Method and apparatus for authorizing internet transactions using the public land mobile network (PLMN)

• US 20030097444A1
• Filed: 11/08/2001
• Published: 05/22/2003
• Est. Priority Date: 11/08/2001
• Status: Active Grant

• Current Assignee: Ericsson, Inc. (Telefonaktiebolaget LM Ericsson)
• Original Assignee: Ericsson, Inc. (Telefonaktiebolaget LM Ericsson)
• Inventors: Dutta, Santanu, Ghosh, Angana
• Granted Patent: US 7,337,229 B2
• Time in Patent Office: Days
• US Class Current: 709/225
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

Method and apparatus for authorizing Internet transactions using the public land mobile network (PLMN). An association, or linking, of a mobile terminal to a transaction being made with a more traditional Internet access device such as a PC is provided using the resources of the public land mobile network (PLMN). The mobile terminal can in turn be used to provide authentication and/or authorization for the transaction. The link or coupling between the transaction documents or information sets presented on the two devices can be created by a service provider or merchant sending a WAP push message to the mobile terminal. Authentication and/or authorization can be provided using the client-side PKI capabilities of the wireless terminal, using a user ID and/or password, or through other means.

Claims

1. A method of providing authentication for a network-based transaction, the method comprising:

presenting a first information set to a user through an Internet access device, the first information set being associated with the transaction;

creating a coupling between the first information set and a second information set, wherein the second information set is also associated with the transaction;

presenting the second information set to the user and requesting authorization of the transaction at a mobile terminal using public land mobile network (PLMN) radio resources; and

receiving authorization information for the transaction from the mobile terminal using the PLMN radio resources.

2. The method of claim 1 wherein creating the coupling further comprises sending a wireless application protocol (WAP) push message to the mobile terminal.

3. The method of claim 1 wherein the authorization information comprises client-side public key infrastructure (PKI) information.

4. The method of claim 2 wherein the authorization information comprises client-side public key infrastructure (PKI) information.

5. The method of claim 1 wherein the authorization information comprises a password.

6. The method of claim 5 wherein the authorization information further comprises a caller line identification (caller ID) for the mobile terminal.

7. A method of authorizing a transaction in which transaction information is presented to a user at an Internet access device in a first information set in a first format suitable for presentation on the Internet access device, the method comprising:

creating a second information set in a second format suitable for presentation at a mobile terminal, wherein the second information set is representative of the first information set;

linking the first information set and the second information set;

sending the second information set to a public land mobile network (PLMN) for presentation to the user at the mobile terminal; and

receiving authentication information from the mobile terminal through the PLMN.

8. The method of claim 7 wherein linking the first information set and the second information set further comprises sending a wireless application protocol (WAP) push message to the mobile terminal.

9. The method of claim 8 wherein the WAP push message comprises a hyperlink to the second information set.

10. The method of claim 9 wherein the first information set is formatted in hypertext markup language (HTML) and the second information set is formatted in wireless markup language (WML).

11. The method of claim 10 wherein the second information set is further formatted to be signed by a user using a WAP signText script.

12. The method of claim 7 wherein the authentication information comprises client-side public key infrastructure (PKI) information.

13. The method of claim 8 wherein the authentication information comprises client-side public key infrastructure (PKI) information.

14. The method of claim 9 wherein the authentication information comprises client-side public key infrastructure (PKI) information.

15. The method of claim 10 wherein the authentication information comprises client-side public key infrastructure (PKI) information.

16. Apparatus for providing authentication for a network-based transaction, the apparatus comprising:

means for presenting a first information set to a user through an Internet access device, the first information set being associated with the transaction;

means for creating a coupling between the first information set and a second information set, wherein the second information set is also associated with the transaction;

means for presenting the second information set to the user and requesting authorization of the transaction at a mobile terminal using public land mobile network (PLMN) radio resources; and

means for receiving authorization information for the transaction from the mobile terminal using the PLMN radio resources.

17. Apparatus for authorizing a transaction in which transaction information is presented to a user at an Internet access device in a first information set in a first format suitable for presentation on the Internet access device, the apparatus comprising:

means for creating a second information set in a second format suitable for presentation at a mobile terminal, wherein the second information set is representative of the first information set;

means for linking the first information set and the second information set;

means for sending the second information set to a public land mobile network (PLMN) for presentation to the user at the mobile terminal; and

means for receiving authentication information from the mobile terminal through the PLMN.

