# US 10,482,460 B2 · Method and apparatus for facilitating electronic payments using a wearable device

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,482,460 B2
- Document ID: US10482460B2
- Status: Granted
- Kind: B2
- Application number: 15/259,195
- Filed: 2016-09-08
- Published: 2017-03-16
- Granted: 2019-11-19
- Earliest claimed: 2015-09-11
- Assignees: Alibaba Group Holding Limited
- Applicants: Alibaba Group Holding Limited
- Inventors: Chao Wu; Bin Shan; Xiaokai Zhou; Xiaochen Wang
- Web page: https://patentgrep.com/patent/US10482460B2

## CPC

- G06Q 20/3829: {involving key management}
- G06F 21/33: using certificates
- G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards
- G06F 21/602: {Providing cryptographic facilities or services}
- G06Q 20/321: {using wearable devices}
- G06Q 20/3226: {Use of secure elements separate from M-devices}
- G06Q 20/326: {Payment applications installed on the mobile devices}
- G06Q 20/3274: {using a pictured code, e.g. barcode or QR-code, being displayed on the M-device}
- G06Q 20/38215: {Use of certificates or encrypted proofs of transaction rights}
- G06Q 20/40: Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q 30/06: Buying, selling or leasing transactions
- G09C 5/00: Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages
- H04B 1/385: {Transceivers carried on the body, e.g. in helmets}
- H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)}
- H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)}
- H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)}
- H04L 63/126: {the source of the received data}
- H04W 12/33: using wearable devices, e.g. using a smartwatch or smart-glasses
- G06F 21/44: Program or device authentication
- G06Q 2220/00: Business processing using cryptography
- H04B 2001/3861: {carried in a hand or on fingers}
- H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash
- H04L 2209/805: Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
- H04L 2463/102: applying security measure for e-commerce
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G09C: CIPHERING OR DECIPHERING APPARATUS FOR CRYPTOGRAPHIC OR OTHER PURPOSES INVOLVING THE NEED FOR SECRECY
- H04B: TRANSMISSION
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

Apparatus and methods for binding a wearable device for use with the wearable device, a terminal, and a server are presented. The method executed by the wearable device includes providing device information to the terminal, receiving a device certificate from the server, and storing the device certificate for performing payment using the corresponding user account. The method executed by the server includes receiving a binding request from the wearable device via the terminal, generating a device certificate of the wearable device based on the device identification, and providing the device certificate to the wearable device. The method executed by the payee device includes acquiring a transaction certificate of a wearable device and sending a payment collection request to a server including the transaction certificate of the wearable device and payment sum information.

## Claims

### Claim 1

A method for binding a wearable device, the method comprising:
providing, by the wearable device, device information of the wearable device to a terminal based on an established connection between the wearable device and the terminal, the device information including a device identification;
receiving, by the wearable device, a device certificate from a server, the device certificate generated by the server based on the device identification and the device certificate corresponding to a user account associated with the wearable device;
generating, by the wearable device, a device-side key and a server-side key used for encrypting the device certificate during transmission;
storing, by the wearable device, the device-side key on the wearable device, the device-side key being the same as the server-side key or based on the server-side key;
transmitting, by the wearable device, the server-side key to the server; and
storing, by the wearable device, the device certificate on the wearable device, the device certificate enabling the wearable device to perform a payment operation using the user account, wherein the payment operation is capable of being performed by the wearable device if the established connection between the wearable device and the terminal is not detected and wherein the payment operation comprises:
generating, by the wearable device, a decrypted device certificate by decrypting the device certificate using the device-side key, wherein the device certificate is encrypted by the server using the server-side key;
generating, by the wearable device, a transaction certificate based on the decrypted device certificate; and
providing, by the wearable device, the transaction certificate to a payee device.

### Claim 2 (depends on 1)

The method according to claim 1, wherein providing device information of the wearable device to a terminal comprises displaying a two-dimensional code including the device information on a screen of the wearable device for the terminal to scan.

### Claim 3 (depends on 1)

The method according to claim 1, wherein receiving a device certificate from a server comprises receiving a device certificate from the server via the connection between the wearable device and a terminal.

### Claim 4 (depends on 1)

The method according to claim 1, further comprising sending, by the wearable device, an authorization request to the server, the authorization request including the device identification of the wearable device.

### Claim 5 (depends on 1)

The method according to claim 1, wherein receiving a device certificate from a server comprises receiving the device certificate and a security certificate from the server, the security certificate being used for performing validation of the device certificate during the payment operation.

### Claim 6 (depends on 1)

The method according to claim 1, wherein the storing the device certificate comprises:
encrypting, by the wearable device, the device certificate using an encryption algorithm to produce ciphertext; and
storing, by the wearable device, the ciphertext on the wearable device.

### Claim 7

A method for binding a wearable device, the method comprising:
receiving, by a server, a binding request from the wearable device via a terminal, the binding request including a device identification of the wearable device and user account information associated with the wearable device;
generating, by the server, a device certificate of the wearable device based on the device identification, wherein the device certificate corresponds to a user account associated with the wearable device;
receiving, from the wearable device at the server, a server-side key generated by the wearable device;
storing, by the server, a relationship between the device certificate and a user account associated with the wearable device; and
providing, by the server, the device certificate to the wearable device, the device certificate enabling the wearable device to perform a payment operation using the user account wherein the payment operation is capable of being performed by the wearable device if an established connection between the wearable device and the terminal is not detected, the providing the device certificate to the wearable device comprising:
encrypting the device certificate using the server-side key; and
sending the encrypted device the certificate to the wearable device via the terminal.

