SAMSUNG Pay workflow

Samsung Pay main functions

1. membership cards
2. automatic points accumulations (add MC into the phone first)
3. online payment
4. ATM withdrawal
5. transit (without waking up the phone)

Security mechanism:

1. token(a substitute number that replaces this this card number)
2. CGK(cryptogram generation key) => authentication codes
3. CGK is worthless on another device
4. it stores all tokenized payment credentials and cryptographic keys inside the TEE
5. cryptogram can only be verified by card network

Add a card

1. Register
user in TEE -> user enter card information(OCR) -> TEE send Card Details to P/N

-> P/N send back Token&CGK -> TEE encrypt token and send to Samsung Pay

2. Pay
user authorize Samsung Pay via fingerprint -> Samsung pay send encrypted token

back to TEE -> TEE generate cryptogram via CGK -> TEE send cryptogram and token

to POS -> POS send token and cryptogram to card network -> card network verify

cryptogram