Security for contactless transactions
A method of performing a contactless transaction between a payment device and a terminal is described. The method comprises establishing a data connection between the payment device and the terminal and then establishing if the payment device and the terminal both support an enhanced security architecture. If they do not, they will then perform the contactless transaction according to a basic transaction flow using a first cryptographic system. If they do, they will perform the contactless transaction according to an enhanced transaction flow using a second cryptographic system. The first cryptographic system and the second cryptographic system comprise different asymmetric cryptographic systems. Suitable payment devices and terminals, and methods at the payment devices and terminals, are described.
1. A method at a payment device of performing a contactless transaction with a terminal, the method comprising:
establishing a data connection between the payment device and the terminal;
providing an indication to the terminal that the payment device supports an enhanced transaction flow; and
performing the contactless transaction according to the enhanced transaction flow.
2. The method of claim 1 , wherein the terminal supports both a basic transaction flow for payment devices using a first cryptographic system of a first type and the enhanced transaction flow for payment devices using a second cryptographic system of a second type.