Transaction system and method for performing secure wireless transaction and performing a mechanical actuation

Abstract

In an aspect of the present disclosure, there is provided a transaction system (100) for performing secure wireless transactions and performing a mechanical actuation upon a successful transaction, the system comprising: - an Internet of Things (loT) device (110), arranged for offline operation and configured for integration with an external apparatus (140) to perform a mechanical actuation, the loT device (110) comprising: a communication interface (1 12) configured for Wireless Personal Area Network, WPAN, communication; a processing unit (111) configured to transmit transaction-related data over the WPAN communication interface and receive transaction confirmation data; - a mobile device (120) configured to establish a WPAN communication link (115) with the loT device (110), establish a wireless communication link (125) with a remote server (130), receive the transaction—related data over the WPAN communication link (115), transmit the transaction-related data to the remote server (130), receive transaction confirmation data from the remote server (130), and transmit the transaction confirmation data to the IoT device (110) over the WPAN communication link (115); - a remote server (130) configured to receive the transaction-related data from the mobile device (120), execute the transaction, and generate transaction confirmation data for transmission to the mobile device (120); wherein the remote server (130) uses a signature component arranged to sign the transaction confirmation data for the IoT device (110) with a key corresponding to the loT device (110), and for the loT device (110) to validate the signed transaction confirmation data based on a signature verification mechanism that determines correspondence between the signed transaction confirmation data and the key corresponding to the loT device (110); and wherein the loT device (110) is further configured to activate the mechanical actuation in response to successful validation of the transaction confirmation data.