POS PAYMENT TERMINAL AND A METHOD OF DIRECT DEBIT PAYMENT TRANSACTION USING A MOBILE COMMUNICATION DEVICE, SUCH AS A MOBILE PHONE

Abstract

A POS payment terminal (1) using a mobile communication device (4), such as a mobile phone, is created over a temporary connection between the merchant's Sales Device (2) with the removable memory card (18), where the removable memory card (18) is inserted into the customer's slot of the mobile communication device (4). The Sales Device (2) contains a secure memory (6) with the POS terminal's identification data in the form of a SAM card or an ICC card (9) or directly in the form of a secure element on the circuit printed. The payment terminal (1) is created before or during the payment process over a temporary connection between a Sales Device (2) with a mobile communication device (4), which is held by the customer and which has a removable memory card that can have an independent communication element, especially of the NFC type. The payment cryptogram is of standard form, e.g. in the EMV format and it is sent online or offline in batches to the payment processing center (15) according to the amount paid and the preset risk management.

Description

TECHNICAL FIELD

The solution refers to a payment terminal of a simplified structure that is uses the paying customer's mobile communication device, such as a mobile phone, and which is designed above all for small business premises such as mobile kiosks and similar merchants.

BACKGROUND

The existing POS terminals are widespread in business premises and they are distinguished by a stable structure, which besides other things includes a communication channel connected to the payment processing centre, a printer, an encryption key, a display, the card reader, which is mainly a reader of different format cards, and also a keyboard for PIN code entering. This kind of technical configuration requires certain space and is relatively expensive. The realizations of known POS terminals are intended for stable sale locations in physical shops, where high costs of purchase, installation and operation of POS terminals are offset by reasonable turnovers of payments for purchases.

The solution according to the published patent WO2008061790 describes a system, in which the POS terminal does not have a communication channel with the payment processing center and uses a mediated connection over customer's mobile phone for it. This solution has lower security since the payment terminal application itself runs on a remote computer and the mobile phone is only a mediator of communication. Other published patents describe a divided POS terminal in such a way in which directly on the payment location there is only its managing part that is connected to the remaining part located in some other part of the shop. The existing solutions and published patents do not offer a simple instruction of how to create a cheap, non-complicated and eventually also portable POS payment terminal, which would create payment cryptograms according to the current standards, especially the EMV standards.

All solutions currently existing require a relatively complicated installation and encompass many input and output devices, which increase their price. Until now, there are known no such devices that would be characterized by both simplicity and high security and that would be portable and usable even in small shops such as in newspaper kiosks or in mobile counters selling fast food.

The important requirement is for the new solution to be compatible with the current payment data structures on the payment processor's level. In practice, it would not be possible to establish a configuration, which would require a completely new hierarchy or possibly a new verification process.

SUMMARY

The deficiencies mentioned are to a great extent eliminated by a POS payment terminal using a mobile communication device, such as a mobile phone, in which the POS payment terminal contains, among other things, a unit for the run of the payment terminal application, a secured memory with identification data for the matching and identification of the merchant, a display, a keyboard and an interface according to this solution, the subject matter of which lies in the fact that the POS payment terminal is formed by a temporary connection of the Sales Device with a removable memory card that is inserted in the slot of the mobile communication device, such as a mobile phone, belonging to the paying customer. The Sales Device can belong to the merchant or it can be held by him and contains a memory with identification data, which above all, encompass data necessary for matching the POS payment terminal to the corresponding merchant's bank account. Basically the Sales Device is formed by hardware, which ensures a correct identity of the temporarily created POS payment terminal

The important characteristic of the solution presented lies in the fact that the POS terminal is created from temporary connection of two parts. The connection is labeled as temporary, since after the payment process is ended, the parts can be disconnected, the communication channel is interrupted and another new connection between Sales Device and another removable memory card can be created. Naturally, a repeated connection of the beforehand cooperating removable memory card with the Sales Device is also not excluded. The temporality of the connection is understood as a time phase in reality limited by one payment process, while it can be supposed that there is even some time of connection before beginning and after the end of the payment process. The possibility to always pair a new pair of elements on the side of the merchant and the paying customer is a solution, in which it is always possible to create a POS terminal in the mobile communication device of a paying customer, with the POS terminal having the identity of the corresponding merchant.

