Payment method and device using ultra-wideband communication
The present disclosure discloses a method for a UWB-based payment service. A method of a first electronic device using UWB communication, of the present disclosure, may comprise the operations of: receiving, from a second electronic device, an initiation message for UWB ranging, which includes a random number generated by means of the second electronic device, transmitting, to the second electronic device, a response message to the initiation message, which includes identification information about the first electronic device encrypted using a session key generated on the basis of the random number, receiving, from the second electronic device, a transaction information message including request type information indicating the type of request associated with a payment, and transmitting, to the second electronic device, a payment information message including response data based on the request type information.
1 . A method performed by a first electronic device using ultra-wide band (UWB) communication, the method comprising:
receiving, from a second electronic device, a UWB ranging initiation message including certificate information for the second electronic device;
transmitting, to the second electronic device, a UWB ranging response message, the UWB ranging response message including identification information for the first electronic device;
deriving a session key based on the certificate information for the second electronic device;
establishing a secure channel between the first electronic device and the second electronic device using the session key;
receiving, from the second electronic device, a transaction information message using the session key via the secure channel; and
transmitting, to the second electronic device, a payment information message using the session key via the secure channel, wherein the payment information message includes a token for a payment.
2 . The method of claim 1 ,
wherein the transaction information message includes request type information indicating a type of a request associated with payment, and
wherein the request type information is set to any one of a first value indicating a request for card registration for the payment, a second value indicating a request for the identification information on the first electronic device, or a third value indicating a request for a second token generated based on information on a registered card.
3 . The method of claim 2 ,
wherein in case that the request type information is set to the first value indicating the request for card registration, response data in the payment information message includes card information encrypted based on the session key generated based on a random number included in the UWB ranging initiation message,
wherein in case that the request type information is set to the second value indicating the request for the identification information on the first electronic device, the response data includes the identification information on the first electronic device encrypted based on the session key, and
wherein in case that the request type information is set to the third value indicating the request for the second token, the response data includes the second token encrypted based on the session key.
4 . The method of claim 3 , wherein in case that the response data includes the card information, the second token is generated by the second electronic device based on the card information.
5 . The method of claim 3 , wherein in case that the response data includes the second token, the second token is verified for payment processing by the second electronic device.
6 . The method of claim 2 ,
wherein in case that the request type information is set to the second value or the third value, the transaction information message further includes transaction information encrypted based on the session key generated based on a random number included in the UWB ranging initiation message, and
wherein the transaction information includes information for identifying an item purchased through the second electronic device.
7 . The method of claim 6 , wherein the information for identifying the purchased item includes a uniform resource locator (URL) or a string for searching for the purchased item.
8 . A first electronic device using ultra-wide band (UWB) communication, the first electronic device using UWB communication comprising:
a transceiver; and
at least one processor connected to the transceiver and configured to:
receive, from a second electronic device, a UWB ranging initiation message including certificate information for the second electronic device,
transmit, to the second electronic device, a UWB ranging response message, the UWB ranging response message including identification information for the first electronic device,
derive a session key based on the certificate information for the second electronic device,
establish a secure channel between the first electronic device and the second electronic device using the session key,
receive, from the second electronic device, a transaction information message using the session key via the secure channel, and
transmit, to the second electronic device, a payment information message using the session key via the secure channel, wherein the payment information message includes a token for a payment.
9 . The first electronic device of claim 8 ,
wherein the transaction information message includes request type information indicating a type of a request associated with payment, and
wherein the request type information is set to any one of a first value indicating a request for card registration for the payment, a second value indicating a request for the identification information on the first electronic device, or a third value indicating a request for a second token generated based on information on a registered card,
wherein in case that the request type information is set to the second value or the third value indicating the request for the identification information on the first electronic device, the transaction information message further includes transaction information encrypted based on the session key generated based on a random number included in the UWB ranging initiation message,
wherein the transaction information includes information for identifying an item purchased through the second electronic device, and
wherein the information for identifying the purchased item includes a uniform resource locator (URL) or a string for searching for the purchased item.
