System and method for secure mobile commerce

• US 7,512,236 B1
• Filed: 08/06/2004
• Issued: 03/31/2009
• Est. Priority Date: 08/06/2004
• Status: Active Grant

• Current Assignee: Mark IV Industries Corporation
• Original Assignee: Mark IV Industries Corporation
• Inventors: Zhu, Jeffrey
• Primary Examiner(s): SMITHERS, MATTHEW
• Application Number:
  US10/912,997
• Time in Patent Office: 1,698 Days
• Field of Search: 380/280
• US Class Current: 380/255
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 92/18 between terminal devices

Abstract

A method and system for secure communications in a mobile commerce system having a pre-defined communications protocol. The method and system are backward compatible, providing reader configured to distinguish between a first type of transponder using an unencrypted protocol and a second type of transponder using an encrypted protocol. The reader determines the type of transponder and alters its communications protocol accordingly. The encrypted protocol provides for encrypted communications within the constraints of the existing pre-defined communications protocol.

Claims

1. A method for secure mobile commerce within a mobile commerce system having a pre-defined communications protocol, the mobile commerce system including a plurality of readers and a plurality of transponders, the plurality of transponders including first transponders having an unencrypted communications format and second transponders having an encrypted communications format, the method comprising the steps of:

transmitting a trigger signal from one of said plurality of readers;

receiving a response signal from one of said transponders;

testing said response signal to determine whether said response signal is from one of said first transponders or one of said second transponders;

engaging in unencrypted communications with said one of said transponders in accordance with the unencrypted communications format if said response signal was received from one of said first transponders; and

engaging in encrypted communications with said one of said transponders in accordance with the encrypted communications format if said response signal was received from one of said second transponders.

2. The method claimed in claim 1, wherein said response signal includes a tag type indicator, and wherein said step of testing includes reading said tag type indicator.

3. The method claimed in claim 2, wherein said response signal includes an encoded data string and wherein said tag type indicator includes a tag type field within said encoded data string.

4. The method claimed in claim 1, wherein said step of testing includes performing a data integrity check of said response signal, said data integrity check indicating whether said response signal is from one of said first transponders or one of said second transponders.

5. The method claimed in claim 4, wherein said step of testing includes performing said data integrity check upon said response signal, decrypting said response signal to produce a decrypted response signal, and performing said data integrity check upon said decrypted response signal.

6. The method claimed in claim 5, wherein said step of transmitting said trigger signal includes transmitting a reader public key, and wherein said response signal includes a signal encrypted using said reader public key.

7. The method claimed in claim 1, wherein said response signal includes a transponder public value.

8. The method claimed in claim 7, including a step of transmitting a polling message after said step of transmitting said trigger signal and prior to said step of receiving said response signal, and wherein said polling message includes a reader public value.

9. The method claimed in claim 7, wherein step of transmitting said trigger signal includes transmitting a beacon signal, said beacon signal including a reader public value.

10. The method claimed in claim 7, including a step of transmitting a program signal to said one of said transponders, said program signal including a reader public value.

11. The method claimed in claim 7, including a step of transmitting a reader public key and wherein said transponder public value comprises a transponder public key.

12. The method claimed in claim 7, wherein each of said transponders includes a memory storing transponder information, and wherein said response signal includes said transponder information.

13. The method claimed in claim 1, further including a step of generating a reader private value and a reader public value and a step of receiving a transponder public value, and wherein said method further includes a step of generating a session key for use in said encrypted communications.

14. The method claimed in claim 13, wherein said step of receiving said transponder public value includes extracting said transponder public value from said response signal.

15. The method claimed in claim 13, further including a step of transmitting said reader public value.

16. The method claimed in claim 13, wherein said step of generating said session key includes generating said session key based lipon said reader private value and said transponder public value.

17. The method claimed in claim 1, further including a step of authenticating said transponder.

18. The method claimed in claim 17, wherein said step of authenticating includes hashing a known value using a hash algorithm to produce a result value and comparing a hashed value received from said one of said transponders with said result value to determine if said one of said transponders knows said hash algorithm.

19. The method claimed in claim 1, further including a step of authenticating said reader.

20. The method claimed in claim 19, wherein said step of authenticating includes, at one of said transponders, steps of hashing a known value using a hash algorithm to produce a result value and comparing a hashed value received from said reader with said result value to determine if said reader knows said hash algorithm.

21. A system for secure mobile commerce within a mobile commerce system having a pre-defined communications protocol, said system comprising:

a reader, including a transmitter for transmitting a trigger signal and a program signal, and a receiver for receiving a response signal; and

a plurality of transponders, each of said transponders including a transceiver for transmitting said response signal, and said transponders including first transponders having an unencrypted communications format and second transponders having an encrypted communications format,

said reader including a tag type analyzer coupled to said receiver for testing said response signal to determine whether said response signal is from one of said first transponders or one of said second transponders, and

said reader including a communications module for reading said response signal and generating said program signal, wherein said communications module operates in accordance with said unencrypted communication format or said encrypted communications format in response to said tag type analyzer.

22. The system claimed in claim 21, wherein said response signal includes a tag type indicator, and wherein said tag type analyzer determines whether said response signal is from one of said first transponders or one of said second transponders based upon said tag type indicator.

23. The system claimed in claim 22, wherein said response signal includes an encoded data string and wherein said tag type indicator comprises a tag type field within said encoded data string.

24. The system claimed in claim 21, wherein said tag type analyzer includes a data integrity check component for checking data integrity of said response signal to determine whether said response signal is from one of said first transponders or one of said second transponders.

25. The system claimed in claim 24, wherein said tag type analyzer further includes a decryption component for decrypting said response signal and outputting a decrypted response signal, and wherein said data integrity check component includes a component for checking data integrity of said decrypted response signal.

26. The system claimed in claim 21, wherein said response signal includes a transponder public value.

27. The system claimed in claim 26, wherein said communications module includes an encryption/decryption module for applying said encrypted communication format, and wherein said encryption/decryption module includes a key generation component for generating a reader public value and a reader private value.

28. The system claimed in claim 27, wherein said communications module generates a polling message for transmission to said one of said transponders by said transceiver, and wherein said polling message includes said reader public value.

29. The system claimed in claim 27, wherein said communications module generates a beacon signal for transmission to said one of said transponders by said transceiver, and wherein said beacon signal includes said reader public value.

30. The system claimed in claim 27, wherein said program signal includes said reader public value.

31. The system claimed in claim 27, wherein said encryption/decryption module includes a session key component for generating a session key based upon said reader private value and said transponder public value.

32. The system claimed in claim 27, wherein said encryption/decryption module includes an authentication component for authenticating said transponder.

33. The system claimed in claim 26, wherein said transponders each include a memory, said memory containing transponder information, and wherein said response signal includes said transponder information.

34. The system claimed in claim 27, wherein said transponder includes an authentication component for authenticating said reader.