Device and method for secure identification of users

Abstract

The present application discloses a device and method for secure identification of a user. The present invention relates to a portable payment or retail terminal with a jack connector and a method for secure identification of a cardholder, the terminal comprising a set of devices and arrangements for implementing the method, the method comprising at least detecting whether the cardholder has a mobile device, configuring the terminal on the mobile device of the cardholder for starting an accessibility mode; transmitting a request to the mobile device for sending a PIN to the terminal; when receiving a communication including information from the mobile device, decrypting the information to obtain a PIN code and verifying a transaction.

Description

Technical Field

[0001] The invention relates to the field of authentication and / or control of users requiring services or conducting transactions, and more precisely to a device and a method for identifying persons and also supporting visually impaired persons. Background Art

[0002] The object of the present invention is to improve security when a user enters an identification code (eg a PIN) on a touch screen.

[0003] Typically, the screen displays a PIN keypad with numbers or other values ​​for each keypad, and the user selects each keypad corresponding to each value of each number of the PIN.

[0004] During this operation, any third party can observe and remember the PIN of up to 12 digits (usually 4 or 6 digits), which then enables the fraudulent third party to combine this information with other information to make fraudulent withdrawals from the account.

[0005] EP 2 791 845 shows an example of the disadvantages of this solution.

[0006] Until now, terminal manufacturers have provided protection for the display portion to prevent the possibility of observing the key value. This solution is not completely effective and has the disadvantage of increasing the bulk of the terminal.

[0007] According to US 8 392 846, another attempt to solve this problem is to display a virtual PIN pad at different locations on the touch screen to prevent fraud or interception of personal identification. However, the camera can still observe each step and by viewing the image, a fraudulent third party can access the information. The solution of the present invention is able to prevent this drawback. Summary of the invention

[0008] The object of the present invention is to obviate certain disadvantages of the prior art by providing a device for secure authentication or control of the identity of persons, including visually impaired persons.

[0009] The object is achieved by a portable payment or retail terminal having a jack connector for secure transactions, the terminal comprising at least:

[0010] a first memory for storing a set of programs or sequences of instructions to be executed on a processor of the terminal and at least a set of keys for authentication and / or encryption which are not readable from outside the terminal;

[0011] Wired / wireless communication device detection equipment, used to detect whether the cardholder is using a mobile device;

[0012] The terminal (1) is characterized in that it comprises at least one transaction management module, the transaction management module comprising an arrangement for configuring the terminal (1) so that:

[0013] · Enable accessibility mode on the cardholder’s mobile device;

[0014] · transmitting to the mobile device a request for sending the PIN to the terminal;

[0015] When receiving a communication including information from the mobile device, decrypting said information with the aid of the key set used for authentication and / or encryption to obtain the PIN code and verify the transaction.

[0016] According to another feature, when the accessibility mode is started on the mobile device, the terminal includes at least a program for checking whether the owner accessibility mode application is installed on the mobile device, the application being downloaded from an application download portal, and performing authentication of the installed accessibility mode application with the aid of a key group for authentication and / or encryption stored in a first memory.

[0017] According to another feature, the terminal includes at least an operating system (OS) for creating a virtual machine, if the terminal checks that an accessibility mode application is not installed on the mobile device when the accessibility mode is activated on the mobile device. When the mobile device is detected by the terminal through the wired / wireless communication means detection device, the virtual machine is transmitted to the cardholder mobile device so as to be installed on the mobile device.

[0018] According to another feature, the terminal comprises at least an instant app (application) which is pushed from the terminal to a virtual machine running on a mobile device for executing the accessibility mode on the cardholder's mobile device.

[0019] According to another feature, the terminal comprises:

[0020] an accessibility mode application, stored in the first memory and implementing the entire sequence of the accessibility mode of the terminal to allow the cardholder to authenticate the transaction on the screen of the terminal;

[0021] · Authentication arrangements that implement the authentication process for the cardholder by entering a PIN or a sequence of numbers and letters (SNL);

[0022] Proximity sensor to detect the presence of the cardholder;

[0023] a first detection device for detecting the presence of a jack in a connector into which a cardholder headset is inserted and comprising an arrangement for generating an electrical signal for triggering execution of the accessibility mode;

[0024] a second detection device that detects each time a finger of the owner of the headset (2) touches the screen (14) by means of the position of the finger on the screen (14);

[0025] According to another feature, the transaction management module comprises at least an arrangement for configuring the terminal so that if the wired / wireless communication means detection device does not detect the cardholder mobile device, an accessibility mode is executed, wherein at least the terminal:

[0026] · querying, by means of notification means, the connection of a headset in a jack connector of the terminal;

[0027] executing a first accessibility mode application that, after detecting insertion of the jack for connecting the cardholder's headphones by means of a first detection device, scrambles the screen of the terminal and keeps it black during the entire sequence of the accessibility mode;

[0028] · Configuring the screen by means of a set of arrangements to detect the position of the cardholder's finger as he moves his finger across the screen to select each digit of his PIN by moving his finger across the screen.

[0029] Sending pre-registered audio signals corresponding to each position of the finger through the earphones to help the cardholder select the digits of his PIN;

[0030] According to another feature, the terminal comprises at least notification means, which are audio arrangements for issuing a voice message through a loudspeaker, included in said terminal and / or sending said voice message to a mobile device of the cardholder.

[0031] According to another feature, the terminal comprises at least notification means, which are text message modules for displaying information on the screen of said terminal or for sending said information on the screen of a mobile device of the cardholder.

[0032] According to another feature, the terminal comprises both a text messaging module and an audio arrangement to notify the cardholder through said terminal or said cardholder mobile device.