### Claim 8 (depends on 7)

The method according to claim 7, wherein the providing the device certificate comprises sending the device certificate to the wearable device via the terminal.

### Claim 9 (depends on 7)

The method according to claim 7, the method further comprising receiving, by the server, an authorization request sent by the wearable device, the authorization request including the device identification of the wearable device, and wherein providing the device certificate to the wearable device comprises returning a response to the authorization request to the wearable device, the response including the device certificate.

### Claim 10 (depends on 9)

The method according to claim 9, wherein the authorization request further includes a server-side key generated by the wearable device, and wherein the device certificate is encrypted using the server-side key.

### Claim 11 (depends on 7)

The method according to claim 7, wherein providing the device certificate to the wearable device further comprises providing a security certificate to the wearable device, the security certificate used for performing validation on the device certificate during the payment operation.

### Claim 12

A method for binding a wearable device, the method comprising:
establishing, by a terminal, a connection between a wearable device and the terminal;
acquiring, by the terminal, device information of the wearable device, the device information including a device identification of the wearable device;
sending, by the terminal, a binding request to a server, the binding request including the device identification of the wearable device and user account information, the binding request enabling the server to generate a device certificate corresponding to a user account associated with the wearable device and provide the device certificate to the wearable device;
receiving, by the terminal, a server-side key from the wearable device using the established connection, the server-side key being used by the server for encrypting the device certificate for the wearable device
transmitting, by the terminal, the device certificate to the wearable device using the established connection, the device certificate enabling the wearable device to perform a payment operation using the user account wherein the payment operation is capable of being performed by the wearable device if the established connection between the wearable device and the terminal is not detected.

### Claim 13 (depends on 12)

The method according to claim 12, the method further comprising:
receiving, by the terminal, the device certificate provided by the server; and
forwarding, by the terminal, the device certificate to the wearable device using the established connection.

### Claim 14 (depends on 12)

The method according to claim 12, wherein the acquiring device information of the wearable device comprises:
scanning, by the terminal, a two-dimensional code displayed on a screen of the wearable device; and
acquiring, by the terminal, the device information of the wearable device from the scanned two-dimensional code.

### Claim 15

A method for facilitating electronic payments, the method comprising:
receiving, by the wearable device, a device certificate corresponding to a user account associated with the wearable device from the terminal based on an established connection between the wearable device and the terminal;
storing, by the wearable device, a security certificate corresponding to the user account;
generating, by the wearable device, a transaction certificate according to a stored device certificate for the user account associated with the wearable device, wherein the transaction certificate is capable of being generated by the wearable device if the established connection between the wearable device and a terminal is not detected, the generating a transaction certificate comprising generating a transaction certificate carrying validation information using a certificate generation algorithm, the transaction certificate generation algorithm corresponding to a certificate restoration algorithm adopted by the server for retrieving the device certificate and the security certificate from the transaction certificate; and
providing, by the wearable device, the transaction certificate to a payee device, the transaction certificate enabling the payee device to upload the transaction certificate to a server for processing a payment using the user account corresponding to the device certificate.

### Claim 16 (depends on 15)

The method according to claim 15, wherein the stored device certificate is a device certificate ciphertext produced by encrypting the device certificate using an encryption algorithm, and wherein generating a transaction certificate comprises:
reading, by the wearable device, the device certificate ciphertext;
decrypting, by the wearable device, the ciphertext based on an decryption algorithm; and
generating, by the wearable device, the transaction certificate according to the device certificate obtained from the decrypted ciphertext.

### Claim 17 (depends on 15)

The method according to claim 15, wherein the transaction certificate includes a two-dimensional code or a bar code.

### Claim 18

A method for facilitating electronic payments, the method comprising:
receiving, by a server, a payment collection request sent by a payee device, the payment collection request including a transaction certificate generated by a wearable device and payment sum information, wherein the transaction certificate is capable of being generated by the wearable device if an available connection between the wearable device and a terminal is not detected;
restoring, by the server, a device certificate of the wearable device from the transaction certificate, the restoring the device certificate comprising:
obtaining the device certificate restoration algorithm on the transaction certificate, the certificate restoration algorithm corresponding to a certificate generation algorithm used by the wearable device for generation the transaction certificate; and
processing, by the server, a payment according to the payment sum information using a user account corresponding to the device certificate based on a relationship between the device certificate of the wearable device and the user account stored by the server, the processing the payment comprising performing validation on the transaction certificate using the security certificate, and, and if the validation is successful, performing a payment operation according to the payment sum information using the user account corresponding to the device certificate as payer.

### Claim 19 (depends on 18)

The method according to claim 18, wherein the restoring a device certificate of the wearable device from the transaction certificate further comprises
obtaining the device certificate and a security certificate of the wearable device by executing a certificate restoration algorithm on the transaction certificate, the certificate restoration algorithm corresponding to a certificate generation algorithm used by the wearable device for generating the transaction certificate, and
wherein the processing the payment further comprises performing validation on the transaction certificate using the security certificate, and, and if the validation is successful, performing a payment operation according to the payment sum information using the user account corresponding to the device certificate as payer.

### Claim 20 (depends on 18)

The method according to claim 18, the method further comprising returning a result to the payee device indicating whether payment is successful.