Wirelessly accessing broadband services using intelligent cards

• US 8,776,189 B2
• Filed: 09/12/2008
• Issued: 07/08/2014
• Est. Priority Date: 09/12/2007
• Status: Expired due to Fees

• Current Assignee: DeviceFidelity, Inc. (Block, Inc. (f/k/a Square, Inc.))
• Original Assignee: DeviceFidelity, Inc. (Block, Inc. (f/k/a Square, Inc.))
• Inventors: Jain, Deepak
• Primary Examiner(s): Armouche, Hadi
• Assistant Examiner(s): HO, DAO Q
• Application Number:
  US12/209,950
• Publication Number:
  US 20090070861A1
• Time in Patent Office: 2,125 Days
• Field of Search: 726 5- 7, 726/28, 726/29, 713/172, 713/185, 713/186
• US Class Current: 726/5
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06K 19/07707 the visual interface being a display, e.g. LCD or electronic ink
• CPC Class Codes: G06K 19/07739 comprising a first part capable of functioning as a record carrier on its own and a second part being only functional as a form factor changing part, e.g. SIM cards type ID 0001, removably attached to a regular smart card form factor
• CPC Class Codes: G06K 19/07773 Antenna details antennas for wireless devices, e.g. RFID tags, in general H01Q1/22
• CPC Class Codes: G06K 7/10237 the reader and the record carrier being capable of selectively switching between reader and record carrier appearance, e.g. in near field communication [NFC] devices where the NFC device may function as an RFID reader or as an RFID tag
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/355 Personalisation of cards for use
• CPC Class Codes: G06Q 20/3574 Multiple applications on card
• CPC Class Codes: G06Q 20/3576 Multiple memory zones on card
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/1008 : Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04B 1/3816 : Mechanical arrangements for accommodating identification devices, e.g. cards or chips; with connectors for programming identification devices
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 41/32 : Specific management aspects for broadband networks
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 : using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0876 : based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04M 1/0274 : for an electrical connector module
• CPC Class Codes: H04M 1/7246 : by connection of exchangeable housing parts
• CPC Class Codes: H04M 17/103 : using SIMs (USIMs) or calling cards
• CPC Class Codes: H04M 17/106 : using commercial credit or debit cards
• CPC Class Codes: H04M 2017/12 : using calling, telephone credit/debit cards
• CPC Class Codes: H04M 2017/14 : using commercial credit/debit cards, e.g. VISA, AMEX
• CPC Class Codes: H04W 12/068 : using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 : using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 52/0254 : detecting a user operation or a tactile contact or a motion of the device
• CPC Class Codes: H04W 52/0274 : by switching on or off the equipment or parts thereof
• CPC Class Codes: H04W 88/02 : Terminal devices
• CPC Class Codes: Y02D 30/70 : in wireless communication networks

Abstract

The present disclosure is directed to a system and method for wirelessly accessing broadband services using intelligent cards. In some implementations, a broadband service card includes a physical interface, a communication module, secure memory, and service module. The physical interface connects to a port of a consumer host device. The communication module wirelessly receives RF signals from and transmits RF signals to a wireless broadband network. The secure memory stores user credentials used to securely authenticate the card and access a service foreign to the consumer host device through the wireless broadband network independent of the consumer host device. The user credentials are associated with a broadband service provider. The service module accesses the foreign service using the user credentials in response to at least an event and transmits a service request to the broadband service provider using the wireless broadband core network.

Claims

1. A service card, comprising:

secure memory that stores user credentials used to securely authenticate the service card and access a service foreign to a consumer host device through a wireless broadband network, the user credentials associated with a broadband service provider;

one or more processors configured to;

interface an external port of a consumer host device;

wirelessly communicate RF signals directly with a wireless broadband network;

present a request for user identification including at least one of a Personal Identification Number (PIN), user ID and password, or biometric signature through a Graphical User Interface (GUI) of the consumer host device;

verify the submitted user identification with user identification locally stored in the secure memory prior to accessing foreign services;

when a number attempts to submit user identification exceeds a threshold, deactivate wireless communication;

when user identification is verified within the threshold;

access the foreign service using the user credentials in response to at least an event and transmit a service request to the broadband service provider using the wireless broadband network; and

present information associated with the foreign service through the consumer host device, wherein the information associated with the foreign service is presented through the GUI of the consumer host device;

wherein the service card is configured to insert into the external port of the consumer host device and is separate from the consumer host device.

