Patent Application
20130179353
The present disclosure relates to techniques for conducting financial transactions. More specifically, the present disclosure relates to a technique for establishing a secure connection between electronic devices using a first communication technique, and then completing the financial transactions by communicating information between the electronic devices using a second communication technique.
Portable electronic devices, such as cellular telephones, are increasingly being used to conduct financial transactions. For example, using near-field communication (NFC), financial information associated with a financial instrument (such as a credit or debit card), which is stored on a secure element of a cellular telephone, can be communicated in a secure manner when the cellular telephone and a point-of-sale terminal are in immediate proximity or are touching.
However, because of security and fraud concerns, financial transactions are becoming increasingly complicated. In particular, in order to complete payment for a product or a service, a customer now often needs to do more than merely authorize the transfer of funds. For example, the customer may need to provide: a personal identification number (PIN), details of the financial transaction, their signature, etc. In addition, the customer often needs to perform additional operations to exchange information associated with: coupons, loyalty programs, future promotional offers, store-account information, etc.
It can be difficult to perform these additional operations using NFC because NFC has a low data rate and typically cannot quickly communicate large amounts of information. Therefore, in order to convey all the required information needed to complete a financial transaction, a customer may need to ‘touch’ or bring their cellular telephone in close proximity to a point-of-sale terminal multiple times. Alternatively, the customer may need to interact with a separate payment terminal. In addition, some operations in the payment process (such as authorization by the issuer of a credit card or a debit card) may take a long time (for example, 10-20 seconds). These constraints can be awkward and annoying for the customer, which may reduce their willingness to conduct such financial transactions and, therefore, may reduce commercial activity.
The disclosed embodiments relate to an electronic device that completes a financial transaction. During operation, the electronic device exchanges, using a first communication technique, information with a second electronic device to establish a secure connection between the electronic device and the second electronic device when the electronic device and the second electronic device are proximate to each other. After the secure connection is established, the electronic device hands off communication with the second electronic device from the first communication technique to a second communication technique, where the second communication technique supports communication at a higher data rate and over longer distances than the first communication technique. Moreover, the electronic device communicates, using the second communication technique and the secure connection, additional information associated with the financial transaction with the second electronic device, where the additional information facilitates completion of the financial transaction.
Note that the electronic device may establish the secure connection when a user of one of the electronic device and the second electronic device positions the electronic device and the second electronic device proximate to each other. For example, proximate may include physical contact between the electronic device and the second electronic device. Furthermore, after the electronic device and the second electronic device are positioned proximate to each other, the remaining operations may be performed without further action by users of the electronic device and the second electronic device and/or without the electronic device and the second electronic device remaining proximate to each other.
Additionally, the first communication technique may include near-field communication and/or the second communication technique may include: Bluetooth™ (from the Bluetooth Special Interest Group of Kirkland, Wash.), wireless communication and/or the Internet.
In some embodiments, the information includes a cryptographic key. For example, the cryptographic key may be locally generated in one of the electronic device and the second electronic device. Alternatively or additionally, the information may include an identity attribute.
Note that the secure connection may include a pairwise connection between the electronic device and the second electronic device.
In some embodiments, after exchanging the information, the electronic device: provides the information to a service provider at a remote location from the electronic device and the second electronic device; and receives connection information from the service provider which establishes the secure connection between the electronic device and the second electronic device. Alternatively or additionally, after exchanging the information, the electronic device and/or the second electronic device may establish the secure connection between the electronic device and the second electronic device based on the information.
Moreover, the additional information may correspond to a multiple-stage financial transaction, where a given stage involves communication of at least some of the additional information between the electronic device and the second electronic device. For example, the additional information may include information associated with: an item to be purchased, a financial instrument used to pay for the item, a discount offer for the financial transaction, a discount offer for a second financial transaction after the financial transaction, a customer loyalty program, and/or a receipt for the financial transaction.
Another embodiment provides a method that includes at least some of the operations performed by the electronic device.
Another embodiment provides a computer-program product for use with the electronic device. This computer-program product includes instructions for at least some of the operations performed by the electronic device.
Note that like reference numerals refer to corresponding parts throughout the drawings. Moreover, multiple instances of the same part are designated by a common prefix separated from an instance number by a dash.
Embodiments of an electronic device, a technique for completing a financial transaction, and a computer-program product (e.g., software) for use with the electronic device are described. During this financial technique, electronic devices may exchange, using a first communication technique, information with each other to establish a secure connection between the electronic devices when they are proximate to each other. After the secure connection is established, the electronic devices may hand off communication with each other from the first communication technique to a second communication technique that supports communication at a higher data rate and over longer distances than the first communication technique. Moreover, the electronic devices may communicate, using the second communication technique and the secure connection, additional information associated with the financial transaction with each other to facilitate completion of the financial transaction.
