TECHNIQUE FOR SECURELY COMMUNICATING INFORMATION

• US 20090006263A1
• Filed: 06/27/2007
• Published: 01/01/2009
• Est. Priority Date: 06/27/2007
• Status: Active Grant

• Current Assignee: Intuit, Inc.
• Original Assignee: Intuit, Inc.
• Inventors: Mo, See Yew, Subramanian, Harish K.K., Cassanego, Dante, Power, Michael J.
• Granted Patent: US 8,145,189 B2
• Time in Patent Office: Days
• US Class Current: 705/65
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18

Abstract

A system that communicates information is described. During operation, this system receives an encryption key through a first wireless communication technique, wherein the first wireless communication technique includes near field communication. Then, the system communicates a document through a second wireless communication technique, where the document is associated with a financial transaction being conducted with a commercial establishment. Next, the system receives encrypted information through the second wireless communication technique, where the encrypted information is, at least in part, encrypted using the encryption key, and where the second wireless communication technique includes a technique other than near field communication.

Claims

1. A method for communicating information, comprising:

receiving an encryption key through a first wireless communication technique, wherein the first wireless communication technique includes near field communication;

communicating a document through a second wireless communication technique, wherein the document is associated with a financial transaction being conducted with a commercial establishment; and

receiving encrypted information through the second wireless communication technique,

wherein the encrypted information is, at least in part, encrypted using the encryption key; and

wherein the second wireless communication technique includes a technique other than near field communication.

2. The method of claim 1, wherein in the document includes an invoice for purchasing an item associated with the commercial establishment.

3. The method of claim 1, wherein the financial transaction occurs, at least in part, online.

4. The method of claim 1, wherein receiving of the encryption key, communicating the document, and receiving of the encrypted information occur between a wireless device associated with a consumer and a computer located remotely from the commercial establishment, and wherein the computer and the commercial establishment exchange information through another communication channel.

5. The method of claim 4, wherein the wireless device includes a cellular telephone.

6. The method of claim 1, wherein receiving of the encryption key, communicating the document, and receiving of the encrypted information occur between a wireless device associated with a consumer and a point-of-sale terminal associated with the commercial establishment.

7. The method of claim 6, wherein the wireless device includes a cellular telephone.

8. The method of claim 1, wherein the encrypted information includes one or more identifiers associated with a consumer, and wherein the encrypted information includes authorization by the consumer for the financial transaction.

9. The method of claim 8, wherein the one or more identifiers include at least a portion of an account associated with the consumer.

10. The method of claim 8, wherein the one or more identifiers include a proxy for an account associated with the consumer.

11. The method of claim 8, further comprising decrypting the encrypted information using the encryption key.

12. The method of claim 11, further comprising:

providing authorization for the financial transaction by the commercial establishment;

submitting the document, the decrypted information, and the authorization by the commercial establishment to a financial institution; and

receiving approval for the financial transaction from the financial institution.

13. The method of claim 8, further comprising:

providing authorization for the financial transaction by the commercial establishment;

submitting the document, the encrypted information, the encryption key, and the authorization by the commercial establishment to a financial institution; and

receiving approval for the financial transaction from the financial institution.

14. The method of claim 1, wherein the first wireless communication technique operates over a distance which is less than the pre-defined distance.

15. The method of claim 14, wherein the pre-defined distance is approximately 50 cm.

16. The method of claim 14, wherein the document is communicated and the encrypted information is received over a distance which is greater than the pre-defined distance.

17. The method of claim 1, wherein the second wireless communication technique is compatible with the Bluetooth®

protocol.

18. The method of claim 1, wherein the second wireless communication technique includes cellular communication.

19. The method of claim 1, wherein the second wireless communication technique is compatible with an IEEE 802.11 communication standard.

20. The method of claim 1, wherein the encryption key is a public key used in a public-key/private-key cryptography technique.

21. The method of claim 1, wherein the encryption key is valid during a pre-defined time interval.

22. A computer system, comprising:

a processor;

memory;

a program module, wherein the program module is stored in the memory and configurable to be executed by the processor, the program module including;

instructions for receiving an encryption key through a first wireless communication technique, wherein the first wireless communication technique includes near field communication;

instructions for communicating a document through a second wireless communication technique, wherein the document is associated with a financial transaction being conducted with a commercial establishment; and

instructions for receiving encrypted information through the second wireless communication technique,

wherein the encrypted information is, at least in part, encrypted using the encryption key; and

wherein the second wireless communication technique includes a technique other than near field communication.

24. The computer program product of claim 22, wherein receiving of the encryption key, communicating the document, and receiving of the encrypted information occur between a wireless device associated with a consumer and a computer located remotely from the commercial establishment, and wherein the computer and the commercial establishment exchange information through another communication channel.

25. The computer program product of claim 22, wherein receiving of the encryption key, communicating the document, and receiving of the encrypted information occur between a wireless device associated with a consumer and a point-of-sale terminal associated with the commercial establishment.

23. A computer program product for use in conjunction with a computer system, the computer program product comprising a computer-readable storage medium and a computer-program mechanism embedded therein communicating information, the computer-program mechanism including:

instructions for receiving an encryption key through a first wireless communication technique, wherein the first wireless communication technique includes near field communication;

instructions for communicating a document through a second wireless communication technique, wherein the document is associated with a financial transaction being conducted with a commercial establishment; and

instructions for receiving encrypted information through the second wireless communication technique,

wherein the encrypted information is, at least in part, encrypted using the encryption key; and

wherein the second wireless communication technique includes a technique other than near field communication.

26. A wireless device, comprising:

a transceiver configured to communicate information;

a processor;

memory configured to store an encryption key and encrypted information; and

a program module, wherein the program module is stored in the memory and configurable to be executed by the processor, the program module including;

instructions for initiating a session by communicating the encryption key through a first wireless communication technique, wherein the first wireless communication technique includes near field communication;

instructions for receiving a document through a second wireless communication technique, wherein the document is associated with a financial transaction that is to be conducted with a commercial establishment;

instructions for requesting a token from a consumer conducting the financial transaction;

instructions for receiving the token; and

instructions for providing the encrypted information through the second wireless communication technique after the token is received,

wherein the encrypted information is, at least in part, encrypted using the encryption key; and

wherein the second wireless communication technique includes a technique other than near field communication.