Wirelessly executing financial transactions

• US 9,384,480 B2
• Filed: 09/11/2008
• Issued: 07/05/2016
• Est. Priority Date: 09/12/2007
• Status: Expired due to Fees

• Current Assignee: DeviceFidelity, Inc. (Block, Inc. (f/k/a Square, Inc.))
• Original Assignee: DeviceFidelity, Inc. (Block, Inc. (f/k/a Square, Inc.))
• Inventors: Jain, Deepak
• Primary Examiner(s): CASEY, ALEXIS M
• Application Number:
  US12/209,087
• Publication Number:
  US 20090070272A1
• Time in Patent Office: 2,854 Days
• Field of Search: 705/1, 705/51, 705/75
• US Class Current: 1/1
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06K 19/07707 the visual interface being a display, e.g. LCD or electronic ink
• CPC Class Codes: G06K 19/07739 comprising a first part capable of functioning as a record carrier on its own and a second part being only functional as a form factor changing part, e.g. SIM cards type ID 0001, removably attached to a regular smart card form factor
• CPC Class Codes: G06K 19/07773 Antenna details antennas for wireless devices, e.g. RFID tags, in general H01Q1/22
• CPC Class Codes: G06K 7/10237 the reader and the record carrier being capable of selectively switching between reader and record carrier appearance, e.g. in near field communication [NFC] devices where the NFC device may function as an RFID reader or as an RFID tag
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/355 Personalisation of cards for use
• CPC Class Codes: G06Q 20/3574 Multiple applications on card
• CPC Class Codes: G06Q 20/3576 Multiple memory zones on card
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/1008 : Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04B 1/3816 : Mechanical arrangements for accommodating identification devices, e.g. cards or chips; with connectors for programming identification devices
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 41/32 : Specific management aspects for broadband networks
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 : using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0876 : based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04M 1/0274 : for an electrical connector module
• CPC Class Codes: H04M 1/7246 : by connection of exchangeable housing parts
• CPC Class Codes: H04M 17/103 : using SIMs (USIMs) or calling cards
• CPC Class Codes: H04M 17/106 : using commercial credit or debit cards
• CPC Class Codes: H04M 2017/12 : using calling, telephone credit/debit cards
• CPC Class Codes: H04M 2017/14 : using commercial credit/debit cards, e.g. VISA, AMEX
• CPC Class Codes: H04W 12/068 : using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 : using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 52/0254 : detecting a user operation or a tactile contact or a motion of the device
• CPC Class Codes: H04W 52/0274 : by switching on or off the equipment or parts thereof
• CPC Class Codes: H04W 88/02 : Terminal devices
• CPC Class Codes: Y02D 30/70 : in wireless communication networks

Abstract

The present disclosure is directed to a system and method for wirelessly executing financial transactions. A payment card includes an interface, a communication module, secure memory, a user-interface module, and a processing module. The interface connects to a slot of a mobile host device. The communication module wirelessly receives RF signals from and transmits RF signals to a retail terminal. The secure memory stores user credentials and a payment application used to execute financial transactions with the retail terminal. The user credentials and the payment application are associated with a financial institution. The user-interface module presents and receives information through the GUI of the mobile host device. The processing module executes the payment application using the user credentials in response to at least a transaction request received by the communication module and transmits a transaction response to the retail terminal based, at least in part, on the executed application.

Claims

1. A micro SecureDigital (microSD) payment card, comprising:

a microSD interface configured to connect to a microSD slot of a mobile host device and communicate SD commands with the mobile host device through a wired connection;

a Near Field Communication (NFC) transceiver enclosed in the microSD payment card and communicably coupled to a communication module, wherein the NFC transceiver includes an NFC antenna;

the communication module that wirelessly communicates RF signals with retail terminals using the NFC antenna and configured to selectively switch the NFC transceiver for the microSD payment card between an activate state and an inactivate state in response to at least an event;

secure memory that stores user credentials, account information, and a payment application used to execute financial transactions with the retail terminals and a financial institution, wherein the stored user credentials are not accessible by users of the mobile host device and the payment application is issued by the financial institution and encrypts transaction information prior to transmission to the financial institution through retail terminals;

a user-interface module that stores one or more pages in the secure memory, transmits, using the microSD interface, the one or more pages from the secure memory of the microSD payment card, the one or more pages displayed through a GUI of the mobile host device request information from a user of the mobile host device, and in response to the request, receives through a GUI of the mobile host device user information; and

a processing module that identifies the one or more pages that has received user information, executes the payment application using the user credentials in response to at least a transaction request received by the communication module, and transmits commands to the communication module to transmit at least one transaction response to the retail terminal based, at least in part, on the executed payment application and using the user credentials and the user information.

