Authenticating Wireless Person-to-Person Money Transfers

• US 20070255662A1
• Filed: 03/30/2007
• Published: 11/01/2007
• Est. Priority Date: 03/30/2006
• Status: Abandoned Application

• Current Assignee: Obopay Mobile Technology India Pvt Limited (OBP Investments, Inc.)
• Original Assignee: Obopay Incorporated (OBP Investments, Inc.)
• Inventors: Tumminaro, John
• Application Number:
  US11/694,887
• Publication Number:
  US 20070255662A1
• Time in Patent Office: Days
• US Class Current: 705/79
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/223 based on the use of peer-to-peer networks
• CPC Class Codes: G06Q 20/26 Debit schemes, e.g. "pay now"
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/3255 using mobile network messaging services for payment, e.g. SMS
• CPC Class Codes: H04M 3/16 with lock-out or secrecy provision in party-line systems
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor

Abstract

A technique is used to ensure the authenticity of a wireless transmission source which is requesting a transaction to be performed by a system. The transaction may be a person-to-person money transfer or other value exchange transaction. The wireless transmission source may be a mobile phone or other similar device. The wireless transmission source transmits a key with the transaction request. The system will determine the authenticity of the transmission based on the transmitted key. If the transmission is determined to be authentic, the transaction will be acted upon. Various approaches for determining authenticity are discussed. The technique may also be used to prevent acting upon duplicate transmissions.

Claims

1. A method comprising:

receiving an electronic request for a value exchange transaction, wirelessly transmitted from a user device;

receiving with the electronic request a transmitted key associated with the electronic request;

determining whether the transmitted key exists in a transactions table;

if the transmitted key is not in the transactions table, inputting the transmitted key and value exchange transaction into the transaction table, and processing the value exchange transaction;

if the transmitted key is in the transactions table, not acting on the value exchange transaction.

2. The method of claim 1 wherein the transmitted key comprises an electronic identifier identifying a user that requested the value exchange transaction and a sequence number, the sequence number being stored at the user device and advanced to a next number in sequence before a next value exchange transaction is transmitted by the user device.

3. The method of claim 2 wherein the sequence number is stored in a nonvolatile memory at the user device.

4. The method of claim 1 wherein the transmitted key comprises a pseudorandom number.

5. The method of claim 1 wherein the transmitted key comprises a first electronic identifier identifying a user that requested the value exchange transaction, a second electronic identifier identifying a user that is a target of the value exchange transaction, a value amount of the value exchange transaction, and a time associated with the value exchange transaction.

6. The method of claim 1 wherein the value exchange transaction comprises sending money from a first user associated with the user device to a second user associated with another user device.

7. The method of claim 1 wherein the user device is a mobile phone.

8. The method of claim 1 wherein the transmitted key is not displayed on the user device.

9. The method of claim 1 wherein electronic request is via an SMS text messaging service of the user device.

10. The method of claim 1 wherein the transmitted key comprises first information when the user device sends the electronic request using a first application client and the transmitted key comprises first information when the user device sends the electronic request using a first application client, which is different from the first application client.

11. The method of claim 10 wherein the first application client is a dedicated value exchange transaction service application executing on the user device, and the second application client is an SMS messaging application of the user device.

12. The method of claim 1 wherein if the transmitted key is in the transactions table, suspending an account of a user sending the electronic request.

13. The method of claim 1 wherein processing the value exchange transaction comprises:

generating a transaction identifier number for the value exchange transaction;

sending an electronic message to the user device including the transaction identifier number, wherein the transaction identifier number is viewable on the user device.

14. A method comprising:

receiving an electronic request for a value exchange transaction, wirelessly transmitted from a user device;

receiving a transmitted key associated with the electronic request;

generating an expected key;

comparing the transmitted key to the expected key; and

if the transmitted key matches the expected key, processing the value exchange transaction.

15. The method of claim 14 wherein generating the expected key comprises evaluating a function using a seed value stored for a user account associated with the value exchange transaction, and the method further comprises after evaluating the function, determining a next seed value in sequence and replacing the seed value stored for the user account with the next seed value in sequence.

16. The method of claim 14 comprising:

if the transmitted key does not match the expected key, not acting on the value exchange transaction and suspending a user account associated with the value exchange transaction.

17. The method of claim 14 wherein processing the value exchange transaction comprises:

generating a transaction identifier number, different from the expected key, for the value exchange transaction;

sending an electronic message to the user device including the transaction identifier number, wherein the transaction identifier number is displayed on the user device.

18. The method of claim 14 wherein the value exchange transaction comprises sending money from a first user associated with the user device to a second user associated with another user device.

19. The method of claim 14 wherein the expected key is a pseudorandom number.

20. The method of claim 14 wherein generating the expected key comprises:

retrieving from a user profile associated with the value exchange transaction a seed value;

retrieving from the user profile information on a function according to which the transmitted key was generated; and

evaluating the function using the seed value.