VALIDATION USING KEY PAIRS AND INTERPROCESS COMMUNICATIONS

• US 20200134598A1
• Filed: 10/31/2018
• Published: 04/30/2020
• Est. Priority Date: 10/29/2018
• Status: Active Grant

• Current Assignee: 7-Eleven Incorporated (Seven & I Holdings Company Limited)
• Original Assignee: 7-Eleven Incorporated (Seven & I Holdings Company Limited)
• Inventors: Mandaara, Nishanth, Singh, Gurmeet, Sethia, Tarang Swadeshkumar, Suri, Maninder Singh
• Granted Patent: US 11,062,297 B2
• Time in Patent Office: Days
• CPC Class Codes: G06K 19/06037 multi-dimensional coding
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/208 Input by product or record sensing, e.g. weighing or scanner processing
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/3274 using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
• CPC Class Codes: G06Q 20/3276 using a pictured code, e.g. barcode or QR-code, being read by the M-device
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/0635 Processing of requisition or of purchase orders
• CPC Class Codes: G07G 1/0036 Checkout procedures
• CPC Class Codes: G07G 1/0054 with control of supplementary check-parameters, e.g. weight or number of articles
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/107 : wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 9/30 : Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/3226 : using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3297 : involving time stamps, e.g. generation of time stamps
• CPC Class Codes: H04W 12/77 : Graphical identity
• CPC Class Codes: H04W 4/021 : Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/80 : Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A validation system that includes a server and a validation terminal. The server is configured to receive location information for a mobile device and to determine the mobile device is at a registered location. The server is further configured to process a transaction for the products in a digital cart, to generate a barcode, and to encrypt the barcode using a private key linked with the registered location. The server is further configured to send the encrypted barcode to the mobile device. The validation engine is configured to scan the encrypted barcode using a barcode reader and to decrypt the encrypted barcode using the stored public key that is linked with the private key. The validation terminal is further configured to indicate the transaction is valid in response to decrypting the encrypted barcode using the public key.

Claims

1. A validation system, comprising;

a server comprising;

a first memory operable to store;

location information for a set of registered locations;

a set of store identifiers, wherein each store identifier is linked with a registered location from the set of registered locations; and

a set of private keys, wherein each private key is linked with a registered location from the set of registered locations; and

an authentication engine implemented by a first processor operably coupled to the first memory, wherein the authentication engine is configured to;

receive location information for a mobile device;

determine the received location information for the mobile device matches location information linked with a registered location from the set of registered locations;

identify a private key linked with the registered location;

receive a transaction request from the mobile device for products in a digital cart;

process a transaction for the products in the digital cart in response to receiving the transaction request;

generate a barcode based on the store identifier linked with the registered location and transaction information from processing the transaction for the products in the digital cart;

encrypt the barcode using the private key linked with the registered location; and

send the encrypted barcode to the mobile device;

a validation terminal located at the registered location and in signal communication with the server, comprising;

a barcode reader;

a second memory operable to store a public key, wherein the public key is paired with the private key; and

a validation engine implemented by a second processor operably coupled to the barcode reader and the second memory, wherein the validation engine is configured to;

detect the encrypted barcode was scanned by the barcode reader;

decrypt the encrypted barcode using the stored public key; and

indicate the transaction is valid in response to decrypting the encrypted barcode using the public key.

2. The system of claim 1, wherein the authentication engine is further configured to send instructions for enabling a scan feature on the mobile device in response to determining that the received location information for the mobile device matches location information for the registered location.

3. The system of claim 1, wherein the authentication engine is further configured to:

receive product information for a product scanned by the mobile device;

determine the product is available at the registered location based on inventory information for the registered location; and

add the product to the digital cart in response to determining that the product is available at the registered location.

4. The system of claim 1, wherein:

the generated barcode comprises a timestamp; and

the validation engine is further configured to;

obtain the timestamp from the decrypted barcode; and

indicate the transaction is valid in response to determining that the timestamp is within a predetermined time window.

