Apparatus and method for emulating online user authentication process in offline operations

1. A payment-enabled mobile device operable in a first operating mode and a second operating mode, the first operating mode being an online operating mode, the second operating mode being an offline operating mode, the payment-enabled mobile device operating in said second operating mode to replicate a screen display sequence presented by said payment-enabled mobile device in said first operating mode;

wherein, in the second operating mode, a software entity in the payment-enabled mobile device generates a counterfeit version of a registration response payload that is received by the payment-enabled mobile device from a remote server when the payment-enabled mobile device operates in said first operating mode to perform a transaction in said first operating mode.

2. The payment-enabled mobile device of claim 1 , wherein the payment-enabled mobile device operates in accordance with the FIDO (Fast Identity Online) protocol in the first operating mode.

3. The payment-enabled mobile device of claim 2 , wherein the payment-enabled mobile device enforces a FIDO user authentication policy in the first operating mode, the policy requiring a biometric authentication process, the payment-enabled mobile device engaging in said biometric authentication process in said second operating mode.

4. The payment-enabled mobile device of claim 3 , wherein the payment-enabled mobile device is further operable in a third operating mode different from the first and second operating modes, said payment-enabled mobile device transmitting a list of transaction data to the remote server during an operation in said third operating mode, said transaction data representing transactions performed by said payment-enabled mobile device in said second operating mode at times prior to said operation in said third operating mode.

5. The payment-enabled mobile device of claim 3 , wherein said replicated screen display sequence in said second operating mode includes at least one screen display to prompt user cooperation with said biometric authentication process.

6. The payment-enabled mobile device of claim 3 , wherein said payment-enabled mobile device engages in payment transactions in said first and second operating modes, each of said payment transactions including interaction between said payment-enabled mobile device and a respective payment terminal that is co-located with the payment-enabled mobile device during said each transaction.

7. A method comprising:

operating a payment-enabled mobile device in a first operating mode on a first occasion, said first operating mode being an online operating mode; and

operating the payment-enabled mobile device in a second operating mode on a second occasion, said second operating mode being an offline operating mode;

wherein, in the second operating mode the payment-enabled mobile device operates to replicate a screen display sequence presented by said payment-enabled mobile device in said first operating mode: and

wherein, in the second operating mode, a software entity in the payment-enabled mobile device generates a counterfeit version of a registration response payload that is received by the payment-enabled mobile device from a remote server when the payment-enabled mobile device operates in said first operating mode.

8. The method of claim 7 , wherein the payment-enabled mobile device operates in accordance with the FIDO (Fast Identity Online) protocol in the first operating mode.

9. The method of claim 8 , wherein the payment-enabled mobile device enforces a FIDO user authentication policy in the first operating mode, the policy requiring a biometric authentication process, the payment-enabled mobile device engaging in said biometric authentication process in said second operating mode.

10. The method of claim 9 , further comprising:

operating the payment-enabled mobile device in a third operating mode on a third occasion, the third operating mode different from said first and second operating modes, said payment-enabled mobile device transmitting a list of transaction data to the remote server during an operation in said third operating mode, said transaction data representing transactions performed by said payment-enabled mobile device in said second operating mode at times prior to said operation in said third operating mode.

11. The method of claim 9 , wherein said replicated screen display sequence in said second operating mode includes at least one screen display to prompt user cooperation with said biometric authentication process.

12. The method of claim 9 , wherein said payment-enabled mobile device engages in payment transactions in said first and second operating modes, each of said payment transactions including interaction between said payment-enabled mobile device and a respective payment terminal that is co-located with the payment-enabled mobile device during said each transaction.

13. A non-transitory storage medium, the storage medium storing program instructions to control a processor to perform functions as follows:

operating a payment-enabled mobile device in a first operating mode on a first occasion, said first operating mode being an online operating mode; and

operating the payment-enabled mobile device in a second operating mode on a second occasion, said second operating mode being an offline operating mode;

wherein, in the second operating mode the payment-enabled mobile device operates to replicate a screen display sequence presented by said payment-enabled mobile device in said first operating mode; and

wherein, in the second operating mode, a software entity in the payment-enabled mobile device generates a counterfeit version of a registration response payload that is received by the payment-enabled mobile device from a remote server when the payment-enabled mobile device operates in said first operating mode.

14. The storage medium of claim 13 , wherein the payment-enabled mobile device operates in accordance with the FIDO (Fast Identity Online) protocol in the first operating mode.

15. The storage medium of claim 14 , wherein the payment-enabled mobile device enforces a FIDO user authentication policy in the first operating mode, the policy requiring a biometric authentication process, the payment-enabled mobile device engaging in said biometric authentication process in said second operating mode.

16. The storage medium of claim 15 , further storing instructions to control the processor to operate the payment-enabled mobile device in a third operating mode on a third occasion, the third operating mode different from said first and second operating modes, said payment-enabled mobile device transmitting a list of transaction data to the remote server during an operation in said third operating mode, said transaction data representing transactions performed by said payment-enabled mobile device in said second operating mode at times prior to said operation in said third operating mode.

17. The storage medium of claim 15 , wherein said replicated screen display sequence in said second operating mode includes at least one screen display to prompt user cooperation with said biometric authentication process.