System for NFC authentication based on BLUETOOTH proximity

• US 8,112,066 B2
• Filed: 09/02/2011
• Issued: 02/07/2012
• Est. Priority Date: 06/22/2009
• Status: Expired due to Fees

• Current Assignee: Optima Direct, LLC (2S Ventures, LLC)
• Original Assignee: Mourad Ben Ayed
• Inventors: Ben Ayed, Mourad
• Primary Examiner(s): Gary, Erika
• Application Number:
  US13/225,367
• Publication Number:
  US 20110313922A1
• Time in Patent Office: 158 Days
• Field of Search: None
• US Class Current: 455/411
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A method and apparatus for secure authentication of Near Field Communication transactions based on proximity to a mobile key device.

Claims

1. A method for authorizing a Near Field communication (NFC) payment transaction comprising the steps of

establishing a two-way secure wireless connection between a first mobile device having an NFC function and a second mobile device,

wherein said second mobile device comprises a short wireless transceiver,

wherein said second mobile device has a size smaller than 22.5 cubic centimeter,

wherein said second mobile device can pair with a compatible apparatus within proximity, and upon pairing with a compatible apparatus, said second mobile device changes mode to a non-discoverable mode,

wherein said second mobile device can store user data selected from the group consisting of

a credit amount, a credit limit, a threshold, a maximum transaction amount, an amount, a digital key;

wherein upon receiving a request for authenticating an NFC payment transaction,

said first mobile device will send a request to said second mobile device,

wherein said first mobile device will authorize the NFC payment transaction if it receives a response from said second mobile device that enables said first mobile device to authorize the NFC payment transaction.

2. The method of claim 1 wherein

said second mobile device issues a request selected from the group consisting of

an audible message, a sound alert, a visual alarm, a vibration;

wherein upon receipt of a response selected from the group consisting of a voice message, a button press, a flip, a twist, a pull, a move, a shake;

said second mobile device sends a message to said first mobile device.

3. The method of claim 2 comprising

using a voice recognition means to process said response.

4. The method of claim 2 wherein

if said response is not received within a predetermined period of time from sending a request to said second mobile device,

denying said NFC payment transaction.

5. The method of claim 1 comprising performing an action selected from the group consisting of

waving said first mobile device in front of a third NFC payment terminal,

swiping said first mobile device against a third NFC payment terminal,

activating a button on a third NFC payment terminal,

activating a button on said first mobile device while said first mobile device is within proximity of a third NFC payment terminal,

launching an application on said first mobile device while said first mobile device is within proximity of a third NFC payment terminal,

entering a PIN code on said first mobile device while said first mobile device is within proximity of a third NFC payment terminal.

6. The method of claim 1 wherein

if a PIN code was not entered within a predetermined period of time preceding receiving said request for authenticating an NFC payment transaction,

requesting a PIN code.

7. The method of claim 1 comprising

sending a transaction amount to said second mobile device,

said second mobile device comparing said transaction amount to an authorized amount,

wherein if said transaction amount is below said authorized amount,

authorizing said NFC payment transaction.

8. The method of claim 7 comprising

updating said authorized amount,

storing said authorized amount on said second mobile device.

9. The method of claim 1 comprising

updating said user data on said second mobile device using a programming interface.

10. The method of claim 1 wherein

upon receiving a response from said second mobile device,

said first mobile device will send a second request to a remote server through a protocol selected from the group consisting of

GPRS, SMS, USSD;

wherein said first mobile device will authorize said NFC payment transaction if it receives a second response from the remote server that enables the first mobile device to authorize the transaction.

11. A method for automatically authorizing a Near Field Communication (NFC) payment transaction comprising

executing an NFC application on a first mobile device,

establishing a two-way secure short wireless connection between said first mobile device and a second mobile device comprising a short wireless transceiver,

wherein said second mobile device has a size smaller than 22.5 cubic centimeter,

wherein said second mobile device can pair wirelessly with a compatible apparatus within proximity,

wherein upon pairing with said first mobile device, said second mobile device changes to a non-discoverable mode,

wherein said second mobile device can connect to a programming device and can store user data obtained from said programming device in flash memory onboard said second mobile device,

wherein upon receiving a request for authenticating an NFC payment transaction,

said first mobile device will send a first request to said second mobile device through a short wireless means,

wherein upon receipt of a first response from said second mobile device,

said first mobile device will send a second request to a remote server through a protocol selected from the group consisting of

GPRS, SMS, USSD;

wherein upon receipt of a second response from said remote server,

said first mobile device will authorize said NFC payment transaction if said second response enables the first mobile device to authorize said NFC payment transaction.

12. The method of claim 11 wherein

said remote server is selected from the group consisting of

a Remote Authentication Dial In User Service (RADIUS) server,

a remote server, a web server, an application, a mobile terminal, a computer.

13. The method of claim 11 wherein

said second request sent to said remote server comprises a transaction amount,

wherein said remote server compares said transaction amount to an authorized amount,

wherein if said transaction amount is below said authorized amount,

authorizing said NFC payment transaction.

14. The method of claim 13 comprising

updating said authorized amount,

storing said authorized amount on said remote server.

15. The method of claim 11 wherein

said first request comprises at least one first obfuscation code corresponding to at least one first obfuscation or de-obfuscation function stored on said second mobile device,

wherein upon receipt of a message,

said second mobile device can apply said at least one first obfuscation or de-obfuscation function stored on said mobile device to a message.

16. The method of claim 11 comprising

if a PIN code was not entered within a predetermined period of time preceding receiving said request for authenticating an NFC payment transaction,

requesting a PIN code.

17. A unitary mobile apparatus, comprising:

a flash storage means,

a short wireless transceiver,

an attachment means selected from the group consisting of

a key chain, a ring, a bracelet, a VELCRO and a clip;

a data port for connecting said unitary mobile apparatus to a third device and for writing user data onboard said unitary mobile apparatus,

wherein said user data is selected from the group consisting of a credit amount, a credit limit, a threshold, an amount, a digital key, an encryption key;

wherein said unitary mobile apparatus has a size smaller than 22.5 cubic centimeter,

wherein said unitary mobile apparatus can pair with a first mobile device within proximity,

wherein upon pairing with said first mobile device, said unitary mobile apparatus can switch to a non-discoverable mode,

wherein upon receipt of a message from said first mobile device for authorizing an NFC payment transaction,

said unitary mobile apparatus can send a reply to said first mobile device,

said first mobile device can authorize or deny said NFC payment transaction.

18. The unitary mobile apparatus of claim 17 further comprising

a folding earpiece,

wherein upon folding said folding earpiece,

said unitary mobile apparatus automatically operates as a standard BLUETOOTH headset providing voice functionality.

19. The unitary mobile apparatus of claim 17 comprising

an alarm means,

wherein upon detection of a connection drop between said unitary mobile apparatus and said first mobile device,

said alarm means can issue an audible sound of at least 60 decibels.

20. The unitary mobile apparatus of claim 17 comprising

a voice synthesizer for generating audible voice messages.