# US 2019/0318382 A1 · Secure visual transactions for mobile devices

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2019/0318382 A1
- Document ID: US20190318382A1
- Status: Published application
- Kind: A1
- Application number: 16/244,940
- Filed: 2019-01-10
- Published: 2019-10-17
- Earliest claimed: 2018-04-11
- Assignees: Intel Corporation
- Applicants: Intel Corporation
- Inventors: Shao-Wen Yang; Ned M. Smith; Addicam V. Sanjay; James Quaranta, JR.; Joshua Ruggiero; Jose A. Avalos
- Web page: https://patentgrep.com/patent/US20190318382A1

## CPC

- G06Q 30/0255: {based on user history}
- G06F 16/955: using information identifiers, e.g. uniform resource locators [URL]
- G06F 21/36: by graphic or iconic representation
- G06F 21/53: by executing in a restricted environment, e.g. sandbox or secure virtual machine
- G06Q 20/3221: {Access to banking information through M-devices}
- G06Q 20/326: {Payment applications installed on the mobile devices}
- G06Q 20/3274: {using a pictured code, e.g. barcode or QR-code, being displayed on the M-device}
- G06Q 20/3276: {using a pictured code, e.g. barcode or QR-code, being read by the M-device}
- G06Q 20/38215: {Use of certificates or encrypted proofs of transaction rights}
- G06Q 30/0268: {at point-of-sale [POS]}
- G07G 1/01: Details for indicating
- G06F 16/9554: {by using bar codes}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G07G: REGISTERING THE RECEIPT OF CASH, VALUABLES, OR TOKENS

## Abstract

In one embodiment, an apparatus comprises a display interface to communicate with a display device and a processor. The processor is to: identify a mobile transaction associated with a user, wherein the mobile transaction comprises a potential transaction to be completed using a mobile device of the user; access transaction data associated with the mobile transaction; encrypt the transaction data based on an encryption key associated with the user; generate a visual code associated with the encrypted transaction data, wherein the visual code comprises visually encoded data, and wherein the visual code is generated within a protected execution environment of the processor; establish a protected datapath between the processor and the display device via the display interface; and transmit the visual code to the display device via the protected datapath, wherein the visual code is to be displayed on the display device.

## Claims

### Claim 1

An apparatus, comprising:
a display interface to communicate with a display device; and
a processor to:
identify a mobile transaction associated with a user, wherein the mobile transaction comprises a potential transaction to be completed using a mobile device of the user;
access transaction data associated with the mobile transaction;
encrypt the transaction data based on an encryption key associated with the user, wherein encrypting the transaction data causes encrypted transaction data to be generated;
generate a visual code associated with the encrypted transaction data, wherein the visual code comprises visually encoded data, and wherein the visual code is generated within a protected execution environment of the processor;
establish a protected datapath between the processor and the display device, wherein the protected datapath is established via the display interface; and
transmit the visual code to the display device via the protected datapath, wherein the visual code is to be displayed on the display device.

### Claim 2 (depends on 1)

The apparatus of claim 1, wherein the visual code comprises a quick response (QR) code.

### Claim 3 (depends on 1)

The apparatus of claim 1, wherein the protected execution environment comprises a trusted execution environment (TEE).

### Claim 4 (depends on 1)

The apparatus of claim 1, wherein:
the processor to establish the protected datapath between the processor and the display device is further to:
establish a second encryption key associated with the protected datapath, wherein transmissions between the processor and the display device via the display interface are to be encrypted based on the second encryption key; and
the processor to transmit the visual code to the display device via the protected datapath is further to:
encrypt the visual code based on the second encryption key, wherein encrypting the visual code causes an encrypted visual code to be generated; and
transmit the encrypted visual code to the display device via the protected datapath.

### Claim 5 (depends on 1)

The apparatus of claim 1, wherein:
the potential transaction comprises a purchase of one or more products; and
the transaction data comprises data associated with purchasing the one or more products.

