Method, device and system for secure transactions

• US 8,453,223 B2
• Filed: 04/11/2012
• Issued: 05/28/2013
• Est. Priority Date: 09/23/2011
• Status: Active Grant

• Current Assignee: Geoff Ingalls, Howard M. Svigals, Jerome Svigals
• Original Assignee: Geoff Ingalls, Howard M. Svigals, Jerome Svigals
• Inventors: Ingalls, Geoff, Svigals, Jerome, Svigals, Howard M.
• Primary Examiner(s): LE, CHAU D
• Application Number:
  US13/444,551
• Publication Number:
  US 20130081122A1
• Time in Patent Office: 412 Days
• Field of Search: 726 4- 7
• US Class Current: 726/7
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

A method for operating a security device comprises receiving a request for a transaction from a programmable device executing an application obtained from an application controlling institute, and verifying a validity of the transaction. A user is alerted, in which the user indicates an acceptance of the request. A one-time identifier is generated. The one-time identifier comprises a security device identification, a transaction number, a date and a time. The one-time identifier is communicated to the programmable device, in which the application verifies a validity of the security device identification and instructs the programmable device to communicate the one-time identifier and transaction to the application controlling institute for processing. The application controlling institute verifies validity of the one-time identifier and processes the transaction, wherein said security device, application programmable device and application controlling institute securely processes the transaction.

Claims

1. A system comprising:

a security device unit comprising;

a housing;

means for communicating wirelessly using technology to limit a separable distance for operation;

a processor for;

verifying a validity of a request for a transaction;

issuing an alert of receiving a valid request;

acknowledging a user'"'"'s indication of an acceptance of the request;

generating a first one-time identifier, upon the acknowledgment, the first one-time identifier at least comprising a security device identification, a transaction number, a date and a time;

storing the request and transaction number to form an audit trail;

incrementing the transaction number for each subsequent transaction;

instructing said communicating means to communicate the first one-time identifier;

verifying a validity of a second one-time identifier for a processed transaction; and

instructing said communicating means to communicate an acceptance of the transaction upon the second one-time identifier being validated;

an indicator for receiving the alert from said processor to alert the user; and

a sensor for receiving the user'"'"'s indication of an acceptance and transmitting the indication to said processor;

an application programmable device executing an application, said application programmable device for;

communicating with said communicating means;

communicating the request for the transaction to said communicating means;

receiving the first one-time identifier from said communicating means;

verifying a validity of the security device identification;

sending the first one-time identifier and transaction for processing, upon verification of the validity;

receiving a second one-time identifier indicating the transaction processed; and

communicating the second one-time identifier to said security device; and

an application controlling institute for;

communicating with said application programmable device;

supplying the application to said application programmable device;

receiving the first one-time identifier and transaction for processing;

verifying a validity of the first one-time identifier;

processing the transaction using the security device identification to determine account information, upon verification of the validity;

generating the second one-time identifier; and

sending the second one-time identifier to said application programmable device, wherein said security device, application programmable device, and application controlling institute securely process the transaction.

2. The system as recited in claim 1, in which said security device further comprises means, joined to said housing, for attaching said security device to an article for transportation.