Wireless mobile transaction system and the procedure for carrying out transactions with a mobile phone

• US 9,189,783 B2
• Filed: 07/16/2010
• Issued: 11/17/2015
• Est. Priority Date: 03/10/2010
• Status: Expired due to Fees

• Current Assignee: Margento R&D DOO
• Original Assignee: Margento R&D DOO
• Inventors: Chowdhury, Amor, Urbanija, Milos, Kotnik, Bojan, Alyamour, Dani
• Primary Examiner(s): Mehra, Inder
• Application Number:
  US13/637,458
• Publication Number:
  US 20130029646A1
• Time in Patent Office: 1,950 Days
• Field of Search: 705/14, 705/16, 705/26.1, 705/76, 705/44, 705/39, 705/67, 705/71, 705/21, 705/38, 705/41, 705/64, 705/14.27, 705/14.65, 705/17, 705/40, 705/72, 705/7.29, 705/7.35, 705/13, 705/14.1, 705/14.15, 705/14.23, 705/14.31, 705/14.36, 705/14.38, 705/14.54, 705/14.55, 370/352, 370/389, 370/338, 370/392, 370/53, 370/328, 370/401, 455/41.2, 455/414.1, 455/435.1, 455/41.3, 455/436, 455/445, 455/435.2
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/22 Payment schemes or models
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

The invention belongs to the field of systems for provision of computer-supported transactions with the use of a mobile phone, more exactly to the field of enabling universal communication between a telephone device, different transaction terminals and different servers including bank servers for carrying out certain transactions, considering all the security requirements against unauthorized access to an individual bank account or other user account. The core of the wireless mobile transaction system and the procedure for carrying out transactions with the mobile phone according to the invention is in the fact that the transfer of the transaction data between the user'"'"'s mobile phone and the transaction processing center is done using a secure connection based on GPRS or UMTS data package transfer, whereas between the user'"'"'s mobile phone and the shop'"'"'s POS terminal the data is transferred using sound-modulated data transfer through an acoustic coupling or on the basis of infrared data association (IrDA) or Bluetooth wireless data connection or NFC contactless short-range communication technology or wireless internet connection WLAN. This way the user'"'"'s mobile phone becomes a simple, safe and handy transaction instrument for carrying out financial transactions, such as electronic payment and transfer of funds, as well as non-financial transactions, such as using bonuses, collecting loyalty points and allowing and/or controlling access to secured areas, premises, buildings and similar. According to the invention the system is using operator'"'"'s existent dedicated wireless data-transfer technology, such as GPRS or UMTS, for transferring data between the transaction processing center and the mobile phone, and is performing identification of the user with the certificate which is securely stored on the user'"'"'s SIM card or in another secure memory of the mobile phone.

Claims

1. A method of carrying wireless mobile transactions, comprising:

starting an application at a mobile terminal;

receiving, at said mobile terminal, input indicative of a selected mode of communication between said mobile terminal and a transaction terminal;

establishing a packet data connection between said mobile terminal and a transaction processing center;

examining a security certificate retrieved from a storage element within said mobile terminal or a personal identification number (PIN) input by a user to verify said security certificate, and thereby determine if said packet data connection has been successfully established; and

transmitting transaction data between said transaction processing centre and said transaction terminal, if said security certificate is verified;

wherein at least part of said transaction data is transmitted between said transaction processing center and said transaction terminal through said mobile terminal,

wherein data between said mobile terminal and said transaction terminal is transmitted in accordance with said selected mode of communication, and

wherein said selected mode of communication between said mobile terminal and said transaction terminal is acoustic coupling, further comprising, at said mobile terminal, sound modulating and acoustically reproducing transaction data received at said mobile terminal for said transaction terminal.

2. The method of claim 1, wherein said mode of communication is one of an acoustic coupling or a short-range wireless communication technology comprising IrDA, Bluetooth, WLAN, Wireless USB, and NFC.