The Sales Device collocation of words is not a commonly used term in the field of POS payment terminals and under this collocation it is necessary to understand any type of hardware element equipped with corresponding software for the realization of functions according to this description. The Sales Device behaves as a POS payment terminal outwardly and the merchants will usually call it that way in practice, however from the structure and run of the application point of view, the Sales Device is only an important but not sufficient part of the entire POS payment terminal Therefore, it is necessary to understand the term Sales Device in a general meaning as a part of the terminal, which is basically connected to the merchant, or to the purchase location and ensures the correct routing of debit payments.

In the entire POS payment terminal the Sales Device can have two basic functions—to carry the identity of the POS terminal and to enter the value of the payment. In principle, even a narrower hardware version is possible, in which the payment's value is entered over the keyboard of the mobile communication device. However this kind of version is uncomfortable for the merchant since he would have to control the customer's mobile communication device or he would have to trust the customer to enter the correct payment amount into the payment terminal application. The inserted value could be displayed also on the Sales Device display so the merchant could check it, however it would be much more comfortable if the paid amount was entered through the elements on the merchant's side. The version described in this section with entering the payment value over the mobile communication's device's keyboard would not have to fulfill some standards (e.g. EMV) on the merchant's behavior and operations during debit payment realization, however it is in principle realizable using the principle of the solution presented.

The Sales Device is not able to perform the payment terminal application independently and it does not have to have communication channels for the creation of the connection to the payment processing centre (e.g. a bank, a clearing house etc.). The hardware set is capable of fulfilling all basic functions of a common POS payment terminal only by connection of Sales Device of the merchant to the removable memory card, inserted into the customer's mobile communication device. The temporary connection can be basically created for the realization of each individual payment, while it can always be a different communication device on the side of different customers. Exactly the mobile communication device is capable to create the necessary connection to the payment centre thanks to the existing GSM/GPRS (Global System for Mobile Communications/General packet radio service). However, this connection does not have to be created during each payment since the solution according to our description is capable of processing off-line and on-line payments.

The important element of the POS payment terminal according to the solution presented is a removable memory card, which also contains hardware and software elements in order for the set made of Sales Device and mobile communication device to be capable to run and execute the payment terminal application, which in the process view forms the kernel of the debit, for example, payment operation, directly on the removable memory card. Since the set made of Sales Device and the mobile communication device does not have to be equipped with the external payment card's reader, it will be suitable if even secured memory with at least one payment card unit, will be directly on the removable memory card. Also a unit for the run of payment terminal application and the communication element for the connection to Sales Device will be on the removable memory card. Besides the secured memory with identification data of the POS payment terminal, the Sales Device can also contain a communication element for the connection to the removable memory card. Thanks to these elements the POS payment terminal is created with the help of a common mobile phone with the slot for the card which extends memory. So the removable memory card can encompass generic payment terminal which will become a specific payment terminal with unique identity only after it connects with Sales Device. The Sales Device will give a clear identification, for the benefit of who should the payment be made, to this temporary connection. Since there is interest in this function even in the mobile phones without an NFC (Near Field Communication) communication element, such NFC communication element can be included directly on the removable memory card. In principle, the connection between the mobile communication device and Sales Device can be in the form of contact interface, however that would require a complicated unification of the connectors and problems with compatibility. Therefore it will be suitable, if not only solution, for the connection between the Sales Device and removable memory card to be in the form of an NFC communication channel, which is widely standardized.