### Claim 6 (depends on 5)

The apparatus of claim 5, wherein:
the potential transaction is associated with an advertisement for the one or more products; and
the processor is further to cause the advertisement to be displayed on the display device.

### Claim 7 (depends on 1)

The apparatus of claim 1, wherein the processor to generate the visual code associated with the encrypted transaction data is further to:
store the encrypted transaction data at a network location, wherein the encrypted transaction data is accessible by the mobile device via a uniform resource locator (URL) associated with the network location; and
encode the URL into the visual code.

### Claim 8 (depends on 1)

The apparatus of claim 1, wherein the processor is further to detect the user within a proximity of the display device, wherein the user is detected based on visual data captured by one or more vision sensors.

### Claim 9 (depends on 8)

The apparatus of claim 8, wherein the processor is further to obtain the encryption key associated with the user from the mobile device.

### Claim 10

A system, comprising:
one or more vision sensors to capture visual data associated with an environment;
a display device; and
one or more processing devices to:
detect a user within a proximity of the display device, wherein the user is detected based on the visual data captured by the one or more vision sensors;
identify a mobile transaction associated with the user, wherein the mobile transaction comprises a potential transaction to be completed using a mobile device of the user;
access transaction data associated with the mobile transaction;
encrypt the transaction data based on an encryption key associated with the user, wherein encrypting the transaction data causes encrypted transaction data to be generated;
generate a visual code associated with the encrypted transaction data, wherein the visual code comprises visually encoded data, and wherein the visual code is generated within a protected execution environment of the one or more processing devices;
establish a protected datapath between the one or more processing devices and the display device; and
transmit the visual code to the display device via the protected datapath, wherein the visual code is to be displayed on the display device.

### Claim 11 (depends on 10)

The system of claim 10, wherein:
the one or more vision sensors are further to scan a second visual code displayed on the mobile device of the user, wherein the second visual code comprises a visual encoding of the encryption key associated with the user; and
the one or more processing devices are further to decode the second visual code to obtain the encryption key associated with the user.

### Claim 12 (depends on 10)

The system of claim 10, wherein the visual code comprises a quick response (QR) code.

### Claim 13 (depends on 10)

The system of claim 10, wherein:
the one or more processing devices to establish the protected datapath between the one or more processing devices and the display device are further to:
establish a second encryption key associated with the protected datapath, wherein transmissions between the one or more processing devices and the display device are to be encrypted based on the second encryption key; and
the one or more processing devices to transmit the visual code to the display device via the protected datapath is further to:
encrypt the visual code based on the second encryption key, wherein encrypting the visual code causes an encrypted visual code to be generated; and
transmit the encrypted visual code to the display device via the protected datapath.

### Claim 14 (depends on 10)

The system of claim 10, wherein:
the potential transaction comprises a purchase of one or more products; and
the transaction data comprises data associated with purchasing the one or more products.

### Claim 15 (depends on 14)

The system of claim 14, wherein the one or more processing devices are further to:
detect the one or more products in a shopping cart of the user, wherein the one or more products are detected based on the visual data captured by the one or more vision sensors.

### Claim 16 (depends on 14)

The system of claim 14, wherein:
the potential transaction is associated with an advertisement for the one or more products; and
the one or more processing devices are further to cause the advertisement to be displayed on the display device.

### Claim 17 (depends on 16)

The system of claim 16, wherein the one or more processing devices are further to:
detect a shopper context associated with the user, wherein the shopper context is detected based at least in part on the visual data captured by the one or more vision sensors, and wherein the shopper context comprises one or more of:
identity of the user;
demography of the user;
purchase history of the user;
current position of the user within a retail environment; or
current contents of a shopping cart associated with the user; and
select the advertisement based on the shopper context.

### Claim 18 (depends on 10)

The system of claim 10, wherein the one or more processing devices to generate the visual code associated with the encrypted transaction data are further to:
store the encrypted transaction data at a network location, wherein the encrypted transaction data is accessible by the mobile device via a uniform resource locator (URL) associated with the network location; and
encode the URL into the visual code.

