to the reader, said reader cancelling the transaction if the result is negative.

Growing community of inventors

Caen, France

Mouhannad Alattar