SYSTEM AND METHOD FOR INCREASING SECURITY IN INTERNET TRANSACTIONS

• US 20130117186A1
• Filed: 11/05/2012
• Published: 05/09/2013
• Est. Priority Date: 11/05/2011
• Status: Abandoned Application

• Current Assignee: TIS Incorporated (It Holdings Corporation)
• Original Assignee: Sequent Software, Inc.
• Inventors: ROY, Kaushik, WEINSTEIN, Andrew
• Application Number:
  US13/669,006
• Publication Number:
  US 20130117186A1
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/4018 using the card verification value [CVV] associated with the card
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]

Abstract

Increasing security of financial transactions conducted over the Internet is disclosed. In an example, an apparatus may be configured to prompt a user for authorization to permit a pending purchase initiated by a purchase initiating device. The apparatus may establish, via a mobile network interface, a secure communication channel with a server and communicate a credential via the secure communication channel. The apparatus may generate a token based on the credential and communicate the token to the server via the mobile network interface.

Claims

1. An apparatus comprising:

a processor;

a mobile network interface;

a secure element storing a credential; and

a memory storing computer readable instructions that, when executed by the processor, cause the apparatus at least to perform;

prompting a user for authorization to permit a pending purchase initiated by a purchase initiating device;

establishing, via the mobile network interface, a secure communication channel with a server;

communicating the credential via the secure communication channel;

generating a token based on the credential; and

communicating the token to the server via the mobile network interface.

2. The apparatus of claim 1, wherein the secure element stores a plurality of credentials.

3. The apparatus of claim 2, wherein the computer readable instructions, when executed by the processor, cause the apparatus to receive a selection of a particular one of the plurality of credentials.

4. The apparatus of claim 1, wherein the generating of the token is based upon:

at least one of Track 1 data and Track 2 data of a credit card; and

a key.

5. The apparatus of claim 4, wherein the key is one of a symmetric key and an asymmetric key.

6. The apparatus of claim 1, wherein the generating of the token is based upon a counter value.

7. The apparatus of claim 1, wherein the computer readable instructions, when executed by the processor, cause the apparatus to communicate information along with the token to enable the server to recreate the token.

8. The apparatus of claim 1, wherein the computer readable instructions, when executed by the processor, cause the apparatus to:

receive a link via the mobile network interface to initiate the prompting of the user for authorization to permit the pending purchase; and

authenticate the link.

9. The apparatus of claim 8, wherein the computer readable instructions, when executed by the processor, cause the apparatus to present the link for user selection subsequent to authenticating the link.

10. A method comprising:

prompting a user for authorization to permit a pending purchase initiated by a purchase initiating device;

establishing, via a mobile network interface of a device, a secure communication channel with a server;

communicating a credential stored by a secure element of the device via the secure communication channel;

generating, by a processor of the device, a token based on the credential; and

communicating the token to the server via the mobile network interface.

11. The method of claim 10, wherein the generating of the token is based upon:

at least one of Track 1 data and Track 2 data of a credit card; and

a key.

12. The method of claim 10, wherein the generating of the token is based upon a counter value.

13. The method of claim 10, further comprising communicating information along with the token to enable the server to recreate the token.

14. The method of claim 10, further comprising:

receiving a link via the mobile network interface to initiate prompting of the user for authorization to permit the pending purchase; and

authenticating the link.

15. The method of claim 14, further comprising presenting the link for user selection subsequent to authenticating the link.

16. A computer readable medium storing computer executable instructions that, when executed, cause an apparatus at least to perform:

prompting a user for authorization to permit a pending purchase initiated by a purchase initiating device;

establishing, via a mobile network interface of the apparatus, a secure communication channel with a server;

communicating a credential stored by a secure element of the apparatus via the secure communication channel;

generating a token based on the credential; and

communicating the token to the server via the mobile network interface.

17. The computer readable medium of claim 16, wherein the generating of the token is based upon:

at least one of Track 1 data and Track 2 data of a credit card; and

a key.

18. The computer readable medium of claim 16, wherein the generating of the token is based upon a counter value.

19. The computer readable medium of claim 16, wherein the computer readable instructions, when executed, cause the apparatus to communicate information along with the token to enable the server to recreate the token.

20. The computer readable medium of claim 16, wherein the computer readable instructions, when executed, cause the apparatus to:

receive a link via the mobile network interface to initiate prompting of the user for authorization to permit the pending purchase;

authenticate the link; and

present the link for user selection subsequent to authenticating the link.

21. A system comprising:

a purchase initiating device configured to present a user interface and to receive a selection via the user interface indicating intent to purchase at least one item; and

a mobile device comprising;

a processor;

a mobile network interface;

a secure element storing a credential; and

a memory storing computer readable instructions that, when executed by the processor, cause the mobile device at least to perform;

prompting a user for authorization to permit a pending purchase initiated by the purchase initiating device;

establishing, via the mobile network interface, a secure communication channel with a server;

communicating the credential via the secure communication channel;

generating a token based on the credential; and

communicating the token to the server via the mobile network interface.

22. The system of claim 21, wherein the generating of the token is based upon at least one of:

at least one of Track 1 data and Track 2 data of a credit card;

a key; and

a counter value.

23. The system of claim 21, wherein the computer readable instructions, when executed, cause the mobile device to communicate information along with the token to enable the server to recreate the token.

24. The system of claim 21, wherein the computer readable instructions, when executed, cause the mobile device to:

receive a link via the mobile network interface to initiate prompting of the user for authorization to permit the pending purchase;

authenticate the link; and

present the link for user selection subsequent to authenticating the link.