Method and apparatus for recovery during authentication

• US 9,195,980 B2
• Filed: 10/30/2009
• Issued: 11/24/2015
• Est. Priority Date: 10/30/2009
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Technologies Oy (Nokia Corporation)
• Inventors: Puura, Sami Mikael, Hirvikorpi, Mika Kristian
• Primary Examiner(s): KIM, STEVEN S
• Application Number:
  US12/610,028
• Publication Number:
  US 20110106709A1
• Time in Patent Office: 2,216 Days
• Field of Search: 705/64, 705/67, 713/170
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/3255 using mobile network messaging services for payment, e.g. SMS
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 4/24 Accounting or billing
• CPC Class Codes: H04W 48/20 Selecting an access point

Abstract

Techniques for recovery during authentication include initiating sending a HyperText Transfer Protocol (HTTP) authentication message from user equipment of a user to a merchant node of a merchant. If the user is not authenticated in response to the HTTP authentication message, then sending a Short Message Service (SMS) message from the user equipment to the merchant node is initiated. The SMS message indicates a transaction between the user and the merchant. In some embodiments, techniques include changing an access point to a network until an access point utilized is on a list of acceptable access points, in response to a buy response message that indicates a transaction between a merchant and a user. A hypertext transfer protocol authentication message is sent through the access point that is on the list of acceptable access points.

Claims

1. A method comprising:

in response to a buy request message from a user equipment, transmitting, by a merchant platform, a buy response message to the user equipment, wherein the buy response message includes a transaction identifier of a transaction between a user of the user equipment and a merchant, an uniform resource identifier for hypertext transfer protocol authentication, and a short message service address of the merchant;

receiving, by the merchant platform from the user equipment via a network, a hypertext transfer protocol authentication message using the uniform resource identifier, wherein the hypertext transfer protocol authentication message includes the transaction identifier;

determining, by the merchant platform, that authentication using the hypertext transfer protocol authentication message has failed;

in response to the determination, transmitting, by the merchant platform, an authentication failure message to the user equipment;

receiving, by the merchant platform from the user equipment, a short message service message using the short message service address, wherein the short message service message includes a network service subscriber identifier of the user equipment and the transaction identifier;

authenticating the user, by the merchant platform, using the short message service message; and

transmitting, by the merchant platform, a charge customer message to a network operator of the user for billing the transaction on behalf of the merchant, wherein the charge customer message includes an amount of the transaction and the network service subscriber identifier.

2. A method of claim 1, further comprising:

determining by the apparatus to use the network operator to bill the transaction for the merchant,

wherein the network operator provides access to the network for the user equipment.

3. A method of claim 1, further comprising:

transmitting to the user equipment a message that indicates an access code for a product to be delivered by the merchant according to the transaction in response to the short message service message.

4. A method of claim 1, wherein the buy response message further comprises short message service recovery data.

5. A method of claim 1, wherein the network service subscriber identifier of the user equipment include an international mobile subscriber identity, a mobile station international subscriber directory number, or a combination thereof.

6. A method of claim 1, wherein the short message service message is sent from the user equipment without asking permission from the user.

7. An apparatus comprising:

at least one processor; and

at least one memory including computer program code for one or more programs,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus embedded in a merchant platform to perform at least the following,

in response to a buy request message from a user equipment, cause a transmission of a buy response message from the merchant platform to the user equipment, wherein the buy response message includes a transaction identifier of a transaction between a user of the user equipment and a merchant, an uniform resource identifier for hypertext transfer protocol authentication, and a short message service address of the merchant;

receive, from the user equipment via a network, a hypertext transfer protocol authentication message using the uniform resource identifier, wherein the hypertext transfer protocol authentication message includes the transaction identifier;

determine that authentication using the hypertext transfer protocol authentication message has failed;

in response to the determination, cause a transmission of an authentication failure message from the merchant platform to the user equipment;

receive, from the user equipment, a short message service message using the short message service address, wherein the short message service message includes a network service subscriber identifier of the user equipment and the transaction identifier;

authenticate the user using the short message service message; and

cause a transmission of a charge customer message from the merchant platform to a network operator of the user for billing the transaction on behalf of the merchant, wherein the charge customer message includes an amount of the transaction and the network service subscriber identifier.