[0033] According to another feature, the terminal includes a key group stored in a sixth memory included in the terminal, the key group is unreadable from outside the terminal and matches the key group stored in the first memory, the key group stored in the sixth memory is pushed together with an instant app on a virtual machine running on a cardholder mobile device, the key group of the sixth memory is used to securely exchange data and / or information between the terminal and the cardholder mobile device and is registered in a memory of the cardholder mobile device, where the key group is unreadable from the outside.

[0034] According to another feature, the terminal comprises at least a set of programs for the mobile device sent to the mobile device of the cardholder for deleting from said mobile device the virtual machine and / or the instant app running on said virtual machine after the authentication transaction.

[0035] According to another feature, the virtual machine comprises at least a set of programs for emulating each component of the payment terminal and its connections so as to implement an accessibility mode comprising at least an accessibility mode executed by said terminal when running the instant app.

[0036] According to another feature, the instant app comprises a set of programs for emulating the functionality of each component of the payment terminal and its connections so as to implement an accessibility mode comprising at least an accessibility mode executed by said terminal.

[0037] According to another feature, the instant app launched on the cardholder's mobile device by the terminal comprises at least a program executed on the cardholder's mobile device, the execution of which allows responding to the authentication and / or PIN request sent by the terminal.

[0038] According to another feature, the instant app launched on the cardholder's mobile device through the terminal includes a program executed on at least the cardholder's mobile device, which retrieves the registered key group from the memory of the cardholder's mobile device, allowing the mobile device to respond to authentication and / or PIN requests sent through the terminal.

[0039] According to another feature, the terminal comprises a memory in which transaction information at least related to the amount of the transaction and / or the merchant is registered, said information being transmitted to the cardholder's mobile device together with the PIN request.

[0040] According to another feature, the instant app running on the cardholder's mobile device comprises at least a set of programs for configuring the cardholder's mobile device, when at least a PIN entry request has been sent through the terminal, to:

[0041] Checking whether headphones are plugged into the audio jack connector of the mobile device;

[0042] If the headset is not plugged in, requesting, by means of a notification device, that the headset be connected to the mobile device;

[0043] Once the headset is plugged in, accessibility mode is enabled for PIN entry.

[0044] According to another feature, the instant app running on the cardholder's mobile device includes at least a program for retrieving a key set from a memory of the mobile device to encrypt the PIN entered by the cardholder before sending the PIN entered by the cardholder to the terminal for authenticating the transaction.

[0045] According to another feature, the instant app running on the cardholder mobile device includes at least programming for scrambling and keeping the screen of the cardholder mobile device black during the entire sequence of the accessibility mode.

[0046] According to another feature, the instant app includes at least a program that configures the screen of the cardholder's mobile device to detect the position of the cardholder's finger as he moves his finger on the screen to select each digit of his PIN by moving his finger on the screen.

[0047] According to another feature, the instant app includes at least a program that configures the cardholder's mobile device to send, through headphones, a pre-registered audio signal corresponding to each position of a finger to help the cardholder select the digits of his PIN, said audio signal being transmitted to the cardholder's mobile device together with the transaction information and the PIN requested by the terminal.

[0048] According to another feature, the instant app comprises at least a program for configuring the cardholder's mobile device so as to allow the cardholder to enter his PIN code with the aid of an authorized third-party application.

[0049] Another object of the present invention is to provide a process for secure authentication of users.

[0050] This object is achieved by means of a method for secure identification of a cardholder, using a portable payment or retail terminal and / or a cardholder mobile device as described in this application, the method comprising at least the following steps:

[0051] Detection of wired / wireless communication devices of mobile devices;

[0052] The method is characterized in that, if a cardholder mobile device is detected, it at least comprises the step of configuring the terminal to:

[0053] · Enable accessibility mode on the cardholder’s mobile device;

[0054] · transmitting to the mobile device a request for sending the PIN to the terminal;

[0055] When receiving a communication including information from a mobile device, decrypt the information to obtain the PIN code and authenticate the transaction.

[0056] According to another feature, the method for secure identification includes at least the following steps when accessibility mode is activated:

[0057] Check if the Owner Accessibility Mode app is installed on the mobile device;

[0058] Performing authentication of the installed accessibility mode application.

[0059] According to another feature, the method for secure identification comprises at least the following steps:

[0060] If the terminal detects that an accessibility mode application is not installed on the mobile device when the accessibility mode is activated on the mobile device, creating a virtual machine;

[0061] · transmitting the virtual machine to the cardholder's mobile device;

[0062] Pushing instant apps on the virtual machine to execute accessibility mode on the mobile device (3).

[0063] According to another feature, the method for secure identification comprises at least the step of encrypting at least the PIN or a portion of the PIN on the cardholder's mobile device before transmitting the PIN or a portion of the PIN to the terminal for verification.

[0064] According to another feature, if the mobile device is not detected, the method for secure identification comprises at least the following steps:

[0065] · asking for the connection of headphones in the jack connector of the terminal by means of a notification on the terminal screen;

[0066] Detecting the presence of a jack for connecting the cardholder's headphones in a connector inserted into the terminal;

[0067] Triggering execution of the first accessibility mode, allowing cardholder identification;

[0068] Scramble the screen and keep it black during the accessibility mode sequence;

[0069] Configuring the screen so that the position of the cardholder's finger is detected as the cardholder moves his finger across the screen to select each digit of his PIN by moving his finger across the screen;

[0070] Pre-registered audio signals corresponding to each position of the finger are sent through the earphones to help the cardholder select the digits of his PIN.

