SECURE CONTENT TRANSFER USING DYNAMICALLY GENERATED OPTICAL MACHINE READABLE CODES

• US 20130219516A1
• Filed: 02/05/2013
• Published: 08/22/2013
• Est. Priority Date: 02/18/2012
• Status: Active Grant

• Current Assignee: Daniel S. Shimshoni
• Original Assignee: Daniel S. Shimshoni
• Inventors: Shimshoni, Daniel S.
• Granted Patent: US 9,210,146 B2
• Time in Patent Office: Days
• US Class Current: 726/28
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

Technologies are generally described for peer-to-peer or peer-to-server-to-peer communication systems based on mobile devices, servers, and personal computers, which utilize proximity communication and optical codes such as two-dimensional barcodes, in order to securely initiate and authorize digital data, file, and multimedia transfers, as well as digital financial transactions.

Claims

1. A method for a proximity based secure transaction initiation, the method comprising:

generating a unique text temporary token;

registering the temporary token with a server;

generating an optically readable code based on the temporary token;

displaying the optically readable code to a user; and

enabling the user to access a data exchange transaction by scanning the optically readable code.

2. The method of claim 1, further comprising:

authenticating the user by having scanned the optically readable code.

3. The method of claim 1, wherein registering the temporary token includes providing the token, one or more content keys, and an expiration rule to the server, wherein the expiration rule includes one or more of a time/date and a number of scans of the optically readable code.

4. The method of claim 1, further comprising:

rendering content available to the user until a latest of expiration dates of any token associated with the content and that of a content key.

5. The method of claim 4, further comprising:

generating a unique key for the content, wherein registering the temporary token further includes providing a storage location and the content key to the server.

6. The method of claim 4, further comprising:

assigning the content a validity expiration rule that includes one or more of a date/time and a number of downloads.

7. The method of claim 4, further comprising:

encrypting the content prior to registration with the server;

including a decryption key in the optically readable code; and

enabling the user to download the encrypted content from the server and decrypt using the scanned decryption key.

8. The method of claim 7, wherein the decryption key is configured to be a one-time-use key.

9. The method of claim 1, further comprising:

displaying the optically readable code on one or more of a mobile device display, a computer monitor, a public monitor, a website, and a physical material.

10. The method of claim 9, wherein the physical material is a label, a product, and a wall display.

11. A server for providing proximity based secure transaction initiation, the server comprising:

a memory configured to store instructions;

a communication module; and

a processor coupled to the memory and the communication module, the processor configured to;

receive a unique temporary token that includes at least a location of content to be made available to a user and a key associated with the content;

receive the temporary token from the user obtained through scanning of an optically readable code based on the temporary token; and

enable the user to access the content in response to receiving the temporary token.

12. The server of claim 11, wherein access to the content is restricted by an entity generating the optically readable code by one of restricting one of a visibility and a configuration of the optically readable code.

13. The server of claim 12, wherein the restriction of the configuration of the optically readable code includes one or more of restriction of results of a scan by time, an availability rule, and a privacy rule.

14. The server of claim 11, wherein the optically readable code is associated with a predefined system and access to the content is denied if the user lacks permission for accessing the predefined system.

15. The server of claim 11, wherein processor is further configured to ensure that no personal information is exchanged during the temporary token based authorization of the user to access the content.

16. The server of claim 11, wherein the processor is further configured to enable the user to access one or more of a social network, a communication system, a financial transaction system, and a service system that involves exchange of sensitive information in response to receiving the temporary token.

17. The server of claim 11, wherein the processor is further configured to enable the user to authenticate to a web based service in response to receiving the temporary token.

18. The server of claim 11, wherein the user is enabled to access the content through one of the server and directly from a storage location of the content.

19. A computer-readable storage medium with stored instructions thereon for a proximity based secure transaction initiation, the instructions comprising:

generating a unique text temporary token;

registering the temporary token with a server;

generating an optically readable code based on the temporary token;

displaying the optically readable code to a user on one or more of a mobile device display, a computer monitor, a public monitor, a website, and a physical material; and

one or more of enabling the user to access a data exchange transaction and authenticating the user by having scanned the optically readable code.

20. The computer-readable storage medium of claim 19, wherein the instructions further comprise:

enabling a plurality of users to access the data exchange transaction and terminate their access at their discretion.