Abstract:
A secure transaction system constituted of: a two dimensional platform arranged for variable display; at least one antenna arranged to receive a signal from a contactless element, each of the at least one antenna secured at a fixed location on the two dimensional platform; a transaction server; and a poster communication device in communication with each of the at least one antenna and with the transaction server, the poster communication device arranged to read an identifier of a contactless element juxtaposed with a particular one of the at least one antenna, and transmit the read contactless element identifier and identification information associated with the particular antenna to the transaction server.

Description:
TECHNICAL FIELD 
       [0001]    The present disclosure relates generally to the field of transaction systems and in particular to a system and method for performing a secure transaction between a mobile device or a computer and a transaction server. 
       BACKGROUND ART 
       [0002]    Payments by credit or debit cards represent a large portion of consumer spending. Historically, credit or debit cards were encoded with a magnetic stripe, which allows a transaction responsive to a transaction device arranged to read information encoded on the magnetic stripe, in a secured manner. The device reading the magnetic stripe is typically in communication with the credit card issuer via a transaction network, the credit card issuer ultimately approving the transaction. Credit or debit cards are unfortunately susceptible to theft which may be unrealized by the user for a significant period of time. 
         [0003]    Advances in technology have led to the development of contactless smart cards, such as those defined under ISO/IEC 7210 and ISO/IEC 14443, also known as Near Field Communication (NFC). Similar technology is available meeting other standards or protocols generally under the term radio frequency identification (RFID), with the range of RFID typically restricted to be of the same order as that of NFC. The term contactless element (CE) as used throughout this document refers to any short range communication device operating under any of NFC, RFID or other short range communication standard with range on the same order as that of NFC, and typically require that the CE be juxtaposed with a reader. The use of optically readable codes are specifically included herein with the definition of a CE. Such CE smart cards may be used for transactions, however since they may be read by any reader within about 4 cm, they do not provide for increased security. As such, CE smart cards are typically only used for low value transactions, wherein a small value is pre-loaded on the CE smart card, and the small value is depreciated with each transaction until a limit is reached. 
         [0004]    Mobile devices (MDs) are increasingly being used for financial transactions due to their ubiquity, available screen and input devices. An MD as used herein includes any electronic MD used for personal functionalities such as multimedia playing, data communication over a network or voice communication. One embodiment of an MD is a mobile station, also known as a mobile communication device, mobile phone, mobile telephone, hand phone, wireless phone, cell phone, cellular phone, cellular telephone, mobile handset or cell telephone. 
         [0005]    With the development of IEEE 802.11, and the broad establishment of the resultant wireless networks, various MDs have been developed which communicate over available wireless networks in addition to cellular telephone capabilities. Furthermore, various MDs have been developed with the ability to access the Internet both over a wireless network and/or over a cellular network. 
         [0006]    The ubiquitous MD, having an associated means for user identification and charging expenses, presents an opportunity to utilize the MD as an electronic wallet. There are several known methods for providing a service or a product, and in particular, payment for products or services other than phone usage or airtime, by using a mobile station. 
         [0007]    CEs in cooperation with an MD have been developed into two main groups, devices which are connected to a controller of the MD, such as to the MD&#39;s CPU, and can communicate therewith, and devices which are not connected to the MD&#39;s CPU. In the case of CEs connected to the MD&#39;s CPU one can find various devices, such as NFC devices on SIM cards, also known as “SIM Contactless Element” (SCE), external cards such as SD cards with NFC devices, SIM add-on Contactless Elements (SCCE), and NFC devices found within the MD&#39;s hardware. The above group of devices denoted herein as “embedded CE” (ECE) devices can be used in the same manner as CE devices which are not connected to the MD&#39;s CPU for applications where the CE reader communicates with the CE device directly and the communication doesn&#39;t rely on any action of the MD&#39;s CPU. It is to be noted that in the event that the CE comprises an optically readable code displayed on a display of the MD, the MD is inherently an ECE device. 
         [0008]    The group of CEs which are not connected to an MD CPU may include NFC or RFID tags, stickers, key fobs, optically readable codes which may be affixed to the MD, and other form factors. Such a CE, when secured in relation to the MD may thus be utilized to provide an identification number read by a reader within proximity of the CE. 
         [0009]    As transaction systems have become more sophisticated and in more widespread use, the incidence of fraudulent transactions have also increased. In particular, both “phishing” and “man in the middle” attacks have been shown to defeat many CE based security systems. In a phishing attack, a user is sent a message indicating that connection to a specific uniform resource locator (URL) is required, however the URL, while appearing to be a legitimate URL, is actually that of a fraudulent server. The user may not recognize, or notice, the slight change in URL, whose actual address refers to a fraudulent server. In such a manner personal information and passwords may be obtained from an unsuspecting user. 
         [0010]    Man in the middle attacks are particularly useful against ECE devices, wherein the CE may be read by a fraudulent reader, and relayed to a remote purchasing location without the user being aware. 
         [0011]    Recently CE enabled posters have become common, with the poster having embedded CE devices therein. A user with an ECE juxtaposes the CE with an embedded CE, which acts to generate a pointer on the MD to a target URL, perhaps offering a discount. Unfortunately, a legitimate embedded CE may be covered by a fraudulent embedded CE, or may be covered by a blocking material with an adjacent fraudulent CE attached, causing the MD to generate a pointer to a fraudulent URL. 
         [0012]    What is needed, and is not provided by the prior art, is a method of increased security without requiring significant effort on the part of the user, and preferably appropriate for use with any MD, without requiring specific features, applications, or devices. Such a method is preferably equally appropriate for use with a computer or other device connecting to a transaction server over a network, such as the Internet. 
       SUMMARY OF INVENTION 
       [0013]    In view of the discussion provided above and other considerations, the present disclosure provides methods and apparatus to overcome some or all of the disadvantages of prior and present methods of performing a secure transaction. Other new and useful advantages of the present methods and apparatus will also be described herein and can be appreciated by those skilled in the art. 
         [0014]    Certain embodiment enable a secure transaction system constituted of: a two dimensional platform arranged for variable display; at least one antenna arranged to receive a signal from a contactless element, each of the at least one antenna secured at a fixed location on the two dimensional platform; a transaction server; and a poster communication device in communication with each of the at least one antenna and with the transaction server, the poster communication device arranged to read an identifier of a contactless element juxtaposed with a particular one of the at least one antenna, and transmit the read contactless element identifier and identification information associated with the particular antenna to the transaction server. 
