Method for authorizing a transaction
A method for authorizing a transaction has the following steps: inputting transaction data on a first mobile device, transmitting the transaction data from the first device to a background system by means of a first over-the-air interface, transmitting in encrypted manner at least a password to a second mobile device through the intermediary of the first mobile device, and authorizing the transaction by inputting the password displayed on the second device on the first device.
1. A method for authorizing a transaction, having the following steps:
inputting transaction data on a first mobile device;
transmitting the transaction data from the first device to a background system by means of a first over-the-air interface;
requesting the input of a password on the first device in order to authorize the transaction;
transmitting in encrypted manner at least the password from the background system to a second mobile device, wherein the data employed for the transmission of the password are transferred between the background system and the second mobile device in encrypted manner through the intermediary of the first mobile device, and authorizing the transaction by inputting the password displayed on the second device on the first device;
wherein the second mobile device is not connected directly with the background system, and the second mobile device receives a cryptographic key through the intermediary of the first device; and
wherein the second device and the background system exchange the cryptographic key, of which the first device has no knowledge, before the step of the encrypted transmission.
2. The method according to claim 1 , wherein the first mobile device is a mobile phone and/or a tablet PC.
3. The method according to claim 1 , wherein the second mobile device is a second device being in connection with the first mobile device via a second over-the-air interface.
4. The method according claim 1 , wherein the second device is data glasses, a smartwatch and/or a body-wearable display device.
5. The method according to claim 1 , wherein the second device and the background system set up a secure end-to-end-encrypted channel, wherein the first device has no knowledge of the key required for the encryption of the channel.
6. The method according to claim 1 , wherein together with the password at least a part of the inputted transaction data are transmitted to the second mobile device.
7. The method according to claim 1 , wherein the password is a one-time password.