Patent ID: 11956347
Assignee: SAMSUNG ELECTRONICS CO., LTD.
Field: IT methods for management (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 10:
11. A processor-implemented mobile payment method, the method comprising:
generating a cryptography original one-time pad (OTP) key based on a plurality of true random numbers, and encrypting the original OTP;
receiving an encrypted payment token, representative of payment data concatenated with a first cryptographic hash encrypted by an electronic device according to a decrypted OTP corresponding to the encrypted original OTP, where the payment data corresponds to a current payment transaction between the electronic device and a commerce device;
decrypting the encrypted payment token using the original OTP key to obtain decrypted payment data from a portion of the payment token corresponding to encrypted payment data and a decrypted first cryptographic hash from a different portion of the payment token corresponding to the encrypted first cryptographic hash, where the decrypted first cryptographic hash is representative of whether an integrity of the payment ta is guaranteed;
generating a second cryptographic hash by applying a cryptographic hash function to the decrypted payment data, wherein the cryptographic hash function is configured to generate the second cryptographic hash to be uniquely representative of the decrypted payment data; and
determining whether one or both of a validity and an integrity of the decrypted payment data is confirmed based on whether the second cryptographic hash matches the decrypted first cryptographic hash;
transmitting verification information to the commerce device indicating that the one or both of the validity and the integrity of the decrypted payment data is confirmed, representing that the decrypted first cryptographic hash matches the second cryptographic hash, when a result of the determining is that the decrypted first cryptographic hash matches the second cryptographic, for a confirming of a payment of the current payment transaction by the electronic, device or the commerce device; and
transmitting the verification information to the commerce device indicating that the one or both of validity and the integrity of the decrypted payment data is not confirmed, representing that the decrypted first cryptographic hash does not match the second cryptograph hash, when the result of the determining is that the decrypted first cryptographic hash does not match the second cryptographic hash, for a non-confirming of the payment of the current payment transaction by the electronic devise or the commerce device.