Patent Application
20160283927
This application is a U.S. National Stage filing under 35 U.S.C. §119, based on and claiming benefit of and priority of GB Patent Application No. 1504983.6 filed Mar. 24, 2015.
to This disclosure relates generally to authentication for mobile transactions. In embodiments, it relates to mobile devices acting as payment solutions or mobile Point of Sale terminals (MPOS) and to methods and apparatus for consumers transacting with these terminals to ensure that the transaction meets consumer intentions.
Payment cards such as credit cards and debit cards are very widely used for all forms of financial transaction. The use of payment cards has evolved significantly with technological developments over recent years. Originally, transactions were on paper, using an imprint of a transaction card and confirmed by a signature. This approach was largely replaced by use of a magnetic stripe of a transaction card swiped through a magnetic stripe reader on a point of sale (POS) terminal to perform a transaction. Transaction cards developed to contain an integrated circuit (“chip cards” or “smart cards”) that communicates with a smart card reader in the POS terminal. Using this approach, a transaction is typically confirmed by a personal identification number (PIN) entered by the card user. Cards of this type typically operate under the EMV standard for interoperation of chip cards and associated apparatus (such as POS terminals and ATMs). ISO/IEC 7816 provides a standard for operation of cards of this type.
Technology has further developed to provide payment cards which operate contactlessly—under EMV, these are covered under the ISO/IEC 14443 standard.
Using such cards, the primary account number (PAN) can be read automatically from the card by a POS terminal, generally using a short range wireless technology such as NearField Communications (NFC)—this approach is generally referred to as “contactless” or “proximity” payment. This is typically enabled by embedding of an NFC chip in a card body together with a suitable antenna to allow transmission and receipt of wireless signals—the transmissions may be powered by a magnetic inductive field emitted by a proximity reader in the POS terminal. For an effective transaction to be made; the payment card may need to be brought into close proximity to the proximity reader—EMVCo has defined this range under the Level 1 operating volume range of 0-4 cm.
The present applicants have developed a proprietary system, known as PayPass® for performing contactless transactions. The present applicants have also appreciated that it would be possible to use a computing device such as a consumer mobile device as a proxy for a payment card. They have also developed a mobile payment application, Mobile PayPass™ (also known as MCM—Mchip Mobile), which can be securely provisioned to a consumer mobile device (hereafter “mobile phone”) to act as a proxy for a payment card using Near Field Communication (NFC) technology standards, which are built in to the majority of current mobile phones. Using Mobile PayPass™, a user their mobile phone to conduct ‘tapping based’ transactions against a proximity reader, as well as perform account management operations over an appropriate network interface (cellular, local wireless network) in an online banking interface with the user's account provider. A user may now commonly use his or her mobile phone in obtaining banking services, both in mobile payment (such as by use of Mobile PayPass™) and also in locating ATMs and participating merchants (which can be done for MasterCard with MasterCard Nearby™). Other payment technologies for mobile use exist—the present applicant uses an HCE (host card emulation) solution MCBP (MasterCard Cloud Based Payments), MasterPass and DSRP (Digital Secure Remote Payment).
A key feature of any banking transaction is trust—the user, the merchant, and the banking infrastructure provider must all have a satisfactory basis for trustingeach other to the degree necessary for each party to have confidence in a transaction. As the payment infrastructure becomes more flexible but also more complex, it also becomes more difficult to protect the system and all its users against subversion and fraud. Generally, a user will trust ATMs and merchants because they will be given security by the local built environment (bricks & mortar)—the user will be located in a user's physical store, or the ATM will be attached to a bank or another trusted location—but this model of trust breaks down for a merchant point of sale device that is itself mobile (a mobile POS or MPOS).
MPOS terminals can allow merchants to transact away from a specific location in the built environment, and the combination of flexibility and low cost of ownership offered by an MPOS terminal enable an increasing range of parties to act as merchants. This does, however, create a problem for customers. A customer needs to place a high level of trust in a POS terminal, as providing card information and credentials to an untrustworthy POS terminal could result in severe financial loss. It is however difficult to for a customer to place the same level of trust in an MPOS terminal as a customer would have for a conventional POS terminal in a physical store.
It would be desirable to have a mechanism that allowed users to have greater confidence that they were interacting with legitimate merchants using trustworthy terminals—in particular, it would be desirable to enable a mobile user to have greater confidence that an MPOS terminal was authenticated to be trustworthy.
In a first aspect, the disclosure provides a computer implemented method of authenticating one or more parties to a transaction, comprising: registering at least a first party to the transaction with an information service trusted by the first party and a second party, whereupon the information service holds credential data for the first party; providing location data for the first party to the information service; and when the second party wishes to transact with the first party, the information service providing the location data for the first party and the credential data for the first party to the second party.
