Apparatus and method for increased security of wireless transactions

• US 20050178829A1
• Filed: 04/14/2005
• Published: 08/18/2005
• Est. Priority Date: 05/19/2003
• Status: Active Grant

• Current Assignee: Kioba Processing, LLC (IP Investments Group LLC)
• Original Assignee: Einar Rosenberg
• Inventors: Rosenberg, Einar
• Granted Patent: US 7,286,818 B2
• Time in Patent Office: Days
• US Class Current: 235/380
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3255 using mobile network messaging services for payment, e.g. SMS
• CPC Class Codes: G06Q 20/3263 characterised by activation or deactivation of payment capabilities
• CPC Class Codes: G06Q 20/3265 characterised by personalisation for use
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: H04M 1/0254 comprising one or a plurality of mechanically detachable modules
• CPC Class Codes: H04M 1/72412 using two-way short-range wireless interfaces

Abstract

A mobile communication device with security mechanisms is provided for enabling wireless personal information transfer with increased security. In another embodiment of the invention, a mobile communication device is used to confirm a transaction.

Claims

1-23. -23. (canceled)

24. A method of authorizing a data transaction comprising:

receiving a user input from a user at a mobile user interface device;

validating an identity of said user within mobile user interface device to produce a validation signal;

producing a validation signal based on said validating;

receiving said validation signal at an input port of a smartcard processor; and

transmitting user personal data from smartcard processor.

25. A method of authorizing a data transaction as defined in claim 24 wherein said transmitting step uses a wireless transmission.

26. A method of authorizing a data transaction as defined in claim 25 wherein said transmitting step follows smartcard transmission protocol.

27. A method of authorizing a data transaction as defined in claim 25 further comprises the step of receiving at a receiving device said user personal data.

28. A method of authorizing a data transaction as defined in claim 27 wherein said receiving step uses a device which is a smartcard reader device.

29. A method of authorizing a data transaction as defined in claim 27 wherein said receiving step uses a device which comprises a point-of-sale terminal receiving device.

30. A method of authorizing a data transaction as defined in claim 27 wherein said receiving device comprises an input port of a financial institution.

31. A method of authorizing a data transaction as defined in claim 27 wherein said validating an identity includes evaluating a relationship between said user input and a stored user identification stored within said mobile user interface device.

32. A method of authorizing a data transaction as defined in claim 29 further comprising:

receiving said user personal data from a seller system associated with said point-of-sale terminal at a financial institution;

transacting a financial transaction at said financial institution; and

receiving a confirmation of said financial transaction from said financial institution at said seller system.

33. A method of authorizing a data transaction as defined in claim 24 further comprising:

receiving said user personal data from said smartcard processor at a financial institution;

transacting a financial transaction at said financial institution; and

receiving a confirmation of said financial transaction from said financial institution at said mobile user interface device; and

receiving said confirmation of said financial transaction from said mobile user interface device at a receiving device.

34. A method of authorizing a data transaction as defined in claim 33 wherein said receiving device is a point-of-sale terminal.

35. A method of authorizing a data transaction as defined in claim 33 wherein said receiving device is a relay circuit.

36. A method of authorizing a data transaction as defined in claim 32 wherein said transacting a financial transaction step comprises:

receiving transaction data from said financial institution at a secondary financial institution;

transacting a further financial transaction at said secondary financial institution; and

receiving a further confirmation of said further financial transaction from said secondary financial institution at said financial institution.

37. A method of authorizing a data transaction as defined in claim 36 wherein said transacting a financial transaction comprises an electronic finds transfer.

38-55. -55. (canceled)