Self-authorizing devices

• US 8,151,345 B1
• Filed: 01/24/2008
• Issued: 04/03/2012
• Est. Priority Date: 01/25/2007
• Status: Active Grant

• Current Assignee: Neology Incorporated (OEP Technologie BV)
• Original Assignee: Yeager C. Douglas
• Inventors: Yeager, C. Douglas
• Primary Examiner(s): Srivastava, Vivek
• Assistant Examiner(s): SONG, HEE K
• Application Number:
  US12/019,318
• Time in Patent Office: 1,531 Days
• Field of Search: 726/9, 726/20, 235/380, 235/375, 235/439, 235/492, 710/313, 713/165
• US Class Current: 726/20
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes

Abstract

Self-authorizing cards and cellular network adapters for authorization of financially payments and other secure transactions. In some embodiments a smart card is provided with a connector for a USB port on a computer terminal such as a personal computer (PC). Embodiments are also provided for mobile phones, personal digital assistants (PDAs), and similar devices. The self-authorizing devices typically include a secure element that has been previously provisioned with information about a particular card holder account. A secure element reader interrogates the smart element and derives information needed to authorize the transaction. A communications controller transmits the information to a host device, such as a PC, PDA, or a mobile phone.

Claims

1. A token comprising:

a mounting structure having a communication connector configured to connect to a computer terminal;

a secure element affixed to the mounting structure, the secure element comprising a data file,

a secure element reader affixed to the mounting structure and configured to interrogate the secure element by executing file system functions comprising a command to select a payment card application according to ISO 7816-4 and to generate file information from the secure element data file; and

a communications controller affixed to the mounting structure and configured to receive the file information from the secure element reader and to convert at least a portion of the file information into transaction information and to transmit the transaction information to the computer terminal through the communications connector, wherein the communication connector is a Universal Serial Bus (USB) connector and the communications controller is configured as a Human Interface Device (HID) class USB-device and the communications controller is configured to provide the transaction information in a format that auto-populates a form field defined by an application running on the computer terminal.

2. The token of claim 1 wherein the communications controller is configured to provide the transaction information in a prescribed cadence for an application running on the computer terminal.

3. The token of claim 1 wherein the secure element data file comprises financial authorization data and the communications controller is configured to extract at least a portion of the financial authorization data and is configured to encrypt the at least a portion of the financial data and to transmit the encrypted financial authorization data for transmission as transaction information to the computer terminal through the communications connector.

4. The token of claim 1 wherein:

the secure element data file comprises financial authorization data and the controller is configured to extract at least a portion of the financial authorization data and is configured to encrypt the at least a portion of the financial data and to transmit the encrypted financial authorization data for transmission as transaction information to the computer terminal using the USB connector.

5. The token of claim 4 wherein:

the communications controller is configured to provide the transaction information in a prescribed cadence for the application running on the computer terminal.

6. The token of claim 1 wherein the transaction information comprises an encrypted unpredictable number constructed as a hash of a timestamp.

7. The token of claim 1 wherein the transaction information comprises an encryption constructed from a timestamp and a transaction counter.

8. The token of claim 1 wherein the secure element reader is configured to await a startup instruction comprising an unpredictable number originating from the computer terminal prior to interrogating the secure element.

9. A token comprising:

a mounting structure having a communication connector configured to connect to a computer terminal;

a secure element affixed to the mounting structure, the secure element comprising a data file,

a secure element reader affixed to the mounting structure and configured to interrogate the secure element by executing file system functions comprising a command to select a payment card application according to ISO 7816-4 and to generate file information from the secure element data file; and

a communications controller affixed to the mounting structure and configured to receive the file information from the secure element reader and to convert at least a portion of the file information into transaction information and to transmit the transaction information to the computer terminal through the communications connector;

wherein

the secure element data file comprises financial authorization data and the communications controller is configured to extract at least a portion of the financial authorization data and is configured to encrypt the at least a portion of the financial data and to transmit the encrypted financial authorization data for transmission as transaction information to the computer terminal through the communications connector, and wherein

the communications controller is configured to provide the transaction information in a format that auto-populates a form field defined by an application running on the computer terminal.

10. The token of claim 9 wherein the communications controller is configured to provide the transaction information in a prescribed cadence for an application running on the computer terminal.

