Wireless wallet

• US 7,822,688 B2
• Filed: 01/31/2005
• Issued: 10/26/2010
• Est. Priority Date: 08/08/2002
• Status: Expired due to Fees

• Current Assignee: PCMS Holdings Incorporated (InterDigital, Inc.)
• Original Assignee: Fujitsu Limited
• Inventors: Chen, Wei-lun, Molina Terriza, Jesus, Ji, Lusheng, Labrou, Yannis, Agre, Jonathan Russell
• Primary Examiner(s): Hewitt, II; Calvin L
• Assistant Examiner(s): Nigh; James D
• Application Number:
  US11/045,484
• Publication Number:
  US 20050187873A1
• Time in Patent Office: 2,094 Days
• Field of Search: 705/59
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G07F 7/0866 by active credit-cards adapted therefor G07F7/1008 takes precedence
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A mobile phone system and method of initializing, at a secure transaction server (STS), a mobile payment software with a software authentication parameter, as an authentic mobile payment software; providing an STS correlation between a personal identification entry (PIE) and the authentic mobile payment software; installing, in a mobile phone, the authentic mobile payment software; and inputting, by a user, the PIE to the installed authentic mobile payment software to generate according to the PIE and the software authentication parameter a transformed secure authenticable mobile phone cashless monetary transaction over the mobile phone network, as a mobile phone wireless wallet of the user of the mobile phone. The mobile phone authenticable cashless monetary transaction is performed according to an agreement view(s) protocol.

Claims

1. A method for cashless transactions using a mobile phone communicably connectable with a secure transaction server (STS) over a mobile phone network, comprising:

initializing by the STS a mobile payment software with a software authentication parameter including one or more of an initialization time stamp and/or initialization random seed number, to provide an authentic mobile payment software based upon the software authentication parameter;

correlating, by the STS, a personal identification entry (PIE) with the authentic mobile payment software;

executing, by the mobile phone, the authentic mobile payment software for prompting a user to input the PIE to the authentic mobile payment software;

receiving the PIE and generating, by the mobile phone, according to both the received PIE and the software authentication parameter, a changing encryption key that changes for each transaction message by generating a transaction random sequence number based upon the software authentication parameter of the authentic payment software and generating the changing encryption key based upon both the transaction random sequence number generated based upon the software authentication parameter and the received PIE;

encrypting a transaction message for an authenticable mobile phone cashless monetary transaction;

transmitting, by the mobile phone, the encrypted transaction message to the STS;

decrypting, by the STS, the encrypted transaction message by generating the changing encryption key based upon the PIE correlated with the authentic mobile payment software; and

authenticating the mobile phone cashless monetary transaction according to the decrypted transaction message.

2. The method of claim 1, further comprising implementing the authentic mobile payment software according to an application platform of the mobile phone.

3. The method of claim 1, further comprising implementing the authentic mobile payment software according to Java 2 Platform Micro Edition (J2ME) and/or Binary Runtime Environment for Wireless (BREW).

4. The method of claim 1, further comprising:

providing to the mobile phone a download link to the authentic mobile payment software; and

downloading to the mobile phone the authentic mobile payment software via the download link, thereby performing the installing of the authentic mobile payment software.

5. The method of claim 4, wherein the authentic mobile payment software downloaded link is transmitted to the mobile phone using short/multimedia message service.

6. The method of claim 1, wherein the mobile phone authenticable cashless monetary transaction is performed according to Universal Pervasive Transaction Framework Secure Agreement Submission (UPTF SAS) protocol.

7. The method of claim 1,

wherein the authenticable mobile phone cashless monetary transaction is performed according to Universal Pervasive Transaction Framework Secure Agreement Submission (UPTF SAS) protocol,

wherein the initializing of the authentic mobile payment software comprises:

providing to the user a mobile phone cashless monetary transaction activation link at a computing device;

registering a phone number of the mobile phone of the user via the activation link;

transmitting the registered phone number of the mobile phone to the STS;

generating an executable mobile payment software that includes the software authentication parameter, as the authentic mobile payment software; and

generating the PIE correlated in the STS with the authentic mobile payment software, and

wherein an installation of the authentic mobile payment software download link comprises;

transmitting, by the STS, via short/multimedia message service using the registered mobile phone number, a download link to the authentic mobile payment software to the mobile phone of the user;

downloading to the mobile phone the authentic mobile payment software via the download link, thereby performing the installing of the authentic mobile payment software; and

providing, by the STS, the PIE to the user.