         [0015]    Certain embodiments enable a secure transaction system comprising: a two dimensional platform arranged for variable display; at least one antenna arranged to receive a signal from a contactless element, each of the at least one antenna secured at a fixed location on the two dimensional platform; a transaction server; and a poster communication device in communication with each of the at least one antenna and with the transaction server, the poster communication device arranged to read an identifier of a contactless element juxtaposed with a particular one of the at least one antenna, and transmit the read contactless element identifier and identification information associated with the particular antenna to the transaction server. 
         [0016]    In certain further embodiments, the transaction server comprises a database, wherein the transaction server is arranged to: transmit information to a mobile device responsive to address information stored on the database associated with the read contactless element identifier, the mobile device associated with the contactless element. 
         [0017]    In certain further embodiments, the identification information associated with the particular antenna is stored in a memory associated with the particular antenna. In other certain further embodiments, the identification information associated with the particular antenna is stored in a memory associated with the poster communication device. 
         [0018]    In certain further embodiments, the poster communication device is further arranged to transmit loyalty benefit information associated with the particular one of the at least one antenna to the transaction server. 
         [0019]    In other certain further embodiments, the transaction system further comprises a provider associated device in communication with the transaction server, the provider associated device having an identifier, the provider associated device arranged to: read the identifier of the contactless element responsive to the contactless element being juxtaposed therewith; and transmit the read contactless element identifier and the provider associated device identifier to the transaction server, the transaction server arranged to transmit transaction information associated with the contactless element to the provider associated device responsive to the received read contactless element identifier and the received provider associated device identifier. In certain yet further embodiments the transmitted transaction information comprises loyalty benefits associated with contactless element identifier. 
         [0020]    In certain further embodiment, the transaction system further comprises a provider associated device in communication with the transaction server, the provider associated device associated with particular antenna identification information, and wherein: the transaction server comprises a customer wallet functionality; the contactless element is associated with a mobile device, the mobile device in communication with the transaction server; and the identification information associated with the particular antenna is associated with a particular provider, the customer wallet functionality arranged to transmit to the mobile device at least one of payment options and loyalty benefits responsive to the particular antenna identification information. In certain yet further embodiments the transaction server is arranged to obtain location information for the mobile device, and to compare the obtained location information for the mobile device with location information associated with the particular antenna identification information, the transaction server further arranged to prevent a transaction in the event that the obtained location information for the mobile device is not consonant with the location information associated with the particular antenna identification information. 
         [0021]    Independently, certain embodiments enable a method of performing a secure transaction comprising: providing at least one antenna arranged to receive a signal from a contactless element, each of the provided at least one antenna secured at a fixed location on a two dimensional platform; reading an identifier of a contactless element juxtaposed with a particular one of the provided at least one antenna; and transmitting the read contactless element identifier and identification information associated with the particular antenna to a transaction server, and enabling a transaction characteristic responsive to the read identifier. 
         [0022]    In certain further embodiments, the method further comprises: transmitting information to a mobile device responsive to stored address information associated with the read contactless element identifier, the mobile device associated with the contactless element. In other further embodiments the method further comprises: transmitting information to a mobile device responsive to stored address information associated with the read contactless element identifier, the mobile device associated with the contactless element, the transmitted information comprising loyalty benefit information associated with the particular one of the provided at least one antenna. 
         [0023]    In certain further embodiment, the method further comprises: transmitting loyalty benefit information associated with the particular one of the at least one antenna to the transaction server. In other certain further embodiments, the method further comprises: providing a provider associated device in communication with the transaction server; reading the contactless element identifier responsive to the contactless element being juxtaposed with the provided provider associated device; transmitting the read contactless element identifier and a provider associated device identifier to the transaction server; and transmitting transaction information associated with the contactless element to the provider associated device responsive to the received read contactless element identifier and the received provider associated device identifier. In certain yet further embodiments, the transmitted transaction information comprises loyalty benefits associated with the contactless element identifier. 
         [0024]    In certain further embodiments, the method further comprises transmitting to the mobile device at least one of payment options and loyalty benefits responsive to the particular antenna identification information. In certain yet further embodiments, the method further comprises: obtaining location information for the mobile device; comparing the obtained location information for the mobile device with location information associated with the particular antenna identification information; and preventing a transaction in the event that the obtained location information for the mobile device is not consonant with the location information associated with the particular antenna identification information. 
         [0025]    Independently, certain embodiments enable a secure transaction system comprising: a transaction server, the transaction server comprising a customer wallet functionality; a provider associated device in communication with the transaction server, the provider associated device comprising an identifier; and a mobile device in communication with the transaction server, the customer wallet functionality arranged to transmit to the mobile device at least one of payment options and loyalty benefits responsive to the provider associated device identifier. 
         [0026]    In certain further embodiments, the transaction server is arranged to obtain location information for the mobile device, and to compare the obtained location information for the mobile device with location information associated with the provider associated device, the transaction server further arranged to prevent a transaction in the event that the obtained location information for the mobile device is not consonant with the location information associated with the provider associated device. In certain further embodiments, the transaction server is further in communication with a customer payment resource, the transaction server arranged to settle a transaction in cooperation with the customer payment resource. In certain further embodiments the provider associated device is a web server. 
         [0027]    Additional features and advantages of the invention will become apparent from the following drawings and description. 
     
    
     
       BRIEF DESCRIPTION OF DRAWINGS 
         [0028]    For a better understanding of the invention and to show how the same may be carried into effect, reference will now be made, purely by way of example, to the accompanying drawings in which like numerals designate corresponding elements or sections throughout. 
