# US 2014/0196118 A1 · Apparatus, system and method for secure payment > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0196118 A1 - Document ID: US20140196118A1 - Status: Published application - Kind: A1 - Application number: 14/107,969 - Filed: 2013-12-16 - Published: 2014-07-10 - Earliest claimed: 2010-09-17 - Assignees: Universal Secure Registry, LLC - Applicants: Universal Secure Registry, LLC - Inventors: Kenneth P. Weiss - Web page: https://patentgrep.com/patent/US20140196118A1 ## CPC - H04W 12/068: {using credential vaults, e.g. password manager applications or one time password [OTP] applications} - G06Q 20/3224: {Transactions dependent on location of M-devices} - G06Q 20/3278: {RFID or NFC payments by means of M-devices} - G06Q 20/40145: {Biometric identity checks} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/0846: {using time-dependent-passwords, e.g. periodically changing passwords} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals} - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Embodiments of the invention generally relate to apparatus, systems and methods for authentication, in particular, apparatus, systems and methods for authenticating an entity for computer and/or network security, secure authorization of a payment or for funds transfer and for selectively granting privileges and providing other services in response to such authentications. In addition, embodiments of the invention relate generally to apparatus, systems and methods for the communication of information between a mobile user-device and a point-of-sale device to securely provide authorization for a financial transaction. ## Claims ### Claim at position 1 -20. (canceled) ### Claim 21 A system for access control to a first device with a mobile device, the system comprising: a first processor associated with the first device; a mobile device comprising: a wireless transmitter configured to wirelessly transmit a wireless signal including a first time-varying non-predictable value, a user interface programmed to receive a user input including first information known to a user of the mobile device to authenticate the user to the mobile device and programmed to receive second information to authorize the user to access the first device; a processor coupled to the user interface, the processor programmed to authenticate the user of the mobile device based on the first information and to generate the first time-varying non-predictable value by combining at least a portion of the second information and a time varying value; and a wireless receiver, coupled to a secure registry component and the first processor, configured to receive the wireless signal; the secure registry component configured to receive the first time-varying non-predictable value and successfully authenticate the user of the mobile device to the first processor where the first time-varying non-predictable value is matched to the user by the secure registry component; and wherein the first processor is configured to authorize the user of the mobile device to access the first device following successful authentication of the user based on the matching of the time-varying predictable value. ### Claim 22 (depends on 21) The system according to claim 21, wherein the system is configured to provide proximity based access control, the wireless transmitter comprises a short range wireless transmitter configured to transmit a short range wireless signal, and the wireless receiver comprises a short range wireless receiver configured to receive a short range wireless signal. ### Claim 23 (depends on 21) The system of claim 21, wherein the first device is configured to manage physical access to a secure space and to permit or deny entry to the secure space responsive to successful authentication of the user. ### Claim 24 (depends on 21) The system of claim 21, wherein the user is identified by the secure registry component based on the first non-predictable value, and wherein the secure registry component is configured to confirm its identity to the mobile device. ### Claim 25 (depends on 24) The system of claim 24, wherein the secure registry component is configured to generate a second time-varying non-predictable value and communicate the second time-varying non-predictable value to identify the secure registry component to the mobile device. ### Claim 26 (depends on 25) The system of claim 25, wherein the processor is configured to generate a third time-varying non-predictable value that includes combining at least a portion of the second information and a subsequent time varying value, wherein the secure registry component is configured to authenticate the user using the third time-varying non-predictable value. ### Claim 27 (depends on 21) The system of claim 21, wherein the secure registry component is configured to require periodic re-authentication of the user derived from at least a subsequent time value and at least a portion of the second information in order to continue access to the first device. ### Claim 28 (depends on 21) The system of claim 21, wherein the system includes a wireless network configured to communicate using any one of a Wi-fi communication, near field communication and Bluetooth communication, and wherein a proximity between the mobile device and the first device is determined by a range of the network communication. ### Claim 29 (depends on 21) The system of claim 21, wherein the secure registry component is configured to communicate with a plurality of processors for granting or denying accessing to respective devices, the secure registry component storing information for a plurality of users, and wherein the secure registry component is configured to authenticate each of the plurality of users to provide access for each user to at least one processor of a device associated with the user, respectively. ### Claim 30 (depends on 29) The system of claim 29, wherein the plurality of users includes a second user associated with a second handheld device including a respective second processor and a second wireless transmitter, and wherein the second processor is configured to generate a second wireless signal including a respective second time-varying non-predictable value. ### Claim 31 (depends on 30) The system of claim 30, wherein the secure registry component is configured to receive the second time-varying non-predictable value and successfully authenticate the second user where the second time-varying non-predictable value is matched to the second user, and wherein the second user is permitted access to the first device. ### Claim 32 (depends on 21) The system of claim 21, wherein the secure registry component is located remote from the first device, and wherein the authentication of the first time-varying non-predictable value and any subsequent time-varying non-predictable values occur at the secure registry component. ### Claim 33 (depends