Thanks to the described configuration it will be possible for the merchant to have only a very simple Sales Device, which will carry the information on identity, terminal's number and to that one an account number of the corresponding merchant can be assigned in the payment processor centre. This kind of Sales Device will be very small and simple. It can be in the form of a small box with a display and keyboard through which the merchant will enter the required payment amount. The identification data can be stored directly in the corresponding element on the printed circuit of Sales Device, or they can be stored on the ICC (integrated circuit card) card or on other carriers as e.g. up until now known SAM (Security Authentication Module) cards with cryptographic key. In this version a SAM card of the size of a common SIM card (Subscriber Identity Module) that is available after taking off the cover of the Sales Device. SAM card is inserted into Sales Device before the first activation.

The customer will tap his mobile communication device to the Sales Device. By tapping it a NFC communication channel will be created and information on the identity of this temporarily created POS payment terminal will be sent from the Sales Device into the removable memory card. Then the identification data can be encrypted by a Master Key that is stored within the Secure Element in the Sales Device. Under the term Secure Element we can understand especially, however not exclusively, a secured memory with necessary interface that can be in the form of an independent chip with a corresponding computing capacity. The Secure Element can be configured in such a way so the data that are stored in it cannot be accessed from the outside but can be used as input parameters for the realization of computing operation within the Secure Element. Only the results of these computing operations e.g. in the form of cryptograms get out of the Secure Element. The input data from the Sales Device will become the basis for the run of the payment terminal application after they are read on the removable memory card. The payment-terminal application can be loaded in indifferent form, without its own identity on the removable memory card. Basically, after the creation of the temporary connection between the Sales Device and the removable memory card, the general, generic, indifferent terminal will transform into a particular POS terminal, which is assigned to a corresponding merchant into the system. This phase forms some kind of preparation on the start of the new one-time POS terminal Subsequently, a payment terminal application e.g. of the EMV type can run during the connection in a similar way as in standard POS terminals as it is up till now.

The encryption of the POS terminal's identification data can be done using a Master Key, which in general can be and mostly even will be different from the encryption keys, which are used later on by the payment terminal application for the creation of the payment cryptogram. The Master Key can be e.g. from the supplier of the Sales Device hardware and encryption keys of the payment-terminal application can be issued by a bank or a payment processor. The difference of the encryption keys in practice will be conditional on different requests of individual entities operating in the payment clearing system.

From the increase of security point of view even the entry about the payment amount can be encrypted during the transfer from the Sales Device to the mobile communication device. By this the risk that the paying user could lower the payment value even before the payment terminal application kernel is run is lowered. This kind of change would show itself on the final confirmation of the payment on the side of the merchant in the form of displaying the paid amount, however in case of inobservance and routine approach the merchant would not have to notice the change in the amount.

The configuration in which the communication with the unit of the selected payment card is done directly on the removable memory card during the run of the payment terminal application is suitable. Several units of independent payment cards can be stored on the removable memory card and that either on the physical separate secure elements or on independent domains of one secure element. In this configuration the payment terminal application can run directly on the removable memory card and the data on the customer's payment card are not sent over external readers and neither into internet area, a fact that has positive impact on the security of the payment operation.

The Sales Device can be in different forms; besides a small single-purpose box with a keyboard, which contains the Secure Element with identification data directly, it can be created even in such a way that within it is a created reader of external cards preferably of classical standard ICC (integrated circuit card) card format. Then the sensitive data can be loaded into the chip of this kind of card. The card's chip also contains a certain memory capacity which can be used suitably for the entry of data on realized payment transactions. After the day is over, the merchant can leave the basic part of the Sales Device in the shop, e.g. in the newspaper stand and take only the ICC card with him. In case he takes ICC card from the Sales Device, he can take it for processing into the bank or he can back up the data from it in his home computer by using a reader. In case the merchant has several mobile stands, there can be several Sales Devices combined with one ICC card with identification data of one terminal and one banking account and on the other hand one Sales Device can be used successively with several ICC cards belonging to different merchants within multiple shift business premises of one store.

It is suitable, but not necessary, if Sales Device has its own interface, e.g. of the USB format for the connection to extending accessories, which enables for the payment data to be printed directly from Sales Device, or respectively over this connector it is possible to connect the payment card reader, GPRS modem and similar.