5. The system of claim 1, wherein the generated barcode is a two-dimensional barcode.

6. The system of claim 1, wherein indicating the transaction is valid comprises activating one or more light emitting diodes (LEDs).

7. The system of claim 1, wherein the validation is further configured to send confirmation information to the server in response to the decrypting the encrypted barcode using the public key.

8. A validation method, comprising;

receiving, at a server, location information for a mobile device;

determining, by the server, the received location information for the mobile device matches location information linked with a registered location from a set of stored registered locations;

identifying, by the server, a private key linked with the registered location;

receiving, by the server, a transaction request from the mobile device for products in a digital cart;

processing, by the server, a transaction for the products in the digital cart in response to receiving the transaction request;

generating, by the server, a barcode based on a store identifier linked with the registered location and transaction information from processing the transaction for the products in the digital cart;

encrypting, by the server, the barcode using the private key linked with the registered location;

sending, by the cloud server, the encrypted barcode to the mobile device;

scanning, by a validation terminal, the encrypted barcode using a barcode reader;

decrypting, by the validation engine, the encrypted barcode using a public key, wherein the public key is paired with the private key; and

indicating, by the validation engine, the transaction is valid in response to decrypting the encrypted barcode using the public key.

9. The method of claim 8, further comprising sending, by the server, instructions for enabling a scan feature on the mobile device in response to determining that the received location information for the mobile device matches location information for the registered location.

10. The method of claim 8, further comprising:

receiving, by the server, product information for a product scanned by the mobile device;

determining, by the server, the product is available at the registered location based on inventory information for the registered location; and

adding, by the server, the product to the digital cart in response to determining that the product is available at the registered location.

11. The method of claim 8, further comprising obtaining, by the validation engine, a timestamp from the decrypted barcode;

and

wherein indicating the transaction is valid in response to determining that the timestamp is within a predetermined time window.

12. The method of claim 8, wherein the generated barcode is a two-dimensional barcode.

13. The method of claim 8, wherein indicating the transaction is valid comprises activating one or more light emitting diodes (LEDs).

14. The method of claim 8, further comprising sending, by the validation engine, confirmation information to the server in response to the decrypting the encrypted barcode using the public key.

15. A validation device, comprising;

a memory operable to store;

location information for a set of registered locations;

a set of store identifiers, wherein each store identifier is linked with a registered location from the set of registered locations; and

a set of private keys, wherein;

each private key is linked with a registered location from the set of registered locations; and

each private key is paired with a public key stored in a device at a registered location; and

an authentication engine implemented by a processor operably coupled to the memory, wherein the authentication engine is configured to;

receive location information for a mobile device;

determine the received location information for the mobile device matches location information linked with a registered location from the set of registered locations;

identify a private key linked with the registered location;

receive a transaction request from the mobile device for products in a digital cart;

process a transaction for the products in the digital cart in response to receiving the transaction request;

generate a barcode based on the store identifier linked with the registered location and transaction information from processing the transaction for the products in the digital cart;

encrypt the barcode using the private key linked with the registered location; and

send the encrypted barcode to the mobile device.

16. The device of claim 15, wherein the authentication engine is further configured to send instructions for enabling a scan feature on the mobile device in response to determining that the received location information for the mobile device matches location information for the registered location.

17. The device of claim 15, wherein the authentication engine is further configured to:

receive product information for a product scanned by the mobile device;

determine the product is available at the registered location based on inventory information for the registered location; and

add the product to the digital cart in response to determining that the product is available at the registered location.

18. The device of claim 15, wherein the generated barcode is a two-dimensional barcode.

19. The device of claim 15, wherein the generated barcode comprises a timestamp.

20. The device of claim 15, wherein sending the encrypted barcode to the mobile device comprises sending dynamic content with the encrypted barcode.