Method for processing a payment

Abstract

In a method for processing a payment, an electronic device receives transaction information related to a transaction and to a payment for the transaction, accesses a payment card via a portable payment device, cooperates with the payment card to generate a payment command to include at least the transaction information, establishes a session with a banking server, and transmits the payment command to the banking server under the session. The banking server identifies validity of the payment card based on the payment command, and processes the payment according to the transaction information afterward. The electronic device then receives a payment result generated by the banking server after completing the payment.

Description

BACKGROUND OF THE INVENTION

1. Field of the Invention

The invention relates to a method for processing a payment, more particularly to a method that employs a plug-and-play device for processing a payment.

2. Description of the Related Art

Currently, payments for goods and/or services may be done using cash or plastic money cards (e.g., a credit card, a debit card, etc.). In order to accept plastic money cards as a means for payment, a merchant must enter an agreement with a card issuer (e.g., a bank) and provide a processing equipment (e.g., a card reader capable of reading the payment card) for communicating with the card issuer. As a result, merchants operating with low revenue and/or profit margin may be discouraged to accept plastic money cards.

As for online transactions, an online payment using a credit card is generally executed on a personal computer or a mobile device (e.g., a smart phone). When executing the online payment, a user is first instructed to enter personal information via an interface (e.g., a webpage displayed on the personal computer) including a username and an associated password for verifying the identity of the user. After identity of the user is verified, the interface further instructs the user to enter credit card information, which may include a card number, an expiration date, etc. A conventional system for executing such payment is disclosed in Taiwanese Patent Application Publication No. 473681.

However, in cases where the computer and the mobile device are not available or are not functional (due to reasons such as no Internet connection or insufficient power), an online transaction may be unable to take place.

SUMMARY OF THE INVENTION

Therefore, the object of the present invention is to provide a method that is capable of addressing the drawbacks of the prior arts mentioned above.

Accordingly, a method of the present invention is for processing a payment. The method is to be implemented using an electronic device that is removably connected to a portable payment device and that communicates with a banking server. The portable payment device is a plug-and-play device and is provided with a payment card. The method comprises:

(a) receiving, by the electronic device, transaction information related to a transaction and to a payment for the transaction;

(b) accessing, by the electronic device, the payment card via the portable payment device;

(c) cooperating, by the electronic device, with the payment card to generate a payment command to include at least the transaction information;

(d) establishing, by the electronic device, a session with the banking server, the session providing a secure communication channel between the electronic device and the banking server;

(e) transmitting, by the electronic device, the payment command to the banking server under the session established in step (d), the banking server being configured to identify validity of the payment card based on the payment command in response to receipt of the payment command and to process the payment according to the transaction information included in the payment command after identifying the payment card as valid; and

(f) receiving, by the electronic device, a payment result from the banking server under the session established in step (d), the payment result being generated by the banking server after completing the payment.

Another object of the present invention is to provide a system that is configured to communicate with a banking server to perform the aforementioned method.

Accordingly, a system of the present invention includes an electronic device and a portable payment device.

The electronic device includes a processor, a memory unit that is coupled to the processor and that stores a transaction application therein, a first connecting interface that is coupled to the processor, and a communication unit that is coupled to the processor and that is configured to communicate with a banking server.

The portable payment device is a plug-and-play device, and is to be removably connected to the electronic device. The portable payment device includes a card slot that is provided with a card interface for containing a payment card therein, and a second connecting interface that is to be electrically connected to the first connecting interface of the electronic device, thereby enabling access of the payment card using the electronic device.

The transaction application, when executed by the processor, causes the electronic device to cooperate with the payment card and the banking server to execute a method as described above.

Another object of the present invention is to provide an electronic device that is able perform the method.

Accordingly, an electronic device of the present invention includes a processor, a memory unit that is coupled to the processor and that stores a transaction application therein, a first connecting interface that is coupled to the processor and that is for removably coupling to a portable payment device provided with a payment card, and a communication unit that is coupled to the processor and that is configured to communicate with a banking server.

The transaction application, when executed by the processor, causes the electronic device to cooperate with the payment card and the banking server to execute a method as described above.

