Method for Authorizing a Transaction

Patent metadata

Field	Value
Publication number	US-2016337126-A1
Application number	US-201515111895-A
Country	US
Kind code	A1
Filing date	Jan 19, 2015
Priority date	Jan 17, 2014
Publication date	Nov 17, 2016
Grant date	—

Abstract

A method for authorizing a transaction has the following steps: inputting transaction data on a first mobile device, transmitting the transaction data from the first device to a background system by means of a first over-the-air interface, transmitting in encrypted manner at least a password to a second mobile device through the intermediary of the first mobile device, and authorizing the transaction by inputting the password displayed on the second device on the first device.

First claim

1 - 10 . (canceled)

11 . A method for authorizing a transaction, having the following steps:
inputting transaction data on a first mobile device; transmitting the transaction data from the first device to a background system by means of a first over-the-air interface; requesting the input of a password on the first device in order to authorize the transaction; transmitting in encrypted manner at least the password from the background system to a second mobile device, wherein the data employed for the transmission of the password are transferred between the background system and the second mobile device in encrypted manner through the intermediary of the first mobile device, and authorizing the transaction by inputting the password displayed on the second device on the first device.

12 . The method according to claim 11 , wherein the first mobile device is a mobile phone and/or a tablet PC.

13 . The method according to claim 11 , wherein the second mobile device is a second device being in connection with the first mobile device via a second over-the-air interface.

14 . The method according claim 11 , wherein the second device is data glasses, a smartwatch and/or a body-wearable display device.

15 . The method according to claim 11 , wherein the second device and the background system exchange a cryptographic key, of which the first device has no knowledge, before the step of the encrypted transmission.

16 . The method according to claim 11 , wherein the second device and the background system set up a secure end-to-end-encrypted channel, wherein the first device has no knowledge of the key required for the encryption of the channel.

17 . The method according to claim 11 , wherein together with the password at least a part of the inputted transaction data are transmitted to the second mobile device.

18 . The method according to claim 11 , wherein the password is a one-time password.

19 . A use of a first mobile device, in particular of a mobile radio phone and/or of a tablet PC, in a method according to claim 11 for authorizing a transaction.

20 . A use of a second mobile device, in particular data glasses, a smartwatch and/or a body-wearable display device, in a method according to claim 11 for authorizing a transaction.

Assignees

• Giesecke & Devrient Gmbh

Inventors

• Gawlas Florian
• Eichholz Jan

Classifications

• G06F21/41 Primary

  where a single sign-on provides access to a plurality of computers · CPC title

• H04L63/061

  for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838) · CPC title

• G06Q20/3276

  using a pictured code, e.g. barcode or QR-code, being read by the M-device · CPC title

• H04L63/18

  using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215) · CPC title

• G06Q20/327

  Short range or proximity payments by means of M-devices · CPC title