A system and method for conducting non-fiat currency transactions in a card infrastructure.

The system securely integrates cryptocurrencies into standard card payment systems by encrypting transaction signatures and limiting data transfer, enabling secure and independent cryptocurrency transactions within existing infrastructure.

JP7850678B2Active Publication Date: 2026-04-23ナショナル ペイメント カード システム ジョイント ストック カンパニー
View PDF 2 Cites 0 Cited by

Patent Information

Authority / Receiving Office
JP · JP
Patent Type
Patents
Current Assignee / Owner
ナショナル ペイメント カード システム ジョイント ストック カンパニー
Filing Date
2021-04-28
Publication Date
2026-04-23

AI Technical Summary

Technical Problem

Existing card payment systems struggle to securely integrate non-fiat currencies like cryptocurrencies without requiring significant infrastructure changes or compromising the decentralized nature of blockchain transactions.

Method used

A system and method that enables cryptocurrency transactions using standard card infrastructure by encrypting a portion of the transaction signature, ensuring only the account holder can initiate transactions, and limiting data transfer to maintain security and expand payment methods.

Benefits of technology

Enhances security and expands payment options by allowing holders to independently initiate cryptocurrency transactions within standard card infrastructure, ensuring only the account holder can access the private key, thus preventing third-party interference.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure 0007850678000001
    Figure 0007850678000001
  • Figure 0007850678000002
    Figure 0007850678000002
Patent Text Reader

Abstract

The present invention relates to a system and method for conducting non-fiat currency transactions in a card infrastructure. The technical result is improved transaction security. In the solution of the present invention, a payment instrument for virtual currency settlement encrypts a portion of the virtual currency transaction signature (the encryption key is known only to the payment instrument and the issuer), and transmits data necessary for forming an authorization request including the encrypted portion of the virtual currency transaction signature to a terminal that handles the payment instrument. The terminal that handles the payment instrument then forms the authorization request and transmits it to an acquirer host. The acquirer host then transmits the authorization request to a processing center of the payment system. The processing center of the payment system then obtains a payment instrument number for virtual currency settlement, which is used to generate the missing portion of the virtual currency transaction signature and route the authorization request, including both the virtual currency transaction signature and the missing portion, to an issuer that corresponds to the payment instrument number. The issuer then forms a virtual currency transaction and transmits it to the issuer's account address on the blockchain. The issuer receives confirmation of the deposit from the issuer, and transmits a response from the issuer approving the authorization request to the acquirer host. (Independent claim 2, dependent claim 8, Figure 2)
Need to check novelty before this filing date? Find Prior Art

Description

Detailed Description of the Invention

[0001] Technical Field The present invention relates to a payment system of a bank, particularly to a cashless payment using non-fiat currency as a settlement means in a card payment system, and aims to enable cashless payment using non-fiat currency in a standard card infrastructure that accepts payment means.

[0002] Background Art Currently, there are fiat currency (also called fiat money or legal tender) and non-fiat currency (non-fiat currency). Fiat currency is related to a centralized payment system, that is, the face value of fiat currency is determined and guaranteed by the state. The management of the internal settlement unit of non-fiat currency is ensured by a decentralized payment system that is completely automated. The non-fiat currency considered in the present invention is a virtual currency based on blockchain technology.

[0003] As low-volatility currencies such as TON, Libra, and Central Bank Digital Currency are expected to become more popular in the market, there is growing interest in solving the problem of using non-fiat currencies such as virtual currencies in existing card infrastructures that handle payment means. When introducing new technologies in the field of transactions using non-fiat currencies such as virtual currencies in a card payment system, the following problems arise. There are still few new payment means in the market, and franchise stores consider it disadvantageous to introduce new infrastructures that accept them. On the other hand, even when new payment means appear, the scenarios in which they are used are few, and the development speed is slower than the expectations of the issuer.

[0004] The proposed solution bridges the aforementioned technical gap, enabling the use of non-fiat currencies, such as cryptocurrencies, for payment within existing standard card infrastructure. In this case, the acquirer's equipment and software would continue to function without requiring any changes.

[0005] Prior art has provided a system and method for conducting cryptocurrency transactions that enable payment for goods and / or services at merchants that do not accept cryptocurrency. (U.S. Patent Application No. 2015170112, G06Q 20 / 00, G06Q 20 / 38, published June 18, 2015) The drawback of the above method is that it requires the introduction of an adapted terminal that handles payment methods in order to accept and exchange virtual currency for payment of goods and / or services.

[0006] The closest analogue to the patented solution is a method for conducting cryptocurrency transactions, comprising a payment instrument for cryptocurrency settlement, a terminal handling the payment instrument, an acquirer host, a payment system processing center, and an issuer (International Patent Application No. 2019139655, G06Q 20 / 36, G06Q 20 / 38, published July 18, 2019). The issuer's terminal handling the payment instrument accepts the payment instrument for cryptocurrency settlement, obtains the data necessary to form an authorization request from this payment instrument, forms the authorization request, and then sends it to the acquirer host. The acquirer host receives the above authorization request and forwards it to the payment system processing center. The payment system processing center receives the above authorization request and sends it to the issuer. Next, the issuer sends a response to the above authorization request to the acquirer host, which signifies that the cryptocurrency transaction has been authenticated.

[0007] The shortcomings of the closest similar method are that it requires the trusted party initiating a cryptocurrency transaction in the name of the holder of the payment instrument for cryptocurrency settlement to be given access to the private key of the payment instrument.

