Method, system, server and computer program for services

• US 20100306109A1
• Filed: 05/24/2010
• Published: 12/02/2010
• Est. Priority Date: 05/28/2009
• Status: Abandoned Application

• Current Assignee: Teliasonera AB
• Original Assignee: Teliasonera AB
• Inventors: Keisala, Ilkka
• Application Number:
  US12/800,837
• Publication Number:
  US 20100306109A1
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/06 Authentication

Abstract

The invention is related to a system, comprising: an authentication server configured to carry out authentication based on a user identity module for defining a user identification; an authorization server configured to check information on user'"'"'s entitlement to services based on the user identification; a gateway server configured to establish a secured connection, receive a payment message from a service server, forward the payment message to the user, receive a message comprising user'"'"'s acceptance of a payment transaction, convey the user'"'"'s acceptance of the payment to the service server, and add the user identification to the secured connection or the message comprising the user'"'"'s acceptance of a payment transaction; and a service server configured to secure a payment transaction by using the user identification.

Claims

1. A method comprising:

carrying out authentication based on a user identity module for defining a user identification by an authentication server and a home location register;

checking information on user'"'"'s entitlement to services based on the user identification by an authorization server;

if the user is entitled to secured connection services,

establishing a secured connection session between a user device and a gateway server by the gateway server;

receiving a payment message from a service server, forwarding the payment message to the user, and receiving a message comprising user'"'"'s acceptance of a payment transaction by the gateway server;

adding the user identification to the secured connection or the message comprising the user'"'"'s acceptance of a payment transaction, and conveying the user'"'"'s acceptance of the payment transaction to the service server by the gateway server; and

securing the payment transaction by using the user identification by the service server or the gateway server.

2. The method of claim 1, wherein the authentication server is an extensible authentication protocol subscriber identity module (EAP-SIM) server, the gateway server is a packet data gateway (PDG) or a signaling gateway (SGW) and the authorization server is a remote authentication dial-in user service server.

3. The method of claim 1, wherein the user identification is stored on a subscriber identity module and the user is operationally coupled to an unsecured network via the secured connection session.

4. The method of claim 1, wherein the user uses a universal serial bus device in which a subscriber identity module and a payment functionality have been integrated.

5. The method of claim 1, further comprising:

determining the existence of a subscriber identity module including a payment functionality by the gateway server or a credit server;

requesting the user for a credit card number and user identification.

6. The method of claim 1, further comprising in securing:

verifying for a credit server that the user identification is related to the secured connection in question by the gateway server, and adding the user identification to the secured connection or to the message comprising the user'"'"'s acceptance of a payment transaction, and conveying the message by the gateway server to a credit server for securing a payment transaction.

7. The method of claim 1, further comprising in securing:

verifying for a credit server that the user identification is related to the secured connection in question by the gateway server, or adding the user identification to the secured connection or to the message comprising the user'"'"'s acceptance of a payment transaction, and conveying the message by the gateway server to a credit server for securing a payment transaction.

8. The method of claim 1, wherein the service server is further configured to forward the accepted payment message to a credit server.

9. A system, comprising:

an authentication server configured to carry out authentication based on a user identity module for defining a user identification;

an authorization server configured to check information on user'"'"'s entitlement to services based on the user identification;

a gateway server configured to establish a secured connection, receive a payment message from a service server, forward the payment message to the user, receive a message comprising user'"'"'s acceptance of a payment transaction, convey the user'"'"'s acceptance of the payment to the service server, and add the user identification to the secured connection or the message comprising the user'"'"'s acceptance of a payment transaction; and

a service server configured to secure a payment transaction by using the user identification.

10. The system of claim 9, wherein the authentication server is an authentication protocol subscriber identity module (EAP-SIM) server, the gateway server is a packet data gateway (PDG) or a signaling gateway (SGW), and the authorization server is a remote authentication dial-in user service server.

11. The system of claim 9, further comprising:

a router configured to route service requests to each service server by a proxy server.

12. The system of claim 9, wherein the user identification is stored on a subscriber identity module and the user is operationally coupled to an unsecured network.

13. The system of claim 9, the system further comprising a universal serial bus device in which a subscriber identity module and a payment functionality have been integrated.

14. The system of claim 9, wherein the gateway server is further configured to determine the existence of a subscriber identity module including a payment functionality and to request the user for a credit card number and user identification.

15. The system of claim 9, wherein the gateway server is further configured to verify for a credit server that the user identification is related to the secured connection in question, and to add the user identification to the secured connection or to the message comprising the user'"'"'s acceptance of a payment transaction, and to convey the message by the gateway server to a credit server for securing a payment transaction.

16. The system of claim 9, wherein the service server is further configured to validate the accepted payment message and forward it to a credit server.

17. An apparatus, comprising a processing unit and a memory including a computer program code, the memory and the computer program code configured to, with the processor, cause the apparatus at least to:

establish a secured connection;

receive a payment message from a service server;

forward the payment message to a user;

receive a message comprising user'"'"'s acceptance of a payment transaction;

add a predetermined user identification to the secured connection or the message comprising the user'"'"'s acceptance of a payment transaction; and

convey the user'"'"'s acceptance of the payment transaction to the service server.

18. The apparatus of claim 17, the apparatus being a packet data gateway (PDG) or a signaling gateway (SGW).

19. The apparatus of claim 17, further configured to determine the existence of a subscriber identity module including a payment functionality and requesting the user for a credit card number and user identification.

20. The apparatus of claim 17, further configured to add the user identification to a response message of the secured connection, the response message being intended to a credit server for securing a payment transaction.

21. The apparatus of claim 17, further configured to verify for a credit server that the user identification is related to the secured connection in question.

22. The apparatus of claim 17, further configured to inform the service server about the verification and the securing of a payment transaction by adding the user identification to a hypertext transfer protocol secure request used to secure the payment transaction.

23. A computer program product, embodied on a computer-readable medium configured to control a processor to perform a method, the method comprising:

carrying out authentication based on a user identity module for defining a user identification by an authentication server and a home location register;

checking information on user'"'"'s entitlement to services based on the user identification by an authorization server;

if the user is entitled to secured connection services

establishing a secured connection session between a user device and a gateway server by the gateway server;

receiving a payment message from a service server, forwarding the payment message to the user, and receiving a message comprising user'"'"'s acceptance of a payment transaction by the gateway server;

adding the user identification to the secured connection or the message comprising the user'"'"'s acceptance of a payment transaction, and conveying the user'"'"'s acceptance of the payment transaction to the service server by the gateway server; and

securing the payment transaction by using the user identification by the service server or the gateway server.

24. The computer program of claim 23, wherein the authentication server is an extensible authentication protocol subscriber identity module (EAP-SIM) server, the gateway server is a packet data gateway (PDG) or a signaling gateway (SGW) and the authorization server is a remote authentication dial-in user service server.

25. The computer program of claim 23, further comprising:

determining the existence of a subscriber identity module including a payment functionality by the gateway server or a credit server;

requesting the user for a credit card number and user identification.