Secure PIN entry device for mobile phones
View Patent ↗A secure mobile phone-point of sale (POS) system includes a mobile phone integrated with a secure PED module. The secure PED module is integrated with the mobile phone via the phone's serial port or directly to the phone's Printed Circuit Board Assembly (PCBA). The secure PED module conforms to security standards imposed by the payment card industry. The secure mobile phone-POS system has the functionality of both the secure PED and the mobile phone and the look and feel of the mobile phone.
1. A secure mobile phone-point of sale (mobile phone-POS) system for conducting secure Personal Identification Number (PIN) entry requiring electronic transactions, comprising:
a mobile phone;
a non-virtual secure PIN Entry Device (PED) comprising a keypad, a screen display and hardware security components effecting said keypad and said screen display to meet certification requirements of a certification institution for conducting said secure PIN entry requiring transactions;
(software and hardware components for processing said secure PIN entry requiring electronic transactions;
wherein said secure PED is integrated with said mobile phone; and
wherein said mobile phone-POS system comprises functionality of both said mobile phone and said secure PED.
2. The system of claim 1 wherein said mobile phone-POS system comprises a mobile phone form factor of bar type, clamshell, flip or slide.
3. The system of claim 2 wherein said mobile phone-POS system has a length in the range of 2-8 inches, width in the range of 1.5-3 inches and weight in the range of 5-10 ounces.
4. The system of claim 1 wherein said mobile phone comprises a serial interface port and said secure PED is integrated with said mobile phone via said serial interface port.
5. The system of claim 1 wherein said mobile phone comprises a Printed Circuit Board Assembly (PCBA) and said secure PED is integrated directly with said mobile phone's PCBA.
6. The system of claim 1 wherein said mobile phone comprises a mobile phone PCBA and said secure PED comprises a PED PCBA and said mobile phone PCBA is integrated with said PED PCBA via a connector.
7. The system of claim 1 wherein said secure PED comprises a Printed Circuit Board Assembly (PCBA) and said mobile phone comprises a radio communication module integrated directly onto said secure PED's PCBA.
8. The system of claim 7 wherein said mobile phone further comprises an antenna, a speaker, and a microphone, and said antenna, said speaker and said microphone are integrated directly onto said secure PED's PCBA.
9. The system of claim 1 further comprising a PCBA and said mobile phone and said secure PED are integrated directly onto said PCBA.
10. The system of claim 1 wherein said mobile phone comprises a Subscriber Identification Module (SIM) slot and said secure PED is integrated with said mobile phone via said SIM slot.
11. The system of claim 1 wherein said certification requirements of a certification institution are selected from a group consisting of Payment Card Industry (PCI) PED specification, Europay MasterCard Visa (EMV) Level 1 and level 2 standard compliance, Bank Card testing Center of China (BCTC), Zentraler Kreditausschuss (ZKA) and Interac.
12. The system of claim I wherein said hardware security components are selected from a group consisting of microprocessor, RAM, SIM slot for connecting to the said mobile phone, SIM slot for receiving a SIM card, SAM slot for receiving a SAM module, smart card reader/writer, screen display, keypad, battery, flash memory, erasable memory, tamper detector switches, serial port, magnetic card reader, hardware id, real time clock, Bluetooth and Infrared port.
13. The system of claim 1 wherein said software components comprise a secure transaction application and a transaction application commanding protocol (TACP).
14. The system of claim 1 wherein said hardware components comprise microprocessor, RAM, SIM slot, SIM card, SAM card, SAM slot, smart card reader/writer, screen display, keypad, battery, flash memory, erasable memory, serial port, magnetic card reader, real time clock, Bluetooth, Infrared port, IrDA and printer.
15. The system of claim 1 wherein said secure PED comprises said software and hardware components for processing said secure PIN entry requiring electronic transactions.
16. The system of claim 1 wherein said mobile phone comprises said software and hardware components for processing said secure PIN entry requiring electronic transactions.
17. A secure mobile phone-point of sale (mobile phone-POS) system for conducting secure Personal identification Number (PIN) entry requiring electronic transactions, comprising:
a mobile phone, wherein said mobile phone comprises a phone screen display and a phone keypad and said phone screen display and phone keypad do not meet certification requirements of a certification institution for conducting said secure PIN entry requiring transactions;
a non-virtual secure PIN Entry Device (PED) comprising a keypad, a screen display and hardware security components effecting said keypad and said screen display to meet certification requirements of a certification institution for conducting said secure PIN entry requiring transactions;
software and hardware components for processing said secure PIN entry requiring electronic transactions;
wherein said secure PED is integrated with said mobile phone; and
wherein said mobile phone-POS system comprises functionality of both said mobile phone and said secure PED.
