METHOD AND APPARATUS FOR RECOVERY DURING AUTHENTICATION

• US 20110106709A1
• Filed: 10/30/2009
• Published: 05/05/2011
• Est. Priority Date: 10/30/2009
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Hirvikorpi, Mika Kristian, Puura, Sami Mikael
• Granted Patent: US 9,195,980 B2
• Time in Patent Office: Days
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/3255 using mobile network messaging services for payment, e.g. SMS
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 4/24 Accounting or billing
• CPC Class Codes: H04W 48/20 Selecting an access point

Abstract

Techniques for recovery during authentication include initiating sending a HyperText Transfer Protocol (HTTP) authentication message from user equipment of a user to a merchant node of a merchant. If the user is not authenticated in response to the HTTP authentication message, then sending a Short Message Service (SMS) message from the user equipment to the merchant node is initiated. The SMS message indicates a transaction between the user and the merchant. In some embodiments, techniques include changing an access point to a network until an access point utilized is on a list of acceptable access points, in response to a buy response message that indicates a transaction between a merchant and a user. A hypertext transfer protocol authentication message is sent through the access point that is on the list of acceptable access points

Claims

1. A method comprising:

initiating sending a hypertext transfer protocol authentication message from user equipment of a user to a merchant node of a merchant; and

if the user is not authenticated in response to the hypertext transfer protocol authentication message, then initiating sending, from the user equipment to the merchant node, a short message service message that indicates a transaction between the merchant and the user.

2. A method of claim 1, wherein initiating sending the hypertext transfer protocol authentication message further comprises initiating sending the hypertext transfer protocol authentication message through an access point that is not a wireless access protocol access point.

3. A method of claim 1, wherein:

initiating sending the hypertext transfer protocol authentication message further comprises initiating sending the hypertext transfer protocol authentication message in response to a buy response message that indicates a short message service address for the merchant node and text to identify the transaction; and

the short message service message is directed to the short message service address for the merchant and includes the text to identify the transaction.

4. A method of claim 3, wherein:

the buy response message includes a URL for the merchant node and an identifier for the transaction; and

the hypertext transfer protocol authentication message is directed to the URL.

5. A method of claim 1, further comprising, if a message that indicates an access code for a product to be delivered by the merchant according to the transaction is received in response to sending the short message service message, then causing the product to be retrieved based on the access code.

6. An apparatus comprising:

at least one processor; and

at least one memory including computer program code,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following;

initiate sending a hypertext transfer protocol authentication message for a user of the apparatus to a merchant node of a merchant; and

if the user is not authenticated in response to the hypertext transfer protocol authentication message, then initiate sending, to the merchant node, a short message service message that indicates a transaction between the merchant and the user.

7. An apparatus of claim 6, wherein initiating sending the hypertext transfer protocol authentication message further comprises initiating sending the hypertext transfer protocol authentication message through an access point that is not a wireless access protocol access point.

8. An apparatus of claim 6, wherein:

initiating sending the hypertext transfer protocol authentication message further comprises initiating sending the hypertext transfer protocol authentication message in response to a buy response message that indicates a short message service address for the merchant node and text to identify the transaction; and

the short message service message is directed to the short message service address for the merchant and includes the text to identify the transaction.

9. An apparatus of claim 6, wherein the apparatus is further caused, at least in part, to initiate retrieval of a product to be delivered by the merchant according to the transaction based on an access code for the product, if a message that indicates the access code is received in response to sending the short message service message.

10. An apparatus of claim 6, wherein the apparatus is a mobile phone further comprising:

user interface circuitry and user interface software configured to facilitate user control of at least some functions of the mobile phone through use of a display and configured to respond to user input; and

a display and display circuitry configured to display at least a portion of a user interface of the mobile phone, the display and display circuitry configured to facilitate user control of at least some functions of the mobile phone.

11. An apparatus comprising:

at least one processor; and

at least one memory including computer program code,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following;

generate a buy response message that indicates a transaction between a merchant and a user;

initiate sending the buy response message using hypertext transfer protocol to user equipment of the user;

receive a short message service message which indicates the transaction and an identifier for the user; and

authenticate the user based on the short message service message.

12. An apparatus of claim 11, wherein the identifier for the user in the short message service message identifies a sender of the short message service message and is provided by an operator that provides access to a communications network for the user equipment.

13. An apparatus of claim 11, wherein the identifier for the user is a mobile subscriber integrated services digital network number.

14. An apparatus of claim 11, wherein the buy response message further comprises data that indicates a short message service address for the merchant node.

15. An apparatus of claim 14, wherein the short message service address for the merchant node is a short code short message service address for the merchant node.

16. An apparatus of claim 11, wherein:

the buy response message further comprises short message service recovery text that indicates the transaction; and

the received short message service message includes the short message service recovery text.

17. A method comprising facilitating access, including granting access rights, to a service comprising:

sending, using hypertext transfer protocol, a buy response message that indicates a transaction between a merchant and a user;

receiving a short message service message that indicates the transaction and an identifier for the user; and

authenticating the user based on the short message service message.

18. A method of claim 17, wherein the identifier for the user in the short message service message identifies a sender of the short message service message and is provided by an operator that provides access to a communications network for the user equipment.

19. A method of claim 17, wherein the buy response message further comprises data that indicates an short message service address for the service.

20. An apparatus of claim 17, wherein:

the buy response message further comprises short message service recovery text that indicates the transaction; and

the received short message service message includes the short message service recovery text.

21. A method comprising:

in response to a buy response message that indicates a transaction between a merchant and a user, changing an access point to the network until an access point utilized is on a list of acceptable access points; and

initiating sending a hypertext transfer protocol authentication message through the access point that is on the list of acceptable access points.

22. A method of claim 21, wherein the list of acceptable access points is a list of wireless access protocol access points.