[0071] According to another feature, the step of executing the accessibility mode on the cardholder mobile device comprises the following steps:

[0072] Checking whether headphones are plugged into the audio jack connector of the mobile device;

[0073] If the headset is not plugged in, request to connect the headset to the mobile device;

[0074] Once the headset is plugged in, accessibility mode is enabled for PIN entry. BRIEF DESCRIPTION OF THE DRAWINGS

[0075] Other features and advantages of the present invention will become more apparent from the following description given with reference to the accompanying drawings, in which:

[0076] - Figure 1A , Figure 1B are schematic representations of components and a controller of a portable payment or retail terminal, respectively, according to one embodiment;

[0077] - Figure 2A , Figure 2B is a schematic representation of a PIN entry on a black scrambled screen according to one embodiment.

[0078] - Figure 3A , Figure 3B and Figure 3C Schematic representation of the steps of the authentication process on a cardholder mobile device (3), respectively, the authentication process, the steps of the authentication process on a portable payment or retail terminal, and the components of the authentication process.

[0079] - Figure 4 is a schematic representation of a terminal and a cardholder mobile device exchange during a portable payment or retail terminal and controller according to one embodiment; DETAILED DESCRIPTION

[0080] The present invention relates to a portable payment or retail terminal (1) for secure identification of users, including visually impaired users, during transactions.

[0081] In some embodiments, a portable payment or retail terminal (1, Figure 1A , 4) at least include:

[0082] a first memory (13) for storing a set of programs or sequences of instructions to be executed on a processor of the terminal and a set of keys not readable from outside the terminal at least for authentication and / or encryption;

[0083] Wired / wireless communication device (USB (Universal Serial Bus), Wifi, Bluetooth...) detection equipment, used to detect whether the cardholder uses a mobile device ( Figure 4 3) in;

[0084] The terminal (1) is characterized in that it comprises at least a transaction management module comprising an arrangement for configuring the terminal so as to:

[0085] · Initiate accessibility mode on the cardholder’s mobile device (3);

[0086] · transmitting to the mobile device a request for sending the PIN to the terminal;

[0087] When receiving a communication including information from the mobile device, decrypting said information with the aid of the key set used for authentication and / or encryption to obtain the PIN code and verify the transaction.

[0088] In some embodiments, when the accessibility mode is activated on the mobile device (3), the terminal includes at least a program for checking whether an owner accessibility mode application is installed on the mobile device, the application being downloaded from an application download portal, such as Google Play Store or Apple Store, and performing authentication of the installed accessibility mode application with the aid of a key group stored in a first memory for authentication and / or encryption. In this case, the accessibility mode application may include a key group for authentication and / or encryption data, the key matching the key group stored in the first memory of the terminal.

[0089] In some embodiments, the portable payment or retail terminal includes at least an operating system (OS) for creating a virtual machine if, when accessibility mode is activated on a mobile device (3), the terminal checks that no accessibility mode application is installed on the mobile device, and when the mobile device (3) is detected by the terminal via a wired / wireless communication device, the virtual machine is transmitted to the cardholder mobile device (3) for installation on the mobile device (3).

[0090] In some embodiments, the portable payment or retail terminal includes at least an instant app that is pushed from the terminal to a virtual machine running on a mobile device (3) for executing an accessibility mode on the cardholder mobile device (3).

[0091] By instant app we mean an application that can be executed immediately on a mobile device without having to be installed on said mobile device (3).

[0092] In some embodiments, the terminal (1) comprises:

[0093] an accessibility mode application, stored in the first memory and implementing the entire sequence of the accessibility mode of the terminal to allow the cardholder to authenticate the transaction on the screen (14) of the terminal;

[0094] Authentication layout ( Figure 1A , Figure 1B 12) for implementing the authentication process for the cardholder by entering a PIN or a sequence of numbers and letters (SNL);

[0095] A proximity sensor for detecting the presence of a cardholder (not shown);

[0096] A first detection device (11) is used to detect the presence of a jack in the connector, into which a cardholder's earphone is inserted ( Figure 4 2) in, and comprising an arrangement for generating an electrical signal for triggering execution of an accessibility mode;

[0097] A second detection device (101) detects, whenever a finger of the owner of the headset (2) touches the screen (14), the position of the finger on the screen (14);

[0098] In some embodiments, the transaction management module comprises an arrangement for configuring at least the terminal so that if the wired / wireless communication device detection device does not detect the cardholder mobile device (3), an accessible mode is performed, wherein the terminal at least:

[0099] - querying the connection of the headset (2) in the jack connector of the terminal by means of the notification device;

[0100] - executing a first accessibility mode application which, after detecting the insertion of the jack for connecting the cardholder's headphones (2) by means of a first detection device, scrambles the terminal's screen and keeps it black during the entire sequence of the accessibility mode;

[0101] - configuring the screen by means of a set of arrangements to detect the position of the cardholder's finger as he moves his finger across the screen, thereby selecting each digit of his PIN by moving his finger across the screen.

[0102] - sending, via the earphone (2), a pre-registered audio signal corresponding to each position of the finger, to help the cardholder select the digits of his PIN;

[0103] like Figure 1A As illustrated, the terminal (1) comprises arrangements, connected to the authentication arrangements (12), for scrambling the screen (14) and keeping it black during the entire sequence of accessible modes.

[0104] The authentication arrangement (12) may comprise generating at least a set of "key chains" (i) stored in a "chain file" of the terminal (1) each time the accessibility mode is turned on. Figure 2A , 2B) procedure. For PIN / SNL entry, each "key chain" comprises a set of keys (20) which are randomly distributed within the "key chain".

