# US 9,519,899 B2 · Secure mobile-based financial transactions > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,519,899 B2 - Document ID: US9519899B2 - Status: Granted - Kind: B2 - Application number: 14/697,871 - Filed: 2015-04-28 - Published: 2015-08-27 - Granted: 2016-12-13 - Earliest claimed: 2009-10-27 - Assignees: AT&T Mobility II LLC - Applicants: AT&T Mobility II LLC - Inventors: Spencer Neil White - Web page: https://patentgrep.com/patent/US9519899B2 ## CPC - G06Q 20/327: {Short range or proximity payments by means of M-devices} - G06Q 20/00: Payment architectures, schemes or protocols (apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12) - G06Q 20/04: Payment circuits - G06Q 20/105: {involving programming of a portable memory device, e.g. IC cards, "electronic purses"} - G06Q 20/18: involving self-service terminals [SST], vending machines, kiosks or multimedia terminals - G06Q 20/20: Point-of-sale [POS] network systems - G06Q 20/202: {Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR} - G06Q 20/204: {comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit} - G06Q 20/3223: {Realising banking transactions through M-devices} - G06Q 20/3227: {using secure elements embedded in M-devices} - G06Q 20/3255: {using mobile network messaging services for payment, e.g. SMS} - G06Q 20/3278: {RFID or NFC payments by means of M-devices} - G06Q 20/3829: {involving key management} - G06Q 20/385: {using an alias or single-use codes} - G06Q 20/40: Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists - G06Q 20/425: {using two different networks, one for transaction and one for security confirmation} - G06Q 20/102: {Bill distribution or payments} - G06Q 20/326: {Payment applications installed on the mobile devices} - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract Devices, systems and methods are disclosed which relate to securing payments from a mobile communications device. In exemplary embodiments, a mobile communications device communicates with a payment server via a point-of-sale device to conduct a transaction. The mobile communications device uses a client payment logic to send payment information to the point-of-sale device. The point-of-sale device uses a vendor payment logic to forward the payment information to the payment server. The payment server verifies the payment information and sends confirmation to the point-of-sale device. ## Claims ### Claim 1 A mobile communications device comprising: a processor; and a memory storing instructions that, when executed by the processor, cause the processor to perform operations comprising receiving, from a point-of-sale device, a one-time digital key and an amount associated with a transaction, generating a random number, generating a payment number by combining the one-time digital key with the random number, wherein combining the one-time digital key with the random number comprises mixing numbers of the one-time digital key with numbers of the random number, sending, to a payment server, a payment comprising the payment number and the amount, and receiving, from the point-of-sale device, an acknowledgment of the payment, wherein the amount associated with the payment is deducted from an account associated with the mobile communications device. ### Claim 2 (depends on 1) The mobile communications device of claim 1, wherein the operations further comprise receiving, from the payment server after receiving the acknowledgment of the payment, a new one-time digital key for use with a new transaction. ### Claim 3 (depends on 1) The mobile communications device of claim 1, wherein the operations further comprise receiving, when the amount associated with the payment exceeds a payment cap, a verification message requesting authorization of the transaction from a user of the mobile communications device. ### Claim 4 (depends on 3) The mobile communications device of claim 3, wherein the operations further comprise providing, in response to the verification message and the user authorizing the transaction, a verification of the transaction. ### Claim 5 (depends on 3) The mobile communications device of claim 3, wherein the operations further comprise receiving, from the user in response to the verification message, a command to cancel the transaction based on the user not recognizing the transaction. ### Claim 6 (depends on 1) The mobile communications device of claim 1, wherein the one-time digital key is received from the point-of-sale device versus the payment server when the mobile communications device is not connected to the payment server via a cellular network. ### Claim 7 (depends on 1) The mobile communications device of claim 1, wherein the mobile communications device and the point-of-sale device communicate via a first wireless network and the mobile communications device and the payment server communicate via a second wireless network. ### Claim 8 A memory storing instructions that, when executed by a processor of a mobile communications device, cause the processor to perform operations comprising: receiving, from a point-of-sale device, a one-time digital key and an amount associated with a transaction; generating a random number; generating a payment number by combining the one-time digital key with the random number, wherein combining the one-time digital key with the random number comprises mixing numbers of the one-time digital key with numbers of the random number; sending, to a payment server, a payment comprising the payment number and the amount; and receiving, from the point-of-sale device, an acknowledgment of the payment, wherein the amount associated with the payment is deducted from an account associated with the mobile communications device. ### Claim 9 (depends on 8) The memory of claim 8, wherein the operations further comprise receiving, from the payment server after receiving the acknowledgment of the payment, a new one-time digital key for use with a new transaction. ### Claim 10 (depends on 8) The memory of claim 8, wherein the operations further comprise receiving, when the amount associated with the payment exceeds a payment cap, a verification message requesting authorization of the transaction from a user of the mobile communications device. ### Claim 11 (depends on 10) The memory of claim 10, wherein the operations further comprise providing, in response to the verification message and the user authorizing the transaction, a verification of the transaction. ### Claim 12 (depends on 10) The memory of claim 10, wherein the operations further comprise receiving, from the user in response to the verification message, a command to cancel the transaction based on the user not recognizing the transaction. ### Claim 13 (depends on 8) The memory of claim 8, wherein the one-time digital key is received from the point-of-sale device versus the payment server when the mobile communications device is not connected to the payment server via a cellular network. ### Claim 14 (depends on 8) The memory of claim 8, wherein the mobile communications device and the point-of-sale device communicate via a first wireless network and the mobile communications device and the payment server communicate via a second wireless network. ### Claim 15 A method comprising: receiving, at a mobile communications device, from a point-of-sale device, a one-time digital key and an amount associated with a transaction; generating, by the mobile communications device, a random number; generating, by the mobile communications device, a payment number by combining the one-time digital key with the random number, wherein combining the one-time digital key with the random number comprises mixing numbers of the one-time digital key with numbers of the random number; sending, by the mobile communications device, to a payment server, a payment comprising the payment number and the amount; and receiving, by the mobile communications device, from the point-of-sale device, an acknowledgment of the payment, wherein the amount associated with the payment is deducted from an account associated with the mobile communications device. ### Claim 16 (depends on 15) The method of claim 15, further comprising receiving, from the payment server after receiving the acknowledgment of the payment, a new one-time digital key for use with a new transaction. ### Claim 17 (depends on 15) The method of claim 15, further comprising receiving, when the amount associated with the payment exceeds a payment cap, a verification message requesting authorization of the transaction from a user of the mobile communications device. ### Claim 18 (depends on 17) The method of claim 17, further comprising providing, in response to the verification message and the user authorizing the transaction, a verification of the transaction. ### Claim 19 (depends on 17) The method of claim 17, further comprising receiving, from the user in response to the verification message, a command to cancel the transaction based on the user not recognizing the transaction. ### Claim 20 (depends on 15) The method of claim 15, wherein the one-time digital key is received from the point-of-sale device versus the payment server when the mobile communications device is not connected to the payment server via a cellular network.