           [0029]    With specific reference now to the drawings in detail, it is stressed that the particulars shown are by way of example and for purposes of illustrative discussion of the preferred embodiments of the present invention only, and are presented in the cause of providing what is believed to be the most useful and readily understood description of the principles and conceptual aspects of the invention. In this regard, no attempt is made to show structural details of the invention in more detail than is necessary for a fundamental understanding of the invention, the description taken with the drawings making apparent to those skilled in the art how the several forms of the invention may be embodied in practice. In the accompanying drawings: 
           [0030]      FIG. 1A  illustrates a high level block diagram of an exemplary embodiment of a secure transaction system arranged for use with posters having embedded thereon one or more antennas; 
           [0031]      FIG. 1B  illustrates a high level flow chart of a method of operation of the system of  FIG. 1A ; 
           [0032]      FIG. 2A  illustrates a high level block diagram of the transaction system of  FIG. 1A  in further communication with a PAD; 
           [0033]      FIG. 2B  illustrates a high level flow chart of a method of operation of the system of  FIG. 2A ; 
           [0034]      FIG. 3A  illustrates a high level block diagram of a CE based transaction system known to the prior art further illustrating certain vulnerabilities therein; 
           [0035]      FIG. 3B  illustrates a high level block diagram of an exemplary embodiment of a CE based secure transaction system utilizing a transaction server to prevent fraud; 
           [0036]      FIG. 4  illustrates protection provided by certain exemplary embodiments in the event of a relay attack; 
           [0037]      FIG. 5A  illustrates a high level block diagram of the advantageous partitioning of certain embodiments of a transaction system arranged to provide improved security for transactions in cooperation with a mobile device; 
           [0038]      FIG. 5B  illustrates a transaction flow utilizing the various domains of  FIG. 5A ; 
           [0039]      FIG. 5C  illustrates a transaction flow utilizing the various domains of  FIG. 5A  in the absence of an access point poster; 
           [0040]      FIG. 6A  illustrates a high level block diagram of an embodiment of the arrangement of  FIG. 5A , wherein the access point is replaced by a web server; and 
           [0041]      FIG. 6B  illustrates a transaction flow utilizing the various domains of  FIG. 6A . 
       
    
    
     DESCRIPTION OF EMBODIMENTS 
       [0042]    Before explaining at least one embodiment in detail, it is to be understood that the invention is not limited in its application to the details of construction and the arrangement of the components set forth in the following description or illustrated in the drawings. The invention is applicable to other embodiments or of being practiced or carried out in various ways. Also, it is to be understood that the phraseology and terminology employed herein is for the purpose of description and should not be regarded as limiting. In particular, the term connected as used herein is not meant to be limited to a direct connection and includes communication of any sort, and allows for intermediary devices or components without limitation. 
         [0043]    In the following description, the term mobile device (MD) includes any electronic mobile device used for personal functionalities such as multimedia playing, data communication over a network or voice communication, including but not limited to a mobile station (MS). For clarity, the term MS refers to any mobile communication device, mobile phone, mobile telephone, hand phone, wireless phone, cell phone, cellular phone, cellular telephone, cell telephone, or other electronic device used for mobile voice or data communication over a network of base stations. Although in the following description, communication is described in certain embodiments using an example of cellular communication, particularly, global system for mobile communication (GSM), it will be understood that the scope of the invention is not limited in this respect, and that the communication method used may be based on any suitable communication protocol, including without limitation, Universal Mobile Telecommunications System (UMTS), IEEE 802.11x, IEEE 802.16x and CDMA. The terms “decrypted” and “decoded” are used interchangeably and have the same meaning throughout this document. 
         [0044]      FIG. 1A  illustrates a high level block diagram of an exemplary embodiment of a secure transaction system  100  arranged for use with posters  110  having embedded thereon one or more antennas  120  and  FIG. 1B  illustrates a high level flow chart of a method of operation of the system of  FIG. 1A , the figures being described together. In one embodiment, each antenna  120  is associated with an advertisement, the antenna  120  being embedded in proximity to the advertisement. A poster communication device (PCD)  130  is provided with each poster  110  and is in communication with a transaction server (TS)  140  over a communication network  150 , which may be wired, wireless, or a combination thereof, without limitation. Each PCD  130  comprises: one or more antenna connections  160 ; an optional database  165 ; and a communication module  170 . Each antenna  120  is connected to an associated PCD  130 . In one embodiment, each antenna  120  is connected to a respective antenna connection  160  of the associated PCD  130 . In another embodiment, a single antenna connection  160  is provided in the associated PCD  130 , each associated antenna  120  connected to the single antenna connection  160  and each antenna  120  exhibiting a particular identifier or address, thus enabling addressed based bus communication. In one embodiment, an identifier or address associated with each antenna  120  is stored on optional database  165  of the associated PCD  130 . TS  140  comprises: a communication module  180 ; and a database  190  which contains the identifiers or addresses of each of the antennas  120  and its respective content such as but not limited to a URL address. TS  140  is further in communication with a plurality of MDs  200  over a communication network  210 , which may be the same as communication network  150 , or a different network, without limitation. Each MD  200  comprises: a CE  220 ; a display  230 ; and an entry device  240 . CE  220  contains thereon an identifier, identifying the respective MD  200  to TS  140 , the identifier arranged to be readable by each antenna  120  when juxtaposed in proximity thereof. In one embodiment, entry device  240  is a keypad or keyboard. In another embodiment, display  230  and entry device  240  constitute a single touch screen. The CE  220  readable identifier may be the MSISDN or other address of MD  200 , without limitation. 
         [0045]    In stage  1000 , each PCD  130  is registered with TS  140  and each MD  200  is registered with TS  140 . In particular, each MD  200  provides a communication address, such a telephone number, and further provides the readable identifier of its CE  220  to TS  140 . Preferably, the readable ID does not directly provide addressing information for CE  220 , and such addressing information cross-reference is only available via TS  140  responsive to stage  1000 . Additionally, each PCD  130  is registered with TS  140 . In one embodiment, the address of each PCD  130  is stored on database  190  and is stored associated with provider information, such as a target URL or supplier data and discount data. Preferably, for each PCD  130 , a plurality of identifiers or addresses for each of the respective antennas  120  are further stored. In one embodiment, each antenna  120  of each PCD  130  is identified in relation to provider information, such as a related target URL or loyalty program database. Such provider information is preferably consonant with displayed information on poster  110 , the displayed information acting as advertising content for the relevant provider. 
         [0046]    In stage  1010 , CE  220  of an MD  200  is juxtaposed with a particular antenna  120  and the particular antenna  120  reads the identifier of MD  200  from CE  220 . CE  220  of the MD  200  is juxtaposed to the particular antenna responsive to the user&#39;s interest based on the displayed information as described above. The associated PCD  130  receives the read identifier of the juxtaposed MD  200  from the particular antenna  120 . In stage  1020 , PCD  130  transmits the read identifier of the juxtaposed MD  200  to transaction server  120  and further transmits an identifier or address of PCD  130  and/or an address or identifier of the particular antenna  120  to TS  140  via communication network  150 . In the event that a URL associated with the particular antenna is stored on optional database  165  of the associated PCD  130 , the URL is further transmitted to TS  140 . 