This financial technique may allow users of the electronic devices to reduce the effort and the inconvenience associated with completion of the financial transaction. For example, after the secure connection is established, the users may not need to keep the electronic devices proximate to each other. Thus, communication between the electronic devices via the secure connection may occur over longer distances. This may eliminate the need for the users to ‘touch’ or bring the electronic devices in close proximity multiple times during the financial transaction as the additional information is exchanged. Furthermore, after the secure connection is established, the users may not need to explicitly perform any additional actions. By simplifying the process of completing the financial transaction and making it more convenient for the users, the financial technique may improve the buying and payment experience and, thus, may increase commercial activity.
In the discussion that follows, a recipient, an entity, or a user may include: an individual (for example, an existing customer, a new customer, a service provider, a vendor, a contractor, etc.), an organization, a business and/or a government agency. Furthermore, a ‘business’ should be understood to include: for-profit corporations, non-profit corporations, organizations, groups of individuals, sole proprietorships, government agencies, partnerships, etc.
We now describe embodiments of the financial technique, which may be performed by a system (such as system 300 in
Then, the secure connection is established (operation 112). In some embodiments, establishing the secure connection (operation 112) involves: providing the information to a service provider at a remote location from the electronic device and the second electronic device; and receiving connection information from the service provider which establishes the secure connection between the electronic device and the second electronic device. Alternatively or additionally, the electronic device and/or the second electronic device may establish the secure connection between the electronic device and the second electronic device based on the information. Thus, the information exchanged in operation 110 may be sufficient to establish the secure connection.
After the secure connection is established (operation 112), the electronic device hands off communication with the second electronic device from the first communication technique to a second communication technique (operation 114), where the second communication technique supports communication at a higher data rate and over longer distances (such as over several meters) than the first communication technique. For example, the second communication technique may include: Bluetooth™ (from the Bluetooth Special Interest Group of Kirkland, Wash.), wireless communication and/or the Internet. Therefore, after the secure connection is established (operation 112), the electronic device and the second electronic device may not need to remain in proximity to each other.
Moreover, the electronic device communicates, using the second communication technique and the secure connection, additional information associated with the financial transaction with the second electronic device (operation 116), where the additional information facilitates completion of the financial transaction. For example, the additional information may correspond to a multiple-stage financial transaction, where a given stage involves communication of at least some of the additional information between the electronic device and the second electronic device. In some embodiments, the additional information includes information associated with: an item to be purchased, a financial instrument used to pay for the item, a discount offer for the financial transaction, a discount offer for a second financial transaction after the financial transaction, a customer loyalty program, and/or a receipt for the financial transaction.
Note that the electronic device may perform the exchanging (operation 110) when a user of one of the electronic device and the second electronic device positions the electronic device and the second electronic device proximate to each other. Furthermore, after the electronic device and the second electronic device are positioned proximate to each other, the remaining operations in method 100 may be performed without further action by users of the electronic device and the second electronic device and/or, as noted previously, the electronic device and the second electronic device may not need to remain proximate to each other.
In an exemplary embodiment, the financial technique is implemented using two electronic devices, which communicate using different communication techniques, one of which may be mediated using near-field communication (NFC) and the other of which may be medicated using a network, such as a cellular-telephone network and/or the Internet. This is illustrated in
After the secure connection has been established, electronic devices 210 and 212 may hand off communication to a second communication technique (operations 224 and 226). Then, electronic devices 210 and 212 may communicate additional information (operations 228 and 230) with each other to complete the financial transaction.
In some embodiments of method 100 (
In an exemplary embodiment, the financial technique is used in conjunction with smartphones that are used as payment instruments, thereby allowing a wide variety of additional information (in addition to authorization) to be communicated between parties during a financial transaction, including: providing details of the payment instrument, providing details of the financial transaction, providing a receipt for the financial transaction, providing and/or redeeming loyalty offers, providing coupons, providing a receipt, etc. Moreover, these interactions during the financial transaction can be completed without requiring that a user's smartphone remain in contact (or close proximity) with a point-of-sale terminal (or an electronic device of the payee in the financial transaction) as would be the case if only the (short range) first communication technique (such as NFC) were used during the financial transaction.
For example, NFC may be used to establish the secure connection between the electronic devices. Note that, to initiate a mobile payment, a user (the payer in the financial transaction) may tap their cellular telephone on a payment terminal (and, more generally, on a point-of-sale terminal). For example, in response to the initial ‘tap’ or ‘touch’ between the electronic devices, a cryptographic key and connectivity parameters for a connection handoff may be exchanged, such as a media access control (MAC) address and/or a universally unique identifier (UUID) for Bluetooth™.
