Method and system for securing a payment transaction with trusted code base on a removable system module
AssigneeAppsware Wireless, LLC
InventorPaul D. Coppinger
Life of this patent
Estimating the term…
Abstract
A trusted code base is provided on a removable system module that is inserted in a mobile payment device 130. The trusted code base obtains a password from a customer for processing a payment transaction and encrypts the password using a public key. Access to the trusted code base by unauthorized processes is prevented to protect the password while unencrypted. The mobile payment device 130 transmits the encrypted password over a network 140 to a transaction host 160. The transaction host 160 decrypts the encrypted password and applies the decrypted password to process the payment transaction.
Claims24
A method for obtaining a secure payment transaction, the method performed by a mobile device and comprising the steps of:
- (a) providing a subscriber identity module having a trusted code base for obtaining a password from a customer and encrypting the password;
- (b) preventing access to the trusted code base by unauthorized processes;
- and
- (c) transmitting the encrypted password via a network to a transaction host that decrypts the password and applies the decrypted password to process the payment transaction.
A mobile device for obtaining a secure payment transaction, the mobile device comprising:
- (a) a subscriber identity module having a trusted code base to which access by unauthorized processes is prevented, the trusted code base obtaining a password from a customer and encrypting the password;
- and
- (b) means for transmitting the public key encrypted password via a network to a transaction host that decrypts the encrypted password and applies the decrypted password to process the payment transaction.
A method for obtaining a secure payment transaction, the method performed by a mobile device and comprising the steps of:
- (a) providing a removable system module having a trusted code base for obtaining a password from a customer and encrypting the password with a public key;
- (b) preventing access to the trusted code base by unauthorized processes;
- and
- (c) transmitting the public key encrypted password via a network to a cryptographic conversion host that decrypts the public key encrypted password with a private key, encrypts the decrypted password with a secret key and provides the secret key encrypted password to a transaction host that decrypts the secret key encrypted password with an identical secret key and applies the decrypted password to process the payment transaction.
A mobile device for obtaining a secure payment transaction, the mobile payment device comprising:
- (a) a removable system module having a trusted code base to which access by unauthorized processes is prevented, the trusted code base obtaining a password from a customer and encrypting the password with a public key;
- and
- (b) means for transmitting the public key encrypted password via a network to a cryptographic conversion host that decrypts the public key encrypted password with a private key, encrypts the decrypted password with a secret key and provides the secret key encrypted password to a transaction host that decrypts the secret key encrypted password with an identical secret key and applies the decrypted password to process the payment transaction.
Dependencies are inferred from the claim text.