### Claim 19

At least one machine accessible storage medium having instructions stored thereon, wherein the instructions, when executed on a machine, cause the machine to:
detect a user within a proximity of a display device, wherein the user is detected based on visual data captured by one or more vision sensors;
identify a mobile transaction associated with the user, wherein the mobile transaction comprises a potential transaction to be completed using a mobile device of the user;
access transaction data associated with the mobile transaction;
encrypt the transaction data based on an encryption key associated with the user, wherein encrypting the transaction data causes encrypted transaction data to be generated;
generate a visual code associated with the encrypted transaction data, wherein the visual code comprises visually encoded data, and wherein the visual code is generated within a protected execution environment of a processor;
establish a protected datapath between the processor and the display device; and
transmit the visual code to the display device via the protected datapath, wherein the visual code is to be displayed on the display device.

### Claim 20 (depends on 19)

The storage medium of claim 19, wherein:
the instructions that cause the machine to establish the protected datapath between the processor and the display device further cause the machine to:
establish a second encryption key associated with the protected datapath, wherein transmissions between the processor and the display device are to be encrypted based on the second encryption key; and
the instructions that cause the machine to transmit the visual code to the display device via the protected datapath further cause the machine to:
encrypt the visual code based on the second encryption key, wherein encrypting the visual code causes an encrypted visual code to be generated; and
transmit the encrypted visual code to the display device via the protected datapath.

### Claim 21 (depends on 19)

The storage medium of claim 19, wherein:
the potential transaction is associated with an advertisement for one or more products; and
the instructions further cause the machine to:
detect a shopper context associated with the user, wherein the shopper context is detected based at least in part on the visual data captured by the one or more vision sensors, and wherein the shopper context comprises one or more of:
identity of the user;
demography of the user;
purchase history of the user;
current position of the user within a retail environment; or
current contents of a shopping cart associated with the user;
select the advertisement based on the shopper context; and
cause the advertisement to be displayed on the display device.

### Claim 22 (depends on 19)

The storage medium of claim 19, wherein the instructions that cause the machine to generate the visual code associated with the encrypted transaction data further cause the machine to:
store the encrypted transaction data at a network location, wherein the encrypted transaction data is accessible by the mobile device via a uniform resource locator (URL) associated with the network location; and
encode the URL into the visual code.

### Claim 23

A method, comprising:
detecting a user within a proximity of a display device, wherein the user is detected based on visual data captured by one or more vision sensors;
identifying a mobile transaction associated with the user, wherein the mobile transaction comprises a potential transaction to be completed using a mobile device of the user;
accessing transaction data associated with the mobile transaction;
encrypting the transaction data based on an encryption key associated with the user, wherein encrypting the transaction data causes encrypted transaction data to be generated;
generating a visual code associated with the encrypted transaction data, wherein the visual code comprises visually encoded data, and wherein the visual code is generated within a protected execution environment of a processor;
establishing a protected datapath between the processor and the display device; and
transmitting the visual code to the display device via the protected datapath, wherein the visual code is to be displayed on the display device.

### Claim 24 (depends on 23)

The method of claim 23, wherein the potential transaction is associated with an advertisement for one or more products, and wherein the method further comprises:
detecting a shopper context associated with the user, wherein the shopper context is detected based at least in part on the visual data captured by the one or more vision sensors, and wherein the shopper context comprises one or more of:
identity of the user;
demography of the user;
purchase history of the user;
current position of the user within a retail environment; or
current contents of a shopping cart associated with the user;
selecting the advertisement based on the shopper context; and
causing the advertisement to be displayed on the display device.

### Claim 25 (depends on 23)

The method of claim 23, wherein generating the visual code associated with the encrypted transaction data comprises:
storing the encrypted transaction data at a network location, wherein the encrypted transaction data is accessible by the mobile device via a uniform resource locator (URL) associated with the network location; and
encoding the URL into the visual code.