Mobile electronic transaction personal proxy

• US 7,043,456 B2
• Filed: 03/08/2001
• Issued: 05/09/2006
• Est. Priority Date: 06/05/2000
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Nilsson, Mikael, Lindskog, Helena
• Primary Examiner(s): Trammell, James P.
• Assistant Examiner(s): Greene, Daniel L.
• Application Number:
  US09/803,005
• Publication Number:
  US 20010056411A1
• Time in Patent Office: 1,888 Days
• Field of Search: 705/29, 705/76
• US Class Current: 705/76
• CPC Class Codes: G06Q 10/0875 Itemisation or classification of parts, supplies or services, e.g. bill of materials
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/76 Proxy, i.e. using intermediary entity to perform cryptographic operations network architectures or network communication protocols using hop-by-hop encryption H04L63/0464
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/289 Intermediate processing functionally located close to the data consumer application, e.g. in same machine, in same home or in same sub-network
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A method for obtaining a digital signature is disclosed. Upon receipt of request for a digital signature within a customer computer, a Mobile electronic transaction proxy within the customer PC notifies a web browser of the request for the digital signature and assists in obtaining a digital signature on a data string included within the request. After the digital signature is obtained, the data string along with an appended digital signature is transmitted back to a requesting party.

Claims

1. A method for obtaining a digital signature comprising the steps of:

transmitting a merchant request from a web browser to a merchant server;

responding to the merchant request with a specific data string having a header, wherein the header includes a request for a digital signature to be appended to the data string;

receiving the request for the digital signature;

notifying the web browser of the request for the digital signature;

obtaining the digital signature from a wireless device;

appending the digital signature to the specific data string;

notifying the web browser the digital signature has been obtained;

transmitting the data with the appended digital signature to a requesting party;

establishing a protected short range wireless link between a computer and the wireless device; and

transmitting, via the short range wireless link, the digital signature from the wireless device to the computer.

2. The method of claim 1, wherein the step of obtaining further includes the step of:

forwarding the data to an application within the computer.

3. The method of claim 1, further including the step of recognizing a command within the request for a digital signature.

4. The method of claim 1, further including the step of including a command for the digital signature and the data to be digitally signed within an HTTP header transmitted to a customer.

5. The method of claim 1, wherein the step of transmitting the data with the appended digital signature further includes transmitting the data with the appended digital signature to a URL included within the request.

6. The method of claim 1, wherein the step of notifying further includes the step of periodically reloading a web page notifying the customer of the request for the digital signature.

11. The method of claim 1, wherein in response to the request for the digital signature being received from the merchant server, the obtaining of the digital signature is performed without additional interaction from the merchant server.

7. A method for obtaining a digital signature in a transaction between a computer of a customer and a merchant, comprising the steps of:

receiving a request for a digital signature to be appended to a specific data string from the merchant during an electronic transaction;

recognizing a command for the digital signature and the data string to be digitally signed within the request, the command being contained within a header of the data string;

notifying a web browser of the request for the digital signature;

forwarding the data string to an application within the computer;

establishing a short range wireless link between the computer and a wireless device;

forwarding the digital signature to the computer from the wireless device via the short range wireless link;

appending the digital signature to the data string;

notifying the web browser the digital signature has been obtained; and

transmitting the data string with the appended digital signature to a URL included within the request.

8. The method of claim 7, further including the step of including the command for the digital signature and the data string to be digitally signed within an HTTP header transmitted to the computer of the customer by the merchant.

9. The method of claim 7, wherein the step of notifying further includes the step of periodically reloading a web page notifying the customer of the request for the digital signature.

10. A mobile electronic transaction personal proxy device, comprising:

a first interface with a merchant computer;

a second interface with a web browser;

a third interface with a Mobile electronic transaction device; and

control logic configured to;

receive a specific data string from the merchant computer, the specific data string having a header;

notify the web browser of a request for a digital signature to be appended to a specific data string from the merchant computer, wherein the request is contained within the header;

request the specific data string be digitally signed by the Mobile electronic transaction device;

receive a digitally signed data string from the Mobile electronic transaction device;

notify the web browser of the digitally signed data string; and

forward, via an established protected short range wireless connection, the digitally signed data string from the mobile electronic transaction device.