System and method of associating communication devices to secure a commercial transaction over a network

• US 20030191721A1
• Filed: 02/27/2001
• Published: 10/09/2003
• Est. Priority Date: 02/29/2000
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Fiammante, Marc
• Application Number:
  US09/794,305
• Publication Number:
  US 20030191721A1
• Time in Patent Office: Days
• US Class Current: 705/65
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3263 characterised by activation or deactivation of payment capabilities
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

A system and a method for associating communication devices like a computing device and a wireless portable device so as to carry out secure transactions over an untrusted network like the Internet are disclosed. The communication devices are assumed to be independently capable of communicating with an electronic commerce site managing a directory of legitimate users which all possess a token like a smart-card. Whenever a user desires to carry out a secure transaction, the user initially prepares the transaction from a first communication device like a personal computer. When completed with the preparation, a signature of the user is obtained from a second communication device like a mobile phone through which the legitimate user is reachable and which is enabled with the token of the user. When contacted from the electronic commerce site, the second communication device is used to check, validate, sign and transmit the signed secure transaction to the electronic commerce site where final processing of the commercial transaction can be completed.

Claims

1. A method for associating a commerce site, a first communication device, and a second communication device in executing a commercial transaction over a network, said method comprising:

operating the first communication device and the commerce site to prepare and approve the commercial transaction;

operating the commerce site to provide a signature request to the second communication device upon an approval of the commercial transaction; and

operating the second communication device to provide a signature to the commerce site in response to said signature request.

2. The method of claim 1, further comprising:

operating the commerce site to complete the commercial transaction in response to said signature.

3. A method for associating a first communication device and a commerce site after a preparation and an approval of a commercial transaction by a second communication device and the commerce site, said method comprising:

operating the commerce site to retrieve an identification record corresponding to a user of the first communication device and the second communication device;

operating the commerce site to establish a communication link between the first communication device and the commerce site in response to said identification record; and

operating the commerce site to provide a signature request to the first communication device upon an establishment of the communication link.

4. The method of claim 3, further comprising:

operating the first communication device to examine said signature request upon receipt of said signature request.

5. The method of claim 3, further comprising:

operating the second communication device to identify said user in response to said signature request.

6. The method of claim 3, further comprising:

operating the second communication device to provide a signature for the commercial transaction to the commerce site in response to said signature request.

7. A method for completing a commercial transaction prepared and approved by a first communication device and a commerce site, said method comprising:

operating the commerce site to provide a signature request to a second communication device;

operating said second communication device to examine said signature request;

operating said second communication device to identify a user of the first communication device and the second communication device; and

operating said second communication device provide a signature for the commercial transaction in response to an identification of said user.

8. The method of claim 7, further comprising:

operating the commerce site to complete the commercial transaction upon a receipt of said signature from said second communication device.

9. A system for completing a commercial transaction, said system comprising:

a first communication device;

a second communication device; and

a server running a commerce site,

wherein said first communication device and said server are operable to prepare and approve the commercial transaction,

wherein said server is further operable to provide a signature request to said second communication device upon an approval of the commercial transaction, and

wherein said second communication device is operable to provide a signature to said server in response to said signature request.

10. The system of claim 9, wherein

said first communication device is a computing device.

11. The system of claim 9, wherein

said second communication device is a wireless portable device.

12. The system of claim 9, wherein

said server is further operable to provide an authentication request of a user of said first communication device;

and

said first communication device is further operable to provide an authentication data to said server in response to said authentication request.

13. The system of claim 9, wherein

said server is further operable to retrieve an identification record corresponding to a user of said first communication device and said second communication device;

and

said server is further operable to establish a communication link between said server and said second communication device in response to said identification record.

14. The system of claim 9, wherein

said server is further operable to provide said signature request including a user public key corresponding to a user of said first communication device and said second communication device.

15. The system of claim 9, wherein

said server is further operable to provide said signature request including a private key corresponding to said server.

16. The system of claim 9, wherein

said second communication device is further operable to examine said signature request.

17. The system of claim 9, wherein

said second communication device is further operable to identify a user of said first communication device and said second communication device in response to said signature request.

18. The system of claim 9, wherein

said second communication device is further operable to provide said signature including a user private key.

19. The system of claim 9, wherein

said server is further operable to examine said signature.

20. The system of claim 18, wherein

said server is further operable to examine said user private key.

21. A computer program product in a computer usable medium for associating a first communication device and a commerce site after a preparation and an approval of a commercial transaction by a second communication device and the commerce site, said program comprising:

a means for retrieving an identification record corresponding to a user of the first communication device and the second communication device;

a means for establishing a communication link between the first communication device and the commerce site in response to the identification record; and

a means for providing a signature request to the first communication device upon an establishment of the communication link.

22. A computer program product in a computer usable medium for completing a commercial transaction prepared and approved by a first communication device and a commerce site, said program comprising:

a means for examining a signature request from the commerce site;

a means for identifying a user of the first communication device; and

a means for providing a signature for the commercial transaction in response to an identification of the user.