This approach provides the second party with greater confidence that the first party being transacted with is indeed the first party that it appears to be. In embodiments, the first party comprises a mobile point-of-sale terminal. The location data may be provided by one or more of GPS, cellular telephony cell data and local wireless network location data associated with the first party.
The second party may comprise a mobile computing device or a mobile handset. In this case, the location data may be provided for use to illustrate a map location for the first party, for example so that the map location of the first party is provided to be shown on a local transaction services map.
The location data may even be used to determine when the first party and the second party are co-located. In such a case, a transaction prompt may be provided when it is determined that the first party and the second party are co-located.
In embodiments, the credential data is a visual indicator, such as a picture of a person associated with the first party.
In embodiments, the information service may also hold social media data for the first party and provides the social media data when providing the location data and the credential data.
In a second aspect, the disclosure provides an information service system for providing information relating to transactions, wherein the information service comprises a computing system with processing apparatus, network communication to send information to and receive information from other parties and memory, wherein the information service is adapted to: receive registration data from transaction apparatus parties, the registration data comprising transaction apparatus party data and at least one party credential data, receive location data from the transaction apparatus parties, and provide location data and credential data for transaction apparatus parties to users of the information service.
The transaction apparatus may comprise a mobile point-of-sale terminal, and users of the information service may comprise mobile computing devices and mobile handsets. The location data may be provided to illustrate a map location for the transaction apparatus, for example with the map location of the transaction apparatus shown on a local transaction services map.
The information service system may be adapted to receive updated credential data for registered transaction apparatus. The credential data may be a visual indicator, such as a picture of a person associated with the first party. The registration data may also comprise social media data associated with the first party and provide the social media data when providing the location data and the credential data.
In a third aspect, the disclosure provides a method for a user mobile device to enable transaction with a point-of-sale terminal, wherein the user mobile device is a mobile computing device or a mobile handset, the method comprising: the user mobile device obtaining location data and credential data for the point-of-sale terminal from a remote trusted source; the user device determining a match between a user location and the point-of-sale terminal location, and the user device providing an indication to a user to allow user determination of whether the credential data is satisfactory; wherein the transaction is enabled if the user location and the point-of-sale terminal location match and the credential data is determined to be satisfactory.
The point-of-sale terminal location may be used within a local transaction services map. The credential data may be a visual indicator, such as a picture of a person associated with the point-of-sale terminal. The user mobile device may receive with the location data social media data associated with the point-of-sale terminal. The user mobile device may store transaction history including information to identify the point-of-sale terminal. The social media data associated with the point-of-sale terminal may be stored in the transaction history.
In a fourth aspect, the disclosure provides a computer program stored on a storage medium, wherein the computer program when stored in a memory of a user mobile device and running on a processor of the user mobile device causes the user mobile device to perform the method described above.
In a fifth aspect, the disclosure provides a user mobile device comprising a processor and a memory and adapted to perform the method described above.
Such a user mobile device may also be adapted for use as a payment device. The user mobile device may be a mobile computing device such as a mobile handset.
In a sixth aspect, the disclosure provides a point-of-sale terminal comprising a mobile point-of-sale device, wherein the point-of-sale terminal is registered with an information service to provide transaction service location data and credential data for the mobile point-of-sale device to users, and wherein the point-of-sale terminal is adapted to provide location data for the mobile point-of-sale device to the information service.
The point-of-sale terminal may also be adapted to provide updated credential data to the information service after registration with the information service.
In a seventh aspect, the disclosure provides a method for enabling social media reviews at a user mobile device, comprising: the mobile user device receiving information comprising location data and social media data for a merchant from an information service and displaying the merchant on a transaction services map, the mobile user device performing or enabling a transaction using the information received from the information service to perform a transaction, and recording the transaction in a transaction history together with the social media information for the merchant, and presenting the transaction history to a user of the user mobile device to allow the user to provide a social media review of the merchant using the social media data for the merchant.
Embodiments of the disclosure will now be described, by way of example, with reference to the accompanying Figures, of which:
Specific embodiments of the disclosure will be described below with reference to the Figures.
A user (not shown) is provided with a payment device—this may be for example a payment card 1, but in particular embodiments it may be a mobile phone 2 (or other mobile computing device). These devices typically have secure processors and memories for storing information including firmware and applications run by the respective processors. A payment device that is not itself a payment card may be used with an appropriate application as a payment card proxy. Payment cards and payment card proxies will typically be equipped with means to communicate with other elements of a payment infrastructure. These communication means may comprise contacts on a payment card 1 to allow communication by protocols such as those defined under ISO/IEC 7816, they may comprise antennae and associated hardware and software to enable communication by NFC and associated contactless card protocols such as those defined under ISO/IEC 14443, or they may comprise an antenna and associated hardware and software to allow local wireless networking using 802.11 protocols, any combination of the above or any wireless communications protocol.
