EXECUTING TRANSACTIONS SECURED USER CREDENTIALS

• US 20110215159A1
• Filed: 05/16/2011
• Published: 09/08/2011
• Est. Priority Date: 09/12/2007
• Status: Active Grant

• Current Assignee: DeviceFidelity, Inc. (Block, Inc. (f/k/a Square, Inc.))
• Original Assignee: DeviceFidelity, Inc. (Block, Inc. (f/k/a Square, Inc.))
• Inventors: Jain, Deepak
• Granted Patent: US 8,430,325 B2
• Time in Patent Office: Days
• US Class Current: 235/492
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06K 19/07707 the visual interface being a display, e.g. LCD or electronic ink
• CPC Class Codes: G06K 19/07739 comprising a first part capable of functioning as a record carrier on its own and a second part being only functional as a form factor changing part, e.g. SIM cards type ID 0001, removably attached to a regular smart card form factor
• CPC Class Codes: G06K 19/07773 Antenna details antennas for wireless devices, e.g. RFID tags, in general H01Q1/22
• CPC Class Codes: G06K 7/10237 the reader and the record carrier being capable of selectively switching between reader and record carrier appearance, e.g. in near field communication [NFC] devices where the NFC device may function as an RFID reader or as an RFID tag
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/355 Personalisation of cards for use
• CPC Class Codes: G06Q 20/3574 Multiple applications on card
• CPC Class Codes: G06Q 20/3576 Multiple memory zones on card
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/1008 : Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04B 1/3816 : Mechanical arrangements for accommodating identification devices, e.g. cards or chips; with connectors for programming identification devices
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce
• CPC Class Codes: H04L 41/32 : Specific management aspects for broadband networks
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 : using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0876 : based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04M 1/0274 : for an electrical connector module
• CPC Class Codes: H04M 1/7246 : by connection of exchangeable housing parts
• CPC Class Codes: H04M 17/103 : using SIMs (USIMs) or calling cards
• CPC Class Codes: H04M 17/106 : using commercial credit or debit cards
• CPC Class Codes: H04M 2017/12 : using calling, telephone credit/debit cards
• CPC Class Codes: H04M 2017/14 : using commercial credit/debit cards, e.g. VISA, AMEX
• CPC Class Codes: H04W 12/068 : using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 : using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 52/0254 : detecting a user operation or a tactile contact or a motion of the device
• CPC Class Codes: H04W 52/0274 : by switching on or off the equipment or parts thereof
• CPC Class Codes: H04W 88/02 : Terminal devices
• CPC Class Codes: Y02D 30/70 : in wireless communication networks

Abstract

In some implementations, a method includes interfacing a mobile device including a GUI. User credentials used to execute transactions with contactless devices are securely stored and associated with one or more enterprises. The secure memory includes master credentials and a master security framework that enables enterprises to store or update user credentials and associated security frameworks. Displays associated with the user credentials are dynamically generated and presented through the GUI of the mobile device. Wireless transactions are executed with contactless devices using the selectable user credentials.

Claims

1. An insertable device, comprising:

an electrical interface that interfaces a mobile device including a Graphical User Interface (GUI) in connection with inserting the insertable device in a port of the mobile device;

secure memory that stores user credentials used to execute transactions with contactless devices and are associated with one or more enterprises, the secure memory includes master credentials and a master security framework that enable enterprises to store or update user credentials and associated security frameworks;

a user-interface module that dynamically generates displays associated with the user credentials and presents the dynamically-generated displays through the GUI of the mobile device; and

a transaction module that executes wireless transactions with contactless devices using the selectable user credentials.

2. The insertable device of claim 1, wherein the electrical interface comprises at least one of a SecureDigital (SD) interface, a miniSD interface, a microSD interface, a MMC interface, a miniMMC, a microMMC, a firewire or an iDock interface, or a Universal Serial Bus (USB) interface.

3. The insertable device of claim 1, wherein the memory stores a plurality of security frameworks for the user credentials, the transaction module executes requested transactions using security frameworks from the plurality of security frameworks.

4. The insertable device of claim 1, wherein the wireless transactions are executed in response to at least user selections through the dynamically-generated displays.

5. The insertable device of claim 1, wherein the dynamically-generated displays present information based, at least in part, on at least one of real-time content during transactions, locally-stored offline content, or online content retrieved from the one or more enterprises.

