Method of performing a financial transaction via unsecured public telecommunication infrastructure and an apparatus for same
An apparatus comprises at least one integrated circuit. The apparatus has a size and shape substantially similar to an ordinary Subscriber Identification Module (SIM) card. The at least one integrated circuit comprises a memory storing first software that, when executed, causes the card to communicate with second software stored on the device. The second software, when executed, causes the device to provide both a SIM and Payment Security Application Module (PSAM) functionality to a user of the device.
1. A mobile communications device comprising a dual-use card with a first software stored on a memory means of at least one integrated circuit and a second software stored on the device,
(a) wherein the dual-use card has a size and shape substantially similar to a Subscriber Identification Module (SIM) card;
(b) wherein the first software has both a SIM-functionality and a Payment Security Application Module (PSAM) functionality;
(c) wherein the SIM functionality includes:
(i) a file system;
(ii) an international mobile subscriber identity number (IMSI) and an IMSI key to identify and authenticate a user across an unsecured public network; and
(iii) a Short Message Service (SMS) or a general packet radio system (GPRS) messaging capability;
(d) wherein the PSAM functionality includes:
(i) building of a transaction token including collected data and/or data derived from the collected data; and
(ii) encryption of the transaction token;
(e) wherein the second software, when executed, causes the device to provide:
(i) formatting and encryption of a user personal identification number (PIN) via a SIM Tool Kit (STK) session to create an encrypted message; and
(ii) transport of the transaction token and the encrypted message via an SMS or a GPRS message across the unsecured public network;
(f) wherein the device may only provide the SIM functionality or provide the PSAM functionality at any point in time and communication between the first software stored on the memory means and the second software stored on the device is by way of a first logical communications channel and a second logical communications channel, wherein the second logical communications channel is independent from the first logical communications channel; and
(g) wherein the second logical communications channel is generated between the first software stored on the memory means and the second software stored on the device when the PSAM functionality is required to process a payment transaction request and wherein the second logical communications channel for the PSAM functionality is closed once the payment transaction request has been processed.
2. The device of claim 1 , wherein the device is in data communication with a credit/debit card reader configured to collect customer credit/debit card information.