Method for control of authenticity of a payment terminal and terminal thus secured
A method and a payment terminal enable verification of the authenticity of a payment terminal. More particularly, a method is provided for processing a piece of initial data, carried out within the payment terminal, the payment terminal being configured to authorize a verification of its authenticity by using the piece of initial data. The method includes: obtaining at least one piece of information external to the payment terminal, called a piece of initial data; cryptographic processing of the piece of initial data, delivering a piece of processed data; visual and/or sound rendering of the piece of processed data.
1. A method for verifying the authenticity of a payment terminal, the method comprising:
inserting a smartcard into a smartcard reader of the payment terminal;
receiving, at the payment terminal, from the smartcard inserted into the smartcard reader, an Answer to Reset message according to ISO 7816 standard;
processing, by the payment terminal, the Answer to Reset message, wherein processing comprises:
performing a binary rotation of the Answer to Reset message, according to a predetermined binary rotation parameter proper to the payment terminal;
delivering a rotated Answer to Reset message;
encrypting the rotated Answer to Reset message; and
rendering the encrypted rotated Answer to Reset message as a piece of processed data; and
verifying, subsequently to said rendering of said piece of processed data, a correlation between said piece of processed data and a piece of reference data.
2. The Method according to claim 1 , wherein said encrypting comprises hashing the rotated Answer to Reset message using a private key recorded within a memory of the payment terminal.
3. The Method for processing according to claim 1 , wherein said rendering comprises printing the piece of processed data using a printer of said payment terminal.
4. A payment terminal comprising:
a smartcard reader;
a processor; and
a non-transitory computer-readable medium comprising instructions stored thereon, which when executed by the processor configure the payment terminal to:
receive, from a smartcard inserted into the smartcard reader, an Answer to Reset message according to ISO 7816 standard as a piece of initial data;
perform a binary rotation of the Answer to Reset message, according to a predetermined binary rotation parameter proper to the payment terminal;
delivering a rotated Answer to Reset message;
encrypt the rotated Answer to Reset message; and
render said encrypted rotated Answer to Reset message as a piece of processed data, so as to enable verifying a correlation between said piece of processed data and a piece of reference data.
5. A non-transitory computer-readable medium comprising program code instructions stored thereon to perform a method when the program is executed by a processor of the payment terminal, wherein the method comprises:
receiving from a smartcard inserted into the smartcard reader, an Answer to Reset message according to ISO 7816 standard;
processing the Answer to Reset message, wherein processing comprises:
performing a binary rotation of the Answer to Reset message, according to a predetermined binary rotation parameter proper to the payment terminal;
delivering a rotated Answer to Reset message;
encrypting the rotated Answer to Reset message; and
rendering the encrypted rotated Answer to Reset message as a piece of processed data, so as to enable verifying a correlation between said piece of processed data and a piece of reference data.