SYSTEMS AND METHODS FOR CONVENIENT AND SECURE MOBILE TRANSACTIONS

摘要

Systems and methods for conducting convenient and secure mobile transactions between a payment terminal and a mobile device, e.g., in a fueling environment, are disclosed herein. In some embodiments, the payment terminal and the mobile device conduct a mutual authentication process that, if successful, produces a session key which can be used to encrypt sensitive data to be exchanged between the payment terminal and the mobile device. Payment and loyalty information can be securely communicated from the mobile device to the payment terminal using the session key. This can be done automatically, without waiting for the user to initiate a transaction, to shorten the overall transaction time. The transaction can also be completed without any user interaction with the mobile device, increasing the user's convenience since the mobile device can be left in the user's pocket, purse, vehicle, etc.

主权项

1. A terminal, comprising:
a wireless transceiver configured to communicate wirelessly with a mobile device; an input device configured to receive input from a user of the terminal; a storage device configured to store user information associated with one or more users; and at least one processor coupled to the wireless transceiver, the input device, and the storage device, the processor being programmed to:
conduct a mutual authentication process with a mobile device to obtain a session key;receive user information from the mobile device via the wireless transceiver, said user information being encrypted by the session key;store the user information in the storage device;receive a request to initiate a transaction from a user via the input device;prompt the user for authorization information;receive authorization information from the user via the input device;encrypt the authorization information using the session key;send the encrypted authorization information to the mobile device via the wireless transceiver;receive a validation result from the mobile device via the wireless transceiver; andwhen the validation result is positive, complete a transaction requested by the user using the stored user information.