Abstract: The invention provides a method and system for providing financial details from a mobile device of a user for use in a transaction. The method is performed on a mobile device of the user and includes the steps of generating, on a token generating component, a session-specific token by applying an algorithm requiring a dynamic key; providing financial details for use in a transaction; incorporating the session-specific token and the financial details into a modified form the financial details; and transferring the modified form of the financial details from the mobile device to initiate the transaction. A corresponding method and system for validating financial details received, at a server of an issuing authority, is also provided.

Abstract: A mobile device of a consumer can have a mobile-based credential stored in a secure memory thereof and an associated alias. Techniques for conducting a transaction with the mobile device may involve receiving a request for the mobile-based credential from a remotely accessible server in response to a requestor device receiving the alias from the consumer. The mobile-based credential can be accessed from the secure memory and transmitted to the remotely accessible server. The mobile-based credential is then usable at the remotely accessible server in combination with a server-based credential stored thereat for obtaining payment credentials to complete the transaction.

Abstract: The invention provides a method and system for providing financial details from a mobile device of a user for use in a transaction. The method is performed on a mobile device of the user and includes the steps of generating, on a token generating component, a session-specific token by applying an algorithm requiring a dynamic key; providing financial details for use in a transaction; incorporating the session-specific token and the financial details into a modified form the financial details; and transferring the modified form of the financial details from the mobile device to initiate the transaction. A corresponding method and system for validating financial details received, at a server of an issuing authority, is also provided.

Abstract: The invention provides a method and system for providing financial details from a mobile device of a user for use in a transaction. The method is performed on a mobile device of the user and includes the steps of generating, on a token generating component, a session-specific token by applying an algorithm requiring a dynamic key; providing financial details for use in a transaction; incorporating the session-specific token and the financial details into a modified form the financial details; and transferring the modified form of the financial details from the mobile device to initiate the transaction. A corresponding method and system for validating financial details received, at a server of an issuing authority, is also provided.

Abstract: A method and system for provisioning payment credentials usable by a mobile device in conducting a payment. The method is conducted at a provisioning system and comprises the steps of: receiving payment credentials from a receiving device, the payment credentials having been obtained from a portable payment device presented by a consumer at the receiving device; receiving, from the receiving device, an identifier entered by the consumer; identifying a mobile device or a secure element corresponding to the identifier; and communicating the payment credentials or a derivation of the payment credentials to the identified mobile device or the secure element to be securely stored in association with the mobile device. The method may include: encrypting the received payment credentials, the encrypted payment credentials having a unique decryption key; and wherein communicating a derivation of the payment credentials communicates the unique decryption key.

Abstract: A dynamic object tag for a product and systems and methods relating thereto is disclosed. The dynamic object tag comprises a hardware security module, including an electronic storage module, and a communication module for communicating with an interrogation device. The hardware security module is adapted to establish a secure communication channel with the interrogation device, to exchange dynamic authentication parameters with the interrogation device, and to communicate product information stored on the electronic storage module to the interrogation device over the secure communication channel.

Abstract: Systems and methods for verification conducted at a secure element are disclosed. In a method of verification conducted at a secure element interacting with a mobile device, the secure element receives at least one of an identifier of a universal integrated circuit card (UICC) and an identifier of the mobile device. The secure element then compares each of the received at least one identifiers against a registered identifier of corresponding form stored in a non-volatile memory of the secure element. If the received at least one identifiers match corresponding registered identifiers stored in the non-volatile memory, the secure element permits further interaction with the mobile device. If at least one of the received identifiers do not match corresponding registered identifiers stored in the non-volatile memory, the secure element denies further interaction with the mobile device.

Abstract: A system and method for initiating payments in favour of a payee entity are provided. In a method conducted at a payment processor, an account creation request, the request including an identifier of a consumer is received from a payee entity. A financial account is registered for the payee entity in association with the consumer identifier and a consumer-specific account identifier of the financial account is provided. The consumer-specific account identifier is linked to the payee entity and consumer identifier and transmitted to a communication device of the consumer directly or via the payee entity so as to permit the consumer to initiate a payment in favour of the financial account of the payee entity by generating a transaction request message including the consumer-specific account identifier.

Abstract: A cryptographic expansion device that can be attached to a communication component of a communication device to enable the communication device to perform cryptographic operations on communications sent to and from the communication device is described. The cryptographic expansion device can be a small-form factor cryptographic expansion device that can be used with a small-form factor communication component such as a micro-SIM (subscriber identity module) card. When used with a communication device, the cryptographic expansion device enables the communication device to send and received end-to-end secure encrypted communications. The end-to-end secure communications enabled by the cryptographic expansion device can be utilized by a user of the communication device to perform financial and/or banking transactions.

Abstract: A mobile banking system that uses a cryptographic expansion device attached to a communication component of a mobile device and a secure gateway device to enable end-to-end secure communications between the mobile device and a payment processing network is disclosed. The cryptographic expansion device enables the mobile device to perform cryptographic operations on communications sent to and from the mobile device. The secure gateway device prevents unauthorized accesses to the payment processing network.

