Secure registration of a mobile device for use with a session

• US 9,521,548 B2
• Filed: 05/21/2012
• Issued: 12/13/2016
• Est. Priority Date: 05/21/2012
• Status: Active Grant

• Current Assignee: Nexiden Inc.
• Original Assignee: Nexiden Inc.
• Inventors: Fosmark, Klaus S., Perry, William A. Jr.
• Primary Examiner(s): Patel, Nirav B
• Application Number:
  US13/476,864
• Publication Number:
  US 20130308778A1
• Time in Patent Office: 1,667 Days
• Field of Search: 713168-170, 380/270, 455/411, 455/410
• US Class Current: 1/1
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

A computer-readable medium embodies a computer program for registering a mobile device. The computer program comprises computer-readable program code for: generating a first message including a first code in response to receiving a request to register the mobile device for use with a future session with an entity, sending the first message including the first code, receiving a second message including the first code and at least a portion encrypted using a private key associated with the mobile device, and registering the mobile device for use with the future session based on at least the portion of the second message being encrypted using the private key associated with the mobile device.

Claims

1. A non-transitory computer-readable medium embodying a computer program for registering a mobile device as being associated with a user, the computer program comprising computer-readable program code for:

establishing, by a data processing system associated with an entity, a current session with the user via a data processing system associated with the user based at least in part on an account the user has or is creating with the entity;

receiving, by the data processing system associated with the entity, a request to register the mobile device as being associated with the user to enable use of the mobile device for a future action associated with the account, the mobile device not previously registered with the entity as being associated with the user;

generating, by the data processing system associated with the entity, a first message including a first registration identifier in response to receiving the request to register the mobile device as being associated with the user to enable use of the mobile device for the future action associated with the account;

sending, by the data processing system associated with the entity, the first message including the first registration identifier to the data processing system associated with the user via a first communication path associated with the current session between the user and the entity;

receiving, by the data processing system associated with the entity, a second message from the mobile device via a second communication path including a wireless communication link, the received second message including a second registration identifier;

associating, by the data processing system associated with the entity, the mobile device with the user based on the second registration identifier being identical to at least one of the first registration identifier and a function of the first registration identifier; and

storing, by the data processing system associated with the entity, a public key associated with the mobile device for use of the mobile device with the future action associated with the account based on the associating of the mobile device with the user, the public key received from the mobile device in the second message or another message.

2. The computer-readable medium of claim 1, the computer program further comprising computer-readable program code for:

sending a third message including a challenge code in response to receiving the second message;

wherein the computer-readable program code for associating the mobile device with the user comprises computer-readable program code for verifying registration of the public key associated with the mobile device in response to receiving a fourth message including a response code that is identical to at least one of the challenge code and a function of the challenge code.

3. The computer-readable medium of claim 1, the computer program further comprising computer-readable program code for:

sending a third message, wherein the third message at least one of;

includes a security certificate for the entity;

is encrypted with the public key associated with the mobile device; and

includes a digital signature based on a private key associated with the entity.

4. The computer-readable medium of claim 1, wherein the future action is to authenticate the user for a future session with the entity.

5. The computer-readable medium of claim 1, the computer program further comprising computer-readable program code for:

determining whether the second message is received within a threshold amount of time after the first message was generated; and

generating a third message including a third registration identifier different from the first registration identifier in response to determining that the second message was not received within the threshold amount of time.

6. The computer-readable medium of claim 1, the computer program further comprising computer-readable program code for:

sending a third message in response to identifying an action requiring confirmation from the user; and

approving the action in response to receiving an approval message from the mobile device.

7. The computer-readable medium of claim 6, the computer program further comprising computer-readable program code for at least one of:

encrypting the third message using the public key associated with the mobile device before sending the third message;

including a digital signature based on a private key associated with the entity in the third message before sending the third message;

receiving the approval message encrypted with a public key associated with the entity; and

receiving the approval message including a digital signature based on a private key of the mobile device.

8. The computer-readable medium of claim 6, the computer program further comprising computer-readable program code for:

including, in the third message, a request for a parameter associated with the action; and

identifying the parameter associated with the action from the approval message.

9. The computer-readable medium of claim 1, the computer program further comprising computer-readable program code for:

generating a third message including a challenge code and a request for confirmation of an action in response to identifying the action;

sending the third message; and

approving the action in response to receiving a response code, wherein the response code is at least one of the challenge code and a function of the challenge code.

10. The computer-readable medium of claim 9, the computer program further comprising computer-readable program code for:

encrypting the third message including the challenge code with the public key associated with the mobile device before sending the third message.

11. The computer-readable medium of claim 1, wherein the first message is at least one of:

displayed on a user interface in clear text;

encoded into an optically-scannable image;

sent using at least one of a near field communications (NFC) link and a limited distance point-to-point radio; and

transmitted as audio.

12. The computer-readable medium of claim 9, the computer program further comprising computer-readable program code for:

including a digital signature based on a private key associated with the entity in the third message before sending the third message.

13. The computer-readable medium of claim 1, the computer program further comprising computer-readable program code for:

identifying a user identifier of the user;

wherein the computer-readable program code for associating the mobile device with the user comprises computer-readable program code for associating the user identifier with the public key associated with the mobile device.

