Advanced service redirector for personal computer

• US 7,050,993 B1
• Filed: 04/27/2000
• Issued: 05/23/2006
• Est. Priority Date: 04/27/2000
• Status: Expired due to Term

• Current Assignee: WSOU Investments, LLC (WSOU Holdings, LLC)
• Original Assignee: Nokia Corporation
• Inventors: Piikivi, Lauri, Heiskala, Markku
• Primary Examiner(s): GARG, YOGESH C
• Application Number:
  US09/559,499
• Time in Patent Office: 2,217 Days
• Field of Search: 705/25, 705/26, 705/27, 705/35, 705/44, 713/182, 713/168, 704/270, 455/41, 455/406, 709/204
• US Class Current: 705/27.1
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 30/0641 Shopping interfaces
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A system and a method is shown for conducting electronic commerce. The system includes a mobile station (10) containing a user interface (15) and an application (27A), which could cooperate with a user authentication module (13A); and a computer (1) coupled to a data communications network (2). The computer includes a browser (1A) for contacting a site, such as a commerce related site, and a browser plug-in module (1B) and/or a browser extension. The browser and plug-in (or extension) cooperate to detect a presence of a received message that requires a response from the user, such as an authentication of the user, or a digital signature, or a payment request, etc. The computer also includes an interface (1C, 1D, 1E) for sending a message from the computer to the mobile station over a bidirectional link (3). The mobile station application is responsive to the receipt of the message from the computer for generating a user response message and for passing the generated user response message to the computer over the link. The computer is responsive to a receipt of the user response message for sending user response information to the site using the browser. The mobile station, or the computer, operates to prompt the user to enter a personal identification number, and the entered PIN is compared to a PIN stored in the mobile station. The link may be implemented using Bluetooth technology.

Claims

1. A method for conducting communication with a site reachable through the Internet, comprising:

providing a mobile station;

coupling a browser running on a computer to the site through the Internet;

automatically detecting a presence of a received request from the site;

in response to automatically detecting the presence of the received request, sending an inquiry to the mobile station from the computer for a list of certificates that are applicable to the request, the certificates being accessible by the mobile station;

presenting the list of applicable certificates to the user for selecting one of the presented certificates;

using the mobile station to communicate with a source of the selected certificate for completing the certificate;

passing the completed certificate to the browser; and

responsive to a receipt of the completed certificate, responding to the request received from the site.

2. A method as in claim 1, where the request comprises a request for an authenticated certificate, where the applicable certificates comprise authentication certificates, and where the completed certificate comprises an authenticated certificate.

3. A method as in claim 1, where the request comprises a request for a digital signature, where the applicable certificates comprise signature certificates, and where the completed certificate comprises a signed signature certificate.

4. A method as in claim 1, where the received request is detected based on message parsing.

5. A method as in claim 1, where message parsing comprises Multi-Purpose Internet Mail Extensions (MIME) field recognition.

6. A method as in claim 1, where completing the certificate comprises prompting the user to enter personal identification information using one of a computer user interface or a mobile station user interface, and verifying the entered personal identification information in cooperation with the source of the selected certificate.

7. A method as in claim 1, where the list of applicable certificates are displayed to the user using one of a computer user interface or a mobile station user interface.

8. A mobile station for conducting communication with a server reachable through a data communications network, comprising:

a bidirectional data path for coupling to a network access application; and

a controller, responsive to an automatic detection of a presence of a received request from the server by the access application or an extension of the access application, and to a reception of an inquiry from the access application, or the extension of the access application, for a list of mobile station accessible certificates that are applicable to the request, for returning the list of applicable certificates, and in response to the user selecting one of the certificates, for communicating with a source of the selected certificate for completing the certificate and passing the completed certificate to the network access application for responding to the request received from the server.

9. A method for conducting communication with a server, comprising:

coupling an access application running on a computer to the server through a data communications network;

automatically detecting a presence of a request that is received from the server, the request being one that requires an authentication of a user;

in response to automatically detecting the presence of the request, sending a message from the computer to a mobile station over a link;

the message comprising an inquiry for a list of certificates that are application to the request, the certificates being accessible by the mobile station;

presenting the list of applicable certificates to the user for selecting one of the presented certificates;

using the mobile station to communicate with a source of the selected certificate for completing the certificate which comprises a user authentication message;

passing the completed certificate over a link to the access application running on the computer;

responsive to a receipt of the completed certificate, sending user authentication information to the server using the access application.