Methods for secure transactions

• US 10,002,350 B2
• Filed: 09/25/2017
• Issued: 06/19/2018
• Est. Priority Date: 12/04/2007
• Status: Active Grant

• Current Assignee: Accumulate AB
• Original Assignee: Accumulate AB
• Inventors: Hultberg, Stefan, Westling, Magnus
• Primary Examiner(s): Ojiaku, Chikaodinaka
• Application Number:
  US15/714,474
• Publication Number:
  US 20180012215A1
• Time in Patent Office: 267 Days
• Field of Search: 705 42
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction

Abstract

The present invention relates to a method for a secure transaction utilizing a portable radio communication device (10), wherein both parts in the secure transaction are protected against fraudulent actions, among other things by use of a common transaction identity on a predefined transaction server.

Claims

1. A non-transitory computer readable medium comprising a set of instructions, when executed by one or more processor, causes the one or more processor to:

initiate, by wireless encrypted communication, a portable radio communication device on a predefined transaction server, where initiating the portable radio communication device on the predefined transaction server puts a first transaction part in an active transaction state on the predefined transaction server, wherein the first transaction part is a first installation of a transaction software in the portable radio communication device, wherein a user of the portable radio communication device is identified and tied to the first installation;

initiate a transaction between the first transaction part in the portable radio communication device that is in the active state on the predefined transaction server and a second transaction part utilizing a second installation of the transaction software operating independently of the first installation of the transaction software, the initiated transaction including a transaction identity;

initiate the second transaction part on the predefined transaction server and put the second transaction part in an active transaction state on the predefined transaction server;

send information of the transaction connected to the transaction identity from the second transaction part to the predefined transaction server;

identify the first transaction part and the second transaction part on the predefined transaction server by the transaction identity and check that the first transaction part and the second transaction part are in the active transaction state on the predefined transaction server;

finalize the transaction connected to the transaction identity based on the information of the predefined transaction and the transaction identity; and

send a transaction receipt of a finalized transaction connected to the transaction identity from the transaction server to the first and second transaction parts.

2. The non-transitory computer readable medium according to claim 1, wherein the set of instructions, when executed by the one or more processor, further causes the one or more processor to:

request, with the first transaction part, the transaction identity from the transaction server;

create, by the transaction server, the transaction identity; and

send, by the transaction server, the transaction identity to the first transaction part.

3. The non-transitory computer readable medium according to claim 2, wherein the set of instructions, when executed by the one or more processor, further causes the one or more processor to:

reuse the transaction identity for another transaction after the transaction receipt has been sent.

4. The non-transitory computer readable medium according to claim 1, wherein the set of instructions, when executed by the one or more processor, further causes the one or more processor to:

predefine the transaction identity and inform the transaction server and the first transaction part thereof.

5. The non-transitory computer readable medium according to claim 1, wherein the set of instructions, when executed by the one or more processor, further causes the one or more processor to:

send, by wireless communication, the information of the transaction connected to the transaction identity from the predefined transaction server to the first transaction part, wherein the transmission is encrypted;

verify the transaction connected to the transaction identity at the first transaction part by a user verification; and

send, by wireless communication, the verification connected to the transaction identity from the first transaction part to the predefined transaction server, wherein the transmission is encrypted.

6. The non-transitory computer readable medium according to claim 5, wherein the set of instructions, when executed by the one or more processor, further causes the one or more processor to:

enter a personal identification number in the portable radio communication device to perform the verification.

7. A non-transitory computer readable medium comprising a set of instructions, when executed by one or more processor, causes the one or more processor to:

install a user transaction software in a portable radio communication device through an authenticated service provider, wherein a user securely is identified and tied to the installation;

connect, by wireless communication, a first transaction part to a predefined transaction server, and communicating a transaction identity from the predefined transaction server to the first transaction part;

initiate, by said transaction identity, a transaction between the first transaction part using the user transaction software in the portable radio communication device and a second transaction part using a service provider software;

connect the second transaction part to the predefined transaction server, and send information of the transaction connected to the transaction identity from the second transaction part to the predefined transaction server;

send, by wireless communication, the information of the transaction connected to the transaction identity from the predefined transaction server to the first transaction part, wherein the transmission is encrypted;

verify the transaction connected to the transaction identity at the first transaction part by a user verification;

send, by wireless communication, the verification connected to the transaction identity from the first transaction part to the transaction server, wherein the transmission is encrypted;

finalize the transaction connected to the transaction identity based on the information of the transaction and the transaction identity; and

send a transaction receipt of the finalized transaction connected to the transaction identity from the transaction server to the first and second transaction parts, wherein the first transaction part and the second transaction part have been connected to the transaction server during the transaction.

