LINKING PAYMENT TO SECURE DOWNLOADING OF APPLICATION DATA

• US 20170032357A1
• Filed: 03/30/2015
• Published: 02/02/2017
• Est. Priority Date: 04/02/2014
• Status: Active Grant

• Current Assignee: Fidesmo AB
• Original Assignee: Fidesmo AB
• Inventors: Eld, Mattias, Arvidsson, Petter
• Granted Patent: US 11,176,535 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules

Abstract

A communication node for delivering secure content in respect of a requested service to a target entity. The communication node has respective interfaces towards: at least one network for communicating with mobile terminals; a service-provider node providing the requested service; and an authorization node for effecting payments. After having completed a set-up phase and in response to a payment, the communication node enables forwarding of secure content, relating to at least one service requested by a user of a first mobile terminal to a target entity associated with the first mobile terminal. The set-up phase involves: identifying the at least one requested service from the first mobile terminal; linking in the service-provider node the at least one requested service to the first mobile terminal; and assigning a reference in the service-provider node to a payment to be made in respect of the at least one requested service.

Claims

1-22. -22. (canceled)

23. A communication node for delivering secure content in respect of a requested service to a target entity, the communication node comprising:

a first interface towards at least one network over which communication with mobile terminals is enabled, a second interface for communication with a service-provider node configured to provide the requested service, and a third interface for communication with an authorization node configured to effect payments, wherein, after having completed a set-up phase and in response to a payment, the communication node is configured to enable forwarding of secure content relating to at least one service requested by a user of a first mobile terminal to a target entity associated with the first mobile terminal,

the set-up phase involving;

identifying the at least one requested service from the first mobile terminal, linking in the service-provider node the at least one requested service to the first mobile terminal, and assigning a reference in the service-provider node to a payment to be made in respect of the at least one requested service; and

the payment involving linking the at least one requested service and the first mobile terminal to a payment associated with the at least one requested service.

24. The communication node according to claim 23, wherein, in the set-up phase, the communication node is configured to:

receive identification data from the first mobile terminal, the identification data designating the at least one requested service by means of a service identifier; and

in response to the identification data;

send the service identifier to the service-provider node, the service identifier being based on the identification data;

receive a service description from the service-provider node, the service description being produced in response to the service identifier;

send a message based on the service description together with a cart identifier to the first mobile terminal; and

send a transaction identifier to the service-provider node, the transaction identifier associating the first mobile terminal with a payment to be made in respect of the at least one requested service.

25. The communication node according to claim 24, wherein the communication node is configured to effect the payment by:

sending a payment request to the authorization node; and

in response thereto

receiving a payment confirmation message from the authorization node, the payment confirmation message being issued in response to the payment request and indicating that payment has been effected.

26. The communication node according to claim 25, wherein the communication node is configured to enable the forwarding of secure content to the target entity by:

receiving a service call from the service-provider node, the service call being issued in response to the transaction identifier from the communication node;

in response to the service call;

sending a first operation identifier to the first mobile terminal, the first operation identifier associating the cart identifier to the transaction identifier;

sending a second operation identifier to the service-provider node, the second operation identifier matching the first operation identifier;

receiving the secure content from the service-provider node; and

forwarding at least one data message to the first mobile terminal, the at least one data message containing the secure content.

27. The communication node according to claim 26, wherein, after having forwarded the at least one data message to the first mobile terminal, the communication node is configured to:

receive at least one confirmation message from the first mobile terminal, a final one of the at least one confirmation message indicating that the forwarding of secure content to the first mobile terminal has been completed successfully.

28. The communication node according to claim 27, wherein, after having received the final one of the at least one confirmation message, the communication node is configured to:

send a general confirmation message to the service-provider node, the general confirmation message indicating that the forwarding of secure content to the first mobile terminal has been completed successfully.

29. The communication node according to claim 28, wherein, after having sent the general confirmation message, the communication node is configured to:

receive a service-complete confirmation message from the service-provider node; and

in response to the service-complete confirmation message

cancel the reference to the service-provider node relating to the at least one service requested by the first mobile terminal.

30. The communication node according to claim 29, wherein, the service-complete confirmation message is associated with a service result specifying an effect of the secure content, and the communication node is configured to send a message based on the service result to the first mobile terminal in response to the service result.

35. A method of delivering secure content in respect of a requested service to a target entity, the method comprising:

communicating with mobile terminals with respect to requested services;

delivering secure content relating to requested services to mobile terminals, which secure content is to be forwarded to target entities associated to the mobile terminals; and

communicating with an authorization node in relation to payments effected for the requested services,

wherein, after having completed a set-up phase with respect to a first mobile terminal and in response to a thereto related payment, the method comprising;

enabling forwarding of secure content relating to at least one service requested by a user of the first mobile terminal to a target entity associated with the first mobile terminal,

the set-up phase involving;

identifying the at least one requested service from the first mobile terminal, linking in the service-provider node the at least one requested service to the first mobile terminal, and assigning a reference in the service-provider node to a payment to be made in respect of the at least one requested service; and

the payment involving linking the at least one requested service and the first mobile terminal to a payment associated with the at least one requested service.

36. The method according to claim 35, wherein the set-up phase comprises:

receiving identification data from the first mobile terminal, the identification data designating the at least one requested service by means of a service identifier; and

in response to the identification data

sending a service identifier to the service-provider node, the service identifier being based on the identification data,

receiving a service description from the service-provider node, the service description being produced in response to the service identifier;

sending a message based on the service description together with a cart identifier to the first mobile terminal; and

sending a transaction identifier to the service-provider node, the transaction identifier associating the first mobile terminal with a payment to be made in respect of the at least one requested service.

37. The method according to claim 36, wherein the payment is effected by:

sending a payment request to the authorization node; and

in response thereto

receiving a payment confirmation message from the authorization node, the payment confirmation message being issued in response to the payment request and indicating that payment has been effected.

38. The method according to claim 37, wherein enabling the forwarding of secure content to the target entity comprises:

receiving a service call from the service-provider node, the service call being issued in response to the transaction identifier from the communication node;

in response to the service call;

sending a first operation identifier to the first mobile terminal, the first operation identifier associating the cart identifier to the transaction identifier;

sending a second operation identifier to the service-provider node, the second operation identifier matching the first operation identifier;

receiving the secure content from the service-provider node; and

forwarding at least one data message to the first mobile terminal, the at least one data message containing the secure content.

39. The method according to claim 38, wherein, after having forwarded the at least one data message to the first mobile terminal, the method comprises:

receiving at least one confirmation message from the first mobile terminal, a final one of the at least one confirmation message indicating that the forwarding of secure content to the first mobile terminal has been completed successfully.

40. The method according to claim 39, wherein, after having received the final one of the at least one confirmation message, the method comprises:

sending a general confirmation message to the service-provider node, the general confirmation message indicating that the forwarding of secure content to the first mobile terminal has been completed successfully.

41. The method according to claim 40, wherein, after having sent the general confirmation message, the method comprises:

receiving a service-complete confirmation message from the service-provider node; and

in response to the service-complete confirmation message

cancelling the reference in the service-provider node relating to the at least one service requested by the first mobile terminal.

42. The method according to claim 39, wherein a service result is associated to the service-complete confirmation message, the service result specifying an effect of the secure content, and the method further comprising:

sending a message based on the service result to the first mobile terminal in response to the service result.

43. A computer program product loadable into the memory of a computer, comprising software for performing the steps of claim 35 when the computer program product is run on the computer.

44. A non-transitory computer readable medium, having a program recorded thereon, where the program is to make a computer perform the steps of claim 35.