Establishing direct, secure transaction channels between a device and a plurality of service providers via personalized tokens

• US 9,870,559 B2
• Filed: 06/24/2011
• Issued: 01/16/2018
• Est. Priority Date: 01/19/2001
• Status: Expired due to Term

• Current Assignee: Mastercard Mobile Transactions Solutions, Inc. (MasterCard Incorporated)
• Original Assignee: Mastercard Mobile Transactions Solutions, Inc. (MasterCard Incorporated)
• Inventors: Pitroda, Satyan G., Desai, Mehul
• Primary Examiner(s): Coppola, Jacob C
• Application Number:
  US13/168,842
• Publication Number:
  US 20120005085A1
• Time in Patent Office: 2,398 Days
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/045 using payment protocols involving tickets
• CPC Class Codes: G06Q 20/047 using payment protocols involving electronic receipts
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/145 Payments according to the detected use or quantity
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 : Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 : Identity check for transactions
• CPC Class Codes: G06Q 20/42 : Confirmation, e.g. check or permission by the legal debtor of payment
• CPC Class Codes: G06Q 2220/00 : Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/06 : Buying, selling or leasing transactions
• CPC Class Codes: G16H 10/60 : for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16Z 99/00 : Subject matter not provided for in other main groups of this subclass
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 : for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0838 : using one-time-passwords

Abstract

Methods and systems are provided for supporting electronic transactions, including transactions that are provided with per-user, per-device and per-domain security across domains of multiple service providers.

Claims

1. A method of electronic transaction between a user and a plurality of service providers, comprising:

authenticating a user of an electronic transaction device according to a first protocol through an interaction between a server of a secure electronic transaction platform and the user via an electronic transaction facility executing on the electronic transaction device, the first protocol comprising receiving an activation code stored on the server, delivered to the user, input by the user to the electronic transaction facility, and used to authenticate the user, the electronic transaction facility, and relate the electronic transaction facility to the user;

authenticating the electronic transaction device according to a second protocol through an interaction between the server and the device, the second protocol comprising registering the electronic device with the server through a registration process that includes the server certifying keys generated by the electronic transaction facility, the electronic transaction facility encrypting a user name and the activation code with the server'"'"'s public encryption key and sending the encryption to the server that verifies the activation code, the electronic transaction facility and the server exchanging encryption and signing keys, wherein the keys generated by the electronic transaction facility comprise electronic transaction facility identification information;

transmitting a certificate representing the electronic transaction facility'"'"'s security credentials to one of the plurality of service providers and providing a certificate representing the one of the plurality of service providers'"'"' security credentials to the electronic transaction facility;

procuring a token that is personalized as an official electronic identifier of the user from one of the plurality of service providers;

in response to a user opting to avail a service of one of the plurality of service providers;

updating with the transaction service facility server at least the one of the plurality of service providers with security credentials of the electronic transaction facility configured on the handheld device; and

updating with the transaction service facility server the electronic transaction facility configured on the handheld device with service provider credentials for the at least one of the plurality of service providers; and

securing a transaction conducted between the one of the plurality of service providers and the electronic transaction facility by the one of the plurality of service providers verifying a one-time activation code delivered to the user over at least one of e-mail and courier, the one-time activation code being provided to the one of the plurality of service providers when the electronic transaction facility contacts the one of the plurality of service providers for the first time, verifying the user of the electronic transaction facility via the first protocol, verifying the electronic transaction facility of the transaction via the second protocol, verifying the electronic transaction facility via the certificate representing the electronic transaction facility'"'"'s security credentials and verifying the one of the plurality of service providers using the certificate representing the service provider'"'"'s security credentials, wherein the transaction comprises verification of the personalized token.