MOBILE WALLET AND DIGITAL PAYMENT

• US 20090068982A1
• Filed: 09/10/2007
• Published: 03/12/2009
• Est. Priority Date: 09/10/2007
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Chen, Yuqun, Yacobi, Yacov, Moinuddin, Mohammed
• Granted Patent: US 8,041,338 B2
• Time in Patent Office: Days
• US Class Current: 455/407
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/4015 using location information
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G07F 7/122 Online card verification
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

The claimed subject matter provides a system and/or a method that facilitates securing a wireless digital transaction. A terminal component can receive a portion of data related to a payment for at least one of a good or a service. A mobile device can include at least one mobile payment card (m-card), wherein the m-card is created by establishing a link to an account associated with a form of currency. The mobile device can employ public-key cryptography (PKC) to securely and wirelessly transmit a payment to the terminal component utilizing the m-card and linked account.

Claims

1. A computer-implemented system that facilitates securing a wireless digital transaction, comprising:

a terminal component receives a portion of data related to a payment for at least one of a good or a service;

a mobile device that includes at least one mobile payment card (m-card), the m-card is created by establishing a link to an account associated with a form of currency; and

the mobile device employs public-key cryptography (PKC) to securely and wirelessly transmit a payment to the terminal component utilizing the m-card and linked account.

2. The system of claim 1, the form of currency is cash, credit, a micro-payment, a pre-paid card, a stored value card, a disposable card, a line of credit, an exchange of a service, an exchange of a good, or a tab.

3. The system of claim 1, the mobile device communicates with the terminal component with at least one of near field communication (NFC), Bluetooth, wireless fidelity (Wi-Fi), or radio frequency identification (RFID).

4. The system of claim 1, the account is associated with at least one of a bank, a credit card company, an investment fund, an online brokerage, a web site, a business, a company, or a financial institution.

5. The system of claim 1, further comprising a certifying authority that is an independent organization that validates the terminal component by issuing a certificate with an expiration date.

6. The system of claim 1, the mobile device utilizes a next-generation secure computing base (NGSCB) with a secure boot mechanism and hosts a virtual machine (VM) environment.

7. The system of claim 6, the VM environment includes a secure virtual machine monitor (VMM) that monitors at least one virtual machine (VM), the VMM utilizes an I/O driver that provides a driver for at least one of a screen on the mobile device, a keypad on the mobile device, or a secure storage with hardware-based encryption related to a portion of data stored thereupon.

8. The system of claim 7, further comprising a main VM that provides an operating system for the mobile device, the main VM wirelessly interacts with at least one of a wireless service provider network or the terminal component.

9. The system of claim 8, further comprising an isolated payment module virtual machine communicates at least one of a request or a response with the main VM.

10. The system of claim 9, further comprising a security manager virtual machine that manages at least one of the secure storage or a portion of the public-key cryptography service.

11. The system of claim 10, further comprising an m-pass virtual machine that manages at least one of a password or a personal identification number (PIN) related to the mobile device.

12. The system of claim 11, the mobile device implements at least one of the following:

a limit to access to the screen and the keypad to a single virtual machine at a time;

or

a verification of a location of the terminal component by leveraging at least one of a global positioning service (GPS) on the mobile device or a cellular triangulation technique for the mobile device to identify a location of the mobile device, the location of the mobile device is compared to the location of the terminal component.

13. The system of claim 1, further comprising a security component that protects against a threat with at least one of the following:

the security component leverages an online clearing agent to alert at least one of a bank, the account, a mobile device service provider, a certifying authority, or the terminal component of a theft related to at least one of a portion of data on the mobile device, the mobile device, or the terminal component;

the security component deletes a portion of the m-card based on a security breach, the security breach is an invalid password entry, a defined number of incorrect password entry attempts, or received alert from the online clearing agent;

or

the security component employs a password during at least one of a moment prior to a transaction, a moment during a transaction, a moment after a transaction, a moment after a pre-defined number of transactions, a moment after a dollar amount of tabulated transactions, or a detection of a possible threat.

14. The system of claim 1, the mobile device further comprising at least one physical button input that, upon activation, initiates at least one of a password entry, a password entry completion, or a wireless digital payment to the terminal.

15. The system of claim 1, further comprising a communication component that enables wireless communication between the mobile device and the terminal component, the wireless communication is at least one of a NFC, Bluetooth, Wi-Fi, RFID, or a combination of NFC and Bluetooth in a two-stage protocol.

16. The system of claim 1, the terminal component further comprises a power component that transmits a portion of power to the mobile device during wireless communication, the portion of power is at least one of a quick charge or a power-supply probe.

17. A computer-implemented method that facilitates securely transmitting sensitive data related to a payment transaction, comprising:

creating an m-card on a mobile device, the m-card includes a portion of account data associated with an account;

storing the m-card on the mobile device;

transmitting the portion of account data wirelessly to a payment terminal with public-key cryptography;

verifying the portion of account data on the m-card with an organization corresponding to the account; and

processing a transaction with the portion of account data on the m-card upon verification from the account.

18. The method of claim 17, further comprising:

employing a next-generation secure computing base (NGSCB) with a secure boot mechanism;

hosting a virtual machine (VM) environment within the mobile device; and

limiting interaction with a keypad and a screen on the mobile device to a single virtual machine.

19. The method of claim 17, further comprising:

utilizing a physical button input on the mobile device to signal at least one of a password entry, a password entry completion, or an initiation of a wireless digital payment;

authenticating the payment terminal with a certificate issued by an independent organization;

or

comparing a location related to the mobile device with a location of the payment terminal to authenticate the payment terminal.

20. A computer-implemented system that facilitates securing a wireless digital transaction, comprising:

means for wirelessly receiving a portion of data related to a payment for at least one of a good or a service;

means for creating a mobile payment card (m-card) on a mobile device;

means for incorporating the m-card on the mobile device;

means for linking the m-card to an account associated with a form of currency;

means for wirelessly communicating a portion of the m-card to a payment terminal for a digital payment; and

means for securing the wireless communication with public-key cryptography.