AUTHENTICATION OF E-COMMERCE TRANSACTIONS USING A WIRELESS TELECOMMUNICATIONS DEVICE

• US 20080126258A1
• Filed: 11/27/2006
• Published: 05/29/2008
• Est. Priority Date: 11/27/2006
• Status: Abandoned Application

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Jacobs, Paul E., Jain, Nikhil
• Application Number:
  US11/563,620
• Publication Number:
  US 20080126258A1
• Time in Patent Office: Days
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3255 using mobile network messaging services for payment, e.g. SMS
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/42 Confirmation, e.g. check or permission by the legal debtor of payment
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G06Q 30/0603 Catalogue ordering
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol

Abstract

An e-commerce transaction is conducted between a merchant system and a telecommunications device on a consumer'"'"'s account. The merchant system obtains authorization from an authentication device of the consumer before completing the e-commerce transaction. A registry server, accessible by the merchant system, may be used to maintain a database of telecommunication devices authorized to conduct e-commerce transactions on the consumer'"'"'s account.

Claims

1. A merchant system, comprising:

a processor configured to conduct an e-commerce transaction with a telecommunications device on a consumer'"'"'s account, the processor being further configured to obtain authorization from an authentication device of the consumer before completing the e-commerce transaction.

2. The merchant system of claim 1 wherein the authenticating device is wireless.

3. The merchant system of claim 2 wherein the processor is further configured to obtain authorization from the authentication device through a SMS in a wireless network.

4. The merchant system of claim 2 wherein the authentication device is a mobile telephone.

5. The merchant system of claim 1 wherein the processor is further configured to obtain confirmation from a registry server that the telecommunications device is an authorized device to conduct the e-commerce transaction before completing the e-commerce transaction.

6. The merchant system of claim 5 wherein the authentication device is a mobile telephone, and wherein the processor is further configured to receive from the telecommunications device information including the IP address for the telecommunications device and telephone number for the mobile telephone, and send the received information to the registry server to obtain confirmation that the first telecommunications device is an authorized device to conduct the e-commerce transaction.

7. A registry server, comprising:

a processor configured to maintain a database of telecommunication devices authorized to conduct e-commerce transactions on a consumer'"'"'s account, wherein the processor maps in the database of each of the authorized telecommunication devices to information identifying an authentication device of the consumer.

8. The registry server of claim 7 wherein the authentication device is wireless.

9. The registry server of claim 8 wherein the authentication device is a mobile telephone.

10. The registry server of claim 9 wherein the information identifying the mobile telephone is the mobile telephone number.

11. The registry server of claim 7 wherein the processor is further configured to receive a request from a telecommunications device to add the telecommunications device to the database, and in response to the request, communicate with the authentication device to obtain authorization to add the telecommunications device to the database.

12. The registry server of claim 11 wherein the authentication device is wireless, and wherein the processor is further configured to communicate with the authentication device through a SMS in a wireless network.

13. The registry server of claim 7 wherein the processor is further configured to communicate with a merchant system to confirm that a telecommunications device attempting to conduct an e-commerce with the merchant system is mapped in the database to information identifying the authentication device.

14. The registry server of claim 13 wherein the authentication device comprises a mobile telephone, and wherein the information identifying the authentication device is the mobile telephone number of the mobile telephone.

15. The registry server of claim 14 wherein the processors is further configured to map the mobile telephone number to the IP address for each telecommunications device in the database.

16. An authentication device of a consumer, comprising:

a processor configured to communicate with a merchant system to authorize an e-commerce transaction between a merchant system and a telecommunications device on the consumer'"'"'s account.

17. The authentication device of claim 16 wherein the authentication device is wireless.

18. The authentication device of claim 17 wherein the authentication device is a mobile telephone.

19. The authentication device of claim 16 wherein the processor is further configured to communicate with a registry server to maintain a database containing telecommunication devices authorized to conduct e-commerce transaction with the merchant system on the consumer'"'"'s account.

20. A telecommunications device, comprising:

a processor configured to send a request to a registry server to add the telecommunications device to a database authorizing the telecommunications device to conduct e-commerce transaction with a merchant system on a consumer'"'"'s account, the request including information identifying an authentication device of the consumer.

21. The telecommunications device of claim 20 wherein the authentication device is a mobile telephone, and the information identifying the authentication device is the mobile telephone number of the mobile telephone.

22. The telecommunications device of claim 21 further comprising a user interface, and wherein the processor is further configured to send the request to the registry server in response to the entry of the mobile telephone number on the user interface.

23. A method of conducting e-commerce transactions, comprising:

conducting an e-commerce transaction between a merchant system and a telecommunications device on a consumer'"'"'s account; and

obtaining authorization from an authentication device of the consumer before completing the e-commerce transaction.

24. The method of claim 23 further comprising maintaining a database of telecommunication devices authorized to conduct e-commerce transactions on the consumer'"'"'s account, and obtaining confirmation from a registry server that the telecommunications device is in the database before completing the e-commerce transaction.

25. The method of claim 24 wherein the authentication device is a mobile telephone.

26. The method of claim 25 wherein the database is maintained by mapping the mobile telephone number of the mobile telephone to each telecommunications device in the database.

27. The method of claim 26 wherein the e-commerce transaction comprises sending the mobile telephone number from the telecommunications device to the merchant system, the merchant system using the mobile telephone number to obtain confirmation that the telecommunications device is in the database, and to communicate with the mobile telephone to authorize the e-commerce transaction.

28. The method of claim 27 wherein the merchant system communicates with the merchant system through a SMS in a wireless network.

29. A merchant system, comprising:

means for conducting an e-commerce transaction with a telecommunications device on a consumer'"'"'s account; and

means for obtaining authorization from an authentication device of the consumer before completing the e-commerce transaction.

30. A registry server, comprising:

means for interfacing with a database of telecommunication devices authorized to conduct e-commerce transactions on a consumer'"'"'s account; and

means for maintaining the database by mapping each of the authorized telecommunication devices to information identifying an authentication device of the consumer.

31. An authentication device of a consumer, comprising:

means for receiving a request from a merchant system to authorize an e-commerce transaction between a merchant system and a telecommunications device on the consumer'"'"'s account; and

means for responding to the request.

32. A telecommunications device, comprising:

means for generating a request to a registry server to add the telecommunications device to a database authorizing the telecommunications device to conduct e-commerce transaction with a merchant system on a consumer'"'"'s account, the request including information identifying an authentication device of the consumer; and

means for sending the request to the registry server.