         [0047]    In stage  1030 , TS  140  compares the received readable identifier of the juxtaposed MD  200  with readable identifiers stored on database  190  responsive to stage  1000 . In the event that the received readable identifier matches a readable identifier stored on database  190 , communication module  180  communicates with MD  200 , responsive to the stored address of MD  200 . TS  140  transmits the URL or any other content associated with the particular antenna  120  to MD  200  and the URL is displayed on display  230  of MD  200 . In stage  1040 , the user connects to the desired website by selecting the displayed URL with entry device  240 . 
         [0048]    Thus, the URL to be sent to MD  200  is determined by the antenna location on poster  110 , and controlled by TS  140 . Each antenna  120  reads only the publicly available identifier of CE  220  and does not directly transmit information to MD  200 , thus preventing fraud. 
         [0049]      FIG. 2A  illustrates a high level block diagram of an exemplary embodiment of a transaction system  300  and  FIG. 2B  illustrates a high level flow chart of a method of operation of transaction system  300 , the figures being described together. Transaction system  300  is in all respects similar to transaction system  100  of  FIG. 1A , with the exception that TS  140  is further in communication with a provider associated device (PAD)  310 , which in one non-limiting embodiment is implemented as a sales terminal. Additionally, communication networks  150  and  210  are illustrated as a single network for simplicity, however this is not meant to be limiting in any way. PAD  310  comprises one of: a merchant tag containing a CE; and an NFC MD arranged to read a CE of a user MD. Additionally, each antenna  120  has a loyalty benefit associated therewith which, in one embodiment, is stored on database  190  of TS  140 . 
         [0050]    In stage  2000 , each PCD  130  is registered with TS  140 , and each MD  200  is registered with TS  140  as described above in relation to stage  1000 . Preferably, in place of a URL, a particular discount or loyalty benefit is stored associated with each antenna  120  identifier or address. Additionally, PAD  310  is registered with TS  140 . As indicated above, registration of MD  200  with TS  140  comprises an address of MD  200 , such a telephone number or other accessible network address, as well as the readable ID of CE  220 . 
         [0051]    In stage  2010 , CE  220  of an MD  200  is juxtaposed with a particular antenna  120  and the particular antenna  120  reads the identifier of MD  200  from CE  220 . Preferably, discount or other offers are further displayed on poster  110  in a location associated with each of the particular antennas  120 , thus serving an advertisement function as described above. The associated PCD  130  then receives the read identifier of MD  200  from the particular antenna  120 . In stage  2020 , PCD  130  transmits the read identifier of MD  200  to TS  140  with antenna identification or address information of the particular antenna  120 . Optionally, PCD  130  transmits an address of PCD  130  and/or the particular antenna  120  to TS  140 . In the event that the loyalty benefit information associated with the particular antenna is stored on optional database  165  of the associated PCD  130 , the loyalty benefit information is further transmitted to TS  140 . In stage  2030 , TS  140  compares the received read identifier of MD  200  with identifiers stored on database  190 . TS  140 , which in one embodiment stores on database  190  the loyalty benefit information associated with the particular antenna  120 , and in another embodiment receives the loyalty benefit information in the transmission from PCD  130 , associates the loyalty benefit with the identifier of MD  200 . In one embodiment, communication module  180  communicates with MD  200 , responsive to the read identifier of MD  200  received from PCD  130 , and the address information of stage  2000 , and notifies MD  200  of the received loyalty benefit. The received loyalty benefit may have selection options. In one embodiment, the address of one of PCD  130  or particular antenna  120  is further associated with one or more PADs  310 . In such embodiment, communication module  180  further communicates the loyalty or other benefit to the one or more associated PADs  310  along with the readable identifier of MD  200 . 
         [0052]    In stage  2040 , a user juxtaposes CE  220  of MD  200  with the NFC port of PAD  310 . PAD  310  reads the readable identifier of CE  220  via the NFC port. In stage  2050 , PAD  310  communicates with communication module  180  of TS  140  and transmits the read identifier of CE  220  and the address of PAD  310  to TS  140 . In one embodiment, PAD  310  further calculates the amount to be paid based on transaction information and any loyalty or other benefits associated with both user MD  200  and PAD  310  received from TS  140  prior to the juxtaposition of stage  2040 , as described above in relation to stage  2030 . PAD  310  further communicates with communication module  180  of TS  140  and transmits an authentication request to TS  140 . In stage  2060 , TS  140  compares the received read identifier of CE  220  with stored identifiers on database  190  of stage  2000 . In stage  2070 , TS  140  transmits to PAD  310  any loyalty benefit associated with both user MD  200  and PAD  310  not previously communicated. 
         [0053]    In stage  2080 , a product is scanned by PAD  310  and the price of the product and any loyalty benefit associated with the product is displayed on PAD  310 . The transaction is preferably completed as described in International Patent Application Publication S/N WO 2011/083471 A1 entitled “System and Method for Performing a Transaction Responsive to a Mobile Device”, the entire contents of which is incorporated herein by reference. 
         [0054]      FIG. 3A  illustrates a high level block diagram of a CE based transaction system known to the prior art further illustrating certain vulnerabilities therein. In some detail, an MD  410  is illustrated comprising a display  230 ; an entry device  240 , which may be incorporated as part of display  230 , without limitation; a computing device  420 ; an SIM or USIM card  425 ; and a CE  430 , comprising an NFC controller, a secured element and an antenna. Computing device  420  is in communication with each of display  230 , entry device  240 , SIM or USIM card  425  and CE  430 . Smart poster tag  440  is further provided. Other communication devices are typically provided, as is known in the field of mobile devices. 
         [0055]    In operation, when CE  430  is juxtaposed with smart poster tag  440 , power is provided to smart poster tag  440  from CE  430 , CE  430  further sends a request for information to smart poster tag  440 , and CE  430  receives an answer from smart poster tag  440 . Preferably, all of the power and communication is provided in accordance with one or more know near field communication standards. The data received from smart poster tag  440  is utilized by MD  410  to direct the user to a web site responsive to the received data from smart poster tag  440 , initiate a telephone call, send a message to an address responsive to the received data or launch an application. 
