Mobile electronic transaction personal proxy

• US 20010056411A1
• Filed: 03/08/2001
• Published: 12/27/2001
• Est. Priority Date: 06/05/2000
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Nilsson, Mikael, Lindskog, Helena
• Granted Patent: US 7,043,456 B2
• Time in Patent Office: Days
• US Class Current: 705/76
• CPC Class Codes: G06Q 10/0875 Itemisation or classification of parts, supplies or services, e.g. bill of materials
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/76 Proxy, i.e. using intermediary entity to perform cryptographic operations network architectures or network communication protocols using hop-by-hop encryption H04L63/0464
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/289 Intermediate processing functionally located close to the data consumer application, e.g. in same machine, in same home or in same sub-network
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A method for obtaining a digital signature is disclosed. Upon receipt of request for a digital signature within a customer computer, a Mobile electronic transaction proxy within the customer PC notifies a web browser of the request for the digital signature and assists in obtaining a digital signature on a data string included within the request. After the digital signature is obtained, the data string along with an appended digital signature is transmitted back to a requesting party.

Claims

1. A method for obtaining a digital signature comprising the steps of:

receiving a request for a digital signature during an electronic transaction;

notifying a web browser of the request for the digital signature;

obtaining the digital signature from the wireless device;

appending the digital signature to the data;

notifying the web browser the digital signature has been obtained; and

transmitting the data with the appended digital signature to a requesting party.

2. The method of

claim 1

, wherein the step of obtaining further includes the steps of:

forwarding the data to an application within the computer;

establishing a short-range wireless connection between the computer and the wireless device; and

forwarding the digital signature to the computer from the wireless device via the short-range wireless link.

3. The method of

claim 1

, further including the step of recognizing a command within the request for a digital signature.

4. The method of

claim 1

, further including the step of including a command for the digital signature and the data to be digitally signed within an HTTP header transmitted to a customer.

5. The method of

claim 1

, wherein the step of transmitting the data with the appended digital signature further includes transmitting the data with the appended digital signature to a URL included within the request.

6. The method of

claim 1

, wherein the step of notifying further includes the step of periodically reloading a web page notifying the customer of the request for the digital signature.

7. A method for obtaining a digital signature in a transaction between a computer of a customer and a merchant, comprising the steps of:

receiving a request for a digital signature from the merchant during an electronic transaction;

recognizing a command for the digital signature and a data string to be digitally signed within the request;

notifying a web browser of the request for the digital signature;

forwarding the data string to an application within the computer;

establishing a shortrange wireless link between the computer and a wireless device;

forwarding the digital signature to the computer from the wireless device via the short range wireless link;

appending the digital signature to the data string;

notifying the web browser the digital signature has been obtained; and

transmitting the data string with the appended digital signature to a URL included within the request.

8. The method of

claim 7

, further including the step of including the command for the digital signature and the data string to be digitally signed within an HTTP header transmitted to the computer of the customer by the merchant.

9. The method of

claim 7

, wherein the step of notifying further includes the step of periodically reloading a web page notifying the customer of the request for the digital signature.

10. A mobile electronic transaction personal proxy device, comprising:

a first interface with a merchant computer;

a second interface with a web browser;

a third interface with a Mobile electronic transaction device; and

control logic configured to;

notify the web browser of a request for a digital signature from the merchant computer;

request a data string be digitally signed by the Mobile electronic transaction device;

receive a digitally signed data string from the Mobile electronic transaction device;

notify the web browser of the digitally signed data string; and

forward the digitally signed data string to the merchant computer.