18. A computer program product comprising a computer program for authorizing a transaction in which transaction information is presented to a user at an Internet access device in a first information set in a first format suitable for presentation on the Internet access device, the computer program further comprising:

instructions for creating a second information set in a second format suitable for presentation at a mobile terminal, wherein the second information set is representative of the first information set;

instructions for linking the first information set and the second information set;

instructions for sending the second information set to a public land mobile network (PLMN) for presentation to the user at the mobile terminal; and

instructions for receiving authentication information from the mobile terminal through the PLMN.

19. The computer program product of claim 18 wherein the instructions for linking the first information set and the second information set further comprise instructions for sending a wireless application protocol (WAP) push message to the mobile terminal.

20. The computer program product of claim 19 wherein the WAP push message comprises a hyperlink to the second information set.

21. The computer program product of claim 20 wherein the first information set is formatted in hypertext markup language (HTML) and the second information set is formatted in wireless markup language (WML).

22. The computer program product of claim 21 wherein the second information set is further formatted to be signed by a user using a WAP signText script.

23. The computer program product of claim 18 wherein the authentication information comprises client-side public key infrastructure (PKI) information.

24. The computer program product of claim 19 wherein the authentication information comprises client-side public key infrastructure (PKI) information.

25. The computer program product of claim 20 wherein the authentication information comprises client-side public key infrastructure (PKI) information.

26. The computer program product of claim 21 wherein the authentication information comprises client-side public key infrastructure (PKI) information.

27. A network that enables authentication of a transaction comprising:

a server system operable to create a first information set formatted for an Internet access device and a second information set formatted for a mobile terminal, the second information set representative of the first information set which is in turn representative of the transaction, the server system further operable to create a coupling between the first information set and the second information set;

an Internet connection at the server system; and

a public land mobile network (PLMN) infrastructure operatively connected to the server system so as to be operable to present the second information set at the mobile terminal and obtain authorization information from the mobile terminal so that the transaction can be authenticated by the server system.

28. The network of claim 27 wherein creating the coupling between the first information set and the second information set is accomplished at least in part by sending a wireless application protocol (WAP) push message to the mobile terminal.

29. The network of claim 28 wherein the WAP push message comprises a hyperlink to the second information set.

30. The network of claim 27 wherein the authentication information comprises client-side public key infrastructure (PKI) information.

31. The network of claim 28 wherein the authentication information comprises client-side public key infrastructure (PKI) information.

32. The network of claim 29 wherein the authentication information comprises client-side public key infrastructure (PKI) information.

33. A system for authorizing a transaction in which transaction information is presented to a user at an Internet access device in a first information set in a first format suitable for presentation on the Internet access device, the system comprising:

a hypertext markup language (HTML) server operable to provide content for the first information set and to create a coupling between the first information set and a second information set;

a wireless markup language (WML) server operable to create the second information set in a format suitable for presentation on a wireless terminal, wherein the second information set is representative of the first information set, the WML server operatively connected to the HTML server; and

a network connection for the system operable to enable the WML server to send the second information set over a public land mobile network (PLMN) for presentation to the user at the mobile terminal and receive authentication information from the mobile terminal.

34. The system of claim 33 wherein the WML server and the HTML server operate on a single computing platform.

35. The system of claim 33 wherein the network connection is an Internet connection.

36. The system of claim 33 wherein the coupling is created at least in part by sending a wireless application protocol (WAP) push message to the mobile terminal.

37. The system of claim 34 wherein the coupling is created at least in part by sending a wireless application protocol (WAP) push message to the mobile terminal.

38. The system of claim 35 wherein the coupling is created at least in part by sending a wireless application protocol (WAP) push message to the mobile terminal.

39. The system of claim 33 wherein the authentication information comprises client-side public key infrastructure (PKI) information.

40. The system of claim 34 wherein the authentication information comprises client-side public key infrastructure (PKI) information.

41. The system of claim 35 wherein the authentication information comprises client-side public key infrastructure (PKI) information.

42. The system of claim 36 wherein the authentication information comprises client-side public key infrastructure (PKI) information.