SECURE PROXIMITY EXCHANGE OF PAYMENT INFORMATION BETWEEN MOBILE WALLET AND POINT-OF-SALE

• US 20150317626A1
• Filed: 04/30/2014
• Published: 11/05/2015
• Est. Priority Date: 04/30/2014
• Status: Abandoned Application

• Current Assignee: Intuit, Inc.
• Original Assignee: Intuit, Inc.
• Inventors: Ran, Alexander, Dunn, Eric C. W.
• Application Number:
  US14/266,696
• Publication Number:
  US 20150317626A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/202 Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3829 involving key management

Abstract

A method for processing payment is disclosed. The method includes obtaining, by a point-of-sale (POS) device from a certification authority, a certificate data item that identifies the POS device for completing a purchase by a consumer, generating a payment request containing the certificate data item, broadcasting the payment request via a wireless signal within a pre-determined range of the POS device for receiving by a mobile device of the consumer, where the mobile device stores payment credential of the consumer, receiving, by the POS device, an encrypted payment credential from the mobile device, where the encrypted payment credential is generated by the mobile device encrypting the payment credential based on the certificate data item, and decrypting the encrypted payment credential based on the certificate data item to retrieve the payment credential for processing the payment.

Claims

1. A method for processing payment, comprising:

submitting, by a point-of-sale (POS) device to a certification authority, a certificate request for a certificate data item that identifies the POS device for completing a purchase by a consumer, wherein the certificate request comprises a visual attribute of the POS device that is embedded in the certificate data item by the certification authority;

obtaining, in response to the certificate request and by the POS device from the certification authority, the certificate data item;

generating, by the POS device, a payment request for the payment to complete the purchase, wherein the payment request comprises the certificate data item;

broadcasting, by the POS device without associating to any specific recipient, the payment request via a wireless signal within a pre-determined range of the POS device, wherein the payment request is received by a mobile device of the consumer via the wireless signal, wherein the mobile device stores payment credential of the consumer, and

wherein the mobile device extracts the visual attribute from the payment request for displaying to the consumer;

receiving, by the POS device in response to the broadcasting, an encrypted payment credential from the mobile device of the consumer, wherein the encrypted payment credential is generated by the mobile device encrypting the payment credential based on the certificate data item, wherein the consumer selects the POS device to submit the encrypted payment credential in response to viewing the visual attribute;

decrypting the encrypted payment credential based on the certificate data item to retrieve the payment credential for processing the payment; and

further broadcasting, contemporaneously with the POS device broadcasting the payment request, an unintended payment request by an adjacent POS device in proximity to the POS device,

wherein the mobile device displays, to the consumer, the visual attribute to prevent the consumer from selecting the adjacent POS to submit the encrypted payment credential.

2. The method of claim 1,

wherein the certificate data item comprises a public encryption key certified by the certification authority,

wherein the mobile device encrypting the payment credential based on the certificate data item is by using the public encryption key, and

wherein decrypting the encrypted payment credential based on the certificate data item is by using a private encryption key associated with the public encryption key.

3. The method of claim 2, wherein processing the payment comprises:

sending, by the POS device, the payment credential to a first payment service servicing a merchant operating the POS device.

4. The method of claim 3, wherein processing the payment further comprises:

sending, by the first payment service, the payment credential to a second payment service servicing the consumer.

7. The method of claim 1,

wherein the visual attribute comprises at least one selected from a group consisting of a visual identifier of the POS device and a facial image of a person operating the POS device.

5. (canceled)

6. The method of claim 5,

wherein the unintended payment request comprises another certificate data item having another visual attribute embedded by the certification authority, and

wherein the mobile device displays the another visual attribute to the consumer to further prevent the consumer from selecting the adjacent POS to submit the encrypted payment credential.

8. A system for processing payment, comprising:

a point-of-sale (POS) device;

an adjacent POS device in proximity to the POS device;

a mobile device of a consumer; and

a certification authority interfacing with the POS device and configured to;

providing a certificate data item to the POS device, wherein the certificate data item identifies the POS device for completing a purchase by the consumer,

wherein the POS device is configured to;

submit, to the certification authority, a certificate request for the certificate data item, wherein the certificate request comprises a visual attribute of the POS device that is embedded in the certificate data item by the certification authority,

obtain, in response to the certificate request and from the certification authority, the certificate data item,

generate a payment request for the payment to complete the purchase, wherein the payment request comprises the certificate data item,

broadcast, without associating to any specific recipient, the payment request via a wireless signal within a pre-determined range of the POS device,

