System and method for transmitting data via wireless connection in a secure manner

• US 20030005329A1
• Filed: 06/29/2001
• Published: 01/02/2003
• Est. Priority Date: 06/29/2001
• Status: Abandoned Application

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Ikonen, Ari
• Application Number:
  US09/896,636
• Publication Number:
  US 20030005329A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/347 Passive cards
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G07C 2009/00769 with data transmission performed by wireless means
• CPC Class Codes: G07C 9/33 by means of a password
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/1075 PIN is checked remotely
• CPC Class Codes: H04N 21/42204 User interfaces specially adapted for controlling a client device through a remote control device; Remote control devices therefor constructive details of casings for the remote control device H01H9/0235; user interfaces for controlling a tuning device of a television receiver through a remote control H03J9/00; remote control of peripheral devices connected to a television receiver through the remote control device of the television receiver H04B1/205
• CPC Class Codes: H04N 21/43637 involving a wireless protocol, e.g. Bluetooth, RF or wireless LAN [IEEE 802.11] arrangements for wireless networking or broadcasting of information in indoor or near-field type systems H04B10/114
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/4753 for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08

Abstract

A system and method for enabling a user of a remote controller to transmit a PIN over a wireless connection in a secure manner. In accordance with the present invention, a terminal device, used for conducting transactions with a service provider, is coupled to the service provider via a data network and a display such as that of a television or personal computer. The same remote control device (either IR or RF) that is used to operate the display is also used to transmit an encoded PIN to the terminal. Session-specific coding rules for encoding the PIN are displayed to the user to guide him through the encoding process. Upon receipt of the encoded PIN, the terminal decodes it, validates it and, if appropriate, permits access to the requested transaction or service.

Claims

1. A method for enabling a user to transmit data in a secure manner over a wireless connection, comprising:

displaying rules for encoding data;

receiving encoded data over a wireless connection; and

decoding the encoded data.

2. The method of claim 1 wherein the data comprises a personal identification number (“

PIN”

).

3. The method of claim 2 wherein the data comprises payment information.

4. The method of claim 1, wherein the rules are automatically changed in a predetermined manner.

5. The method of claim 1 wherein the rules are displayed on a display of a device selected from the group consisting of a television and a personal computer.

6. The method of claim 5 wherein the encoded data is received from a remote control device.

7. The method of claim 6 wherein the remote control device is used to operate the device on whose display the rules are displayed.

8. The method of claim 1 wherein the wireless connection is an infrared or radio frequency wireless connection.

9. The method of claim 8 wherein the radio frequency wireless connection is a low power radio frequency (“

LPRF”

) connection.

10. The method of claim 9 wherein the LPRF connection is a Bluetooth connection.

11. The method of claim 1, wherein the encoded data is decoded using the displayed rules.

12. The method of claim 2 further comprising:

validating the PIN; and

if the PIN is valid, permitting the user to engage in an activity.

13. The method of claim 12 wherein the step of validating comprises:

determining whether the PIN matches a PIN stored in a smart card.

15. The method of claim 14 wherein the data comprises a personal identification number (“

PIN”

).

16. The method of claim 14 wherein the data comprises payment information.

17. The method of claim 14, wherein the rules are automatically changed in a predetermined manner.

18. The method of claim 14, wherein the encoded data includes digits selected from the group consisting of numeric, alphabetic and symbolic characters.

19. The method of claim 14 wherein the rules are viewed on a display of a television, personal computer or a secured user interface.

20. The method of claim 14 wherein the wireless connection is an infrared or radio frequency wireless connection.

21. The method of claim 20 wherein the radio frequency wireless connection is a low power radio frequency (“

LPRF”

) connection.

22. The method of claim 21 wherein the LPRF connection is a Bluetooth connection.

23. The method of claim 15 further comprising:

if the PIN is valid, engaging in an activity otherwise not permitted without a valid PIN.

24. The method of claim 23 wherein the step of validating includes determining whether the PIN matches a PIN stored in a smart card.

26. The method of claim 25 wherein the step of validating includes determining whether the PIN matches a PIN stored in a smart card.

27. The method of claim 25, wherein the activity is a transaction.

28. The method of claim 27, wherein the transaction is one of the group consisting of purchasing goods or services and electronic banking.

29. The method of claim 25, wherein the encoded PIN is received one encoded digit at a time.

14. A method for enabling a user to transmit data in a secure manner over a wireless connection, comprising:

viewing rules for encoding data for secure transmission over the wireless connection;

encoding the data in accordance with the rules; and

transmitting the encoded data over the wireless connection.

25. A method for enabling a user of a remote control device to transmit data in a secure manner over a wireless connection, comprising:

displaying rules for encoding a PIN;

receiving an encoded PIN over a wireless connection from a remote controller;

decoding the encoded PIN;

validating the PIN; and

if said PIN is valid, permitting an activity.

30. A method for enabling a user to transmit data in a secure manner over a wireless connection, comprising:

viewing rules for encoding a PIN;

encoding the PIN in accordance with the rules;

transmitting the encoded PIN over a wireless connection;

if said PIN is valid, engaging in an activity.

31. The method of claim 30 wherein the PIN is encoded and transmitted one digit at a time.

32. The method of claim 30 wherein the activity is one of the group consisting of purchasing goods or services and electronic banking.

33. A system for enabling a user of a remote control device to transmit data in a secure manner over a wireless connection, comprising:

a memory device storing a program; and

a processor in communication with the memory device, the processor operative with the program to;

display rules for encoding data;

receive encoded data over a wireless connection; and

decode the encoded data.

34. The system of claim 33 wherein the data comprises a PIN.

35. The system of claim 33 wherein the encoded data is received from a remote controller.

36. The method of claim 33 wherein the processor is further operative with the program to validate the decoded data.

37. The system of claim 33, wherein the memory device and processor reside within a smart card.

39. The system of claim 38, wherein the memory device and processor reside within a smart card.

38. A system for enabling a user of a remote control device to transmit data in a secure manner over a wireless connection, comprising:

a memory device storing a program; and

a processor in communication with the memory device, the processor operative with the program to;

display rules for encoding a PIN;

receive an encoded PIN over a wireless connection from a remote controller;

decode the encoded PIN;

validate the PIN; and

if said PIN is valid, permit access to an activity.

40. A method for a service provider to enable a user of a wireless device to transmit data over a wireless connection in a secure manner, comprising:

transmitting, for display to the user, rules for using the wireless device to encode data transmitted over the wireless connection;

receiving data encoded in accordance with the rules; and

decoding the encoded data.

41. The method of claim 40 wherein the rules are transmitted, and the encoded data is received, over a wired data network connection.

42. The method of claim 40 wherein the wireless connection is a low power radio frequency (“

LPRF”

) connection.

44. The method of claim 40 further comprising:

validating the data; and

if the data is valid, permitting the user to engage in an activity.

45. The method of claim 44 wherein validating comprises:

determining whether the data matches data stored at the service provider.

46. The method of claim 40 wherein the data comprises a PIN.

47. The method of claim 40 wherein the wireless device is not otherwise capable of encoding data transmitted over the wireless connection.

43. The method of 42 wherein the LPRF connection is a Bluetooth connection.