BRIEF DESCRIPTION OF THE DRAWINGS

Other features and advantages of the present invention will become apparent in the following detailed description of the preferred embodiment with reference to the accompanying drawings, of which:

FIG. 1 is a block diagram of a preferred embodiment of a system according to the invention;

FIG. 2 is a schematic view of an interface device being configured to communicate with various electronic devices in the system of FIG. 1;

FIGS. 3A to 3C are flow charts illustrating steps of a method for processing a payment using the system of FIG. 1; and

FIGS. 4 to 7 illustrate various messages outputted by an input/output unit of the electronic device in different stages of the method.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT

As shown in FIG. 1, the preferred embodiment of a system 100 according to the present invention is for implementing a method for processing a payment that is related to a transaction. The system 100 includes an electronic device 1 that is able to communicate with a banking server 5, and a portable payment device 2 that is provided with a payment card 22, that is to be removably connected to the electronic device 1, and that serves as an interface device for coupling the payment card 22 to the electronic device 1.

In this embodiment, the electronic device 1 may be embodied using one of a personal computer, a laptop computer, a tablet computer, a mobile device, an automated teller machine (ATM), and a vending machine (See FIG. 2). It is noted that the personal computer, the laptop computer, the tablet computer and the mobile device may be in either a customer or a merchant's possession. The electronic device 1 has to include network connectivity and mechanism for executing an application designed for causing the electronic device 1 to perform the method for processing the payment.

The electronic device 1 is operable to communicate, over a network, with a banking server 5. The banking server 5 may be operated by a master bank that issues payment cards to customers, or a member bank. In this embodiment, the banking server 5 includes a transaction platform 3 for communicating with the electronic device, and a bank system 4 that is coupled to the transaction platform 3. In various embodiments, the transaction platform 3 and the bank system 4 may be integrated as a single component (e.g., a server) or may be implemented as two separate components that communicate over a dedicated channel or session. In cases that the transaction platform 3 and the bank system 4 are implemented as separate components, the transaction platform 3 may be operated by a third party other then the bank.

The electronic device 1 includes a processor 11, a memory unit 12 that is coupled to the processor 11 and that stores a transaction application 120 therein, a first connecting interface 13 that is coupled to the processor 11, an input/output (I/O) unit 14 that is coupled to the processor 11, and a communication unit 15 that is coupled to the processor 11.

In this embodiment, the first connector 13 may be embodied using a universal serial bus (USB) 2.0, USB 3.0, MiniUSB or MicroUSB port. The I/O unit 14 may include, but is not limited to, a mouse/keyboard combination, a touch screen, a speaker/display combination, or a combination thereof. In cases that the electronic device 1 is embodied using a vending machine, the I/O unit 14 may include a plurality of physical/virtual buttons, a control panel, an item dispenser, or a combination thereof. In cases that the electronic device 1 is embodied using an automated teller machine (ATM), the I/O unit 14 may include a touch screen, a keyboard, and a cash dispensing equipment.

The portable payment device 2 is embodied using a plug-and-play device (e.g., a device having universal serial bus (USB) 2.0, USB 3.0, MiniUSB or MicroUSB connectivity). The portable payment device 2 is removably connected to the electronic device 1 for performing the method for processing the payment.

The portable payment device 2 may be adequately dimensioned to be fit into pockets or purses, and/or to be attached to other objects, such as the purse or a portable device, as an accessory item. The portable payment device 2 includes a housing 20 formed with a card slot 201, a circuit board 21 disposed in the housing 20, and a second connecting interface 23 disposed on the circuit board 21 and configured to be electrically connected to the first connecting interface 13 of the electronic device 1. The card slot 201 is provided with a card interface for containing the payment card 22 therein. The card interface provides a communication interface between the payment card 22 and the second connecting interface 23, and as a result, when the portable payment device 2 is coupled to the electronic device 1, access to the payment card is enabled using the electronic device 1. It is noted that the portable payment device 2 is not provided with computing functionality when the payment card 22 is not connected with the portable payment device 2.

