Transaction method and device using UWB communication
A method is provided for operating an ultra-wide band (UWB) device, the method including transmitting, to a gate, a first message including a device identity (ID) for identifying the UWB device and a transaction ID for identifying a transaction of the UWB device, receiving, from the gate, a second message including a gate authentication cryptogram generated based on the device ID and the transaction ID, verifying the gate based on the gate authentication cryptogram, encrypting payment information for the transaction in response to the gate being verified, and transmitting, to the gate, a third message including the encrypted payment information.
1 . A method performed by a first ultra-wide band (UWB) device including a transceiver, a processor, and a memory storing instructions, the method comprising:
receiving, via the transceiver from an entity providing the service, a long term key for authentication between the first UWB device and a gate using an application of the first UWB device;
receiving, via the transceiver from the entity providing the service, a short term ticket indicating a payment availability of the first UWB device based on a first message through a short-range wireless communication, the first message including station information;
transmitting, via the transceiver to a second UWB device in the gate through a UWB communication, a second message including a device identity (ID) of the first UWB device and a transaction ID associated to the first UWB device;
generating, by the processor, a session key through a function using the long term key, the device ID of the first UWB device, and the transaction ID associated to the first UWB device;
receiving, via the transceiver from the second UWB device, a first application protocol data unit (APDU) in a first ranging block, the first APDU including a gate authentication cryptogram;
determining, by the first UWB processor, whether the gate authentication cryptogram is valid by calculating a function using the device ID of the first UWB device, the transaction ID associated to the first UWB device, and the session key;
in response to the gate authentication cryptogram being valid, encrypting, by the first UWB processor, the short term ticket based on the session key; and
based on a distance between the first UWB device and the gate, transmitting, to the second UWB device via the transceiver, a request message including the encrypted short term ticket in a second ranging block after the first ranging block,
wherein the encrypted short term ticket indicates a payment result for a right to open the gate, and
wherein the distance between the first UWB device and the gate is calculated based on transmitting and receiving UWB messages.
2 . The method of claim 1 , further comprising:
transmitting, to the entity providing the service, a payment account and card information registered in the first UWB device; and
in response to the payment account and the card information being verified by the entity providing the service, receiving, from the entity providing the service, the short term ticket for the transaction.
3 . The method of claim 1 ,
wherein the first APDU further includes a gate identifier and a transaction counter, and
wherein the gate identifier identifies the gate and the transaction counter is driven by the gate.
4 . The method of claim 1 , further comprising:
receiving, from the second UWB device, a second APDU including receipt information in response to payment for the transaction being complete based on the short term ticket for the transaction.
5 . A first ultra-wide band (UWB) device comprising:
a transceiver;
a processor; and
a memory storing instructions which, when executed by the processor, cause the first UWB device to:
receive, via the transceiver from an entity providing the service, a long term key for authentication between the first UWB device and a gate using an application of the first UWB device,
receive, via the transceiver from the entity providing the service, a short term ticket indicating a payment availability of the first UWB device based on a first message through a short-range wireless communication, the first message including station information;
transmit, via the transceiver to the second UWB device in the gate through a UWB communication, a second message including a device identity (ID) of the first UWB device and a transaction ID associated to the first UWB device,
generate, by the processor, a session key through a function using the long term key, the device ID of the first UWB device, and the transaction ID associated to the first UWB device;
receive, via the transceiver from the second UWB device, a first application protocol data unit (APDU) in a first ranging block, the first APDU including a gate authentication cryptogram,
determine, by the processor, whether the gate authentication cryptogram is valid by calculating a function using the device ID of the first UWB device, the transaction ID associated to the first UWB device, and the session key,
in response to the gate authentication cryptogram being valid, encrypt, by the processor, the short term ticket based on the session key, and
based on a distance between the first UWB device and the gate, transmit, to the second UWB device via the transceiver, a request message including the encrypted short term ticket in a second ranging block after the first ranging block,
wherein the encrypted short term ticket indicates a payment result for a right to open the gate, and
wherein the distance between the first UWB device and the gate is calculated based on transmitting and receiving UWB messages.