[0008] Detailed description of the invention A solution is proposed in which cryptocurrency transactions are conducted using the standard infrastructure for handling payment instruments in card payment systems, but where third parties cannot generate cryptocurrency transactions in the name of the holder of the payment instrument for cryptocurrency settlement. In this way, the above solution makes it possible to use non-fiat currencies such as cryptocurrencies based on blockchain technology for settlements in card payment systems. In this case, the basic principle of blockchain, that only the account holder on the blockchain can generate cryptocurrency transactions from their own blockchain account, is maintained.

[0009] The main problem in implementing systems and methods for secure transactions of non-fiat currencies within a standard card infrastructure is the need to transfer a larger amount of data to the issuer of the payment instrument for cryptocurrency settlements compared to standard payment transactions. Conventional methods to address this problem propose either upgrading the terminals that handle payment instruments to state-of-the-art technology or allowing third parties to potentially initiate cryptocurrency transactions at the request of the holder of the payment instrument for cryptocurrency settlements. However, this violates the fundamental principle of blockchain, which states that only the account holder on the blockchain can initiate transactions on the blockchain. The proposed solution is implemented using the standard infrastructure that handles payment instruments in a card payment system, making it impossible for participants in the card payment system other than the holder of the blockchain account from which the cryptocurrency is withdrawn to initiate cryptocurrency transactions.

[0010] The technical problem that the proposed method aims to solve is to develop a system and method that allows holders of payment instruments for cryptocurrency settlements to independently initiate cryptocurrency transactions using the standard infrastructure for handling payment instruments in card payment systems.

[0011] The technical results achieved in implementing the present invention are to improve the security of systems and methods for performing cryptocurrency transactions in standard card infrastructure for transaction processing in card payment systems, and to expand the types of payment methods.

[0012] The aforementioned technical results are achieved by the following method for conducting non-fiat currency transactions in the card infrastructure. This method includes a payment instrument for cryptocurrency settlements, a terminal handling the payment instrument, an acquirer host, a payment system processing center, and an issuer. The issuer's terminal handling the payment instrument accepts the payment instrument for cryptocurrency settlements, obtains the data necessary to form an authorization request from this payment instrument, forms the authorization request, and then sends it to the acquirer host. The acquirer host receives the above authorization request and forwards it to the payment system processing center. The payment system processing center receives the above authorization request and sends it to the issuer. Next, the issuer sends a response to the above authorization request to the acquirer host, which means that the cryptocurrency transaction has been authenticated. Before transferring the data necessary to form the authorization request, the payment instrument for cryptocurrency settlements encrypts a portion of the cryptocurrency transaction signature, ensuring that the encryption key is known only to the payment instrument and the issuer. Subsequently, the data necessary to form the authorization request, including the encrypted portion of the cryptocurrency transaction signature, is transferred to the terminal handling the payment instrument. The terminal handling the payment instrument forms the authorization request and sends it to the acquirer's host. The acquirer's host receives the authorization request and then sends it to the payment system's processing center.

[0013] The payment system's processing center receives authorization requests from the acquirer's host and obtains the payment method number for cryptocurrency payments through the acquirer's host. This number is then used to generate the missing portion of the cryptocurrency transaction signature and to route the authorization request, which includes both portions of the cryptocurrency transaction signature, to the card issuer associated with that payment method number.

[0014] The issuer receives an authorization request from the payment system's processing center, which includes both parts of the cryptocurrency transaction signature. The issuer then forms the cryptocurrency transaction and sends the above cryptocurrency transaction to the issuer's account address on the blockchain. After receiving confirmation from the blockchain that the cryptocurrency has been deposited to the issuer's address on the blockchain, the issuer sends a response to the acquirer host approving the authorization request.

[0015] In particular, before transferring the data necessary to form an authorization request, the amount of cryptocurrency equivalent to the purchase price in fiat currency must be sent to the issuer using a payment method for cryptocurrency settlement, determined by a predetermined exchange rate.

[0016] In particular, issuers who have a unique address for their blockchain account issue payment instruments for cryptocurrency settlements, and the payment application of these payment instruments includes the issuer's bank identification number in the payment system.

[0017] In particular, a payment application is installed on the payment device for cryptocurrency settlements. This application is used to prepare data for cryptocurrency transactions on the blockchain, to put the data necessary for the cryptocurrency transaction into tags used in standard responses to commands on the terminal handling the payment device, and to send the response back to the terminal handling the payment device.

[0018] In particular, when personalizing, the issuer uploads the public and private keys to the payment method for cryptocurrency settlement, and then the public key is returned to the issuer.

[0019] To achieve the above technical results, a system for handling non-fiat currency transactions in the card infrastructure was also proposed. This system includes a payment instrument for cryptocurrency settlements, a terminal that handles the payment instrument, an acquirer host, a payment system processing center, and an issuer. The terminal that handles the payment instrument can accept the payment instrument for cryptocurrency settlements, obtain the data necessary to form an authorization request from the payment instrument, form the authorization request, and send it to the acquirer host. The acquirer host can accept the above authorization request and send it to the payment system processing center. The payment system processing center can receive the above authorization request and send it to the issuer. The issuer can receive the above authorization request and send a response to the acquirer host indicating that the cryptocurrency transaction has been authenticated for the above authorization request. A payment method for cryptocurrency settlements can encrypt a portion of the cryptocurrency transaction signature and transmit the encrypted portion of the transaction signature to the terminal handling the payment method. In this case, the key used to encrypt the signature is known only to the payment method and the issuer for the cryptocurrency settlement.

