Backend secure transaction apparatus and method thereof for point-of-user-interaction apparatus and a mobile device

Abstract

A mobile device is described having an antenna to detect a communication target from a point-of-user-interaction apparatus near the mobile device. The mobile device includes a reader that initiates a transmission of a command to the point-of-user-interaction apparatus and reads a response from the point-of-user-interaction apparatus. A display unit changes its display based on the response and/or the communication target. A circuitry executes instructions to receive a first authentication information from the point-of-user-interaction apparatus. The point-of-user-interaction apparatus transmits a second authentication information to a computing device. The circuitry executes instructions to send the first authentication information to the computing device. The computing device authenticates a transaction between the point-of-user-interaction apparatus and the mobile device via the first and second authentication information and notifies the circuitry of a valid transaction between mobile device and the point-of-user-interaction apparatus after the computing device authenticates the transaction. Unique ID(s) are also exchanged between the mobile device and the point-of-user-interaction apparatus.

We claim: 
     
         1 . An apparatus comprising:
 a processor;   a first communication interface to allow the processor to communicate with a mobile device, wherein the first communication interface is to receive a first authentication information from the mobile device; and   a second communication interface to allow the processor to communicate with point-of-user-interaction apparatus, wherein the second communication interface is to receive a second authentication information from the point-of-user-interaction apparatus, wherein the processor is to authenticate a transaction between the mobile device and the point-of-user-interaction apparatus by application of the first authentication information and the second authentication information, wherein the processor is to notify the mobile device of a validity of the transaction via the first communication interface, wherein the processor is to notify the point-of-user-interaction apparatus of the validity of the transaction via the second communication interface.   
     
     
         2 . The apparatus of  claim 1 , wherein the first communication interface comprises a wireless interface. 
     
     
         3 . The apparatus of  claim 1 , wherein the second communication interface comprises a network interface. 
     
     
         4 . The apparatus of  claim 1 , wherein the point-of-user-interaction apparatus comprises:
 a memory to store a communication message;   a first controller with a security function, the first controller communicatively coupled to the memory, wherein the first controller is to generate the first authentication information and the second authentication information;   a message circuitry to wirelessly transmit the communication message to the mobile device;   one or more interfaces to:
 transmit the communication message to the message circuitry; 
 transmit the first authentication information, via the message circuitry, to the mobile device, and 
 transmit, via a network connection, the second authentication information to the second communication interface; 
   a display unit to display an application to communicate with a user of the mobile device; and   a second controller communicatively coupled to the display unit;   wherein the first controller is to instruct at least one of the one or more interfaces to transmit the first authentication information to the mobile device, and wherein the second controller is to instruct at least one of the one or more interfaces to transmit the second authentication information to the second communication interface.   
     
     
         5 . The apparatus of  claim 4 , wherein the point-of-user-interaction apparatus comprises a circuitry operable to modify the communication message. 
     
     
         6 . The apparatus of  claim 4 , wherein the mobile device includes:
 an antenna to detect or read the communication message from the point-of-user-interaction apparatus near the mobile device;   a reader to initiate a transmission of a command to the point-of-user-interaction apparatus, and to read a response from the point-of-user-interaction apparatus, wherein the reader is coupled to the antenna;   a display unit to display an application based on the response from the point-of-user-interaction apparatus and/or the communication message; and   a circuitry to receive the first authentication information from the point-of-user-interaction apparatus, wherein the circuitry is to send the first authentication information to the first communication interface.   
     
     
         7 . The apparatus of  claim 4 , wherein the first authentication information includes:
 a first key, wherein the first key is associated with a first cryptographic token; and   a second cryptographic token, wherein the second cryptographic token is associated with a second key.   
     
     
         8 . The apparatus of  claim 7 , wherein the second authentication information includes the second key and the first cryptographic token. 
     
     
         9 . The apparatus of  claim 4 , wherein the first controller generates a first identification, wherein the first identification is used to match the first authentication information with the second authentication information. 
     
     
         10 . The apparatus of  claim 9 , wherein the circuitry is to generate a second identification which is a second unique identification, wherein the apparatus is to receive the second identification via the point-of-user-interaction apparatus, wherein the second identification is used to identify the mobile device to the point-of-user-interaction apparatus. 
     
     
         11 . The apparatus of  claim 10 , wherein the point-of-user-interaction apparatus is to generate a third identification which is a third unique identification, wherein the third identification is provided to the apparatus via the mobile device. 
     
     
         12 . The apparatus of  claim 11 , wherein the second unique identification is same as the third unique identification, or wherein the second unique identification is different than the third unique identification. 
     
     
         13 . The apparatus of  claim 6 , wherein the antenna continuously or regularly listens for communication messages near the mobile device. 
     
     
         14 . The apparatus of  claim 6 , wherein the communication message comprises a near field communication (NFC) data exchange format (NDEF) tag. 
     
     
         15 . The apparatus of  claim 6 , wherein the transmission and the response are near field communications. 
     
     
         16 . The apparatus of  claim 6 , wherein the reader comprises a first application programmable interface to initiate the transmission and to read the response. 
     
     
         17 . The apparatus of  claim 16 , wherein the mobile device comprises a second application programmable interface to issue a notification or a hyperlink based on the response, wherein a user interaction with the notification or the hyperlink is to cause the display of the application. 
     
     
         18 . The apparatus of  claim 17 , wherein the notification or the hyperlink is part of the communication message. 
     
     
         19 . The apparatus of  claim 17 , wherein the mobile device comprises a camera or a biometric sensor to authenticate a user of the mobile device based on the notification or the hyperlink. 
     
