Method and apparatus for managing credentials through a wireless network

• US 20060165060A1
• Filed: 01/21/2005
• Published: 07/27/2006
• Est. Priority Date: 01/21/2005
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Robin Dua
• Inventors: Dua, Robin
• Granted Patent: US 8,700,729 B2
• Time in Patent Office: Days
• US Class Current: 370/352
• CPC Class Codes: G06K 7/10297 arrangements for handling protocols designed for non-contact record carriers such as RFIDs NFCs, e.g. ISO/IEC 14443 and 18092 cryptographic protocols H04L9/00; network security protocols H04L63/00; real-time communication protocols in data switching networks H04L65/00; network protocols for data switching network services H04L67/00
• CPC Class Codes: G06K 7/10415 the interrogation device being fixed in its position, such as an access control device for reading wireless access cards, or a wireless ATM banking machines in general G07F19/00
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/42 Confirmation, e.g. check or permission by the legal debtor of payment
• CPC Class Codes: H04B 5/77 for interrogation
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/18 : using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/02 : Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 : of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/06 : Authentication
• CPC Class Codes: H04W 12/068 : using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

A novel system and methodology for conducting financial and other transactions using a wireless device. Credentials may be selectively issued by issuers such as credit card companies, banks, and merchants to consumers permitting the specific consumer to conduct a transaction according to the authorization given as reflected by the credential or set of credentials. The preferred mechanism for controlling and distributing credentials according to the present invention is through one or more publicly accessible networks such as the Internet wherein the system design and operating characteristics are in conformance with the standards and other specific requirements of the chosen network or set of networks. Credentials are ultimately supplied to a handheld device such as a mobile telephone via a wireless network. The user holding the credential may then use the handheld device to conduct the authorized transaction or set of transactions via, for example, a short range wireless link with a point-of-sale terminal.

Claims

1. A method for issuing a credential to a wireless device comprising the steps of:

(a) accepting a request for the issuance of a credential;

(b) accepting a routable address associated with said request, said routable address being routable over a data network;

(c) accepting data associated with said credential; and

(d) issuing said credential to said wireless device through a secure transmission path comprising said data network and a wireless link.

2. The method of claim 1 wherein said data network is a public data network.

3. The method of claim 1 wherein said routable address is an E.164 phone number.

4. The method of claim 1 wherein said data network is a private data network.

5. The method of claim 1 wherein said wireless device further comprises a wallet application associated with a unique E.164 identifier.

6. The method of claim 5 wherein said step of issuing said credential to said wireless device further comprises the use of said unique E.164 identifier to target said wireless device.

7. The method of claim 6 wherein said step of issuing said credential to said wireless device comprises the use of the ENUM protocol to translate a E.164 number for said wireless device to a Uniform Resource Identifier (URI) which is further used to resolve a corresponding Internet Protocol (IP) address.

8. The method of claim 7 wherein the URI specific to the wallet application operating on said wireless device is selected based on a standardized services field contained in the ENUM Naming Authority Pointer (NAPTR) record associated with the E.164 number for said wireless device.

9. The method of claim 8 wherein said NAPTR record corresponding to the wallet application operating on said wireless device is added to the ENUM database when the wallet application is first activated on said device.

10. The method of claim 8 wherein said NAPTR record that corresponds to the wallet application operating on said wireless device is deleted from the ENUM database when the wallet application is deleted from said device.

11. The method of claim 1 wherein said wireless device further comprises a wallet application associated with a unique (URI).

12. The method of claim 9 wherein said step of issuing said credential to said wireless device further comprises the use of said unique (URI) to target said wireless device.

13. The method of claim 1 wherein said wireless device further comprises a wallet application associated with a unique Internet-routable address.

14. The method of claim 1 wherein said step of issuing said credential to said wireless device further comprises the use of said unique Internet-routable address to target said wireless device.

15. The method of claim 1 wherein said step of issuing said credential to said wireless device further comprises the use of the SIP protocol to transmit said credential to said wireless device.

16. The method of claim 15 wherein said credential is encrypted.

17. The method of claim 15 wherein said wireless device further comprises a wallet application, and wherein said wallet application registers itself in a SIP registrar server.