[0020] The payment system's processing center can obtain the payment instrument number for cryptocurrency payments through the acquirer's host and use this number to generate the missing portion of the cryptocurrency transaction signature and to route the authorization request, which includes both portions of the cryptocurrency transaction signature, to the card issuer associated with that payment instrument number.

[0021] The issuer receives an authorization request from the payment system's processing center, which includes both parts of the cryptocurrency transaction signature. Upon receiving the authorization request, the issuer forms the cryptocurrency transaction on the blockchain, sends the cryptocurrency transaction to the issuer's account address on the blockchain, and then receives confirmation from the blockchain that the cryptocurrency has been deposited to the issuer's address on the blockchain. The issuer can then send a response to the acquirer host approving the authorization request.

[0022] In particular, before transferring the data necessary to form an authorization request, the amount of cryptocurrency equivalent to the purchase price in fiat currency must be sent to the issuer using a payment method for cryptocurrency settlement, determined by a predetermined exchange rate.

[0023] In particular, issuers who have a unique address for their blockchain account issue payment instruments for cryptocurrency settlements, and the payment application of these payment instruments includes the issuer's bank identification number in the payment system.

[0024] In particular, a payment application is installed on the payment device for cryptocurrency settlements. This application is used to prepare data for cryptocurrency transactions on the blockchain, and includes the data necessary for the cryptocurrency transaction in tags used in standard responses to commands on the terminal handling the payment device, and sends the response back to the terminal handling the payment device.

[0025] In particular, when personalizing, the issuer uploads the public and private keys to the payment method for cryptocurrency settlements, and then the public key is sent back to the issuer.

[0026] By using a payment method that forms a cryptocurrency transaction signature before transferring the necessary data, and then transfers the data necessary to form an authorization request, including a portion of the cryptocurrency transaction signature, to the terminal handling the payment method, the holder of the payment method for cryptocurrency settlements can initiate a cryptocurrency transaction independently without granting access to the cryptocurrency to a third party, thus ensuring the security of the system and method for conducting cryptocurrency transactions within the card infrastructure. Furthermore, by conducting cryptocurrency transactions using the standard transaction processing infrastructure in the card payment system, an expansion of the types of payment methods can be ensured.

[0027] The processing center of the payment system receives the authorization request from the host of the acquirer described above, and then identifies the above authorization request of the virtual currency transaction with the number of the payment means for virtual currency settlement. The above authorization request is supplemented with the missing part of the virtual currency transaction signature, and the authorization request including both parts of the virtual currency transaction signature is sent to the issuer, thereby ensuring the improvement of the security of the system and method for conducting virtual currency transactions in the card infrastructure. By supplementing the above authorization request, the holder of the payment means for virtual currency settlement can initiate a virtual currency transaction alone under the condition that the capacity of the transferred data required for the formation of the virtual currency transaction is limited. Moreover, the processing center of the payment system does not form a virtual currency transaction and can send an authorization request including both parts of the virtual currency transaction signature to the issuer. In addition, by ensuring that virtual currency transactions are conducted using the standard transaction processing infrastructure in the card payment system, an expansion of the types of payment means is ensured.

[0028] The issuer receives an authorization request from the payment system's processing center, including both parts of the cryptocurrency transaction signature; then forms the cryptocurrency transaction; sends the above cryptocurrency transaction to the issuer's account address on the blockchain; then receives confirmation from the blockchain that the cryptocurrency has been deposited to the issuer's address on the blockchain; and sends a response approving the authorization request to the acquirer's host. This allows the issuer to form and process cryptocurrency transactions based on authorization requests made by holders of payment instruments for cryptocurrency settlements, and send a response to the above authorization request to the acquirer's host, thereby ensuring improved security of the system and methods for conducting cryptocurrency transactions in the card infrastructure. Furthermore, the issuer can form cryptocurrency transactions based on data formed under conditions where the amount of data transferred in the standard transaction processing infrastructure of the card payment system is limited, thus ensuring an expansion of the types of payment instruments.

[0029] Before transferring the data necessary to form an authorization request, the amount of cryptocurrency equivalent to the purchase price in fiat currency must be sent to the issuer using a payment method for cryptocurrency settlements, and this amount is predetermined at a fixed exchange rate. This eliminates the need for additional steps in the system and additional participants such as currency exchanges. Since the transfer from the account of the holder of the payment method for cryptocurrency settlements is made directly from the issuer's account address at a predetermined exchange rate, the security of the system and method for conducting cryptocurrency transactions in the card infrastructure is ensured.

[0030] An issuer having a unique address of an account in a blockchain can, by issuing a payment means for virtual currency settlement in which a payment application includes the issuer's bank identification number in a payment system, identify the above authorization request of the virtual currency transaction by the number of the payment means for virtual currency settlement at the stage where a processing center processes the authorization request and route it to the issuer. Therefore, a holder of a payment means for virtual currency settlement can initiate a virtual currency transaction alone under the condition that the capacity of the data to be transferred required for the formation of the virtual currency transaction is limited by using the standard infrastructure for handling payment means in a card payment system. This further ensures the security of the described system and method and the expansion of the types of payment means.