         [0056]    Such a process is problematic for a number of reasons. In particular, smart poster tag  440  may be blocked or replaced by a fraudulent tag thus directing MD  410  to a phishing or other fraudulent web site. Alternately, by utilizing multiple fraudulent smart poster tags  440 , denial of service may be created. Furthermore, malware of worms may be loaded into MD  410  responsive to such a fraudulent smart poster tag  440 , since the answer received from smart poster tag  440  is passed to CPU  420  via the NFC controller of CE  430 . A secured element is illustrated as a portion of CE  430 , such a secured element represents a secure storage location which is not modifiable without following strict security protocols. 
         [0057]      FIG. 3B  illustrates a high level block diagram of an exemplary embodiment of a CE based secure transaction system utilizing a transaction server to prevent fraud. The secure transaction system of  FIG. 3B  comprises an MD  200  and a poster  110 . Poster  110  may be replaced with a PAD  310  as described above in relation to  FIG. 2A  without exceeding the scope. MD  200  comprises: a display  230 ; an entry device  240 , which may be incorporated as part of display  230 , without limitation; a computing device  420 ; an SIM or USIM card  425 ; and a CE  220 , comprising an NFC controller, a secured element and an antenna, with an ID associated with MD  200  stored thereon, preferably within the SE portion of CE  220 ; and a radio communication  450  device utilized for network communication by MD  200 . Computing device  420  is in communication with each of display  230 , entry device  240 , SIM or USIM card  425 , CE  220  and radio communication device  450 . Poster  110  is provided comprising: at least one antenna  120 , with an associated identifier, and a PCD  130  comprising a communication module  170  and an antenna connection  160 . Antenna  120  is coupled to PCD  130  via antenna connection  160  as described above. Antenna  120  is illustrated as having secured thereon, in a memory or hardwired location an ID, however this is not meant to be limiting in any way, and as described above the identifier may be stored with PCD  130  without exceeding the scope. TS  140  is further provided in communication with PCD  130 . TS  140  comprises a customer database  190 A and a provider database  190 B, which illustrates further detail of database  190  described above. TS  140  is further in communication with a financial settlement institution  470 , and in radio communication with MD  200  via network  210 , particularly with radio communication device  450 . 
         [0058]    In operation, advantageously only an identifier of CE  220  of MD  200  is read by antenna  120 , as indicated by the dashed arrow. It is to be understood that there is no requirement for smart poster tag  110 , and the operation thereof may be combined within a PAD, as described above in relation to PAD  310 , without exceeding the scope. The read identifier of CE  220  is transmitted to TS  140  which, as indicated above, comprises a customer database  190 A and a customer database  190 B. TS  140 , responsive to the read identifier of CE  220  retrieves address information from customer database  190 A, and transmits any required communication to MD  200  over wireless network  210  in a controlled manner, thus decreasing vulnerability to the above mentioned attacks. Provider database  190 B comprises a list of registered PADs and antennas thus further blocking fraudulent transactions. 
         [0059]    The operation of the prior art system of  FIG. 3A  is vulnerable to a number of security attacks, which are prevented by the system of  FIG. 3B . In particular, in the event of an overlay of a genuine smart poster tag  440  by a fraudulent tag, the system of  FIG. 3A  will result in MD  410  being directed to an inappropriate server, responsive to the data stored on the fraudulent tag, such a server may by a phishing server. Preferably, as described above, the readable ID does not directly provide addressing information for CE  220 , and such addressing information cross-reference is only available via TS  140 . 
         [0060]    In contrast, as described above, in the system of  FIG. 3B  an ID of MD  200  is transferred to TS  140  via PCD  130 , accompanied by an ID associated with antenna  120 , and thus any fraudulent tag will not be successful, since the fraudulent tag, even if successful in reading the readable ID of CE  220 , the fraudulent tag is not capable of transmitting the read ID to TS  140 , and even if such a fraudulent tag is in communication with its own TS  140 , the only information obtained by the fraudulent tag is the read ID of MD  200 , which preferably does not directly provide addressing information. 
         [0061]      FIG. 4  illustrates protection provided by certain exemplary embodiments in the event of a relay attack, wherein the system of  FIG. 2A  is under attach by a relay attacker comprising: a fraudulent NFC reader  500  juxtaposed with MD  200 ; a relay connection  510  and a fraudulent transponder  520  juxtaposed with PAD  310 . Fraudulent NFC reader  500  is arranged to read any CE  220  information in proximity thereof; transponder  520  arranged to present to PAD  310  information read by fraudulent NFC reader  500 ; and relay connection  510  id arranged to provide communication between reader fraudulent NFC reader  500  and transponder  520 . TS  140  is shown in detail as described above in relation to  FIG. 3B . 
         [0062]    Prior art CE transaction devices are easily defrauded by such a relay attacker, since financial institution  470  has no knowledge of the fraudulence. This is particularly true, since all handshakes and security measures are passed seamlessly by relay connection  510 . 
         [0063]    The present embodiments block such transactions, since all CE based transactions are presented to TS  140  and transmitted for approval to the actual MD  200  via wireless network  210 . As such, the user of MD  200  is aware of the identifier and amount of the actual transaction being precipitated by such a relay attacker and does not provide ultimate authorization. 
         [0064]      FIG. 5A  illustrates a high level block diagram of the advantageous partitioning of certain embodiments of a transaction system arranged to provide improved security for transactions in cooperation with a mobile device. In particular, an Acquirers Domain  600 , also known as Merchants Domain  600 ; an Interoperability Domain  610 ; and an Issuer&#39;s Domain  620 , also known as customer&#39;s domain  620  are provided. Advantageously, security information is compartmentalized to prevent fraud. 
         [0065]    Acquirer&#39;s domain  600  comprises an acquirer  650 , comprising a service provider database (SPDB), containing information about the service providers associated therewith; an access point  660 ; a service provider  670 ; and an access point poster or tag  680 . While a single acquirer, or a database of a single acquirer  650 , access point  660 , service provider  670  and access point poster/tag  680  this is not meant to be limiting in any way and a plurality of any or all of acquirers  650 , or acquirer databases, access points  660 , service providers  670  and access point posters/tags  680  may be provided without exceeding the scope. The SPDB of acquirer  650  is in communication with access point  660  with a controlled communication path denoted acquirer&#39;s band  690 . 
