Facilitating establishing trust for a conducting direct secure electronic transactions between a user and a financial service providers

摘要

Methods and systems are provided for supporting electronic transactions, including transactions that are provided with per-user, per-device and per-domain security across domains of multiple service providers.

主权项

1. A method of establishing trust among a user, a device, and a financial service provider, comprising:
establishing trust between a transaction service provider and an electronic transaction facility deployed on a mobile phone operated by the user comprising registering the electronic transaction facility with the transaction service provider through a registration process that includes the transaction service provider certifying keys generated by the electronic transaction facility, wherein the keys comprise electronic transaction facility identification information; establishing trust between the transaction service provider and the user via the trusted electronic transaction facility comprising receiving an encryption of a code known to the transaction service provider, the code input by the user to the electronic transaction facility and encrypted by the electronic transaction facility with the code; establishing initial trust between the transaction service provider and a financial service provider comprising transmitting security certificates between the transaction service provider and the financial service provider and installing the security certificates as trusted SSL/HTTPS credentials; and in response to the user opting to avail a financial transaction service from the financial service provider, dynamically establishing direct secure transaction trust between the trusted electronic transaction facility and the trusted financial service provider by the transaction service provider transmitting a certificate representing the electronic transaction facility's security credentials to the trusted financial service provider and providing a certificate representing the financial service provider's security credentials to the electronic transaction facility, wherein the financial transaction service is secured using at least one of the certificate representing the electronic transaction facility's security credentials and the certificate representing the financial service provoder's security credentials.