Facilitating a secure transaction over a direct secure transaction portal

• US 9,697,512 B2
• Filed: 06/24/2011
• Issued: 07/04/2017
• Est. Priority Date: 01/19/2001
• Status: Expired due to Term

• Current Assignee: Mastercard Mobile Transactions Solutions, Inc. (MasterCard Incorporated)
• Original Assignee: Mastercard Mobile Transactions Solutions, Inc. (MasterCard Incorporated)
• Inventors: Desai, Mehul, Pitroda, Satyan G.
• Primary Examiner(s): Coppola, Jacob C.
• Application Number:
  US13/168,803
• Publication Number:
  US 20120005725A1
• Time in Patent Office: 2,202 Days
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/045 using payment protocols involving tickets
• CPC Class Codes: G06Q 20/047 using payment protocols involving electronic receipts
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/145 Payments according to the detected use or quantity
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 : Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 : Transaction verification
• CPC Class Codes: G06Q 20/4014 : Identity check for transactions
• CPC Class Codes: G06Q 20/42 : Confirmation, e.g. check or permission by the legal debtor of payment
• CPC Class Codes: G06Q 2220/00 : Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/06 : Buying, selling or leasing transactions
• CPC Class Codes: G16H 10/60 : for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16Z 99/00 : Subject matter not provided for in other main groups of this subclass
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 : for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0838 : using one-time-passwords

Abstract

Methods and systems are provided for supporting electronic transactions, including transactions that are provided with per-user, per-device and per-domain security across domains of multiple service providers.

Claims

1. A method of conducting a secure transaction, comprising:

receiving, at a transaction service facility server, a plurality of keys generated by an electronic transaction facility from a handheld electronic transaction device configured with the electronic transaction facility that comprises an application that emulates visual attributes of a physical wallet item while providing an electronic wallet capability;

receiving at the transaction service facility server a message from the handheld electronic transaction device, the message including a portion of the plurality of keys and a first one-time activation code (OTAC) issued from the transaction service facility server to a user of the handheld device, wherein the OTAC is input to the handheld device during a registration process with the transaction service facility server;

authenticating with the transaction service facility server the electronic transaction facility based on the received message;

forwarding by the transaction service facility server a key exchange request from the electronic transaction device to at least one of a plurality of service providers and sending back a response to the electronic transaction device from the at least one of the service providers wherein the key exchange request has already been encrypted by the electronic transaction facility using a second one-time activation code that has been issued directly by the service provider to the user via at least one of email or land mail ; and

in response to a user opting to avail a service of one of the plurality of service providers;

updating with the transaction service facility server at least the one of the plurality of service providers with security credentials of the electronic transaction facility configured on the handheld device; and

updating with the transaction service facility server the electronic transaction facility configured on the handheld device with service provider credentials for the at least one of the plurality of service providers.

2. The method of claim 1, wherein the first one-time activation code is provided to the user by a master service facility.

3. The method of claim 1, wherein the one of the plurality of service providers is a gaming service provider.

4. The method of claim 1, wherein the one of the plurality of service providers is a merchant service provider.

5. The method of claim 1, wherein the one of the plurality of service providers is a government service provider.

6. The method of claim 1, wherein the one of the plurality of service providers is an enterprise service provider.

7. The method of claim 1, wherein the one of the plurality of service providers is a health fitness service provider.

8. The method of claim 1, wherein the one of the plurality of service providers is a religious service provider.

9. The method of claim 1, wherein graphically emulating includes generating audio.

10. The method of claim 1, graphically emulating includes generating video.

11. A method of conducting a secure transaction, comprising:

receiving, at a transaction service facility server, a plurality of keys generated by an electronic transaction facility from a handheld electronic transaction device configured with the electronic transaction facility that comprises an application that emulates visual attributes of a physical wallet item while providing an electronic wallet capability;

receiving at the transaction service facility server a message from the handheld electronic transaction device, the message including a portion of the plurality of keys and a first one-time activation code (OTAC) issued from the transaction service facility server to a user of the handheld device, wherein the OTAC is input to the handheld device during a registration process with the transaction service facility server;

authenticating with the transaction service facility server the electronic transaction facility based on the received message; and

forwarding by the transaction service facility server a key exchange request from the electronic transaction device to at least one of a plurality of service providers and sending back a response to the electronic transaction device from the at least one of the service providers wherein the key exchange request has already been encrypted by the electronic transaction facility using a second one-time activation code that has been issued directly by the service provider to the user via at least one of email or land mail.