Verification methods and apparatus for use in providing application services to mobile communication devices

Patent metadata

Field	Value
Publication number	US-8954744-B2
Application number	US-201313745021-A
Country	US
Kind code	B2
Filing date	Jan 18, 2013
Priority date	Dec 9, 2008
Publication date	Feb 10, 2015
Grant date	Feb 10, 2015

Abstract

A technique in a mobile device which is configured to communicate in a wireless network with use of a communication service provided by a service provider is described. The mobile device is configured to access via the wireless network a server for execution of an e-commerce transaction. The server is configured to administer a proof-of-work test in order to allow completion of the e-commerce transaction. The mobile device receives via the wireless network a token from a token server. The token is digitally signed by the service provider with a digital signature thereof. The mobile device sends via the wireless network a message to the server, and this message includes the token. When token validation of the message at the server is successful, the mobile device completes the e-commerce transaction with the server without performing the proof-of-work test, which is bypassed for the mobile device.

First claim

The invention claimed is:

1. A method in a mobile device which is configured to communicate in a wireless network with use of a communication service provided by a service provider, the mobile device being further configured to access via the wireless network a server for execution of an e-commerce transaction, the server being further configured to administer a proof-of-work test in order to allow completion of the e-commerce transaction, the method comprising:
receiving via the wireless network a token from a token server, the token being digitally signed by the token server with a digital signature generated with a private key of the service provider;
sending via the wireless network a message to the server, the message including the token; and
when token validation of the message at the server is successful, completing the e-commerce transaction with the server without performing the proof-of-work test which is bypassed for the mobile device.

2. The method of claim 1 , wherein the proof-of-work test comprises a Captcha test.

3. The method of claim 1 , further comprising:
gaining access to the communication service prior to receiving the token, by causing authentication credentials to be sent via the wireless network for authentication by the service provider.

4. The method of claim 1 , wherein the communication service of the service provider is a voice telephony service or a data communication service for communications provided via the wireless network.

5. The method of claim 1 , wherein the service provider is a wireless carrier for the voice telephony service for the mobile communication device.

6. The method of claim 1 , wherein the service provider is a data service provider which provides a data synchronization service for the mobile device for the synchronization of data items of the mobile device with data items at a host server.

7. The method of claim 1 , wherein the token includes an identifier which identifies the service provider.

8. The method of claim 1 wherein the token includes a timestamp and the token validation includes a test of whether the timestamp is within a predetermined time period of a current time of receipt of the message.

9. A mobile device configured to communicate in a wireless network to access a server for execution of an e-commerce transaction, the server being configured to administer a proof-of-work test in order to allow completion of the e-commerce transaction service, the mobile device comprising:
one or more processors;
memory coupled to the one or more processors;
a wireless transceiver coupled to the one or more processors and being configured for communications via the wireless network utilizing a communication service provided by a service provider;
the one or more processors being configured to:
receive via the wireless transceiver a token from a token server, the token being digitally signed by the token server with a digital signature generated with a private key of the service provider;
send via the wireless transceiver a message to the server, the message including the token; and
when token validation of the message at the server is successful, complete the e-commerce transaction with the server without performing the proof-of-work test which is bypassed for the mobile device.

10. The mobile device of claim 9 , wherein the proof-of-work test comprises a Captcha test.

11. The mobile device of claim 9 , wherein the one or more processors are configured to access the communication service by causing authentication credentials of the mobile device to be sent to the wireless network for authentication by the service provider.

12. The mobile communication device of claim 9 , wherein the service provider is a data service provider which provides a data synchronization service for the mobile communication device for the synchronization of data items of the mobile device with data items at a host server.

13. A method in a server which is configured to execute an e-commerce transaction for a mobile device which communicates in a wireless network with use of a communication service provided by a service provider, the server being further configured to administer a proof-of-work test in order to allow completion of the e-commerce transaction, the method comprising:
receiving via the wireless network a message from the mobile device, the message having a field for inclusion of a token which is digitally signed by a token server with a digital signature generated with a private key of the service provider;
performing token validation of the message, which includes a verification step for verifying the digital signature of the token with a public key corresponding to the service provider; and
when the token validation is successful, then bypassing execution of the proof-of-work test for the mobile device for completion of the e-commerce transaction.

14. The method of claim 13 , wherein the proof-of-work test comprises a Captcha test.

15. The method of claim 13 , wherein the token includes an identifier which identifies the service provider.

16. The method of claim of 13 , wherein performing the token validation of the message includes testing whether a timestamp of the token is within a predetermined time period of a current time of receipt of the message.

17. The method of claim 13 , wherein the communication service of the service provider is a voice telephony service or a data communication service for communications provided via the wireless network.

18. The method of claim 13 , wherein the service provider is a wireless carrier for the voice telephony service for the mobile communication device.

19. The method of claim 13 , wherein the service provider is a data service provider which provides a data synchronization service for the mobile device for the synchronization of data items of the mobile device with data items at a host server.

Assignees

• Blackberry Ltd

Inventors

• Sherkin Alexander
• Franco Will D

Classifications

• G06F21/33 Primary

  using certificates · CPC title

• G06Q20/3226 Primary

  Use of secure elements separate from M-devices · CPC title