Method and system for processing a data transfer related to a data-storing card

• US 9,021,571 B2
• Filed: 12/30/2013
• Issued: 04/28/2015
• Est. Priority Date: 01/04/2013
• Status: Active Grant

• Current Assignee: Irene Tsai, Yi-Fen Chou
• Original Assignee: Irene Tsai, Yi-Fen Chou
• Inventors: Tsai, Irene, Chou, Yi-Fen
• Primary Examiner(s): Patel, Haresh N
• Application Number:
  US14/143,272
• Publication Number:
  US 20140196138A1
• Time in Patent Office: 484 Days
• Field of Search: 726/9, 705/67, 713/193
• US Class Current: 726/9
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 2213/3806 Mobile device
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: H04L 43/067 using time frame reporting
• CPC Class Codes: H04L 63/067 using one-time keys cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier

Abstract

In a method for processing a data transfer, an electronic device accesses card-specific data and a card account number from a data-storing card. The electronic device generates a device-generated authentication number which is associated with the data transfer, and which is transmitted, together with the card account number and the card-specific data, to a network platform. The network platform compares an inputted authentication number from a portable device and the device-generated authentication number, and transmits to-be-transferred data to the portable device when the authentication numbers correspond with each other.

Claims

1. A method for processing a data transfer related to a data-storing card that stores card-specific data and a card account number, said method to be implemented using a data transferring system and comprising:

(A) when the data-storing card is coupled to an electronic device of the data transferring system, accessing, by the electronic device, the card-specific data and the card account number from the data-storing card;

(B) generating, by the electronic device, a device-generated authentication number associated with the data transfer;

(C) transmitting, by the electronic device, the card account number, the card-specific data and the device-generated authentication number to a network platform of the data transferring system;

(D) receiving, by a portable device of the data transferring system, an inputted authentication number;

(E) transmitting, by the portable device, the inputted authentication number to the network platform;

(F) comparing, by the network platform, the inputted authentication number and the device-generated authentication number; and

(G) when the inputted authentication number is deemed to correspond with the device-generated authentication number, transmitting, by the network platform, to-be-transferred data which is derived from the card-specific data, to the portable device.

2. The method of claim 1, wherein the electronic device is associated with a vendor, and in step (D), a user of the portable device is informed by the vendor of the device-generated authentication number, and the user subsequently inputs the device-generated authentication number into the portable device to serve as the inputted authentication number;

wherein the to-be-transferred data includes an executable application associated with the vendor and to be executed by the portable device, and the executable application is a JAVA security applet.

3. The method of claim 1, wherein the data-storing card conforms with one of the International Organization for Standardization (ISO) 7816 standard and the ISO 14443 standard.

4. The method of claim 1, wherein:

the card account number includes at least one of a phone number associated with the portable device, an identification number of a user of the portable device, a birth date of the user of the portable device, and a card number of the data-storing card;

in step (F), the network platform deems the inputted authentication number to correspond with the device-generated authentication number when the inputted authentication number is found to be identical to the device-generated authentication number; and

in step (G), the network platform transmits the to-be-transferred data when the inputted authentication number is deemed to logically correspond with the device-generated authentication number.

5. A data transferring system for processing a data transfer related to a data-storing card that stores card-specific data and a card account number, said data transferring system comprising:

an electronic device configured to be coupled to the data-storing card for accessing the card-specific data and the card account number stored therein;

a portable device; and

a network platform that is operable to communicate with said portable device and said electronic device;

wherein said electronic device is configured to generate a device-generated authentication number associated with the data transfer, and to transmit the card account number, the card-specific data and the device-generated authentication number to said network platform;

wherein said portable device is configured to receive an inputted authentication number and to transmit the inputted authentication number to said network platform; and

wherein said network platform is configured to compare the inputted authentication number with the device-generated authentication number, and to transmit to-be-transferred data, which is derived from the card-specific data, to said portable device when the inputted authentication number is deemed to correspond with the device-generated authentication number.

6. The data transferring system of claim 5, wherein said portable device includes:

a baseband module configured to communicate with said network platform so as to receive the to-be-transferred data therefrom, said baseband module including one of a baseband processor and an application processor;

a storage module; and

a control module coupled to said baseband module and said storage module and configured to control transmission of the to-be-transferred data received by said baseband module to said storage module for storage in said storage module;

wherein said storage module and said control module are integrated using an integrated circuit (IC) application chip having a JAVA card-based design that implements a JAVA virtual machine.

7. The data transferring system of claim 5, wherein said portable device includes:

a baseband module configured to communicate with said network platform so as to receive the to-be-transferred data therefrom;

a subscriber identity module (SIM) card connector configured to be coupled to a SIM card; and

a control module coupled to said baseband module and said SIM card connector and configured to control transmission of the to-be-transferred data received by said baseband module to the SIM card that is coupled to said SIM card connector for storage in the SIM card.

8. The data transferring system of claim 5, wherein said portable device includes:

a baseband module configured to communicate with said network platform so as to receive the to-be-transferred data therefrom; and

a subscriber identity module (SIM) card connector coupled to said baseband module, and configured to be coupled to a SIM card;

wherein said baseband module is configured to transmit the to-be-transferred data received thereby to the SIM card that is coupled to said SIM card connector for storage in the SIM card.

9. The data transferring system of claim 5, wherein:

said network platform deems the inputted authentication number to correspond with the device-generated authentication number when the inputted authentication number is identical to the device-generated authentication number, or is deemed to logically correspond with the device-generated authentication number.

10. The data transferring system of claim 5, wherein said electronic device is associated with a vendor, and the to-be-transferred data includes an executable application associated with the vendor and to be executed by said portable device;

wherein the executable application is a JAVA security applet.

11. The data transferring system of claim 5, wherein the card account number includes at least one of a phone number associated with said portable device, an identification number of a user of said portable device, a birth date of the user of said portable device, and a card number of the data-storing card.

12. The data transferring system of claim 5, wherein:

the data-storing card conforms with one of the International Organization for Standardization (ISO) 7816 standard and the ISO 14443 standard; and

said portable device includes a card connector configured to be coupled to the data-storing card.

13. The data transferring system of claim 5, further comprising an external device detachably coupled to said portable device and configured to be coupled to the data-storing card.

14. The data transferring system of claim 13, wherein:

said external device includes a storage module for storing the to-be-transferred data therein; and

said portable device includes a baseband module configured to communicate with said network platform so as to receive the to-be-transferred data therefrom, and a control module coupled to said baseband module and said external device and configured to control transmission of the to-be-transferred data received by said baseband module to said external device for storage in said storage module.

15. The data transferring system of claim 13, wherein:

said external device includes a storage module for storing the to-be-transferred data therein; and

said portable device includes a baseband module configured to communicate with said network platform so as to receive the to-be-transferred data therefrom, and coupled to said baseband module and said external device;

wherein said baseband module is configured to transmit the to-be-transferred data to said external device for storage in said storage module.

16. The data transferring system of claim 13, wherein said portable device includes a baseband module configured to communicate with said network platform so as to receive the to-be-transferred data therefrom, and a control module coupled to said baseband module and said external device and configured to control transmission of the to-be-transferred data received by said baseband module to said external device for storage in the data-storing card that is coupled to said external device.

17. The data transferring system of claim 13, wherein said portable device includes a baseband module configured to communicate with said network platform so as to receive the to-be-transferred data therefrom, said baseband module being coupled to said external device and being configured to transmit the to-be-transferred data to said external device for storage in the data-storing card that is coupled to said external device.