2. The service card of claim 1, wherein the service card comprises a microSD card.

3. The service card of claim 1, the foreign service comprises access to a remote memory in a service-provider network for storing information at least partially generated by the consumer host device.

4. The service card of claim 3, wherein the information comprises at least one of video, images, or audio.

5. The service card of claim 1, wherein the one or more processors further configured to:

generate an authentication response based, at least in part, on the user credentials; and

execute a locally-stored service application for accessing the services independent of the consumer host device.

6. The service card of claim 1, the one or more processors further configured to selectively switch an RF antenna between an activate state and an inactivate state in response to at least an event.

7. The service card of claim 6, wherein the switching event includes a selection through a GUI of the consumer host device.

8. The service card of claim 1, wherein the wireless RF signals comprise at least one of LTE, WiMAX, HSPA, HSDPA, UMB, GPRS, EDGE or other 802.1x signals.

9. The service card of claim 1, the one or more processors further configured to translate signals between wireless broadband protocols and a device-interface protocol.

10. The service card of claim 1, the one or more processors further configured to decrypt received signals prior to processing and encrypt at least part of an authentication request prior to wireless transmission.

11. The service card of claim 1, the one or a more processors further configured to authenticate at least one of a network of a service-provider wireless broadband network, the consumer host device, or a user.

12. The service card of claim 11, the one or more processors further configured to deactivate an antenna in response to at least a failure to authenticate the at least one of the network of the consumer host device, the service-provider wireless broadband network, or the user.

13. The service card of claim 1, wherein the service card is initialized in response to at least insertion in the port of the consumer host device.

14. The service card of claim 1, the one or more processors further configured to execute one or more authentication processes in response to at least insertion in the port of the consumer host device.

15. The service card of claim 14, wherein the one or more authentication processes authenticate at least one of a network, a consumer host device, or a user.

16. The service card of claim 1, the one or more processors further configured to activate the service card and transmit to a network element a request to activate an associated user account in response to at least a user request or an initial insertion into the consumer host device.

17. The service card of claim 16, wherein the service card is activated based, at least in part, on a user manually entering an activation code through the GUI of the consumer host device.

18. The service card of claim 1, wherein the service card accesses the foreign service independent of loading a driver onto the consumer host device.

19. The service card of claim 1, wherein the service card emulates a customer premises equipment (CPE) when communicating with the wireless broadband network.

20. The service card of claim 1, the one or more processors further configured to receive power from the consumer host device.

21. The service card of claim 1, wherein an enterprise at least associated with the service provider uploads personalization data prior to activation, wherein the personalization data includes the user credentials, a service application and at least one of operational flags, a rule table or user interface.

22. The service card of claim 21, the one or more processors further configured to update the personalization data after activation in response to at least one of a wireless signal including secure update instructions or a wired signal through a client connected to the service card.

23. The service card of claim 1, the one or more processors further configured to transmit a notification to a network element in response to an activity violating one or more fraud control rules.

24. A method performed by a service card, comprising:

physically interfacing an external port of a consumer host device;

wirelessly receiving RF signals from and transmitting RF signals to a wireless broadband network;

storing user credentials used to securely authenticate a card and access a service foreign to the consumer host device through the wireless broadband network independent of the consumer host device, the user credentials associated with a broadband service provider;

accessing the foreign service using the user credentials in response to at least an event;

presenting a request for user identification including at least one of PIN, user ID and password, or biometric signature through a GUI of the consumer host device;

verifying the submitted user identification with user identification locally stored prior to accessing foreign services;

when a number attempts to submit user identification exceeds a threshold, deactivating wireless communication;

when user identification is verified within the threshold, wirelessly transmitting directly to a wireless broadband network a service request to the broadband service provider, wherein the service card is separate from the consumer host device; and

present information associated with the foreign service through the consumer host device, wherein the information associated with the foreign service is presented through the GUI of the consumer host device.

25. The method of claim 24, wherein the interface comprises an SD card.

26. The method of claim 24, the foreign service comprises access to a remote memory in a service-provider network for storing information at least partially generated by the consumer host device.

27. The method of claim 26, wherein the information comprises at least one of video, images, or audio.

28. The method of claim 24, the foreign service comprises access to content distributed by the broadband service provider.

29. The method of claim 28, wherein the content comprises multimedia content.