[0105] The second detection device (101) comprises an arrangement for detecting the length d or orientation of a displacement of a finger on the screen and is connected to the authentication arrangement (12) so as to emit a signal corresponding to the length d or the orientation angle to indicate whether a displacement has occurred depending on the value of the length d or the orientation angle compared with a stored threshold value.

[0106] The authentication arrangement may also include a classification module which, when receiving a signal indicating a displacement, retrieves a "key chain" in a stored "chain file" in order to attribute the value of a key corresponding to the length d or orientation angle of the displacement of the finger, the authentication arrangement being connected to an audio arrangement (17) of the terminal (1) in which pre-registered audio signals corresponding to each key of the "key chain" are stored in order to select a sound corresponding to the key attributed to the displacement and emit the sound through a jack connector towards the cardholder's headphones (2).

[0107] The terminal may include a program that repeats these actions until the user who hears the value of the digits or characters of the PIN / SNL removes his finger from the screen (14), and then stores the last value indicated as feedback as the digit of the PIN / SNL in a second memory (15), which is included in the terminal (1).

[0108] By "key chain" we mean a given number of numbers or characters in succession.

[0109] The "key chain" may include at least a key (20) having a value from 0 to 9 or letters from A to Z, or both. For example, but not limited to, the generated chain may be "3241569807".

[0110] Each time the user touches the screen after selecting the digits of his PIN / code, the terminal retrieves a new "keychain" from the "chain file".

[0111] Once a value for the key ( 20 ) has been chosen by the user, a double-click gesture of the finger allows the choice to be validated.

[0112] It will therefore be apparent that the terminal described in this application provides a secure way of authenticating transactions as there is no key or key pad displayed on the screen (14).

[0113] Furthermore, the terminal can be used by both normal and visually impaired users, since the screen remains black and the user only needs to shift a finger on the screen to select a key (20) or a number.

[0114] By transaction, we mean, for example, payment for a product or service.

[0115] The cardholder mobile device (3) (eg a smartphone or tablet) may include a set of communication means such as a USB cable, Wifi, NFC (Near Field Communication), Bluetooth, Visible Light Communication (VLC) ... for connecting to the terminal.

[0116] The payment terminal may also include a set of communication means, such as a USB cable, Wifi, NFC (Near Field Communication), Bluetooth, Visible Light Communication (VLC) ... for establishing communication with the cardholder's mobile device (3).

[0117] The second accessible mode application acts as a mirror application of the terminal. By launching the application, the cardholder (normal or visually impaired) is now able to enter the PIN on his own device. This solution has the advantage, in particular for the visually impaired, that it does not require learning how to use a new device to perform transactions, since the visually impaired person knows how to use his own mobile device (3) (smartphone, tablet...).

[0118] In some embodiments, the terminal (1) comprises notification means, which may be an audio arrangement for emitting a voice message through a speaker comprised in said terminal, and / or sending said voice message to the cardholder mobile device (3).

[0119] In some embodiments, the terminal (1) comprises notification means, which may be a text message module, for displaying information on the screen of said terminal or for sending said information on the screen of the cardholder's mobile device (3).

[0120] In some embodiments, the payment terminal comprises both a text messaging module and an audio arrangement to notify the cardholder via said terminal or said cardholder mobile device (3).

[0121] In some embodiments, the second detection device (101) includes an arrangement for measuring the displacement or movement of the finger on the screen from a given initial position or orientation, the length of the displacement or movement being characterized by a value d or an orientation angle. The length d or the orientation angle is compared with a threshold value stored in the second detection device (101). If the length d or the orientation angle is above the threshold value, a signal is transmitted to the authentication arrangement to indicate that there is displacement of the finger. On the contrary, if the length d or the orientation angle is below the threshold value, the second detection device (101) considers that no displacement of the finger has occurred and transmits a signal to the authentication arrangement to indicate that there is no displacement of the finger.

[0122] In some embodiments, the portable payment or retail terminal (1) may include a controller (10) comprising at least:

[0123] a second detection device (101) connected to the screen (14) of the terminal (1) so as to capture and register in a third memory (104) data relating to the position of a finger when said screen (14) is touched;

[0124] a position generator device (102) comprising an arrangement for generating data corresponding to various positions on the screen (14), said various positions being registered in a fourth memory (105);

[0125] a processor (100) and a fifth memory (103), the fifth memory comprising a set of programs executed on said processor (100) in order to prevent the touch screen (14) from displaying a "key chain" with a key (20) position determined by data generated by a position generator device (102);

[0126] The program group of the fifth memory of the controller (10) at least includes:

[0127] a comparison algorithm for comparing the touched area corresponding data registered in the third memory with the data representing each position of the screen generated by the position generator device and registered in the fourth memory;

[0128] an audio algorithm for generating an audible signal in a headset (2) connected to the jack corresponding to the value of the key (20);

[0129] a first iteration algorithm for repeating the comparison algorithm and the audio algorithm until the user, listening to the value he expects, removes his finger from the screen (14), such action triggering the storage of said value as a first number in the memory;

[0130] A second iteration algorithm further repeats the first iteration algorithm each time the authentication arrangement receives a new touch detection signal and as long as the number of stored digits is lower than the maximum number of digits contained in the PIN or identification code.

[0131] In some embodiments, the first detection device (11) is connected to the controller (10) so as to emit an electrical signal for triggering the accessibility mode.

[0132] In some embodiments, a processor of the controller is connected to the first memory for downloading and executing a sequence of instructions representing the accessibility mode upon receipt of said electrical signal.