In this embodiment, the payment card 22 is embodied using a micro Secure Digital (SD) card. The payment card 22 includes a control module 220, a financial data chip 221 and a storage unit 225. The financial data chip 221 is in compliance with the FISC II specification.

The control module 220 includes a controller chip 222, controller firmware 224 that is loaded in a read-only memory (ROM) (not shown in the drawings), and an application program interface (API) 223. The controller chip 222 and the ROM may be integrated using integrated circuit packaging, and may be juxtaposed with the storage unit 225.

When the portable payment device 2 is coupled to the electronic device 1, the processor 11 is operable to access the financial data chip 221 and the storage unit 225 through the controller firmware 224. The API 223 and the controller firmware 224 are able to operate according to the instructions of the transaction application 120. The API 223 includes functions that are able to perform encryptions using algorithms such as Triple Data Encryption Algorithm symmetric-key block cipher (3DES), Advanced Encryption Standard (AES), RSA encryption, etc.

The storage unit 225 includes a system section 226 and a storage section 227. The system section 226 is built in with basic operation information. The storage section 227 includes a hidden area 228 and a visible area 229. The visible area 229 allows access by an operating system (OS) of the electronic device 1. For example, for a Microsoft Windows® system, the visible area 229 may be accessed using a File Management program.

The hidden area 228 is not accessible to the OS, and it is not allowed to perform operations such as read, write or modify content of files stored in the hidden area 228 via the OS. Instead, the hidden area 228 is only accessible to the transaction application 120 via the controller firmware 224 after a certain authorization sequence has been done. Specifically, when the portable payment device 2 is coupled to the electronic device 1, the controller firmware 224 is configured to report to the OS that only the visible area 229 is detected. As a result, the OS will not display the hidden area 228 to a user. The hidden area 228 is accessible only when the user executes the transaction application 120, and passes the authorization sequence. Details regarding the authorization sequence are readily appreciated by those skilled in the art, and are thus omitted herein for the sake of brevity.

The hidden area 228 stores a virtual account that is associated with a bank account that is between a user of the portable payment device 2 and the bank that operates the banking server 5. Data regarding the bank account is stored in the financial data chip 221. In practice, the hidden area 228 may store a plurality of virtual accounts respectively associated with a plurality of bank accounts.

Further referring to FIG. 3A, the method for processing the payment will now be described. In the following example, the electronic device 1 may be embodied using a computer, and the transaction is purchase of a Taiwan High Speed Rail ticket.

To begin with, a user may operate the electronic device 1 to connect to a website that handles the ticket purchase (see FIG. 4). The website provides the user with an interface for inputting transaction information related to the transaction and to the payment for the transaction. Here, the transaction information includes details regarding the trip (e.g., information related to the user, departure time, place of departure, destination, train fare, etc.).

After the transaction information is provided by the user, the website provides a number of ways for the user to make the payment (e.g., paying in a convenient store or a railway station, using a conventional credit card or the payment card 22). Here, in this case, the user selects to make the payment using the payment card 22. In response, the processor 11 of the electronic device 1 is operable to execute the transaction application 120 (step S11).

In step 12, the processor 11 receives the transaction information. Afterward, the processor 11 executes a security function 121 included in the transaction application 120 to generate to-be-authenticated data in step S13, and to disable adjustment made on the transaction information in step S14. Specifically, the to-be-authenticated data includes the transaction information, and after step S14, it is not allowed for the user to make any change to the transaction information. It should be noted that steps S13 and S14 may be performed in any order, or performed simultaneously.

Then, the processor 11 generates an instruction for the user to connect the portable payment device 2 (provided with the payment card 22) to the electronic device 1 (see FIG. 5). When the processor 11 detects, in step S15, the payment card 22 through the portable payment device 2, the flow proceeds to step S16. Otherwise, the processor 11 idles by until the portable payment device 2 is connected.

In step S16, the processor 11 outputs, via the I/O unit 14, the transaction information again for the user to confirm, and provides a list of virtual accounts stored in the payment card 22 for the user to select from. Specifically, the payment card 22 initially stores a master virtual account associated with master bank, and may store additional member virtual accounts that are associated with various member banks.

