Onetime passwords for mobile wallets

• US 8,565,723 B2
• Filed: 10/17/2007
• Issued: 10/22/2013
• Est. Priority Date: 10/17/2007
• Status: Active Grant

• Current Assignee: First Data Corporation (Fiserv Incorporated)
• Original Assignee: First Data Corporation (Fiserv Incorporated)
• Inventors: Cox, Christopher T.
• Primary Examiner(s): WANG-HURST, KATHY W
• Application Number:
  US11/873,611
• Publication Number:
  US 20090104888A1
• Time in Patent Office: 2,197 Days
• Field of Search: 235379-380, 235492-493, 726 4- 6, 455410-411, 705/44, 705/67
• US Class Current: 455/410
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G07F 7/122 Online card verification

Abstract

A mobile wallet and network system using onetime passwords for authentication is disclosed according to one embodiment of the invention. A onetime password may be generated at a mobile wallet server and transmitted to the mobile device. The onetime password may then be used to authenticate the user of the mobile wallet when completing a transaction. Authentication may require entry of the onetime password and confirmation that the onetime password entered matches the onetime password sent by the mobile wallet server. In other embodiments of the invention, a mobile wallet and a mobile wallet server are in sync and each generate the same onetime password at the same time. These onetime passwords may then be used to authenticate the user of the mobile wallet.

Claims

1. A system comprising:

a mobile device including a near field communications (NFC) transponder and a mobile wallet, wherein the mobile device is configured to receive a one-time password from the mobile wallet that was received from a mobile wallet server, maintain the one-time password associated with a plurality of financial account numbers from multiple financial institutions in the mobile wallet, display the plurality of financial account numbers, receive a user selection of one of the plurality of financial account numbers, and communicate both the selected financial account number via the NFC transponder and the one-time password when performing a transaction, wherein the one-time password is displayed to permit the user to enter manually the one-time password to a point of sale (POS) device;

and

the mobile wallet server configured to communicate with a communication network and comprising a password generator that generates the one-time passwords at predetermined intervals, the mobile wallet server configured to associate the one-time passwords with the plurality of financial account numbers, and communicates the one-time passwords to the mobile device through the communication network.

2. The system according to claim 1, wherein the mobile wallet maintains information related to a plurality of financial accounts.

3. The system according to claim 1, wherein the mobile device is configured to receive a one-time password from the mobile wallet server and to communicate the one-time password to the point of sale (POS) device.

4. The system according to claim 1, wherein the password generator generates random one-time passwords.

5. The system according to claim 1, wherein mobile wallet server stores the one-time passwords saved by the password generator.

6. The system according to claim 1, further comprising:

the POS device comprising an NFC transponder, wherein the POS device receives an account number and a one-time password from the mobile device through the NFC transponder; and

an acquirer system communicably coupled with the POS device and the mobile wallet generator, wherein the acquirer system receive the account number and the one-time password from the POS device and confirms the validity of the one-time password.

7. A wireless telephone comprising:

a near field communications (NFC) transponder;

a display;

a mobile wallet, wherein the mobile wallet maintains a plurality of financial account numbers from multiple financial institutions; and

an antenna communicably coupled to a wireless network, wherein the wireless telephone receives a one one-time password from a service provider through the antenna,

wherein the wireless telephone is configured to;

display the plurality of financial account numbers;

receive a user selection of one of the plurality of financial account numbers;

receive at least one one-time password from a service provider;

display the one-time password on the display of the wireless telephone which permits the user to manually enter the one-time password into a point of sale (POS) device; and

communicate the selected financial account number in the mobile wallet and the one-time password to the POS device through the NFC transponder when performing a transaction.

8. The wireless telephone according to claim 7, wherein the wireless telephone is configured to receive more than one one-time password from a service provider at predetermined intervals.

9. The wireless telephone according to claim 8, wherein each one-time password is maintained by the mobile wallet.

10. The wireless telephone according to claim 7, wherein the one-time password is received in response to a request for a one-time password from the wireless telephone through the antenna.

11. The wireless telephone according to claim 10, wherein the request is initiated by the user of the wireless telephone.

12. The wireless telephone according to claim 10, wherein the request is initiated in response to performing a transaction.