[0133] In some embodiments, the controller (10) is connected to the authentication arrangement (12) so as to transmit an activation signal thereto when the accessibility mode is turned on, and upon receipt of the activation signal the authentication arrangement (12) generates a "key chain" for identification of the cardholder.

[0134] In some embodiments, the controller (10) transmits a data set including at least a location value generated by the location generator device (102) to an authentication arrangement (12), which generates a "key chain" at a location on the screen (14) based on the data set.

[0135] In some embodiments, the authentication arrangement is connected to a second detection device so that when the second detection device (101) detects a finger on the screen, the authentication arrangement retrieves the "key chain" in the "chain file". When the second detection device detects a displacement or movement of the finger on the screen, the authentication arrangement attributes the value of the key (20) of the "key chain" to the position of the finger. For example, but not limited to, when a first displacement or movement of the finger is detected on the screen, the authentication arrangement attributes the value of the first key (20) of the "key chain" (e.g. "2") to the position of the finger and a pre-registered sound or audio signal corresponding to the key "2" is retrieved from the audio arrangement and emitted through the user's earphone (2), indicating the value of the key (20). When the second detection device detects a second displacement of the movement of the finger from the last position, the authentication arrangement attributes the value of the second key (20) of the "key chain" (e.g. "7") to the position of the finger and a pre-registered sound or audio signal corresponding to the key "7" is retrieved from the audio arrangement and emitted through the user's earphone (2), indicating the value of the key (20) and so on until the user selects and verifies a given value.

[0136] In some embodiments, the authentication arrangement includes a key assignment module (106) which generates a key list including information about each key (20) and the associated position of a "key chain", the key list being reused by the authentication arrangement if a user who moves his finger in a given direction or orientation returns to a previous position or to another direction in order to correct or change the selection of a key (20).

[0137] In some embodiments, the authentication arrangement comprises a procedure for determining in real time the direction of a finger moving on the screen from information contained in the key list in order to check whether the user is moving the finger forwards or backwards or in any orientation.

[0138] In some embodiments, the portable payment or retail terminal (1) includes a counter (16) device connected to an authentication arrangement (12) and a second memory (15) of the terminal (1), the counter (16) device counting the number of digits stored in the second memory (15) and, when the counted number matches a predetermined value of the number of digits registered and representing a PIN / SNL, sending a signal to the authentication arrangement (12) to perform an authentication process.

[0139] In some embodiments, the first detection device is an electromechanical switch.

[0140] In some embodiments, the first detection device is a sensor.

[0141] In some embodiments, the terminal (1) may include a key group stored in a sixth memory included in the terminal, the key group being unreadable from outside the terminal and matching the key group stored in the first memory, the key group stored in the sixth memory being pushed together with an instant app on a virtual machine running on a cardholder mobile device (3), the key group of the sixth memory being used to securely exchange data and / or information between the terminal and the cardholder mobile device (3), and being registered in the memory of the cardholder mobile device (3), wherein the key group of the sixth memory is unreadable from outside.

[0142] In some embodiments, the terminal (1) comprises at least a program group of the mobile device (3) sent to the cardholder's mobile device (3) for deleting the virtual machine and / or instant app running on the virtual machine from the mobile device (3) after verifying the transaction.

[0143] In some embodiments, the virtual machine includes at least a set of programs for emulating each component of the payment terminal and its connections so as to implement at least an accessibility mode including an accessibility mode executed by the terminal when running the instant app.

[0144] In some embodiments, the installed accessibility mode application or instant app may include a set of programs for simulating the functionality of each component of the payment terminal and its connections so as to implement an accessibility mode, which accessibility mode includes at least an accessibility mode executed by the terminal.

[0145] In some embodiments, an installed accessibility mode application or instant app launched by the terminal on the cardholder mobile device (3) includes at least a program executed on the cardholder mobile device (3), the execution of which allows responding to authentication and / or PIN requests sent by the terminal.

[0146] In some embodiments, an installed accessibility mode application or instant app launched by a terminal on a cardholder mobile device (3) includes at least a program executed on the cardholder mobile device (3), the execution of which retrieves a registered key group from the memory of the cardholder mobile device (3), allowing the mobile device (3) to respond to authentication and / or PIN requests sent by the terminal.

[0147] In some embodiments, the terminal comprises a memory in which transaction information at least related to the amount of the transaction and / or the merchant is registered, said information being transmitted to the cardholder mobile device (3) together with the PIN request.

[0148] In some embodiments, the installed accessibility mode application or instant app running on the cardholder mobile device (3) includes at least a program group for configuring the cardholder mobile device (3), when the terminal has sent at least a PIN entry request, to:

[0149] Checking whether a headset (2) is plugged into the audio jack connector of the mobile device (3);

[0150] · requesting, by means of a notification device, that the headset (2) be connected to the mobile device (3), if the headset (2) is not plugged in;

[0151] Once the headset is plugged in (2), accessibility mode is activated for PIN entry;

[0152] In some embodiments, the instant app or installed accessibility mode application running on the cardholder's mobile device (3) includes at least a program for retrieving a key group from a memory of the mobile device (3) to encrypt a PIN entered by the cardholder before sending the key group to a terminal for authenticating a transaction.

[0153] In some embodiments, the instant app or installed accessibility mode application on the cardholder mobile device (3) may include at least a program for scrambling and keeping the screen of the cardholder mobile device (3) black during the entire sequence of accessibility mode.

[0154] In some embodiments, the instant app or installed accessibility mode application may include at least a program for configuring the screen of the cardholder's mobile device (3) to detect the position of the cardholder's finger as the cardholder moves his finger across the screen to select each digit of his PIN by moving his finger across the screen.

