SYSTEM AND METHOD FOR CONSOLIDATING NETWORK AND IDENTIFICATION FUNCTIONS ON A COMMUNICATION DEVICE

• US 20120108296A1
• Filed: 12/14/2011
• Published: 05/03/2012
• Est. Priority Date: 10/23/2009
• Status: Abandoned Application

• Current Assignee: Apriva, LLC (APPSware Holdings, Inc.)
• Original Assignee: Apriva, LLC (APPSware Holdings, Inc.)
• Inventors: Coppinger, Paul D.
• Application Number:
  US13/325,205
• Publication Number:
  US 20120108296A1
• Time in Patent Office: Days
• US Class Current: 455/558
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/45 using multiple identity modules
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

The present invention relates generally to a smart card device that is configured to facilitate wireless network access and credential verification. Specifically, the device is configured to meet the physical and electrical specification for commercially available mobile devices utilizing a standard Subscriber Identity Module (SIM) for network access. The device combines the features of the SIM with Common Access Card or Personal Identity Verification card features to allow a network subscriber to invoke secure payment transactions over a carrier'"'"'s network. The system includes data storage for maintaining a plurality of network and transaction instrument profiles and a profile gateway for receiving transaction information from a payment gateway, sending an authorization request to a user'"'"'s mobile device, receiving a transaction authorization from the mobile device, and sending transaction information to a payment gateway to finalize the payment transaction.

Claims

1. A computer system provided on a communication device of a user, the system comprising:

communication means for communicating over a network; and

an integrated circuit card comprising

a memory storing a network profile corresponding to a network carrier of the user and storing an identify profile corresponding to a personal token of the user, and

a processor accessing the network profile to facilitate a network operation over a network and accessing the identify profile to verify an identity of the user.

2. The system of claim 1 wherein the network profile comprises a Global System for Mobile Communications (GSM) profile corresponding to a GSM carrier.

3. The method of claim 1 wherein the identity profile comprises a Common Access Card (CAC) profile corresponding to a CAC token.

4. The method of claim 1 wherein the identity profile comprises a Personal Identity Verification (PIV) profile corresponding to a PIV token.

5. The system of claim 1 wherein the network profile comprises information to allow the user to access the network.

6. The system of claim 1 wherein the network profile comprises information to allow the user to communicate over the network via email.

7. The system of claim 1 wherein the network profile comprises information to allow the user to communicate over the network via text message.

8. The system of claim 1 wherein the identity profile comprises information to allow the user to access a secure portion of the network.

9. The system of claim 1 wherein the identity profile comprises information to allow the user to encrypt data.

10. The system of claim 1 wherein the identity profile comprises information to allow the user to electronically sign a document.

11. The system of claim 1 wherein the identity profile comprises information to allow the user to enter controlled facilities.

12. The system of claim 1 wherein the integrated circuit card is a Subscriber Identity Module (SIM) card.

13. The system of claim 1 wherein the memory stores a second network profile corresponding to a second network carrier of the user.

14. The system of claim 13 wherein the processor accesses a default network profile.

15. The system of claim 13 wherein the processor accesses a network profile selected by the user.

16. The system of claim 13 wherein the processor accesses a network profile determined by applying a rule designated by the user.

17. The system of claim 1 wherein the memory stores a second identity profile corresponding to a second personal token of the user.

18. A system implemented on an integrated circuit card on a communication device of a user, the system comprising:

a memory storing a network profile corresponding to a network carrier of the user and storing an identify profile corresponding to a personal token of the user; and

a processor accessing the network profile to facilitate a network operation over a network and accessing the identify profile to verify an identity of the user.

19. The system of claim 18 wherein the network profile comprises a Global System for Mobile Communications (GSM) profile corresponding to a GSM carrier.

20. The system of claim 18 wherein the identity profile comprises a Common Access Card (CAC) profile corresponding to a CAC token.

21. The system of claim 18 wherein the identity profile comprises a Personal Identity Verification (PIV) profile corresponding to a PIV token.

22. The system of claim 18 wherein the network profile comprises information to allow the user to access the network.

23. The system of claim 18 wherein the network profile comprises information to allow the user to communicate over the network via email.

24. The system of claim 18 wherein the network profile comprises information to allow the user to communicate over the network via text message.

25. The system of claim 18 wherein the identity profile comprises information to allow the user to access a secure portion of the network.

26. The system of claim 18 wherein the identity profile comprises information to allow the user to encrypt data.

27. The system of claim 18 wherein the identity profile comprises information to allow the user to electronically sign a document.

28. The system of claim 18 wherein the identity profile comprises information to allow the user to enter controlled facilities.

29. The system of claim 18 wherein the memory and processor are provided on a Subscriber Identity Module (SIM) card.

30. The system of claim 18 wherein the memory stores a second network profile corresponding to a second network carrier of the user.

31. The system of claim 30 wherein the processor accesses a default network profile.

32. The system of claim 30 wherein the processor accesses a network profile selected by the user.

33. The system of claim 30 wherein the processor accesses a network profile determined by applying a rule designated by the user.

34. The system of claim 18 wherein the memory stores a second identity profile corresponding to a second personal token of the user.

35. A method, performed by an integrated circuit card on a communication device of a user, the method comprising the steps of:

storing a network profile corresponding to a network carrier of the user;

storing an identify profile corresponding to a personal token of the user;

accessing the network profile to facilitate a network operation over a network; and

accessing the identify profile to verify an identity of the user.

36. The method of claim 35 wherein the step of storing the network profile comprises storing a Global System for Mobile Communications (GSM) profile corresponding to a GSM carrier.

37. The method of claim 35 wherein the step of storing an identity profile comprises storing a Common Access Card (CAC) profile corresponding to a CAC token.

38. The method of claim 35 wherein the step of storing an identity profile comprises storing a Personal Identity Verification (PIV) profile corresponding to a PIV token.

39. The method of claim 35 wherein the step of accessing the network profile to facilitate a network operation comprises accessing the network profile to allow the user to access the network.

40. The method of claim 35 wherein the step of accessing the network profile to facilitate a network operation comprises accessing the network profile to allow the user to communicate over the network via email.

41. The method of claim 35 wherein the step of accessing the network profile to facilitate a network operation comprises accessing the network profile to allow the user to communicate over the network via text message.

42. The method of claim 35 wherein the step of accessing the identity profile to verify the identity of the user comprises accessing the identify profile to allow the user to access a secure portion of the network.

43. The method of claim 35 wherein the step of accessing the identity profile to verify the identity of the user comprises accessing the identify profile to allow the user to encrypt data.

44. The method of claim 35 wherein the step of accessing the identity profile to verify the identity of the user comprises accessing the identify profile to allow the user to electronically sign a document.

45. The method of claim 35 wherein the step of accessing the identity profile to verify the identity of the user comprises accessing the identify profile to allow the user to enter controlled facilities.

46. The method of claim 35, further comprising the step of storing a second network profile corresponding to a second network carrier of the user.

47. The method of claim 46 wherein the step of accessing the network profile comprises accessing a default network profile.

48. The method of claim 46 wherein the step of accessing the network profile comprises accessing a network profile selected by the user.

49. The method of claim 46 wherein the step of accessing the network profile comprises accessing a network profile determined by applying a rule designated by the user.

50. The method of claim 35, further comprising the step of storing a second identity profile corresponding to a second personal token of the user.