Abstract: Systems and methods for authorizing a transaction are disclosed. In a method a remotely accessible server receives biometric data from a communication device. The biometric data is gathered directly by the communication device from an individual at a merchant's premises. The server receives environmental data unique to the merchant and having been obtained at the merchant's premises. The server identifies a stored individual's profile associated with a biometric data record substantially matching the received biometric data and verifies the received environmental data against stored environmental data. If a stored individual's profile is identified and the environmental data is verified, the server authorizes the transaction.

Abstract: Systems, methods and devices for providing digital certificates are disclosed. In a method conducted at a remotely accessible server, a request, including an identifier, for a digital certificate is received. A communication address of a mobile device, having a certificate store module in communication therewith, associated with the identifier is then obtained. A request for a digital certificate is transmitted to the certificate store module via the mobile device and the certificate store module is configured to prompt a user thereof, via the mobile device, for a passcode before releasing the certificate. The digital certificate is received from the certificate store module via the mobile device in response to entry of a passcode into the certificate store module which corresponds to an offset stored in the certificate store module. The digital certificate is then transmitted to a communication device for use in digitally signing or encrypting a data message.

Abstract: The invention provides systems, methods and devices for performing passcode authentication. In one embodiment of the invention, a method of performing passcode authentication conducted at a mobile device is provided which comprises the steps of: receiving an authentication request from a security gateway; receiving a passcode entered by a user of the mobile device; comparing the entered passcode to a passcode offset securely stored in a hardware security module (HSM) coupled to the mobile device; and, if the entered passcode corresponds with the passcode offset, generating a secure authentication confirmation message and transmitting the confirmation message to the security gateway; or, if the entered passcode does not correspond with the passcode offset, generating a secure authentication denial message and transmitting the authentication denial message to the security gateway.

Abstract: An apparatus that facilitates the accurate and uncomplicated placement of an adhesive circuit structure onto an integrated circuit card is described. The apparatus is configured to hold the adhesive circuit structure and an integrated circuit card such that the two components can be aligned for proper placement.

Abstract: A cryptographic expansion device that can be attached to a communication component of a communication device to enable the communication device to perform cryptographic operations on communications sent to and from the communication device is described. The cryptographic expansion device can be a small-form factor cryptographic expansion device that can be used with a small-form factor communication component such as a micro-SIM (subscriber identity module) card. When used with a communication device, the cryptographic expansion device enables the communication device to send and received end-to-end secure encrypted communications. The end-to-end secure communications enabled by the cryptographic expansion device can be utilized by a user of the communication device to perform financial and/or banking transactions.

Abstract: Systems, methods and devices for providing a single-use payment credential usable in a financial transaction are disclosed. In a method conducted at a remotely accessible server, a request for a single-use payment credential is received from an issuing financial entity. The request includes a consumer identifier of a consumer. The server associates the consumer identifier with a single-use payment credential in a database and transmits the single-use payment credential to a communication device of the consumer for presentation to a merchant. The server receives a transaction request including the single-use payment credential from an acquiring financial entity and transmits an indication of the transaction request in respect of the consumer identifier to the issuing financial entity such that the financial transaction may be completed.

Abstract: A system and method for securely transmitting payment credentials to a payment processor is disclosed. A communications device of a consumer generates a first communicated value having a similar format to a second payment credential portion, and the first communicated value is provided to the payment processor to replace the second payment credential portion in the transmittal of the payment credentials. The communications device receives, from the payment processor, a second communicated value, and generates a payment credential encryption key based at least on the second communicated value. The payment processor generates the encryption key based at least on the first communicated value. The second payment credential portion is encrypted using the encryption key and is transmitted to the payment processor.

Abstract: A method and system for transmitting and receiving transaction information are provided. The method for transmitting transaction information is performed on a computing device and includes: accessing transaction information to be transmitted and selecting an electronic file. The metadata stored in the electronic file is edited to insert the transaction information into one or more fields of the metadata to provide modified metadata of the electronic file. The electronic file with the modified metadata is transmitted to a receiving entity for processing of the transaction information. The transaction information may be in the form of payment credentials usable to enable a payment transaction.

Abstract: A gateway device and methods performed therein to prevent unauthorized client devices from connecting to the host network of the gateway device is described. The gateway device does not respond right away to an individual client message sent to the gateway device. Instead, the gateway device only responds to a predetermined sequence of the client messages, which is only known to the gateway device and authorized client devices. Because the gateway device will not respond to random client messages and the likelihood that an unauthorized client device can correctly guess the predetermined sequence of the client messages is low, the risk of a malicious party being able to hack into the host network, for example, by using port scanning techniques, can be mitigated.

Abstract: A cryptographic expansion device that can be attached to a communication component of a communication device to enable the communication device to perform cryptographic operations on communications sent to and from the communication device is described. The cryptographic expansion device can be a small-form factor cryptographic expansion device that can be used with a small-form factor communication component such as a micro-SIM (subscriber identity module) card. When used with a communication device, the cryptographic expansion device enables the communication device to send and received end-to-end secure encrypted communications. The end-to-end secure communications enabled by the cryptographic expansion device can be utilized by a user of the communication device to perform financial and/or banking transactions.