[0155] In some embodiments, the instant app or installed accessibility mode application includes at least a program to configure the cardholder mobile device (3) to send, through the earphones (2), a pre-registered audio signal corresponding to each position of the finger, for assisting the cardholder in selecting the digits of his PIN. In some embodiments, the audio signal is transmitted to the cardholder mobile device (3) together with the transaction information and the PIN requested by the terminal.

[0156] In some embodiments, the instant app or installed accessibility mode application or instant app includes at least a program for configuring the cardholder mobile device (3) to allow the cardholder to enter his PIN number with the aid of an authorized third-party application. For example, the cardholder can use an application such as "itsme".

[0157] "Itsme" is an application that allows a user to confirm his identity using his mobile device (3) such as a smartphone. "Itsme" uses data from the electronic ID card (eID), his smartphone's SIM card and his smartphone to create a unique ID (identity) associated with a PIN code.

[0158] In some embodiments, the instant app or installed accessibility mode application includes at least a program for configuring the cardholder mobile device (3) to allow the cardholder to authenticate transactions by using a fingerprint or facial recognition device included in the cardholder mobile device (3).

[0159] The invention also relates to a method for securely identifying a cardholder (normal or visually impaired) using a portable payment or retail terminal (1) as described above (in this application) and / or the cardholder mobile device (3).

[0160] In some embodiments, a method for secure identification of a cardholder (see Figure 3A , 3B and Figure 3C ) includes at least the following steps:

[0161] Detecting the wired / wireless communication device of the mobile device (3);

[0162] The method is characterized in that, if a cardholder mobile device (3) is detected, it comprises at least the step of configuring the terminal (1) to:

[0163] · Initiate accessibility mode on the cardholder’s mobile device (3);

[0164] · transmitting to the mobile device a request for sending a PIN to the terminal (1);

[0165] When receiving a communication including information from a mobile device, decrypt the information to obtain the PIN code and authenticate the transaction.

[0166] In some embodiments, the method for secure identification includes at least performing the following steps when accessibility mode is enabled:

[0167] Check if the Owner Accessibility Mode app is installed on the mobile device;

[0168] Performing authentication of the installed accessibility mode application.

[0169] In some embodiments, the method for secure identification includes at least the following steps:

[0170] Creating a virtual machine if, when accessibility mode is activated on a mobile device (3), the terminal checks that no accessibility mode application is installed on the mobile device;

[0171] · transmitting the virtual machine to the cardholder's mobile device (3);

[0172] Pushing instant apps on the virtual machine to execute accessibility mode on the mobile device (3).

[0173] In some embodiments, a method for secure identification of a cardholder may include the step of encrypting at least a PIN or a portion of a PIN on a cardholder mobile device (3) before transmitting the PIN or a portion of the PIN to a terminal for verification.

[0174] In some embodiments, if the mobile device (3) is not detected, the method for secure identification comprises at least the following steps:

[0175] - by means of a notification on the terminal screen, asking for the connection of the headset (2) in the jack connector of said terminal,

[0176] - Detecting the presence of a jack for connecting the cardholder's headset (2) in the connector inserted into the terminal (1);

[0177] - triggering execution of a first accessibility mode, allowing cardholder identification;

[0178] -Scramble the screen and keep it black during the accessibility mode sequence;

[0179] - configuring the screen to detect the position of the cardholder's finger as the cardholder moves his finger across the screen, thereby selecting each digit of his PIN by moving his finger across the screen;

[0180] - Sending a pre-registered audio signal corresponding to each position of the finger through the earphone (2) to help the cardholder choose the digits of his PIN.

[0181] In some embodiments, the step of executing accessibility mode on the cardholder mobile device (3) may include the following steps:

[0182] Checking whether a headset (2) is plugged into the audio jack connector of the mobile device (3);

[0183] If the headset (2) is not plugged in, request to connect the headset (2) to the mobile device (3);

[0184] Once the headset is plugged in (2), accessibility mode is activated for PIN entry.

[0185] In some embodiments, a method for secure identification of a cardholder includes at least the following steps:

[0186] · generating a "key chain" comprising a key group (20) which is not displayed at a location on the screen (14) of the terminal (1) for PIN / SNL entry;

[0187] Detecting the length or orientation of the displacement of the finger on the screen and emitting a signal corresponding to the length d or the orientation angle to indicate whether the displacement has occurred depending on the value of said length d or the orientation angle compared with a stored threshold value;

[0188] When a signal indicating displacement is received, a "key chain" is retrieved in a stored "chain file" in order to attribute a key value corresponding to the length d or orientation angle of the displacement of the finger, and a sound corresponding to the key attributed to the displacement is selected from among the pre-registered audio signals corresponding to each key of the "key chain", and the sound is emitted toward the cardholder earphone (2) through the jack connector;

[0189] Repeating the detection and retrieval steps until the finger is removed from the screen (14);

[0190] When the finger is removed, the last value is stored as the digit of the PIN / SNL.

[0191] In some embodiments, the method for secure identification further comprises at least the following steps:

[0192] · generating data sets corresponding to various positions on the screen (14);

[0193] Generate a "key chain" at the location of the screen based on a subset of the data set generated for the various locations.

[0194] The present application describes various technical features and advantages with reference to the accompanying drawings and / or various embodiments. It will be understood by those skilled in the art that, unless otherwise expressly stated, the technical features of a given embodiment may actually be combined with the features of another embodiment, or unless the combination does not provide a solution to at least one of the technical problems mentioned in the present application. In addition, unless otherwise expressly stated, the technical features described in a given embodiment may be isolated from other technical features of the embodiment.

