Methods of authorizing actions

• US 8,280,359 B2
• Filed: 10/31/2007
• Issued: 10/02/2012
• Est. Priority Date: 05/25/2006
• Status: Active Grant

• Current Assignee: CellTrust Corporation
• Original Assignee: CellTrust Corporation
• Inventors: Moshir, Sean, Shafiezadeh, Houman, Moshir, Kevin K.
• Primary Examiner(s): DOAN, KIET M
• Application Number:
  US11/931,822
• Publication Number:
  US 20080108324A1
• Time in Patent Office: 1,798 Days
• Field of Search: 235/375, 235/379, 235/380, 340/5.8, 705/40, 705/26.8, 705/66, 705/75, 705/39, 705/79, 705/14.27, 455/466, 455/406, 455/435.1, 455/411, 455/418, 455/414.2
• US Class Current: 455/414.3
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04M 3/42348 Location-based services which utilize the location information of a target
• CPC Class Codes: H04M 3/4938 comprising a voice browser which renders and interprets, e.g. VoiceXML
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements

Abstract

Methods for authorizing actions using mobile phones. Embodiments include receiving from a person having authority to authorize the action, an identification of a phone number for obtaining authorization for the action, receiving from a person seeking the action a request for authorization of the action, sending an automated first message through a mobile phone network to the mobile phone, including a description of the action for which authorization is requested, and receiving, from the first mobile phone, a second message, which authorizes the action. Actions that are authorized, in different embodiments, include computer access, physical access, and financial transactions. In various embodiments, the phone number may be received through the mobile phone network through the Internet, through a local signal, or directly from the user.

Claims

1. A method of authorizing an action, the method comprising, in any permissible order, at least the acts of:

receiving from a person having authority to authorize the action, an identification of a first phone number for obtaining authorization for the action;

receiving a request for authorization and an indication of a criteria for obtaining authorization for the action;

encrypting a first message, wherein the first message contains the request for authorization of the action;

receiving at a first mobile phone having the first phone number, a first message that is encrypted and containing the request for authorization of the action;

decrypting the first message containing the request for authorization of the action;

after the receiving the identification of the first phone number, and after the receiving the request for authorization and the indication of the criteria for obtaining authorization for the action, and after encrypting the first message, and after the receiving of the first message containing the request for authorization, and after decrypting the first message, sending a second message through a mobile phone network and from the first mobile phone having the first phone number, wherein

the second message authorizes the action;

receiving an identification of a second phone number for advising a third person of the action, and further comprising automatically sending at least one of the first message, the second message, and a third message to the second phone number, wherein the at least one of the first message, the second message, and a third message includes at least a description of the action for which authorization is requested.

2. The method of claim 1 wherein, prior to the receiving of the request for authorization of the action, the first phone number is received through at least one of an Internet website and the mobile phone network.

3. The method of claim 1, wherein the action is granting of computer access to electronically stored information and a person seeking the action is seeking the computer access to the electronically stored information.

4. The method of claim 1, wherein the action is granting of physical access to a controlled space and a person seeking the action is seeking the physical access to the controlled space.

5. The method of claim 1 further comprising receiving through at least one of an Internet website and a mobile phone network, from each of at least a plurality of persons having authority to authorize the action, an indication of a criteria for obtaining authorization for the action for the person.

6. The method of claim 1, further comprising receiving from the person having authority to authorize the action, through at least one of the Internet website and the mobile phone network, an identification of time limits for sending the first message, and wherein the sending of the first message is performed only in accordance with the time limits.

7. The method of claim 1 wherein the first message comprises at least one menu and at least one prompt to authorize the action by making a selection from the menu.

8. The method of claim 1, further comprising:

wherein the second message indicates that the person having authority to authorize the action has taken an affirmative action to indicate authorization of the action.

9. The method of claim 1, further comprising allowing the action only if the second message is received and the second message authorizes the action.

10. The method of claim 1 wherein the first message is an automated first message.

11. The method of claim 1 wherein the first mobile phone is controlled by a person seeking the action.

12. The method of claim 1 wherein a person seeking the action is the person having authority to authorize the action.

13. The method of claim 1, further comprising looking up an identification indicia in a database and obtaining the first phone number for obtaining authorization for the action from the database.