     
         20 . The apparatus of  claim 1 , wherein the mobile device comprises a camera or a biometric sensor to authenticate a user of the mobile device. 
     
     
         21 . The apparatus of  claim 1 , wherein the transaction is a financial transaction or wherein the transaction is a voting ballot. 
     
     
         22 . The apparatus of  claim 8 , wherein:
 the mobile device is to send the first key and the second cryptographic token to the first communication interface;   the processor is to decode the second cryptographic token with the second key,   the processor is to decode the first cryptographic token with the first key, and   the processor is to notify the second controller of a valid transaction between the mobile device and the point-of-user interaction apparatus after the first cryptographic token and the second cryptographic token are decoded.   
     
     
         23 . The apparatus of  claim 4 , wherein the message circuitry comprises an NFC radio. 
     
     
         24 . A method for authenticating a transaction between a mobile device and a point-of-user-interaction apparatus, the method comprising:
 receiving a first authentication information from the mobile device; and   receiving a second authentication information from the point-of-user-interaction apparatus;   authenticating a transaction between the mobile device and the point-of-user-interaction apparatus by application of the first authentication information and the second authentication information;   notifying the mobile device of a validity of the transaction; and   notifying the point-of-user-interaction apparatus of the validity of the transaction.   
     
     
         25 . The method of  claim 24 , wherein the point-of-user-interaction apparatus comprises:
 a memory to store a communication message;   a first controller with a security function, the first controller communicatively coupled to the memory, wherein the first controller is to generate the first authentication information and the second authentication information;   a message circuitry to wirelessly transmit the communication message to the mobile device;   one or more interfaces to:
 transmit the communication message to the message circuitry; 
 transmit the first authentication information, via the message circuitry, to the mobile device, and 
 transmit, via a network connection, the second authentication information to the second communication interface; 
   a display unit to display an application to communicate with a user of the mobile device; and   a second controller communicatively coupled to the display unit;   wherein the first controller is to instruct at least one of the one or more interfaces to transmit the first authentication information to the mobile device, and wherein the second controller is to instruct at least one of the one or more interfaces to transmit the second authentication information to the second communication interface.   
     
     
         26 . The method of  claim 25 , wherein the point-of-user-interaction apparatus comprises a circuitry operable to modify the communication message. 
     
     
         27 . The method of  claim 25 , wherein the mobile device includes:
 an antenna to detect or read the communication message from the point-of-user-interaction apparatus near the mobile device;   a reader to initiate a transmission of a command to the point-of-user-interaction apparatus, and to read a response from the point-of-user-interaction apparatus, wherein the reader is coupled to the antenna;   a display unit to display an application based on the response from the point-of-user-interaction apparatus and/or the communication message; and   a circuitry to receive the first authentication information from the point-of-user-interaction apparatus, wherein the circuitry is to send the first authentication information to the first communication interface.   
     
     
         28 . The method of  claim 25 , wherein the first authentication information includes:
 a first key, wherein the first key is associated with a first cryptographic token; and   a second cryptographic token, wherein the second cryptographic token is associated with a second key.   
     
     
         29 . The method of  claim 28 , wherein the second authentication information includes the second key and the first cryptographic token. 
     
     
         30 . The method of  claim 25 , wherein the first controller generates a first identification, wherein the first identification is used to match the first authentication information with the second authentication information, wherein the method comprising:
 receiving the first identification.   
     
     
         31 . The method of  claim 30 , wherein the mobile device is to generate a second identification which is a second unique identification, wherein the method comprises:
 receiving the second identification via the point-of-user-interaction apparatus, wherein the second identification is used to identify the mobile device to the point-of-user-interaction apparatus.   
     
     
         32 . The method of  claim 31 , wherein the point-of-user-interaction apparatus is to generate a third identification which is a third unique identification, wherein the method comprises:
 receiving the third identification via the mobile device.   
     
     
         33 . The method of  claim 32 , wherein the second unique identification is same as the third unique identification, or wherein the second unique identification is different than the third unique identification. 
     
     
         34 . A machine-readable media having machine-executable instructions stored thereon, that when executed, cause one or more processors to perform a method for authenticating a transaction between a mobile device and a point-of-user-interaction apparatus, the method comprising:
 receiving a first authentication information from the mobile device; and   receiving a second authentication information from the point-of-user-interaction apparatus;   authenticating a transaction between the mobile device and the point-of-user-interaction apparatus by application of the first authentication information and the second authentication information;   notifying the mobile device of a validity of the transaction; and   notifying the point-of-user-interaction apparatus of the validity of the transaction.   
     
     
         35 . The machine-readable media of  claim 34 , the method comprising:
 receiving a first identification, wherein the first identification is generated by the point-of-user-interaction apparatus, wherein the first identification is used to match the first authentication information with the second authentication information.   
     
     
         36 . The machine-readable media of  claim 35 , the method comprising:
 receiving a second identification via the point-of-user-interaction apparatus, wherein the second identification is generated by the mobile device, wherein the second identification is a second unique identification which is used to identify the mobile device to the point-of-user-interaction apparatus.   
     
     
         37 . The machine-readable media of  claim 36 , wherein the point-of-user-interaction apparatus is to generate a third identification which is a third unique identification, wherein the method comprises:
 receiving the third identification via the mobile device.   
     
     
         38 . The machine-readable media of  claim 37 , wherein the second unique identification is same as the third unique identification, or wherein the second unique identification is different than the third unique identification.