[0195] It is obvious to a person skilled in the art that the present invention allows embodiments in many specific forms without departing from the field of application of the invention claimed. Therefore, the present embodiment must be considered as illustrative, but it can be modified in the area defined by the scope of the appended claims, and the invention should not be limited to the details given above.

Claims

1. A portable payment or retail terminal for secure transactions having a jack connector, comprising at least: a first memory for storing a set of programs or sequences of instructions to be executed on a processor of the terminal and at least a set of keys for authentication and / or encryption, the set of keys being unreadable from outside the terminal; A wired / wireless communication device detection device, which is used to detect whether the cardholder uses a mobile device (3); The terminal (1) is characterized in that it comprises at least a transaction management module, the transaction management module comprising an arrangement for configuring the terminal (1) so that: • activating accessibility mode on said mobile device (3) of said cardholder; · transmitting to the mobile device a request for sending a PIN to the terminal (1); When receiving a communication comprising information from the mobile device (3), decrypting the information with the aid of the key set used for authentication and / or encryption to obtain the PIN code and verify the transaction.

2. The portable payment or retail terminal for secure transactions according to claim 1, characterized in that: When the accessibility mode is started on the mobile device (3), the terminal includes at least a program for checking whether an owner accessibility mode application is installed on the mobile device, the application being downloaded from an application download portal, and performing authentication of the installed accessibility mode application with the aid of the key group for authentication and / or encryption stored in the first memory.

3. A portable payment or retail terminal for secure transactions according to claim 1 or 2, characterized in that: It includes at least an operating system (OS) for creating a virtual machine. If the terminal checks that an accessibility mode application is not installed on the mobile device when the accessibility mode is started on the mobile device (3), then when the mobile device (3) is detected by the wired / wireless communication device detection device terminal, the virtual machine is transmitted to the cardholder mobile device (3) to be installed on the mobile device (3).

4. The portable payment or retail terminal for secure transactions according to claim 3, characterized in that: It comprises at least an instant app, which is pushed from the terminal to the virtual machine running on the mobile device (3) and is used to execute the accessibility mode on the cardholder mobile device (3).

5. The portable payment or retail terminal for secure transactions according to claim 1, characterized in that: It includes: an accessibility mode application stored in said first memory and implementing the entire sequence of said accessibility mode of said terminal to allow said cardholder to authenticate a transaction on the screen (14) of said terminal; • an authentication arrangement for carrying out an authentication process for the cardholder by entering a PIN or a sequence of numbers and letters, i.e., a SNL; •Proximity sensor, which is used to detect the presence of the cardholder; a first detection device (11) for detecting the presence of a jack in said connector into which a cardholder headset is inserted and comprising an arrangement for generating an electrical signal for triggering the execution of said accessibility mode; A second detection device (101) detects each time a finger of the owner of the headset (2) touches the screen (14) by means of the position of the finger on the screen (14).

6. The portable payment or retail terminal for secure transactions according to claim 5, characterized in that: The transaction management module comprises an arrangement for configuring at least the terminal so that if the cardholder mobile device (3) is not detected by the wired / wireless communication means detection device, an accessibility mode is performed, wherein the terminal at least: · requesting, by means of a notification device, that a headset (2) be connected to the jack connector of the terminal; • executing a first accessibility mode application which, after detecting by means of said first detection device the insertion of a jack for connecting the cardholder's headphones (2), scrambles said screen of said terminal and keeps it black during the entire sequence of said accessibility mode; • configuring the screen by means of a set of arrangements to detect the position of the cardholder's finger as the cardholder moves his finger across the screen to select each digit of his PIN by moving his finger across the screen; • Sending a pre-registered audio signal corresponding to each position of the finger through the headset (2) to help the cardholder select the digits of his PIN.

7. The portable payment or retail terminal for secure transactions according to claim 1, characterized in that: It comprises at least notification means, which are audio arrangements for emitting a voice message through a loudspeaker comprised in the terminal, and / or for sending the voice message to the cardholder's mobile device (3).

8. The portable payment or retail terminal for secure transactions according to claim 1, characterized in that: It comprises a notification device which is a text message module for displaying information on the screen (14) of the terminal or sending the information on the screen of the cardholder's mobile device (3).

9. A portable payment or retail terminal for secure transactions according to claim 7 or 8, characterized in that: It comprises both a text messaging module and an audio arrangement to notify the cardholder through the terminal or the cardholder mobile device (3).

10. The portable payment or retail terminal for secure transactions according to claim 4, characterized in that: It includes a key group stored in a sixth memory, which is included in the terminal (1), the key group is unreadable from the outside of the terminal and matches the key group stored in the first memory, the key group stored in the sixth memory is pushed using the instant app on the virtual machine running on the cardholder mobile device (3), the key group in the sixth memory is used to securely exchange data and / or information between the terminal and the cardholder mobile device (3), and is registered in the memory of the cardholder mobile device (3), the key group in the sixth memory is unreadable from the outside.

11. The portable payment or retail terminal for secure transactions according to claim 10, characterized in that: It comprises at least a set of programs of the mobile device (3) which is sent to the cardholder mobile device (3) for deleting the virtual machine and / or the instant app running on the virtual machine from the mobile device (3) after verifying the transaction.

12. The portable payment or retail terminal for secure transactions according to claim 4, characterized in that: The virtual machine includes at least a program group for simulating each component of the terminal (1) and its connections so as to implement an accessibility mode when running the instant app, and the accessibility mode includes at least the accessibility mode executed by the terminal (1).

