Systems and methods for secure wireless transactions

• US 20100082490A1
• Filed: 09/30/2008
• Published: 04/01/2010
• Est. Priority Date: 09/30/2008
• Status: Abandoned Application

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Mayo, Sean A., Nakajima, Taido L., Lin, Gloria, Rosenblatt, Michael
• Application Number:
  US12/286,313
• Publication Number:
  US 20100082490A1
• Time in Patent Office: Days
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04W 12/06 Authentication

Abstract

There is provided systems and methods for to conducting wireless transactions using portable electronic devices. Specifically, for example, a method of conducting a wireless transaction is provided that includes initiating a wireless transaction using a short range wireless communication system of a portable electronic device. The method also includes obtaining security information via at least one secondary system of the portable electronic device and utilizing the security information obtained via the at least one secondary system to authenticate the portable electronic device for the wireless transaction.

Claims

1. A method of conducting a wireless transaction, comprising:

initiating a wireless transaction using a short range wireless communication system of a portable electronic device;

obtaining security information via at least one secondary system of the portable electronic device; and

utilizing the security information obtained via the at least one secondary system to authenticate the portable electronic device for the wireless transaction.

2. The method of claim 1, wherein initiating the wireless transaction comprises initiating a near field communication (NFC) channel.

3. The method of claim 1, wherein initiating the wireless transaction comprises detection of another device within a communicable range of the portable electronic device.

4. The method of claim 1, wherein the acquiring security information via at least one secondary system comprises obtaining a code via a camera of the portable electronic device.

5. The method of claim 4, wherein the code contains an encryption key.

6. The method of claim 5, wherein the encryption key is used to encode communicated data between the portable electronic device and a device providing the code.

7. The method of claim 4, wherein the code comprises a QR code.

8. The method of claim 4, wherein the code comprises a file name.

9. The method of claim 4 wherein the code changes during the duration of the wireless transaction.

10. A portable electronic device, comprising:

a processor;

a memory operably coupled to the processor;

a wireless communication device operably coupled to the processor and configured to communicate with other wireless communication devices to conduct transactions; and

at least one device in addition to the wireless communication device configured to obtain security data from a source external to the device and provide the security data to the wireless communication system for use by the wireless communication system during wireless transactions.

11. The portable electronic device of claim 10, wherein the secondary device comprises a camera.

12. The portable electronic device of claim 10, wherein the secondary device comprises a scanner.

13. The portable electronic device of claim 10, wherein the secondary device comprises a positioning system.

14. The portable electronic device of claim 13, wherein the positioning system is configured to determine the location of the device using communication with one or more satellites.

15. The portable electronic device of claim 13, wherein the positioning system is configured to determine the location of the device using communication with one or more cellular towers.

16. The portable electronic device of claim 13, wherein the positioning system is configured to determine the location of the device based on communications with a short range wireless communication device.

17. The portable electronic device of claim 16, wherein the short-range wireless communication device comprises a wireless access point for Wi-Fi communications.

18. The portable electronic device of claim 16, wherein the short-range wireless communication device comprises a Bluetooth enabled device.

19. The portable electronic device of claim 10, wherein the wireless communication device comprises a near field communication device.

20. A system for conducting secure transactions comprising:

a server; and

a transaction terminal communicatively coupled to the server, wherein the transaction terminal is configured to communicate with the server to authenticate a portable electronic device for completion of a transaction.

21. The system of claim 20, wherein the transaction terminal comprises a screen configured to display a code readable by a portable electronic device.

22. The system of claim 20, wherein the transaction terminal comprises a short range wireless communication device configured to communicate with a portable electronic device.

23. The system of claim 22, wherein the short range communication device comprises a near field communication device.

24. The system of claim 20 comprising a database coupled to the server, wherein the database stores information for authenticating a portable electronic device.

25. The system of claim 24, wherein the database stores information related to the location of the transaction terminal.

26. The system of claim 24, wherein the database stores information related to the identity of the portable electronic device.

27. The system of claim 26, wherein the information related to the identity of the portable electronic device comprises a machine identifier.

