# US 2018/0025351 A1 · Mobile device security using wearable security tokens > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0025351 A1 - Document ID: US20180025351A1 - Status: Published application - Kind: A1 - Application number: 15/721,032 - Filed: 2017-09-29 - Published: 2018-01-25 - Earliest claimed: 2008-02-08 - Assignees: Microsoft Technology Licensing, LLC - Applicants: Microsoft Technology Licensing, LLC - Inventors: Yuqun Chen; Gideon A. Yuval; Michael Jack Sinclair - Web page: https://patentgrep.com/patent/US20180025351A1 ## CPC - G06Q 20/3674: {involving authentication} - G06Q 20/204: {comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit} - G06Q 20/321: {using wearable devices} - G06Q 20/322: {Aspects of commerce using mobile devices [M-devices]} - H04L 63/0492: {by using a location-limited connection, e.g. near-field communication or limited proximity of entities} - H04W 12/06: Authentication - H04W 12/08: Access security - H04W 12/30: Security of mobile devices; Security of mobile applications - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04W 12/63: Location-dependent; Proximity-dependent - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Optimizations are provided for completing a transaction event using authentication information. In particular, a presence of a transaction processing device is initially detected. Then, transaction information is received from the transaction processing device. The transaction information corresponds to a current transaction event. After receiving the information, a communication link is established with an on-body device. This device includes authentication information that is necessary to complete the current transaction event. The authentication information is then received from the on-body device. This information has a time-limited use availability. Finally, the received authentication information is used to complete the current transaction event. ## Claims ### Claim 1 A computer system comprising: one or more processors; and one or more computer-readable hardware storage devices having stored thereon computer-executable instructions, the computer-executable instructions being executable by the one or more processors to cause the computer system to: detect a presence of a transaction processing device; receive transaction information from the transaction processing device, the transaction information corresponding to a current transaction event occurring between the computer system and the transaction processing device; after receiving the transaction information, establish a communication link with an on-body security device, the on-body security device including authentication information that is necessary to complete the current transaction event; receive, via the communication link, the authentication information from the on-body security device, wherein the received authentication information has a time-limited use availability; and use the received authentication information to complete the current transaction event. ### Claim 2 (depends on 1) The computer system of claim 1, wherein the on-body security device is one of a wrist band, finger ring, necklace, earring, labret, or textile. ### Claim 3 (depends on 1) The computer system of claim 1, wherein the computer system is a mobile telephone. ### Claim 4 (depends on 1) The computer system of claim 1, wherein the computer system provides power to the on-body security device when the on-body security device is within a particular proximate distance to the computer system. ### Claim 5 (depends on 1) The computer system of claim 1, wherein the computer system maintains an intermittent communication link with the on-body security device. ### Claim 6 (depends on 1) The computer system of claim 1, wherein the communication link is a continuous communication link. ### Claim 7 (depends on 1) The computer system of claim 1, wherein the computer system previously authenticated itself with the on-body security device. ### Claim 8 (depends on 1) The computer system of claim 1, wherein the authentication information includes a root key. ### Claim 9 (depends on 1) The computer system of claim 1, wherein the received authentication information is encrypted when it is transmitted by the on-body security device to the computer system, and wherein the computer-system decrypts the received authentication information prior to using it to complete the current transaction event. ### Claim 10 (depends on 1) The computer system of claim 1, wherein detecting the presence of the transaction processing device is performed by physically placing the computer system within a particular proximate distance to the transaction processing device. ### Claim 11 (depends on 1) The computer system of claim 1, wherein the transaction information includes an amount owed corresponding to the current transaction event. ### Claim 12 (depends on 1) The computer system of claim 1, wherein, after the communication link is established with the on-body security device, execution of the computer-executable instructions further causes the computer system to query the on-body security device, the query including a randomly-generated number, the randomly-generated number being encrypted using a public key of the on-body security device. ### Claim 13 (depends on 12) The computer system of claim 12, wherein, after the on-body security device receives the query, the computer system receives a response number from the on-body security device, the response number having been encrypted by the on-body security device using a public key of the computer system, wherein the response number, after being decrypted by the computer system, is of a same value as the randomly-generated number. ### Claim 14 A computer system comprising: one or more processors; and one or more computer-readable hardware storage devices having stored thereon computer-executable instructions, the computer-executable instructions being executable by the one or more processors to cause the computer system to: detect a presence of a transaction processing device; receive transaction information from the transaction processing device, the transaction information corresponding to a current transaction event occurring between the computer system and the transaction processing device; after receiving the transaction information, establish a communication link with an on-body security device, the on-body security device including a root key usable to unlock locked information stored on the computer system, the locked information being necessary to complete the transaction event; receive, via the communication link, the root key from the on-body security device, wherein the received root key has a time-limited use availability, and wherein the received root key is stored in memory of the computer system; use the received root key to unlock the locked information, wherein the current transaction event is subsequently completed using the unlocked locked information; and delete the received root key from the computer system's memory. ### Claim 15 (depends on 14) The computer system of claim 14, wherein the communication link is established when the computer system is brought within a particular proximate distance to the on-body security device, and wherein, when the particular proximate distance is satisfied, the computer system provides power to the on-body security device to establish the communication link. ### Claim 16 (depends on 14) The computer system of claim 14, wherein the communication link is established via a physical connection between the on-body security device and the computer system. ### Claim 17 (depends on 14) The computer system of claim 14, wherein the communication link is established via a wireless connection between the on-body security device and the computer system. ### Claim 18 A method for completing a transaction event using authentication information, the method being implemented by one or more processors of a computer system, the method comprising: detecting a presence of a transaction processing device; receiving transaction information from the transaction processing device, the transaction information corresponding to a current transaction event occurring between the computer system and the transaction processing device; after receiving the transaction information, establishing a communication link with an on-body security device, the on-body security device including authentication information that is necessary to complete the current transaction event; receiving, via the communication link, the authentication information from the on-body security device, wherein the received authentication information has a time-limited use availability; and using the received authentication information to complete the current transaction event. ### Claim 19 (depends on 18) The method of claim 18, wherein the on-body security device is a finger ring. ### Claim 20 (depends on 18) The method of claim 18, wherein the received authentication information is encrypted prior to being received by the computer system, and wherein the received authentication information is decrypted prior to the current transaction being completed.