2. The microSD payment card of claim 1, the user credentials associated with one of a credit card account, a checking account, a debit account, a gift account, or a prepaid account.

3. The microSD payment card of claim 1, wherein the processing module comprises:

a security module that generates the transaction response based, at least in part, on the user credentials and the payment application; and

an operating system with a runtime environment that executes the payment application independent of the mobile host device.

4. The microSD payment card of claim 1, wherein the communication module comprises a protocol translation module, an antenna tuning circuit, a power circuit, and a miniature antenna tuned to exchange wireless data with the retail terminal.

5. The microSD payment card of claim 1, wherein the user-interface module generates the one or more pages based, at least in part, on at least one of real-time content during the transaction, locally-stored offline content, or online content associated with the financial institution.

6. The microSD payment card of claim 1, wherein the one or more pages request user identification including at least one of a Personal Identification Number (PIN), user ID and password, or biometric signature through a GUI of the mobile host device, the processing module further verifies user identification identified by the user information with user identification locally stored in the secure memory prior to executing the requested transaction.

7. The microSD payment card of claim 6, the processing module further receives a number of incorrect PIN entries and deactivates the communication module in response to at least a number of incorrect PIN entries exceeding a threshold.

8. The microSD payment card of claim 1, wherein the-event includes receiving information identifying a selection through the physical user interface of the mobile host device.

9. The microSD payment card of claim 1, wherein the communication module wirelessly communicates using at least one of contactless signals, proximity signals, Near Field Communication (NFC) signals, BLUETOOTH signals, Ultra-wideband (UWB) signals, or Radio Frequency Identifier (RFID) signals.

10. The microSD payment card of claim 1, wherein the communication module further comprises a protocol translation module that translates signals between wireless protocols compatible with the retail terminal and protocols compatible with the payment application.

11. The microSD payment card of claim 1, further comprising a cryptographic module that decrypts received signals prior to processing by the payment application and encrypts at least part of the transaction response prior to wireless transmission.

12. The microSD payment card of claim 1, further comprising an authentication module that authenticates at least one of a network of the mobile host device, the mobile host device, or a user.

13. The microSD payment card of claim 12, the authentication module further deactivates the NFC antenna for the microSD payment card in response to at least a failure to authenticate the at least one of the network of the mobile host device, the mobile host device, or the user.

14. The microSD payment card of claim 1, wherein the microSD payment card is initialized in response to at least insertion in the microSD slot of the host device.

15. The microSD payment card of claim 1, further comprising a bootstrap module that executes one or more authentication processes in response to at least insertion in the microSD slot of the mobile host device.

16. The microSD payment card of claim 15, wherein the one or more authentication processes authenticates at least one of a network, a mobile host device, or a user.

17. The microSD payment card of claim 1, further comprising an activation module that transmits to the financial institution a request to activate an associated user account in response to at least a user request or an initial insertion into the mobile host device.

18. The microSD payment card of claim 17, wherein the microSD payment card is activated based, at least in part, on the user information identifying an activation code manually entered by a user through the physical user interface of the mobile host device.

19. The microSD payment card of claim 1, further comprising an Application Program Interface (API) that wirelessly communicates with a financial institution using cellular radio technology of the mobile host device.

20. The microSD payment card of claim 1, wherein the microSD card executes the requested transaction independent of loading a driver onto the mobile host device.

21. The microSD payment card of claim 1, wherein the communication module formats information transmitted to the retail terminal that emulates a contactless payment card.

22. The microSD payment card of claim 1, further comprising a power module that receives power from the mobile host device and automatically switches to a passive mode in response to at least loss of power from the mobile host device.

23. The microSD payment card of claim 1, wherein the microSD payment card stores in the secure memory personalization data received, by the communication module, from an enterprise at least associated with the financial institution prior to activation during an initial insertion into the mobile host device, wherein the personalization data includes the user credentials, the payment application and at least one of operational flags, rule table or user interface.

24. The microSD payment card of claim 23, the communication module further operable to update the personalization data after activation in response to at least one of a wireless signal including secure update instructions or a wired signal through a client connected to the microSD payment card.

25. The microSD payment card of claim 1, the processing module further operable to transmit a notification to the financial institution using the mobile host device in response to an activity violating one or more fraud control rules.

26. The microSD payment card of claim 1, the processing module further operable to populate a Web page with user credentials for executing an Internet transaction in response to at least a request from a client connected to the microSD card.

27. The microSD payment card of claim 1, wherein the microSD card substantially maintains attributes of the mobile host device.

28. The microSD payment card of claim 27, wherein the attributes include at least one of dimensions, accessibility to peripherals, charging, battery life, signal strength, access to the GUI, connectivity to wireless networks, or interface capability with clients.