[0031] By using a payment means for virtual currency settlement in which a payment application is installed that can prepare data for a virtual currency transaction in a blockchain, put the data required for the virtual currency transaction into tags used in the standard response to the commands of a terminal handling the payment means, and send back a response to the commands of the terminal handling the payment means, access by a third party to the data of the holder of the payment means for virtual currency settlement becomes impossible, and the holder of the payment means for virtual currency settlement can initiate a virtual currency transaction alone under the condition that the capacity of the data to be transferred required for the formation of the virtual currency transaction is limited by using the standard infrastructure for handling payment means in a card payment system. Since the transfer of data for the future formation of virtual currency transactions is performed by the standard infrastructure for handling payment means in a card payment system, this further improves the security of the transactions to be performed and enables the expansion of the types of payment means.

[0032] By using a payment method for cryptocurrency settlement that includes a public key and a private key, and by sending the public key to the issuer, the holder of the payment method for cryptocurrency settlement can independently initiate cryptocurrency transactions using the public and private keys that only they can access, and the issuer can form cryptocurrency transactions using the public key, thus ensuring the security of the system for cryptocurrency transactions using blockchain technology. Furthermore, the fact that cryptocurrency transactions are initiated using a public and private key, and that the issuer forms cryptocurrency transactions using the public key, ensures an expansion of the types of payment methods available in the standard transaction processing infrastructure of card payment systems.

[0033] Next, the terms used in describing this invention will be explained.

[0034] A payment terminal is a standard infrastructure that accepts payment instruments in a card payment system using contact and / or contactless data reading technologies, and can be implemented as various types of terminals. For example, a payment terminal may be implemented as a standard infrastructure that accepts cards, such as a POS terminal, terminal core and applications, or a protocol for connecting the terminal to the acquirer's host.

[0035] An acquirer host is a banking system that manages the acceptance of payment instruments at terminals that handle payment instruments.

[0036] An issuer is a system of banks that issues payment instruments, including payment instruments for cryptocurrency settlements.

[0037] Standard commands for a payment instrument terminal are commands used in communication between the payment instrument terminal and the payment instrument in an existing infrastructure that accepts and processes transactions in a card payment system. In the invention described, the payment instrument terminal exchanges data with a payment instrument for cryptocurrency settlement using standard commands used for handling payment instruments in an existing infrastructure that accepts and processes transactions in a card payment system.

[0038] A payment method is a bank card, smartphone, and / or other means used to initiate a transfer from the payment method holder's account address to the recipient's address. Payments using this payment method can be made via contact or / or contactless payment.

[0039] As a means of payment for cryptocurrency settlements, holders of cryptocurrency payment methods can use bank cards, smartphones, and / or other means to send cryptocurrency from their address to the recipient's address using blockchain technology. Cryptocurrency payment methods are issued by issuers who have a unique address on the blockchain and are ready to provide customers with cryptocurrency settlements. The payment application installed on the cryptocurrency payment method includes the issuer's bank identification number in the payment system, facilitates dialogue between the cryptocurrency payment method and the terminal handling the payment method, and enables the calculation of data to be transferred to the issuer of the payment method. The cryptocurrency payment method can receive standard commands from the terminal handling the payment method, prepare data for performing cryptocurrency transactions, tag the data with standard tags, and send the above messages in response to the commands from the terminal handling the payment method.

[0040] An HSM (Hardware Security Module) is a physical computing device located on the processing center side of a payment system that can create, store, and manage digital keys, and perform cryptographic calculations using those keys.

[0041] A franchisee is a business entity that sells goods, services, or labor.

[0042] A cryptocurrency transaction refers to the transfer of cryptocurrency from the sender's account address to the recipient's account address using blockchain technology (in which case a new block of the cryptocurrency transaction is added to the blockchain). For example, in the description of the embodiment of the present invention, a cryptocurrency transaction is performed from the electronic wallet of the holder of the payment means for cryptocurrency settlement to the electronic wallet of the issuer that issues the above-mentioned payment means for cryptocurrency settlement.

[0043] Cryptocurrency transaction verification means checking whether it conforms to the requirements of the blockchain.

[0044] Verifying the validity of a cryptocurrency transaction signature means checking whether the transaction signature conforms to the specified standards.

[0045] Transaction dynamic parameters are variables that make up a transaction. For example, transaction dynamic parameters include the transaction volume, the transaction currency, merchant parameters, and the transaction signature. In this case, the transaction signature is an essential part of the dynamic data.

[0046] The issuer's bank identification number is a unique identification number for the issuing bank. It provides all information about the bank, is part of the card number, and is used to identify the bank within the card payment system when authentication, processing, and clearing take place.

[0047] The AES algorithm (Advanced Encryption Standard algorithm) is a symmetric block cipher algorithm recognized as an encryption standard.

[0048] ODA (Offline Data Authentication) is a cryptographic verification of the authenticity of card data in autonomous mode using a public key.

[0049] An ATC counter (Application Transaction Counter) is a counter in the payment system that increases with each transaction.

[0050] Detailed explanation of the system for conducting non-fiat currency transactions in card infrastructure. The holder of a cryptocurrency wallet who wishes to pay for goods and services at a participating merchant requests this from the issuer, who then issues a payment method for cryptocurrency settlements on behalf of the cryptocurrency wallet holder.

