MOBILE PEER-TO-PEER AUTHENTICATED TRANSFERS

• US 20150012444A1
• Filed: 09/26/2014
• Published: 01/08/2015
• Est. Priority Date: 06/02/2011
• Status: Abandoned Application

• Current Assignee: Cryptite LLC
• Original Assignee: Cryptite LLC
• Inventors: Brown, Kerry D., Knapp, Ronald P.
• Application Number:
  US14/498,128
• Publication Number:
  US 20150012444A1
• Time in Patent Office: Days
• US Class Current: 705/76
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning

Abstract

A peer-to-peer transaction security method includes authentication and identification steps for pushing an encrypted colorgram from a transaction server to a first personal trusted device. Such provides a visual key for user authentication. Persona descriptors may be included for user identification. A decryption of the colorgram is displayed on the first personal trusted device to be optically captured by a second personal trusted device. The image captured from the second personal trusted device is encrypted and uploaded to the transaction server. In some cases, the persona descriptors alone are used to build a composite rendering for identification of the first user by the second user. The second user clicks and returns an acceptance if they recognize the composite drawing as a reasonable persona of the first user.

Claims

1. An electronic transaction security method for peer-to-peer authenticated transfers between independent users each equipped with a personal trusted device, comprising the steps of:

pushing an encryption of a first video image from a transaction server over a network to a first personal trusted device;

displaying a decryption of the encrypted video image reconstituted as the first video image on said first personal trusted device;

optically capturing a second video image of that displayed on said first personal trusted device with a second personal trusted device;

uploading an encryption of the second video image from the second personal trusted device to the transaction server; and

authenticating an associated transaction between independent users respectively equipped with the first and second personal trusted devices based on a comparison of the first video image that was pushed to the first personal trusted device and the second video image that was uploaded from the second personal trusted device.

2. The electronic transaction security method of claim 1, further comprising:

including within the pushing of the encrypted video image at least one coupon, advertising, and/or uniform resource locator (URL) link to the first personal trusted device.

3. The electronic transaction security method of claim 2, further comprising:

building a graphical persona;

uploading an image for identification;

wherein user identification is enabled and required to complete authenticated transfers between independent users.

4. The electronic transaction security method of claim 3, further comprising:

inputting a drawing board that updates as persona descriptor choices from a standardized library.

5. The electronic transaction security method of claim 1, further comprising:

including a display advertisement in the first video image pushed as the encrypted video image to the first personal trusted device.

6. The electronic transaction security method of claim 1, further comprising:

including a coupon in the first video image pushed as the encrypted video image to the first personal trusted device.

7. The electronic transaction security method of claim 1, further comprising:

including a hyperlink to a website in the first video image pushed as the encrypted video image to the first personal trusted device.

8. The electronic transaction security method of claim 1, further comprising:

including persona descriptors in the encryption of a first video image pushed from a transaction server over to the first personal trusted device that include distinctive elements of a caricature of a registered user;

building a composite rendering of the caricature from the persona descriptors optically transferred to the second personal trusted device; and

requiring a resemblance between the appearance of a user of the first personal trusted device and the composite rendering of the caricature from the persona descriptors by the second personal trusted device to be acknowledged.

9. The electronic transaction security method of claim 1, further comprising:

automating the previous steps as instructions in a computer program app for installation and execution by the first and second personal trusted devices.