         [0066]    Interoperability Domain  610  comprises a TS  710 , a financial settlement functionality  720 ; and a plurality of databases/functionality servers, wherein particularly illustrated are a customer wallet  731 , customer credential  732 , location based services  733 , loyalty platform  734 , coupons platform  735  and other databases  736 . Financial settlement functionality  720 , represented by a cloud, may comprise any, or all of, a brand&#39;s functionality, a hub functionality and an automated clearinghouse functionality, without exceeding the scope. TS  710  is in communication with each of financial settlement functionality  720 , and each of customer wallet  731 , customer credential  732 , location based services  733 , loyalty platform  734 , coupons platform  735  and other databases  736 . TS  710  is further in communication with the SPDB of acquirer  650 . 
         [0067]    Issuer&#39;s Domain  620  comprises customer&#39;s payment resources  750 , i.e. issuers of payment options and devices, and a customer MD  760  comprising a CE  770  and running an application  765  on a processor thereof, application  765  stored on a memory associated with MD  760 . MD  760  and CE  770  are in all respects similar to MD  200  and CE  220 , except as illustrated herein. Customer&#39;s payment resources  750  represents various card issuers, both debit and credit, as well as prepaid cards and e-wallets, without limitation. Customer&#39;s payment resources  750  are in communication with customer MD  760  via an issuer&#39;s controlled communication band  780 . MD  760 , particularly CE  770 , is in NFC or RFID communication with access point  660 , which in one embodiment represents a PAD as described above. Customer&#39;s payment resources are further in communication with TS  710 . MD  760  is further in communication with TS  710 , over a network, such as a cellular network, without limitation. 
         [0068]      FIG. 5B  illustrates a transaction flow utilizing the various domains of  FIG. 5A ,  FIGS. 5A and 5B  being described herein together for ease of understanding. Advantageously, TS  710  is arranged to provide customer MD  760  with relevant checkout information, while maintaining security and fraud control. 
         [0069]    In stage  3000 , a customer opens payment application  765  on customer MD  760  and enters a PIN which has been preregistered with TS  710 . MD  760  generates a pseudo-random number (PRN) responsive to a PRN key which was initially loaded at registration, and transmits to TS  710  a readable ID of CE  770 , the generated PRN and location information. Location information may be generated by one or both of on board GPS electronics, or responsive to base station transmission calculations. The readable ID of CE  770  may be directly transferred, or an identifier may be utilized without exceeding the scope. The readable ID of CE  770  is denoted ID1 for ease of identification, and is preferably either identical with, or uniquely related to an ID readable from CE  770  as described above in relation to CE  220 . 
         [0070]    In stage  3010 , TS  710  authenticates the received PRN and identifies the access points in geographic proximity to MD  760 . In particular, in the event that only a single supplier registered with TS  710  exhibits a location consonant with the received location information, TS  710  transmits the name of the identified location to MD  760  for confirmation. In the event that a plurality of suppliers are consonant with the received location information, for example in a mall, a list of registered suppliers with consonant location information is transmitted to customer MD  760 , and the appropriate supplier, i.e. the appropriate access point  660 , wherein MD  760  is currently located is selected by a user and the selection is transmitted to TS  710 . 
         [0071]    Alternatively, in the event that access point poster/tag  680  is provided, customer MD  760  may be juxtaposed with access point poster/tag  680 . In such an embodiment, as described above, access point poster  680  functions to input the readable identifier of CE  770  and transmits the read identifier of CE  770  to TS  710 , thus providing TS  710  with location based information regarding customer MD  760 . In particular, a merchant ID is obtained responsive to customer MD  760 . 
         [0072]    In the event that the location information provided by customer MD  760  is not consonant with the location information for access point  660 , in stage  3050  a fraudulent transaction if flagged, and in stage  3120  the transaction is refused. The term consonant is used geographically, to include all potential matches within the accuracy of the location identification equipment, and is thus not meant to be an exact match of pinpoint accuracy. 
         [0073]    Alternatively, a prior art poster/tag, which transmits a merchant ID may be utilized, and customer MD  760  reads the merchant ID. Advantageously, in place of a pointer of the prior art, customer MD  760  is arranged to transmit the read ID to TS  710  to provide merchant ID and location information for customer MD  760  to TS  710 . 
         [0074]    In stage  3020  a merchant ID associated with the current location of customer MD  760  is transmitted to the various databases  1331 - 1336 , denoted herein as cloud, to determine if any promotions, loyalty benefits, pre-purchase coupons, or gift certificates, without limitation, are relevant to the current customer MD  760  location. and in particular to the access point location of customer MD  760 . Thus, any redemption of any relevant coupons from coupons platform  1335 , accumulation/redemption or loyalty discounts from loyalty platform  1334  are retrieved by customer wallet functionality  1331 . Similarly, information regarding payment options for the identified access point  660  is determined, and the relevance to the customer&#39;s wallet is retrieved from customer wallet functionality  1331 . Any relevant coupons retrieved from customer wallet  1331  and/or coupons platform  1335  are optionally validated by the issuer before presenting them to the Check Out Wallet (CHOW). In stage  3030  CHOW information is generated by TS  710  and transmitted to customer MD  760 . Advantageously, the CHOW information is location relevant, exhibiting only offers, discounts or payment options relevant to the current merchant where customer MD  760  is located. 
         [0075]    In an optional portion of stage  3040 , a user of customer MD  760  may modify the received CHOW, particularly selecting from among various payment options and/or agreeing to utilize one or more benefits offered. The CHOW information is approved, or optionally modified, and the confirmation with optional modifications are transmitted to TS  710 . 
         [0076]    In stage  3050 , TS  710 , responsive to the received CHOW based selections, or simple CHOW approval, of stage  3040 , generates a cap financial transaction request from an issuer within customer&#39;s payment resources  750 . The cap financial request preferably comprises the above mentioned ID1, the initially generated PRN, an identifier of the selected payment method of the approved CHOW and an identifier of access point  660 . The issuer, or other payment resource, calculates a risk parameter, and generates an authorization number. The risk parameter typically comprises a financial transaction limit, below which no further authorization is required. 
         [0077]    In stage  3060 , responsive to the received authorization number, TS  710  generates a message for transmission to access point  660  comprising: ID1, the PNR, the modified CHOW information and an identifier of the issuer. 