8. The method of claim 1, further comprising:

correlating, by the STS, abstracted registered financial entities information of the user with the authentic mobile payment software;

binding, by the mobile phone, the authentic mobile payment software with transaction information of a transaction party by accessing over the mobile phone network software application of the transaction party;

presenting, by the STS, via transmitting to the mobile phone, a selectable list of abstracted identifiers corresponding to the registered financial entities of the user correlated with the authentic mobile payment software; and

executing, by the mobile phone, the mobile phone cashless monetary transaction with the transaction party according to exchange of encrypted transaction messages with the STS that comprise an identifier of the mobile phone, an identifier of the transaction party, and an identifier of the transaction, and proceeding with payment from the financial entities of the user.

9. The method of claim 6, wherein the UPTF SAS comprises

generating, by the mobile phone, a first view of the mobile phone cashless monetary transaction, and transmitting the first view of the transaction to the STS according to the SAS;

generating, independently by a party to the transaction, a second view of the transaction, and transmitting the second view of the transaction to the STS according to the SAS; and

verifying, by the STS, the first and second views to authenticate the transaction, and

causing, by the STS, execution of the transaction based upon the verifying.

10. The method of claim 9, wherein the first and second views are symmetrical and the SAS comprises generating as each independent view of the transaction an unencrypted perceptible part comprising an identification of a first mobile phone for the first view and a current timestamp, and an encrypted part by encrypting with the changing encryption key a transaction message that comprises data of the transaction, the identification of the first mobile phone and an identification of a second device for the second view.

11. The method of claim 9,

wherein the first and second views are symmetrical and the SAS comprises:

generating as each independent view of the transaction, an unencrypted perceptible part comprising an identification of a first mobile phone for the first view and a current timestamp, and an encrypted part by encrypting with the changing encryption key a transaction message that comprises data of the transaction, the identification of the first mobile phone and an identification of a second device for the second view.

12. The method of claim 1, wherein the generating of the encryption key further comprises:

generating a current time stamp;

determining a time difference value between the current time stamp and the initialization time stamp;

computing a Keyed-Hashing for Message Authentication (HMAC) result, based upon the initialization random seed number and/or the time difference value, to generate the transaction random sequence number;

selecting a number of bits from the HMAC result as the transaction random sequence number and combining the selected number of bits with the PIE;

computing a hash value of the combination; and

selecting a number of bits of the hash value to generate the encryption key.

13. The method of claim 12, wherein the number of bits selected is 128.

14. The method of claim 4, wherein an online payment system provides the mobile phone cashless monetary transaction activation link to a member of the online payment system as the user, thereby providing person-to-person mobile phone authenticable cashless monetary transactions using the user'"'"'s mobile phone wireless wallet.

15. The method of claim 14, further comprising:

displaying on the mobile phone of the user a graphical user interface presenting selectable menu items comprising person-to-person payment, person-to-person transaction, a pending payment request by another person, setup, or any combination thereof;

upon selection of the person-to-person payment or the pending payment request menu items, displaying a graphical user interface accepting inputs comprising a mobile phone number, an email address or any combination thereof, of a transaction party; and

upon input of a mobile phone number and/or an email address of the transaction party, and the PIE, executing the mobile phone cashless monetary transaction with the transaction party using the mobile phone wireless wallet of the mobile phone user.

16. The method of claim 15, wherein the accepting inputs further comprises accepting abstracted previously registered financial account reference identifiers of the mobile phone user to execute the transaction.

17. The method of claim 1,

wherein the mobile phone authenticable cashless monetary transaction is performed according to Universal Pervasive Transaction Framework Secure Agreement Submission (UPTF SAS) protocol, and the method further comprises:

correlating, at the STS, abstracted financial entity information of the user with the authentic mobile payment software; and

providing person-to-person mobile phone UPTF authenticable cashless monetary transactions using the user mobile phone wireless wallet.

18. The method of claim 1, wherein the PIE is an alphanumeric string having less than or equal to 5 characters.

19. The method of claim 6, further comprising transmitting the mobile phone authenticable cashless transaction messages over a mobile phone communications network according to Hypertext Transfer Protocol (HTTP), socket based communication, and/or web service calls.

