Source: http://www.freepatentsonline.com/y2007/0022058.html
Timestamp: 2018-07-21 17:20:10
Document Index: 724499894

Matched Legal Cases: ['application No. 60', 'application No. 60', 'application No. 60', 'application No. 60', 'arty 120', 'art) 406', 'art 408', 'art 408', 'art 406']

Wireless computer wallet for physical point of sale (POS) transactions - Fujitsu Limited
United States Patent Application 20070022058
11/488178
Download PDF 20070022058 PDF help
20090063173 Subject Matter Management System 'SMMS' March, 2009 Yu et al.
1. A method, comprising: providing a secure transaction server (STS); providing an authentic point of sale (POS) device, according to a first authentication parameter of the STS; providing an authentic mobile purchasing device, according to a second authentication parameter of the STS; providing a short-range communication method between the POS device and the mobile purchasing device; correlating by the STS a personal identification entry (PIE) and the authentic mobile purchasing device; transmitting, by the POS device, a time dependent transformed secure POS authenticable POS purchase action to the STS; inputting, by a user, the PIE to the mobile purchasing device to transmit a time dependent transformed secure user authenticable POS purchase action to the POS device via the short-range communication method; and approving, by the STS, the POS purchase action for the POS device and for the mobile purchasing device, according to the authentic POS device, and according to the authentic mobile purchasing device and the STS correlating of the PIE and the authentic mobile purchasing device.
3. The method of claim 1, wherein the POS purchase action is a POS identifier or a purchase transaction identifier.
4. The method of claim 1, wherein the POS purchase action is a single user conformation of a purchase.
5. The method according to claim 1, further comprising generating the transformed secure user authenticable POS action and the transformed secure POS authenticable POS purchase action to the STS according to Universal Pervasive Transaction Framework Secure Agreement Submission (UPTF SAS) protocol.
6. The method according to claim 5, wherein the POS purchase action further comprises a mobile purchasing device identifier and the method further comprises calculating, by the POS device, a message digest of the mobile purchasing device identifier and the POS identifier, the transaction identifier or the single purchase specification, and transmitting the message digest to the POS device via the short-range communication method.
7. The method of claim 1, further comprising transmitting, by the POS device via the short-range communication method, the POS purchase action to the mobile purchasing device.
8. The method of claim 1, wherein the POS purchase action identifies a payment for a good and/or a service.
9. The method of claim 1, further comprising transmitting, by the mobile POS device, via a short message service, or a multimedia message service, or any combinations thereof, the transformed secure user authenticable POS purchase action to the STS.
10. The method of claim 1, further comprising transmitting, by the POS device, via a network the transformed secure user authenticable POS purchase action and the transformed secure POS authenticable POS purchase action to the STS for the approving of the POS purchase action.
11. The method of claim 10, wherein the approving comprises verifying a match between the transformed secure user authenticable POS purchase action and the transformed secure POS authenticable POS purchase action.
12. The method of claim 1, wherein the approving comprises settling by the STS a payment to the POS for the POS purchase action.
13. The method of claim 11, wherein the approving comprises transmitting by the STS via a short message service, or a multimedia message service, or any combinations thereof, a POS receipt to the mobile purchasing device.
14. The method of claim 1, wherein the POS device is an authentic mobile POS device, and the method further comprises: correlating by the STS a POS personal identification entry (PIE) and the mobile POS device; inputting, by another user, the POS PIE and a POS action, to the mobile POS device to transmit the time dependent transformed secure POS authenticable POS action to the STS; and approving, by the STS, the POS action for the mobile POS device and POS purchase action for the mobile purchase device, according to the STS correlating of the POS PIE and the authentic mobile POS device and according to the STS correlating of the PIE and the authentic mobile purchasing device.
15. The method of claim 2, wherein the image as a short-range communication method comprises any type of barcode system, a camera system, a scanner system, or any combinations thereof at the POS device and/or at the mobile purchasing device.
16. The method of claim 15, wherein the barcode system processes 2-Dimensional barcodes.
17. The method of claim 2, wherein the audio as the short-range communication method is any output audio signal or Dual Tone Multi-Frequency tone, or voice, or any combinations thereof, and recognizer(s) thereof, at the POS device and/or at the mobile purchasing device.
