IP Library Granted Patent US 8,041,338
Granted Patent B2
US 8,041,338 · App. 11/852,488 · Granted Oct 18, 2011

Mobile wallet and digital payment

Assignee: Microsoft Corporation
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,041,338
App. No.
11/852,488
Granted
Oct 18, 2011
Kind
B2
Abstract

The claimed subject matter provides a system and/or a method that facilitates securing a wireless digital transaction. A terminal component can receive a portion of data related to a payment for at least one of a good or a service. A mobile device can include at least one mobile payment card (m-card), wherein the m-card is created by establishing a link to an account associated with a form of currency. The mobile device can employ public-key cryptography (PKC) to securely and wirelessly transmit a payment to the terminal component utilizing the m-card and linked account.

Claims (44)

1. A computer-implemented system that facilitates securing a wireless digital transaction, comprising:

a terminal component receives a portion of data related to a payment for at least one of a good or a service;

a mobile device that includes at least one mobile payment card (m-card), the m-card is created by establishing a link to an account associated with a form of currency; and

the mobile device employs public-key cryptography (PKC) to securely and wirelessly transmit a payment to the terminal component utilizing the m-card and linked account;

the mobile device hosts a virtual machine (VM) environment that includes a secure virtual machine monitor (VMM) that monitors at least a main VM and an isolated payment module VM, the VMM utilizes an I/O driver that provides a driver for at least one of a screen on the mobile device, a keypad on the mobile device, or a secure storage with hardware-based encryption related to a portion of data stored thereon, the main VM provides an operating system for the mobile device and wirelessly interacts with at least one of a wireless service provider network or the terminal component, the isolated payment module VM communicates at least one of a request or a response with the main VM.

2. The system of claim 1 , the form of currency is cash, credit, a micro-payment, a pre-paid card, a stored value card, a disposable card, a line of credit, an exchange of a service, an exchange of a good, or a tab.

3. The system of claim 1 , the mobile device communicates with the terminal component with at least one of near field communication (NFC), Bluetooth, wireless fidelity (Wi-Fi), or radio frequency identification (RFID).

4. The system of claim 1 , the account is associated with at least one of a bank, a credit card company, an investment fund, an online brokerage, a web site, a business, a company, or a financial institution.

5. The system of claim 1 , further comprising a certifying authority that is an independent organization that validates the terminal component by issuing a certificate with an expiration date.

6. The system of claim 1 , the mobile device utilizes a next-generation secure computing base (NGSCB) with a secure boot mechanism.

7. The system of claim 1 , further comprising a security manager VM that manages at least one of the secure storage or a portion of the public-key cryptography service.

8. The system of claim 7 , further comprising an m-pass VM that manages at least one of a password or a personal identification number (PIN) related to the mobile device.

9. The system of claim 8 , the mobile device implements at least one of the following:

a limit to access to the screen and the keypad to a single virtual machine at a time; or

a verification of a location of the terminal component by leveraging at least one of a global positioning service (GPS) on the mobile device or a cellular triangulation technique for the mobile device to identify a location of the mobile device, the location of the mobile device is compared to the location of the terminal component.

10. The system of claim 1 , further comprising a security component that protects against a threat with at least one of the following:

the security component leverages an online clearing agent to alert at least one of a bank, the account, a mobile device service provider, a certifying authority, or the terminal component of a theft related to at least one of a portion of data on the mobile device, the mobile device, or the terminal component;

the security component deletes a portion of the m-card based on a security breach, the security breach is an invalid password entry, a defined number of incorrect password entry attempts, or received alert from the online clearing agent; or

the security component employs a password during at least one of a moment prior to a transaction, a moment during a transaction, a moment after a transaction, a moment after a pre-defined number of transactions, a moment after a dollar amount of tabulated transactions, or a detection of a possible threat.

11. The system of claim 1 , the mobile device further comprising at least one physical button input that, upon activation, initiates at least one of a password entry, a password entry completion, or a wireless digital payment to the terminal.

12. The system of claim 1 , further comprising a communication component that enables wireless communication between the mobile device and the terminal component, the wireless communication is at least one of a NFC, Bluetooth, Wi-Fi, RFID, or a combination of NFC and Bluetooth in a two-stage protocol.

13. The system of claim 1 , the terminal component further comprises a power component that transmits a portion of power to the mobile device during wireless communication, the portion of power is at least one of a quick charge or a power-supply probe.

14. A computer-implemented method that facilitates securely transmitting sensitive data related to a payment transaction, comprising:

creating an m-card on a mobile device, the m-card includes a portion of account data associated with an account;

storing the m-card on the mobile device;

transmitting the portion of account data wirelessly to a payment terminal with public-key cryptography;

verifying the portion of account data on the m-card with an organization corresponding to the account;

processing a transaction with the portion of account data on the m-card upon verification from the account; and

hosting a virtual machine (VM) environment within the mobile device that includes a secure virtual machine monitor (VMM) that monitors at least a main VM and an isolated payment module VM, the VMM utilizes an I/O driver that provides a driver for at least one of a screen on the mobile device, a keypad on the mobile device, or a secure storage with hardware-based encryption related to a portion of data stored thereon, the main VM provides an operating system for the mobile device and wirelessly interacts with at least one of a wireless service provider network or the payment terminal, the isolated payment module VM communicates at least one of a request or a response with the main VM.

15. The method of claim 14 , further comprising:

employing a next-generation secure computing base (NGSCB) with a secure boot mechanism; and

limiting interaction with a keypad and a screen on the mobile device to a single virtual machine.

16. The method of claim 14 , further comprising:

utilizing a physical button input on the mobile device to signal at least one of a password entry, a password entry completion, or an initiation of a wireless digital payment;

authenticating the payment terminal with a certificate issued by an independent organization; or

comparing a location related to the mobile device with a location of the payment terminal to authenticate the payment terminal.

17. A computer-implemented system that facilitates securing a wireless digital transaction, comprising:

means for wirelessly receiving a portion of data related to a payment for at least one of a good or a service;

means for creating a mobile payment card (m-card) on a mobile device;

means for incorporating the m-card on the mobile device;

means for linking the m-card to an account associated with a form of currency;

means for wirelessly communicating a portion of the m-card to a payment terminal for a digital payment;

means for securing the wireless communication with public-key cryptography; and

means for hosting a virtual machine (VM) environment within the mobile device that includes a secure virtual machine monitor (VMM) that monitors at least a main VM and an isolated payment module VM, the VMM utilizes an I/O driver that provides a driver for at least one of a screen on the mobile device, a keypad on the mobile device, or a secure storage with hardware-based encryption related to a portion of data stored thereon, the main VM provides an operating system for the mobile device and wirelessly interacts with at least one of a wireless service provider network or the payment terminal, the isolated payment module VM communicates at least one of a request or a response with the main VM.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 9, 2014
From: MICROSOFT CORPORATION
To: MICROSOFT TECHNOLOGY LICENSING, LLC
Reel/Frame 034542/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 10, 2007
From: CHEN, YUQUN; MOINUDDIN, MOHAMMED; YACOBI, YACOV
To: MICROSOFT CORPORATION
Reel/Frame 019802/0363 →
Continuity (1)
Related Publication 20090068982A1 · Mar 12, 2009