8. An apparatus of claim 7, wherein the apparatus is further caused to:

determine to use the network operator to bill the transaction for the merchant,

wherein the network operator provides access to the network for the user equipment.

9. An apparatus of claim 7, wherein the apparatus is further caused to:

cause a transmission, from the merchant platform to the user equipment, of a message that indicates an access code for a product to be delivered by the merchant according to the transaction in response to the short message service message.

10. An apparatus of claim 7, wherein the buy response message further comprises short message service recovery data.

11. An apparatus of claim 7, wherein the network service subscriber identifier of the user equipment include an international mobile subscriber identity, a mobile station international subscriber directory number, or a combination thereof.

12. An apparatus of claim 7, wherein the short message service message is sent from the user equipment without asking permission from the user.

13. A non-transitory computer-readable storage medium carrying one or more sequences of one or more instructions which, when executed by one or more processors, cause an apparatus embedded in a merchant platform to at least perform the following steps:

in response to a buy request message from a user equipment, causing a transmission of a buy response message from the merchant platform to the user equipment, wherein the buy response message includes a transaction identifier of a transaction between a user of the user equipment and a merchant, an uniform resource identifier for hypertext transfer protocol authentication, and a short message service address of the merchant;

receiving, from the user equipment via a network, a hypertext transfer protocol authentication message using the uniform resource identifier, wherein the hypertext transfer protocol authentication message includes the transaction identifier;

determining that authentication using the hypertext transfer protocol authentication message has failed;

in response to the determination, causing a transmission of an authentication failure message the merchant platform to the user equipment;

receiving, from the user equipment, a short message service message using the short message service address, wherein the short message service message includes a network service subscriber identifier of the user equipment and the transaction identifier;

authenticating the user using the short message service message; and

causing a transmission of a charge customer message from the merchant platform to a network operator of the user for billing the transaction on behalf of the merchant, wherein the charge customer message includes an amount of the transaction and the network service subscriber identifier.

14. A non-transitory computer-readable storage medium of claim 13, wherein the apparatus is caused to further perform:

determining to use the network operator to bill the transaction for the merchant,

wherein the network operator provides access to the network for the user equipment.

15. A non-transitory computer-readable storage medium of claim 13, wherein the apparatus is caused to further perform:

causing a transmission, to the user equipment, of a message that indicates an access code for a product to be delivered by the merchant according to the transaction in response to the short message service message.

16. A non-transitory computer-readable storage medium of claim 13, wherein the buy response message further comprises short message service recovery data.

17. A non-transitory computer-readable storage medium of claim 13, wherein the network service subscriber identifier of the user equipment include an international mobile subscriber identity, a mobile station international subscriber directory number, or a combination thereof.

18. A non-transitory computer-readable storage medium of claim 13, wherein the short message service message is sent from the user equipment without asking permission from the user.

19. A system comprising:

at least one user equipment; and

a merchant platform configured to;

in response to a buy request message from the at least one user equipment, transmit a buy response message from the merchant platform to the user equipment, wherein the buy response message includes a transaction identifier of a transaction between a user of the at least one user equipment and a merchant, an uniform resource identifier for hypertext transfer protocol authentication, and a short message service address of the merchant;

receive, from the at least one user equipment via a network, a hypertext transfer protocol authentication message using the uniform resource identifier, wherein the hypertext transfer protocol authentication message includes the transaction identifier;

determine that authentication using the hypertext transfer protocol authentication message has failed;

in response to the determination, transmit an authentication failure message from the merchant platform to the at least one user equipment;

receive, from the at least one user equipment, a short message service message using the short message service address, wherein the short message service message includes a network service subscriber identifier of the at least one user equipment and the transaction identifier;

authenticate the user using the short message service message; and

transmit a charge customer message from the merchant platform to a network operator of the user for billing the transaction on behalf of the merchant, wherein the charge customer message includes an amount of the transaction and the network service subscriber identifier.

20. A system of claim 19, wherein the merchant platform is further configured to:

determine to use the network operator to bill the transaction for the merchant,

wherein the network operator provides access to the network for the user equipment.

21. A system of claim 19, wherein the merchant platform is further configured to:

transmit to the at least one user equipment a message that indicates an access code for a product to be delivered by the merchant according to the transaction in response to the short message service message.

22. A system of claim 19, wherein the buy response message further comprises short message service recovery data.