Wireless security module

• US 20040124966A1
• Filed: 12/10/2003
• Published: 07/01/2004
• Est. Priority Date: 12/18/2002
• Status: Active Grant

• Current Assignee: NCR Corporation
• Original Assignee: NCR Corporation
• Inventors: Forrest, Simon J.
• Granted Patent: US 7,350,230 B2
• Time in Patent Office: Days
• US Class Current: 340/5.8
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/125 Offline card verification

Abstract

A wireless security module (20) adapted to authenticate a mobile device (16), such as a mobile telephone, thereby to allow communication between the mobile device and a terminal (12), such as a self-service terminal. The wireless security module (20) is paired with the mobile device (16) and is adapted to send an authentication signal to the mobile device (16) or the terminal (12) using a wireless communication path, such as a telecommunications network or an IR link or a Bluetooth connection.

Claims

1. A system for authenticating a mobile device, the system comprising:

a wireless security module paired with the mobile device and including means for sending an authentication signal for authenticating the mobile device; and

means for authenticating the mobile device based upon the authentication signal from the wireless security module.

2. A system as claimed in claim 1, further comprising a wireless receiver for receiving the authentication signal.

3. A system as claimed in claim 2, wherein the wireless receiver is provided in a terminal.

4. A system as claimed in claim 3, wherein the terminal comprises a self service terminal, such as an automated teller machine.

5. A system as claimed in claim 4, wherein the terminal includes means for providing a service requested from the mobile device, in the event that the mobile device is authenticated.

6. A system as claimed in claim 5, wherein the terminal includes means for communicating with the mobile device to provide the requested service.

7. A system as claimed in claim 6, wherein the terminal is part of a network of terminals.

8. A system as claimed in claim 7, wherein any one of the terminals can be used to provide the requested service.

9. A system as claimed in claim 3, wherein the terminal includes means for communicating with a control center.

10. A system as claimed in claim 9, wherein the terminal includes means for sending the authentication signal to the control center.

11. A system as claimed in claim 1, wherein the authentication signal includes a unique identifier associated with the security module.

12. A system as claimed in claim 1, wherein the authentication signal includes details of the mobile device, such as a telephone number or an electronic address.

13. A system as claimed in claim 1, wherein the wireless security module includes an encryptor for encrypting the authentication signal.

14. A system as claimed in claim 13, further comprising means for decrypting the authentication signal.

15. A system as claimed in claim 1, wherein all or at least part of the wireless security module is tamper proof.

16. A method of authenticating a mobile device, the method comprising:

sending an authentication signal from a wireless security module which is paired to the mobile device and which is separate from the mobile device;

receiving the authentication signal; and

authenticating the mobile device based upon the received authentication signal.

17. A wireless security module for pairing with a mobile device and authenticating the mobile device, the wireless security module comprising:

means for providing an authentication signal; and

means for sending the authentication signal to allow the mobile device to be authenticated using a wireless communication path.

18. A wireless security module as claimed in claim 17, wherein the authentication signal includes a unique identifier for identifying the module uniquely.

19. A wireless security module as claimed in claim 17, further comprising a proximity tag for identifying the proximity of the module relative to a terminal.

20. A wireless security module as claimed in claim 19, wherein the proximity tag comprises an RFID tag.

21. A wireless security module as claimed in claim 17, further comprising a secure memory for storing at least one identifier for identifying the mobile device.

22. A wireless security module as claimed in claim 17, further comprising an encryptor for encrypting messages for sending to the mobile device or terminal.

23. A wireless security module as claimed in claim 22, wherein a key for use in an asymmetric encryption method is stored in the secure memory.

24. A wireless security module as claimed in claim 17, further comprising means for communicating with the mobile device.

25. A wireless security module as claimed in claim 17, wherein the module comprises a smart card or secure hard drive that can be accessed wirelessly.

26. A wireless security module as claimed in claim 17, further comprising means for sending the authentication signal to a self-service terminal.

27. A self-service terminal comprising:

means for receiving from a wireless security module an authentication signal for authenticating a mobile device; and

means for determining whether the mobile device is authorized to access services based upon the authentication signal.

28. A self-service terminal as claimed in claim 27, further comprising means for providing information and/or services requested from the mobile device, in the event that the mobile device is authenticated.

29. A self-service terminal as claimed in claim 27, further comprising means for communicating with the mobile device.

30. A self-service terminal as claimed in claim 27, further comprising means for communicating with a remotely located control center in order to determine whether the mobile device is authorized.

31. A self-service terminal as claimed in claim 30, further comprising means for receiving details of a service requested by the mobile device from the control center.

32. An automated teller machine (ATM) comprising:

means for receiving from a wireless security module an authentication signal for authenticating a mobile device;

means for determining whether the mobile device is authorized to access services based on the authentication signal received; and

means for providing information and/or services requested from the mobile device, in the event that the mobile device is authenticated.

33. A method of operating an automated teller machine (ATM), the method comprising:

receiving from a wireless security module an authentication signal for authenticating a mobile device;

determining whether the mobile device is authorized to access services based on the authentication signal received; and

providing information and/or services requested from the mobile device, in the event that the mobile device is authenticated.

34. A method as claimed in claim 33, further comprising communicating with a remotely located control center in order to determine whether the mobile device is authorized.

35. A method as claimed in claim 34, further comprising receiving details of a service requested by the mobile device from the control center.