IP Library Granted Patent US 8,175,979
Granted Patent B2
US 8,175,979 · App. 12/061,134 · Granted May 8, 2012

Method and system for anonymous electronic transactions using a mobile device

Assignee: International Business Machines Corporation
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,175,979
App. No.
12/061,134
Granted
May 8, 2012
Kind
B2
Abstract

A method for conducting transactions, includes: encoding concatenated transaction information at a cash point; sending the encoded concatenated transaction information from the cash point to a mobile device; receiving verification information from the mobile device formed in response to the encoded concatenated transaction information; confirming the received verification information; completing a transaction in the event of successfully confirming the received verification information.

Claims (70)

1. A method for conducting transactions, the method comprising:

receiving at a mobile device encoded concatenated transaction information at a from a cash point;

receiving at the mobile device a personal identification number;

after receiving the personal identification number, providing the encoded concatenated transaction information to a transaction server;

receiving at the mobile device a transaction receipt from the transaction server; and

providing the transaction receipt from the mobile device to the cash point;

wherein the mobile device in response to receiving the encoded concatenated transaction information performs the following:

displays the amount to pay for carrying out the transaction;

prompts a buyer to enter a personal identification number (PIN) of the mobile device's security element;

supplies the encoded concatenated transaction information to a security element in response to the PIN entry;

wherein the security element digitally signs the encoded concatenated transaction information to obtain a private key; and

wherein the private key is concatenated with a hash of a matching certificate, and is sent to the transaction server via a mobile network.

2. The method of claim 1 , wherein the encoded concatenated transaction information comprises:

a number chosen by a seller that is unique for the transaction;

a recorded time for the transaction;

a constant identifier of a seller that is known to a transaction server;

a payment amount of the transaction; and

a nonce randomly chosen by the seller for the transaction.

3. The method of claim 1 , wherein receiving the encoded concatenated transaction information further comprises:

reading a barcode on the cash point's graphical screen with the mobile device's built in camera, imaging sensor, or barcode reader.

4. The method of claim 1 , wherein the encoded concatenated transaction information is received wirelessly from the cash point.

5. The method of claim 4 , wherein the mobile devices are configured with near field communication (NFC) technology.

6. The method of claim 1 , wherein the transaction server in response to receiving the private key concatenated with a hash of a matching certificate performs the following:

identifies the buyer from the hash of the matching certificate;

verifies private key via the matching certificate;

wherein in response to successfully verifying the matching certificate, the transaction server encrypts the nonce with a verification key that is valid for the constant identifier at the time of the transaction; and

wherein the transaction server generates the transaction receipt.

7. The method of claim 6 , wherein providing the transaction receipt to the cash point includes causing the mobile device to perform the following:

verifies the transaction receipt;

displays the payment amount of the transaction;

generates a verification barcode based on the verified transaction receipt;

displays the verification barcode;

wherein the cash point scans the displayed verification barcode to obtain the verification key to complete the transaction.

8. The method of claim 1 , wherein public key infrastructure (PKI) is utilized to secure the transaction.

9. The method of claim 1 , wherein the mobile network utilizes at least one of short messaging service (SMS), and general packet radio service (GPRS).

10. An article comprising one or more computer-readable storage media containing instructions that when executed by a computer enables a method for conducting transactions, wherein the method further comprises:

receiving at a mobile device encoded concatenated transaction information from a cash point;

receiving at the mobile device a personal identification number;

after receiving the personal identification number, providing the encoded concatenated transaction information to a transaction server;

receiving at the mobile device a transaction receipt from the transaction server; and

providing the transaction receipt from the mobile device to the cash point;

wherein the mobile device in response to receiving the encoded concatenated transaction information performs the following:

displays the amount to pay for carrying out the transaction;

prompts a buyer to enter a personal identification number (PIN) of the mobile device's security element;

supplies the encoded concatenated transaction information to the security element in response to the PIN entry;

wherein the security element digitally signs the encoded concatenated transaction information to obtain a private key; and

wherein the private key is concatenated with a hash of a matching certificate, and is sent to the transaction server via a mobile network.

11. The article of claim 10 , wherein the encoded concatenated transaction information comprises:

a number chosen by a seller that is unique for the transaction;

a recorded time for the transaction;

a constant identifier of a seller that is known to a transaction server;

a payment amount of the transaction; and

a nonce randomly chosen by the seller for the transaction.

12. The article of claim 10 , wherein receiving the encoded concatenated transaction information further comprises:

reading a barcode on the cash point's graphical screen with the mobile device's built in camera, imaging sensor, or barcode reader.

13. The article of claim 10 , wherein the encoded concatenated transaction information is transferred wirelessly from the cash point to the mobile device.

14. The article of claim 13 , wherein the mobile devices are configured with near field communication (NFC) technology.

15. The article of claim 10 , wherein the transaction server in response to receiving the private key concatenated with a hash of a matching certificate performs the following:

identifies the buyer from the hash of the matching certificate;

verifies private key via the matching certificate;

wherein in response to successfully verifying the matching certificate, the transaction server encrypts the nonce with a verification key that is valid for the constant identifier at the time of the transaction; and

wherein the transaction server generates the transaction receipt.

16. The article of claim 15 , wherein providing the transaction receipt to the cash point includes causing the mobile device to perform the following:

verifies the transaction receipt;

displays the payment amount of the transaction;

generates a verification barcode based on the verified transaction receipt;

displays the verification barcode;

wherein the cash point scans the displayed verification barcode to obtain the verification key to complete the transaction.

17. The article of claim 10 , wherein public key infrastructure (PKI) is utilized to secure the transaction.

18. The article of claim 10 , wherein the mobile network utilizes at least one of short messaging service (SMS), and general packet radio service (GPRS).

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 27, 2012
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: EBAY INC.
Reel/Frame 029536/0159 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 2, 2008
From: BAENTSCH, MICHAEL; KRAMP, THORSTEN; KUYPER, MICHAEL P.
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 020743/0488 →
Continuity (1)
Related Publication 20090254485A1 · Oct 8, 2009