BRIEF DESCRIPTION OF THE DRAWINGS

The solution is explained in detail on the FIGS. 1 to 8.

On the FIG. 1, there is schematic demonstration of the outside perspective on the mobile communication device in the form of a common mobile phone, which is placed near the Sales Device. Measurements, shape nor proportion ratio of the mobile communication device to Sales Device are not obligatory and are chosen only with the view of better clarity of the scheme. In the figure, the mobile phone and the Sales Device do not overlay for the purpose of increasing the clearness of the figure, however in reality the mobile phone can be placed directly to the surface of the Sales Device.

On the FIG. 2 there is a perspective on the basic structure of the Sales Device, where it is also visible that the communication element on the side of the mobile phone is located in the removable memory card. The memory with the identification data of the POS terminal is located in the removable memory card. The memory with the identification data of the POS terminal is located in the SAM card. On the FIG. 2 there is also the NFC communication channel between the removable memory card and Sales Device.

On the FIG. 3 there is schematic structure of the removable memory card with an indifferent POS payment terminal unit and with four independent payment card's units belonging to different banks. Above the scope of basic functions, the removable memory card is supplemented also for a common flash memory.

On the FIG. 4 there is a scheme of the Sales Device structure in the configuration where the ICC card of the merchant is inserted into the body of the reader.

On the FIG. 5 there is a configuration with the connection to cash register. The Sales Device encompasses the ICC card's reader and it also has a mini USB connector.

On the FIG. 6 there is a pre-paid removable memory card with a simplified architecture in the option with two Secure Elements.

On the FIG. 7 there is succession of tasks within payment application running on the removable memory card.

On the FIG. 8, there is a block scheme of the memory card's individual elements with displayed connection between individual elements on the memory card with one divided Secure Element, on which there are protected data from payment POS terminal also from several payment cards.

DETAILED DESCRIPTION OF ILLUSTRATIVE EMBODIMENTS

Example 1

In this example according to the FIGS. 1, 2, 3, 6 to 8 there is described a system where a Sales Device 2, in the form of a single-purpose box, which has a numeric keyboard 13, a display 14 and its own power source in the form of rechargeable accumulator, is located on the merchant's side. The Sales Device 2 has a NFC communication element 11 with an antenna 21 under the surface of the upper cover, where the centre of the antenna 21 is graphically depicted by a guiding symbol 19 of the target on the outside of the cover. In its hardware on the SAM card 24 the Sales Device 2 encompasses a Secure Element 6 into which the POS payment terminal 1 identification and also the Master Key for the encryption of the communicated data is loaded. In other version, the data can be loaded directly in the protected memory on the Sales Device's 2 printed circuit.

The merchant uses the Sales Device 2 in such a way that when selling he enters the amount he wants for his goods or his service over the keyboard 13 to the display 14. After checking the amount on the display 14, the merchant presses the confirming button. After this act, the POS payment terminal's 1 identification data is encrypted using Master Key and this encryption data, along with the payment amount is sent to the NFC communication element 11 which sends the encrypted message over antenna 21 and expects the mobile communication device 4 to be placed to the Sales Device 2. In his mobile communication device 4 the customer activates the launch of the payment application and he does that e.g. through a special hardware keyboard or over a software button. After the creation of the NFC communication channel, the encrypted data from the Sales Device 2 are read and decrypted, the result of which are the POS terminal's 1 identification data and the required payment amount.

This part of the transfer can be expressed also as

where 3DES means encryption over Triple Data Encryption Algorithm, where Mk is Master Key supplied by the payment processor, where Cfg means configuration data and NFC presents the transfer path between the Sales Device and the removable memory card.

The paid amount can be verified by the customer on the display of his mobile communication device 4. The identification data from the Sales Device 2 serve for the indifferent POS terminal 1 on the removable memory card 18 to become a specific POS payment terminal 1 for the benefit of a given merchant.

