US 8,806,603 B2Granted

Dual device system for secure transactions

OwnerJerome Svigals, Howard M. Svigals +2inventors

InventorsJerome Svigals, Howard M. Svigals, Geoff Ingalls, John D. Hipsley

Life of this patent

Estimating the term…

Loading patent…

Abstract

Methods and systems for operating a Smart Device 102 with a secure communication system. A SPARC Security Device (SSD) 104 is in communication with one or more Smart Devices 102. SSD 104 receives a request for a transaction from a Smart Device 102 executing an application obtained from an Application Controlling Institution (ACI) 101, and is asked to verify the validity of the transaction. A one-time identifier (SSD ID, which replaces the user's account number) is generated by the SPARC Security Device 104. The one-time identifier comprises a unique SSD 104 unit identifier and a one-time transaction number. In a Loyalty Application, an ACIRD 81 stores on behalf of participating entities an accounting of at least one of inducements, rebates, loyalty points, and rewards earned by or attributable to users of the SD's 102, and communicates with the SD's 102 and with the associated ACI(s) 101 and SSD(s) 104.

Claims29

Dependent claims

A method for operating a security device, said method comprising the steps of the security device:

receiving a request for a transaction from an application programmable device executing an application sanctioned by an application controlling institution, wherein the transaction is between the application and the application controlling institution, and has been initiated by the application programmable device;
generating a first one-time identifier, the first one-time identifier comprising a unique identification of the security device and a one-time transaction ID, wherein said one-time transaction ID is not generated randomly and is not coordinated with any device other than the security device;
and
communicating to the application programmable device the first one-time identifier, in which the application verifies a validity of the security device identification and, upon verification of said validity, instructs the application programmable device to communicate the first one-time identifier and the transaction to the application controlling institution for processing, wherein the application controlling institution verifies a validity of the first one-time identifier and, upon verification of the validity, processes the transaction;
wherein:
said security device, application programmable device, and application controlling institution securely process the transaction without using encryption, a PIN, or a password;
the transaction request comprises an application controlling institution identification;
and
the security device stores the transaction request and the one-time transaction ID, in order to form an audit trail.

6 more elements

A security device comprising:

a communications module for communicating with an application programmable device executing an application sanctioned by an application controlling institution;
and
a processing unit configured to be operable for:
verifying a validity of a request for a transaction received from the application;
generating, upon the verification, a first one-time identifier, the first one-time identifier comprising a unique identification of the security device and a one-time transaction ID, wherein said one-time transaction ID is not generated randomly and is not coordinated with any device other than the security device;
and
instructing said communications module to communicate the first one-time identifier to the application programmable device, wherein the application verifies a validity of the security device identification and, upon verification of the validity, instructs the application programmable device to communicate the first one-time identifier and a substantive transaction message to the application controlling institution for processing;
wherein:
said security device, application programmable device, and application controlling institution securely process the transaction without using encryption, a PIN, or a password;
the transaction request comprises an application controlling institution identification;
and
the processing unit is configured to be operable for storing the transaction request and the one-time transaction ID, in order to form an audit trail.

9 more elements

Dependencies are inferred from the claim text.

Facts

Application: 13/895,155Filed 15 May 2013 · continuation in part
Priority: 11 Apr 2012
Published: US 2013/0081122 A131 Oct 2013
Granted: 12 Aug 2014
Term ends: Not estimatedThe source records don’t support an estimate.

Classification10 codes

G06Q 30/0226
Discounts or incentives, e.g. coupons or rebates: incentive systems for frequent usage, e.g. frequent flyer miles programs or point systems
G06F 21/34
User authentication: involving the use of external additional devices, e.g. dongles or smart cards
G06F 21/44
Authentication, i.e. establishing the identity or authorisation of security principals: program or device authentication
H04L 9/3228
Using a predetermined code, e.g. password, passphrase or PIN: one-time or temporary data, i.e. information which is sent for every authentication…

Family

Application13/444,551Parent of this continuation-in-part · filed 11 Apr 2012
Application61/688,465Us provisional application · filed 16 May 2012
Application61/742,712Us provisional application · filed 17 Aug 2012
Application61/795,190Us provisional application · filed 12 Oct 2012
US 2013/0290078 A1Pre-grant publication · published 31 Oct 2013
US 8,453,223 B2Parent of this continuation-in-part
US 2013/0081122 A1Published application
US 8,806,603 B2This patent

From the US filing history. Foreign family members aren’t listed.