SYSTEM AND DEVICE FOR FACILITATING A SECURE TRANSACTION WITH A VALIDATED TOKEN

• US 20110238579A1
• Filed: 12/30/2010
• Published: 09/29/2011
• Est. Priority Date: 10/23/2009
• Status: Abandoned Application

• Current Assignee: Apriva, LLC (APPSware Holdings, Inc.)
• Original Assignee: Apriva, LLC (APPSware Holdings, Inc.)
• Inventors: Coppinger, Paul D.
• Application Number:
  US12/982,241
• Publication Number:
  US 20110238579A1
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 67/306 User profiles

Abstract

The present invention relates generally to a smart card device that is configured to facilitate wireless network access and credential verification. Specifically, the device is configured to meet the physical and electrical specification for commercially available mobile devices utilizing a standard Subscriber Identity Module (SIM) for network access. The device combines the features of the SIM with Common Access Card or Personal Identity Verification card features to allow a network subscriber to invoke secure payment transactions over a carrier'"'"'s network by way of a transaction account token. The system includes data storage for maintaining a plurality of network and transaction instrument profiles and a profile gateway for receiving transaction information from a payment gateway, sending an authorization request to a user'"'"'s mobile device, receiving a transaction authorization from the mobile device, and sending transaction information to a payment gateway to finalize the payment transaction.

Claims

1. A processor for providing wireless network and secure personal token features to a communication device, said processor element configured to:

process a selection of at least one of;

a network profile, an identity profile, or a transaction instrument profile to create transaction parameters;

retrieve a token based on said transaction parameters; and

establish a connection between said communication device and a computing system by way of said wireless network, wherein said computing system searches a database to locate a record corresponding to said token; and

retrieves account information from said database based on said search; and

transform said account information to create an authorization request; and

receive said authorization request from said computing system.

2. The processor of claim 1, wherein said a network profile includes at least one of:

a network identifier or a subscriber identifier.

3. The processor of claim 1, wherein said identity profile includes at least one of:

a user identifier or a verification credential.

4. The processor of claim 1, wherein said transaction instrument profile includes at least one of:

a user identifier, a verification identifier, or an account identifier.

5. The processor of claim 1, wherein said authorization request is received by way of said wireless network.

6. The processor of claim 1, further configured to:

present a credential prompt at said communication device, wherein said credential prompt is in response to said receiving said authorization request.

receive a user credential in response to said credential prompt;

validate said user credential based on said user credential and said identity credential; and

send an authorization response to said computer system.

7. The device of claim 6, wherein said user credential is a Personal Identification Number (PIN).

8. The device of claim 1, wherein said computing system is at least one of:

a Point of Sale (POS) device or a profile gateway.