18. The method of claim 1 wherein said step of issuing a credential is replaced by the step of modifying a credential contained within said wireless device through a transmission path comprising a data network and a wireless link.

19. The method of claim 1 wherein said step of issuing a credential is replaced by the step of canceling a credential contained within said wireless device through a transmission path comprising a data network and a wireless link.

20. The method of claim 1 wherein said credential comprises a credit card account.

21. The method of claim 1 wherein said credential comprises a debit card account.

22. The method of claim 1 wherein said credential comprises an ATM card account.

23. The method of claim 1 wherein said credential comprises a bank account.

24. The method of claim 1 wherein said credential comprises a stored value account.

25. The method of claim 1 wherein said credential comprises a membership card.

26. The method of claim 1 wherein said credential comprises a loyalty card.

27. The method of claim 1 wherein said credential comprises a security access card.

28. The method of claim 1 wherein said credential comprises an identification card.

29. The method of claim 1 wherein said credential comprises a driver'"'"'s license.

30. The method of claim 1 wherein said credential comprises a ticket.

31. The method of claim 1 wherein said credential comprises a coupon.

32. The method of claim 1 wherein said credential corresponds to an account previously opened by a customer which has a physical device associated with it for enabling specific transactions.

33. The method of claim 1 wherein said credential corresponds to an account not previously opened by a customer.

34. The method of claim 32 wherein said credential utilizes a different account number than the physical device associated with said account.

35. The method of claim 1 wherein said credential represents an electronic payment transfer from a first account to a second account.

36. The method of claim 35 wherein said electronic payment transfer is a business-to-business transfer.

37. The method of claim 35 wherein said electronic payment transfer is a business-to-consumer transfer.

38. The method of claim 35 wherein said electronic payment transfer is a consumer-to-business transfer.

39. The method of claim 1 wherein said issued credential comprises a credential record including at least one account number associated with said issued credential.

40. The method of claim 39 wherein said at least one account number is fully masked when displayed to the user through the wallet application on said wireless device.

41. The method of claim 39 wherein said at least one account number is partially masked when displayed to the user through the wallet application on said wireless device.

42. The method of claim 39 wherein said at least one account number is fully masked when displayed to the user through the wallet application on said wireless device.

43. The method of claim 1 further comprising the step of determining whether a wallet application is available on said wireless device.

44. The method of claim 1 wherein said wireless device is a mobile phone.

45. The method of claim 1 wherein said wireless device is a personal digital assistant.

46. The method of claim 1 wherein said step of issuing said credential further comprises the use of a proxy in establishing communication with said wireless device.

47. The method of claim 1 further comprising the step of notifying a user on said wireless device that connectivity with issuer'"'"'s system has been established for the purpose of issuing a credential, and giving the user the ability to continue with or abort issuance process.

48. The method of claim 1 further comprising the step of notifying a user via said wireless device that a credential has been received.

49. A system for transmitting a credential from an issuer to a wireless device comprising:

(a) means for accepting a request for the issuance of a credential;

(b) means for accepting a E.164 phone number associated with said request;

(c) means for accepting data associated with said credential; and

(d) means for issuing said credential to said wireless device through a transmission path comprising a data network and a wireless link.

50. A system for transmitting a credential from an issuer to a wireless device comprising:

(a) a wallet application running on said wireless device;

(b) a network for transmitting said credential to said wireless device, said network further comprising a non-wireless network portion and a wireless network portion;

(c) a wireless credential manager, said wireless credential manager initiating the transmission of a credential from said issuer to said wireless device through said network in response to an authorized request for said credential.

51. The system of claim 50 wherein said non-wireless portion of said network is a public data network.

52. The system of claim 51 wherein said non-wireless portion of said network is the Internet.

53. The system of claim 50 wherein said non-wireless portion of said network is a private data network.

54. The system of claim 50 wherein said wallet application is associated with a unique E.164 identifier.

55. The system of claim 54 wherein said credential is targeted to a specific wireless device through the use of said unique E.164 identifier.

