Patent ID: 11956347
Assignee: SAMSUNG ELECTRONICS CO., LTD.
Field: IT methods for management (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 6:
7. A mobile payment apparatus comprising:
one or more processors configured to:
generate, corresponding to a cryptography original one-time pad (OTP) key that is based on a plurality of true random numbers, a decrypted OTP key through decryption of a received encrypted OTP for representing an encryption result of the original OTP key;
generate a first cryptographic hash through application of a cryptographic hash function to payment data corresponding to a current payment transaction between an electronic device and a commerce device, wherein the cryptographic hash function is configured to generate the first cryptographic hash to be uniquely representative of the payment data for guaranteeing an integrity of the payment data;
generate an encrypted payment token through encryption of the payment data concatenated with the first cryptographic hash using the decrypted OTP key, and control transmission of the encrypted payment token to the commerce device; and
selectively based on a decrypted different portion of the encrypted payment token corresponding to the first cryptographic hash and a decrypted different portion of the encrypted payment token, corresponding to the encrypted payment data using the original OTP key, confirm a payment of the current payment transaction to the commerce device, including:
receive verification information representing whether a first decryption result matches a second cryptographic hash generated from a second decryption result using the cryptographic hash function, for confirming whether the integrity of the payment data is guaranteed;
confirm the payment when the received verification information represents that the first decryption result matches a second hash value and that the integrity of the payment data is guaranteed; and
not confirm the payment when the received verification information represents that the first decryption result does not match the second hash value and the integrity of the payment data is not guaranteed.