Disadvantages mentioned above are eliminated significantly by the method of authenticity and/or agreement approval at the direct debits through the separate identifier according to this invention, of which bedrock is based on the fact that after activating the payment process or payment process preparation in the mobile communication device, the device sends alphanumerical chain into the identifier approached to the mobile communication device. The identifier is approached in the distance shorter than 10 cm, mostly it may touch the mobile communication device directly. However, the contact or the contact point setting is not essential or necessary since the communication between the mobile communication device and the identifier is wireless. At this point, the identifier is by means of energy supplied contact free from the electromagnetic field of the mobile communication device, receives alphanumerical chain and realizes its processing in the form of an electronic signature. The received alphanumerical chain is signed electronically in the identifier and such established signed alphanumerical chain is sent back to the mobile communication device where the correctness is checked. If the correctness is verified and at the same time the owner approves the payment transaction, the mobile communication device will be approached to the distance, suitably less than 10 cm from the reading unit of the payment terminal.
It is advantageous if the electronic signature of the received alphanumerical chain is made by the process with the help of a private key saved in the memory of the identifier. To the energy supply of the identifier circuits is used direct and/or while approaching, accumulated energy of the electromagnetic field of the mobile communication device, advantageously electromagnetic field created by transmitting unit of the mobile communication device which aim is to communicate with the identifier.
The invention enables to use cryptography of the authentication preserving the energy passivity of the separate identifier. The principal advantage is the high level of security at the satisfactory user comfort. Entering PIN code mostly consisting of four digits can be according to this invention, replaced by apposing the identifier working with more-bit-chain which is variable since the approving code transmitted from the identifier into the mobile communication device is changed according to the cryptography taking place in the identifier processor at every authentication process. By this, the higher level of security is achieved than at the RFID identifiers and the advantage of its passivity is remained. Such energy passivity enables to reduce the size of the identifier since there is no necessity to use own energy source by which the user comfort is increased as the user does not have to bother with identifier's charge or condition.
In a favorable configuration the mobile communication device may use at the payment processing and authentication a remote processing server to which it is connected via general mobile network, mainly the kind of GSM or GRPS net.
The bedrock of this invention is based on the system of authentication and/or agreement approval at the direct debits which concerns payment terminals, a separate identifier and a mobile communication device communicating with the payment terminal via contact free communication channel where the mobile communication device, preferably mobile phone, contains transmitting and receiving unit to allow the contact free communication with the identifier and where the identifier contains a processor for electronic signature of the received alphanumerical chain. Further more, the identifier contains transmitting and receiving unit to allow the communication with the mobile communication device, a block transforming the electromagnetic field into the electric energy and a memory. Components of the identifier are, from the energy point of view, supplied by electromagnetic field of the mobile communication device either directly by immediately gained energy or partially by energy accumulated during the approaching to the mobile communication device at the relevant payment process.
In a possible configuration the system includes a remote processing server connected to the mobile communication device through general mobile network, preferably via GSM or/and GPRS net. From the point of view of compatibleness with the existing, mass-spread devices and standards, it is suitable if the mobile communication device consists of a mobile phone, advantageously a mobile phone with NFC communication unit.
Disadvantages mentioned in the Present Technology Status are eliminated significantly by the identity identifier and/or agreement approval at the direct debits through communicating contact free with the mobile communication device, principally a mobile phone which is connected contact free to the payment terminal according to this invention, of which bedrock is based on the fact that it consists of a processor for electronic signature of the received alphanumerical chain, transmitting and receiving unit to communicate with the mobile communication device. Communication is principally based on receiving the alphanumerical chain and transmitting electronically signed alphanumerical chain. The identifier further more contains a memory, a block transforming the electromagnetic field into the electric energy. Transmitting and receiving unit and a block transforming the electromagnetic field into the electric energy are connected to the processor. Processor is also connected to the memory. Basically, all the units of the identifier are, from the energy point of view, supplied by electromagnetic field of the mobile communication device.
In an advantageous configuration, the identifier of identity and/or approval contains NFC chip and the memory contains a private key for electronic signature of alphanumerical chain received from the mobile communication device.
Utility attributions increase a configuration, where a part of the memory is reserved for the personal data of the user. This part of memory is adjusted to store the personal user data separately from the private key. In such case the identifier may be used like a health insurance card, identity card and so on. Rightness of data demand is evaluated in the processor of the identifier.
To increase the user comfort, the identifier may be located in a pendant and/or a key ring and/or a label and/or a beading.
The invention enables to higher the level of security and comfort of authenticity and direct debit approval since the user does not have to remember his PIN code. At the same time the invention increases the process of direct debit transaction since the mobile communication device functions as a wallet without any delay caused by the PIN code entering.