This process can be expressed as

Cfg+generic POS=ACg POS,

where Generic POS represents the identification of the indifferent, generic POS and ACg POS is the POS of a corresponding merchant.

Subsequently the payment terminal application runs in the normal way, e.g. according to the EMV standard. According to preset risk management of the payment card 7 and with respect to the value of the amount being paid, it might be requested to enter the password, PIN code, which is entered by the customer on the keyboard of its mobile communication device 4. In this way high security is reached, since the payment terminal application runs directly on the removable memory card 18, where there are stored also the payment cards' 7 units and the sensitive data do not leave the hardware of the connection between the Sales Device 2 and the removable memory card 18. The result of the payment application is the creation of the payment cryptogram, which is sent to the Sales Device 2 and also in the case of online payment is sent over the interface 8 into the mobile communication device 4 and subsequently over the mobile network to the payment processor. The payment cryptogram can be also created and sent according to the relationship:

pertinently to the payment processor's side as

The removable memory card is in this case in the form of a microSD card.

Example 2

In this example according to the FIG. 4, the Sales Device 2 is in the form of a device, which has a slot for the insertion of the ICC card 9 with the reader of the corresponding format. The merchant can buy the Sales Device 2 anywhere and this Sales Device 2 does not have its own identity. The merchant receives the ICC card 9 of the common parameters according to ISO 7810 85.60×53.98 mm from the bank or the payment processor. The payment processor's Master Key and also the POS terminal's identification data for the assignment to a corresponding merchant are loaded in the Secure Element on the chip of the ICC card. By inserting the ICC card 9 into the reader, the Sales Device 2 according to our description is created. The Sales Device 2 contains also the mini-B USB connector 17, over which it is possible to connect the printer, computer and other output or input units in extended configuration. The attendance and operation of the Sales Device 2 is similar to the first case, however it is different by the fact that after realizing the change the merchant takes out his ICC card 9 and can take it e.g. to the bank for the procession of the off-line payments. It is not excluded also the procession of this kind of ICC card 9 directly in the ATM machines. This solution has the advantage also in the fact that the ICC card is easy to operate, is of practical parameters and by its taking out of the Sales Device's 2 its theft from the business premises e.g. overnight and similar is prevented. The ICC card 9 also offers the area for the subsequent operation and backup of data in the computer with a simple reader.

The advantage of the configuration according to this example is also the possibility that one device with the reader, display 14 and keyboard 13 can be used by several merchants working in shifts in one business premises, while the payments are processed for the benefit of the corresponding merchant who has his ICC card 9 inserted in the reader at the moment.

Example 3

Besides the elements mentioned in the previous examples, the Sales Device 2 according to the FIG. 5 contains also the RS232 (Recommended Standard 232) interface through which it can be connected to the cash registrar 10. In this example the Sales Device 2 is basically an enhancement of the merchant's existing cash registrar 10 so it becomes a POS terminal 1; however, the payment terminal application can run again on the removable memory card 18, which is held by the customer along with the mobile communication device 4.

The result from the cash registrar 10 is transferred into the Sales Device 2 over the cable connection 16. There the result appears on the display 14 and the merchant confirms it by a confirming button. Subsequently the process runs in the same way as if the paid amount was entered over the Sales Device's 2 keyboard 13. In this configuration it would not even be necessary for the Sales Device 2 to contain a keyboard 13 for the entry of the paid amount, however due to the usability of the Sales Device 2 in various systems' point of view, the keyboard 13 is part of the Sales Device 2 even in this example.

INDUSTRIAL APPLICABILITY

The industrial applicability is obvious. With this invention, it is possible to industrially and repeatedly manufacture and use the POS payment terminals, which are created temporarily for the purpose of a specific payment by a connection of Sales Device and the mobile communication device. The necessary structures of the merchant's POS terminal are then created only after the connection with the removable memory card in the mobile communication device of the paying user is established.