28. The system of claim 26, wherein the information related to the identity of the portable electronic device comprises the identity of devices that have coupled to a port of the portable electronic device.

29. The system of claim 26, wherein the information related to the identity of the portable electronic device comprises contacts information.

30. The system of claim 20, wherein the transaction terminal is configured to receive information from a portable electronic device indicative of the location of the portable electronic device.

31. The system of claim 30, wherein the transaction terminal provides the location information to the server for comparison with location information of the transaction terminal.

32. The system of claim 20, wherein the transaction terminal is configured to communicate with a portable electronic device via a wireless access point.

33. The system of claim 20, wherein the transaction terminal is configured to communicate with a portable electronic device via a Bluetooth communication protocol.

34. The system of claim 20, wherein the transaction terminal is an automatic teller machine.

35. The system of claim 20, wherein the transaction terminal comprises a box structure surrounding a screen of the transaction terminal.

36. A method of wireless file transfer comprising:

generating a code;

displaying a code on a display;

waiting to receive a request for file transfer, wherein the file transfer request comprises a communication based on the code; and

opening a communication channel to complete the file transfer.

37. The method of claim 36, wherein the generated code comprises an encryption key and the request for file transfer is encrypted using the encryption key.

38. The method of claim 36, wherein the code comprises a file name.

39. The method of claim 36, wherein the code comprises a description of the file.

40. The method of claim 36, wherein the code comprises a QR code.

41. The method of claim 36, wherein opening a communication channel comprises opening an near field communication channel.

42. The method of claim 36 comprising setting up an ad-hoc Wi-Fi network for completion of the file transfer.

43. The method of claim 36, wherein more than one code is generated, the method comprising changing the code intermittently.

44. A method of authenticating comprising:

initiating short range wireless communications between a portable electronic device and a transaction terminal;

determining a location of the portable electronic device;

providing the location of the portable electronic device to the transaction terminal; and

comparing the location of the device with a location of a transaction terminal, wherein if the location of the device corresponds with the location of the terminal, the device is authenticated.

45. The method of claim 44, wherein a global positioning device determines the location of the portable electronic device.

46. The method of claim 44, wherein determining the location of the portable electronic device comprises using a cellular network.

47. The method of claim 44, wherein determining the location of the portable electronic device comprises using a Wi-Fi network.

48. The method of claim 44, wherein determining the location of the portable electronic device comprises using Bluetooth communications.

49. The method of claim 44, wherein comparing the location of the portable electronic device and the transaction terminal comprises obtaining transaction terminal location information from a database.

50. A method for authentication comprising:

requesting a user of a portable electronic device to provide authentication information;

sensing movement of a portable electronic device; and

comparing the sensed movement with a stored movement to determine if the sensed movement correlates with the stored movement.

51. The method of claim 50, comparing the sensed movement with a stored movement comprises comparing an amount of shaking in the sensed movement with an amount of shaking in the stored movement.

52. A method of setting a mode of authentication comprising:

selecting a gestural signature button from a setting menu;

detecting movement of a portable electronic device; and

storing the detected movement.

53. The method of claim 52, wherein detecting movement of a portable electronic device comprises detecting movement using accelerometers in the device while a set button on the device is pressed.

54. The method of claim 53, wherein the set button is a soft button located on a touch screen of the device.

55. The method of claim 53, wherein the gestural signature button is a soft button located on a touch screen of the device.

56. A method for fraud detection comprising:

receiving security information from a device during a transaction with the device;

storing the security information; and

comparing the security information with previously stored security information to determine if incongruities in transaction patterns exist.

57. The method of claim 56, wherein the security information comprises information related to the location of the device.

58. The method of claim 56, wherein the security information comprises information related to a mode of authentication used for the transaction.

59. The method of claim 56 comprising flagging the transaction for potential fraud if incongruities in transaction patterns exist.

60. The method of claim 56, wherein determining if incongruities in transaction patterns exist comprises comparing information related to a mode of authentication with the previously stored security information.

61. The method of claim 56, wherein determining if incongruities in transaction patterns exists comprises comparing information related to the location of the device with previously stored security information.