System and method for dynamic fob synchronization and personalization

Abstract

A system generally for personalizing and synchronizing fob data in the context of a distributed transaction system is disclosed. A dynamic fob synchronization system may comprise point of service (POS) devices configured with transponder-readers to initiate a transaction in conjunction with a fob, an enterprise data collection unit, and a fob object database update system. An exemplary dynamic synchronization system (DSS) may comprise various fob POS devices, a secure support client server, a fob object database update system (FODUS), one or more enterprise data synchronization interfaces (EDSI), an update logic system, one or more enterprise data collection units (EDCUs), and one or more fob POS devices configured to interoperably accept and interface with fobs. In an exemplary embodiment, DSS may comprise a personalization system and an account maintenance system configured to communicate with FODUS. Personalization of multi-function fobs may be accomplished using a security server configured to generate and/or retrieve cryptographic key information from multiple enterprise key systems during the final phase of the fob issuance process.

1 - 11 . (canceled) 
     
     
         12 . An apparatus, comprising:
 radio frequency (RF) transponder circuitry;   one or more processors; and   one or more memories having instructions stored thereon that are executable by the one or more processors to cause the apparatus to perform mutual authentication with a point-of-sale system, wherein to cause the apparatus to perform mutual authentication, the instructions are further executable to:
 receive, using the RF transponder circuitry, an interrogation signal that includes a first random value from the point-of-sale system; 
 encrypt the first random value using an encryption key assigned to the apparatus and transmit the encrypted value to the point-of-sale system, wherein the encrypted value is encrypted such that the first random value can be verified from the encrypted value using a decryption key associated with the apparatus; and 
 provide an account number to the point-of-sale system for a transaction, subsequent to the mutual authentication. 
   
     
     
         13 . The apparatus of  claim 12 , wherein the instructions are further executable to:
 transmit, using the RF transponder circuitry, an interrogation signal that includes a second random value to the point-of-sale system; and   receive an encrypted response from the point-of-sale system, decrypt the encrypted response to produce a decryption result, and compare the decryption result with the second random value.   
     
     
         14 . The apparatus of  claim 12 , wherein the instructions are further executable to update user preferences associated with a unique identifier of the apparatus, wherein the unique identifier is maintained by the point-of-sale system in a database. 
     
     
         15 . The apparatus of  claim 12 , wherein the apparatus is configured to receive the interrogation signal and transmit the encrypted value via a radio-frequency identification (RFID) protocol. 
     
     
         16 . The apparatus of  claim 12 , wherein the instructions are further executable to, subsequent to the mutual authentication, download updates to one or more executable applications stored on the apparatus and apply the updates to the one or more executable applications. 
     
     
         17 . The apparatus of  claim 12 , wherein the instructions are further executable to, subsequent to the mutual authentication, authorize a purchase transaction via the point-of-sale system. 
     
     
         18 . A system configured to perform mutual authentication, comprising:
 a point-of-sale system that includes radio frequency (RF) transponder circuitry, wherein the point-of-sale system is configured to transmit an interrogation signal that includes a first random value; and   a mobile device that includes RF transponder circuitry, wherein the mobile device is configured to receive the interrogation signal and encrypt the first random value using an encryption key assigned to the mobile device and transmit the encrypted value to the point-of-sale system;   wherein the point-of-sale system is further configured to decrypt the encrypted value using a decryption key assigned to the mobile device and verify whether the decrypted value corresponds to the first random value;   wherein the mobile device is further configured to transmit, using the RF transponder circuitry, an interrogation signal that includes a second random value to the point-of-sale system;   wherein the point-of-sale system is further configured to encrypt the second random value and transmit the encrypted second random value to the mobile device; and   wherein the mobile device is further configured to receive the encrypted second random value from the point-of-sale system, decrypt the encrypted second random value to produce a decryption result, and verify whether the decryption result corresponds to the second random value.   
     
     
         19 . The system of  claim 18 , wherein the RF transponder circuitry included in the point-of-sale system and the RF transponder circuitry included in the mobile device is radio frequency identification (RFID) circuitry. 
     
     
         20 . The system of  claim 18 , wherein the point-of-sale system is configured to store different decryption keys associated with a plurality of different mobile devices. 
     
     
         21 . The system of  claim 18 , wherein the mobile device is configured to store different decryption keys associated with a plurality of different point-of-sale systems. 
     
     
         22 . The system of  claim 18 , wherein the mobile device is configured to abort a transaction in response to determining that the decryption result does not correspond to the second random value and authorize a transaction in response to determining that the decryption result corresponds to the second random value. 
     
     
         23 . The system of  claim 18 , wherein the point-of-sale system is configured to encrypt the second random value in response to determining that the decrypted value corresponds to the first random value and abort a transaction in response to determining that the decrypted value does not correspond to the first random value. 
     
     
         24 . A method, comprising:
 a point-of-sale system transmitting, using radio frequency (RF) transponder circuitry, an interrogation signal that includes a first random value;   the point-of-sale system receiving an encrypted value from a mobile device in response to the interrogation signal;   the point-of-sale system decrypting the encrypted value using a stored decryption key associated with the mobile device;   the point-of-sale system determining whether the decrypted value corresponds to the first random value; and   the point-of-sale system authorizing a purchase transaction by the mobile device.   
     
     
         25 . The method of  claim 24 , further comprising:
 the point-of-sale system receiving a second random value from the mobile device; and   the point-of-sale system encrypting the second random value and transmitting the encrypted second random value to the mobile device, such that the second random value can be verified using a decryption key associated with the point-of-sale system.   
     
     
         26 . The method of  claim 24 , further comprising providing updates to one or more executable applications stored on the mobile device subsequent to the encrypting. 
     
     
         27 . The method of  claim 24 , further comprising aborting a transaction in response to determining that the decrypted value does not correspond to the first random value. 
     
     
         28 . The method of  claim 24 , further comprising retrieving an account number corresponding to the mobile device in response to determining that the decrypted value corresponds to the first random value. 
     
     
         29 . The method of  claim 28 , further comprising decrypting the retrieved account number and providing the decrypted account number to a merchant system for a transaction. 
     
     
         30 . The method of  claim 29 , further comprising transmitting information to the mobile device that indicates completion of the transaction.