| 摘要 |
A method of providing secure services using a mobile device in which the mobile device sends financial account identification data and device identification data to a server. The server generates a public/private key pair and sends the public key to the mobile device. The mobile device encrypts an entered user identity verifier (e.g. PIN code) using the public key, and sends the encrypted PIN to the server. The server verifies the PIN, and compares the device identification data to stored data to verify the device. If both verifications are successful, the server sends a validation message to the mobile device. The mobile device establishes communication, by NFC for example, with a service provider device (e.g. a POS terminal, door, computer system or network or gateway) and sends the validation message and account identification data to the service provider device. The service provider device sends service data regarding a requested service and service provider device data to the mobile device, the mobile device encrypts the service data and sends the service device data to the server. The server verifies the service provider device and sends service authorization data to the service provider device which then confirms that the service authorization data is valid and executes the requested service. |
