Protecting transactions

Patent metadata

Field	Value
Publication number	US-9904912-B2
Application number	US-201514730081-A
Country	US
Kind code	B2
Filing date	Jun 3, 2015
Priority date	Jan 23, 2009
Publication date	Feb 27, 2018
Grant date	Feb 27, 2018

Abstract

Technology is described for protecting transactions. The technology may include a switching component that a user can employ to switch an associated mobile device into a secure mode so that a user can confirm the transaction. After initiating a transaction request, the user can confirm the transaction request by activating the switching component, which can cause the mobile device to switch into a secure mode. In the secure mode, the mobile device may prevent the mobile device from conducting various normal activities, such as executing applications, receiving input, providing output, and so forth. The switching component may disable other processing temporarily. Upon receiving the confirmation from the user, the switching component may send a confirmation communication to complete the transaction.

First claim

We claim:

1. A system for protecting a transaction, comprising:
a memory;
one or more processors;
a transceiver configured to:
receive an indication of the transaction from a client computing device;
send a communication to the client computing device, the communication indicating a challenge,
wherein the challenge is configured to cause the client computing device to disable an unsecure processor so that a secure processor can verify the transaction, and
wherein the secure processor and the unsecure processor differ in at least a set of input/output connections included for each processor, such that the secure processor has a comparatively smaller attack surface due to having fewer input/output connections than the unsecure processor; and

receive a confirmation of the transaction; and

a confirmation analysis component configured to verify that the confirmation includes information that satisfies the challenge.

2. The system of claim 1 , wherein the challenge includes a key, and wherein the confirmation analysis component verifies that the confirmation includes information to satisfy the challenge by verifying that the confirmation is associated with the key.

3. A method performed by a computing system for protecting a transaction, the method comprising:
initiating the transaction by sending a request from a client computing device to a server computing device;
receiving a communication from the server computing device indicating the initiated transaction;
causing the client computing device to disable an unsecure processor so that a secure processor can verify the transaction,

wherein the secure processor and the unsecure processor differ in at least a set of input/output connections included for each processor, such that the secure processor has a comparatively smaller attack surface due to having fewer input/output connections than the unsecure processor.

4. The method of claim 3 further comprising:
storing, by the unsecure processor, a portion of the received communication in a shared memory; and
reading, by the secure processor, the portion of the received communication in the shared memory.

5. The method of claim 3 , wherein disabling the unsecure processor comprises disabling access to an input device of the client computing device.

6. The method of claim 3 , wherein the secure processor is only employed to authenticate or verify transactions.

7. The method of claim 3 , wherein the secure processor is embedded in a SIM card.

8. The method of claim 3 , wherein disabling the unsecure processor comprises disabling access to an output device of the client computing device.

9. The method of claim 3 wherein, when the unsecured processor is disabled, the unsecured processor continues to process other processing threads not related to verifying the transaction.

10. The method of claim 3 further comprising disabling execution of an application executing on the client computing device.

11. The method of claim 3 further comprising:
requesting a confirmation of the transaction;
receiving the confirmation of the transaction; and
transmitting a confirmation message to the server computing device;

wherein the challenge includes an indication that a secure computing environment should confirm the challenge.

12. The method of claim 11 , wherein requesting a confirmation of the transaction comprises one or more of: a light notification to a user, a vibration notification to the user, an internal signal that is automatically handled by the client computing device, or any combination thereof.

13. The method of claim 11 , wherein the confirmation of the transaction comprises one or more of: a user actuating a button, a user actuating a switch, a user actuating a control displayed on a display component, an automatic response from the client computing device, or any combination thereof.

14. The method of claim 11 , wherein the communication from the server includes a key that the client device uses to create the confirmation message.

15. The method of claim 11 , wherein the indication includes an identification of a required level of security.

16. The method of claim 15 , wherein the communication from the server computing device includes a challenge that is based on the required level of security.

17. A computer-readable storage medium storing instructions that, when executed by a computing system, cause the computing system to perform operations for protecting a transaction, the operations comprising:
receiving an indication of the transaction from a client computing device;
sending a communication to the client computing device, the communication indicating a challenge,
wherein the challenge is configured to cause the client computing device to disable an unsecure processor and verify the transaction with a secure processor, and
wherein the secure processor and the unsecure processor differ in at least a set of input/output connections included for each processor, such that the secure processor has a comparatively smaller attack surface due to having fewer input/output connections than the unsecure processor;

receiving a confirmation of the transaction; and
verifying that the confirmation includes information to satisfy the challenge.

18. The computer-readable storage medium of claim 17 ,
wherein the challenge includes a key; and
wherein verifying that the confirmation includes information to satisfy the challenge includes verifying that the confirmation is associated with the key.

19. The computer-readable storage medium of claim 17 , wherein, when the unsecured processor is disabled, the unsecured processor continues to process other processing threads not related to verifying the transaction.

20. The computer-readable storage device of claim 17 , wherein the received confirmation was generated at the client computing device in response to one or more of: a user actuating a button, a user actuating a switch, a user actuating a control displayed on a display component, an automatic response to the challenge from the client computing device, or any combination thereof.

Assignees

• Microsoft Technology Licensing Llc

Inventors

• Steeves David J
• Cameron Kim
• Carpenter Todd L
• Foster David
• Miller Quentin S
• Hartrell Gregory D

Classifications

• G06Q20/027 Primary

  involving a payment switch or gateway · CPC title

• G06Q20/40

  Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L2463/102

  applying security measure for e-commerce · CPC title

• G06F21/74

  operating in dual or compartmented mode, i.e. at least one secure mode · CPC title