After one of the virtual accounts is selected, in step S17, the processor 11 outputs an instruction that asks user input of an access password associated with the payment card 22 (see FIG. 6).

Upon receipt of the access password (step S18), the processor 11 subsequently transmits the access password to the payment card 22 through the first connecting interface 13 and the second connecting interface 23. The payment card 22 is operable to verify the access password in step S19. When it is verified by the payment card 22 that the access password is correct, the payment card 22 transmits an access-grant instruction to the electronic device 1, and the flow proceeds to step S23.

Otherwise, the flow proceeds to step S20, in which the payment card 22 transmits an access-deny instruction to the electronic device 1, and in step S21, the payment card 22 counts a number of consecutive occasions that a wrong access password is received. When the number is smaller than a threshold (for example, three), the flow goes back to step S17 for allowing the user to enter another access password. Otherwise, the flow proceeds to step S22, in which the payment card 22 is locked and access of the payment card 22 is prohibited.

In step S23, the electronic device 1 clears the access password that is temporarily stored therein (received in step S18). This step is implemented to prevent the access password from being retrieved by other parties. This is even more important in the cases where a public electronic device, or an electronic device in the merchant's possession is used for performing the method.

In step S24, the processor 11 is operable to compare the to-be-authenticated data generated in step S13 and the transaction information confirmed by the user in step S16. When it is determined that the to-be-authenticated data conforms with the transaction information, the flow proceeds to step S25. Otherwise, the flow goes back to step S12.

In step S25, the processor 11 transmits the to-be-authenticated data to the payment card 22. Then, in step S26, the payment card 22 is configured to generate a transaction authentication code (TAC) based on the to-be-authenticated data and a secret key, and to transmit the TAC to the electronic device 1.

Specifically, the payment card 22 stores, in the financial data chip 221, a master secret key corresponding to the master virtual account. The payment card 22 may store, in the hidden area 228, additional member secret keys corresponding to the member virtual accounts. As such, the payment card 22 selects a corresponding one of the secret keys (including the master secret key and the member secret keys) based on the virtual account selected in step S16 for generating the TAC.

In step S27, the processor 11 executing the transaction software 120 composes a payment command using the TAC. The payment command includes at least the transaction information and the TAC, and is encrypted.

Referring to FIG. 3B, after step S27, the electronic device 1 attempts to establish a session with the transaction platform 3. The session is for providing a secure communication channel between the electronic device 1 and the transaction platform 3, and for identifying validity of the payment card 22.

In step A1, the processor 11 executing the transaction software 120 obtains the virtual account used in step S16 from the payment card 22. It is noted in that in other embodiments, various codes or symbols that are able to identify the user of the portable payment device 2 may be employed.

In step A2, the processor 11 transmits a session request to the transaction platform 3. The session request includes the virtual account.

In step A3, the transaction platform 3 generates a session identification (ID) in response to receipt of the session request, and transmits the session ID to the electronic device 1. The electronic device 1 in turn receives the session ID and transmits the same to the payment card 22 in step A4.

In step A5, the payment card 22 is operable to generate a first authentication code based on the session ID and a card identification key that is stored in the hidden area 228 during physical production of the payment card 22. Then, the payment card 22 transmits the first authentication code to the electronic device 1.

It is noted that the card identification key is only known to the payment card 22 and the transaction platform 3, and is not transmitted to the electronic device 1 throughout the method. Furthermore, generation of the first authentication code is done within the payment card 22. This ensures that the electronic device 1 is not able to intervene in the generation of the first authentication code, and would not be able to generate a valid first authentication code without the card identification key. Therefore, only a valid payment card 22 is able to generate a valid first authentication code.

The electronic device 1 in turn transmits the first authentication code to the transaction platform 3 in step A6.

Then, in step A7, the transaction platform 3 finds a user identification key stored therein, according to the virtual account included in the session request that is received from the electronic device 1 in step A2. The user identification key corresponds to the card identification key, and is dedicated to the virtual account.

In step A8, the transaction platform 3 generates a second authentication code based on the session ID generated in step A3 and the user identification key found in step A7.