8. The non-transitory computer readable medium according to claim 7, wherein the set of instructions, when executed by the one or more processor, further causes the one or more processor to:

reuse the transaction identity for another transaction after the transaction receipt has been sent.

9. The non-transitory computer readable medium according to claim 7, wherein the set of instructions, when executed by the one or more processor, further causes the one or more processor to:

request, by the first transaction part, the transaction identity from the transaction server, and

create, by the transaction server, the transaction identity.

10. The non-transitory computer readable medium according to claim 7, wherein the set of instructions, when executed by the one or more processor, further causes the one or more processor to:

predefine the transaction identity.

11. The non-transitory computer readable medium according to claim 7, wherein the set of instructions, when executed by the one or more processor, further causes the one or more processor to:

Create the transaction identity in the second transaction part.

12. The non-transitory computer readable medium according to claim 7, wherein the set of instructions, when executed by the one or more processor, further causes the one or more processor to:

enter a personal identification number in the portable radio communication device to perform the verification.

13. A system comprising one or more processor, wherein the processors are configured to:

initiate, by wireless encrypted communication, a portable radio communication device on a predefined transaction server, where initiating the portable radio communication device on the predefined transaction server puts a first transaction part in an active transaction state on the predefined transaction server, wherein the first transaction part is a first installation of a transaction software in the portable radio communication device, wherein a user of the portable radio communication device is identified and tied to the first installation;

initiate a transaction between the first transaction part in the portable radio communication device that is in the active state on the predefined transaction server and a second transaction part utilizing a second installation of the transaction software operating independently of the first installation of the transaction software, the initiated transaction including a transaction identity;

initiate the second transaction part on the predefined transaction server and put the second transaction part in an active transaction state on the predefined transaction server;

send information of the transaction connected to the transaction identity from the second transaction part to the predefined transaction server;

identify the first transaction part and the second transaction part on the predefined transaction server by the transaction identity and check that the first transaction part and the second transaction part are in the active transaction state on the predefined transaction server;

finalize the transaction connected to the transaction identity based on the information of the predefined transaction and the transaction identity; and

send a transaction receipt of a finalized transaction connected to the transaction identity from the transaction server to the first and second transaction parts.

14. The system according to claim 13, wherein the one or more processors are further configured to:

request, with the first transaction part, the transaction identity from the transaction server;

create, by the transaction server, the transaction identity; and

send, by the transaction server, the transaction identity to the first transaction part.

15. The system according to claim 13, wherein the one or more processors are further configured to:

predefine the transaction identity and inform the transaction server and the first transaction part thereof.

16. The system according to claim 13, wherein the one or more processors are further configured to:

send, by wireless communication, the information of the transaction connected to the transaction identity from the predefined transaction server to the first transaction part, wherein the transmission is encrypted;

verify the transaction connected to the transaction identity at the first transaction part by a user verification; and

send, by wireless communication, the verification connected to the transaction identity from the first transaction part to the predefined transaction server, wherein the transmission is encrypted.

17. The system according to claim 13, wherein the one or more processors are further configured to:

enter a personal identification number in the portable radio communication device to perform the verification.

18. A system comprising one or more processor, wherein the processors are configured to:

install a user transaction software in a portable radio communication device through an authenticated service provider, wherein a user securely is identified and tied to the installation;

connect, by wireless communication, a first transaction part to a predefined transaction server, and communicating a transaction identity from the predefined transaction server to the first transaction part;

initiate, by said transaction identity, a transaction between the first transaction part using the user transaction software in the portable radio communication device and a second transaction part using a service provider software;

connect the second transaction part to the predefined transaction server, and send information of the transaction connected to the transaction identity from the second transaction part to the predefined transaction server;

send, by wireless communication, the information of the transaction connected to the transaction identity from the predefined transaction server to the first transaction part, wherein the transmission is encrypted;

verify the transaction connected to the transaction identity at the first transaction part by a user verification;

send, by wireless communication, the verification connected to the transaction identity from the first transaction part to the transaction server, wherein the transmission is encrypted;

finalize the transaction connected to the transaction identity based on the information of the transaction and the transaction identity; and

send a transaction receipt of the finalized transaction connected to the transaction identity from the transaction server to the first and second transaction parts, wherein the first transaction part and the second transaction part have been connected to the transaction server during the transaction.