METHOD, DEVICE, ADD-ON AND SECURE ELEMENT FOR CONDUCTING A SECURED FINANCIAL TRANSACTION ON A DEVICE
A device, an add-on and a secure element for conducting a secured financial transaction are disclosed. The device comprises a central processing unit; a communication interface for establishing a communication between the device and a financial institution related to a financial account; an interface for acquiring data relating to the financial account; the secure element for processing at least a portion of the data relating to the financial account acquired by the interface; and control logic for acquiring a purchase amount to be debited from the financial account and for obtaining a transaction authorization from the financial institution related to the financial account, the transaction authorization being based, at least partially, on data processed solely by the secure element independently of data processed by the central processing unit. A method of conducting the secured financial transaction, and a computer program product for execution by the secure element are also disclosed.
1 . An add-on for interaction with a mobile device, the add-on and the mobile device enabling conducting of a secured financial transaction, the add-on comprising:
an interface being at least one of a contactless interface, a magnetic strip reader or a smart card reader;
a controller to control communications between the add-on and the mobile device;
a secure element;
a processor configured to execute instructions which upon being executed causes:
acquiring, via the interface of the add-on, data associated with a payment apparatus, at least a portion of the data associated with the payment apparatus being solely accessible by the secure element;
establishing, through a communication interface of at least one of a communication interface of the add-on or a communication interface of the mobile device, a secured communication channel between the secure element and a remote server; and
sending over the secured communication channel, to the remote server, the at least a portion of the data associated with the payment apparatus so that a transaction authorization request may be processed.
2 . The add-on of claim 1 , wherein the controller enables wireless communication between the add-on and the mobile device.
3 . The add-on of claim 1 , wherein the wireless communication is based on Bluetooth.
4 . The add-on of claim 1 , wherein the processor is one of a processor embedded within the secure element; a processor embedded within the add-on or a processor embedded within the mobile device.
5 . The add-on of claim 1 , where the secure element is characterized by software components operating a secured environment.
6 . The add-on of claim 1 , wherein the secure element is embedded in a chipset embedded on a circuitry of the add-on and comprises a cryptographic accelerator.
7 . The add-on of claim 1 , wherein the interface is a contactless interface, and wherein acquiring, via the interface, the data associated with the payment apparatus comprises:
a sending of a Select Proximity Payment System Environment (PPSE) request to the payment apparatus;
a receiving of a response from the payment apparatus indicating payment applications supported by the payment apparatus; and
a selection of a payment application amongst those available.
8 . The add-on of claim 1 , wherein the secured communication channel is based on encryption keys.
9 . The add-on of claim 1 , wherein the payment apparatus is one of a payment card and another mobile device.
10 . An add-on for interaction with a mobile device, the add-on and the mobile device enabling conducting of a secured financial transaction, the add-on comprising:
a contactless interface;
a controller to control wireless communications between the add-on and the mobile device;
a secure element;
a processor configured to execute instructions which upon being executed causes:
acquiring, via the contactless interface of the add-on, data associated with a payment apparatus, at least a portion of the data associated with the payment apparatus being solely accessible by the secure element;
establishing, through a communication interface of at least one of a communication interface of the add-on or a communication interface of the mobile device, a secured communication channel between the secure element and a remote server; and
sending over the secured communication channel, to the remote server, the at least a portion of the data associated with the payment apparatus so that a transaction authorization request may be processed.
11 . A method of operating an add-on communicating with a mobile device for conducting financial transactions, the mobile device being configured to run a point of sale (POS) application, the mobile device comprising a central processing unit and a communication interface, the add-on comprising a contactless interface, a secure element and a controller to control wireless communications between the add-on and the mobile device, the method comprising:
acquiring, via the contactless interface of the add-on, data associated with a payment apparatus, at least a portion of the data associated with the payment apparatus being solely accessible by the secure element;
establishing, through a communication interface of at least one of a communication interface of the add-on or a communication interface of the mobile device, a secured communication channel between the secure element and a remote server; and
sending over the secured communication channel, to the remote server, the at least a portion of the data associated with the payment apparatus so that a transaction authorization request may be processed.
12 . The add-on of claim 1 , where the secure element is characterized by software components operating a secured environment.
13 . The add-on of claim 1 , wherein the secure element is embedded in a chipset embedded on a circuitry of the add-on and comprises a cryptographic accelerator.