SYSTEM AND DEVICE FOR CONSOLIDATING SIM, PERSONAL TOKEN, AND ASSOCIATED APPLICATIONS FOR SECURE TRANSMISSION OF SENSITIVE DATA

• US 20110238580A1
• Filed: 12/30/2010
• Published: 09/29/2011
• Est. Priority Date: 10/23/2009
• Status: Abandoned Application

• Current Assignee: Apriva, LLC (APPSware Holdings, Inc.)
• Original Assignee: Apriva, LLC (APPSware Holdings, Inc.)
• Inventors: Coppinger, Paul D.
• Application Number:
  US12/982,285
• Publication Number:
  US 20110238580A1
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 67/306 User profiles

Abstract

The present invention relates generally to a smart card device that is configured to facilitate wireless network access and credential verification. Specifically, the device is configured to meet the physical and electrical specification for commercially available mobile devices utilizing a standard Subscriber Identity Module (SIM) for network access. The device combines the features of the SIM with Common Access Card or Personal Identity Verification card features to allow a network subscriber to invoke secure payment transactions over a carrier'"'"'s network. The system includes data storage for maintaining a plurality of network and transaction instrument profiles and a profile gateway for receiving transaction information from a payment gateway, sending an authorization request to a user'"'"'s mobile device, receiving a transaction authorization from the mobile device, and sending transaction information to a payment gateway to finalize the payment transaction.

Claims

1. A smart card device for facilitating transactions based on a plurality of transaction instruments, said smart card device comprising:

a memory element for storing a transaction instrument profile and at least one of;

a network profile or an identity profile;

an encryption element for encrypting a transaction account identifier using a first key to create an encrypted account identifier, wherein said transaction account identifier is retrieved from said transaction instrument profile;

a processor element in communication with said memory element and said interface element, wherein said processor element is configured to receive said encrypted account identifier and at least one of;

said network profile or said identity profile;

establish a connection between said communication device and a computing system by way of said wireless network, wherein said computing system decrypts said encrypted account identifier using a second key corresponding to said first key to create a decrypted account identifier and, wherein said computing system sends said decrypted account identifier to a transaction processor.

2. The smart card device of claim 1, further comprising an interface element for receiving a selection of said transaction account identifier, wherein said transaction account identifier is retrieved from said transaction instrument profile.

3. The smart card device of claim 1, wherein said a network profile includes at least one of:

a network identifier or a subscriber identifier.

4. The smart card device of claim 1, wherein said identity profile includes at least one of:

a user identifier or a verification credential.

5. The smart card device of claim 1, wherein said transaction instrument includes at least one of:

a user identifier, a verification identifier, or an account identifier.

6. The smart card device of claim 1, further comprising:

a receiving element for receiving an authorization request from a communication device processor, wherein said communication device processor receives said authorization request by way of a said wireless network; and

an interface element for presenting a credential prompt at said communication device, wherein said credential prompt is in response to said receiving said authorization request.

7. The smart card device of claim 1, further comprising:

a validation element for validating a user credential, wherein said user credential is provided to an interface of said communication device in response to a credential prompt, and wherein said validation is based on said user credential and said identity credential;

an interface element for presenting a transaction instrument prompt at said communication device, wherein said transaction instrument prompt is in response to said validating; and

a sending element for sending an authorization response to said communication device processor, wherein said authorization response is constructed based on a prompt response and said transaction account credential, and wherein said communication device processor sends said authorization response to said network.