US 2017/0364911 A1Published application

Systems and method for enabling secure transaction

AssigneeCryptomathic Ltd.

InventorsMads Landrok, Peter Landrock

Life of this patent

Estimating the term…

Loading patent…

Abstract

Embodiments of the present invention provide systems and methods of generating a secure transaction, particularly when the transaction is made using a mobile computing device. This is achieved by eliminating the need for cryptographic keys to be stored on the mobile computing device, by firstly creating a strong link between users and their devices, and storing this pre-defined link with a trusted authentication service (i.e. in a secure backend payment system), and secondly using the pre-defined link between user and device to generate a unique, electronic or digital signature for a transaction which will authorise a payment, wherein the digital signature having been generated by using authentication information comprising a first authentication identifier and a second authentication identifier.

Claims25

Dependent claims

A method of generating a secure transaction on behalf of a user having a user device, the method comprising:

using authentication information to authenticate the user device, the authentication information comprising a first portion for authenticating the user device and a second portion for authenticating a message from the user device;
receiving a request from the user device to initiate a secure transaction via a first communication channel;
receiving a first authentication identifier from the user device wherein the first authentication identifier is based on the first portion of the authentication information;
receiving a message comprising transaction details from the user device via the first communication channel;
receiving a second authentication identifier from the user device wherein the second authentication identifier is based on the message and the second portion of the authentication information;
determining whether the first and second authentication identifier are authentic and only if both authentication identifier are authentic;
the method further comprises:
generating secure information which is unique to the user for the secure transaction;
and
outputting the secure information whereby the secure information is used secure the secure transaction.

7 more elements

A secure backend payment system for generating a secure transaction on behalf of a user having a user device, the system being configured to:

use authentication information to authenticate the user device, the authentication information comprising a first portion for authenticating the user device and a second portion for authenticating a message from the user device;
receive a request from the user device to initiate a secure transaction via a first communication channel;
receive a first authentication identifier from the user device wherein the first authentication identifier is based on the first portion of the authentication information;
receive a message comprising transaction details from the user device via the first communication channel;
receive a second authentication identifier from the user device wherein the second authentication identifier is based on the message and the second portion of the authentication information;
determine whether the first and second authentication identifier are authentic and only if both authentication identifier are authentic;
the method further comprises:
generate secure information which is unique to the user for the secure transaction;
and
output the secure information whereby the secure information is used secure the secure transaction.

7 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/534,989Filed 10 Dec 2015
Priority: GB 1422158.412 Dec 2014
Published: 21 Dec 2017
Term ends: Not estimatedThe source records don’t support an estimate.

Classification17 codes

G06Q 20/3823
Insuring higher security of transaction: combining multiple encryption tools for a transaction
H04L 9/3271
Including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity…: using…
G06Q 20/351
Using cards, e.g. integrated circuit [IC] cards or magnetic cards: virtual cards
G06Q 20/3825
Insuring higher security of transaction: use of electronic signatures

Family

No related US applications are recorded in the indexed filing history.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key