18. The method of claim 2, wherein the Radio Frequency (RF) as the short-range communication method is any type of wireless communication connectivity technology, including one or more of Radio Frequency Identification (RFID), Bluetooth, WLAN, Near Field Communication (NFC), or any combinations thereof, at the POS device and/or at the mobile purchasing device.
19. The method according to claim 18, wherein the mobile purchasing device comprises the RFID and/or the NFC as integrated with device circuitry or attached to the mobile purchasing device independent of the mobile purchasing device circuitry.
20. The method of claim 1, wherein the first and second authentication parameters are each a per-message resettable time-dependent generated random number.
21. An apparatus, comprising: a secure transaction server (STS); an authentic point of sale (POS) device, according to a first authentication parameter of the STS, the authentic POS communicatively connectable with the STS; and an authentic mobile purchasing device, according to a second authentication parameter of the STS, and the authentic mobile purchasing device communicatively connectable with the authentic POS device via a short-range communication method, wherein the authentic POS device transmits a time dependent transformed secure POS authenticable POS purchase action to the STS; wherein the STS correlates a personal identification entry (PIE) and the authentic mobile purchasing device, wherein the mobile purchasing device receives the PIE and a POS purchase action to transmit based thereon a time dependent transformed secure user authenticable POS purchase action to the POS device via the short-range communication method between the POS device and the mobile purchasing device, and wherein the STS approves the POS purchase action for the POS device and for the mobile purchasing device, according to the authentic POS device, and according to the authentic mobile purchasing device and the STS correlating of the PIE and the authentic mobile purchasing device.
22. The apparatus of claim 21, wherein the short-range communication method comprises one or more of an image, audio, or wireless communication connectivity technology, or any combinations thereof.
23. An apparatus, comprising: a secure transaction server (STS); an authentic point of sale (POS) device, according to a first authentication parameter of the STS, the authentic POS communicatively connectable with the STS; and an authentic mobile purchasing device, according to a second authentication parameter of the STS, and the authentic mobile purchasing device comprising a radio frequency identification tag attached thereto to communicatively connect with the authentic POS device, wherein the authentic POS device transmits a time dependent transformed secure POS authenticable POS purchase action to the STS; wherein the STS correlates a personal identification entry (PIE) and the authentic mobile purchasing device, wherein the mobile purchasing device uses the PIE and a POS purchase action to transmit based thereon a time dependent transformed secure user authenticable POS purchase action to the STS via mobile phone network, a short message service, or a multimedia message service, or any combinations thereof, and wherein the STS approves the POS purchase action for the POS device and for the mobile purchasing device, according to the authentic POS device, and according to the authentic mobile purchasing device and the STS correlating of the PIE and the authentic mobile purchasing device.
24. An apparatus, comprising: means for providing an authentic point of sale (POS) device; means for providing an authentic mobile purchasing device; means for a short-range communication between the authentic POS device and the authentic mobile purchasing device to transmit a time dependent POS purchase action to the authentic POS device; means for receiving the time dependent POS purchase action and for authenticating and verifying the time dependent POS purchase action for the POS device and for the mobile purchasing device, according to the authentic POS device and the authentic mobile purchasing device.
This application is a continuation-in-part of U.S. patent application Ser. No. 11/388,202, filed Mar. 24, 2006, entitled “Authentication Services Using Mobile Device,” which claims priority to U.S. Provisional Application Ser. No. 60/669,375 filed Apr. 8, 2005; and also a continuation-in-part of U.S. patent application Ser. No.11/045,484, filed Jan. 31, 2005, entitled “WIRELESS WALLET” which claim priority to U.S. Provisional Application Ser. No. 60/544,300 filed Feb. 17, 2004; and also a continuation-in-part of U.S. application Ser. No. 10/458,205, filed Jun. 11, 2003, which claims the benefit of U.S. provisional application No. 60/401,807, filed Aug. 8, 2002; and also a continuation-in-part of U.S. application Ser. No. 10/628,584 filed Jul. 29, 2003, which claims the benefit of U.S. provisional application No. 60/401,807 filed Aug. 8, 2002; and also a continuation-in-part of U.S. application Ser. No. 10/628,569 filed Jul. 29, 2003, which claims the benefit of U.S. provisional application No. 60/401,807 filed Aug. 8, 2002; and also a continuation-in-part of U.S. application Ser. No. 10/628,583 filed Jul. 29, 2003, which claims the benefit of U.S. provisional application No. 60/401,807 filed Aug. 8, 2002.
