Establishing direct, secure transaction channels between a device and a plurality of service providers

• US 9,177,315 B2
• Filed: 06/24/2011
• Issued: 11/03/2015
• Est. Priority Date: 01/19/2001
• Status: Expired due to Term

• Current Assignee: Mastercard Mobile Transactions Solutions, Inc. (MasterCard Incorporated)
• Original Assignee: Mastercard Mobile Transactions Solutions, Inc. (MasterCard Incorporated)
• Inventors: Pitroda, Satyan G., Desai, Mehul
• Primary Examiner(s): Coppola, Jacob C.
• Application Number:
  US13/168,812
• Publication Number:
  US 20120005080A1
• Time in Patent Office: 1,593 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/045 using payment protocols involving tickets
• CPC Class Codes: G06Q 20/047 using payment protocols involving electronic receipts
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/145 Payments according to the detected use or quantity
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 : Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 : Transaction verification
• CPC Class Codes: G06Q 20/4014 : Identity check for transactions
• CPC Class Codes: G06Q 20/42 : Confirmation, e.g. check or permission by the legal debtor of payment
• CPC Class Codes: G06Q 2220/00 : Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/06 : Buying, selling or leasing transactions
• CPC Class Codes: G16H 10/60 : for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16Z 99/00 : Subject matter not provided for in other main groups of this subclass
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 : for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0838 : using one-time-passwords

Abstract

Methods and systems are provided for supporting electronic transactions, including transactions that are provided with per-user, per-device and per-domain security across domains of multiple service providers.

Claims

1. A method, comprising:

configuring a handheld device with multiple electronic transaction facilities, thereby establishing an electronic transaction facility cluster for interacting with a main service facility server;

configuring a family of servers comprising at least one of a first server for a card issuer service provider and a second server for a transaction acquirer service provider, thereby establishing a service cluster for interacting with the main service facility server;

downloading electronic transaction facility software that includes the main service facility server'"'"'s public security credentials to the handheld device;

authenticating at least one of the multiple electronic transaction facilities of the electronic transaction facility cluster and relating the at least one of the multiple electronic transaction facilities to an owner by the downloaded electronic transaction facility software transmitting electronic transaction facility software-specific keys and a user provided one-time activation code to the main service facility server during an electronic transaction facility registration process; and

updating the electronic transaction facility with a service provider'"'"'s security and authentication credentials provided by a server of the service cluster in response to a user opting to avail a service of the service provider, thereby enabling the electronic transaction facility cluster to securely communicate directly with the service provider server of the service cluster;

wherein updating the electronic transaction facility with a service provider'"'"'s security and authentication credentials comprises;

encrypting a serviceid, the one-time activation code, and the service provider'"'"'s public encryption key;

sending the encrypted data to the service provider'"'"'s server;

receiving encryption and signing keys from the service provider'"'"'s server;

generating a signing key-pair for the service provider'"'"'s server;

sending a certification request for the generated key-pair to the service provider'"'"'s server; and

acknowledging registration to facilitate activating an electronic transaction facility account on the service provider'"'"'s server.

2. The method of claim 1 further comprising introducing an electronic transaction facility of the electronic transaction facility cluster to the main service facility server that includes the main service facility server authenticating the user and delivering the electronic transaction facility software.

3. The method of claim 1 wherein authenticating at least one of the multiple electronic transaction facilities of the electronic transaction facility cluster comprises a device registration process performed with the downloaded electronic transaction facility server software that comprises:

encrypting an owner username, the one-time activation code, and the main service facility server public security credentials;

sending the encrypted data to the main service facility server;

receiving encryption and signing keys from the main service facility server;

generating an encryption key-pair and signing key-pair;

sending a certification request for each generated key-pair to the main service facility sever; and

acknowledging completion of the device registration process to facilitate activating an electronic transaction facility account on the server.

4. The method of claim 1 wherein downloading an electronic transaction facility software is in response to a user introducing an electronic transaction facility-based device to the main service facility server.

5. The method of claim 1 further comprising establishing initial trust of at least one of the service cluster servers to facilitate inter-server communication among the main service facility and the at least one of the service cluster servers by installing the at least one of the servers of the family of servers security certificates as a trusted SSL/HTTPS credential.

6. The method of claim 1 wherein configuring a plurality of electronic transaction facilities on a handheld device establishes a first cluster for interacting with a main service facility server.