HOST CARD EMULATION OUT-OF-BOUND DEVICE BINDING VERIFICATION

• US 20160005042A1
• Filed: 07/02/2014
• Published: 01/07/2016
• Est. Priority Date: 07/02/2014
• Status: Abandoned Application

• Current Assignee: Mistral Mobile
• Original Assignee: Mistral Mobile
• Inventors: Tervo, Timo P., Schulze, Ludwig
• Application Number:
  US14/322,283
• Publication Number:
  US 20160005042A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/3255 using mobile network messaging services for payment, e.g. SMS
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G09C 1/00 Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system cryptographic typewriters G09C3/00
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Methods and apparatus, including computer program products, are provided for mobile secure payments. In one aspect there is provided a method. The method may include sending, by a user equipment, verification information via an out-of-band channel to a host card emulation token provider, wherein the verification information includes one or more identifiers representative of the user equipment and/or user; and receiving one or more tokens, when the sent verification information verifies the identity of the user equipment and/or user. Related apparatus, systems, methods, and articles are also described.

Claims

1. A method comprising:

sending, by a user equipment, verification information via an out-of-band channel to a host card emulation token provider, wherein the verification information includes one or more identifiers representative of the user equipment and/or user; and

receiving one or more tokens, when the sent verification information verifies the identity of the user equipment and/or user.

2. The method of claim 1, wherein the out-of-band channel is a short message service channel.

3. The method of claim 1, wherein the verification message is encrypted before being sent.

4. The method of claim 3, wherein the encryption comprises encrypting the verification information using a symmetric key formed by combining key values selected from a plurality of key collections.

5. The method of claim 1 further comprising:

sending, by the user equipment, a request for the one or more tokens, wherein the one or more tokens are received in response to the sent request.

6. The method of claim 1 further comprising:

sending, by the user equipment, registration information, wherein the registration information is sent in-band via an internet protocol communication to enable a comparison with the verification information sent out of band.

7. An apparatus comprising:

at least one processor; and

at least one memory including program code which when executed by the at least one processor causes operations comprising;

sending, by apparatus, verification information via an out-of-band channel to a host card emulation token provider, wherein the verification information includes one or more identifiers representative of the apparatus and/or user; and

receiving one or more tokens, when the sent verification information verifies the identity of the apparatus and/or user.

8. The apparatus of claim 7, wherein the out-of-band channel is a short message service channel.

9. The apparatus of claim 7, wherein the verification message is encrypted before being sent.

10. The apparatus of claim 9, wherein the encryption comprises encrypting the verification information using a symmetric key formed by combining key values selected from a plurality of key collections.

11. The apparatus of claim 7 further comprising:

sending, by the apparatus, a request for the one or more tokens, wherein the one or more tokens are received in response to the sent request.

12. The apparatus of claim 7 further comprising:

sending, by the apparatus, registration information, wherein the registration information is sent in-band via an internet protocol communication to enable a comparison with the verification information sent out of band.

13. A non-transitory computer-readable storage medium including program code which when executed by at least one processor causes operations comprising:

sending, by a user equipment, verification information via an out-of-band channel to a host card emulation token provider, wherein the verification information includes one or more identifiers representative of the user equipment and/or user; and

receiving one or more tokens, when the sent verification information verifies the identity of the user equipment and/or user.

14. A method comprising:

receiving, at a host card emulation token provider, verification information via an out-of-band channel, wherein the verification information includes one or more identifiers representative of a user equipment and/or user; and

sending, by the host card emulation token provider, one or more tokens, when the sent verification information verifies the identity of the user equipment and/or user.

15. The method of claim 14 further comprising:

sending, by the host card emulation token provider, a verification request to the user equipment, wherein the request includes a random code.

16. The method of claim 15, wherein the received verification information is in response to the verification request, wherein the received verification information includes the random code returned by the user equipment.

17. An apparatus comprising:

at least one processor; and

at least one memory including program code which when executed by the at least one processor causes operations comprising;

receiving, at the apparatus, verification information via an out-of-band channel, wherein the verification information includes one or more identifiers representative of a user equipment and/or user; and

sending, by the apparatus, one or more tokens, when the sent verification information verifies the identity of the user equipment and/or user.

18. The apparatus of claim 17 further comprising:

sending, by the apparatus, a verification request to the user equipment, wherein the request includes a random code.

19. The apparatus of claim 17, wherein the received verification information is in response to the verification request, wherein the received verification information includes the random code returned by the user equipment.

20. A non-transitory computer-readable storage medium including program code which when executed by at least one processor causes operations comprising:

receiving, at the apparatus, verification information via an out-of-band channel, wherein the verification information includes one or more identifiers representative of a user equipment and/or user; and

sending, by the apparatus, one or more tokens, when the sent verification information verifies the identity of the user equipment and/or user.