FIG. 1 is a diagram of a computer system 100 to provide a mobile wireless communication apparatus to a physical point of sale (POS) transaction service, according to an embodiment of the present invention. According to the embodiments, a user 102 uses a mobile device 104, such as (without limitation) a mobile phone or a PDA, with wireless communication capability, to transact with a Point of Sale (POS) device 103, such as (without limitation) a cash register, of a provider 106, for example, to purchase an item or receive a service, etc. According to an aspect of the embodiments, the POS 103 can be another mobile device 104, such as another mobile phone. According to an aspect of the embodiments, a provider 106 operates one or a plurality of POSs 103. According to an aspect of the embodiment, the provider 106 and the POS 103 can be collapsed together. The mobile device 104 can be any mobile wireless communication computing device or mobile radio computing device, including, without limitation, a mobile phone, that wirelessly communicates (e.g., wireless Internet or mobile phone network 211) with other mobile devices 104a-n, with a secure transaction server 120, or with a POS 103, or any combinations thereof. According to an aspect of the embodiments, the mobile device 104 has one or more short-range communication methods 210 implemented therein, for example (without limitation), image, audio, and/or RF, to communicate with the POS 103.
Another method discussed improves on physical POS 103 purchasing by using Short Message Service (SMS) and/or Multimedia Message Service (MMS) messages to transmit UPTF SAS messages among the mobile phone 104, POS 103 and/or the STS120. More generally, SMS messages can be used as the transported mechanism for all types of UPTF transactions (see co-pending UPTF-related patent applications incorporated herein by reference.
In FIG. 2, the UPTF SAS protocol encrypts/decrypts a transaction message using a symmetric, secret-key 352c,m approach where the secret key 352c,m is producible only by an individual party's mobile device 104 and a trusted third party (e.g., implemented as STS 120) and without transmission of the secret key among the parties. In other words, the UPTF SAS provides an implicit user authentication, because decryption by a trusted third party, such as STS 120, of a sending party's encrypted message, authenticates the sending party. The SAS insures that the authenticity of the parties is verified and during delivery, the privacy of the information is preserved (transaction party anonymity), even when the parties distrust each other and the messages from one party may be forwarded by the other to the third party verification (as the case may be). The UPTF provides the mechanism for the trusted third party 120 to verify that the independent views of the mobile device POS transaction are consistent with each other.
MD: message digest 410
PIE: Personal identification entry, a user and STS 120 maintained input secret entry, such as an alphanumeric string. In a typical embodiment described herein, the PIE is only maintained by the user and the STS 120, is not known to and/or maintained by another party to a transaction and/or any financial institutions and is temporally known as an intermediate parameter to the mobile POS 104 of the user 102 for encrypting the user transaction view 402. More particularly, the PIE is not included in transaction messages (e.g., UPTF SAS messages and/or SAS based informational messages) and, thus, the mobile POS 109 does not transmit the PIE. The PIE can be non-secure by being a substantially short alphanumeric string, such as a 4 digit number. The user enters the PIE whenever the user attempts a transaction. Preferably the PIE is issued to the user when the user registers for the authenticable mobile POS service using a client device 104, which executes the mobile POS 109. The user can also select the PIE at such time of registration. The PIE is, however, a piece of highly secure information in the sense that it is never transmitted during the UPTF protocol execution, it is only known to the user and the STS 120, and its secrecy should be well protected. The PIE can be input by the user on a mobile POS 104 in a secure fashion or it may be deterministically generated using a biometric device, such as a fingerprint sensor. For example, a computation applied on the fingerprint data received from a fingerprint sensor can be used to generate a PIE that is initially communicated by the user to the STS 120. Whenever the user attempts a transaction, the user applies her finger to the fingerprint sensor, thus generating the PIE. The PIE is not kept in permanent storage on the mobile POS 104, but is used as an intermediate parameter required for the generation of the encryption key for a transaction and the mobile POS 104 should not retain the PIE for a period longer than a transaction execution time as determined according to application criteria. If a particular implementation of the present invention uses a form of PIE that is not convenient for a user to input for each agreement transaction and the device needs to store its user's PIN, the storage must be secure and tamper-resistant. According to another aspect of the embodiment, the PIE can be a user 102 biometric input data.
