Patent ID: 9659291
Date: 2017-05-23
CPC Classifications: G06Q

Claim:
1. A method for implemented using a system that includes an electronic device, and a banking server and a payment card, the payment card including a controller chip, said method comprising: (a) receiving, by the electronic device, transaction information related to a transaction and to a payment for the transaction; (b) accessing, by the electronic device, the payment card via a portable payment device which is a plug-and-play device; (c) generating, by the electronic device cooperating with the payment card, a payment command that includes at least the transaction information; (d) establishing, by the electronic device cooperating with the payment card and the banking server, a session with the banking server, the session providing a secure communication channel between the electronic device and the banking server; (e) transmitting, by the electronic device, the payment command to the banking server under the session established in step (d); (f) identifying, by the banking server, validity of the payment card based on the payment command in response to receipt of the payment command; (g) processing, by the banking server, the payment according to the transaction information included in the payment command after identifying the payment card as valid; (h) generating, by the banking server, a payment result after processing the payment; and (i) receiving, by the electronic device, the payment result from the banking server under the session established in step (d); wherein step (d) further comprises sub-steps of: (d1) obtaining, by the electronic device from the payment card, a virtual account associated with a bank account that is between a user of the portable payment device and a bank that operates the banking server and that is used for the payment; (d2) transmitting, by the electronic device to the banking server, a session request that includes the virtual account; (d3) generating, by the banking server, a session identification (ID) in response to receipt of the session request; (d4) transmitting, by the banking server to the electronic device, the session ID; (d5) transmitting, by the electronic device to the payment card, the session ID; (d6) generating, by the payment card, a first authentication code based on the session ID and a card identification key stored therein; (d7) transmitting, by the payment card to the electronic device, the first authentication code; (d8) transmitting, by the electronic device to the banking server, the first authentication code; (d9) finding, by the banking server, a user identification key stored therein according to the virtual account included in the session request that is transmitted by the electronic device in sub-step (d2), the user identification key corresponding to the card identification key and being dedicated to the virtual account; (d10) generating, by the banking server, a second authentication code based on the session ID generated in sub-step (d3) and the user identification key found in sub-step (d9); (d11) determining, by the banking server, whether the first authentication code transmitted by the electronic device in sub-step (d8) conforms with the second authentication code generated in sub-step (d10); and (d12) transmitting, by the banking server to the electronic device, a session response upon determining in sub-step (d11) that the first authentication code conforms with the second authentication code; and wherein the establishing of the session in step (d) is performed in accordance with the session response.