Framework and system for purchasing of goods and services

• US 7,801,826 B2
• Filed: 07/29/2003
• Issued: 09/21/2010
• Est. Priority Date: 08/08/2002
• Status: Expired due to Fees

• Current Assignee: PCMS Holdings Incorporated (InterDigital, Inc.)
• Original Assignee: Fujitsu Limited
• Inventors: Ji, Lusheng, Labrou, Yannis, Agre, Jonathan Russell
• Primary Examiner(s): Worjloh; Jalatee
• Application Number:
  US10/628,583
• Publication Number:
  US 20040098350A1
• Time in Patent Office: 2,611 Days
• Field of Search: 705 50- 80, 713/150
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction

Abstract

A system for conducting an agreement between two parties relying on a trusted a third party includes a first party generating a first view of the agreement and transmitting the first view of the agreement to the third party, a second party independently generating a second view of the agreement and transmitting the second view of the agreement to the third party, a wireless network connecting the first party and the second party, and a wired or wireless network connecting the second party to the third party. The trusted third party, receives the first view of the agreement and the second view of the agreement, verifies conditions including that the identities of the parties that transmitted the agreements and that the independent views of the agreement are consistent with each other, and takes action to execute the agreement if the conditions are satisfied.

Claims

1. A computer system for conducting an agreement between two parties relying on a Secure Transaction Server (STS) as a trusted third party comprising:

a first party consumer mobile device for a consumer and comprising a computer processor that by execution of instructions;

generates, independent of the second and third parties, a first mobile device parameter derived from a stored mobile device parameter

generates a first view of the agreement pertaining to ordering and/or purchasing goods and/or services,

secures the first view of the agreement based upon a key derived from both the generated first mobile device parameter and input personal identifying information of the first party as a second input mobile device parameter input to the consumer mobile device, and

transmits the first view of the agreement to the second party, the first view of the agreement not including the first and second mobile device parameters; and

a second party merchant device for a merchant and comprising a computer processor that by execution of instructions;

generates, independently of the first and third party, a second view of the agreement secured based upon a merchant device parameter as merchant identifying information, and

transmits the second secured view of the agreement to the third party, wherein the first party consumer mobile device and the second party merchant device are communicably connectable over an open and non-secure wireless network for connecting the first party and the second party and to transmit the first view of the agreement from the first party to the second party,

wherein the second party merchant device is in communicably connectable with the trusted third party server over a wired or wireless network for connecting the second party to the third party and to transmit the first and second views of the agreement to the trusted third party server,

wherein the STS comprises a computer processor that by execution of instructions;

verifies conditions of the agreement including identities of the first and second parties in the independent secured first and second views of the agreement, based upon a symmetric agreement verification protocol deriving the key based upon the first and second mobile device parameters for the secured first view and using the merchant device parameter for the secured second view, and takes action to execute the agreement according to the verification of the conditions of the agreement, and

exclusively stores the personal identifying information of the first party as the second input mobile device parameter.

2. The system according to claim 1, wherein the open and non-secure wireless network is a wireless local area network.

4. The system as in claim 1, further comprising one or more payment servers comprising a computer processor that provide a payment service upon direction of the STS, and

wherein the STS is in secure communication with the one or more payment servers including online payment services, financial institutions, and credit card agencies, using a wired or wireless network and the STS directs that payment be made by the payment services upon verification of the purchase transaction by the STS.

5. The system as in claim 4, wherein the STS supplies a token as confirmation of the payment.

6. The system as in claim 5, wherein the merchant device processes the token presented by the consumer to consume the good and/or service.

7. The system as in claim 4, wherein the STS registers financial account information of the consumer for the payment services, and the consumer mobile device presents selectable financial account information of the consumer from the consumer financial account information registered by the STS.

8. The system as in claim 4, wherein the STS registers the consumer and the merchant by registering financial account information of the consumer and the merchant, providing the consumer and merchant identifying information, and providing to the consumer mobile device and the merchant device software executing the symmetric agreement verification protocol.

9. The system as in claim 8 wherein:

the consumer mobile device discovers the merchant device;

the consumer mobile device receives consumer selectable goods and/or services for conducting the purchase from the merchant device;

the consumer mobile device obtains from the merchant device, a purchase order;

the consumer mobile device receives payment authorization from the consumer for the purchase order, as the first view of the agreement;

the merchant device receives authorization for acceptance of the consumer payment from the merchant, as the second view of the agreement;

the STS verifies the conditions of the agreement;

the STS as the action executing the agreement causes payment from the consumer to the merchant through one of the payment services; and

the STS issues receipts to the consumer device and to the merchant device indicating success or failure of the transaction.

10. The system of claim 9, wherein the STS collects a fee for processing the purchase from one or more of the consumer, merchant, or payment services based on a fee for each purchase or on a percentage of purchase amount.

11. The system as in claim 9, wherein the wired or wireless network connecting the merchant device with the STS is a secure network and wherein the open and non-secure wireless network is a wireless local area network operated by the merchant device.

12. The system as in claim 11 wherein the wireless local area network includes a hotspot accessible by a plurality of merchant devices and consumer mobile devices and the consumer mobile device provides selectable merchants based upon the merchant devices through the wireless local area network.

13. The system as in claim 11, wherein the wireless local area network includes a hotspot accessible by a plurality of merchant devices and consumer mobile devices, and the consumer mobile device provides selectable merchants based upon the merchant devices through the wireless local area network, and the merchant devices, the consumer devices, and the STS are in communication with each other via the hotspot.

14. The system as in claim 11, wherein the merchant device executing a retail application and a secure transaction purchasing application, can execute the secure transaction application on a local device at the merchant location connected to the wireless local area network and a remote device connected via another network to the wireless local area network and the consumer device.

15. The system as in any one of claims 10, 11, 12, 13, and 14, wherein the merchant device is connected to the STS via Internet using security including a secure socket layer (SSL) or a Virtual Private Network.

16. The system as in any one of claims 10, 11, 12, 13, and 14, wherein the STS is connected to one or more of the payment servers through a secure network or through Internet using security including secure socket layer (SSL) or a Virtual Private Network.

17. The system as in claim 9 wherein the consumer mobile devices requests the STS to disable the consumer mobile device for a purchase using a current consumer identifying information.

18. The system as in claim 9 where the STS detects and disables a consumer account if there are multiple attempts to authorize a payment with incorrect consumer identifying information.

19. The system as in claim 9,

wherein one of the services for the purchase is a movie ticket, from the merchant device and wherein the receipt is an electronic token as proof of the payment, and

wherein the consumer mobile device provides the token to obtain the service, including a paperless e-ticket.

20. The system as in claim 9 where the purchase is a return of goods and/or services from the consumer to the merchant and the STS causes payment from the merchant to the consumer.

21. The system as in claim 9 in which the STS provides ancillary information from the payment services, including advertisements, special interest rate for a particular purchase if a specific credit account is chosen for an attempted purchase, to the consumer mobile device in response messages prior to the consumer payment authorization.

22. The system as in claim 1, wherein only the STS, and neither the merchant device nor the consumer mobile device are able to observe details of other'"'"'s transaction including the identifying information of the consumer and the merchant.

23. The system as in claim 1, wherein the personal identifying information comprises one or more of a personal identification number (PIN), password, biometric information, a fingerprint or a voiceprint.

24. The system as in claim 23, wherein the consumer mobile device prompts the consumer for authorizing payment through an explicit command to the consumer mobile device by requesting input of the consumer identifying information.

3. The system as in 1 wherein:

the merchant device prompts for input of or stores the merchant device parameter as the merchant identifying information, and

the transaction STS stores the merchant identifying information.