Body area network for secure payment

• US 9,842,329 B2
• Filed: 02/13/2015
• Issued: 12/12/2017
• Est. Priority Date: 02/13/2015
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.), Sony Mobile Communications Incorporated (Sony Group Corp.)
• Inventors: Bengtsson, Henrik, Andersson, Stefan
• Primary Examiner(s): Nilforoush, Mohammad A
• Assistant Examiner(s): Getachew, Wodajo
• Application Number:
  US14/621,789
• Publication Number:
  US 20160239823A1
• Time in Patent Office: 1,033 Days
• Field of Search: 705 65, 705 44, 705 14, 705 2, 705 26
• CPC Class Codes: G06F 1/163 Wearable computers, e.g. on a belt
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: G06Q 20/42 Confirmation, e.g. check or permission by the legal debtor of payment
• CPC Class Codes: H04B 13/005 Transmission systems in which the medium consists of the human body
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

Disclosed is a method performed in a system comprising a first Body Area Network (BAN) enabled device and a second BAN enabled device, for performing secure payment at a payment counter by a user of the first and the second BAN enabled devices, the user wearing or carrying the first and the second BAN enabled devices; where the first and the second BAN enabled devices are paired for authorizing the user by the second BAN enabled device; the method comprises: establishing a connection between the payment counter and the first BAN enabled device; sending a BAN signal via BAN from the first BAN enabled device to the second BAN enabled device requiring confirmation from the second BAN enabled device that the second BAN enabled device is in contact with the user'"'"'s body; receiving a confirmation BAN signal via BAN from the second BAN enabled device to the first BAN enabled device confirming that the second BAN enabled device is in contact with the user'"'"'s body; receiving a request for payment from the payment counter in the first and/or second BAN enabled device; and confirming the requested payment in the first and/or second BAN enabled device.

Claims

1. A method for performing secure payment at a payment counter, the method comprising:

detecting, by a first Body Area Network (BAN) enabled device, a user login to the first BAN enabled device;

sending, by the first BAN enabled device, a first credential to a second BAN enabled device based on the detected login;

storing, by the first BAN enabled device, the first credential on the second BAN enabled device;

establishing, by the first BAN enabled device, a connection between the payment counter and the first BAN enabled device;

requesting, by the first BAN enabled device, confirmation from the second BAN enabled device that the second BAN enabled device is in contact with the user'"'"'s body, by sending a BAN signal via BAN to the second BAN enabled device;

receiving, by the first BAN enabled device, a confirmation BAN signal via BAN from the second BAN enabled device confirming that the second BAN enabled device is in contact with the user'"'"'s body;

establishing, by the first BAN enabled device, a BAN connection between the first BAN enabled device and the second BAN enabled device based on receiving the confirmation BAN signal confirming that the second BAN enabled device is in contact with the user'"'"'s body, wherein establishing the BAN connection further comprises using the user'"'"'s body as a transmission medium;

receiving, by the first BAN enabled device, the first credential from the second BAN enabled device;

authenticating, by the first BAN enabled device, the user based on the first BAN enabled device receiving the first credential from the second BAN enabled device;

unlocking, by the first BAN enabled device, the first BAN enabled device for the user based on authenticating the user;

receiving, by the first BAN enabled device, a request for payment from the payment counter; and

confirming, by the first BAN enabled device, the requested payment.

2. The method according to claim 1, wherein the first and the second BAN enabled devices are paired by using BAN, and where the pairing performed in the first BAN enabled device comprises:

detecting that the second BAN enabled device is proximate the first BAN enabled device;

determining that both the first BAN enabled device and the second BAN enabled device are in contact with the user'"'"'s body; and

pairing with the second BAN enabled device using a BAN based on the determination that both the first BAN enabled device and the second BAN enabled device are in contact with the user'"'"'s body.

3. The method according to claim 1, further comprising authorizing the user by the second BAN enabled device, wherein authorizing the user further comprises receiving, by a respective software program on the first BAN enabled device, a second credential from the user.

4. The method according to claim 3, wherein the first credential and the second credential are the same credentials or different credentials.

5. The method according to claim 3, wherein the method comprises scrapping at least one of the first credential or the second credential from the second BAN enabled device based on the second BAN enabled device being removed from the user'"'"'s body.

6. The method according to claim 1, wherein establishing a connection between the payment counter and the first BAN enabled device comprises using a nearfield communication (NFC) means in the payment counter and in the first BAN enabled device.

7. The method according to claim 1, wherein establishing a connection between the payment counter and the first BAN enabled device comprises using a BAN connection in the payment counter and in the first BAN enabled device.

8. The method according to claim 1, wherein confirming the requested payment in the at least one of the first or the second BAN enabled device comprises the user pressing a key on a screen on the at least one of the first or the second BAN enabled device.

9. The method according to claim 1, wherein the method comprises providing payment card details to the first BAN enabled device.

10. The method according to claim 9, wherein providing payment card details to the first BAN enabled device comprises scanning the payment card with the first BAN enabled device.

11. The method according to claim 1, wherein the method further comprises confirming an identity of the user using biometric information comprising at least one of pulse, electrocardiogram (EKG or ECG), impedance or tremor, of the user.

12. A method for performing secure payment at a payment counter comprising:

detecting, by a first Body Area Network (BAN) enabled device, a user login to the first BAN enabled device;

sending, by the first BAN enabled device, a first credential to a second BAN enabled device based on the detected login;

establishing, by the first BAN enabled device, a connection between the payment counter and the first BAN enabled device;

requesting, by the first BAN enabled device, confirmation from the second BAN enabled device that the second BAN enabled device is in contact with the user'"'"'s body, by sending a BAN signal via BAN to the second BAN enabled device;

receiving, by the first BAN enabled device, a confirmation BAN signal via BAN from the second BAN enabled device confirming that the second BAN enabled device is in contact with the user'"'"'s body;

establishing, by the first BAN enabled device, a BAN connection between the first BAN enabled device and the second BAN enabled device based on receiving the confirmation BAN signal confirming that the second BAN enabled device is in contact with the user'"'"'s body, wherein establishing the BAN connection further comprises using the user'"'"'s body as a transmission medium;

receiving, by the first BAN enabled device, the first credential from the second BAN enabled device;

authenticating, by the first BAN enabled device, the user based on the first BAN enabled device receiving the first credential from the second BAN enabled device;

unlocking, by the first BAN enabled device, the first BAN enabled device for the user based on authenticating the user;

receiving, by the second BAN enabled device, a request for payment from the payment counter; and

confirming, by the second BAN enabled device, the requested payment.