Granted Patent B2

US 12,217,253 · App. 17/313,139 · Granted Feb 4, 2025

Inventors: Mohamed Zouhaier Ramadhane (Azcapotzalco, MX); Cesar Augusto Rodriguez Bravo (Alajuela, CR); Susanna Ting (Markham, CA); Juan Manuel Avalos Vega (Zapopan, MX); Daniela Ofelia Rojas Barrientos (Naucalpan de Juarez, MX)

Assignee: International Business Machines Corporation

G06Q20/385G06F21/45G06K7/1417G06K19/06037G06K19/06112G06Q20/208G06Q20/3274G06Q20/3276G06Q20/3674G06Q20/3821G06Q20/3829G06Q20/405H04L63/0823H04L63/0846H04L63/0853G06Q20/326

Abstract

Claims (76)

1. A computer-implemented method comprising:

registering, by a backend server, a user and a second device associated with the user for an offline transaction privilege of the user associated with a user identifier, by generating a public certificate of the user and sharing the public certificate with a first device;

storing a user certificate associated with the user identifier in a local repository of the first device;

receiving, by the first device, a request from the registered user associated with the registered second device;

sending, by the first device to the registered second device, information in an optically recognizable first code including an identity of the first device and a type of optical reader associated with the first device;

generating, by the second device, encoded information in an optically recognizable second code generated using information including the optically recognizable first code, a one-time password seed, and the type of optical reader associated with the first device, and further the optically recognizable second code being generated using the information including an identity of the second device, the user certificate associated with the user identifier, and a one-time password generated using a private key of the registered second device and the one-time password based on the one-time password seed;

receiving at the first device, the optically recognizable second code;

decoding the encoded information in the optically recognizable second code, the decoding including extracting, by a transaction module of the first device including one or more processors, the user identifier and the one-time password associated with the registered second device;

in response to a determination the backend server is unreachable for electronic communication by the transaction module of the first device, determining that the user certificate exists in the local repository of the first device;

validating, by the transaction module of the first device, the one-time password associated with the registered second device with the user certificate using the public certificate associated with the first device, the one-time password associated with the registered second device and the one-time password seed; and

authenticating, by the transaction module, the user.

2. The computer-implemented method of claim 1 , further comprising:

validating, by the one or more processors, an associated transaction using a set of predetermined business rules;

in response to validating the associated transaction, registering, by the one or more processors, the associated transaction;

storing, by the one or more processors, information associated with the associated transaction including updated local information associated with the user including the associated transaction and a new balance as evidence; and

in response to a determination the backend is online, sending, by the one or more processors, the associated transaction to the backend server.

3. The computer-implemented method of claim 1 , further comprising:

in response to a determination the backend is online, initiating, by the one or more processors, a process on the backend to authenticate the user and validate an associated transaction by sending information to the backend including, the one-time password seed, the user identifier, the one-time password associated with the registered second device and additional information associated with the associated transaction; and

receiving, by the one or more processors, a status of the associated transaction from the backend server.

4. The computer-implemented method of claim 1 , further comprising:

in response to a determination the backend server is not online, determining, by one or more processors, that an amount of an associated transaction does not exceed a predetermined offline limit; and

in response to a determination the amount of the associated transaction does not exceed the predetermined offline limit, determining, by one or more processors, whether the user certificate associated with the user identifier exists in the local repository.

5. The computer-implemented method of claim 1 , wherein sending information in an optically recognizable first code includes generating the information in the optically recognizable first code.

6. The computer-implemented method of claim 1 , wherein the optically recognizable first code is selected from the group consisting of: a quick response (QR) code and a bar code.

7. The computer-implemented method of claim 1 , wherein an associated transaction is a mobile wallet payment.

8. A computer program product comprising:

one or more computer readable storage media, and program instructions collectively stored on the one or more computer readable storage media, the program instructions comprising:

program instructions to register, by a backend server, a user and a second device associated with the user for an offline transaction privilege of the user associated with a user identifier, by generating a public certificate of the user and sharing the public certificate with a first device;

program instructions to store a user certificate associated with the user identifier in a local repository of the first device;

program instructions to receive, by the first device, a request from the registered user associated with the registered second device;

send, by the first device, information in an optically recognizable first code including an identity of the first device and a type of optical reader associated with the first device;

generating, by the second device, encoded information in an optically recognizable second code generated using information including the optically recognizable first code, a one-time password seed, and the type of optical reader associated with the first device, and further the optically recognizable second code being generated using the information including an identity of the second device, the user certificate associated with the user identifier, and a one-time password generated using a private key of the registered second device and the one-time password based on the one-time password seed;

program instructions to receive at the first device, the optically recognizable second code;

program instructions to, to decode the encoded information in the optically recognizable second code, the decoding including extracting, by a transaction module of the first device, the user identifier and the one-time password associated with the registered second device;

program instructions to, in response to a determination the backend server is unreachable for electronic communication by the transaction module of the first device, determine that a user certificate exists in the local repository of the first device;

program instructions to validate by the transaction module of the first device, the one-time password associated with the registered second device with the user certificate using the public certificate associated with the first device, the one-time password associated with the registered second device and the one-time password seed; and

program instructions to authenticate, using the transaction module, the user.