[0051] When personalizing a payment method for cryptocurrency settlements, the issuer uploads information about predetermined exchange rates for converting cryptocurrency into fiat currencies such as Russian rubles or US dollars to the payment application of the payment method.

[0052] Along with this, the issuer uploads a standard dataset to the cryptocurrency payment method, which includes the unique number of the cryptocurrency payment method used in the EMV application (an application conforming to the Europay MasterCard Visa (EMV) standard), the expiration date of the cryptocurrency payment method, the AIP (Application Interchange Profile), the key for ODA (Offline Data Authentication), and the issuer's account address on the blockchain.

[0053] Each payment method for cryptocurrency settlements has a unique number with a dedicated prefix (the issuer's bank identification number), which corresponds to the first 6-8 characters of the payment method number. The number with the dedicated prefix assigned to the payment method for cryptocurrency settlements enables the routing of the cryptocurrency transaction to the card issuer and notifies the payment system's processing center that additional data must be formed to complete the transaction.

[0054] Furthermore, during the personalization process, a public and private key are generated for the payment method used for cryptocurrency settlements that utilize blockchain technology. This public key is then returned to the issuer and stored in their database. The public key is necessary for the issuer to repair the cryptocurrency transaction signature and to pre-verify the validity of the cryptocurrency transaction signature.

[0055] Transactions are brought about by the interaction between a payment instrument for cryptocurrency settlements and the terminal that handles the payment instrument. The payment instrument issued by the issuer for cryptocurrency settlements has a payment application installed that allows it to receive standard commands containing transaction parameters from the terminal handling the payment instrument, generate cryptocurrency transaction data, and tag parts of the cryptocurrency transaction data, including a portion of the payment signature. The specified tags are used in standard messages sent from the payment instrument in a standard manner as a response to standard commands from the terminal handling the payment instrument. Thus, parts of the cryptocurrency transaction data are sent from the payment instrument for cryptocurrency settlements to the terminal handling the payment instrument in a standard format, according to the currently applicable protocol for connecting banks to card payment systems.

[0056] Data exchange between a payment method for cryptocurrency settlements and the terminal handling the payment method is carried out in a standard manner, where the payment method for cryptocurrency settlements sends a response back to the terminal's usual APDU command (Application Protocol Data Unit). The response from the payment method for cryptocurrency settlements is expressed as an R-APDU message. This R-APDU message contains tagged data objects in TLV (Tag Length Value) format, which is the standard for R-ADPU (Command in EMV Standard Format), equivalent to the terminal's APDU command. The data transferred by tags from the payment method for cryptocurrency settlements is necessary for forming the authorization request. EMV is a standard for interaction between IC cards (chip cards) and compatible IC POS terminals and automated payment machines, and is used by credit and debit payment methods to authenticate payments. EMV is an acronym for Europay, Mastercard, and Visa, who developed the standard.

[0057] The data required to form an authorization request includes dynamic data that is placed in a tag sent back as a response to the terminal's APDU command, formed by the payment method for cryptocurrency settlements. The dynamic parameters of a cryptocurrency transaction include a cryptocurrency transaction signature, which consists of two parts: a signature s and an r value used to verify the cryptocurrency transaction signature. The signature s and the r value used to verify the cryptocurrency transaction signature are represented in binary as lines consisting of "0"s and "1"s, with each line being 32 bytes long. For an issuer to perform a cryptocurrency transaction on the blockchain, the payment method for cryptocurrency settlements must send the cryptocurrency transaction signature, consisting of two parts (32 bytes each), to the issuer. In other words, the issuer must transfer 64 bytes of data.

[0058] However, there are capacity limitations on the data transferred from a cryptocurrency payment method to the terminal handling that method. Specifically, the maximum amount of dynamic data sent from a cryptocurrency payment method to an issuer using the standard transaction processing infrastructure in a card payment system is 51 bytes.

[0059] A cryptocurrency transaction signature is a recalculated parameter of a cryptocurrency transaction, consisting of the transaction amount and currency, the recipient's account address, and the payer's identifier, all converted using cryptographic methods. Various types of blockchains exist. Currently, various elliptic curves (secp256k1, ed25519, etc.) and various signature formation algorithms using these curves (ECDSA, EdDSA, etc.) are used to create signatures on a blockchain. However, all signatures share a common structure: (r, s). In this case, the r value is the coordinate (x-axis and y-axis) of a Landum point R belonging to a cyclic subgroup of the elliptic curve's point cloud, and is used to verify the signature. The r value used when verifying a cryptocurrency transaction signature can be the x-axis or y-axis of point R, depending on the blockchain used. The s value is the signature calculated in a subgroup of the multiplicative group of the finite field GF(p) of order p, using Schnoor's algorithm or Elgamal's algorithm. The signature s and the r value used to verify the cryptocurrency transaction signature are related by a parameter that is a random number k∈GF(p). For a random point R on an elliptic curve, the equation R=kG holds, where G is the generator of the cyclic subgroup of the point group of the elliptic curve.

[0060] Since the amount of data required to form an authorization request that must be sent from a payment method for cryptocurrency settlements is greater than the amount of data that can be sent from the payment method to the terminal handling the payment method and then to the acquirer's host, it has been proposed that the payment method for cryptocurrency settlements send only the portion containing dynamic parameters related to the transaction being performed, which can only be accessed by the application of the payment method for cryptocurrency settlements, rather than the entire dataset.