11. A token comprising:

a mounting structure having a Universal Serial Bus (USB) connector configured to connect to a computer terminal;

a secure element affixed to the mounting structure, the secure element comprising a data file,

a communications controller affixed to the mounting structure and configured as a Human Interface Device (HID) class USB-device and configured to extract information from the secure element data file and to convert at least a portion of the data file into transaction information and to transmit the transaction information to the computer terminal through the USB connector as keyboard emulation and wherein the communications controller is configured to provide the transaction information in a format that auto-populates a form field defined by an application running on the computer terminal.

12. The token of claim 11 wherein the communications controller is configured to provide the transaction information in a prescribed cadence for an application running on the computer terminal.

13. The token of claim 11 wherein the secure element data file comprises financial authorization data and the communications controller is configured to extract at least a portion of the financial authorization data and is configured to encrypt the at least a portion of the financial data and to transmit the encrypted financial authorization data for transmission as transaction information to the computer terminal through the USB connector.

14. The token of claim 11 wherein the transaction information comprises an encrypted unpredictable number constructed as a hash of a timestamp.

15. The token of claim 11 wherein the transaction information comprises an encryption constructed from a timestamp and a transaction counter.

16. The token of claim 11 wherein the secure element reader is configured to await a startup instruction comprising an unpredictable number originating from the computer terminal prior to interrogating the secure element.

17. A token comprising:

a mounting structure having a Universal Serial Bus (USB) connector configured to connect to a computer terminal;

a secure element affixed to the mounting structure, the secure element comprising a data file; and

a communications controller affixed to the mounting structure and configured as a Human Interface Device (HID) class USB-device and configured to extract information from the secure element data file and to convert at least a portion of the data file into transaction information and to transmit the transaction information to the computer terminal through the USB connector as keyboard emulation;

wherein

the secure element data file comprises financial authorization data and the communications controller is configured to extract at least a portion of the financial authorization data and is configured to encrypt the at least a portion of the financial data and to transmit the encrypted financial authorization data for transmission as transaction information to the computer terminal through the USB connector; and

wherein

the communications controller is configured to provide the transaction information in a format that auto-populates a form field defined by an application running on the computer terminal.

18. The token of claim 17 wherein the communications controller is configured to provide the transaction information in a prescribed cadence for an application running on the computer terminal.

19. A token comprising:

a mounting structure having a communication connector configured to connect to a computer terminal;

a secure element affixed to the mounting structure, the secure element comprising a data file comprising financial authorization data,

a communications controller affixed to the mounting structure and configured to extract at least a portion of the financial authorization data from the secure element data file and configured to encrypt the at least a portion of the financial data and to transmit the encrypted financial authorization data as transaction information comprising an encrypted unpredictable number constructed as a hash of a timestamp to the computer terminal using the communication connector, wherein the communications controller is configured to provide the transaction information in a format that auto-populates a form field defined by an application running on the computer terminal.

20. The token of claim 19 wherein the communications controller is configured to provide the transaction information in a prescribed cadence for an application running on the computer terminal.

21. The token of claim 19 wherein the transaction information comprises an encryption constructed from the hash of the timestamp and a transaction counter.

22. The token of claim 19 wherein the secure element reader is configured to await a startup instruction comprising an unpredictable number originating from the computer terminal prior to interrogating the secure element.

23. A cellular network adapter for a cellular network device configured with a cellular network application interface comprising;

a secure element comprising a data file;

a secure element reader in the cellular network adapter configured to interrogate the secure element by executing file system functions according to ISO 7816-4 and to generate file information from the secure element data file;

a near field communications controller bridge chip to convert the file information to an RF data signal for an external reader; and

a communications controller configured to receive the file information from the secure element reader and to convert at least a portion of the file information into transaction authorization information and to transmit the transaction authorization information from the cellular network device over a wireless network through the cellular network application interface, wherein the wireless network comprises a cellular network and the secure element reader in the cellular network adapter is configured to await a startup instruction comprising an unpredictable number originating over the cellular wireless network prior to interrogating the secure element.

24. The cellular network adapter of claim 23 wherein the transaction authorization information comprises an encrypted unpredictable number constructed as a hash of a timestamp.

25. The cellular network adapter of claim 23 wherein the transaction authorization information comprises an encryption constructed from a timestamp and a transaction counter.