6. The insertable device of claim 1, wherein the user-interface module further presents a request for user identification including at least one of a Personal Identification Number (PIN), user ID and password, or biometric signature through the GUI of the mobile host device, the transaction module further verifies the submitted user identification with user identification locally stored in the secure memory prior to executing requested transactions.

7. The insertable device of claim 1, further comprising an antenna module that selectively switches an RF antenna of the card between an activate state and an inactivate state in response to at least an event.

8. The insertable device of claim 1, wherein the wireless transactions include signals comprising at least one of contactless signals, proximity signals, Near Field Communication (NFC) signals, Bluetooth signals, Ultra-wideband (UWB) signals, or Radio Frequency Identifier (RFID) signals.

9. The insertable device of claim 1, wherein the card communicates with the card solely using SD signals.

10. The insertable device of claim 1, further comprising a cryptographic module that decrypts received signals prior to processing by the transaction module and encrypts at least part of the transaction response prior to wireless transmission.

11. The insertable device of claim 1, further comprising an authentication module that authenticates at least one of a network of the mobile host device or the mobile host device.

12. The insertable device of claim 1, further comprising a bootstrap module that executes one or more authentication processes in response to at least the electrical interface connecting with the mobile host device.

13. The insertable device of claim 12, wherein the one or more authentication processes authenticates at least one of a network or a mobile host device.

14. The insertable device of claim 1, further comprising an activation module that activates access, by the transaction module, to user credentials and transmits, using the mobile device, to an associated financial institution a request to activate an associated user account.

15. The insertable device of claim 14, wherein access to user credentials is activated based, at least in part, on a user manually entering an activation code using the GUI of the mobile host device.

16. The insertable device of claim 1, wherein the user of the mobile host device manages different user accounts associated with the user credentials using the GUI.

17. The insertable device of claim 1, further comprising a credentials module further configured to receive requests to update the user credentials through a wireless connection with a cellular core network or a wired connection with a broadband network.

18. The insertable device of claim 17, the communication module further configured to at least add new sets of user credentials or delete existing user credentials based, at least in part, on the update requests.

19. The insertable device of claim 1, wherein the user credentials include a default user credentials, the transaction module further configured to use the default user credentials after at least completing a requested transaction using different user credentials or expiration of a period of time to complete a transaction using non-default user credentials.

20. The insertable device of claim 1, wherein user credentials are loaded into the secure memory from a plurality of different enterprises.

21. The insertable device of claim 1, wherein the card comprises a microSD card.

22. A method, comprising:

interfacing a mobile device including a GUI;

securely storing user credentials used to execute transactions with contactless devices and are associated with one or more enterprises, the secure memory includes master credentials and a master security framework that enable enterprises to store or update user credentials and associated security frameworks;

dynamically generating displays associated with the selectable user credentials and presents the dynamically-generated displays through the GUI of the mobile device; and

executing wireless transactions with contactless devices using the selectable user credentials.

23. The method of claim 22, wherein the mobile device is interfaced through at least one of an SD interface, a miniSD interface, a microSD interface, a MMC interface, a miniMMC, a microMMC, a firewire interface, an iDock interface, or a USB interface.

24. The method of claim 22, wherein the requested transaction is executed independent of the mobile host device.

25. The method of claim 22, further storing a plurality of security frameworks for the user credentials, the transaction is executed using a security framework from the plurality of security frameworks corresponding to selected user credentials.

26. A microSD card, comprising:

an SD interface that connects to a mobile device including a GUI, wherein the SD interface communicates with the mobile device solely using SD signals;

an antenna module that selectively switches an RF antenna of the microSD card between an activate state and an inactivate state in response to at least an event

secure memory that stores a plurality of user credentials and an associated plurality of security frameworks used to execute transactions with contactless devices and are associated with one or more enterprises, the secure memory includes master credentials and a master security framework that enable enterprises to store or update user credentials and associated security frameworks;

a user-interface module that dynamically generates displays associated with the selectable user credentials and presents the dynamically-generated displays through the GUI of the mobile device, wherein the dynamically-generated displays present information based, at least in part, on at least one of real-time content during transactions, locally-stored offline content, or online content retrieved from the one or more enterprises; and

a transaction module that executes wireless transactions with contactless devices using the selectable user credentials.