Systems and Methods for Convenient and Secure Mobile Transactions

• US 20160155109A1
• Filed: 01/22/2016
• Published: 06/02/2016
• Est. Priority Date: 11/19/2013
• Status: Active Grant

• Current Assignee: Wayne Fueling Systems LLC (Dover Corporation)
• Original Assignee: Wayne Fueling Systems LLC (Dover Corporation)
• Inventors: Tang, Weiming, Brewer, James M.
• Granted Patent: US 10,217,096 B2
• Time in Patent Office: Days
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G07F 13/025 wherein the volume is determined during delivery
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

Systems and methods for conducting convenient and secure mobile transactions between a payment terminal and a mobile device, e.g., in a fueling environment, are disclosed herein. In some embodiments, the payment terminal and the mobile device conduct a mutual authentication process that, if successful, produces a session key which can be used to encrypt sensitive data to be exchanged between the payment terminal and the mobile device. Payment and loyalty information can be securely communicated from the mobile device to the payment terminal using the session key. This can be done automatically, without waiting for the user to initiate a transaction, to shorten the overall transaction time. The transaction can also be completed without any user interaction with the mobile device, increasing the user'"'"'s convenience since the mobile device can be left in the user'"'"'s pocket, purse, vehicle, etc.

Claims

1-19. -19. (canceled)

20. A method for processing payment, comprising:

a payment terminal determining that a mobile device is within an effective wireless communication range therewith;

after the determining, the payment terminal initiating a mutual authentication process to authenticate the mobile device and the payment terminal;

producing a session key in response to successful authentication of the mobile device and the payment terminal; and

after the production of the session key, the payment terminal receiving from the mobile device a request for a transaction and receiving from the mobile device payment data for the transaction, the payment data being encrypted using the session key.

21. The method of claim 20, wherein the payment terminal is integrated with a dispenser configured to dispense a good to a user.

22. The method of claim 21, further comprising, after the transmission of the payment data, causing the dispenser to dispense the good to a user associated with the mobile device.

23. The method of claim 21, further comprising, in response to unsuccessful authentication of the mobile device and the payment terminal, preventing the dispenser from dispensing the good to a user associated with the mobile device.

24. The method of claim 21, wherein the good includes one of fuel, food, drink, and cash.

25. The method of claim 20, wherein determining that the mobile device is within the effective wireless communication range includes the payment terminal polling for presence of the mobile device and detecting the presence.

26. The method of claim 25, wherein the establishment of the communication link occurs automatically without user input to the mobile device or to the payment terminal in response to determining that the mobile device and the payment terminal are within the effective wireless communication range.

27. The method of claim 20, further comprising, in response to the payment terminal receiving the request for the transaction, transmitting customer loyalty data to the mobile device from the payment terminal, the customer loyalty data being encrypted using the session key.

28. A method for processing payment, comprising:

a mobile device determining that a payment terminal is within an effective wireless communication range therewith;

after the determining, the mobile device initiating a mutual authentication process to authenticate the mobile device and the payment terminal;

producing a session key in response to successful authentication of the mobile device and the payment terminal; and

after the production of the session key, the mobile device transmitting to the payment terminal a request for a transaction and transmitting to the payment terminal payment data for the transaction, the payment data being encrypted using the session key.

29. The method of claim 28, wherein determining that the payment terminal is within the effective wireless communication range includes the mobile device polling for presence of the payment terminal and detecting the presence.

30. The method of claim 28, wherein the mobile device initiates the mutual authentication process automatically in response to determining that the payment terminal is within the effective wireless communication range.

31. The method of claim 28, further comprising, in response to the mobile device transmitting to the payment terminal the request for the transaction, receiving customer loyalty data at the mobile device from the payment terminal, the customer loyalty data being encrypted using the session key.

32. The method of claim 28, further comprising, before determining that the payment terminal is within the effective wireless communication range, the mobile device receiving an input from a user pre-authorizing the determining.

33. The method of claim 32, wherein the input includes at least one of user installation of an application on the mobile device, user loading of payment information onto the mobile device, and user loading of customer loyalty information onto the mobile device.

34. The method of claim 28, wherein the payment terminal is integrated with a dispenser configured to dispense a good to a user.

35. The method of claim 34, wherein the good includes one of fuel, food, drink, and cash.

36. An apparatus for dispensing fuel, comprising:

a fuel dispenser configured to dispense fuel therefrom, and including a housing having disposed therein;

a memory configured to store therein payment information,

a transaction request receiving module configured to receive a request to initiate a transaction for a user to purchase fuel,

an authentication module configured to, prior to the transaction request receiving module receiving the request, execute a mutual authentication process with a mobile device associated with the user, wherein successful completion of the mutual authentication process results in production of a session key,

an authorization module configured to encrypt authorization information using the session key and to transmit the encrypted authorization information to the mobile device,

a validation module configured to receive from the mobile device a validation result in response to the transmitted encrypted authorization information, and

a transaction processing module configured to, in response to the received validation result being positive, execute the requested transaction using the payment information stored in the memory and to allow fuel to be dispensed and, in response to the received validation result being negative, to deny the requested transaction and to not allow fuel to be dispensed using the payment information stored in the memory.

37. The method of claim 36, wherein the request is received from one of the mobile device, and a user interface element attached to the fuel dispenser.

38. The method of claim 36, wherein the housing also has disposed therein a user information receiving module configured to receive payment data from the mobile device that is encrypted using the session key and to decrypt the encrypted payment data using the session key, the decrypted payment data being stored in the memory as the payment information.

39. The method of claim 36, wherein unsuccessful completion of the mutual authentication process does not result in production of the session key and prevents the mobile device from conducting the transaction with the fuel dispenser.