Wirelessly executing transactions with different enterprises

• US 7,942,337 B2
• Filed: 09/08/2008
• Issued: 05/17/2011
• Est. Priority Date: 09/12/2007
• Status: Expired due to Fees

• Current Assignee: DeviceFidelity, Inc. (Block, Inc. (f/k/a Square, Inc.))
• Original Assignee: DeviceFidelity, Inc. (Block, Inc. (f/k/a Square, Inc.))
• Inventors: Jain, Deepak
• Primary Examiner(s): Le, Thien M.
• Assistant Examiner(s): VO, TUYEN KIM
• Application Number:
  US12/206,564
• Publication Number:
  US 20090065572A1
• Time in Patent Office: 981 Days
• Field of Search: 235/375, 235/380, 235/382, 235/382.5, 235/451, 235/486, 235/492, 455/558
• US Class Current: 235/492
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06K 19/07707 the visual interface being a display, e.g. LCD or electronic ink
• CPC Class Codes: G06K 19/07739 comprising a first part capable of functioning as a record carrier on its own and a second part being only functional as a form factor changing part, e.g. SIM cards type ID 0001, removably attached to a regular smart card form factor
• CPC Class Codes: G06K 19/07773 Antenna details antennas for wireless devices, e.g. RFID tags, in general H01Q1/22
• CPC Class Codes: G06K 7/10237 the reader and the record carrier being capable of selectively switching between reader and record carrier appearance, e.g. in near field communication [NFC] devices where the NFC device may function as an RFID reader or as an RFID tag
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/355 Personalisation of cards for use
• CPC Class Codes: G06Q 20/3574 Multiple applications on card
• CPC Class Codes: G06Q 20/3576 Multiple memory zones on card
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/1008 : Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04B 1/3816 : Mechanical arrangements for accommodating identification devices, e.g. cards or chips; with connectors for programming identification devices
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 41/32 : Specific management aspects for broadband networks
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 : using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0876 : based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04M 1/0274 : for an electrical connector module
• CPC Class Codes: H04M 1/7246 : by connection of exchangeable housing parts
• CPC Class Codes: H04M 17/103 : using SIMs (USIMs) or calling cards
• CPC Class Codes: H04M 17/106 : using commercial credit or debit cards
• CPC Class Codes: H04M 2017/12 : using calling, telephone credit/debit cards
• CPC Class Codes: H04M 2017/14 : using commercial credit/debit cards, e.g. VISA, AMEX
• CPC Class Codes: H04W 12/068 : using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 : using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 52/0254 : detecting a user operation or a tactile contact or a motion of the device
• CPC Class Codes: H04W 52/0274 : by switching on or off the equipment or parts thereof
• CPC Class Codes: H04W 88/02 : Terminal devices
• CPC Class Codes: Y02D 30/70 : in wireless communication networks

Abstract

The present disclosure is directed to a system and method for wirelessly executing transactions with different institutions. In some implementations, a physical interface, a communication module, secure memory, a user-interface module, and a transaction module. The physical interface connects to a port of a mobile host device that includes a Graphical User Interface (GUI). The communication module wirelessly receives Radio Frequency (RF) signals from and transmits RF signals to an access terminal. The secure memory stores a plurality of selectable user credentials. At least one set of user credentials is used to execute transactions with the access terminal, and each set is associated with different institutions. The transaction module dynamically switches between the plurality of selectable user credentials in response to at least an event and wirelessly transmits to the access terminal a response to a requested transaction including user credentials selected from the plurality of selectable user credentials.

Claims

1. A card, comprising:

an physical interface that connects to a port of a mobile host device, wherein the mobile host device includes a Graphical User Interface (GUI);

an communication module that wirelessly receives Radio Frequency (RF) signals from and transmits RF signals to an access terminal;

secure memory that stores a plurality of selectable user credentials, wherein the user credentials execute transactions with access terminals and each are associated with different institutions, the secure memory includes master credentials and a master security framework, and the master credentials and the master security framework enable financial institutions to update the user credentials and associated security frameworks;

a user-interface module that presents and receives information through the GUI of the mobile host device; and

a transaction module that dynamically switches between the plurality of selectable user credentials in response to at least an event and wirelessly transmits to the access terminal a response to a requested transaction including user credentials selected from the plurality of selectable user credentials, wherein the card executes transactions with access terminals without adding hardware, software or firmware to the mobile host device.

2. The card of claim 1, wherein the physical interface comprises at least one of a SecureDigital (SD) interface, a miniSD interface, a microSD interface, a MMC interface, a miniMMC, a microMMC, a firewire or a iDock interface, or a Universal Serial Bus (USB) interface.

3. The card of claim 1, wherein the communication module executes the transaction independent of the mobile host device.

4. The card of claim 1, wherein the memory stores a plurality of security frameworks for the plurality of user credentials, the communication module executes the requested transaction using a security framework from the plurality of security frameworks corresponding to the selected user credentials.

5. The card of claim 1, wherein the one or more events includes a user selecting a graphical element presented through the GUI of the mobile host device.

