METHOD AND APPARATUS FOR PROVIDING AUTOMATED PAYMENT

• US 20110258121A1
• Filed: 04/01/2011
• Published: 10/20/2011
• Est. Priority Date: 04/14/2010
• Status: Active Grant

• Current Assignee: RPX Corporation
• Original Assignee: Nokia Corporation
• Inventors: Tervo, Timo Pekka, Kauniskangas, Hannu Sakari, Koistinen, Kirmo Kalevi
• Granted Patent: US 9,183,552 B2
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/306 using TV related infrastructures external card used for payment with client device H04N21/4185
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3272 using an audio code
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes

Abstract

An approach is provided for conducting transactions via an audio token base payment system. An audio payment manager receives a request, at a device, for payment to a merchant, the request including a password. In response, the audio payment manager retrieves a personal identification number from a user of the device, an identifier associated with the user, a session code, or a combination thereof. The audio payment manager then generates an audio token at the device based, at least in part, on the password, the personal identification number, the identifier associated with the user, the session code, or the combination thereof, and causes, at least in part, conveyance of the audio token to the merchant to initiate the payment.

Claims

1. A method comprising:

receiving a request, at a device, for payment to a merchant, the request including a password;

retrieving a personal identification number from a user of the device, an identifier associated with the user, a session code, or a combination thereof in response to the request;

generating an audio token at the device based, at least in part, on the password, the personal identification number, the identifier associated with the user, the session code, or the combination thereof; and

causing, at least in part, conveyance of the audio token to the merchant to initiate the payment.

2. A method of claim 1, further comprising:

generating a secret key based, at least in part, on the password, the personal identification number, or a combination thereof; and

generating a message authentication code based, at least in part, on the secret key, the identifier associated with the user, the session code, the password, or a combination thereof,

wherein the generation of the audio token is based, at least in part, on the message authentication code, the identifier associated with the user, the password, or a combination thereof.

3. A method of claim 1, wherein the password is specified as an index number, the method further comprising:

retrieving the password from a table of pre-defined passwords based, at least in part, on the index number.

4. A method of claim 1, wherein the conveyance of the audio token is via an acoustic coupler between the device and a terminal of the merchant.

5. A method of claim 1, further comprising:

generating a message to indicate a use of the password with respect to the payment; and

causing, at least in part, transmission of the message to an authentication device,

wherein an authentication of the payment by the authentication device is based, at least in part, on the message, the session code, or a combination thereof.

6. A method of claim 1, wherein the password is a one-time password, the method further comprising:

receiving a receipt of the payment, the receipt including a replacement for the one-time password.

7. An apparatus comprising:

at least one processor; and

at least one memory including computer program code for one or more computer programs,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,

receive a request, at a device, for payment to a merchant, the request including a password;

retrieve a personal identification number from a user of the device, an identifier associated with the user, a session code, or a combination thereof in response to the request;

generate an audio token at the device based, at least in part, on the password, the personal identification number, the identifier associated with the user, the session code, or the combination thereof; and

cause, at least in part, conveyance of the audio token to the merchant to initiate the payment.

8. An apparatus of claim 7, wherein the apparatus is further caused to:

generate a secret key based, at least in part, on the password, the personal identification number, or a combination thereof; and

generate a message authentication code based, at least in part, on the secret key, the identifier associated with the user, the session code, the password, or a combination thereof,

wherein the generation of the audio token is based, at least in part, on the message authentication code, the identifier associated with the user, the password, or a combination thereof.

9. An apparatus of claim 7, wherein the password is specified as an index number, and wherein the apparatus is further caused to:

retrieve the password from a table of pre-defined passwords based, at least in part, on the index number.

10. An apparatus of claim 7, wherein the apparatus is further caused to:

generate a message to indicate a use of the password with respect to the payment; and

cause, at least in part, transmission of the message to an authentication device,

wherein an authentication of the payment by the authentication device is based, at least in part, on the message, the session code, or a combination thereof.

11. An apparatus of claim 7, wherein the password is a one-time password, and wherein the apparatus is further caused to:

receive a receipt of the payment, the receipt including a replacement for the one-time password.

12. An apparatus of claim 7, wherein the apparatus is a mobile phone further comprising:

user interface circuitry and user interface software configured to facilitate user control of at least some functions of the mobile phone through use of a display and configured to respond to user input; and

a display and display circuitry configured to display at least a portion of a user interface of the mobile phone, the display and display circuitry configured to facilitate user control of at least some functions of the mobile phone.

13. A method comprising:

receiving an audio token, from a device, in response to a request for payment;

decoding the content of the audio token, the content including at least in part, a password associated with the request, a personal identification number of a user of the device, an identifier associated with the user, a session code, or a combination thereof;

generating a payment authorization request based, at least in part, on the content, a merchant identifier, a point-of-sale identifier, a payment amount, or a combination thereof;

causing, at least in part, transmission of the payment authorization request to an authorization device to validate the payment; and

receiving a confirmation message, from the authorization device, regarding the payment in response to the transmission.

14. A method of claim 13, further comprising:

receiving a message authentication code associated with the audio token; and

authenticating the audio token based, at least in part, on the message authentication code,

wherein the generation, the transmission, a validation, or a combination thereof of the payment authorization is further based, at least in part, on the authentication.

15. A method of claim 13, wherein the session code is included in the content based, at least in part, on one or more criteria associated with the payment, a transaction associated with the payment, the device, a merchant associated with the transaction, or a combination thereof.

16. A method of claim 13, wherein the transmission of the payment authorization request is from a terminal of a merchant to the authorization device via a data connection, a voice connection, or a combination thereof.

17. An apparatus comprising:

at least one processor; and

at least one memory including computer program code for one or more computer programs,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,

receive an audio token, from a device, in response to a request for payment;

decode the content of the audio token, the content including at least in part, a password associated with the request, a personal identification number of a user of the device, an identifier associated with the user, a session code, or a combination thereof;

generate a payment authorization request based, at least in part, on the content, a merchant identifier, a point-of-sale identifier, a payment amount, or a combination thereof;

cause, at least in part, transmission of the payment authorization request to an authorization device to validate the payment; and

receive a confirmation message, from the authorization device, regarding the payment in response to the transmission.

18. An apparatus of claim 17, wherein the apparatus is further caused to:

receive a message authentication code associated with the audio token; and

authenticate the audio token based, at least in part, on the message authentication code,

wherein the generation, the transmission, a validation, or a combination thereof of the payment authorization is further based, at least in part, on the authentication.

19. An apparatus of claim 17, wherein the session code is included in the content based, at least in part, on one or more criteria associated with the payment, a transaction associated with the payment, the device, a merchant associated with the transaction, or a combination thereof.

20. An apparatus of claim 17, wherein the transmission of the payment authorization request is from a terminal of a merchant to the authorization device via a data connection, a voice connection, or a combination thereof.