56. The system of claim 50 wherein the SIP protocol is used to communicate said credential to said wireless device.

57. The system of claim 56 wherein said credential is encrypted.

58. The system of claim 50 further comprising a means for modifying a credential.

59. The system of claim 50 further comprising a means for canceling a credential.

60. The system of claim 50 wherein said credential comprises a credit card account authorization.

61. The system of claim 50 wherein said credential comprises a debit card account.

62. The system of claim 50 wherein said credential comprises an ATM card account

63. The system of claim 50 wherein said credential comprises a bank account

64. The system of claim 50 wherein said credential comprises a driver'"'"'s license

65. The system of claim 50 wherein said credential comprises an ticket.

66. The system of claim 50 wherein said credential comprises a coupon.

67. The system of claim 50 wherein said credential corresponds to an account previously opened by a customer.

68. The system of claim 50 wherein said credential corresponds to an account not previously opened by a customer.

69. The system of claim 50 wherein said credential reflects a new account number associated with said account.

70. The system of claim 50 wherein said wireless credential manager targets a specific wireless device through the use of an address which is translatable into an address recognizable by the Internet.

71. The system of claim 50 wherein said credential represents an electronic payment transfer from a first account to a second account.

72. The system of claim 71 wherein said electronic payment transfer is a business to business transfer.

73. The system of claim 71 wherein said electronic payment transfer is a business to consumer transfer.

74. The system of claim 71 wherein said electronic payment transfer is a consumer to business transfer.

75. The system of claim 50 wherein said issued credential comprises a credential record including at least one account number associated with said issued credential.

76. The system of claim 75 wherein said at least one account number is fully masked.

77. The system of claim 75 wherein said at least one account number is partially masked.

78. The system of claim 50 further comprising a means for determining whether a wallet application is available on said wireless device.

79. The system of claim 50 wherein said wireless device is a mobile phone.

80. The system of claim 50 wherein said wireless device is a personal digital assistant.

81. The system of claim 50 wherein said wireless credential manager further comprises a means for using a proxy in establishing communication with said wireless device.

82. The system of claim 50 further comprising a means for notifying a user via said wireless device that a credential has been received.

83. The system of claim 50 wherein said wireless credential manager is notified when said wireless device moves from an unavailable location to an available location.

84. The system of claim 50 wherein said wireless credential manager is capable of determining the presence of said wallet application on said wireless device.

85. The system of claim 50 wherein said wireless device further comprises an ENUM resolver for facilitating payments between said wireless device and another wireless device.

86. The system of claim 50 wherein said wallet application further comprises profiles containing a plurality of credentials.

87. The system of claim 50 wherein a reader key is mapped to at least one credential contained in said wallet application.

88. The system of claim 50 wherein said credential is transmitted in response to a point of sale reader presenting a reader key to said wireless device.

89. The system of claim 50 further comprising an RF reader and an issuer account management system, wherein said wireless device operates to transmit credential information to said RF reader and said RF reader transmits said credential information to said issuer account management system through a first network path and, in response to said transmission, a PIN request is transmitted by said issuer account management system to said wireless device through a second network path.

90. The system of claim 50 further comprising an RF reader and an issuer account management system, wherein said wireless device operates to transmit credential information to said RF reader and said RF reader transmits said credential information to said issuer account management system through a first network path and, in response to said transmission, a preference request is transmitted by said issuer account management system to said wireless device through a second network path.

91. A wireless device comprising:

(a) means for accepting input;

(b) means for displaying information;

(c) a wallet application selectively capable of receiving at least one credential;

(d) wherein said at least one credential is transmitted to said wireless device from a credential issuer via a network comprising both wireless and non-wireless portions.

92. The wireless device of claim 91 wherein said wireless device comprises a wireless telephone.

93. The wireless device of claim 91 wherein said wireless device comprises a personal digital assistant.

94. The wireless device of claim 91 wherein said wireless device comprises an electronic wallet capable of storing credentials.

95. The wireless device of claim 91 wherein said at least one credential is transmitted to said wireless device through said network using the SIP protocol.

96. The wireless device of claim 91 wherein said wallet application is further capable of requesting a credential from said credential issuer.

97. The wireless device of claim 91 further comprising at least one wallet button, said wallet button being mapped to at least one credential contained within said wireless device.

98. The wireless device of claim 91 further comprising at least one wallet button, wherein when said wallet button is pressed, said wallet application is launched on said wireless device.

99. The wireless device of claim 91 wherein said wireless device selectively transmits one or more credentials to a reader device only upon activation of a button located on said wireless device.