Systems and related methods facilitating payments with a mobile device are discussed herein. Circuitry in a networked-based central system, which may be a promotional system or payment system, may be configured to receive payment information from a consumer device. The consumer device may include circuitry configured to receive wallet identifying data from the central system. The wallet identification data may be used to secure messages between the consumer device and another device, such as a merchant device, over a wireless link. In some embodiments, the consumer device may receive promotional offers, such as deal vouchers or rewards, and make payments to the other device via the wireless link.

Consumer presence based deal offers

Systems and related methods facilitating payments with a mobile device are discussed herein. Circuitry in a networked-based payment system may be configured to receive payment information from a first device. The first device may include circuitry configured to wirelessly receive wallet identifying data from the payment system. The wallet identifying data may be used to secure messages between the first device and another device over a wireless link. For example, the first device may be configured to send the wallet identifying data to a second device, which may then communicate with the payment system. In response, consumer identifying data associated with the wallet identifying data may be received by the second device from the payment system. In some embodiments, use of wallet identifying data may be applied to other communications, such as for messages that authorize payment.

Peer-to-peer payment processing

A method, client device and system of identity authentication are provided. The method may include detecting a login or registration operation, to a server, via a login interface on a user interface of an application client. In response, identity information and an identifier of the application client may be determined The identity information and the identifier may be encoded into a code displayed on the application client. A mobile terminal may obtain and decode the code to obtain the encapsulated identity information and the identifier. The mobile terminal may also have access to information about an account registered with the authentication server in advance. The mobile terminal may send the identity information, the identifier, and account information to the authentication server for authentication. The application client may then receive an authentication result from the authentication server enabling the user to access the third party service.

Method, client and system of identity authentication

Systems and related methods facilitating interactions between a merchant device, a central system and a consumer device are discussed herein. Wallet identifying data may be used to secure messages between the consumer device and the merchant device over a wireless link. For example, the merchant device may include circuitry configured to wirelessly receive the wallet identifying data from a consumer device and to transmit the wallet identifying data to the central system. In response, consumer identifying data associated with the wallet identifying data may be received by the merchant device from the central system. In some embodiments, the consumer identifying data may be associated with a unit of location, such as a dine-in location at a restaurant, to facilitate consumer service.

Consumer device based point-of-sale

Described herein are techniques for distributed key management (DKM) in cooperation with Trusted Platform Modules (TPMs). The use of TPMs strengthens the storage and processing security surrounding management of distributed keys. DKM-managed secret keys are not persistently stored in clear form. In effect, the TPMs of participating DKM nodes provide security for DKM keys, and a DKM key, once decrypted with a TPM, is available to be used from memory for ordinary cryptographic operations to encrypt and decrypt user data. TPM public keys can be used to determine the set of trusted nodes to which TPM-encrypted secret keys can be distributed.

Key management using trusted platform modules

A method for authentication of a first party, A, to a second party, B, by a trusted third party, C, is disclosed. A is registered at C, and the method comprises the steps of receiving a identification data of A from A; determining, based on the identification data, if A has the right to request a random private key, RPK; and generating a temporary RPK. Further, C combines the RPK and a random open key, ROK, to form a single use temporary master authentication code; transmits the RPK to A; and, upon receipt of the RPK and the ROK from B, determines if the received RPK and ROK matches a valid single use temporary master authentication code; and authenticates, in case of match, A to B. The first party, A, may be any handheld device, such as a mobile phone, or a PDA, or a stationary device, such as a stationary computer or an ATM. The communication between the parties may be wired or wireless. A corresponding system is also disclosed.

Benny Kalbratt

Papers

Method for authentication