Mobile device initiated transaction

• US 8,631,231 B2
• Filed: 03/01/2010
• Issued: 01/14/2014
• Est. Priority Date: 04/17/2007
• Status: Active Grant

• Current Assignee: Visa USA, Inc. (Visa, Inc.)
• Original Assignee: Visa USA, Inc. (Visa, Inc.)
• Inventors: Wentker, David, Lindelsee, Michael, Brand, Olivier, Dimmick, James, Singh Grewal, Tribhuwan A.
• Primary Examiner(s): Chai, Longbit
• Application Number:
  US12/715,148
• Publication Number:
  US 20100153272A1
• Time in Patent Office: 1,415 Days
• Field of Search: 713/155
• US Class Current: 713/155
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/386 using messaging services or messaging apps using mobile network messaging services for payment, e.g. SMS G06Q20/3255
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity

Abstract

One embodiment of the invention is directed to a method including receiving an alias identifier associated with an account associated with a presenter, determining an associated trusted party using the alias identifier, sending a verification request message to the trusted party after determining the associated trusted party, and receiving a verification response message.

Claims

1. A method comprising:

a) receiving, at a server, an alias mobile device identifier from a mobile device to initiate a transaction;

b) providing, to the mobile device and by the server in response to said receiving the alias mobile device identifier, a list of alias account identifiers associated with the alias mobile device identifier, wherein the mobile device thereafter receives a selection of one of the alias account identifiers;

c) receiving, by the server, the selected alias account identifier; and

d) processing, by the server, the transaction using the selected alias account identifier.

2. The method as recited in claim 1 further comprising initiating the sending of an authentication request message to the mobile device.

3. The method of claim 1 wherein the mobile device is a mobile phone.

4. The method of claim 3 wherein the alias mobile device identifier is a phone number associated with the mobile device.

5. The method of claim 1 wherein the alias mobile device identifier is a phone number associated with the mobile device.

6. The method of claim 1 wherein the mobile device identifier is associated with a default alias account identifier.

7. The method of claim 6, wherein the server is a directory server.

8. The method of claim 7 wherein the directory server maps mobile phone numbers and alias account identifiers to BINs (bank identification numbers), and wherein the directory server is in communication with an access control server.

9. A non-transitory computer readable storage medium comprising code, executable by a processor, for implementing a method comprising:

a) receiving, at a server, an alias mobile device identifier from a mobile device to initiate a transaction;

b) providing, by the server and to the mobile device in response to said receiving the alias mobile device identifier, a list of alias account identifiers associated with the alias mobile device identifier, wherein the mobile device thereafter receives a selection of one of the alias account identifiers;

c) receiving, by the server, the selected alias account identifier; and

d) processing, by the server, the transaction using the selected alias account identifier.

10. A server comprising:

the processor; and

the computer readable medium of claim 9 coupled to the processor.

11. A method comprising:

a) providing an alias mobile device identifier by a mobile device to a server computer to initiate a transaction;

b) receiving, at the mobile device in response to said providing the alias mobile device identifier, a list of primary account numbers or alias account identifiers associated with the alias mobile device identifier from the server computer;

c) entering the selected alias account identifier into the mobile device; and

d) sending the selected alias account identifier to the server computer by the mobile device, wherein the server computer thereafter processes the transaction using the selected alias account identifier.

12. The method as recited in claim 11 further wherein the server computer initiates the sending of an authentication request message to the mobile device.

13. The method of claim 11 wherein the mobile device is a mobile phone.

14. The method of claim 13 wherein the alias mobile device identifier is a phone number associated with the mobile device.

15. The method of claim 11 wherein the alias mobile device identifier is a phone number associated with the mobile device.

16. A non-transitory computer readable storage medium comprising code, executable by a processor, for implementing a method comprising:

a) providing an alias mobile device identifier by a mobile device to a server computer to initiate a transaction;

b) receiving, at the mobile device and from the server computer in response to said providing the alias mobile device identifier, a list of alias account identifiers associated with the alias mobile device identifier;

c) entering the selected alias account identifier into the mobile device; and

d) sending the selected alias account identifier to the server computer, wherein the server computer thereafter processes the transaction using the selected alias account identifier.