Secure mobile device transactions
AssigneeIntermec IP Corp.
InventorH. Sprague Ackley
Life of this patent
Estimating the term…
Abstract
Systems and methods are described for communicating private user information from a mobile device to a transaction terminal or other external device. More specifically, systems and methods are described for improving authentication through the use of mobile devices used to facilitate transactions with external devices. The authentication described herein can be adaptive, thereby providing a flexible level of automatic on-the-spot transaction security. Unlike prior art systems, the mobile device is not required to have network connectivity. Additionally, the systems and methods described herein are easily adapted to most current systems.
Claims15
A terminal comprising:
- a symbol scanner configured to scan a first machine readable indicia displayed on a display screen of a mobile device,
- a processor configured to:
- decode the first machine readable indicia to retrieve a user information;
- and
- determine if an authentication trigger is to be activated based on at least one of the decoding of the first machine readable indicia and the retrieved user information;
- when the authentication trigger is activated at the terminal:
- scan and decode a second machine readable indicium displayed on the display screen of the mobile device, wherein the second machine readable indicia comprises a response from a user of the mobile device for a challenge question displayed on the terminal;
- and
- analyze the decoded second machine readable indicium to determine if the response in the second machine readable indicia meets a predetermined criterion.
A terminal comprising:
- a symbol scanner configured to scan a first machine readable symbol displayed on a display screen of a mobile device;
- a processor configured to:
- decode the first machine readable symbol to retrieve a user information;
- determine that an adaptive security policy is required for authentication based, at least in part, on an authentication trigger;
- and
- when the enhanced security policy is determined to be required:
- determine if a response in the second machine-readable symbol scanned from the symbol scanner meets predetermined criteria, wherein the second machine-readable symbol comprises a response from a user of the mobile device for a challenge question displayed on the terminal;
- authenticate the mobile device when the response meets the predetermined criteria.
A method performed by a terminal, the method comprising:
- scanning by a symbol scanner of the terminal a first symbol displayed on a display screen of a mobile device,
- decoding, by a processor the first symbol to retrieve user information;
- determining if an authentication trigger is to be activated based on at least one of the decoding of the first symbol and the retrieved user information;
- upon activation of the authentication trigger at the terminal:
- displaying, by the terminal, a first challenge question;
- scanning, by the symbol scanner, a second symbol, wherein the second symbol is a response to the first challenge question received at the mobile device from a user;
- decoding, by a processor the second symbol to retrieve the response;
- determining, by the processor if the response meets a predetermined criteria.
Dependencies are inferred from the claim text.