[0061] The key for encrypting the signature s value, which is part of a cryptocurrency transaction signature, is known only to the payment instrument for cryptocurrency settlements and the issuer that issued this payment instrument. Therefore, the parameter that can only be accessed by the payment application of the payment instrument for cryptocurrency settlements is the encrypted signature s value. Thus, the payment system's processing center receives dynamic data containing the encrypted signature s, but does not know the signature s value at the time the transaction is performed. Since the payment system's processing center cannot repair the cryptocurrency transaction signature if the signature s value is unknown, the security of the system can be improved.

[0062] The data necessary to form a cryptocurrency transaction is transferred from the payment instrument for cryptocurrency settlement to the terminal that handles the payment instrument. Next, the terminal that handles the payment instrument forms an authorization request and sends it to the acquirer's host. The acquirer's host receives the authorization request and forwards it to the payment system's processing center.

[0063] Some of the data necessary to form a cryptocurrency transaction on the blockchain is included in the authorization request accepted by the payment system's processing center. Any missing data necessary to form a cryptocurrency transaction on the blockchain is filled in by the payment system's processing center (the r value used to verify the cryptocurrency transaction signature) and stored in the issuer's system (for example, the public key of the payment application for cryptocurrency settlements).

[0064] The processing center sends the above authorization request to the issuer, which includes data from the payment instrument for cryptocurrency settlement and data formed by the payment system's processing center to perform the cryptocurrency transaction on the blockchain. The issuer identifies the authorization request for the cryptocurrency transaction using the payment instrument number. The above authorization request includes two parts of the cryptocurrency transaction signature, etc. The issuer forms the cryptocurrency transaction on the blockchain using the public key obtained when personalizing the payment instrument for cryptocurrency settlement. After receiving the authorization request, the issuer repairs the cryptocurrency transaction signature from the authorization request and performs a pre-verification of the validity of the cryptocurrency transaction signature. If the pre-verification of the validity of the cryptocurrency transaction signature is successful, the issuer adds the transaction amount, the issuer's account address on the blockchain, and the identifier of the holder of the payment instrument for cryptocurrency settlement. Subsequently, the issuer sends the cryptocurrency transaction to the issuer's account address on the blockchain, and after receiving confirmation that the cryptocurrency equivalent to the purchase price has been deposited to the issuer's account address on the blockchain, it sends an authorization request to the acquirer's host in standard mode, indicating that the purchase has been approved.

[0065] Next, the present invention will be explained using diagrams.

[0066] Figure 1 illustrates a simplified version of the proposed system for conducting non-fiat currency transactions within a card infrastructure.

[0067] Figure 2 shows a flowchart illustrating how to conduct non-fiat currency transactions within the card infrastructure.

[0068] Detailed description of an example of the proposed technical solution To initiate a transaction using a payment method for cryptocurrency settlement, the terminal handling the payment method accepts the cryptocurrency payment method. Next, in automatic mode, a dialog takes place between the cryptocurrency payment device (payment method) and the terminal handling the payment method, resulting in the transfer of data necessary to form an authorization request from the cryptocurrency payment device (payment method) to the terminal handling the payment method. All of the above commands and data objects are specified in the EMV standard (commands and objects in the Europay MasterCard Visa standard format).

[0069] When a payment terminal accepts a payment method for cryptocurrency settlement, it uses a Select command with a standard AID (Application Identifier) ​​to select a payment method for cryptocurrency settlement that utilizes blockchain technology and is a cryptocurrency settlement application. Next, the FCI Template object reads a PDOL (Processing Option Data Object List) containing the amount and currency of the cryptocurrency transaction, and sends a GPO command (Get Processing Option) with the requested cryptocurrency transaction parameters to the payment method for cryptocurrency settlement.

[0070] A payment method for cryptocurrency settlements forms the data of a cryptocurrency transaction, which includes dynamic data such as a portion of the cryptocurrency transaction signature, the amount and currency of the cryptocurrency transaction, the recipient's account address, and the payer's identifier. The payment method encrypts a portion of the cryptocurrency transaction signature using a key for encrypting the signature's s-value.

[0071] Terminals that handle payment methods use the Read Record command to read objects: Track 2 Equivalent Data (Tag 57, 19 bytes) • PAN Sequence # (5F34, 1 byte) Terminals that handle payment methods use the Generate AC command to retrieve data: · ACT (9F36, 2 bytes) • ARQC (9F26, 8 bytes) • IAD (9F10, 32 bytes) • ICC Dynamic Number (9F4C, 8 bytes) When exchanging data between a payment method for cryptocurrency settlement and a terminal that handles the payment method, the encrypted portion of the cryptocurrency transaction signature (signatures), which is 32 bytes in length, is sent from the payment method for cryptocurrency settlement to the terminal that handles the payment method as a field in the IAD object data.

[0072] The data necessary to form a cryptocurrency transaction is tagged by the payment application of the cryptocurrency payment method and sent to the terminal that handles the payment method. Next, based on the data obtained from the cryptocurrency payment method, the terminal handling the payment method forms an authorization request and sends it to the acquirer's host.

[0073] The acquirer host, in automatic mode, processes transaction data from the payment instrument terminal, processes authorization requests, and sends them to the payment system's processing center. Next, the acquirer host sends authorization requests containing data generated by the cryptocurrency payment instrument, as listed below, to the payment system's processing center.