As shown in the FIG. 3, a view 402 comprises a cipher text part (or encrypted part) 406 and a perceptible (e.g., plaintext) part 408. A plaintext part 408 includes the TID, the DlDc of the mobile POS 104 generating the view 402, and the local current timestamp (TS) of device 104. The TS, among other functions described herein, is also used to prevent transaction replay. The encrypted part 406 includes two critical fields: the agreement data (transaction data) and the DIDm of the provider's 106 POS 103 device involved in the agreement. The DIDm is the minimum necessary reference field to provide the desired verification properties of the UPTF protocol. According to an aspect of the embodiments, the DIDm is communicably provided to the user 102 and/or the mobile POS 102 via any known methods, for example, via the short-range communication 210. Therefore, a user can execute a mobile POS 104 authenticable transaction with a transaction party based upon a PIE and a mobile POS application 109 authentication parameter RSN, and authenticable transaction messages comprising an identifier of the mobile device POS 104, an identifier of the transaction party, and an identifier for the transaction (for example, an identifier and/or other transaction related data, such as a type of transaction, payment amount, etc.), thereby providing the mobile POS 104 based upon a combination of the mobile POS application 109 at the mobile POS 104 and the STS 120 association of the PIE and an authentication parameter, which is known and/or determinable by the devices 103, 104 and 120, with the user 102, and exchange of the authenticable transaction messages among the user 102, the provider 106 (POS 103) and the STS 120.
K=H (F ((PIE, RSN))
A message digest 410 function can be applied to the agreement data, the DIDm, and the DIDc to generate a MD of the view. According to an aspect of the embodiments, the MD 410 is generated by applying a hash function to the UPTF SAS agreement data as shown in FIG. 3 to shorten the same. The MD can further strengthen the security by ensuring that no other party has tampered with or modified the contents of the view 402 in any way. The encryption algorithm with the encryption key K is then applied to the MD, the agreement data, the DIDc, and the DIDm to generate the cipher text part of the view 402, as shown in FIG. 3 with peach coloring. For further protection, the SAS protocol uses random message padding in order to further prevent “known-text” attacks. According to an aspect of the embodiment described herein, the embodiment uses Advanced Encryption Standard (AES) for encryption, a Keyed-Hashing for Message Authentication (HMAC)-based scheme for random number generation, and SHA1 Secure Hash Algorithm for the hash function.
2. a random 160-bit initialization timestamp is created also at new authenticable mobile POS service account creation time, using software service function. Therefore, the STS 120 can generate or provide device 104 specific initialization parameters of a random number and an initialization time stamp, both of which are provided (installed) via the mobile POS application. 109 to the mobile device 104.
According to an aspect of the embodiments, a variation on the sign-up and registration process, which could be particularly useful for person-to-person payments, in which the payer is the payer mobile POS 104a and the payee serves as a payee mobile POS 104b, is described next. This method has the advantage that it does not require that a payee is already signed-up with a payment service to receive payment by a payer mobile POS 104a. A user with mobile POS application 109 on the mobile phone 104 can make a payment to another mobile phone owner that is not registered yet for the mobile POS service. The first user specifies the recipient of the payment via the mobile phone number of the second user. The second user subsequently receives an SMS at the second user's mobile phone with the aforementioned phone number. The SMS informs (with text) the second user of a pending payment to the second user and includes a link for downloading the mobile POS software 109. A version of the mobile POS software 109 for this specific second user was created at the STS 120 upon receipt of the first payment request to the STS 120 from the first user. Upon completion of the download, the second user needs to register for the mobile POS service to complete receiving payment. To maximize security, it is preferred that the second user does the registration at the provider's website, as discussed with reference to FIG. 4. Alternatively, the registration can be done from inside the mobile POS application 109, by invoking a “new account” action.
3. Radio Frequency (RF) (Radio Frequency Identification (RFID), Bluetooth, WLAN, NFC, etc., or any combinations thereof at the POS 103 and/or the mobile POS 104
Remote Communication is considered to be
modes 1 2 2-1 3 3-1 4 4-1
Mobile Device Mode 1: X X X X X
Mobile Device Mode 2: X X X
Mobile Device Mode 3: X X
Mobile Device Mode: 4 X X X X
Previous Patent: Trusted decision support system and method
Next Patent: System and method for producing a mailpiece including value added services