Secure and mobile financial transaction

• US 8,433,657 B2
• Filed: 04/02/2012
• Issued: 04/30/2013
• Est. Priority Date: 04/15/2011
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Ofinno Technologies, LLC (Ofinno, LLC)
• Inventors: Dinan, Esmael Hejazi
• Primary Examiner(s): Hewitt, II, Calvin L
• Assistant Examiner(s): HALE, TIM B
• Application Number:
  US13/437,590
• Publication Number:
  US 20120265688A1
• Time in Patent Office: 393 Days
• Field of Search: None
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/202 Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR
• CPC Class Codes: G06Q 20/26 Debit schemes, e.g. "pay now"
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists

Abstract

A portable device is configured to transmit a first encrypted message to an account database server. The first encrypted message may comprise a request to get information about a financial account. The portable device receives a second encrypted message comprising the financial account information. The portable device wirelessly receives a signal from a merchant machine and wirelessly transmits a response message to the merchant machine. The response message comprises account related information for the merchant machine to trigger a financial transaction.

Claims

1. A method executed on a portable device, comprising:

receiving, via a first wireless receiver, an account information request signal from a merchant machine;

transmitting, via a first wireless transmitter, a response message to said merchant machine, said response message comprising said account information for said merchant machine;

encrypting a first message using a first encryption key, said first message comprising a request to get information about a financial account configured in said portable device;

mapping, by a packet filter, said encrypted first message to a pre-established non-GBR bearer;

generating a fourth message by encrypting, by said portable device, said encrypted first message for an additional time employing a third encryption key;

transmitting on said non-GBR bearer, via a first transmitter, said fourth message on a first plurality of subcarriers of an OFDM wireless network;

receiving on said pre-established non-GBR bearer, via a first receiver, a second encrypted message on a second plurality of subcarriers of said OFDM wireless network

decrypting, by said portable device, said second encrypted message using a fourth decryption key, said second encrypted message comprising said financial account information;

decrypting, by said portable device, said decrypted second message using a second decryption key, and storing said financial account information; and

sending to a display at least a portion of said financial account information.

2. The method of claim 1, further comprising:

receiving, by said portable device, said second decryption key from a third network node; and

receiving, by said portable device, said fourth decryption key from a fourth network node, said third network node being different than said fourth network node.

3. The method of claim 1, further comprising, after transmission of said encrypted first message,

receiving, by said portable device, at least two packet acknowledgements comprising:

acknowledgement from a cellular base station; and

acknowledgement from said account database server.

4. The method of claim 1, wherein said pre-established non-GBR bearer has a plurality of attributes comprising:

a scheduling priority;

an allocation and retention priority; and

a portable device aggregate maximum bit rate.

5. The method of claim 1, wherein said encrypted first message is encrypted using said third encryption key and at least one other parameter that changes every 1 to 100 msec.

6. The method of claim 1, wherein said second encrypted message is decrypted using said fourth decryption key and at least one other parameter that changes every 1 to 100 msec.

7. The method of claim 1, wherein said second plurality of subcarriers comprises a plurality of non-contiguous OFDM subcarriers at any given time during transmission period.

8. The method of claim 1, wherein said first plurality of subcarriers consists of a plurality of adjacent SC-FDMA subcarriers at any given time during transmission period.

9. The method of claim 1, further comprising:

transmitting, by said portable device, a first part of said encrypted first message on a first subset of said first plurality of subcarriers in a first time period; and

transmitting, by said portable device, a second part of said encrypted first message on a second subset of said first plurality of subcarriers in a second time period;

wherein;

said first time period and said second time period do not overlap; and

said first subset of said first plurality of subcarriers and said second subset of said first plurality of subcarriers are different.

10. The method of claim 1, further comprising adding an IP packet header to said encrypted first message before said encrypted first message is encrypted employing said third key.

11. The method of claim 1, further comprising adding a packet header comprising a sequence number to a packet after said encrypted first message is encrypted employing said third key.

12. The method of claim 1, further comprising adding a packet header by MAC layer to said encrypted first message for transmission over said first transmitter, and said packet header being transmitted without encryption.

13. The method of claim 1, further comprising verifying, by said portable device, a certificate received from said account database server before transmitting said encrypted first message.

14. The method of claim 1, further comprising receiving, by said portable device, an encrypted third message from said account database server after said financial transaction is triggered, said encrypted third message comprising updated account information.