Payment system

Abstract

A method of making a payment in which payment data is received by a user's terminal from a point-of-sale terminal, a secret of a payment application is received by the terminal from the operator's server system, a trust card is activated in the user's terminal by utilizing said secret of the payment application, and data of the trust card is transmitted from the user's terminal to the point-of-sale terminal for making the payment transaction. A trust card is created in the server system, data of the trust card is transmitted to the terminal to be used for making the payment transaction, the secret of the payment application is formed in the server system, and access to the secret of the payment application is provided to the terminal for activating the trust card for making the payment transaction.

1 . A method for performing a payment transaction in a secure manner by a user's terminal, the method comprising:
 receiving, in the user's terminal, authentication by the user for performing a payment transaction in a secure manner by the user's terminal,   retrieving data of a trust card of a payment application, the trust card being stored in a safe memory area in said user's terminal, the trust card comprising at least a trust card related identifier,   forming a security code;   sending by the user's terminal the security code and the trust card related identifier to the point-of-sale terminal to authorize the point-of-sale terminal perform the payment,   wherein forming the security code as a one-time security code.   
     
     
         2 . The method according to  claim 1 , comprising forming the trust card related identifier on the basis of information related to a credit card. 
     
     
         3 . The method according to  claim 1  further comprising:
 receiving from the point-of-sale terminal a random data, 
 signing by the user's terminal the random data with a secret key of the user's terminal to form a signature, and 
 sending the signature to the point-of-sale terminal. 
 
     
     
         4 . The method according to  claim 1  further comprising:
 displaying, by the user's terminal, the payment data to the user, 
 storing the payment data on the safe memory area, and 
 adjusting a payment limit in the safe memory area according to the payment data. 
 
     
     
         5 . The method according to  claim 1  comprising:
 receiving, by the user's terminal, a pin code entered by a user of the user's terminal, 
 using the pin code as the authentication by the user. 
 
     
     
         6 . The method according to  claim 1  comprising:
 receiving, by the user's terminal, a password entered by a user of the user's terminal, 
 combining the password and the secret of the payment application to form the security code. 
 
     
     
         7 . An apparatus comprising at least one processor, a memory and a computer program code in said memory, the computer program code being configured, when run in said at least one processor, to cause the apparatus to:
 receive an authentication provided by the user for performing a payment transaction in a secure manner by the apparatus,   retrieve data of a trust card of a payment application, the trust card being stored in a safe memory area in said user's terminal, the trust card comprising at least a trust card related identifier,   form a security code as a one-time security code; and   send the security code and the trust card related identifier to the point-of-sale terminal authorize the point-of-sale terminal perform the payment.   
     
     
         8 . The apparatus according to  claim 7 , said memory comprising computer program code configured, when run in said at least one processor, to cause the apparatus to:
 form the trust card related identifier on the basis of information related to a credit card.   
     
     
         9 . The apparatus according to  claim 7 , said memory comprising computer program code configured, when run in said at least one processor, to cause the apparatus to:
 receive from the point-of-sale terminal a random data,   sign the random data with a secret key of the user's terminal to form a signature, and   send the signature to the point-of-sale terminal.   
     
     
         10 . The apparatus according to  claim 7 , said memory comprising computer program code configured, when run in said at least one processor, to cause the apparatus to:
 display the payment data to the user,   store the payment data on the safe memory area, and   adjust a payment limit in the safe memory area according to the payment data.   
     
     
         11 . The apparatus according to  claim 7 , said memory comprising computer program code configured, when run in said at least one processor, to cause the apparatus to:
 receive a pin code entered by a user of the user's terminal,   use the pin code as the authentication by the user.   
     
     
         12 . The apparatus according to  claim 7 , said memory comprising computer program code configured, when run in said at least one processor, to cause the apparatus to:
 receive a password entered by a user of the apparatus,   combine the password and the secret of the payment application to form the security code.   
     
     
         13 . A non-transitory computer program product for making a payment, the computer program product comprising a computer software code stored on a non-volatile computer-readable medium, the computer program code, when run in at least one processor, causing a user's terminal to:
 receive an authentication provided by the user for performing a payment transaction in a secure manner by the apparatus,   retrieve data of a trust card of a payment application, the trust card being stored in a safe memory area in said user's terminal, the trust card comprising at least a trust card related identifier,   form a security code as a one-time security code; and   send the security code and the trust card related identifier to the point-of-sale terminal authorize the point-of-sale terminal perform the payment.   
     
     
         14 . An apparatus comprising at least one processor, a memory and a computer program code in said memory, the computer program code being configured, when run in said at least one processor, to cause the apparatus to:
 create, in the user's terminal, a private key;   encrypt the private key and an identification of the trust card,   send the encrypted private key and identification of the trust card to a server system,   receive by the user's terminal encrypted trust card related identifier,   decrypt by the user's terminal the encrypted trust card related identifier; and   store the decrypted trust card related identifier into the trust card.