[0074] Track 2 Equivalent Data (Tag 57, 19 bytes) PAN Sequence # (5F34, 1 byte) ARQC (9F26, 8 bytes) IAD (9F10, 32 bytes) Each of the above data can be used to store a portion of the cryptocurrency transaction signature. For example, a 32-byte signature can be transferred in the IAD data field. However, in the Track 2 Equivalent Data object, only 10 bytes are available to transfer data to the issuer. Thus, the total capacity of the data that the payment method sends to the issuer is 51 bytes.

[0075] The payment system's processing center, in automatic mode, receives authorization requests from the acquirer's host, which include data generated by the payment method for cryptocurrency settlements.

[0076] When the payment system's processing center receives an authorization request, it receives data generated by the payment instrument for cryptocurrency settlement, which includes a portion of the 32-byte cryptocurrency transaction signature (s-signature). The payment system's processing center then calculates the r-value, which is used to verify the cryptocurrency transaction signature, representing the missing portion of the data necessary to form the cryptocurrency transaction.

[0077] The r value used to verify cryptocurrency transaction signatures can be the x-axis or y-axis of a random point R belonging to a cyclic subgroup of an elliptic curve, depending on the blockchain used. Therefore, the payment system's processing center calculates the value of the random point R belonging to the cyclic subgroup of the elliptic curve. For a random point R on an elliptic curve, the equation R = kG holds, where G is the generator of the cyclic subgroup of the elliptic curve known to the payment system's processing center, and the parameter k is a random number. The payment system's processing center can calculate the R value, but it cannot directly obtain the k value. This can be achieved by incorporating a separate function for calculating the R point in the HSM device. The signature s and the r value used to verify cryptocurrency transaction signatures are related by the parameter k described above.

[0078] The above parameter k is calculated in the payment system's processing center to determine the r value used when verifying the transaction signature of a cryptocurrency. The above parameter k is calculated by applying the AES algorithm first to the ATC cryptocurrency transaction counter value, and then to an additional ATC value, using a 256-byte private key known in the application of the payment method for cryptocurrency settlement and the HSM device of the payment system's processing center. The string concatenation of the resulting values ​​yields a 256-byte binary representation of parameter k.

[0079] Next, the payment system's processing center uses the payment method number for cryptocurrency settlement to identify the key for generating the above parameter k and the numerical value of the cryptocurrency transaction counter. Once parameter k is known, the r value used to verify the cryptocurrency transaction signature can be calculated. The r value used to verify the cryptocurrency transaction signature can be the y-axis or x-axis of the R point depending on the blockchain used. The r value used to verify the cryptocurrency transaction signature is added to the above authorization request. In one embodiment, a separate tag can be created to send the r value used to verify the cryptocurrency transaction signature, and this data object can be added to the "ПЛ-055" field of the 0100 message.

[0080] After calculating the cryptocurrency transaction signature, the payment system's processing center sends the above authorization request to the issuer, which includes parts of both cryptocurrency transaction signatures.

[0081] The issuer, in automatic mode, receives authorization requests from the payment system's processing center and identifies the authorization request for performing a cryptocurrency transaction using the payment method number for cryptocurrency settlements. The above authorization request includes two parts of the cryptocurrency transaction signature. Using the public key obtained when personalizing the payment method for cryptocurrency settlements, the issuer forms the cryptocurrency transaction on the blockchain. The cryptocurrency transaction on the blockchain is formed as follows: After receiving the authorization request containing the two parts of the cryptocurrency transaction signature, the issuer repairs the cryptocurrency transaction signature from the authorization request and performs a pre-verification of the validity of the cryptocurrency transaction signature. If the pre-verification of the validity of the cryptocurrency transaction signature is successful, the issuer assists the cryptocurrency transaction. That is, it adds the transaction amount, the issuer's account address on the blockchain, and the identifier of the holder of the payment method for cryptocurrency settlements. The issuer then sends the above cryptocurrency transaction to the issuer's account address on the blockchain.

[0082] Next, in automatic mode, the issuer receives confirmation that the cryptocurrency equivalent to the purchase price has been deposited from the blockchain into the issuer's account address on the blockchain. Then, in standard mode, it sends an authorization request to the acquirer host, indicating that the purchase has been approved.

[0083] Thus, the proposed solution makes it impossible for a third party to initiate a transaction from the account of a holder of a payment instrument for virtual currency settlements within the standard transaction processing infrastructure of a card payment system. This further enhances the security of systems and methods for conducting non-fiat currency transactions within the card infrastructure and enables an expansion of the types of payment instruments. [Brief explanation of the drawing]

[0084] [Figure 1] Figure 1 illustrates a simplified version of the proposed system for conducting non-fiat currency transactions within a card infrastructure. [Figure 2] Figure 2 shows a flowchart illustrating how to conduct non-fiat currency transactions within the card infrastructure.