In step A9, the transaction platform 3 determines whether the first authentication code received from the electronic device 1 in step A6 conforms with the second authentication code generated in step A8. When it is determined that the first authentication code conforms with the second authentication code (that is, the payment card 22 is one issued by the bank), the flow proceeds to step A10. Otherwise, the transaction platform 3 determines that the payment card 22 failed to generate a valid first authentication code (and therefore may not be one issued by the bank), and the flow is terminated.

In step A10, the transaction platform 3 transmits a session response to the electronic device 1 so as to establish the session and to allow the transaction to proceed.

Referring to FIG. 3C, after the transaction platform 3 allows the transaction to proceed, in step S28, the payment command composed in step S27 is transmitted by the processor 11, via the communication unit 15, to the transaction platform 3 under the session. Specifically, the transmission is executed using Secured Sockets Layer (SSL) protocol. The transaction platform 3 in turn transmits the payment command to the bank system 4 in step S29 through the dedicated channel.

In response to receipt of the payment command, in step S30, the bank system 4 is operable to decrypt the received payment command, and to identify validity of the payment card 22 based on the payment command. Specifically, the bank system 4 generates a confirmation code using the to-be-authenticated data included in the payment command, using the same secret key stored in the payment card 22 (e.g., in the financial data chip 221 or the hidden area 228). In some embodiments, the secret key for generating the confirmation code may be included in the payment command, and transmitted by the transaction platform 3 to the bank system 4.

The bank system 4 then compares the TAC and the confirmation code. When it is determined that the confirmation code conforms with the TAC, the bank system 4 determines that the payment card 22 is valid, and the transaction information is not altered during transmission. The flow then proceeds to step S31. Otherwise, the flow proceeds to step S36.

In step S31, the bank system 4 is configured to process the payment according to the transaction information included in the payment command. In this case, a value of the train fare (in this case, NT$160) is deducted from the bank account that is represented by the virtual account, and is transferred to an account owned by the Taiwan High Speed Rail company.

Then, in step S32, the bank system 4 generates a payment result indicating that the transaction has been processed, and transmits the payment result to the transaction platform 3.

In turn, the payment result is relayed to the electronic device 1 in step S33. The transmission of the payment result is similarly under the session and uses the SSL protocol. Afterward, in step S34, the electronic device 1 may output an alert to instruct the user to disconnect the portable payment device 2.

The payment result may include a credential that is provided to the user in step S35. The credential may be in the form of a quick response (QR) code or a string of codes for the user to use in a convenience store or a station to redeem a physical train ticket, or in the form of an electronic train ticket that can be directly used in a station when downloaded to a mobile device.

In step S30, when it is determined that the confirmation code does not conform with the TAC, the bank system 4 determines that either the payment card 22 is invalid, or the transaction information was altered during transmission. As a result, in step S36, the bank system 4 generates and transmits an error message to the transaction platform 3. In step S37, the transaction platform 3 relays the error message to the electronic device 1, which outputs the error message in step S38. As a result, the transaction will not be processed.

The above-described method may be adopted in places such as a retail store. In such cases, when a customer is to purchase goods and/or services, a merchant may operate the electronic device 1 (e.g., a personal computer) to execute the transaction application 120 (step S11). In step S12, the transaction information may be inputted to the electronic device 1 by, for example, scanning a barcode associated with the goods and/or services. Then, the customer provides the merchant with the portable payment device 2 having the payment card 22 in step S15, confirms the transaction information in step S16, and provides the electronic device 1 with the access password in step S17.

The electronic device 1 will automatically carry out the subsequent steps with the transaction platform 3 and the bank system 4. Afterwards, in step S34, the payment is processed, and the customer may retrieve the portable payment device 2 and obtain the goods/services.

To sum up, the method of the present invention does not require a merchant to provide specific processing equipments for use with the conventional credit cards. Since the portable payment device 2 is embodied using a plug-and-play device, an arbitrary electronic device having the first connecting interface 13 and installed with the transaction application 120 can be employed as the electronic device 1. As a result, the method is beneficial for expanding usage of the payment card 22 in cases where the conventional credit card is not applicable.

