# US 10,121,139 B2 · Direct user to ticketing service provider secure transaction channel

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,121,139 B2
- Document ID: US10121139B2
- Status: Granted
- Kind: B2
- Application number: 14/983,940
- Filed: 2015-12-30
- Published: 2016-04-28
- Granted: 2018-11-06
- Earliest claimed: 2005-10-06
- Assignees: Mastercard Mobile Transactions Solutions, Inc.
- Applicants: MasterCard Mobile Transactions Solutions, Inc.
- Inventors: Satyan G. Pitroda; Mehul Desai
- Web page: https://patentgrep.com/patent/US10121139B2

## CPC

- G06Q 20/3227: {using secure elements embedded in M-devices}
- G06F 21/606: {by securing the transmission between two devices or processes}
- G06Q 20/02: involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
- G06Q 20/045: {using payment protocols involving tickets}
- G06Q 20/047: {using payment protocols involving electronic receipts}
- G06Q 20/10: specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
- G06Q 20/12: specially adapted for electronic shopping systems
- G06Q 20/145: {Payments according to the detected use or quantity}
- G06Q 20/322: {Aspects of commerce using mobile devices [M-devices]}
- G06Q 20/3223: {Realising banking transactions through M-devices}
- G06Q 20/3226: {Use of secure elements separate from M-devices}
- G06Q 20/325: {using wireless networks}
- G06Q 20/327: {Short range or proximity payments by means of M-devices}
- G06Q 20/367: {involving electronic purses or money safes}
- G06Q 20/3674: {involving authentication}
- G06Q 20/382: {insuring higher security of transaction}
- G06Q 20/3821: {Electronic credentials}
- G06Q 20/38215: {Use of certificates or encrypted proofs of transaction rights}
- G06Q 20/3829: {involving key management}
- G06Q 20/385: {using an alias or single-use codes}
- G06Q 20/40: Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q 20/4014: {Identity check for transactions}
- G06Q 20/42: Confirmation, e.g. check or permission by the legal debtor of payment
- G06Q 30/06: Buying, selling or leasing transactions
- G16H 10/60: for patient-specific data, e.g. for electronic patient records
- G16Z 99/00: Subject matter not provided for in other main groups of this subclass
- H04L 63/0838: {using one-time-passwords}
- G06Q 2220/00: Business processing using cryptography
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/06: {for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08)}
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G16H: HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA
- G16Z: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR SPECIFIC APPLICATION FIELDS, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Ensuring security of electronic transactions between a user and a ticketing service provider involves establishing trust between a user and a transaction service provider, authenticating an electronic transaction facility of the user, establishing a secure communication channel between the user and the ticketing service provider, and registering the user with the ticketing service provider over the secure communications channel.

## Claims

### Claim 1

A method of accessing ticketing services of a service provider via a secure transaction channel, comprising:
issuing with a transaction server a first one-time activation code (OTAC) to a user of an electronic transaction facility;
receiving with the transaction server a message comprising a plurality of keys generated by the electronic transaction facility and the first OTAC, wherein the first OTAC is entered by the user into the electronic transaction facility during an electronic transaction facility registration process;
authenticating the electronic transaction facility and associating the electronic transaction facility with the user based on the received message;
updating with the transaction server the electronic transaction facility with credentials of a ticketing service provider and forwarding credentials of the electronic transaction facility to the ticketing service provider, thereby providing secure communication directly between the user via the electronic transaction facility and the ticketing service provider; and
authenticating with the ticketing service provider the user of the electronic transaction facility to access ticketing services of the ticketing service provider via the secure communication directly with the ticketing service provider, wherein the user is authenticated by verifying a second OTAC sent to the user from the ticketing service provider and then received directly from the electronic transaction facility after being encrypted by the electronic transaction facility using the credentials of the ticketing service provider.

### Claim 2 (depends on 1)

The method of claim 1, wherein a ticketing service of the service provider comprises issuing an electronic replica of a ticket for use by a user of the electronic transaction facility.

### Claim 3 (depends on 1)

The method of claim 1, wherein a ticketing service of the service provider comprises at least one of ticket-related financial transactions, reservation requests, purchases, reservation changes, travel itinerary tracking and revisions, and scheduling.

### Claim 4 (depends on 1)

The method of claim 1, wherein a ticketing service of the service provider facilitates access to an electronic ticket for at least one of: traveling on a train, bus, airplane, boat, or other transportation medium, as well as tickets to a movie, a theater performance, a sporting event, a concert, a trade show, and a conference.

### Claim 5

A secure ticketing service provider-to-user transaction channel, comprising:
an electronic transaction facility executing on at least one processor;
a ticketing service provider server configured to provide a first one-time activation code (OTAC) to a user of the electronic transaction facility; and
a transaction server configured to:
issue a second OTAC to a user of the electronic transaction facility;
receive a message comprising a plurality of keys generated by the electronic transaction facility, the message further comprising the second OTAC that is entered by the user into the electronic transaction facility during an electronic transaction facility registration process;
authenticate the electronic transaction facility during an electronic transaction facility registration process based on the second OTAC received in the message;
associate the electronic transaction facility with the user during the registration process based on the received message;
update the electronic transaction facility with credentials of the ticketing service provider and forward credentials of the electronic transaction facility to the ticketing service provider, thereby providing secure communication directly between the user via the electronic transaction facility and the ticketing service provider;
wherein the ticketing service provider server is further configured to authenticate the user of the electronic transaction facility by verifying the first OTAC received directly from the electronic transaction facility where the first OTAC is encrypted using the credentials of the ticketing service provider.