System and method for secure communication for cashless transactions

• US 10,380,570 B2
• Filed: 05/02/2011
• Issued: 08/13/2019
• Est. Priority Date: 05/02/2011
• Status: Active Grant

• Current Assignee: Ondot Systems, Inc. (Fiserv Incorporated)
• Original Assignee: Ondot Systems, Inc. (Fiserv Incorporated)
• Inventors: Bharghavan, Vaduvur, Malinen, Jari, Singh, Rajinder, Fieldman, Jason, Ahlawat, Rachna, Konath, Kannan, Gilotra, Sandeep
• Primary Examiner(s): Agwumezie, Chinedu C
• Application Number:
  US13/099,240
• Publication Number:
  US 20120284193A1
• Time in Patent Office: 3,025 Days
• Field of Search: 705 64, 710 36, 713168
• CPC Class Codes: G06Q 20/202 Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

Embodiments of the present invention provide a system and method for an access point providing client to point-of-sale communication over a network, comprising: receiving credentials from the point-of-sale; sending at least one beacon message; receiving a probe request from a client; sending a probe response to the client; authenticating a connection with the client; exchanging capabilities with the client; performing a security handshake with the client; assigning at least one dynamic IP address to the client; and establishing an https session between the client and the point-of-sale over the network.

Claims

1. A computer-implemented method in an access point facilitating client to point-of sale communication over a data network secured with mutual authentication during client association, the method comprising:

receiving, by the access point, authentication credentials from a point-of-sale device;

periodically broadcasting, by the access point, at least one beacon message to advertise payment services of the point-of-sale device, wherein the at least one beacon message comprises information elements including transaction type, a payment network, and merchant information;

receiving, by the access point, a probe request from a client based on the payment services advertised in the at least one beacon message;

sending, by the access point, a probe response to the client responsive to the probe request;

performing, by the access point, an authentication operation to authenticate a connection with the client;

performing, by the access point, an association operation with mutual authentication to create an association with the client, wherein the association operation comprises;

receiving a client challenge from the client with an association request, and sending the client challenge to the point-of-sale device on behalf of the client,

receiving a response from the point-of-sale device to the client challenge with a point-of-sale challenge, and sending the client challenge response and the point-of-sale challenge to the client with an association response on behalf of the point-of-sale device, and

receiving an acknowledgment from the client of the association response with a response to the point-of-sale challenge, and sending the point-of-sale challenge response to the point-of-sale device on behalf of the client;

assigning, by the access point, at least one dynamic IP address to the client; and

establishing, by the access point, an https session between the client and the point-of-sale device over the data network.

2. The method of claim 1, wherein the receiving the probe request from the client is responsive to a BSSID (basic service set identifier) of the access point being selected as a preferred payment method, wherein the client selects the BSSID of the access point from a plurality of BSSIDs that are each associated with at least one payment method in response to receiving a selection at the client of preferred payment method.

3. The method of claim 2, wherein the selection at the client of the preferred payment method is received without exposing the plurality of BSSIDs corresponding to payment methods.