Claims

1. A method for conducting non-fiat currency transactions using card infrastructure, The aforementioned card infrastructure includes payment instruments for cryptocurrency settlements, terminals for handling payment instruments, acquirer hosts, payment system processing centers, and issuers. The aforementioned method, A step of accepting the payment means for virtual currency settlement at a terminal handling the payment means; a step of encrypting the s value, which is part of the virtual currency transaction signature, in the payment means using a key for encrypting the signature, wherein the key for encrypting the part of the signature is known only to the payment means for virtual currency settlement and the issuer; A step of transmitting data necessary for forming an authorization request, along with the s value which is the encrypted portion of the virtual currency transaction signature, from the payment means to the terminal handling the payment means. The steps of forming the authorization request using a terminal that handles the payment method, The steps include sending the authorization request from the terminal handling the payment method to the acquirer's host, The steps include: sending the authorization request from the acquirer's host to the payment system's processing center; In the processing center of the aforementioned system, the step of calculating the r value, which is the missing part of the transaction signature of the virtual currency, A step of sending the authorization request, which includes both the s value, which is the encrypted portion of the transaction signature of the virtual currency, and the r value, which is the unencrypted portion of the transaction signature of the virtual currency, from the processing center of the payment system to the issuer associated with the payment instrument number for the virtual currency settlement, wherein the payment instrument number for the virtual currency settlement is obtained from the acquirer's host, and the number is used to generate the r value, which is the unencrypted portion of the transaction signature of the virtual currency. The steps include: the issuer generating a transaction for the virtual currency, The steps include sending the aforementioned cryptocurrency transaction to the issuer's blockchain account, Steps to confirm that the cryptocurrency funds have been deposited into the issuer's blockchain account, and, The steps include sending an authorization request response from the issuer to the acquirer's host indicating that the transaction of the cryptocurrency has been approved, A method that includes this.

2. A method for conducting a non-fiat currency transaction according to claim 1, characterized in that, before transferring the data necessary for forming the authorization request, the amount of virtual currency equivalent to the purchase price in fiat currency, which must be sent to the issuer by the payment means for virtual currency settlement, is determined in advance by a predetermined exchange rate.

3. A method for conducting a non-fiat currency transaction according to claim 1, characterized in that an issuer having a unique address in the blockchain issues a payment means for cryptocurrency settlement, and the settlement application of the payment means includes the issuer's bank identification number in the payment system.

4. A method for performing a non-fiat currency transaction according to claim 1, characterized in that a payment application is installed on the payment means for cryptocurrency settlement, this application is used to prepare data for a cryptocurrency transaction on the blockchain, the data necessary for the cryptocurrency transaction is placed in a tag used in a standard response to a command of the terminal handling the payment means, and the response is sent back to the command of the terminal handling the payment means.

5. A method for performing a nonfiat currency transaction according to claim 1, characterized in that when personalizing, the issuer uploads a public key and a private key to the payment means for cryptocurrency settlement, and then transmits the public key to the issuer.

6. A system for conducting non-fiat currency transactions using card infrastructure, The aforementioned card infrastructure includes payment instruments for cryptocurrency settlements, terminals for handling payment instruments, acquirer hosts, payment system processing centers, and issuers. The terminal handling the aforementioned payment means accepts the payment means for virtual currency settlement. The payment means encrypts the s value, which is part of the virtual currency transaction signature, using a key for encrypting the signature, and the key for encrypting the part of the signature is known only to the payment means for virtual currency settlement and the issuer. The payment means transmits the data necessary to form an authorization request, along with the s value which is the encrypted portion of the virtual currency transaction signature, to the terminal handling the payment means. The terminal handling the payment means forms the authorization request, and transmits the authorization request from the terminal handling the payment means to the acquirer's host. The authorization request is sent from the acquirer's host to the payment system's processing center. In the processing center of the payment system, the r value, which is the missing part of the virtual currency transaction signature, is calculated. The authorization request, which includes both the s value, which is the encrypted portion of the cryptocurrency transaction signature, and the r value, which is the unencrypted portion of the cryptocurrency transaction signature, is sent from the payment system's processing center to the issuer associated with the payment instrument number for the cryptocurrency settlement, the payment instrument number for the cryptocurrency settlement is obtained from the acquirer's host, and the number is used to generate the r value, which is the unencrypted portion of the cryptocurrency transaction signature. The issuer generates a transaction for the cryptocurrency, The aforementioned cryptocurrency transaction is sent to the issuer's blockchain account. Confirm that the cryptocurrency funds have been deposited into the issuer's blockchain account, and, The issuer sends an authorization request response to the acquirer's host indicating that the transaction of the cryptocurrency has been approved. system.

7. A system for performing non-fiat currency transactions in a card infrastructure according to claim 6, characterized in that, before transferring the data necessary for forming the authorization request, the payment means for virtual currency settlement determines in advance, at a predetermined exchange rate, the amount of virtual currency equivalent to the purchase price in fiat currency that must be sent to the issuer.

8. A system for conducting non-fiat currency transactions in a card infrastructure as described in claim 6, characterized in that an issuer having a unique address on the blockchain issues a payment means for cryptocurrency settlement, and the settlement application of the payment means includes the issuer's bank identification number in the payment system.

9. A system for performing non-fiat currency transactions in a card infrastructure as described in Claim 6, characterized in that a payment application is installed on the payment means for cryptocurrency settlement, the application is used to prepare data for cryptocurrency transactions on the blockchain, the data necessary for cryptocurrency transactions is placed in a tag used in a standard response to a command of the terminal handling the payment means, and the response is sent back to the command of the terminal handling the payment means.

10. A system for performing non-fiat currency transactions in a card infrastructure according to claim 6, characterized in that when personalizing, the issuer uploads a public key and a private key to the payment means for cryptocurrency settlement, and then transmits the public key to the issuer.

Citation Information

Patent Citations

  • Public key encryption with digital signature scheme

    US20130294600A1

  • Techniques for conducting transactions utilizing cryptocurrency

    US20190220856A1