3. The method of claim 1, further comprising transferring transaction data in the direction from said transaction processing center to said transaction terminal via a wireless connection including UMTS, GPRS and/or WLAN to said mobile terminal and processing said transaction data at said mobile terminal for further transmission, and further transferring said transaction data from said mobile terminal to said transaction terminal in accordance with said selected mode of communication.

4. The method of claim 1, further comprising:

transferring transaction data in the direction from said transaction terminal to said transaction processing center through said mobile terminal,

sound modulating said transaction data at said transaction terminal;

acoustically reproducing said sound-modulated signal using a speaker inbuilt in the transaction terminal;

capturing the acoustically modulated signal via a microphone at said mobile terminal; and

demodulating said captured signal and sending the obtained transaction data to said transaction processing center through said wireless connection.

5. The method of claim 1, wherein part of said transaction data is transmitted via an active wireless or wired data connection to said transaction processing center from said transaction terminal, and said connection is a WLAN, GPRS, UMTS or wired TCP/IP connection.

6. The method of claim 1, further comprising notifying the user of the mobile terminal if the step for establishing connection between the mobile phone and the transaction processing centre and/or the step of verification of said security certificate is not successful.

7. The method of claim 6, further comprising closing the application after said notification.

8. The method of claim 1, wherein said verification comprises:

reading the PIN of the mobile application user;

verifying the authenticity and validity of the security certificate stored on a SIM card or another secure memory of the mobile terminal; and

if the personal user data and the security certificate do not match, notifying the user by an application control module, which generates an acoustical as well as graphical signal which are then presented on the mobile terminal'"'"'s speaker and screen, respectively, and closing the application;

or

if the security certificate is verified and confirmed, initiating data transfer between the transaction processing centre and the transaction terminal in at least one direction.

9. A wireless mobile transaction system, comprising:

a mobile terminal, a transaction terminal, and a transaction processing center,

wherein the mobile terminal comprises a mobile application with graphical user interface and with capability to control one or more of the mobile terminal'"'"'s data transmission modules, and which has access to a secure memory element of the mobile terminal;

wherein the mobile terminal is configured for

(a) receiving input indicative of a mode of communication between said mobile terminal and said transaction terminal;

(b) establishing a packet data connection between said mobile terminal and a transaction processing center; and

(c) if said packet data connection has been successfully established, examining a security certificate retrieved from said secure memory element or a personal identification number (PIN) input by a user;

or, if said security certificate is verified, adapting the mobile terminal and the transaction processing center for transaction data transmission;

wherein the mobile terminal is configured such that at least part of said transaction data is transmitted between said transaction processing center and said transaction terminal through said mobile terminal, wherein data between said mobile terminal and said transaction terminal is transmitted in accordance with said selected mode of communication, and

wherein the mobile application comprises functions for implementation of the acoustic modulator and demodulator and levels of control over sending, receiving, confirming and verifying data packets sent through the acoustic coupling.

10. The wireless mobile transaction system of claim 9, comprising a special application for carrying out the transaction on the mobile phone which can operate on any mobile platform that enables installing applications with access to a sound encoder or to one or several short-range wireless communication technologies, and control over one of the wireless packet connections.

11. The wireless mobile transaction system of claim 10, wherein radiofrequency modes of full-duplex wireless data transfer between the mobile phone and the POS terminal supported by the special application for carrying out transactions on a mobile phone include one of Bluetooth, WLAN, NFC, and IrDA.

12. The wireless mobile transaction system of claim 9, configured so that it enables full-duplex data transfer between the transaction processing center and the transaction terminal which is security-wise faultless both on the level of data transfer through the mobile operator'"'"'s data packet network and with data transfers through said selected mode of communication.

13. The wireless mobile transaction system of claim 12, where said selected mode of communication comprises an acoustic coupling or short-range wireless communication mode including IrDA, Bluetooth, WLAN, or NFC.