Apparatuses, methods and systems for computer-based secure transactions

Patent metadata

Field	Value
Publication number	US-10108953-B2
Application number	US-201313861701-A
Country	US
Kind code	B2
Filing date	Apr 12, 2013
Priority date	Apr 13, 2012
Publication date	Oct 23, 2018
Grant date	Oct 23, 2018

Abstract

The systems, methods and apparatuses described herein provide a computing environment for completing a secure transaction. An apparatus according to the present disclosure may comprise a screen, a first switching device coupled to the screen, an input device, a second switching device coupled to the input device, a non-secure processor, a secure processor and a credit card reader operatively coupled to the secure processor. The non-secure processor may generate a message containing a purchase transaction request. The secure processor may receive the message, assume control of the screen and input device while the apparatus is operating in a secure mode, establish a secure connection with a server, receive payment information to be submitted to the server, digitally sign certain transaction information and submit the digitally signed certain transaction information to the server to complete the secure transaction.

First claim

What is claimed is:

1. A computing device comprising:
a screen;
a user input device;
a first switching device coupled to the screen;
a second switching device coupled to the user input device;
a non-secure processor configured to generate a message containing a secure transaction request;
a secure processor configured to:
receive the message containing the secure transaction request;
send an instruction to the first switching device to operationally connect the screen to the secure processor and to operationally disconnect the screen from the non-secure processor while the computing device is operating in a secure mode;
send an instruction to the second switching device to operationally connect the user input device to the secure processor and to operationally disconnect the user input device from the non-secure processor while the computing device is operating in the secure mode;
establish a secure connection with a server according to an encryption algorithm, wherein data packets communicated via the secure connection are encrypted according to the encryption algorithm;
receive a certificate of the server and authenticate the certificate;
display at least a subset of information from the certificate on a predefined or predesignated area of the screen until the secure transaction is completed or aborted;
receive transaction details from the server and display them on the screen;
receive confirmation that the certificate and transaction details correspond to expected information;
receive payment information to be submitted to the server;
digitally sign certain transaction information; and
send the digitally signed certain transaction information to the server;
return the computing device to a non-secure mode of operation upon completing the secure transaction; and

a credit card reader operatively connected to the secure processor.

2. The computing device of claim 1 , wherein the credit card reader is not connected to the non-secure processor.

3. The computing device of claim 1 , wherein the non-secure processor is configured to execute an operating system and one or more applications to run on the operating system.

4. The computing device of claim 1 , wherein the message is provided by an application running on the non-secure processor.

5. The computing device of claim 1 , wherein the certain transaction information comprises at least one of a currency of the secure transaction, an amount of the secure transaction, and an identity of a merchant displayed on the screen.

6. The computing device of claim 1 , wherein the certain transaction information comprises an identity of a merchant.

7. The computing device of claim 1 , wherein the certain transaction information comprises the transaction details displayed on the screen.

8. The computing device of claim 1 , further comprising an indicator to be activated when the computing device is operating in the secure mode.

9. The computing device of claim 1 , wherein the secure processor is configured to digitally sign the certain transaction information by transmitting a request to the credit card reader to digitally sign the certain transaction information and receiving the digitally signed certain transaction information from the credit card reader.

10. The computing device of claim 1 , wherein the secure processor is further configured to display on the screen an identity image contained in the certificate when the computing device is operating in the secure mode.

11. The computing device of claim 10 , wherein the identity image is displayed in the predefined or pre-designated portion of the screen while the computing device is operating in the secure mode.

12. The computing device of claim 1 , wherein the non-secure processor is coupled to a television signal processing unit in a non-secure zone and the message is generated by the television signal processing unit.

13. A computer-implemented method for performing a transaction in a secure mode by a computing device comprising a secure processor and a non-secure processor, the method comprising:
receiving, at the secure processor, a message containing a secure transaction request;
generating, by the secure processor, an instruction to a first switching device to operationally connect a screen to the secure processor and to operationally disconnect the screen from the non-secure processor while the computing device is operating in the secure mode;
generating, by the secure processor, an instruction to a second switching device to operationally connect an input device to the secure processor and to operationally disconnect the input device from the non-secure processor while the computing device is operating in the secure mode;
establishing, by the secure processor, a secure connection with a server according to an encryption algorithm, wherein data packets communicated via the secure connection are encrypted according to the encryption algorithm;
receiving, by the secure processor, a certificate of the server and authenticate the certificate;
displaying, by the display, at least a subset of information from the certificate on a predefined or predesignated area of the screen until the secure transaction is completed or aborted, wherein the at least the subset comprises an identity image;
receiving, by the secure processor, transaction details from the server and display them on the screen;
receiving, by the secure processor, a confirmation that the certificate and transaction details correspond to expected information;
receiving, by the secure processor, payment information to be submitted to the server;
digitally signing, by the secure processor, certain transaction information;
sending, by the secure processor, the digitally signed certain transaction information to the server; and
returning, by the secure processor, the computing device to a non-secure mode of operation upon completing the secure transaction.

14. The computer-implemented method of claim 13 , further comprising executing an operating system on the non-secure processor and one or more applications to run on the operating system.

15. The computer-implemented method of claim 14 , wherein the message is provided by the non-secure processor.

16. The computer-implemented method of claim 13 , wherein the certain transaction information comprises at least one of a currency of the secure transaction, an amount of the secure transaction, and an identity of a merchant as displayed on the screen.

17. The computer-implemented method of claim 13 , wherein the certain transaction information comprises the transaction details displayed on the screen.

18. The computer-implemented method of claim 13 , further comprising activating an indicator indicative of the secure mode.

19. The computer-implemented method of claim 13 , wherein the digitally signing the certain transaction information further comprises:
transmitting a request to a credit card reader to digitally sign the certain transaction information; and
receiving the digitally signed certain transaction information from the credit card reader.

20. The computer-implemented method of claim 13 , further comprising displaying an identity image contained in the certificate on the screen.

21. The computer-implemented method of claim 20 , wherein the identity image is displayed in the predefined or pre-designated portion of the screen while in the secure mode.

22. The computer-implemented method of claim 13 , wherein the message is generated

Assignees

• Ologn Technologies Ag

Inventors

• Ignatchenko Sergey
• Ivanchykhin Dmytro

Classifications

• G06Q20/3227 Primary

  using secure elements embedded in M-devices · CPC title

• G06Q20/3823

  combining multiple encryption tools for a transaction · CPC title

• G06Q20/3825

  Use of electronic signatures · CPC title

• G06Q20/38215

  Use of certificates or encrypted proofs of transaction rights · CPC title

• G06F21/74

  operating in dual or compartmented mode, i.e. at least one secure mode · CPC title