Once the secure connection has been established, the secure connection may be handed over to Bluetooth™, peer-to-peer WiFi™ (from the Wi-Fi Alliance of Austin, Tex.) or another type of communication technique that enables a rich user experience while continuously maintaining the secure connection between the electronic devices over an extended period of time. Using this other type of communication technique, the payer may accomplish subsequent interactions via their cellular telephone. For example, a screen or window with the financial transaction details may be displayed, along with an approve-or-cancel dialog box. Moreover, if a personal identification number (PIN) is requested, the PIN may be entered by the payer on their cellular telephone, and proof that the PIN was correctly entered may be provided to the payment terminal. Similarly, if a signature is requested, the payer may ‘sign’ on the cellular telephone and a digital image of their signature may be provided to the payment terminal. These additional interactions may occur without additional ‘touches’ or ‘taps’ between the electronic devices. Thus, the financial technique may involve a single ‘tap’ where the electronic devices are brought into close proximity or touch each other.
We now describe embodiments of the system and the electronic device, and their use.
As discussed previously, the user may use the financial software application to conduct the financial transaction. In particular, after bringing electronic 210 device into proximity with (or touching) electronic device 212, the financial software may exchange information with another instance of the financial software on electronic device 212 via the first communication technique (such as NFC).
This information may be used by electronic devices 210 and 212 to establish a secure connection (such as an encrypted connection) between electronic devices 210 and 212, which may be communicated between electronic devices 210 and 212 via the first communication technique. Alternatively, after exchanging the information, electronic devices 210 and 212 may communicate with server 314 via network 312 (i.e., via the second communication technique). In particular, electronic devices 210 and 212 may communicate, via network 312, the information to server 314 at a remote location (and which is associated with a service provider), which may, via network 312, provide connection information to electronic devices 210 and 212 that establishes the secure connection.
After the secure connection is established, the financial software on electronic devices 210 and 212 may hand off the communication to the second communication technique. Subsequently, the financial software on electronic devices 210 and 212 may communicate the additional information needed to complete the financial transaction between electronic devices 210 and 212 via network 312.
Note that information in system 300 may be stored at one or more locations in system 300 (i.e., locally or remotely). Moreover, because this data may be sensitive in nature, it may be encrypted. For example, stored data and/or data communicated via the first communication technique and/or network 312 may be encrypted.
Memory 424 in electronic device 400 may include volatile memory and/or non-volatile memory. More specifically, memory 424 may include: ROM, RAM, EPROM, EEPROM, flash memory, one or more smart cards, one or more magnetic disc storage devices, and/or one or more optical storage devices. Memory 424 may store an operating system 426 that includes procedures (or a set of instructions) for handling various basic system services for performing hardware-dependent tasks. Memory 424 may also store procedures (or a set of instructions) in a communication module 428. These communication procedures may be used for communicating with one or more computers and/or servers, including electronic devices, computers and/or servers that are remotely located with respect to electronic device 400.
Memory 424 may also include multiple program modules (or sets of instructions), including: transaction module 430 (or a set of instructions) and/or encryption module 432 (or a set of instructions). Note that one or more of these program modules (or sets of instructions) may constitute a computer-program mechanism.
During method 100 (
After secure connection 440 is established, transaction module 430 may hand off communication with electronic device 436 to communication technique 442. Then, transaction module 430 may communicate additional information 444 with electronic device 436 using communication technique 442 to complete a financial transaction 446.
Because information in electronic device 400 may be sensitive in nature, in some embodiments at least some of the data stored in memory 424 and/or at least some of the data communicated using communication module 428 is encrypted using encryption module 432.
Instructions in the various modules in memory 424 may be implemented in: a high-level procedural language, an object-oriented programming language, and/or in an assembly or machine language. Note that the programming language may be compiled or interpreted, e.g., configurable or configured, to be executed by the one or more processors 410.
Although electronic device 400 is illustrated as having a number of discrete items,
Electronic devices (such as electronic device 400), as well as computers and servers in system 300 (
System 300 (
The foregoing description is intended to enable any person skilled in the art to make and use the disclosure, and is provided in the context of a particular application and its requirements. Moreover, the foregoing descriptions of embodiments of the present disclosure have been presented for purposes of illustration and description only. They are not intended to be exhaustive or to limit the present disclosure to the forms disclosed. Accordingly, many modifications and variations will be apparent to practitioners skilled in the art, and the general principles defined herein may be applied to other embodiments and applications without departing from the spirit and scope of the present disclosure. Additionally, the discussion of the preceding embodiments is not intended to limit the present disclosure. Thus, the present disclosure is not intended to be limited to the embodiments shown, but is to be accorded the widest scope consistent with the principles and features disclosed herein.
