METHOD FOR SECURE CONTACTLESS COMMUNICATION OF A SMART CARD AND A POINT OF SALE TERMINAL

摘要

The embodiment(s) relate to a method of securely communicating between a Point-of-Sale (PoS) terminal and a payment card. The method includes signing payment data with a private key of the PoS terminal to create a signature. The method includes encrypting the payment data and signature using a public key certificate of the payment card, which is encrypted and signed by a certificate authority using a certificate authority private key and is received at the PoS terminal after a public key certificate of the PoS terminal is validated at the payment card. The PoS terminal public key certificate is encrypted and signed by the certificate authority using the certificate authority private key. The method includes transmitting the encrypted payment data and signature to the payment card for decryption of the payment data and signature using a payment card private key corresponding to the payment card public key certificate.

主权项

1. A method of securely communicating between a Point-of-Sale (PoS) terminal and a payment card, the method comprising:
signing, at the PoS terminal, payment data with a private key of the PoS terminal to create a signature; encrypting the payment data and the signature at the PoS terminal using a public key certificate of the payment card, the payment card public key certificate being encrypted and signed by a certificate authority using a private key of the certificate authority and being received at the PoS terminal from the payment card after a public key certificate of the PoS terminal is received from the PoS terminal and validated at the payment card, the PoS terminal public key certificate being encrypted and signed by the certificate authority using the private key of the certificate authority; and transmitting the encrypted payment data and the encrypted signature to the payment card for decryption of the payment data and the signature at the payment card using a private key of the payment card corresponding to the payment card public key certificate.