18. A secure mobile phone-POS system for conducting secure PIN entry requiring electronic transactions, comprising:
a mobile phone comprising a keypad, a screen display, a Printed Circuit Board Assembly (PCBA), software and hardware components for processing said secure PIN entry requiring electronic transactions;
a non-virtual secure PED comprising hardware security components effecting said keypad and said screen display to meet certification requirements of a certification institution for conducting said secure PIN entry requiring transactions;
wherein said secure PED is integrated directly with said mobile phone's PCBA; and
wherein said mobile phone-POS comprises functionality of both said mobile phone and said secure PED and a mobile form factor.
19. A method for conducting secure PIN entry requiring electronic transactions, comprising:
providing a mobile phone;
providing a non-virtual secure PED comprising a keypad, a screen display and hardware security components effecting said keypad and said screen display to meet certification requirements of a certification institution for conducting said secure PIN entry requiring transactions;
providing software and hardware components for processing said secure PIN entry requiring electronic transactions; and
integrating said secure PED with said mobile phone thereby forming a secure mobile phone-POS system; and
wherein said secure mobile phone-POS system comprises functionality of both said mobile phone and said secure PED and a mobile form factor.
20. The method of claim 19 wherein said mobile phone comprises a serial interface port and said secure PED is integrated with said mobile phone via said serial interface port.
21. The method of claim 19 wherein said mobile phone comprises a Printed Circuit Board Assembly (PCBA) and said secure PED is integrated directly with said mobile phone's PCBA.
22. The method of claim 19 wherein said mobile phone comprises a mobile phone PCBA and said secure PED comprises a PED PCBA and said mobile phone PCBA is integrated with said PED PCBA via a connector.
23. The method of claim 19 wherein said secure PED comprises a Printed Circuit Board Assembly (PCBA) and said mobile phone comprises a radio communication module integrated directly onto said secure PED's PCBA.
24. The method of claim 23 wherein said mobile phone further comprises an antenna, a speaker, and a microphone, and said antenna, said speaker and said microphone are integrated directly onto said secure PED's PCBA.
25. The method of claim 19 further comprising a PCBA and said mobile phone and said secure PED are integrated directly onto said mobile phone-POS PCBA.
26. The method of claim 19 wherein said mobile phone comprises a Subscriber Identification Module (SIM) slot and said secure PED is integrated with said mobile phone via said SIM slot.
27. The method of claim 19 wherein said certification requirements of a certification institution are selected from a group consisting of PCI PED specification, Europay MasterCard Visa (EMV) Level 1 and level 2 standard compliance, Bank Card testing Center of China (BCTC), ZKA and Interac.
28. The method of claim 19 wherein said hardware security components are selected from a group consisting of microprocessor, RAM, SIM slot for connecting to the said mobile phone, SIM slot for receiving a SIM card, SAM slot for receiving a SAM module, smart card reader/writer, screen display, keypad, battery, flash memory, erasable memory, tamper detector switches, serial port, magnetic card reader, hardware id, real time clock, Bluetooth and Infrared port.
29. The method of claim 19 wherein said software components comprise a secure transaction application and a transaction application commanding protocol (TACP).
30. The method of claim 19 wherein said hardware components comprise microprocessor, RAM, SIM slot, SIM card, SAM card, SAM slot, smart card reader/writer, screen display, keypad, battery, flash memory, erasable memory, serial port, magnetic card reader, real time clock, Bluetooth, Infrared port, IrDA and printer.
31. The method of claim 19 wherein said secure PED comprises said software and hardware components for processing said secure PIN entry requiring electronic transactions.
32. The method of claim 19 wherein said mobile phone comprises said software and hardware components for processing said secure PIN entry requiring electronic transactions.
33. A method for conducting secure PIN entry requiring electronic transactions, comprising:
providing a mobile phone, wherein said mobile phone comprises a phone screen display and a phone keypad and said phone screen display and phone keypad do not meet certification requirements of a certification institution for conducting said secure PIN entry requiring transactions;
providing a non-virtual secure PED comprising a keypad, a screen display and hardware security components effecting said keypad and said screen display to meet certification requirements of a certification institution for conducting said secure PIN entry requiring transactions;
providing software and hardware components for processing said secure PIN entry requiring electronic transactions; and
integrating said secure PED with said mobile phone thereby forming a secure mobile phone-POS system; and
wherein said secure mobile phone-POS system comprises functionality of both said mobile phone and said secure PED and a mobile form factor.
34. A non-virtual pin entry device comprising:
a keypad;
a screen display;
hardware security components effecting said keypad and said screen display to meet certification requirements of a certification institution for entering and displaying security sensitive information, respectively; and
wherein said pin entry device is integrated with a non-secure mobile phone thereby upgrading said mobile phone with said security components.