         [0078]    When the user associated with customer MD  760  has determined the precise desired transaction, in stage  3070  CE  770  is juxtaposed with access point  660 , in a process known as Tap and Go. Access point  660  reads the ID1 and PRN from CE  770  and compares it with the ID1 and PRN received from TS  710 . Access point  660  then calculates the amount left to be paid of the transaction. Access point  660  generates an authorization request message with a payment identifier and transmits it to TS  710 . Optionally, depending on the time allowed for the Tap and Go, CE  770  similarly obtains identification information, total transaction amount and the payment identifier from access point  660  via RFID or NFC, for use as will be described further below. 
         [0079]    The authorization request message generated by access point  660  is transmitted by access point  660  via acquirer&#39;s band  690  to acquirer  650 , and acquirer  650  transmits an authorization request message to TS  710 . The acquirer  650  authorization request message preferably comprises: ID1, the PRN, an identifier of access point  660 , any loyalty, coupon, or other discount information to be settled, the generated payment identifier and the amount. In one embodiment, the loyalty and coupon information is transmitted directly to TS  710  from access point  660 . 
         [0080]    In optional stage  3080 , customer MD  760  presents a confirmation message for acceptance by a user, preferably requiring input of a code, such as PIN for authorization. Responsive to an acceptance gesture, and/or code input, customer MD  760  transmits a transaction acceptance message to TS  710  comprising ID1, PRN, read access point  660  identifier, payment identifier read from access point  660  and the amount. In one embodiment, a subset of the above information is transmitted so as not to exceed the time limit of the Tap and Go. 
         [0081]    TS  710  thus receives an authorization request message generated by access point  660  and optionally a transaction acceptance message generated by customer MD  760 . In optional stage  3090  in the event that the elements of the received authorization request message from access point  660  and transaction acceptance message from MD  760  match, i.e. the messages ID1, PRN, access point  660  identifier, payment ID and amount match, in stage  3100  TS  710  proceeds to compare the transaction amount with the received risk information. In the event that the messages do not match, an error condition is flagged and the transaction is not completed. In the event that stage  3090  is not performed, stage  3100  is performed without relevance thereto. 
         [0082]    In the event that in stage  3100  the transaction amount of the transaction acceptance message is less than that approved by the received risk information, in stage  3110  the transaction is authorized by TS  710 . The authorization number received from the issuer by TS  710  in stage  3060  is preferably transmitted to access point  660  via acquirer  650  through acquirer band  690 . A transaction confirmation message is similarly transmitted by TS  710  to customer payment resources  1350 , e.g. to an issuer, preferably comprising ID1, the PRN and the amount for settlement. Any gift, coupon or loyalty information is similarly transmitted to the respective database/server. A transaction approval message is preferably transmitted to MD  760  by TS  710 , optionally include further local relevant information, such as promotions by adjacent vendors. 
         [0083]    In the event that in stage optional  3090  details of the authorization message do not equal the acceptance message in stage  3110  the transaction is refused. In the event that in stage  3100  the transaction acceptance message exceeds the risk parameters, in stage  3110  the transaction is refused. Optionally, as will be described further below, additional security precautions are taken, to thereby authorize the transaction. 
         [0084]    Thus, by the utilization of the server based architecture described herein, location based promotions and transaction completion may be advantageously accomplished. 
         [0085]      FIG. 5C  illustrates a transaction flow utilizing the various domains of  FIG. 5A  in the absence of access point poster  680 , and further requiring an additional authorization in the event that the amount exceeds the received risk information. Thus, the transaction flow is in all respects similar to that of  FIG. 5B , described above, except as detailed herein. 
         [0086]    In the absence of access point poster  680 , location information is in one embodiment supplied responsive to one or both of customer MD  760  GPS electronics or responsive to base station transmission calculations. Thus in stage  4000 , a customer opens payment application  765  on customer MD  760  and enters a PIN which has been preregistered with TS  710 . MD  760  generates a pseudo-random number (PRN) responsive to a PRN key which was initially loaded at registration, and transmits to TS  710  a readable ID of CE  770 , the generated PRN and location information. Location information may be generated by one or both of on board GPS electronics, or responsive to base station transmission calculations. The readable ID of CE  770  may be directly transferred, or an identifier may be utilized without exceeding the scope. The readable ID of CE  770  is denoted ID1 for ease of identification, and is preferably either identical with, or uniquely related to an ID readable from CE  770  as described above in relation to CE  220 . 
         [0087]    In stage  4010 , authentication is performed as described in relation to stages  3005  and  3010 , and one or more access points consonant with the location are transmitted to customer MD  760 . In the event that a singular access point  660  cannot be determined, a list of possible registered suppliers in the identified area are transmitted to customer MD  760  by TS  710 , and a selected supplier is returned to TS  710  by customer MD  760 . Similarly, (not shown) refusal occurs in the event that location information for customer MD  760  is not consonant with the location of access point  660 . The term consonant is used geographically, to include all potential matches within the accuracy of the location identification equipment, and is thus not meant to be an exact match of pinpoint accuracy. 
         [0088]    Operation of stages  4020 - 4100  are in all respects identical with the operation of stage  3020 - 3100 , respectively, and in the interest of brevity will not be further detailed. In the event that in stage  4090  the transaction acceptance message is not consonant with the acceptance message, in stage  4120  the transaction is refused. In the event that in stage  4110  the transaction acceptance message amount is within the risk parameters, in stage  4120  the transaction authorized as described in relation to stage  3120 . 
         [0089]    In the event that in stage  4100  the transaction acceptance message amount is greater than that approved by the received risk information, i.e. the transaction amount is greater than the risk parameter, in one embodiment TS  710  requests authorization from the issuer as described above. In another embodiment, in stage  4130  a message is transmitted from TS  710  to customer MD  760 , requesting the customer MD  760  log in to the issuer. Customer MD  760  logs into the directed issuer web page and transmits ID1, the PRN, the payment ID and the transaction amount. The issuer web page may authorize the transaction, but typically will require some identification, such as a PIN related to the specific chosen payment ID or other restricted information to reduce the risk. Upon receipt of the additional information, and in the event that the issuer agrees to authorize the transaction, an authorization message including an authorization number, ID1, the PRN, the payment ID and the transaction amount is transmitted directly to TS  710 . Transaction approval is finalized as described above in relation to  FIG. 5B . 
         [0090]      FIG. 6A  illustrates a high level block diagram of an embodiment of the arrangement of  FIG. 5A , wherein access point  660  is replaced by a web server  800  and user device, such as a portable computer  810  is further provided and user device  810  is in communication with web server  800  over a network such as the Internet.  FIG. 6B  illustrates a transaction flow utilizing the various domains of  FIG. 6A ,  FIGS. 6A and 6B  being described herein together for ease of understanding. 
