Mobile device security using wearable security tokens

• US 9,805,365 B2
• Filed: 03/16/2015
• Issued: 10/31/2017
• Est. Priority Date: 02/08/2008
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Chen, Yuqun, Yuval, Gideon A., Sinclair, Michael Jack
• Primary Examiner(s): Huang, Tsan-Yu J
• Application Number:
  US14/659,413
• Publication Number:
  US 20150186876A1
• Time in Patent Office: 960 Days
• Field of Search: 455557, 705 67
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

The claimed subject matter provides systems and/or methods that effectuates and establishes mobile device security. The system can include devices that detect point of sale mechanisms or secure token devices and based at least in part on the detection of secure token devices the system effectuates release of electronic funds persisted on a mobile device in order to satisfy a debt accrued at the point of sale mechanism.

Claims

1. A mobile device comprising:

one or more processors and memory, the mobile device configured to;

store data in memory, the data being usable for satisfying a debt extant on a point of sale mechanism;

detect the point of sale mechanism;

search for a token device in response to detecting the point of sale mechanism, the token device including a key for unlocking the data stored in the memory;

detect the token device; and

release electronic funds to satisfy the debt extant on the point of sale mechanism upon receiving the key from the token device and without receiving authentication information inputted manually from a user.

2. The mobile device as recited in claim 1, wherein the mobile device is further configured to establish a communication with the token device and receive the key from the token device through the communication.

3. The mobile device as recited in claim 1, wherein the mobile device is further configured to unlock the data based at least in part on the key.

4. The mobile device as recited in claim 1, wherein the mobile device is further configured to delete the key from the memory of the mobile device upon releasing the electronic funds to satisfy the debt extant on the point of sale mechanism.

5. The mobile device as recited in claim 1, wherein the mobile device detects at least one of the point of sale mechanism or the token device via a wired or wireless communication.

6. The mobile device as recited in claim 1, wherein the mobile device detects at least one of the point of sale mechanism or the token device in a preset vicinity of the mobile device.

7. The mobile device as recited in claim 1, wherein the mobile device searches for the token device by attempting to contact the token device to determine a presence of the token device.

8. A method implemented by a mobile device, the method comprising:

storing data in memory, the data being usable for satisfying a debt extant on a payment mechanism;

detecting the payment mechanism;

searching for a token device in response to detecting the payment mechanism, the token device including a key for unlocking the data stored in the memory;

detecting the token device;

and

releasing electronic funds to satisfy the debt extant on the payment mechanism upon receiving the key from the token device and without receiving authentication information inputted manually from a user.

9. The method as recited in claim 8, further comprising removing the key from memory of the mobile device upon releasing the electronic funds to the point of sale mechanism.

10. The method as recited in claim 8, further comprising:

exchanging security information to authenticate an identity of the token device.

11. The method as recited in claim 8, wherein at least one of the payment mechanism or the secure token device is detected via a wired or wireless communication.

12. The method as recited in claim 8, wherein at least one of the payment mechanism or the token device is detected in a preset vicinity of the mobile device.

13. The method as recited in claim 8, wherein the data is temporarily unlocked until the electronic funds are released to the payment mechanism.

14. A system comprising:

one or more processors and memory, the system configured to;

store data in the memory, the data being usable for satisfying a debt extant on a point of sale mechanism;

detect a presence of the point of sale mechanism;

search for a token device in response to detecting the point of sale mechanism, the token device including a key for unlocking the data;

detect a presence of the token device;

establish communication with the token device;

receive the key from the token device through the communication; and

release electronic funds to the point of sale mechanism upon unlocking at least a part of the data based at least in part on the key.

15. The system as recited in claim 14, wherein the system further authenticates an identity of the secure token device prior to receiving the key from the token device.

16. The system as recited in claim 14, wherein the at least part of the data is unlocked temporarily based at least in part on the key, and wherein the system further discards the key from the memory upon releasing the electronic funds to the point of sale mechanism.

17. The system as recited in claim 14, wherein the system searches for the token device by attempting to contact the token device to determine the presence of the token device.

18. The system as recited in claim 14, wherein the system detects at least one of the point of sale mechanism or the token device via a wired or wireless communication.

19. The system as recited in claim 14, wherein the system detects at least one of the point of sale mechanism or the token device in a preset vicinity of the system.

20. The system as recited in claim 14, wherein the system releases the electronic funds to the point of sale mechanism without receiving authentication information provided manually from a user.