Methods and systems for authentication for high-risk communications
US-12137102-B2 · Nov 5, 2024 · US
US2016275478A1 · US · A1
| Field | Value |
|---|---|
| Publication number | US-2016275478-A1 |
| Application number | US-201615162481-A |
| Country | US |
| Kind code | A1 |
| Filing date | May 23, 2016 |
| Priority date | Aug 31, 2008 |
| Publication date | Sep 22, 2016 |
| Grant date | — |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
A customer mobile personal point-of-sale terminal (CMPPT) includes a Point-Of-Sale (POS) sleeve portion that slidingly engages, and couples to, a cellular telephone. The cellular telephone is used to communicate encrypted information between a financial transaction verification entity (FTVE) and the POS sleeve portion. The sleeve portion includes a mechanism for reading in a merchant account number at the point-of-sale, and for communicating in a secure encrypted fashion with the FTVE via the cellular telephone portion. Rather than a customer entering sensitive financial information into a merchant's POS terminal (MPT) and trusting the merchant with such information, merchant information is entered into the CMPPT. The CMPPT initiates a transaction by sending the customer's account information and the merchant information to the FTVE. The FTVE receives information about the transaction directly from the MPT. The FTVE verifies the transaction, and after authorization, the FTVE forwards approval codes to the CMPPT and MPT.
Opening claim text (preview).
What is claimed is: 1 . A method comprising: (a) maintaining customer account information in a customer mobile personal point-of-sale terminal (CMPPT), the CMPPT including a cellular telephone portion and a point-of-sale (POS) attachment portion; (b) transporting the CMPPT to a point-of-sale when the customer account information is maintained in the CMPPT; and (c) using the CMPPT to initiate a transaction while the CMPPT is located at the point-of-sale, wherein the customer account information is communicated from the CMPPT to a financial transaction verification entity (FTVE) in a secure fashion without the customer account information being communicated to a merchant, wherein the transaction involves the merchant and a customer, and wherein the maintaining of (a), the transporting of (b) and the using of (c) are performed by the customer. 2 . The method of claim 1 , further comprising: (d) receiving information about the merchant into the CMPPT at the point-of-sale, wherein the information about the merchant is used in (c) to initiate the transaction. 3 . The method of claim 1 , wherein the point-of-sale attachment portion includes a secure memory and an anti-tamper mesh, wherein the secure memory stores at least one encryption key, and wherein said at least one encryption key is used to engage in a secure communication with the FTVE. 4 . A method comprising: (a) receiving customer account information from a customer mobile personal point-of-sale terminal (CMPPT), wherein the CMPPT is located at a point-of-sale and is in the possession of a customer; (b) using the customer account information to initiate authorization of a transaction, wherein the transaction involves the customer and a merchant; and (c) sending information about the transaction to the merchant after the transaction has been authorized, wherein steps (a), (b) and C) are performed by a financial transaction verification entity (FTVE). 5 . An apparatus, comprising: a cellular telephone portion; and a point-of-sale attachment portion that is attached to the cellular telephone portion, the point-of-sale attachment portion comprising: a secure memory that stores customer account information; a mechanism for receiving merchant account information into the point-of sale attachment portion when the secure memory is storing the customer account information; and secure circuitry that communicates the customer account information and the merchant account information to the cellular telephone portion in encrypted form. 6 . An apparatus, comprising: a cellular telephone portion; and means, fixed to the cellular telephone portion, for receiving merchant account information when the means stores customer account information, the means also being for communicating the merchant account information and the customer account information to the cellular telephone portion in encrypted form. 7 . The apparatus of claim 6 , wherein the means includes a secure memory that stores an encryption key, the secure memory being substantially covered by an anti-tamper mesh, wherein the means is also for using the encryption key to encrypt the merchant account information and the customer account information. 8 . The apparatus of claim 7 , wherein the means is for receiving personal identification information from the cellular telephone portion, and wherein the means is also for checking the personal identification information to confirm that the apparatus is being used by an authorized user.
Use of secure elements separate from M-devices · CPC title
comprising security or operator identification provisions, e.g. password entry · CPC title
Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR · CPC title
involving key management · CPC title
Passive cards · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.