on 21) The system of claim 21, wherein at least a portion of the secure registry component is located at first device, and wherein the authentication of the first time-varying non-predictable value and any subsequent time-varying non-predictable values occur at the first device. ### Claim 34 (depends on 21) The system of claim 21, wherein the mobile device includes a memory coupled to the processor, the mobile device programmed to store a seed employed by the processor to generate the first time-varying non-predictable value in the memory; and wherein the processor is configured to use a time-varying value, the at least a portion of the second information and the seed to generate the first time-varying non-predictable value. ### Claim 35 (depends on 34) The system of claim 34, wherein the secure registry component is configured to communicate seed-updates at random intervals to provide a new seed value to the mobile device. ### Claim 36 (depends on 21) The system of claim 21, wherein the mobile device includes a biometric sensor configured to accept a biometric input from the user, and the first information includes information derived from the biometric input. ### Claim 37 (depends on 21) The system of claim 21, wherein the processor is configured to generate the first time-varying non-predictable value following a successful authentication, by the mobile device, of the first information. ### Claim 38 A method for access control to a first device with a mobile device, the method comprising: accepting, by the mobile device, first information known to a user of the mobile device to authenticate the user to the mobile device, and accepting second information to authorize the user to access the first device; generating, by the mobile device, a first time-varying non-predictable value based on combining at least a portion of the second information and a time varying value; receiving, at the first device, a first wireless signal including the first time-varying non-predictable value wirelessly transmitted from the mobile device to the first device, processing, by a secure registry component coupled to the first device, the first time-varying non-predictable value to authenticate the user in possession of the mobile device; and allowing, the user of the mobile device to access the first device following successful authentication. ### Claim 39 (depends on 38) The method of claim 38, wherein the act of receiving the first wireless signal comprises receiving the first wireless signal when the mobile device is with proximity of range of the first wireless signal transmitted from the mobile device to the first device. ### Claim 40 (depends on 38) The method of claim 38, further comprising: receiving, at the first device, subsequent wireless signals from the wireless device on a periodic basis, the periodic basis including a predetermined period during which the first device is configured to receive authentication information; continuing to allow the user to access the first device where the subsequent wireless signals include authentication information that is successfully authenticated; and terminating access to the first device when at least one of the subsequent wireless signals is not received during a respective predetermined period. ### Claim 41 (depends on 38) The method of claim 38, further comprising including in the authentication information included in each of the subsequent wireless signals a respective time-varying non-predictable value generated by the mobile device. ### Claim 42 (depends on 38) The method of claim 38, further comprising: including at least a portion of the secure registry component in the first device; and locally authenticating the user with the first device. ### Claim 43 (depends on 38) The method of claim 38, further comprising: locating at least a portion of a secure registry component remote from the first device; communicating the first time-varying non-predictable value to the remote portion of the secure registry component for initial authentication; and locally authenticating the respective time-varying non-predictable values with the first device. ### Claim 44 (depends on 43) The method of claim 43, further comprising determining that the mobile device is located within a pre-determined distance of the first device. ### Claim 45 (depends on 38) The method of claim 38, wherein the method further comprises communicating the first wireless signal by one of a Bluetooth signal, a near field communication signal and a Wi-Fi signal. ### Claim 46 (depends on 38) The method of claim 38, further comprising storing in memory of the mobile device a seed and at least one of an electronic serial number, a unique code, or a SIM code, and wherein the generating the first time-varying non-predictable value includes, at least in part, combining the seed with at least one of the electronic serial number, the unique code or the SIM code in an exclusive-or operation. ### Claim 47 (depends on 38) The method of claims 38, wherein the first device is configured to forward the first time-varying non-predictable value to another computer system for authenticating the user. ### Claim 48 A system for proximity-based access using a mobile device, the system comprising: a mobile device configured to generate a first authentication code based at least in part on a seed assigned to a user of the mobile device; a processor configured to manage authorization for access to a first device, wherein the processor includes a secure registry component including a seed associated with each user authorized to access the first device; wherein the secure registry component is configured to communicate the seed to the mobile device; wherein the mobile device is configured to receive the seed and to generate the first authentication code and communicate the first authentication code responsive to the mobile device being within proximity to the processor; and wherein the processor is configured to generate respective second authentication codes from seeds associated with each user authorized to access the first device, and permit access to the first device based on matching the-respective second authentication codes to the received first authentication code. ### Claim 49 (depends on 48) The system of claim 48, wherein the each authentication code is generated by employing a combination of time and the seed assigned to the user and communicated to the mobile device. ### Claim 50 (depends on 48) The system of claim 48, wherein the mobile device includes a biometric sensor configured to accept a biometric input from the user, and the first authentication code includes at least information derived from the biometric input. ### Claim 51 (depends on 48) The system of claim 48, wherein the first device is configured to manage physical access to a secure space, and permit entry to the secure space responsive to successful authentication of the user.