Patent Application

App. No. 14/587,649

Abstract

Claims (63)

1 . A system comprising:

an electronic commerce server connected to a network and including:

a storage medium storing user profiles, device profiles and public keys; and

a communication module configured to:

receive transaction details including a first digital signature from a mobile device storing a first private key associated with a first public key;

generate a challenge based on the transaction details;

transmit, according to a device profile of the mobile device or a user profile of a user of the mobile device, the challenge to at least one computing device storing a second private key associated with a second public key; and

receive a response to the challenge from the at least one computing device, the response including a second digital signature; and

an authentication module configured to authorize the transaction based on the first digital signature, the first public key, the second digital signature and the second public key.

2 . The system of claim 1 , wherein:

the mobile device includes a mobile encryption module configured to generate the first digital signature using the first private key; and

the at least one computing device includes an encryption module configured to generate the second digital signature using the second private key.

3 . The system of claim 2 , wherein:

the mobile encryption module is configured to encrypt the transaction details using the first private key;

the encryption module is configured to encrypt the response using the second private key; and

the authentication module is configured to decrypt the transaction details using the first public key and to decrypt the response using the second public key.

4 . The system of claim 1 , wherein:

the communication module is further configured to transmit the challenge to the at least one computing device based on the at least one computing device being located within a specified distance of the mobile device; and

the at least one computing device is configured to transmit the response to the challenge based on being located within the specified distance of the mobile device.

5 . The system of claim 4 , wherein the communication module is further configured to request a response to the challenge from a user of the at least one computing device based on the at least one computing device not being located within the specified distance of the mobile device.

6 . The system of claim 2 , wherein:

the authentication module is further configured to encrypt the challenge using the second public key; and

the encryption module is configured to decrypt the challenge using the second private key.

7 . The system of claim 1 , wherein:

the authentication module is further configured to authorize a transaction beyond a specified transaction limit indicated by the device profile of the mobile device or the user profile of the user of the mobile device; and

the transaction limit is for limiting at least one of: a time of the transaction, a location of the transaction, a cost of the transaction, or a category of the transaction.

8 . A method comprising:

receiving, at a server, transaction details including a digital signature from a mobile device, the digital signature generated using a first private key associated with a first public key;

generating a challenge based on the transaction details;

transmitting the challenge to at least one computing device according to device data associated with the mobile device or user data associated with the user of the mobile device;

receiving a response to the challenge from the at least one computing device, the response including a digital signature generated using a second private key associated with a second public key; and

authorizing the transaction based on the first digital signature, the first public key, the second digital signature and the second public key.

9 . The method of claim 8 , further comprising:

encrypting, by the mobile device, the transaction details using the first private key;

encrypting, by the at least one computing device, the response using the second private key;

decrypting, by the server, the encrypted transaction details using the first public key and the response using the second public key.

10 . The method of claim 8 , further comprising:

transmitting the challenge to the at least one computing device based on the at least one computing device being located within a specified distance of the mobile device; and

transmitting the response to the server based on the at least one computing device being located within the specified distance of the mobile device.

11 . The method of claim 10 , further comprising:

requesting a response to the challenge from a user of the at least one computing device based on the at least one computing device not being located within the specified distance of the mobile device.

12 . The method of claim 8 , further comprising:

encrypting the challenge, by the server, using the second public key; and

decrypting the challenge, by the at least one computing device using the second private key.

13 . The method of claim 8 , further comprising authorizing a transaction beyond a specified transaction limit associated with the mobile device or the user of the mobile device.

14 . The method of claim 13 , wherein the transaction limit is for limiting at least one of: a time of the purchase transaction, a location of the transaction, a cost of the transaction, or a category of the transaction.

15 . A non-transitory machine-readable storage device storing a set of instructions which, in response to execution by processors of machines, cause the machines to perform operations comprising:

receiving transaction details including a digital signature from a mobile device, the digital signature generated using a first private key associated with a first public key;

generating a challenge based on the transaction details;

transmitting the challenge to at least one computing device according to device data associated with the mobile device or user data associated with the user of the mobile device;

receiving a response to the challenge from the at least one computing device, the response including a digital signature generated using a second private key associated with a second public key; and

authorizing the transaction based on the first digital signature, the first public key, the second digital signature and the second public key.

16 . The machine-readable storage device of claim 15 , the operations further comprising:

encrypting, by the mobile device, the transaction details using the first private key;

encrypting, by the at least one computing device, the response using the second private key;

decrypting the encrypted transaction details using the first public key and the response using the second public key.

17 . The machine-readable storage device of claim 15 , the operations further comprising:

transmitting the challenge to the at least one computing device based on the at least one computing device being located within a specified distance of the mobile device; and

transmitting the response based on the at least one computing device being located within the specified distance of the mobile device.

18 . The machine-readable storage device of claim 17 , the operations further comprising:

requesting a response to the challenge from a user of the at least one computing device based on the at least one computing device not being located within the specified distance of the mobile device.

19 . The machine-readable storage device of claim 15 , the operations further comprising authorizing a transaction beyond a specified transaction limit associated with the mobile device or the user of the mobile device.

20 . The machine-readable storage device of claim 19 , wherein the transaction limit is for limiting at least one of: a time of the transaction, a location of the transaction, a cost of the transaction, or a category of the transaction.

Assignments (8)