Method and token for authenticating a control point

• US 7,320,072 B1
• Filed: 08/28/2000
• Issued: 01/15/2008
• Est. Priority Date: 08/28/2000
• Status: Expired due to Fees

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Cofta, Piotr
• Primary Examiner(s): Lanier, Benjamin E.
• Application Number:
  US09/648,449
• Time in Patent Office: 2,696 Days
• Field of Search: 713/201, 713/172, 713/169, 705/41, 705/16
• US Class Current: 713/169
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/202 Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A method is provided for authenticating an action between a control point and a user. A token which performs authentication is presented to the control point. The control point may be authenticated by using the token. The token may include a communication portion that obtains information regarding the control point and that communicates with a token issuer to authenticate the control point based on the information. A user interface portion may be coupled to the communication portion to indicate a result of the authentication to a user.

Claims

1. A method comprising:

obtaining information from a control point by a token, the token configured to connect to a network having a token issuer accessing a database of issued tokens and a control point operator accessing a database of approved control points, the network including a first communication pathway and a second communication pathway, said token obtaining the information from the control point via a third communication pathway;

transmitting from said token said information obtained from said control point to said token issuer via said first communication pathway and information regarding said token to said control point operator via said second communication pathway, said control point operator authenticating said token with said token issuer and said token issuer authenticating said control point with said control point operator;

receiving at said token via said first and second communication pathways said authentication of said control point and said authentication of said token;

transmitting to said control point said authentication of said token via said third communication pathway so as to authenticate an action performed at said control point by a user involving said token that was issued to the user and which is involved with the user performing the action,

wherein the token is a mobile wireless communication device.

2. The method of claim 1, wherein said mobile communication device communicates with said token issuer using a wireless communication path in at least part of said first communication pathway.

3. The method of claim 1, wherein said control point authorizing said action based on authentication of said token.

4. The method of claim 1, wherein said action comprises a financial transaction.

5. The method of claim 1, wherein said authenticating comprises access control to a door, where said control point includes a door lock that controls operation of said door.

6. The method of claim 1, wherein said authenticating said control point comprises notifying said user whether said control point has authorization for said action.

14. The method of claim 1, said action including collecting a toll.

7. A device comprising:

a wireless communication portion that obtains information via a first communication path regarding a control point and communicates wirelessly via a second communication path with an external entity to authenticate said control point based on said information and communicates wirelessly via a third communication path to authenticate a user to the control point to perform an action using the control point, said device having been issued to said user, said wireless communication portion configured to transmit via said first communication path authentication of said device to the control point after having been received from said network via said third communication path; and

a user interface portion, coupled to said communication portion, to indicate a result of said authentication of the control point to a user,

wherein the device is a mobile communication device and said communication authenticating said control point and said user device is received from over said network, with authentication of said control point from said external entity including verification of said control point with a control point operator and authentication of said device from said control point operator including verification of said device with said external entity.

8. The device of claim 7, wherein said action comprises a financial transaction.

9. The device of claim 7, wherein said action comprises access control.

10. The device of claim 7, wherein said user interface portion notifies said user whether said control point has authorization for said action.

11. The device of claim 7, wherein said user interface portion comprises a display device.

12. The device of claim 7, further comprising a card that connects with said communication portion, said card containing information regarding one of said device and said user.

13. The device of claim 7, wherein said communication portion is temporarily coupled to said device.

15. The device of claim 7, wherein said action includes collecting a toll.

16. A method comprising:

obtaining information from a control point by a token, the token having been issued to a user to authenticate an action performed at the control point and involving the token, the token configured to connected to a network having a token issuer accessing a database of issued tokens and a control point operator accessing a database of approved control points, said network forming a first communication pathway and a second communication pathway, said token accessing the network via a first wireless interface, said token obtaining the information via a third communication pathway using a second wireless interface of said token;

transmitting via said first communication pathway using said first wireless interface through said network from said token said information obtained from said control point and transmitting via said second communication pathway information regarding said token, said information being transmitted to said network from said token;

receiving at said token via said first and second communication pathways over said first wireless interface an authentication of said control point and an authentication of said token; and

transmitting to said control point said authentication of said token via said third communication pathway using said second wireless interface,

wherein the token is a mobile wireless communication device.

17. A method comprising:

obtaining information from a control point by a token, the token having been issued to a user so as to authenticate an action performed at the control point, the action involving the token, the token being connectable to a network having a token issuer accessing a database of issued tokens and a control point operator accessing a database of approved control points, said network forming a first communication pathway and a second communication pathway, the token obtaining the information via a third communication pathway where the control point is local to said token;

transmitting via said first communication pathway through said network from said token said information obtained from said control point and transmitting via said second communication pathway information regarding said token, said information being transmitted to said network from said token;

receiving at said token via said first and second communication pathways an authentication of said control point and an authentication of said token; and

transmitting to said control point said authentication of said token via said third communication pathway,

wherein the token is a mobile wireless communication device.