13. The portable payment or retail terminal for secure transactions according to claim 4, characterized in that: The instant app includes a program group for simulating the function of each component of the terminal (1) and its connection to implement an accessibility mode, which at least includes the accessibility mode executed by the terminal (1).

14. The portable payment or retail terminal for secure transactions according to claim 4, characterized in that: The instant app launched by the terminal on the cardholder mobile device (3) comprises at least a program, the execution of which on the cardholder mobile device (3) allows responding to authentication and / or PIN requests sent by the terminal.

15. The portable payment or retail terminal for secure transactions according to claim 4, characterized in that: The instant app launched on the cardholder mobile device (3) by the terminal comprises at least: a program executed on the cardholder mobile device (3), the execution of which retrieves the registered key group from the memory of the cardholder mobile device (3), allowing the mobile device (3) to respond to authentication and / or PIN requests sent by the terminal.

16. A portable payment or retail terminal for secure transactions according to claim 1 or 2, characterized in that: It comprises a memory in which at least transaction information related to the transaction and / or the amount of the merchant is registered, said information being transmitted to the cardholder mobile device (3) with a PIN request.

17. The portable payment or retail terminal for secure transactions according to claim 4, characterized in that: The instant app running on the cardholder mobile device (3) comprises at least a program group for configuring the cardholder mobile device (3) when the terminal has sent at least a PIN input request to: • checking whether a headset (2) is plugged into the jack connector of the mobile device (3); • if the headset (2) is not plugged in, requesting, by means of the notification means, that the headset (2) be connected to the mobile device (3); • Once the headset (2) is plugged in, the accessibility mode is activated for PIN entry.

18. The portable payment or retail terminal for secure transactions according to claim 4, characterized in that: The instant app running on the cardholder's mobile device (3) comprises at least a program for retrieving the key set from the memory of the mobile device (3) in order to encrypt the PIN entered by the cardholder before sending it to the terminal for authentication of the transaction.

19. The portable payment or retail terminal for secure transactions according to claim 4, characterized in that: The instant app running on the cardholder mobile device (3) includes at least a program for scrambling and keeping the screen of the cardholder mobile device (3) black during the entire sequence of the accessibility mode.

20. The portable payment or retail terminal for secure transactions according to claim 4, characterized in that: The instant app includes at least a program for configuring the screen of the cardholder's mobile device (3) to detect the position of the cardholder's finger as the cardholder moves his finger on the screen to select each digit of his PIN by moving his finger on the screen.

21. The portable payment or retail terminal for secure transactions according to claim 4, characterized in that: The instant app comprises at least a program for configuring the cardholder mobile device (3) to send a pre-registered audio signal corresponding to each position of a finger through the earphone (2) for assisting the cardholder in selecting the digits of his PIN, the audio signal being transmitted to the cardholder mobile device (3) together with transaction information and the PIN requested by the terminal (1).

22. The portable payment or retail terminal for secure transactions according to claim 4, characterized in that: The instant app comprises at least a program for configuring the cardholder's mobile device (3) to allow the cardholder to enter his PIN number with the aid of an authorized third-party application.

23. A method for secure identification of a cardholder using a portable payment or retail terminal (1) according to claim 1, the method comprising at least the following steps: Detecting the wired / wireless communication device of the mobile device (3); The method is characterized in that, if the cardholder mobile device (3) is detected, it at least comprises the steps of configuring the terminal (1) for the following operations: • activating accessibility mode on said mobile device (3) of said cardholder; • transmitting to the mobile device a request for sending a PIN to the terminal (1); • When receiving a communication including information from the mobile device, decrypting the information to obtain the PIN code and authenticate the transaction.

24. The method for secure identification of a cardholder according to claim 23, characterized in that: It includes at least the following steps when the accessibility mode is activated: • Check if the Owner Accessibility Mode application is installed on said mobile device; •Perform authentication of installed accessibility mode applications.

25. The method for secure identification of a cardholder according to claim 23, characterized in that: It includes at least the following steps: · creating a virtual machine, if when the accessibility mode is activated on the mobile device (3), the terminal checks that no accessibility mode application is installed on the mobile device; • Sending the virtual machine to the cardholder's mobile device (3); • Pushing an instant app on the virtual machine for executing the accessibility mode on the mobile device (3).

26. The method for secure identification of a cardholder according to claim 23, characterized in that: It comprises at least the step of encrypting said PIN or part of said PIN on said cardholder mobile device (3) before transmitting said PIN or part of said PIN to said terminal for verification.

27. The method for secure identification of a cardholder according to claim 23, characterized in that: If the mobile device (3) is not detected, it comprises at least the following steps: • asking, by means of a notification on the screen of the terminal, about the connection of the headset (2) in the jack connector of the terminal; • detecting the presence of a jack, which is inserted into said connector of said terminal (1) for connecting the cardholder's headset (2); • triggering execution of a first accessibility mode, allowing identification of said cardholder; • scrambling and keeping the screen black during the accessibility mode sequence; • configuring the screen to detect the position of the cardholder's finger as the cardholder moves his finger across the screen to select each digit of his PIN by moving his finger across the screen; • Sending a pre-registered audio signal corresponding to each position of the finger through the headset (2) to help the cardholder select the digits of his PIN.

28. The method for secure identification of a cardholder according to claim 23, characterized in that: The step of executing the accessibility mode on the cardholder mobile device (3) comprises the following steps: • checking whether a headset (2) is plugged into the jack connector of the mobile device (3); • if the headset (2) is not plugged in, requesting that the headset (2) be connected to the mobile device (3); • Once the headset (2) is plugged in, the accessibility mode is activated for PIN entry.

Images