For example, the method is applicable in cases where the goods/services are provided to the customer via delivery, and the payment is made after the goods/services have been delivered. A delivery personnel may bring along an electronic device 1 having the first connecting interface 13 and installed with the transaction application 120, and after the customer confirms the goods/services, operate the electronic device 1 to perform the method. As a result, the delivery personnel is not required to being cash during the trip.

The method is also applicable in cases where the goods/services are provided to the customer by a vending machine. After the payment is carried out in step S35, the vending machine provides the goods.

Further, the portable payment device 2 may be configured to be used with an ATM machine for withdrawing cash from the back account. In such cases, after the method is carried out, the ATM dispenses the cash to the customer.

While the present invention has been described in connection with what is considered the most practical and preferred embodiment, it is understood that this invention is not limited to the disclosed embodiment but is intended to cover various arrangements included within the spirit and scope of the broadest interpretation so as to encompass all such modifications and equivalent arrangements.

Claims

1. A method for implemented using a system that includes an electronic device, and a banking server and a payment card, the payment card including a controller chip, said method comprising: (a) receiving, by the electronic device, transaction information related to a transaction and to a payment for the transaction;(b) accessing, by the electronic device, the payment card via a portable payment device which is a plug-and-play device;(c) generating, by the electronic device cooperating with the payment card, a payment command that includes at least the transaction information;(d) establishing, by the electronic device cooperating with the payment card and the banking server, a session with the banking server, the session providing a secure communication channel between the electronic device and the banking server;(e) transmitting, by the electronic device, the payment command to the banking server under the session established in step (d);(f) identifying, by the banking server, validity of the payment card based on the payment command in response to receipt of the payment command;(g) processing, by the banking server, the payment according to the transaction information included in the payment command after identifying the payment card as valid;(h) generating, by the banking server, a payment result after processing the payment; and(i) receiving, by the electronic device, the payment result from the banking server under the session established in step (d);wherein step (d) further comprises sub-steps of:(d1) obtaining, by the electronic device from the payment card, a virtual account associated with a bank account that is between a user of the portable payment device and a bank that operates the banking server and that is used for the payment;(d2) transmitting, by the electronic device to the banking server, a session request that includes the virtual account;(d3) generating, by the banking server, a session identification (ID) in response to receipt of the session request;(d4) transmitting, by the banking server to the electronic device, the session ID;(d5) transmitting, by the electronic device to the payment card, the session ID;(d6) generating, by the payment card, a first authentication code based on the session ID and a card identification key stored therein;(d7) transmitting, by the payment card to the electronic device, the first authentication code;(d8) transmitting, by the electronic device to the banking server, the first authentication code;(d9) finding, by the banking server, a user identification key stored therein according to the virtual account included in the session request that is transmitted by the electronic device in sub-step (d2), the user identification key corresponding to the card identification key and being dedicated to the virtual account;(d10) generating, by the banking server, a second authentication code based on the session ID generated in sub-step (d3) and the user identification key found in sub-step (d9);(d11) determining, by the banking server, whether the first authentication code transmitted by the electronic device in sub-step (d8) conforms with the second authentication code generated in sub-step (d10); and(d12) transmitting, by the banking server to the electronic device, a session response upon determining in sub-step (d11) that the first authentication code conforms with the second authentication code; andwherein the establishing of the session in step (d) is performed in accordance with the session response.

2. The method of claim 1, wherein step (c) further comprises sub-steps of: (c1) transmitting, by the electronic device to the payment card, to-be-authenticated data that includes the transaction information;(c2) generating, by the payment card, a transaction authentication code (TAC) based on the to-be-authenticated data and to transmit the TAC to the electronic device; and(c3) composing, by the electronic device, the payment command using the TAC.

3. The method of claim 2, wherein: the TAC generated by the payment card includes a secret key stored therein; andstep (f) further comprises sub-steps of:(f1) generating, by the banking server, a confirmation code using the to-be-authenticated data included in the payment command using the same secret key; and(f2) comparing, by the banking server, the TAC and the confirmation code.

