Secure Mobile-Based Financial Transactions

• US 20150242838A1
• Filed: 04/28/2015
• Published: 08/27/2015
• Est. Priority Date: 10/27/2009
• Status: Active Grant

• Current Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Original Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Inventors: White, Spencer Neil
• Granted Patent: US 9,519,899 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/202 Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/3255 using mobile network messaging services for payment, e.g. SMS
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation

Abstract

Devices, systems and methods are disclosed which relate to securing payments from a mobile communications device. In exemplary embodiments, a mobile communications device communicates with a payment server via a point-of-sale device to conduct a transaction. The mobile communications device uses a client payment logic to send payment information to the point-of-sale device. The point-of-sale device uses a vendor payment logic to forward the payment information to the payment server. The payment server verifies the payment information and sends confirmation to the point-of-sale device.

Claims

1. A mobile communications device comprising:

a processor; and

a memory storing instructions that, when executed by the processor, cause the processor to perform operations comprising

receiving, from a point-of-sale device, a one-time digital key and an amount associated with a transaction,

generating a random number,

generating a payment number by combining the one-time digital key with the random number, wherein combining the one-time digital key with the random number comprises mixing numbers of the one-time digital key with numbers of the random number,

sending, to a payment server, a payment comprising the payment number and the amount, and

receiving, from the point-of-sale device, an acknowledgment of the payment, wherein the amount associated with the payment is deducted from an account associated with the mobile communications device.

2. The mobile communications device of claim 1, wherein the operations further comprise receiving, from the payment server after receiving the acknowledgment of the payment, a new one-time digital key for use with a new transaction.

3. The mobile communications device of claim 1, wherein the operations further comprise receiving, when the amount associated with the payment exceeds a payment cap, a verification message requesting authorization of the transaction from a user of the mobile communications device.

4. The mobile communications device of claim 3, wherein the operations further comprise providing, in response to the verification message and the user authorizing the transaction, a verification of the transaction.

5. The mobile communications device of claim 3, wherein the operations further comprise receiving, from the user in response to the verification message, a command to cancel the transaction based on the user not recognizing the transaction.

6. The mobile communications device of claim 1, wherein the one-time digital key is received from the point-of-sale device versus the payment server when the mobile communications device is not connected to the payment server via a cellular network.

7. The mobile communications device of claim 1, wherein the mobile communications device and the point-of-sale device communicate via a first wireless network and the mobile communications device and the payment server communicate via a second wireless network.

8. A memory storing instructions that, when executed by a processor of a mobile communications device, cause the processor to perform operations comprising:

receiving, from a point-of-sale device, a one-time digital key and an amount associated with a transaction;

generating a random number;

generating a payment number by combining the one-time digital key with the random number, wherein combining the one-time digital key with the random number comprises mixing numbers of the one-time digital key with numbers of the random number;

sending, to a payment server, a payment comprising the payment number and the amount; and

receiving, from the point-of-sale device, an acknowledgment of the payment, wherein the amount associated with the payment is deducted from an account associated with the mobile communications device.

9. The memory of claim 8, wherein the operations further comprise receiving, from the payment server after receiving the acknowledgment of the payment, a new one-time digital key for use with a new transaction.

10. The memory of claim 8, wherein the operations further comprise receiving, when the amount associated with the payment exceeds a payment cap, a verification message requesting authorization of the transaction from a user of the mobile communications device.

11. The memory of claim 10, wherein the operations further comprise providing, in response to the verification message and the user authorizing the transaction, a verification of the transaction.

12. The memory of claim 10, wherein the operations further comprise receiving, from the user in response to the verification message, a command to cancel the transaction based on the user not recognizing the transaction.

13. The memory of claim 8, wherein the one-time digital key is received from the point-of-sale device versus the payment server when the mobile communications device is not connected to the payment server via a cellular network.

14. The memory of claim 9, wherein the mobile communications device and the point-of-sale device communicate via a first wireless network and the mobile communications device and the payment server communicate via a second wireless network.

15. A mobile communications device comprising:

a processor; and

a memory storing instructions that, when executed by the processor, cause the processor to perform operations comprising

receiving, from a payment server, a one-time digital key,

receiving, from a point-of-sale device, an amount associated with a transaction,

generating a random number,

generating a payment number by combining the one-time digital key with the random number, wherein combining the one-time digital key with the random number comprises mixing numbers of the one-time digital key with numbers of the random number,

sending, to the point-of-sale device, a payment comprising the payment number and the amount, and

receiving, from the point-of-sale device, an acknowledgment of the payment, wherein the amount associated with the payment is deducted from an account associated with the mobile communications device.

16. The mobile communications device of claim 15, wherein the operations further comprise receiving, from the payment server after receiving the acknowledgment of the payment, a new one-time digital key for use with a new transaction.

17. The mobile communications device of claim 15, wherein the operations further comprise receiving, when the amount associated with the payment exceeds a payment cap, a verification message requesting authorization of the transaction from a user of the mobile communications device.

18. The mobile communications device of claim 17, wherein the operations further comprise providing, in response to the verification message and the user authorizing the transaction, a verification of the transaction.

19. The mobile communications device of claim 17, wherein the operations further comprise receiving, from the user in response to the verification message, a command to cancel the transaction based on the user not recognizing the transaction.

20. The mobile communications device of claim 15, wherein the one-time digital key is received from the payment server versus the point-of-sale device when the mobile communications device is connected to the payment server via a cellular network.