MOBILE DEVICE AND METHOD FOR DISPENSING AUTHENTICATION CODES

• US 20060269061A1
• Filed: 05/02/2006
• Published: 11/30/2006
• Est. Priority Date: 01/11/2001
• Status: Abandoned Application

• Current Assignee: CardinalCommerce Corporation (Visa, Inc.)
• Original Assignee: CardinalCommerce Corporation (Visa, Inc.)
• Inventors: Sherwin, Francis, Keresman, Michael A. III, Balasubramanian, Chandra
• Application Number:
  US11/381,270
• Publication Number:
  US 20060269061A1
• Time in Patent Office: Days
• US Class Current: 380/247
• CPC Class Codes: C07D 209/88 with hetero atoms or with carbon atoms having three bonds to hetero atoms with at the most one bond to halogen, e.g. ester or nitrile radicals, directly attached to carbon atoms of the ring system
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/347 Passive cards
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G07F 7/086 by passive credit-cards adapted therefor, e.g. constructive particularities to avoid counterfeiting, e.g. by inclusion of a physical or chemical security-layer for security documents G07D7/00; for the reading of record-carriers in general G06K7/00; for the design of coded credit-cards G06K19/10
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements

Abstract

A method for provisioning a mobile device (100) with a personalized authorization code generating application (101) includes: collecting user information and a password; generating an application specific encryption key (128) from the collected user information and the password; embedding the generated application specific encryption key (128) in a software code (130) provisioned to generate authorization codes using the application specific encryption key (128) in accordance with a prescribed algorithm, the software code with the application specific encryption key embedded therein comprising the personalized authorization code generating application; and, delivering the personalized authorization code generating application (101) to the mobile device (100).

Claims

1. A method for provisioning a mobile device with a personalized authorization code generating application, said method comprising:

(a) collecting user information and a password;

(b) generating an application specific encryption key from the collected user information and the password;

(c) embedding the generated application specific encryption key in a software code provisioned to generate authorization codes using the application specific encryption key in accordance with a prescribed algorithm, said software code with the application specific encryption key embedded therein comprising the personalized authorization code generating application; and

,

(d) delivering the personalized authorization code generating application to the mobile device.

2. The method of claim 1, wherein said software code in step (c) is in a non-executable format and said method further comprises:

(e) compiling the software code having the application specific encryption key embedded therein into an executable format prior to executing step (d).

3. The method of claim 2, further comprising:

(f) obfuscating the executable format of the software code having the application specific encryption key embedded therein prior to executing step (d).

4. The method of claim 3, wherein said in steps (b), (c), (e) and (f) are executed within a hardware security module.

5. The method of claim 1, wherein said user information comprises one or more of a card number, a card expiration data, an account number, a user name and a user ID.

6. The method of claim 1, wherein said password comprises a personal identification number.

7. The method of claim 1, wherein step (b) further comprises.

selecting a master key from a plurality of different master keys;

and,

using the selected master key to generate the application specific encryption key.

8. The method of claim 7, wherein step (c) further comprises.

selecting the software code in which the application specific encryption key is embedded from a plurality of different software codes.

9. The method of claim 1, wherein step (d) comprises.

forwarding the personalized authentication code generating application to an over-the-air provisioning server that is operatively connected to a wireless telecommunications network serving the mobile device;

and,

provisioning the mobile device with the personalized authentication code generating application via the wireless telecommunications network.

10. The method of claim 1, further comprising.

sending a short message service (SMS) message to the mobile device, said SMS message containing a link that when selected initiates execution of step (d).

11. The method of claim 1, wherein step (d) comprises.

forwarding the personalized authentication code generating application to an application delivery platform which is selectively accessible by the mobile device to download the personalized authentication code generating application.

12. The method of claim 1, wherein the personalized authentication code generating device is delivered to the mobile device using one of a Bluetooth connection, an infrared connection, an Internet connection or a direct cable connection.

13. The method of claim 1, wherein the mobile device is one of a mobile telephone or a wireless personal digital assistant.

14. The method of claim 1, wherein the personalized authentication code generating application generates one-time-use authentication codes upon request, each of said one-time-use authentication codes being valid for a single use.

15. The method of claim 1, wherein the personalized authentication code generating application is delivered to the mobile device so as to reside in memory on the mobile device as one of a Java 2, Mobile Edition (J2ME) application or a Binary Runtime Environment of Wireless (BREW) application.

16. The method of claim 1, wherein the personalized authentication code generating application is delivered to the mobile device so as to reside on a Subscriber Identity Module (SIM) card equipped in the mobile device as a SIM Toolkit (STK) application.

17. A system for provisioning a mobile device with a personalized authorization code generating application, said system comprising:

data collection means for collecting user information and a password;

key generation means for generating an application specific encryption key from the collected user information and the password;

merging means for embedding the generated application specific encryption key in a software code provisioned to generate authorization codes using the application specific encryption key in accordance with a prescribed algorithm, said software code with the application specific encryption key embedded therein comprising the personalized authorization code generating application; and

,

delivery means for delivering the personalized authorization code generating application to the mobile device.

18. The system of claim 17, wherein the key generation means and merging means are implemented within a hardware security module.

19. The system of claim 18, wherein the delivery means includes an over-the-air provisioning server operatively connected to a wireless telecommunications network serving the mobile station.