SYSTEM AND METHOD FOR INCREASING SECURITY IN INTERNET TRANSACTIONS
Increasing security of financial transactions conducted over the Internet is disclosed. In an example, an apparatus may be configured to prompt a user for authorization to permit a pending purchase initiated by a purchase initiating device. The apparatus may establish, via a mobile network interface, a secure communication channel with a server and communicate a credential via the secure communication channel. The apparatus may generate a token based on the credential and communicate the token to the server via the mobile network interface.
1 . An apparatus for use in association with a purchase initiating device not having a secure element, the apparatus comprising:
a processor;
a mobile network interface;
an apparatus secure element storing a credential; and
a memory storing computer readable instructions that, when executed by the processor, cause the apparatus at least to perform:
prompting a user for authorization to permit a pending purchase initiated by the purchase initiating device;
establishing, via the mobile network interface, a secure communication channel with a server;
communicating the credential via the secure communication channel;
generating a token based on the credential; and
communicating the token to the server via the mobile network interface.
2 . The apparatus of claim 1 , wherein the apparatus secure element stores a plurality of credentials.
3 . The apparatus of claim 2 , wherein the computer readable instructions, when executed by the processor, cause the apparatus to receive a selection of a particular one of the plurality of credentials.
4 . The apparatus of claim 1 , wherein the generating of the token is based upon:
at least one of Track 1 data and Track 2 data of a credit card; and
a key.
5 . The apparatus of claim 4 , wherein the key is one of a symmetric key and an asymmetric key.
6 . The apparatus of claim 1 , wherein the generating of the token is based upon a counter value.
7 . The apparatus of claim 1 , wherein the computer readable instructions, when executed by the processor, cause the apparatus to communicate information along with the token to enable the server to recreate the token.
8 . The apparatus of claim 1 , wherein the computer readable instructions, when executed by the processor, cause the apparatus to:
receive a link via the mobile network interface to initiate the prompting of the user for authorization to permit the pending purchase; and
authenticate the link.
9 . The apparatus of claim 8 , wherein the computer readable instructions, when executed by the processor, cause the apparatus to present the link for user selection subsequent to authenticating the link.
10 . A method comprising:
prompting a user for authorization to permit a pending purchase initiated by a purchase initiating device not having a secure element;
establishing, via a mobile network interface of a device, a secure communication channel with a server;
communicating a credential stored by a secure element of the device via the secure communication channel;
generating, by a processor of the device, a token based on the credential; and
communicating the token to the server via the mobile network interface.
11 . The method of claim 10 , wherein the generating of the token is based upon:
at least one of Track 1 data and Track 2 data of a credit card; and
a key.
12 . The method of claim 10 , wherein the generating of the token is based upon a counter value.
13 . The method of claim 10 , further comprising communicating information along with the token to enable the server to recreate the token.
14 . The method of claim 10 , further comprising:
receiving a link via the mobile network interface to initiate prompting of the user for authorization to permit the pending purchase; and
authenticating the link.
15 . The method of claim 14 , further comprising presenting the link for user selection subsequent to authenticating the link.
16 . A non-transitory computer readable medium storing computer executable instructions that, when executed, cause an apparatus at least to perform:
prompting a user for authorization to permit a pending purchase initiated by a purchase initiating device not having a secure element;
establishing, via a mobile network interface of the apparatus, a secure communication channel with a server;
communicating a credential stored by a secure element of the apparatus via the secure communication channel;
generating a token based on the credential; and
communicating the token to the server via the mobile network interface.
17 . The non-transitory computer readable medium of claim 16 , wherein the generating of the token is based upon:
at least one of Track 1 data and Track 2 data of a credit card; and
a key.
18 . The non-transitory computer readable medium of claim 16 , wherein the generating of the token is based upon a counter value.
19 . The non-transitory computer readable medium of claim 16 , wherein the computer executable instructions, when executed, cause the apparatus to communicate information along with the token to enable the server to recreate the token.
20 . The non-transitory computer readable medium of claim 16 , wherein the computer executable instructions, when executed, cause the apparatus to:
receive a link via the mobile network interface to initiate prompting of the user for authorization to permit the pending purchase;
authenticate the link; and
present the link for user selection subsequent to authenticating the link.
21 . A system comprising:
a purchase initiating device having a user interface for receiving a selection indicative of intent to purchase at least one item, the purchase initiating device not having a secure element; and
a mobile device comprising:
a processor;
a mobile network interface;
a device secure element storing a credential; and
a memory storing computer readable instructions that, when executed by the processor, cause the mobile device at least to perform:
prompting a user for authorization to permit a pending purchase initiated by the purchase initiating device;
establishing, via the mobile network interface, a secure communication channel with a server;
communicating the credential via the secure communication channel;
generating a token based on the credential; and
communicating the token to the server via the mobile network interface.
22 . The system of claim 21 , wherein the generating of the token is based upon at least one of:
at least one of Track 1 data and Track 2 data of a credit card;
a key; and
a counter value.
23 . The system of claim 21 , wherein the computer readable instructions, when executed, cause the mobile device to communicate information along with the token to enable the server to recreate the token.
24 . The system of claim 21 , wherein the computer readable instructions, when executed, cause the mobile device to:
receive a link via the mobile network interface to initiate prompting of the user for authorization to permit the pending purchase;
authenticate the link; and
present the link for user selection subsequent to authenticating the link.