14. The computer-readable medium of claim 1, wherein:

the first communication path includes a close-range communication link associated with a user interface for the user for the current session between the user and the entity, and

the wireless communication link is one of a WiFi communication link or a cellular communication link.

15. A non-transitory computer-readable medium embodying a computer program for registering a mobile device with an entity, the computer program comprising computer-readable program code for:

identifying, using the mobile device, a registration identifier from a first message received from the entity via a first communication path associated with a current session between a user and the entity via a data processing system associated with the user in response to a request to register the mobile device as being associated with the user to enable use of the mobile device for a future action associated with an account of the user with the entity, the mobile device not previously registered with the entity as being associated with the user;

sending, by the mobile device via a second communication path including a wireless communication link, a second message including at least one of the registration identifier and a function of the registration identifier to a data processing system associated with the entity for registration of the mobile device as being associated with the user; and

storing, by the mobile device, a public key associated with the entity for use of the mobile device with the future action associated with the account based on association of the mobile device with the user, the public key received from the entity in the first message or another message,

wherein the mobile device is associated with the user based on the at least one of the registration identifier and the function of the registration identifier in the second message being identical to at least one of the registration identifier and a function of the registration identifier in the first message.

16. The computer-readable medium of claim 15, the computer program further comprising computer-readable program code for:

receiving a third message from the entity including a code; and

displaying at least one of the code and a function of the code in a user interface of the mobile device.

17. The computer-readable medium of claim 15, the computer program further comprising computer-readable program code for:

receiving a third message from the entity including at least one of a security certificate for the entity and a digital signature based on a private key associated with the entity.

18. The computer-readable medium of claim 15, wherein the computer-readable program code for identifying the registration identifier comprises computer-readable program code for at least one of:

identifying the registration identifier from an optically-scannable image;

receiving the first message including the registration identifier using at least one of a near field communications (NFC) link and a limited distance point-to-point radio; and

identifying the registration identifier from audio received by the mobile device.

19. The computer-readable medium of claim 15, the computer program further comprising computer-readable program code for:

displaying on a display of the mobile device a request for approval of an action requiring confirmation from the user in response to receiving a third message from the entity including the request for approval; and

sending an approval message including a response to the request for approval in response to receiving an input comprising the response.

20. The computer-readable medium of claim 19, the computer program further comprising computer-readable program code for at least one of:

receiving the third message encrypted using a public key associated with the mobile device;

receiving the third message including a digital signature based on a private key associated with the entity;

encrypting the approval message using the public key associated with the entity before sending the approval message; and

including a digital signature based on a private key of the mobile device in the approval message before sending the approval message.

21. The computer-readable medium of claim 19, the computer program further comprising computer-readable program code for:

identifying a request for a parameter associated with the action in the third message; and

including the parameter in the approval message in response to receiving an input comprising the parameter.

22. The computer-readable medium of claim 19, the computer program further comprising computer-readable program code for:

requesting an input from the user associated with the mobile device to verify that the user is an authorized user of the mobile device.

23. The computer-readable medium of claim 22, wherein the requested input from the user is at least one of a personal identification number, a password, a biometric input, a predefined gesture on a touch screen of the mobile device, and a predefined pattern of movement of the mobile device.

24. The computer-readable medium of claim 15, the computer program further comprising computer-readable program code for:

receiving a user input comprising the registration identifier as clear text.

25. The computer-readable medium of claim 15, the computer program further comprising computer-readable program code for:

identifying the registration identifier from an optically-scannable image.

26. The computer-readable medium of claim 15, the computer program further comprising computer-readable program code for at least one of:

receiving the first message using at least one of a near field communications (NFC) link and a limited distance point-to-point radio; and

identifying the first message from audio received by the mobile device.

27. The computer-readable medium of claim 15, wherein the second message further includes at least one of:

a digital signature based on a private key of the mobile device; and

a public key associated with the mobile device.

28. The computer-readable medium of claim 19, the computer program further comprising computer-readable program code for at least one of:

receiving the third message including a digital signature based on a private key associated with a third party; and

encrypting the approval message using the public key associated with the third party before sending the approval message.

29. A non-transitory computer-readable medium embodying a computer program for registering a mobile device as being associated with a user with an entity, the computer program comprising computer-readable program code for:

at least one of (i) identifying, by a data processing system associated with a third party, a first registration identifier from a first message received from the entity and (ii) generating the first registration identifier and sending, by the data processing system associated with the third party, the generated first registration identifier to the entity for delivery to the user via a first communication path associated with a current session between the user and the entity via a data processing system associated with the user;

receiving, by the data processing system associated with the third party, a second message from the mobile device via a second communication path including a wireless communication link, the second message including a second registration identifier;

associating, by the data processing system associated with the third party, the mobile device with the user based on the second registration identifier being identical to at least one of the first registration identifier and a function of the first registration identifier; and

sending a third message to the entity for registering the mobile device as being associated with the user to enable use of the mobile device for a future action associated with an account of the user with the entity in response to the second registration identifier being identical to the at least one of the first registration identifier and the function of the first registration identifier, the mobile device not previously registered with the entity as being associated with the user.

30. The computer-readable medium of claim 29, the computer program further comprising computer-readable program code for:

sending a fourth message including a request for approval of an action to the mobile device in response to receiving the fourth message from the entity; and

sending a fifth message including a response to the request for approval to the entity in response to receiving the fifth message from the mobile device.