Loading patent…
AssigneeInternational Business Machines Corporation
InventorMarc Fiammante
Estimating the term…
A system and a method for associating communication devices like a computing device and a wireless portable device so as to carry out secure transactions over an untrusted network like the Internet are disclosed. The communication devices are assumed to be independently capable of communicating with an electronic commerce site managing a directory of legitimate users which all possess a token like a smart-card. Whenever a user desires to carry out a secure transaction, the user initially prepares the transaction from a first communication device like a personal computer. When completed with the preparation, a signature of the user is obtained from a second communication device like a mobile phone through which the legitimate user is reachable and which is enabled with the token of the user. When contacted from the electronic commerce site, the second communication device is used to check, validate, sign and transmit the signed secure transaction to the electronic commerce site where final processing of the commercial transaction can be completed.
A method for associating a commerce site, a first communication device, and a second communication device in executing a commercial transaction over a network, said method comprising:
A method for associating a first communication device and a commerce site after a preparation and an approval of a commercial transaction by a second communication device and the commerce site, said method comprising:
A method for completing a commercial transaction prepared and approved by a first communication device and a commerce site, said method comprising:
A system for completing a commercial transaction, said system comprising:
A computer program product in a computer usable medium for associating a first communication device and a commerce site after a preparation and an approval of a commercial transaction by a second communication device and the commerce site, said program comprising:
A computer program product in a computer usable medium for completing a commercial transaction prepared and approved by a first communication device and a commerce site, said program comprising:
Dependencies are inferred from the claim text.
Drawings are temporarily unavailable. Open the PDF at USPTO
Backward citations are indexed for grants only.
Payment architectures, schemes or protocols: payment circuits
Aspects of commerce using mobile devices [M-devices]: use of secure elements separate from M-devices
Payment applications installed on the mobile devices: characterised by activation or deactivation of payment capabilities
Using electronic wallets or electronic money safes: involving electronic purses or money safes
Term end not estimated
1. Field of the Invention
The present invention relates generally to the electronic commerce and more particularly applies to commercial-like transactions taking place over a network like the Internet that requires confidentiality, authentication, integrity, and non-repudiation.
2. Description of the Related Art
FIG. 1 illustrates one embodiment of a computer device and one embodiment of a wireless portable device in accordance with the present invention;
FIG. 2 is a data flow chart of one embodiment of a commercial transaction in accordance with the present invention;
FIG. 3 is an exemplary correlation table of identification records in accordance with the present invention; and
Referring to FIG. 1, a computing device in the form of a personal computer 110 (hereinafter “PC 110”) and a wireless portable device in the form of a mobile telephone 140 are shown. PC 110 provides a user 100 with access to a commercial Internet Web site to perform a transaction, e.g., the AMAZON.COM virtual bookstore at http://www.amazon.com to perform a transaction such as buying a book. This can be done by having a communication link 130 from PC 110 to a network 135 such as the Internet and running a browser on PC 110 that is capable of conveniently displaying pages from the Web site whereby user 100 can gather all necessary information on what user 100 is buying. PC 110 is equipped with a display monitor 120 preferably having at least a 5-inch wide screen (diagonal) capable of displaying 800×600 pixels or more. PC 110 is also equipped with an input device in the form of a keyboard 121 preferably having at least 100 keys and a pointing device in the form of a mouse 122.
User 100 can also establish a communication link 165 from mobile telephone 140 to network 116. Mobile telephone 140 is personalized to user 100 with a token in the form of a smart card 155 whereby user 100 may be uniquely identified. As compared to PC 110, mobile telephone 140 includes a display 160 that is limited to a few lines of a few characters, and a rudimentary numeric keyboard 150.
Referring additionally to FIG. 4, a secured system 101 in accordance with the present invention in shown. System 101 comprises PC 110, mobile phone 140, network 135, and a server 200. Server 200 includes a software and data package 201 having a business application 210, a signature correlation servlet 220, and a table 300 consisting of identification records of people/businesses having authorization to access business application 210. A commercial transaction in accordance with the present invention initially involves user 100 running PC 110 to access business application 210 on server 200 over network 135 via communication link 130 and a communication link 190. Business application 210 is a core of a commercial-like site that user 100 wants to deal with. User 100 approves the commercial transaction when user 100 is satisfied with the contents and the objects of the transaction. Upon receipt of the approval, business application 210 uses table 300 to identify an identification record of user 100. Upon identifying an identification record of user 100, servlet 220 contacts mobile phone 140 through network 135, a gateway 175, and a tower 170 via communication link 190, a communication link 191, a communication link 192, and communication link 165. Servlet 220 then sends a signature request to mobile phone 140 according to the Wireless Application Protocol (WAP). User 100 uses a private key of smart card 155 to sign for the commercial transaction. Business application 210 and servlet 220 complete the transaction upon receipt of the signature of user 100. Those having ordinary skill in the art will appreciate that the commercial transaction meets all the goals of confidentiality, authentication, integrity and non-repudiation.