Processing of communication device signatures for use in securing nomadic electronic transactions

Abstract

A method for execution in a communication device, which comprises receiving a first data set and a second data set over a first communication path; receiving a series of requests over local communication path different from the first communication path; responding to a first one of the requests by releasing a first response including the first data set over the local communication path; and responding to a second one of the requests by releasing a second response including the second data set over the second communication path.

1 . A method for execution in a communication device, comprising:
 receiving a first data set and a second data set over a first communication path;   receiving a series of requests over a local communication path different from the first communication path;   responding to a first one of the requests by releasing a first response including the first data set over the local communication path; and   responding to a second one of the requests by releasing a second response including the second data set over the local communication path.   
     
     
         2 . The method defined in  claim 1 , wherein the first data set comprises a first signature previously generated by encrypting with an encryption key (i) an identifier associated with the communication device; and (ii) first additional data. 
     
     
         3 . The method defined in  claim 2 , wherein the second data set comprises a second signature previously generated by encrypting the identifier and second additional data with the encryption key. 
     
     
         4 . The method defined in  claim 3 , wherein the second additional data is related to the first data set by a function of time implemented by a control server, the function of time being unknown to the communication device. 
     
     
         5 . The method defined in  claim 4 , wherein the function of time is deterministic. 
     
     
         6 . The method defined in  claim 4 , wherein the function of time is stochastic. 
     
     
         7 . The method defined in  claim 1 , further comprising accessing an identifier stored in a memory and including the identifier in the first and second responses. 
     
     
         8 . The method defined in  claim 1 , wherein the first request is received during a transaction attempt carried out using the communication device. 
     
     
         9 . The method defined in  claim 8 , wherein at least one of the first data set and the second data set is indicative of a transaction identifier generated by a control server in anticipation of the transaction attempt. 
     
     
         10 . The method defined in  claim 9 , wherein at least one of the first data set and the second data set is indicative of a transaction identifier generated by a control server after being informed of the transaction attempt. 
     
     
         11 . The method defined in  claim 1 , further comprising:
 accessing an identifier stored in a memory;   receiving first additional data and second additional data over the first communication path;   generating a first signature from the identifier and the first additional data; and   generating a second signature from the identifier and the second additional data;   wherein the first response further includes the first signature and wherein the second response further includes the second signature.   
     
     
         12 . The method defined in  claim 11 , further comprising including the identifier together with the first and second signatures in the first and second responses, respectively. 
     
     
         13 . The method defined in  claim 1 , wherein the second response is released after the first response and wherein the second data set is received before the first response. 
     
     
         14 . The method defined in  claim 1 , wherein the second response is released after the first response and wherein the second data set is received after the first response. 
     
     
         15 . The method defined in  claim 1 , wherein upon receipt, the first data set is included within first encrypted data obtained by encrypting the first data set using an encryption key, the method further comprising decrypting the first data set from the first encrypted data using a decryption key that is complementary to the encryption key. 
     
     
         16 . The method defined in  claim 15 , wherein upon receipt, the second data set is included within second encrypted data obtained by encrypting the second data set using the encryption key, the method further comprising decrypting the second data set from the second encrypted data using the decryption key. 
     
     
         17 . The method defined in  claim 16 , wherein the encryption key is a private key known to a control server, and wherein the decryption key is a public key, knowledge of which is available to the communication device. 
     
     
         18 . The method defined in  claim 1 , wherein the first data set is included within first encrypted data included in the first response, the method further comprising obtaining the first encrypted data by encrypting the first data set using an encryption key, wherein the first data set is capable of being decrypted from the first encrypted data by a decryption key that is complementary to the encryption key. 
     
     
         19 . The method defined in  claim 18 , wherein the second data set is included within second encrypted data included in the second response, the method further comprising obtaining the second encrypted data by encrypting the second data set using the encryption key, wherein the second data set is capable of being decrypted from the second encrypted data by the decryption key. 
     
     
         20 . The method defined in  claim 19 , wherein the encryption key is a private key known to the communication device, and wherein the decryption key is a public key, knowledge of which is available to a processing entity that is communicatively coupled to a receiver used to receive the first and second responses over the local communication path. 
     
     
         21 . The method defined in  claim 19 , wherein the first response includes a key index associated with the encryption key, the key index allowing a recipient of the first response to identify the decryption key from a set of potential decryption keys. 
     
     
         22 . The method defined in  claim 21 , wherein the second response includes the key index. 
     
     
         23 . The method defined in  claim 1 , wherein the first communication path includes a wireless portion. 
     
     
         24 . The method defined in  claim 1 , wherein the local communication path includes a contactless portion. 
     
     
         25 . The method defined in  claim 1 , wherein the first one of the requests and the second one of the requests are received via a radio frequency receiver at the communication device. 
     
     
         26 . The method defined in  claim 25 , wherein the radio frequency receiver operates in a frequency range that supports low-power short-range communication. 
     
     
         27 . The method defined in  claim 25 , wherein the radio frequency receiver operates in a frequency range that supports RFID communication. 
     
     
         28 . The method defined in  claim 25 , wherein the radio frequency receiver operates in a frequency range that supports mobile wireless telephony. 
     
     
         29 . The method defined in  claim 25 , wherein the first data set and the second data set are also received via the radio frequency receiver. 
     
     
         30 . The method defined in  claim 1 , wherein the first data set and the second data set are distributed by a control server. 
     
     
         31 . The method defined in  claim 30 , wherein the first communication path supports a communication session established between the communication device and the control server. 
     
     
         32 . A computer-readable storage medium comprising a set of instructions for execution by a processing entity of a communication device, wherein execution of the set of instructions by the processing entity causes the processing entity to execute a method that includes:
 receiving a first data set and a second data set over a first communication path;   receiving a series of requests over a local communication path different from the first communication path;   responding to a first one of the requests by releasing a first response including the first data set over the local communication path; and   responding to a second one of the requests by releasing a second response including the second data set over the local communication path.   
     
     
         33 . A communication device, comprising:
 a memory storing an identifier;   an interface configured to communicate over a first communication path and a local communication path different from the first communication path; and   a processing entity configured to:
 receive via the interface and over the first communication path a first data set and a second data set; 
 receive via the interface and over the local communication path a series of requests; 
 respond to a first one of the requests by releasing via the interface and over the local communication path a first response including the first data set; and 
 respond to a second one of the requests by releasing via the interface and over the local communication path a second response including the second data set.