Device pairing via trusted intermediary

• US 10,692,076 B2
• Filed: 01/23/2018
• Issued: 06/23/2020
• Est. Priority Date: 11/21/2012
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Carlson, Mark
• Primary Examiner(s): McAtee, Patrick
• Assistant Examiner(s): Martinez-Hernandez, Edgar R
• Application Number:
  US15/878,189
• Publication Number:
  US 20180150833A1
• Time in Patent Office: 882 Days
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response

Abstract

Embodiments are directed at systems, apparatuses, and methods for indirect device pairing through a trusted intermediary. One embodiment is directed to a method including receiving a pairing identifier associated with an untrusted device controller. The method further comprises extracting the pairing identifier from the pairing request, searching a pairing identifier database for a matching pairing identifier, determining an untrusted device controller associated with the matching pairing identifier, and sending the pairing request to the untrusted device controller. The untrusted device controller may identify the untrusted device, associate the pairing identifier with the trusted intermediary, and lock the pairing identifier. The method further comprises receiving a pairing response indicating that the untrusted device is paired with the computer. Accordingly, the trusted device is indirectly paired to the untrusted device and the trusted device is configured to complete a transaction with the untrusted device without communicating transaction information to the untrusted device.

Claims

1. A method of indirectly pairing a trusted device with an untrusted device, the method comprising:

obtaining, by the trusted device, a pairing identifier provided by the untrusted device, wherein the untrusted device sends a pairing identifier request to an untrusted device controller, wherein the untrusted device controller sends the pairing identifier to the untrusted device and sends the pairing identifier and an untrusted device controller identifier to a trusted intermediary, and wherein the trusted intermediary stores the pairing identifier and the untrusted device controller identifier, one in association with the other, in a pairing identifier database;

sending, by the trusted device, a pairing request including the pairing identifier to an intermediary computer, wherein the intermediary computer extracts the pairing identifier from the pairing request, searches the pairing identifier database for a matching pairing identifier, and sends the pairing request to the untrusted device controller associated with the matching pairing identifier;

receiving, by the trusted device, a pairing confirmation from the intermediary computer indicating that the trusted device is indirectly paired to the untrusted device such that the trusted device can complete a transaction with the untrusted device without communicating transaction information to the untrusted device;

sending by the trusted device, a transaction request for the transaction with the untrusted device to the intermediary computer, wherein the intermediary computer sends the transaction request to the untrusted device controller; and

receiving, by the trusted device, a transaction response from the intermediary computer indicating that the transaction is completed, wherein the intermediary computer receives a response associated with the transaction request from the untrusted device controller, the transaction response based on the response from the untrusted device controller.

2. The method of claim 1, further comprising

displaying, by the trusted device, the pairing confirmation, wherein the pairing confirmation includes an identifier of the untrusted device, wherein the pairing request includes the identifier of the untrusted device.

3. The method of claim 1, further comprising

displaying, by the trusted device, the transaction response, wherein the transaction response includes an account number, wherein the transaction request includes the account number.

4. The method of claim 1, wherein the intermediary computer receives the transaction request from the trusted device and sends the transaction request to the untrusted device controller based on the trusted device being indirectly paired to the untrusted device.

5. The method of claim 1, wherein the obtaining of the pairing identifier provided by the entrusted device comprises

capturing a QR code displayed by the untrusted device.

6. The method of claim 1, wherein the pairing request further includes one or more of:

an untrusted device identifier, a zip code, a trusted device identifier, an account identifier, a PIN, or a transaction amount.

7. The method of claim 1, further comprising:

displaying a transaction template, the transaction template based on the pairing confirmation, and

obtaining transaction details including an account number, wherein the transaction request is based on the transaction details.

8. A computer comprising:

a processor; and

a computer readable medium coupled to the processor, the computer readable medium comprising code for implementing a method of indirectly pairing a trusted device with an untrusted device, the code, when executed by the processor, causing the processor to;

obtain a pairing identifier provided by the untrusted device, wherein the untrusted device sends a pairing identifier request to an untrusted device controller, wherein the untrusted device controller sends the pairing identifier to the untrusted device and sends the pairing identifier and an untrusted device controller identifier to a trusted intermediary, and wherein the trusted intermediary stores the pairing identifier and the untrusted device controller identifier, one in association with the other, in a pairing identifier database,

send a pairing request including the pairing identifier to an intermediary computer, wherein the intermediary computer extracts the pairing identifier from the pairing request, searches the pairing identifier database for a matching pairing identifier, and sends the pairing request to the untrusted device controller associated with the matching pairing identifier,

receive a pairing confirmation from the intermediary computer indicating that the trusted device is indirectly paired to the untrusted device such that the trusted device can complete a transaction with the untrusted device without communicating transaction information to the untrusted device,

send a transaction request for the transaction with the untrusted device to the intermediary computer, wherein the intermediary computer sends the transaction request to the untrusted device controller, and

receive a transaction response from the intermediary computer indicating that the transaction is completed, wherein the intermediary computer receives a response associated with the transaction request from the untrusted device controller, the transaction response based on the response from the untrusted device controller.

9. The computer of claim 8, further comprising

a display, wherein the code, when executed by the processor, further causes the processor to:

display, on the display, the pairing confirmation, wherein the pairing confirmation includes an identifier of the untrusted device, wherein the pairing request includes the identifier of the untrusted device.

10. The computer of claim 8, further comprising

a display, wherein the code, when executed by the processor, further causes the processor to:

display, on the display, the transaction response, wherein the transaction response includes an account number, wherein the transaction request includes the account number.

11. The computer of claim 8, further comprising

a display, wherein the code, when executed by the processor, further causes the processor to:

display, on the display, a transaction template, the transaction template based on the pairing confirmation, and obtain transaction details including an account number, wherein the transaction request is based on the transaction details.

12. The computer of claim 8, wherein the obtaining of the pairing identifier provided by the untrusted device comprises

capturing a QR code displayed by the untrusted device.

13. The computer of claim 8, wherein the pairing request further includes one or more of:

an untrusted device identifier, a zip code, a trusted device identifier, an account identifier, a PIN, or a transaction amount.

14. The computer of claim 8, wherein the intermediary computer

receives the transaction request from the trusted device and

sends the transaction request to the untrusted device controller based on the trusted device being indirectly paired to the untrusted device.