Personal point of sale

• US 10,019,704 B2
• Filed: 06/28/2016
• Issued: 07/10/2018
• Est. Priority Date: 09/26/2011
• Status: Active Grant

• Current Assignee: Cubic Corporation
• Original Assignee: Cubic Corporation
• Inventors: Lyne, Malcolm, deKozan, David L., Paetzold, Kay
• Primary Examiner(s): Le, Chau
• Application Number:
  US15/195,835
• Publication Number:
  US 20160364717A1
• Time in Patent Office: 742 Days
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/28 Pre-payment schemes, e.g. "pay before"
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3415 Cards acting autonomously as pay-media
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/3574 Multiple applications on card
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 76/10 : Connection setup

Abstract

Embodiments provided herein include techniques for enabling a mobile device to communicate with smart media in a manner that can sidestep the secure element of the mobile device—and the costs associated with it. The mobile device can communicate with the smart media using near-field communication (NFC) by creating an encrypted connection with a remote computer while bypassing a secure element of the mobile device. This allows the mobile device to provide point-of-sale (POS) functionality by reading and/or writing to the smart media, without compromising the security of the smart media. Embodiments may further enable the server to provide authentication information to a third party based on the communication between the smart media and the server.

Claims

1. A method for enabling an electronic device to communicate with a smart media, the method comprising:

receiving, with a server, information read from the smart media by the electronic device, the information including identifying information regarding the smart media;

establishing a secure communications link between the electronic device and the server, wherein the establishing the secure communications link comprises encrypting data communicated via the secure communications link using an encryption key for the smart media such that a secure element of the electronic device is not used;

conducting a transaction between the server and the smart media via the secure communications link;

determining, with the server, a third party related to the transaction; and

in response to determining the third party related to the transaction, sending, from the server, authentication information to a device associated with the third party.

2. The method for enabling the electronic device to communicate with the smart media of claim 1, further comprising communicating encrypted data to the smart media via the secure communications link by writing the encrypted data such that a secure element of the electronic device is not used.

3. The method for enabling the electronic device to communicate with the smart media of claim 1, wherein authentication information comprises an indication that the smart media is valid or active.

4. The method for enabling the electronic device to communicate with the smart media of claim 1, wherein the authentication information comprises one or more of:

user identification information,

an indication of when the smart media was last used in a transit system,

an indication of where the smart media was last used in a transit system,

an indication of how the smart media was last used in a transit system,

a frequency of use of the smart media,

a type of transit product associated with the smart media or a corresponding user'"'"'s account, or

a location of use of the smart media, or

any combination thereof.

5. The method for enabling the electronic device to communicate with the smart media of claim 1, wherein the device associated with the third party is the electronic device.

6. The method for enabling the electronic device to communicate with the smart media of claim 1, wherein determining, with the server, the third party related to the transaction is based on information provided by the electronic device.

7. A non-transitory computer-readable medium having instructions embedded thereon for enabling an electronic device to communicate with a smart media, the instructions including computer-executable code for:

receiving information read from the smart media by the electronic device, the information including identifying information regarding the smart media;

establishing a secure communications link between the electronic device and a server, wherein the establishing the secure communications link comprises encrypting data communicated via the secure communications link using an encryption key for the smart media such that a secure element of the electronic device is not used;

conducting a transaction between the server and the smart media via the secure communications link;

determining a third party related to the transaction; and

in response to determining the third party related to the transaction, sending authentication information to a device associated with the third party.

8. The non-transitory computer-readable medium of claim 7, wherein the instructions further comprise computer code for communicating encrypted data to the smart media via the secure communications link by writing the encrypted data such that a secure element of the electronic device is not used.

9. The non-transitory computer-readable medium of claim 7, wherein the instructions further comprise computer code for providing authentication information comprising an indication that the smart media is valid or active.

10. The non-transitory computer-readable medium of claim 7, wherein the instructions further comprise computer code for providing authentication information comprising one or more of:

user identification information,

an indication of when the smart media was last used in a transit system,

an indication of where the smart media was last used in a transit system,

an indication of how the smart media was last used in a transit system,

a frequency of use of the smart media,

a type of transit product associated with the smart media or a corresponding user'"'"'s account, or

a location of use of the smart media, or

any combination thereof.

11. The non-transitory computer-readable medium of claim 7, wherein the instructions further comprise computer code for determining the third party related to the transaction based on information provided by the electronic device.

12. A server for enabling an electronic device to communicate with a smart media, the server comprising:

a communications interface; and

a processing unit communicatively coupled with the communications interface and configured to cause the server to;

receive, via the communications interface, information read from the smart media by the electronic device, the information including identifying information regarding the smart media;

establish, via the communications interface, a secure communications link between the electronic device and the server, wherein the establishing the secure communications link comprises encrypting data communicated via the secure communications link using an encryption key for the smart media such that a secure element of the electronic device is not used;

conduct a transaction between the server and the smart media via the secure communications link;

determine a third party related to the transaction; and

in response to determining the third party related to the transaction, send, via the communications interface, authentication information to a device associated with the third party.

13. The server for enabling the electronic device to communicate with the smart media of claim 12, wherein the processing unit is further configured to cause the server to communicate encrypted data to the smart media via the secure communications link by writing the encrypted data such that a secure element of the electronic device is not used.

14. The server for enabling the electronic device to communicate with the smart media of claim 12, wherein the processing unit is further configured to include, in the authentication information, an indication that the smart media is valid or active.

15. The server for enabling the electronic device to communicate with the smart media of claim 12, wherein the processing unit is further configured to include, in the authentication information, one or more of:

user identification information,

an indication of when the smart media was last used in a transit system,

an indication of where the smart media was last used in a transit system,

an indication of how the smart media was last used in a transit system,

a frequency of use of the smart media,

a type of transit product associated with the smart media or a corresponding user'"'"'s account, or

a location of use of the smart media, or

any combination thereof.

16. The server for enabling the electronic device to communicate with the smart media of claim 12, wherein the processing unit is further configured to cause the server to base the determination of the third party related to the transaction on information provided by the electronic device.