System and Method for Secure Wi-Fi- Based Payments Using Mobile Communication Devices

• US 20140180931A1
• Filed: 12/09/2013
• Published: 06/26/2014
• Est. Priority Date: 12/07/2012
• Status: Abandoned Application

• Current Assignee: David Lie, Lian Ting Ni
• Original Assignee: David Lie, Lian Ting Ni
• Inventors: Lie, David, Ni, Lian Ting
• Application Number:
  US14/101,330
• Publication Number:
  US 20140180931A1
• Time in Patent Office: Days
• US Class Current: 705/75
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/401 Transaction verification

Abstract

A secure mobile payment method provides a customer with full functionality of a mobile communication device while operating in conjunction with security protocols for internet communication, such as TLS/SSL, and uses a digital signature to provide message integrity and sender verification. The method further employs a public-private key, where the sender hashes a message with a cryptographic hash and signs the hash with a private key, and a recipient uses the sender'"'"'s public key to decrypt the hash value.

Claims

1. A method suitable for making secure Wi-Fi-based payments using a customer mobile communication device, said method comprising the steps of:

establishing a secure communication network connection with at least one of a vendor and a vendor website;

verifying authenticity of a financial entity from which said vendor or said vendor website accepts payment;

initiating a financial transaction with said vendor or said vendor website using said secure communication network connection; and

completing said financial transaction using a payment method supported by said financial entity.

2. The method of claim 1 wherein at least one of said vendor website and said financial entity has a valid digital certificate.

3. The method of claim 1 wherein said vendor website has a digital certificate registered with said financial entity.

4. The method of claim 1 wherein said step of establishing comprises the step of obtaining a digital certificate from said vendor website.

5. The method of claim 1 wherein said step of completing said financial transaction comprises the step of obtaining payment authorization from said financial entity.

6. The method of claim 1 wherein said step of completing said financial transaction comprises the step of obtaining a transaction receipt.

7. The method of claim 1 further comprising the step of providing a direct Internet connection between said vendor website and said financial entity.

8. The method of claim 1 further comprising the step of exchanging public encryption keys between said vendor and said financial entity as part of a registration process.

9. The method of claim 1 further comprising the step of storing customer credit information on a customer mobile communication device prior to said step of establishing a secure communication network connection with at least one of a vendor and a vendor website.

10. The method of claim 9 wherein said step of storing credit information on a customer mobile communication device comprises the step of providing a private encryption key for use in said customer mobile communication device.

11. The method of claim 10 further comprising the step of encrypting and storing said customer credit information in said customer mobile communication device.

12. The method of claim 9 wherein said step of establishing a secure communication network connection with said vendor website comprises the step of providing a private key for use with said customer mobile communication device.

13. The method of claim 1 further comprising the step of using Transport Layer Security/Secure Socket Layer to create a secure communication channel between said vendor website and said financial entity.

14. The method of claim 1 further comprising the step of using Transport Layer Security/Secure Socket Layer to create a secure communication channel between said vendor website and the customer mobile communication device.

15. The method of claim 1 further comprising the step of using Transport Layer Security/Secure Socket Layer to create a secure communication channel between said financial entity and the customer mobile communication device.

16. A mobile device secure payment system comprising:

a customer mobile communication device having access to the Internet;

a vendor terminal having access to the Internet such that a secure communication network connection is established between said vendor terminal and said customer mobile communication device; and

a credit card workstation having access to the Internet such that a secure direct communication channel is provided between said credit card workstation and said vendor terminal.

17. The system of claim 16 wherein said vendor terminal comprises a valid digital certificate registered with said credit card workstation.

18. The system of claim 16 wherein said credit card workstation comprises a valid digital certificate.

19. The system of claim 16 wherein said customer mobile communication device comprises a private encryption key.

20. The system of claim 16 further comprising a secure communication channel created using Transport Layer Security/Secure Socket Layer, said secure communication channel providing a communication link between at least two of said financial entity, said vendor terminal, and the customer mobile communication device.