LIST OF RELATED SYMBOLS

• 1—a POS payment terminal
• 2—a Sales Device
• 3—a Secure Element
• 31—the POS terminal's Secure Element
• 32—the payment card's Secure Element
• 4—a mobile communication device
• 5—a payment POS terminal application
• 6—a memory with terminal's configuration data
• 7—a payment card unit
• 8—an interface
• 9—an ICC card
• 10—a cash registrar
• 11—a communication element of the Sales Device
• 12—a communication element of the removable memory card
• 13—a keyboard
• 14—a display
• 15—a payment processing centre
• 16—a connection to the cash register
• 17—a external connector
• 18—a removable memory card
• 19—a target symbol
• 20—a microcontroller
• 21—the removable memory card's antenna
• 22—a memory
• 23—a Sales Device's antenna
• 24—a SAM card
• 25—a communication connection

Claims

1. A payment terminal using a mobile communication device, comprising: an interface;a payment card unit with a payment terminal application; anda sales device having at least one secured part for storing the payment terminal's identification data for matching a merchant and the interface,wherein the payment terminal is formed by a temporary contactless connection of the sales device with a removable memory card that is configured to be inserted into a hardware slot of the mobile communication device.

2. The payment terminal as in claim 1, wherein: the removable memory card comprises a secured memory with at least one payment card unit with the payment terminal application, and a communication element with an antenna for enabling connection with the sales device,the secured part of the sales device is connected with a microcontroller and the microcontroller is connected through the interface to the mobile communication device's circuits, andthe sales device further includes a secure element with the payment terminal's identification data, an encryption key, and a communication element with an antenna for enabling connection with the removable memory card.

3. A payment terminal as in claim 1, wherein the secure part for storing the payment terminal's identification data is located on a SAM card or on an ICC card that is inserted into a reader of the sales device.

4. A payment terminal as in claim 1, wherein the sales device has a display and a keyboard for the insertion of the amount being paid.

5. A payment terminal as in claim 1, wherein the removable memory card has first and second access modes, the first access mode enabling the extension of the mobile communication device's memory capacity and blocking access by the secured part of the sales device to a contactless communication element on the removable memory card, andthe second access mode enabling the removable memory card to access the secured part of the sales device and the payment card unit for the activation of the contactless communication element on the removable memory card, where the second access mode provides a payment function of the removable memory card and is active only after physical press of a hardware payment button of the mobile communication device,wherein the payment card unit with the payment terminal application is accessible exclusively in the second access mode for the payment function of the removable memory card, and wherein software in the mobile communication device blocks the possibility of emulation of the signal from the payment button by other input.

6. A method of performing a direct debit payment transaction using a mobile communication device, wherein the payment terminal is created before or during the payment process by a temporary connection of a merchant's sales device with a removable memory card that is held by a customer.

7. A method of performing a direct debit payment as in claim 6, wherein the payment terminal's identification data are loaded onto the removable memory card from the sales device and subsequently a payment terminal on the removable memory card becomes the payment terminal of the corresponding merchant.

8. A method of performing a direct debit payment as in claim 6, comprising creating a payment cryptogram and sending the payment cryptogram into the sales device where it is stored in a memory of realized payments records.

9. A method of performing a direct debit payment as in claim 6, comprising creating a payment cryptogram and sending the payment cryptogram over an interface and subsequently via the mobile communication device into a payment processor center.

10. A method of performing a direct debit payment as in claim 6, comprising inserting data about the payment value into the removable memory card from the sales device by manual insertion using a keyboard or over a connection with a cash register.

11. A method of performing a direct debit payment as in claim 6, comprising placing the removable memory card in a first access mode for a memory capacity extension function before the payment process is run, whereby the payment card unit is inaccessible from an interface side and switching the removable memory card into a second access mode for a payment function exclusively after physical press of a payment hardware button of the mobile communication device so as to allow access to the payment card unit.

12. A method of performing a direct debit payment as in claim 11, wherein a secure element within the payment terminal unit is accessible after the removable memory card is switched into the second access mode for the payment function, and after the payment process is ended and/or interrupted the removable memory card is switched into the first access mode for the function of extending the memory capacity of the mobile communication device.