METHOD AND SYSTEM FOR SECURING TRANSACTIONS MADE THROUGH A MOBILE COMMUNICATION DEVICE

• US 20090124234A1
• Filed: 11/14/2007
• Published: 05/14/2009
• Est. Priority Date: 11/14/2007
• Status: Active Grant

• Current Assignee: Blaze Mobile, Inc. (iWin, Inc.)
• Original Assignee: Mobile Candy Dish, Inc.
• Inventors: Fisher, Michelle, Guha, Rathin
• Granted Patent: US 8,290,433 B2
• Time in Patent Office: Days
• US Class Current: 455/406
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 30/0238 at point-of-sale [POS]
• CPC Class Codes: H04B 5/72 for local intradevice communication
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/082 : using revocation of authorisation
• CPC Class Codes: H04W 4/80 : Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 88/06 : adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

A method for transmitting data between a mobile communication device and a server. The method includes running a mobile application on the mobile communication device. The mobile application is hosted on the mobile communication device through the server as a Software as a Service (SaaS). The method further includes transmitting data associated with the mobile application between the mobile communication device and the server, in which transmission of the data between the mobile communication device and the server is monitored through the server.

Claims

1. A method for transmitting data between a mobile communication device and a server, the method comprising:

running a mobile application on the mobile communication device, the mobile application being hosted on the mobile communication device through the server as a Software as a Service (SaaS); and

transmitting data associated with the mobile application between the mobile communication device and the server,

wherein transmission of the data between the mobile communication device and the server is monitored through the server.

2. The method of claim 1, wherein transmitting data includes generating a session key that is only valid for a given communication session between the mobile communication device and the server.

3. The method of claim 2, further comprising disabling use of the mobile application running on the mobile communication device through the server by invalidating the session key.

4. The method of claim 2, further comprising timing out a given communication session between the mobile communication device and the server after a pre-determined amount of time to prevent theft of data that is accessible through the mobile application.

5. The method of claim 1, wherein transmitting data associated with the mobile application between the mobile communication device and the server includes prompting a user to enter a payment limit PIN in response to a pending purchase exceeding a pre-determined amount.

6. The method of claim 5, wherein the payment limit PIN is applied to all purchases globally.

7. The method of claim 5, wherein the payment limit PIN is applied to purchases on a per-payment basis.

8. The method of claim 1, wherein the mobile application comprises a payment transaction application that permits a user to perform one or more of the following services including bill payment, fund transfers, or purchases through the mobile communication device.

9. The method of claim 8, wherein the mobile communication device is a cellular phone or a wireless personal digital assistant (PDA).

10. The method of claim 8, wherein the mobile application permits a user to subscribe to each of the services separately.

11. A communication system comprising:

a server; and

a mobile communication device configured to run a mobile application and transmit data associated with the mobile application to the server, the mobile application being hosted on the mobile communication device through a management server

wherein transmission of the data between the mobile communication device and the server is monitored through the remote server.

12. The communication system of claim 11, wherein the server is configured to generate a session key that is only valid for a given communication session between the mobile communication device and the server.

13. The communication system of claim 12, wherein the server is configured to disable use of the mobile application running on the mobile communication device by invalidating the session key.

14. The communication system of claim 12, the server is configured to time out a given communication session between the mobile communication device and the server after a pre-determined amount of time to prevent theft of data that is accessible through the mobile application.

15. The communication system of claim 11, wherein the mobile application comprises a payment transaction application that permits a user to perform one or more of the following services including bill payment, fund transfers, or purchases through the mobile communication device.

16. The communication system of claim 15, wherein the mobile communication device is a cellular phone or a wireless personal digital assistant (PDA).