20. The method of claim 8, wherein the executing of the mobile phone cashless monetary transaction further comprises:

receiving a mobile phone display screen displayable barcode image as a receipt of the executed mobile phone cashless monetary transaction and/or other transaction, receipt related information;

displaying the barcode image on a display screen of the mobile phone; and

reading, at a physical point of service of the transaction party, the displayed barcode image for transaction management by the transaction party.

21. The method of claim 17, wherein the person-to-person mobile phone UPTF authenticable cashless monetary transactions comprise sending a payment to a person, requesting a payment from another person, checking a pending request for payment from another, storing and retrieving records of transactions, or any combination thereof.

22. The method of claim 1, wherein the installing of the authentic mobile payment software in the mobile phone comprises downloading the authentic mobile payment software to the mobile phone, storing the authentic mobile payment software on a mobile phone installable computer readable medium, storing the authentic mobile payment software in a mobile phone embedded computer readable medium, or any combination thereof.

23. The method of claim 7, wherein the providing of the PIE to the user comprises delivering the PIE to the user as an image through a third party.

24. The method of claim 20, further comprising storing in the mobile phone the barcode image transaction receipt.

25. The method of claim 1, further comprising rewarding a mobile phone wireless wallet transaction with an automatic download of a mobile phone content comprising a ringtone, a game, a digital/media content, software, or any combination thereof, and/or a credit towards any thereof.

26. The method of claim 21, further comprising notifying the user at the mobile phone of a status of the mobile phone UPTF authenticable cashless monetary transaction using Short/Multimedia Message Service, email, and/or voice message.

27. The method of claim 20, further comprising notifying the user at the mobile phone of a status of the mobile phone UPTF authenticable cashless monetary transaction using Short/Multimedia Message Service, email, and/or voice message, including transaction receipt information.

28. The method of claim 17, wherein the PIE is an alphanumeric string having less than or equal to 5 characters.

29. A mobile phone communicably connectable to a secured transaction server (STS) and comprising:

a computer processor and a computer readable medium storing executable instructions that when executed by the computer processor cause the computer processor to perform;

storing a mobile payment software initialized at the secured transaction server (STS) with a software authentication parameter including one or more of an initialization time stamp and/or initialization random seed number and correlated with a personal identification entry (PIE), as an authentic mobile payment software,

prompting a user to input the PIE,

receiving the PIE and generating, according to both the received PIE and the software authentication parameter, a changing encryption key that changes for each transaction message by generating a transaction random sequence number based upon the software authentication parameter of the authentic payment software and generating the changing encryption key based upon both the transaction random sequence number generated based upon the software authentication parameter and the received PIE,

encrypting a transaction message for an authenticable mobile phone cashless monetary transaction,

transmitting the encrypted transaction message, which is decryptable and authenticable by the STS by generating the changing encryption key based upon the PIE correlated with the authentic mobile payment software, to the STS.

30. A computer system, comprising:

a computer server and a computer readable medium storing executable instructions that when executed by the server cause the server to perform;

initializing a mobile payment software with a software authentication parameter including one or more of an initialization time stamp and/or initialization random seed number, to provide an authentic mobile payment software,

generating a secured personal identification entry (PIE);

providing a secured correlation between the PIE and the authentic mobile payment software, and

providing an online purchasing interface; and

a mobile phone in mobile phone network communication with the server and comprising;

a computer processor, and

a computer readable medium storing the authentic mobile payment software comprising computer readable instructions that when executed by the computer processor cause the computer processor to perform;

interfacing with the online purchasing interface to generate a virtual shopping cart,

prompting a user to input the PIE,

receiving the PIE and generating, according to both the received PIE and the software authentication parameter, a changing encryption key that changes for each transaction message by generating a transaction random sequence number based upon the software authentication parameter of the authentic payment software and generating the changing encryption key based upon both the transaction random sequence number generated based upon the software authentication parameter and the received PIE,

encrypting a transaction message for an authenticable mobile phone cashless monetary transaction based upon the virtual shopping cart, and

transmitting over the mobile phone network the encrypted

transaction message to the computer server to execute the transaction,

wherein the computer server decrypts the encrypted transaction message by generating the changing encryption key based upon the PIE correlated with the authentic mobile payment software and authenticates the mobile phone cashless monetary transaction according to the decrypted transaction message.