9. The computer program product of claim 8 , further comprising:

program instructions to validate an associated transaction using a set of predetermined business rules;

program instructions to, in response to validating the associated transaction, register the associated transaction;

program instructions to store information associated with the associated transaction including updated local information associated with the user including the associated transaction and a new balance as evidence; and

program instructions to, in response to a determination the backend is online, send the associated transaction to the backend server.

10. The computer program product of claim 8 , further comprising:

program instructions to, in response to a determination the backend is online, initiate a process on the backend to authenticate the user and validate an associated transaction by sending information to the backend including, the one-time password seed, the user identifier, the one-time password associated with the registered second device and additional information associated with the associated transaction; and

program instructions to receive a status of the associated transaction from the backend server.

11. The computer program product of claim 8 , further comprising:

program instructions to, in response to a determination the backend server is not online, determine that an amount of an associated transaction does not exceed a predetermined offline limit; and

program instructions to, in response to a determination the amount of the associated transaction does not exceed the predetermined offline limit, determine whether the user certificate associated with the user identifier exists in the local repository.

12. The computer program product of claim 8 , wherein program instructions to send information in an optically recognizable first code include program instructions to generate the information in the optically recognizable first code.

13. The computer program product of claim 8 , wherein the optically recognizable first code is selected from the group consisting of: a QR code and a bar code.

14. The computer program product of claim 8 , wherein an associated transaction is a mobile wallet payment.

15. A computer system comprising:

one or more computer processors, one or more computer readable storage media, and program instructions stored on the one or more computer readable storage media for execution by at least one of the one or more computer processors, the program instructions comprising:

program instructions to register, by a backend server, a user and a second device associated with the user for an offline transaction privilege of the user associated with a user identifier, by generating a public certificate of the user and sharing the public certificate with a first device;

program instructions to store a user certificate associated with the user identifier in a local repository of the first device;

program instructions to receive, by the first device, a request from the registered user associated with the registered second device;

send, by the first device, information in an optically recognizable first code including an identity of the first device and a type of optical reader associated with the first device;

generate, by the second device, encoded information in an optically recognizable second code generated using information including the optically recognizable first code, a one-time password seed, and the type of optical reader associated with the first device, and further the optically recognizable second code being generated using the information including an identity of the second device, the user certificate associated with the user identifier, and a one-time password generated using a private key of the registered second device and the one-time password based on the one-time password seed;

program instructions to receive at the first device, the optically recognizable second code;

program instructions to decode the encoded information in the optically recognizable second code received, the decoding including extracting, by a transaction module of the first device, the user identifier and the one-time password associated with the registered second device;

program instructions to, in response to a determination the backend server is unreachable for electronic communication by the transaction module of the first device, determine that a user certificate exists in the local repository of the first device;

program instructions to validate, by the transaction module of the first device, the one-time password associated with the registered second device with the user certificate using the public certificate associated with the first device, the one-time password associated with the registered second device and the one-time password seed; and

program instructions to authenticate, using the transaction module, the user.

16. The computer system of claim 15 , further comprising:

program instructions to validate an associated transaction using a set of predetermined business rules;

program instructions to, in response to validating the associated transaction, register the associated transaction;

program instructions to store information associated with the associated transaction including updated local information associated with the user including the associated transaction and a new balance as evidence; and

program instructions to, in response to a determination the backend is online, send the associated transaction to the backend server.

17. The computer system of claim 15 , further comprising:

program instructions to, in response to a determination the backend is online, initiate a process on the backend to authenticate the user and validate an associated transaction by sending information to the backend including, the one-time password seed, the user identifier, the one-time password associated with the registered second device and additional information associated with the associated transaction; and

program instructions to receive a status of the associated transaction from the backend server.

18. The computer system of claim 15 , further comprising:

program instructions to, in response to a determination the backend server is not online, determine that an amount of an associated transaction does not exceed a predetermined offline limit; and

program instructions to, in response to a determination the amount of the associated transaction does not exceed the predetermined offline limit, determine whether the user certificate associated with the user identifier exists in the local repository.

19. The computer system of claim 15 , wherein program instructions to send information in an optically recognizable first code include program instructions to generate the information in the optically recognizable first code.

20. The computer system of claim 15 , wherein the optically recognizable first code is selected from the group consisting of: a QR code and a bar code.

Assignments (1)

Continuity (1)

References Cited (49)