receive, in response to broadcasting the request, an encrypted payment credential from the mobile device of the consumer, and

decrypt the encrypted payment credential based on the certificate data item to retrieve a payment credential for processing the payment,

wherein the adjacent POS device is configured to;

further broadcast, contemporaneously with the POS device broadcasting the payment request, an unintended payment request, and

wherein the mobile device of the consumer is configured to;

store the payment credential of the consumer,

receive, from the POS device and via the wireless signal, the payment request for the payment,

extract, in response to receiving the payment request, the visual attribute from the payment request for displaying to the consumer,

generate, in response to the payment request, the encrypted payment credential by encrypting the payment credential based on the certificate data item, and

send the encrypted payment credential to the POS device,

wherein the consumer selects the POS device to submit the encrypted payment credential in response to viewing the visual attribute,

wherein the mobile device displays, to the consumer, the visual attribute to prevent the consumer from selecting the adjacent POS to submit the encrypted payment credential.

9. The system of claim 8,

wherein the certificate data item comprises a public encryption key certified by the certification authority,

wherein the mobile device encrypting the payment credential based on the certificate data item is by using the public encryption key, and

wherein decrypting the encrypted payment credential based on the certificate data item is by using a private encryption key associated with the public encryption key.

10. The system of claim 9, further comprising:

a first payment service servicing a merchant operating the POS device,

wherein the first payment service is configured to process the payment based on the payment credential.

11. The system of claim 10, further comprising

a second payment service servicing the consumer,

wherein the second payment service is configured to further process the payment based on the payment credential.

14. The system of claim 8,

wherein the visual attribute comprises at least one selected from a group consisting of a visual identifier of the POS device and a facial image of a person operating the POS device.

12. (canceled)

13. The system of claim 12,

wherein the unintended payment request comprises another certificate data item having another visual attribute embedded by the certification authority, and

wherein the mobile device is further configured to display the another visual attribute to the consumer to further prevent the consumer from selecting the adjacent POS to submit the encrypted payment credential.

15. A non-transitory computer readable medium storing instructions for processing payment, the instructions, when executed by a computer processor, comprising functionality for:

submitting, by a point-of-sale (POS) device to a certification authority, a certificate request for a certificate data item that identifies the POS device for completing a purchase by a consumer, wherein the certificate request comprises a visual attribute of the POS device that is embedded in the certificate data item by the certification authority;

obtaining, in response to the certificate request and by the POS device from the certification authority, the certificate data item;

generating, by the POS device, a payment request for the payment to complete the purchase, wherein the payment request comprises the certificate data item;

broadcasting, by the POS device without associating to any specific recipient, the payment request via a wireless signal within a pre-determined range of the POS device, wherein the payment request is received by a mobile device of the consumer via the wireless signal, wherein the mobile device stores payment credential of the consumer,

wherein the mobile device extracts the visual attribute from the payment request for displaying to the consumer;

receiving, by the POS device in response to the broadcasting, an encrypted payment credential from the mobile device of the consumer, wherein the encrypted payment credential is generated by the mobile device encrypting the payment credential based on the certificate data item, wherein the consumer selects the POS device to submit the encrypted payment credential in response to viewing the visual attribute;

decrypting the encrypted payment credential based on the certificate data item to retrieve the payment credential for processing the payment; and

further broadcasting, contemporaneously with the POS device broadcasting the payment request, an unintended payment request by an adjacent POS device in proximity to the POS device,

wherein the mobile device displays, to the consumer, the visual attribute to prevent the consumer from selecting the adjacent POS to submit the encrypted payment credential.

16. The non-transitory computer readable medium of claim 15,

wherein the certificate data item comprises a public encryption key certified by the certification authority,

wherein the mobile device encrypting the payment credential based on the certificate data item is by using the public encryption key, and

wherein decrypting the encrypted payment credential based on the certificate data item is by using a private encryption key associated with the public encryption key.

17. The non-transitory computer readable medium of claim 16, wherein processing the payment comprises:

sending, by the POS device, the payment credential to a first payment service servicing a merchant operating the POS device.

18. The non-transitory computer readable medium of claim 17, wherein processing the payment further comprises:

sending, by the first payment service, the payment credential to a second payment service servicing the consumer.

19. (canceled)

20. The non-transitory computer readable medium of claim 19,

wherein the unintended payment request comprises another certificate data item having another visual attribute embedded by the certification authority, and

wherein the mobile device displays the another visual attribute to the consumer to further prevent the consumer from selecting the adjacent POS to submit the encrypted payment credential.