Transferring account information or cash value between an electronic transaction device and a service provider based on establishing trust with a transaction service provider

• US 9,400,980 B2
• Filed: 06/24/2011
• Issued: 07/26/2016
• Est. Priority Date: 01/19/2001
• Status: Expired due to Term

• Current Assignee: Mastercard Mobile Transactions Solutions, Inc. (MasterCard Incorporated)
• Original Assignee: Mastercard Mobile Transactions Solutions, Inc. (MasterCard Incorporated)
• Inventors: Pitroda, Satyan G., Desai, Mehul
• Primary Examiner(s): Coppola, Jacob C.
• Application Number:
  US13/168,877
• Publication Number:
  US 20120005092A1
• Time in Patent Office: 1,859 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/045 using payment protocols involving tickets
• CPC Class Codes: G06Q 20/047 using payment protocols involving electronic receipts
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/145 Payments according to the detected use or quantity
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 : Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 : Identity check for transactions
• CPC Class Codes: G06Q 20/42 : Confirmation, e.g. check or permission by the legal debtor of payment
• CPC Class Codes: G06Q 2220/00 : Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/06 : Buying, selling or leasing transactions
• CPC Class Codes: G16H 10/60 : for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16Z 99/00 : Subject matter not provided for in other main groups of this subclass
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 : for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0838 : using one-time-passwords

Abstract

Methods and systems are provided for supporting electronic transactions, including transactions that are provided with per-user, per-device and per-domain security across domains of multiple service providers.

Claims

1. A method of securely transferring information between a service provider and a universal electronic transaction device, comprising:

establishing trust between a transaction service provider and a universal electronic transaction device operated by a user, comprising registering the universal electronic transaction device with the transaction service provider through a registration process that includes the universal electronic transaction device transmitting keys that comprise universal electronic transaction device identification information to the transaction service provider that is configured to certify the keys;

establishing trust between the transaction service provider and the user via the trusted universal electronic transaction device comprising transmitting an encryption of a code known to the transaction service provider from the universal electronic transaction device, the code received from the user into a non-transient computer readable memory of the universal electronic transaction device and therein encrypted with the code;

receiving in the trusted universal electronic transaction device a request from a service provider to transfer account information between the service provider and the universal transaction device;

receiving at the universal electronic transaction device information from the transaction service provider for establishing trust of the service provider, the information comprising a certificate representing the service provider'"'"'s security credentials;

transferring user selected account information between the service provider and the universal electronic transaction device via the transaction service provider in response to the request, wherein the user selected account information comprises a payment account and a payment amount; and

receiving a confirmation from the service provider via the transaction service provider of a completed transfer of the user selected account information, wherein the confirmation indicates use of at least one of the payment amount and the payment account.

2. The method of claim 1, wherein a trusted service provider is based on the service provider having established trust with a main service facility of the transaction service provider via the an electronic interaction between the service provider and the main service facility.

3. The method of claim 1, wherein user selected information is a cash value amount that is transferred from an account associated with a user of the universal transaction device to an account associated with the service provider.