Other computer equipment in a conventional infrastructure is typically fixed, but in cases of interest point of interaction (POI) terminals 4 may also be mobile. The example shown is a mobile point-of-sale (MPOS) terminal used by a merchant interacting with the user. Such equipment is typically connected or connectable to an acquiring bank 6 or other system in a secure way (either through a dedicated channel or through a secure communication mechanism over a public or insecure channel). There may also be a mechanism to allow connection between the user computer devices and a card issuing bank 5 or system associated with the user. A banking infrastructure 7 will also connect the card issuer 5 and the acquiring bank 6, allowing transactions to be carried out between them.
Associated with the banking infrastructure 7 there can also be a mobile services server 8 (while represented here as a single server, this may of course comprise any appropriate computer system or set of computer systems). The mobile services server 8 may be considered a part of the banking infrastructure 7—it is either integral with it or bound to it in a close trust relationship, so that the banking infrastructure 7 can effectively warrant that communications by other parties with the mobile services server 8 can be trusted. This means that if the other party trusts the banking infrastructure 7, then the other party should also trust the mobile services server 8. The mobile services server 8 is shown as interacting with both the user mobile phone 2 and the MPOS terminal 4.
The mobile phone comprises a processor 201 and a memory 202, such that the memory stores and the processor will subsequently run applications (shown generally as application space 203) 203 such as a payment application 203a, a mapping application 203b and a banking location host application 203c. The mobile phone has a user interface comprising a display 204 and a touchscreen 205 (or other input device) and associated drivers to allow a user to enter data into and view information from the applications 203. The mobile phone 2 also has a cellular telecommunications capability, including subscriber information module 206 and wireless communication element 207 together providing the ability to connect to a cellular communications network.
The mobile phone may need to perform cryptographic operations in order to interact securely with a POS terminal—this may be achieved by a cryptographic capability within the subscriber information module 206, such as a cryptographic processor in a tamper resistant secure element or a trusted execution environment. Other approaches may be used such as white-box cryptography, which does not require the use of tamper resistant hardware. Alternatively, with the advent of tokenisation SUK (Single Use
Keys) could be loaded onto the handset to permit the generation of temporary tokens that represent a user's PAN in a random generated number sequence which has been cryptographically signed and can only be decrypted by an application with the appropriate keys. In such arrangements, cryptographic operations may not be performed on the device and instead it will merely act as a pass-through of tokens from device to server and return.
The mobile phone is here shown as having a local networking element 208 as well, in order to establish a short range wireless network connection—however, in other embodiments the mobile phone 2 may only be able to make network connections through a cellular telecommunications network. While a network connection is needed to enable communication between the computing device and the identity management service, this need not involve cellular telecommunications. For example, the computing device may be a tablet computer without cellular telecommunications capability but capable of making a local wireless network connection, and so a connection to the identity management service through the public internet.
The banking location server application receives registration data and updated location data from the MPOS terminal 4 (or from associated computer devices), and serves banking location data to the mobile phone 2 for use in connection with the banking location application 23c at least.
The banking location server application, providing information to its corresponding banking location host application on the mobile phone 2, comprises an exemplary information service of the type described below with reference to
Elements shown here are ATMs 31, contactless payment merchants 32 and cashback locations 33 where cash may be obtained in the course of a transaction. Another possible item that may be shown in such an interface is a location where a prepaid card may gain additional credit. This transaction destination information may readily be combined with the mapping solution native to the platform (in the case shown, an Apple iPhone) to allow a user to navigate himself or herself efficiently to the correct location.
to Firstly, the MPOS terminal is identified 510 to the information service in such a way that the information service can establish that the MPOS terminal is legitimate and with its legitimate owner. This may require a cryptographic exchange involving communication between the MPOS terminal owner and the banking infrastructure (possibly routed through the acquiring bank of the MPOS terminal owner, possibly mediated through another part of the banking infrastructure, or possibly by a direct connection with the information service). A location tracking mechanism is then identified 520 for the MPOS terminal. If the MPOS terminal has a built-in location tracking mechanism—typically using one or more of GPS, cell identification and triangulation in a cellular network, and WiFi network location—then no positive location tracking means identification may be needed, but if these elements are not provided in the MPOS terminal itself, then these capabilities must be provided by another identified source associated (preferably physically associated) with the MPOS terminal, such as a cellular phone used with the MPOS terminal.