6. The card of claim 1, wherein the user-interface module presents information associated with the requested transaction through the GUI of the mobile host device.

7. The card of claim 6, wherein the presented information based, at least in part, on at least one of real-time content during the transaction, locally-stored offline content, or online content associated with the financial institution.

8. The of claim 6, wherein the user-interface module further presents a request for user identification including at least one of a Personal Identification Number (PIN), user ID and password, or biometric signature through the GUI of the mobile host device, the transaction module further verifies the submitted user identification with user identification locally stored in the secure memory prior executing the requested transaction.

9. The card of claim 1, wherein the communication module selectively switches an RF antenna between an activate state and an inactivate state in response to at least an event.

10. The of claim 1, wherein the wireless RF signals comprise at least one of contactless signals, proximity signals, Near Field Communication (NFC) signals, Bluetooth signals, Ultra-wideband (UWB) signals, or Radio Frequency Identifier (RFID) signals.

11. The card of claim 1, wherein the communication module further comprises a protocol translation module that translates signals between wireless protocols compatible with the retail terminal and an internal transaction application.

12. The card of claim 1, further comprising a cryptographic module that decrypts received signals prior to processing by the transaction module and encrypts at least part of the transaction response prior to wireless transmission.

13. The card of claim 1, further comprising an authentication module that authenticates at least one of a network of the mobile host device, the mobile host device, or a user.

14. The card of claim 1, further comprising a bootstrap module that executes one or more authentication processes in response to at least insertion in the port of the mobile host device.

15. The card of claim 14, wherein the one or more authentication processes authenticates at least one of a network, a mobile host device, or a user.

16. The card of claim 1, further comprising an activation module that activates access to user credentials from the plurality of selectable user credentials and transmits to an associated financial institution a request to activate an associated user account.

17. The card of claim 16, wherein access to user credentials from the plurality of selectable user credentials is activated based, at least in part, on a user manually entering an activation code using the GUI of the mobile host device.

18. The card of claim 1, wherein the user of the mobile host device manages different user accounts associated with the plurality of selectable user credentials using the GUI.

19. The card of claim 1, the communication module further configured to receive requests to update the plurality of selectable user credentials through a wireless connection with a cellular core network or a wired connection with a broadband network.

20. The card of claim 19, the communication module further configured to at least add new sets of user credentials or delete existing user credentials based, at least in part, on the update requests.

21. The card of claim 1, wherein the plurality of selectable user credentials include a default user credentials, the communication module further configured to switch to the default user credentials in response to at least completing the requested transaction using a different one of the plurality of selectable user credentials.

22. The card of claim 1, wherein the plurality of selectable user credentials include a default user credentials, the transaction module further configured to switch to a default user credentials in response to at least expiration of a period of time to complete a transaction using non-default user credentials.

23. The card of claim 1, wherein the plurality of selectable credentials are each loaded into the secure memory from a different institution.

24. The card of claim 1, wherein the card comprises a microSD card.

26. The method of claim 1, wherein the port comprises at least one of an SD interface, a miniSD interface, a microSD interface, a MMC interface, a miniMMC, a microMMC, a firewire or a iDock interface, or a USB interface.

27. The method of claim 1, wherein the requested transaction is executed independent of the mobile host device.

28. The method of claim 1, further storing a plurality of security frameworks for the plurality of user credentials, the transaction is executed using a security framework from the plurality of security frameworks corresponding to the selected user credentials.

25. A method, comprising:

connecting to a port of a mobile host device, wherein the mobile host device includes a GUI;

wirelessly communicating RF signals with an access terminal;

storing, in secure memory, a plurality of selectable user credentials, wherein the user credentials execute transactions with access terminals and each is associated with a different institution, the secure memory includes master credentials and a master security framework, and the master credentials and the master security framework enable financial institutions to update the user credentials and associated security frameworks;

presenting information through the GUI of the mobile host device; and

dynamically switching between the plurality of selectable user credentials in response to at least an event; and

wirelessly transmitting to the access terminal a response to a requested transaction including user credentials selected from the plurality of selectable user credentials, wherein transactions are executed with access terminals without adding hardware, software or firmware to the mobile host device.

29. A system, comprising:

a means for connecting to a port of a mobile host device, wherein the mobile host device includes a GUI;

a means for wirelessly communicating RF signals with an access terminal;

a means for storing, in secure memory, a plurality of selectable user credentials, wherein the user credentials execute transactions with access terminals and each is associated with a different institution, the secure memory includes master credentials and a master security framework, and the master credentials and the master security framework enable financial institutions to update the user credentials and associated security frameworks;

a means for presenting information through the GUI of the mobile host device; and

a means for dynamically switching between the plurality of selectable user credentials in response to at least an event; and

a means for wirelessly transmitting to the access terminal a response to a requested transaction including user credentials selected from the plurality of selectable user credentials, wherein transactions are executed with access terminals without of adding hardware, software or firmware to the mobile host device.