         [0091]    In stage  5000 , user device  810  is desirous of purchasing a product or service from web based service provider  670  and initiates a checkout request. Web based service provider  670  provides user device  810  with a checkout page. User device  810  selects checkout in cooperation with TS  710  from among the various options, and web based service provider  670  transmits a transaction ID, amount and merchant ID to web server  800 . User device  810  preferably provides a user ID stored on a cookie, which has been sent to user device  810  when registered with TS  710 , to web server  800 . 
         [0092]    In stage  50020 , Web server  800  transmits a message to TS  710 , via acquirer  650 , including the obtained user ID, web server or merchant ID (MID), a transaction ID generated by web server  800  and the transaction amount. 
         [0093]    In stage  5030 , preferably responsive to a user gesture, customer MD  760  is operated by a user to initiate a payment transaction program, and select web based transactions. A PIN or other code preregistered with TS  710  is entered into customer MD  760 . MD  760  creates and transmits a message to TS  710  comprising ID1, i.e. a readable identifier of CE  770 , a generated PRN and location information. 
         [0094]    In one embodiment, location information is generated responsive to one or both of on board GPS electronics and base station transmission calculations. In one embodiment, location information is optional. 
         [0095]    In stage  5040 , TS  710  matches the received message from customer MD  760  with the received transaction message from web server  800  responsive to consonance of ID1 with the user ID. In one embodiment, the provided user ID is the same as ID1 and in another embodiment the provided user ID is uniquely cross referenced with ID1, i.e. with the readable identifier of CE  770 , at a pre-registration stage. In stage  5050 , TS  710  retrieves from the various databases  1331 - 1136 , denoted herein as cloud, to determine if any promotions, loyalty benefits, pre-purchase coupons, or gift certificates, without limitation, are relevant to the customer in relation to web server  800 . 
         [0096]    Similarly, information regarding payment options for the web server  800  is determined, and the relevance to the customer&#39;s wallet is retrieved from customer wallet  1331 . Any relevant coupons retrieved from coupons platform  1335  may be optionally validated by the issuer. In stage  5060  CHOW information is generated by TS  710  and transmitted to customer MD  760 . Advantageously, the CHOW information is relevant to web server  800 , exhibiting only offers, discounts or payment options relevant to customer MD  760  in relation to web server  800  and/or service provider  670  and any associated links. In one embodiment, a subset of the CHOW information is transmitted to, and displayed on, user device  810 . 
         [0097]    In stage  5070 , preferably, a user of customer MD  760  may modify the received CHOW, particularly selecting from among various payment options and/or agreeing to utilize one or more benefits offered. The CHOW further comprises the payment amount information as initially received from web server  800  in stage  5020 . Any CHOW based selections are transmitted to TS  710  in cooperation with a payment ID. 
         [0098]    In stage  5080 , TS  710  prepares and transmits a CHOW responsive message for web server  800  comprising the payment ID received from customer MD  760 , the PRN generated by customer MD  760 , the ID1 of customer MD  760 , or a code translatable thereto, and any discount information such as loyalty, coupons and gift card information. 
         [0099]    In stage  5090 , web server  800 , responsive to the received message from TS  710  determines a payment balance for web based service provider  670 , and obtains acknowledgement/approval therefrom via user device  810 . In stage  5100 , web server  800 , responsive to the received acknowledgement/approval of stag  5090 , transmits an authorization request with a net amount to TS  710 . 
         [0100]    In stage  5110 , TS  710 , generates a financial transaction request from an issuer within customer&#39;s payment resources  1350 , responsive to the payment ID. The financial transaction request preferably comprises the above mentioned ID1, the initially generated PRN, the selected means of payment ID, the MID and the amount. The issuer, or other payment resource, calculates a risk parameter, and if the transaction amount is less than a predetermined risk value generates an authorization number in stage  5120 . 
         [0101]    In the event that the transaction amount is in excess of the predetermined risk value, in stage  5130 , TS  710  communicates with customer MD  760  to direct customer MD  760  to log onto the issuer so as to obtain authorization. Customer MD  760  logs into the directed issuer web page and transmits ID1, the PRN, the means of payment ID and the transaction amount. The issuer web page may authorize the transaction, but typically will require some identification, such as a PIN or other restricted information to reduce the risk. Upon receipt of the additional information, and in the event that the issuer agrees to authorize the transaction, an authorization message including an authorization number, ID1, the PRN, the payment ID and the transaction amount is transmitted directly to TS  710  as described above in relation to sate  5120 . The issuer may deny the transaction (not shown) in which case the transaction denial is transmitted to both user MD  760  and web server  800  for display on user device  810 . 
         [0102]    In stage  5140 , the authorization number received by TS  710  is transmitted to web server  800  via acquirer  650  through acquirer band  690 . Any gift, coupon or loyalty information is similarly transmitted to the respective database/server. A transaction approval message is transmitted to MD  760  by TS  710 , optionally including further local relevant information, such as promotions by adjacent vendors responsive to the initial location information. 
         [0103]    It is appreciated that certain features of the invention, which are, for clarity, described in the context of separate embodiments, may also be provided in combination in a single embodiment. Conversely, various features of the invention which are, for brevity, described in the context of a single embodiment, may also be provided separately or in any suitable sub-combination. 
         [0104]    Unless otherwise defined, all technical and scientific terms used herein have the same meanings as are commonly understood by one of ordinary skill in the art to which this invention belongs. Although methods similar or equivalent to those described herein can be used in the practice or testing of the present invention, suitable methods are described herein. 
         [0105]    All publications, patent applications, patents, and other references mentioned herein are incorporated by reference in their entirety. In case of conflict, the patent specification, including definitions, will prevail. In addition, the materials, methods, and examples are illustrative only and not intended to be limiting. 
         [0106]    The terms “include”, “comprise” and “have” and their conjugates as used herein mean “including but not necessarily limited to”. The term “connected” is not limited to a direct connection, and connection via intermediary devices is specifically included. 
         [0107]    It will be appreciated by persons skilled in the art that the present invention is not limited to what has been particularly shown and described hereinabove. Rather the scope of the present invention is defined by the appended claims and includes both combinations and sub-combinations of the various features described hereinabove as well as variations and modifications thereof, which would occur to persons skilled in the art upon reading the foregoing description.