It is also desirable to identify 530 one or more credentials to be used by the information service. Such a credential may be a credential of, or a credential associated with, the MPOS terminal, or it may be a credential of or associated with the merchant associated with the MPOS terminal. The intention is that this credential or these credentials can be provided to the user by the information service together with location data, and that the provision of such credentials will allow the user to authenticate the MPOS terminal. It is therefore desirable for at least one such credential to be a visual credential, as this allows the user to use visual evidence as a basis for placing trust in the MPOS terminal. One such credential could be, but not limited to, a photographic image of the person manning the MPOS terminal. It is common in merchant operations to assign a particular till and POS machine to an operator, and the process of logging in a user to the merchant systems could be expanded so that the current user image was identified and forwarded to the information service. It therefore follows that in embodiments credentials may be updated regularly by merchants to reflect a current position, rather than being set for all time at registration. Initial registration may therefore be followed by a repeated step of updating 540 terminal credentials to reflect current conditions of use.
This is the arrangement shown in
The transaction service location application may then provide a window 75 containing credential data as before, but also an invitation 76 to the user to initiate or enable a transaction, for example by enabling contactless payment from the mobile device. This screen may also be used as a mechanism to provide feedback 77 for a merchant—relevant details (such as merchant website URLs and links to the merchant's accounts with relevant social media such as Twitter, Facebook and TripAdvisor) may be included in the merchant's registration with the information service and so presented in this way at the time of transaction. Preferably (as discussed below) the transaction service location application will also log transactions carried out to include the merchant's social media links, enabling social media feedback to be made after the transaction at a time convenient for the user. Integration of social medial feedback with transaction location is discussed further below. Location-based loyalty schemes could be positioned using the location data provided and offer the user the best possible pricing for the product or service they are intending on purchasing.
Location matching could be used in a number of different ways in embodiments. For example, a transaction could be only authorised with an MPOS device if the mobile device and the registered MPOS device are co-located, or an additional permission step may be required if there is not determined to be a location match that is not required if a location match to a registered MPOS device is detected.
Another possibility may be to allow conventional transactions if no location match is determined, but to allow contactless transactions if there is a location match. All these options are considered layers of security which can be added in to a solution depending on how secure the issuing/acquiring bank would like to make it.
It is assumed that the relevant application (in embodiment discussed above, the transaction service location application) is active and that the MPOS terminal is selected or otherwise satisfies relevant criteria for active consideration. The user mobile device then obtains 810 location data and a credential for the point-of-sale terminal from a remote trusted source.
Once location data for an MPOS terminal of interest has been received, the user device determines 820 whether or not there is a match between a user location and the point-of-sale terminal location. The credential also needs to be evaluated—in one arrangement, the user device provides an indication to a user to allow user determination of whether the credential is satisfactory, but in other approaches the user device may determine itself whether the credential is satisfactory and merely provide confirmation of this to the user.
The transaction may then be enabled 840 if the user location and the point-of-sale terminal location match, and if the credential is determined to be satisfactory. As discussed above, this may in some embodiments be a decision for the user when presented with both location match and credential data, in others may be made automatically by the device (if equipped to evaluate the credential), and in yet others the path to enablement of the transaction may vary depending on whether or not there is a match in location and satisfactory credential data.
As noted above, this approach and the information exchange associated with it can be used for more than immediate location of legitimate MPOS terminals and authentication for transaction purposes—it may also be integrated more generally with social media and in particular merchant rating. For this to be done, if the user wishes to retain this data, it may be possible not only for the mobile device to hold a transaction history (as will normally be the case for any transaction application) but also to keep historical details of interaction with merchant terminals registered with the information service. It is important that any implementation of this approach should comply with applicable data privacy laws, and that the user (and any user affected) will only provide private, personal or sensitive data on any form of log with full consent. It should be noted that this may have value even if the merchant terminal is not an MPOS terminal—while there may not be the same need for the mobile device user to establish that the terminal is legitimate, the mechanism can still provide a particularly effective way to log user feedback and to provide extra functionality and value for the user and merchant.
One approach is simply to augment existing transaction histories with feedback data as shown in
Using such data, a user can work through their shopping experience to provide ratings of different merchants, feeding these back either directly to the different linked social media applications (e.g. by providing a rating in TripAdvisor directly), or possibly through a consolidated feedback mechanism that provides feedback to each social network that the user desires to use. User rewards may be provided by the merchant to the user on establishment of social media connections between user and merchant in a to conventional way, but these could be modified or augmented in the light of actual transaction history. Loyalty schemes could align the feedback mechanism with the social media providers to drive proactive rating/reviewing for transactions.
While discussion here has generally been related to banking location server and host applications as an instantiation of an information service providing location data, aspects of the disclosure may employ information services of other types not directly associated with banking transactions. Locations of other types (such as transport hubs) and users of other types (such as registered users of a transport system) may be used in location based information services of comparable types.
As the person skilled in the art will appreciate, modifications and variations to the above embodiments may be provided, and further embodiments may be developed, without departing from the spirit and scope of the disclosure. Reference to standards and proprietary technologies are provided for the purpose of describing effective implementations, and do not limit the scope of the disclosure.
| Number | Date | Country | Kind |
|---|---|---|---|
| 1504983.6 | Mar 2015 | GB | national |
