Mobile banking and payment platform

• US 20100191602A1
• Filed: 12/15/2009
• Published: 07/29/2010
• Est. Priority Date: 06/27/2001
• Status: Abandoned Application

• Current Assignee: Skky, Inc.
• Original Assignee: Skky, Inc.
• Inventors: Luther, John P., Mikkelsen, John, Freidson, Robert
• Application Number:
  US12/653,550
• Publication Number:
  US 20100191602A1
• Time in Patent Office: Days
• US Class Current: 705/14.64
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 30/0267 Wireless devices
• CPC Class Codes: G06Q 30/0603 Catalogue ordering
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/289 Intermediate processing functionally located close to the data consumer application, e.g. in same machine, in same home or in same sub-network
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561
• CPC Class Codes: H04L 69/04 Protocols for data compression, e.g. ROHC
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

To eliminate, or at least substantially eliminate, the security concerns of conventional Internet-enabled mobile banking operations, and mobile banking operations in general, the present invention provides perhaps the most secure mobile banking and payment or product/service purchase method extent which avoids security problems of the Internet and provides a rapid transfer of transactional information and other information as desired, inclusive of revenue generating advertisements with the architecture and techniques of the present inventive Internet data protocol (DTP).

Claims

1. A wireless banking system comprising:

a mobile phone device for conducting wireless banking transactions and activities with a server system of a bank, credit union or other savings institution through a wireless communication network, wherein

said phone device comprises a digital signal processor, and optionally two or more processors inclusive of a digital signal processor, and wherein information in the form of a transaction and/or activities is concealed during transaction to and from the mobile phone.

2. The system of claim 1 further comprising cryptographic means.

3. The system of claim 2 further comprising covert data hiding means.

4. The system of claim 3 wherein said covert data hiding means comprises a secure steganographic algorithm means.

5. The system of claim 1 wherein data is digitally signed.

6. The system of claim 1 further comprising a user PIN, a transaction confirmation code and a transaction log.

7. The system of claim 1 further comprising a two-way message dialogue means between a bank system and user, and effective for a user or banking institution to resolve isues in response to any alert message or messages with one or more key strokes of a telephone push button array.

8. The system of claim 7 wherein in response to multiple alerts, a user may specifically and detectably respond to a specific alert.

9. The system of claim 1 wherein said mobile phone comprises a secure client application means effective for one or more of the following:

displaying menus;

processing user requests and responses;

prompting a user for information and collected user input;

generating transaction keys;

ciphering information and signing data;

sending and receiving transaction messages, optionally inclusive of product and/or service purchase information and description as to price and quantity;

encrypting and decrypting information and managing transaction security and confidentiality.

10. The system of claim 9 further comprising one or more servers effective for enabling communications between mobile users and financial institutions and for routing mobile banking transactions and/or activities exchanged between a client application in a mobile user'"'"'s phone and bank secure platform means at a user'"'"'s bank.

11. The system of claim 10 wherein the server is effective for one or more of the following functions:

to receive a user'"'"'s mobile banking requests;

interpret said requests;

format and forward said requests to a user'"'"'s bank for processing;

maintaining the status of requests;

logging transactions results or auditing and billing purposes;

receiving a bank'"'"'s responses and for sending same to the client application means; and

maintaining a list of financial institutions available with respect to the user'"'"'s services.

12. The system of claim 11 further comprising a bank secure platform means effective to perform transactions between mobile users and a bank or bank type system, and further effective to performing one or more of the following tasks:

facilitating communication between bank systems and end-users;

hosting response templates and pages;

authenticating mobile customers; and

ensuring the security of financial transactions and customer data.

13. The system of claim 9 wherein said client application means employs a non-Internet algorithmically compressed data transmission or SMS text message or a combination thereof.

14. The system of claim 1 further comprising a communication flow to process a user'"'"'s request, and which comprises the following steps:

the client application sends a mobile banking request using non-Internet data transfer protocol comprising transmission of compressed digital content(DTP) or SMS messages protocol or a combination of thereof to a server;

the BMS at the server translates this request into HTTPS requests or an XML request;

the BMS forwards the HTTPS requests to the BSP of the selected bank;

the BSP provides for the cryptographic operations;

the BSP communicates with the bank'"'"'s systems, using a series of web services;

the bank system responds;

BSP ciphers the necessary information before proceeding;

the BSP forwards and formats the response and then sends it to the BMS; and

the BMS compiles the response and sends it to the client application using the non-Internet data transfer protocol (DTP) comprising transmission of compressed digital content or SMS messages protocol or combination of thereof.

15. The system of claim 1 further comprising a network configuration comprising a payment service provider effective to service users having bank accounts with different financial institutions and/or to service more than one financial institution simultaneously, or at different times and/or to service users'"'"' in banking operations and transactions independent of users'"'"' mobile service provider.

16. The system of claim 1 which is securable through mobile clustering.

17. The system of claim 9 wherein information and/or data is secured by ciphering information in the client application.

18. The system of claim 1 wherein data, personal information and transaction details and financial information is stored exclusively at a bank or banking institution'"'"'s server or servers which has exclusive control over cryptographic means effective to secure financial information, personal information and transactions.

19. The system of claim 18 further comprising secret means known only to the client application and the bank or banking institution and are effective to encrypt and sign application data.

20. The system of claim 19 wherein data, financial and personal information and transactions comprise encryption with double length 3DES (128 bit) keys, and optionally comprise one or more transactional security standards selected from Derived Unique Key per Transaction (DUKPT), short-lived transactional contexts and key roles.

21. The system of claim 8 wherein said alert is effective to signify one or more of a low account balance or account balance magnitude, that a bill payment or other payment is due, and/or that there is an indication of suspicious activity associated with a credit or debit card or other transaction card, or personal or transactional information, or with any form of identity theft activity.

22. The system of claim 21 wherein the alert is one or more of informational, actionable, and interactive.

23. The system of claim 22 further comprising an interactive alert dialogue system means comprising one or more of the following:

an SMS Gateway (SMSG), a Bank Secure Platform means (BSP), and an Alert Dialogue Server means (ADS).

24. The system of claim 23 further comprising a spooler framework.

25. The system of claim 23 wherein the SMS Gateway is in communication with the SMS (SMSC) center of a mobile services operator and is effective to support one or more SMSC protocols conversion of HTTP-requests to binary text messages;

conversion of binary text messages to HTTP-requests;

retrial of conversion on failures and logging of transactions.

26. The system of claim 23 wherein the alert dialogue server is effective to perform one or more or allocation of dialogue ID and channel to a dialogue with session details matches of reply with corresponding dialogue and forwarding of an answer to BSP means.

27. The system of claim 25 wherein the BSP means is effective to provide one or more of authentication, protective guards, load control, dynamic reply-URL management, XML message checking and delivery of dialogue status.

28. The system of claim 1 comprising a hiding algorithm means effective to embed information and an extractor means to retrieve embedded information.

29. The system of claim 28 wherein the hiding algorithm means is effective for secure digital audio steganography.

30. The system of claim 1 comprising one or more phone devices which are issued with identifying brands and/or logos or trade dress or trademarks from a banking institution or similar institution.

31. The system of claim 1 wherein at any point during an operation employing a phone device an advertisement in the form of visual or audio content is displayed on a cell phone screen.