6 . The first UWB device of claim 5 , wherein the first UWB device is further configured to:
transmit, to the entity providing the service, a payment account and card information registered in the UWB device, and
in response to the payment account and the card information being verified by the entity providing the service, receive, from the entity providing the service, the short term ticket for the transaction.
7 . The first UWB device of claim 5 , wherein the first UWB device is further configured to:
receive, from the gate, a second APDU including receipt information in response to payment for the transaction being complete based on the short term ticket for the transaction.
8 . A second ultra-wide band (UWB) included in a gate, the second UWB device comprising:
a transceiver;
a processor; and
a memory storing instructions which, when executed by the second UWB processor, cause the second UWB device to:
receive, via the transceiver from a entity providing the service, a gate master key used for authentication between a first UWB device and the gate,
receive, via the transceiver from a first UWB device, a message including a device ID of the first UWB device and a transaction ID associated to the first UWB device,
obtain, by the processor, a session key through a function using the gate master key, the device ID of the first UWB device, and the transaction ID associated to the first UWB device,
generate, by the processor, a gate authentication cryptogram based on the device ID of the first UWB device, the transaction ID associated to the first UWB device, and the session key,
transmit, via the transceiver to the first UWB device, a first application protocol data unit (APDU) in a first ranging block, the first APDU including the gate authentication cryptogram,
based on a distance between the first UWB device and the gate, receive, via the transceiver from the first UWB device, a request message including an encrypted short term ticket in a second ranging block after the first ranging block, the crypted short term ticket indicating a payment result for a right to open the gate, in response to the authentication cryptogram being verified by the first UWB device, and
control the gate to open in response to payment for the transaction being complete based on the payment information,
wherein the short term ticket indicates a payment result for a right to open the gate and a short term ticket is issued by the entity providing the service to the first UWB device, and
wherein the distance between the first UWB device and the gate is calculated based on transmitting and receiving UWB messages.
9 . The second UWB device of claim 8 , wherein the second UWB device is further configured to:
transmit, to the first UWB device, a second APDU including receipt information in response to payment for the transaction being complete based on the short term ticket for the transaction.
10 . A method performed by a second ultra-wide band (UWB) device included in a gate, the second UWB device including a transceiver, a processor, and a memory storing instructions, the method comprising:
receiving, via the transceiver from an entity providing a service, a gate master key used for authentication between a first UWB device and the gate;
receiving, via the transceiver from the first UWB device, a message including a device ID of the first UWB device and a transaction ID associated to the first UWB device;
generating, by the processor, a session key through a function using the gate master key, the device ID of the first UWB device, and the transaction ID associated to the first UWB device;
generating, by the processor, a gate authentication cryptogram based on the device ID of the first UWB device, the transaction ID associated to the first UWB device, the session key;
transmitting, via the transceiver to the first UWB device, a first application protocol data unit (APDU) in a first ranging block, the first APDU including the gate authentication cryptogram;
based on a distance between the first UWB device and the gate, receiving, via the transceiver from the first UWB device, a request message including an encrypted short term ticket in a second ranging block after the first ranging block, in response to the gate authentication cryptogram being verified by the first UWB device; and
controlling, by the processor, the gate to open in response to payment for the transaction being complete based on the payment information,
wherein the encrypted short term ticket indicates a payment result for a right to open the gate and a short term ticket is issued by the entity providing the service to the first UWB device, and
wherein the distance between the first UWB device and the gate is calculated based on transmitting and receiving UWB messages.
11 . The method of claim 10 ,
wherein the first APDU further includes a gate identifier and a transaction counter, and
wherein the gate identifier identifies the gate and the transaction counter is driven by the gate.
12 . The method of claim 10 , further comprising:
transmitting, to the first UWB device, a second APDU including receipt information in response to payment for the transaction being complete based on the short term ticket for the transaction.