4. The method of claim 1, wherein step (b) further comprises sub-steps of: (b1) when the portable payment device is connected to the electronic device, determining, by the electronic device, whether the payment card is detected;(b2) in response to the determination that the payment card is detected, outputting, by the electronic device, an instruction to ask user input of an access password;(b3) upon receipt of the access password, temporarily storing, within the electronic device, the access password;(b4) transmitting, by the electronic device, the access password to the payment card;(b5) verifying, by the payment card, the access password;(b6) transmitting, by the payment card, an access-grant instruction to the electronic device when the access password is correct; and(b7) upon receipt of the access-grant instruction, clearing, by the electronic device, the access password temporarily stored therein.

5. The method of claim 1, further comprising, after step (a), the step of disabling adjustment made on the transaction information.

6. A system comprising: a banking server,a payment card that includes a controller chip;an electronic device that includes a processor,a memory unit coupled to said processor and storing a transaction application therein,a first connecting interface coupled to said processor, anda communication unit coupled to said processor and configured to communicate with said banking server; anda portable payment device that is a plug-and-play device, that is to be removably connected to said electronic device, and that includes a card slot provided with a card interface for containing a payment card therein, anda second connecting interface to be electrically connected to said first connecting interface of said electronic device, thereby enabling access to the payment card using said electronic device;wherein said processor, upon execution of said transaction application, causes said electronic device to cooperate with the payment card and said banking server to execute steps comprising: (a) receiving, by the electronic device, transaction information related to a transaction and to a payment for the transaction;(b) accessing, by the electronic device, the payment card via a portable payment device which is a plug-and-play device;(c) generating, by the electronic device cooperating with the payment card, a payment command that includes at least the transaction information;(d) establishing, by the electronic device cooperating with the payment card and the banking server, a session with the banking server, the session providing a secure communication channel between the electronic device and the banking server;(e) transmitting, by the electronic device, the payment command to the banking server under the session established in step (d);(f) identifying, by the banking server, validity of the payment card based on the payment command in response to receipt of the payment command;(g) processing, by the banking server, the payment according to the transaction information included in the payment command after identifying the payment card as valid;(h) generating, by the banking server, a payment result after processing the payment; and(i) receiving, by the electronic device, the payment result from the banking server under the session established in step (d);wherein step (d) further comprises sub-steps of:(d1) obtaining, by the electronic device from the payment card, a virtual account associated with a bank account that is between a user of the portable payment device and a bank that operates the banking server and that is used for the payment;(d2) transmitting, by the electronic device to the banking server, a session request that includes the virtual account;(d3) generating, by the banking server, a session identification (ID) in response to receipt of the session request;(d4) transmitting, by the banking server to the electronic device, the session ID;(d5) transmitting, by the electronic device to the payment card, the session ID;(d6) generating, by the payment card, a first authentication code based on the session ID and a card identification key stored therein;(d7) transmitting, by the payment card to the electronic device, the first authentication code;(d8) transmitting, by the electronic device to the banking server, the first authentication code;(d9) finding, by the banking server, a user identification key stored therein according to the virtual account included in the session request that is transmitted by the electronic device in sub-step (d2), the user identification key corresponding to the card identification key and being dedicated to the virtual account;(d10) generating, by the banking server, a second authentication code based on the session ID generated in sub-step (d3) and the user identification key found in sub-step (d9);(d11) determining, by the banking server, whether the first authentication code transmitted by the electronic device in sub-step (d8) conforms with the second authentication code generated in sub-step (d10); and(d12) transmitting, by the banking server to the electronic device, a session response upon determining in sub-step (d11) that the first authentication code conforms with the second authentication code; andwherein the establishing of the session in step (d) is performed in accordance with the session response.

7. The system of claim 6, wherein said electronic device is an automated teller machine (ATM), and further includes an input/output (I/O) unit including at least a cash dispensing equipment.

8. The system of claim 6, wherein said electronic device is a vending machine, and further includes an input/output (I/O) unit including at least a plurality of physical/virtual buttons, and an item dispenser.