Method for processing an authorization to implement a service, devices and corresponding computer program

1. A method comprising:

processing by a processing entity, a payment transaction to implement a service and/or access an item, comprising:

receiving by the processing entity, from a requesting device, a payment request for implementing said service and/or accessing said item, said payment request comprising at least one payment information coming from a payment card;

searching by the processing entity for an indicator of dependency from at least one piece of data of said payment request, the indicator indicating dependency on additional payment authorization for the payment transaction having to be provided by a verification device; and

when the indicator of dependency is present, the processing entity obtaining the additional payment authorization from the verification device to implement said service and/or access said item, the obtaining said additional payment authorization comprising:

transmitting by the processing entity, to the verification device, a request for setting up a secured link;

setting up by the processing entity a secured link between the processing entity and a trusted execution environment of the verification device;

transmitting by the processing entity a notification to the verification device by using the secured link, accompanied by a request for entry of a PIN code;

receiving by the processing entity an encrypted PIN code transmitted through the secured link by the trusted environment of the verification device in reply to the notification, the PIN code having been entered on the verification device through a secured display module and a secured entry module; and

verifying by the processing entity validity of the entered PIN code by the processing entity.

2. The method according to claim 1 , obtaining the additional payment authorization, from the verification device, to implement said service and/or to access said item comprises:

obtaining a piece of data representing the verification device from which authorization must be requested;

transmitting the notification to the verification device from which said additional payment authorization must be requested; and

making a decision to issue the additional payment authorization according to a piece of data or an absence of data received from the verification device.

3. The method according to claim 2 , wherein the decision to issue the additional payment authorization according to a piece of data or an absence of data received from the verification device comprises receiving:

either an authorization, comprising an entry into the verification device, of a piece of information liable to be compared with a piece of reference information;

or an absence of authorization comprising:

a specific rejection, transmitted in a response to the above-mentioned notification; or

an absence of a response within an allotted time.

4. The method for processing according to claim 3 , wherein said piece of information liable to be compared with a piece of reference information is a personal identification code.

5. An entity for processing a payment transaction for implementing a service and/or to access an item, the entity comprising:

a processor; and

a non-transitory computer-readable data medium comprising instructions of a computer program stored thereon, which when executed by the processor configure the processing entity to:

receive a payment request for implementing a service and/or accessing an item, said payment request comprising at least one payment information coming from a payment card;

search for an indicator of dependency from at least one piece of data of said payment request, the indicator indicating dependency on additional payment authorization for the payment transaction having to be provided by a verification device;

obtain, from the verification device, the additional payment payment authorization for implementing said service and/or accessing said item, when the indicator of dependency is present, the obtaining said additional payment authorization comprising:

transmitting, to the verification device, a request for setting up a secured link;

setting up a secured link between the processing entity and a trusted execution environment of the verification device;

transmitting a notification to the verification device by using the secured link, accompanied by a request for entry of a PIN code;

receiving an encrypted PIN code transmitted through the secured link by the trusted environment of the verification device in reply to the notification, the PIN code having been entered on the verification device through a secured display module and a secured entry module; and

verifying validity of the entered PIN code by the processing entity.

6. A system for processing a payment transaction for implementing a service and/or accessing an item, wherein the system comprises:

a processing entity for processing an authorization for implementing a service and/or accessing an item, which comprises:

a first processor; and

a non-transitory computer-readable data medium comprising instructions of a computer program stored thereon, which when executed by the first processor configure the processing entity to:

receive a payment request from a requesting device for implementing a service and/or accessing an item, said payment request comprising at least one payment information coming from a payment card;

search for an indicator of dependency from at least one piece of data of said payment request, the indicator indicating dependency on additional payment authorization for the payment transaction having to be provided by a verification device;

obtain, from the verification device, the additional payment authorization for implementing said service and/or accessing said item, when the indicator of dependency is present, the obtaining said additional payment authorization comprising:

transmitting, to the verification device, a request for setting up a secured link;

setting up a secured link between the processing entity and a trusted execution environment of the verification device;

transmitting a notification to the verification device by using the secured link, accompanied by a request for entry of a PIN code;

receiving the encrypted PIN code from the verification device, through said secured link; and

verifying validity of the entered PIN code by the processing entity;

the verification device, which comprises:

a second processor; and

a non-transitory computer-readable data medium comprising instructions of a computer program stored thereon, which when executed by the second processor configure the verification device to:

receive the request for setting up the secured link;

set up the secured link between the processing entity and a trusted execution environment of the verification device;

receive the notification by using the secured link, accompanied by the request for entry of the PIN code;

implement a secured display module and a secured entry module, which enable entry of the PIN code;

encrypt the entered PIN code, by the trusted execution environment of the verification device; and

transmit the encrypted PIN code to the processing entity, through said secured link.

7. A non-transitory computer-readable medium comprising a computer program product -stored thereon comprising program code instructions for executing a method for processing a payment transaction when the instructions are executed on a processor of a processing entity, wherein the instructions configure the processing entity to perform acts comprising:

processing a payment transaction to implement a service and/or access an item, comprising:

receiving by the processing entity, from a requesting device, a payment request for implementing said service and/or accessing said item, said payment request comprising at least one payment information coming from a payment card;

searching by the processing entity for an indicator of dependency from at least one piece of data of said payment request for implementing, the indicator indicating dependency on additional payment authorization for the payment transaction having to be provided by a verification device; and

when the indicator of dependency is present, obtaining the additional payment authorization from the verification device to implement said service and/or access said item, the obtaining said additional payment authorization comprising:

transmitting by the processing entity, to the verification device, a request for setting up a secured link;

setting up by the processing entity a secured link between the processing entity and a trusted execution environment of the verification device;

transmitting by the processing entity a notification to the verification device by using the secured link, accompanied by a request for entry of a PIN code;

receiving by the processing entity an encrypted PIN code transmitted through the secured link by the trusted environment of the verification device in reply to the notification, the PIN code having been entered on the verification device through a secured display module and a secured entry module; and

verifying validity of the entered PIN code by the processing entity.