14. The method of claim 1, further comprising repeating the receiving of the request for authorization of the action, repeating the sending of the first message and repeating the receiving of the second message, and further comprising tracking the authorization granted for the action over time and reporting results of the tracking.

15. The method of claim 1 wherein the first message is an SMS message and the second message is an SMS message received through the mobile phone network.

16. The method of claim 1, wherein the action is a financial transaction, the first message includes an amount of the transaction, and the second message includes an authorization of the transaction.

17. The method of claim 16 further comprising receiving from the person having authority to authorize the action, through at least one of an Internet website and a mobile phone network, an identification of a threshold monetary value of transactions, wherein the first message is sent for transactions exceeding the threshold, and transactions below the threshold are approved without sending the first message.

18. The method of claim 16 wherein the transaction is at least one of a withdrawal and a debit from a bank account and the person having authority to authorize the action is an authorized user of the account.

19. The method of claim 16 wherein the transaction is a bank card expenditure made at a point of sale for a purchase of goods or a payment for services, and the person having authority to authorize the action is an authorized user of the bank card.

20. The method of claim 19 wherein the bank card has a bank card number, and the method further comprises, before the sending of the first message, receiving the bank card number from the first mobile phone via a local signal transmitted from the first mobile phone.

21. The method of claim 16 wherein the transaction is an expenditure made from a credit or debit account at a point of sale for a purchase of goods or a payment for services, the person having authority to authorize the action is an authorized user of the account, the account has an account indicia, and the method further comprises, before the sending of the first automated message, receiving the account indicia from the mobile phone via a local signal transmitted from the mobile phone.

22. The method of claim 16 wherein the transaction is an expenditure made from a credit or debit account at a point of sale for a purchase of goods or a payment for services, the person having authority to authorize the action is an authorized user of the account, and the second message includes an authorization code which has been memorized by the person having authority to authorize the action and keyed into the first mobile phone after receiving the first message and before sending the second message.

23. The method of claim 16 wherein the transaction is an expenditure made from a credit or debit account at a point of sale for a purchase of goods or a payment for services, the person having authority to authorize the action is an authorized user of the account, the account has an account indicia, and the second message includes the account indicia.

24. The method of claim 23 wherein the second message is an SMS message received through the mobile phone network and the method further comprises, before the sending of the first message, receiving from a person seeking the action or from the first mobile phone, the first phone number.

25. A method of authorizing an action, the method comprising, in any permissible order, at least the acts of:

receiving from a person having authority to authorize the action, an identification of a first phone number for obtaining authorization for the action;

receiving from a person seeking the action, a request for authorization of the action;

after the receiving the identification of the first phone number, and after the receiving of the request for authorization, sending an automated first message through a mobile phone network to a first mobile phone having the first phone number, wherein the first message includes a description of the action for which authorization is requested and wherein in the first message, asking a personal question about the person having authority to authorize the action; and

after the sending of the first message, receiving from the first mobile phone, having the first phone number, a second message wherein in the second message, receiving a present answer to the personal question, comparing the present answer to a previous answer to the personal question provided by the person having authority to authorize the action, and wherein the second message authorizes the action.

26. A method of authorizing an action, the method comprising, in any permissible order, at least the acts of:

receiving from a person seeking an action and in an encrypted manner, an identification of a first phone number and a request for authorization of an action;

receiving at a first mobile phone having the first phone number, a first message containing the request for authorization of the action and a password, wherein the first message is an SMS message;

after the receiving the identification of the first phone number and the request for authorization of an action, and after the receiving of the first message that is the SMS message and containing the request for authorization of the action and the password, sending a second message that is encrypted and including the password through a mobile phone network and from the first mobile phone having the first phone number, wherein the second message authorizes the action.

27. A method of authenticating access, the method comprising in any order at least the acts of:

receiving from a person seeking access, identification indicia and a present password for the person seeking the access;

comparing the present password to a previous password stored in memory;

proceeding to provide the access only if the present password matches the previous password stored in memory;

looking up an identification indicia in a database and obtaining the first phone number for obtaining authorization for the access from the database;

sending a first automated message to the person seeking the access, the first automated message is encrypted and containing a password;

receiving from the mobile phone of the person having authority for the access, a second message that is encrypted and containing the password indicating that the person having authority for the access has taken the affirmative action to indicate authorization of the access.