10 . The first electronic device of claim 9 ,
wherein in case that the request type information is set to the first value indicating the request for card registration, response data in the payment information message includes card information encrypted based on the session key generated based on a random number included in the UWB ranging initiation message,
wherein in case that the request type information is set to the second value indicating the request for the identification information on the first electronic device, the response data includes the identification information on the first electronic device encrypted based on the session key, and
wherein in case that the request type information is set to the third value indicating the request for the second token, the response data includes the second token encrypted based on the session key.
11 . The first electronic device of claim 10 ,
wherein in case that the response data includes the card information, the second token is generated by the second electronic device based on the card information, and
wherein in case that the response data includes the second token, the second token is verified for payment processing by the second electronic device.
12 . A method of a second electronic device using ultra-wide band (UWB) communication, the method comprising:
transmitting, to a first electronic device, a UWB ranging initiation message including certificate information for the second electronic device;
receiving, from the first electronic device, a UWB ranging response message, the UWB ranging response message including identification information for the first electronic device;
transmitting, to the first electronic device, a transaction information message via a secure channel between the first electronic device and the second electronic device using a session key based on the certificate information for the second electronic device; and
receiving, from the first electronic device, a payment information message via the secure channel using the session key, wherein the payment information message includes a token for a payment.
13 . The method of claim 12 ,
wherein the transaction information message includes request type information, and
wherein the request type information is set to any one of a first value indicating a request for card registration for the payment, a second value indicating a request for the identification information on the first electronic device, or a third value indicating a request for a second token generated based on information on a registered card.
14 . The method of claim 13 ,
wherein in case that the request type information is set to the first value indicating the request for card registration, response data in the payment information message includes card information encrypted based on the session key generated based on a random number included in the UWB ranging initiation message,
wherein in case that the request type information is set to the second value indicating the request for the identification information on the first electronic device, the response data includes the identification information on the first electronic device encrypted based on the session key, and
wherein in case that the request type information is set to the third value indicating the request for the second token, the response data includes the second token encrypted based on the session key.
15 . The method of claim 14 , wherein in case that the response data includes the card information, the second token is generated based on the card information.
16 . The method of claim 14 , further comprising, in case that the response data includes the second token, verifying the second token for payment processing.
17 . The method of claim 13 ,
wherein in case that the request type information is set to the second value or the third value, the transaction information message further includes transaction information encrypted based on the session key,
wherein the transaction information includes information for identifying an item purchased through the second electronic device, and
wherein the information for identifying the purchased item includes a uniform resource locator (URL) or a string for searching for the purchased item.
18 . A second electronic device using ultra-wide band (UWB) communication, the second electronic device using UWB communication comprising:
a transceiver; and
at least one processor connected to the transceiver and configured to:
transmit, to a first electronic device, a UWB ranging initiation message including certificate information for the second electronic device,
receive, from the first electronic device, a UWB ranging response message, the UWB ranging response message including identification information on the first electronic device,
transmit, to the first electronic device, a transaction information message via a secure channel between the first electronic device and the second electronic device using a session key based on the certificate information for the second electronic device, and
receive, from the first electronic device, a payment information message via the secure channel using the session key, wherein the payment information message includes a token for a payment.
19 . The second electronic device of claim 18 ,
wherein the transaction information message includes request type information,
wherein the request type information is set to any one of a first value indicating a request for card registration for the payment, a second value indicating a request for the identification information on the first electronic device, or a third value indicating a request for a second token generated based on information on a registered card,
wherein in case that the request type information is set to the first value indicating the request for card registration, response data in the payment information message includes card information encrypted based on the session key generated based on a random number included in the UWB ranging initiation message,
wherein in case that the request type information is set to the second value indicating the request for the identification information on the first electronic device, the response data includes the identification information on the first electronic device encrypted based on the session key, and
wherein in case that the request type information is set to the third value indicating the request for the second token, the response data includes the second token encrypted based on the session key.
20 . The second electronic device of claim 19 , wherein in case that the response data includes the card information, the second token is generated based on the card information.