Integrating mobile payment application with other mobile applications while preventing security exposures

• US 10,311,425 B2
• Filed: 01/14/2014
• Issued: 06/04/2019
• Est. Priority Date: 01/14/2014
• Status: Active Grant

• Current Assignee: Edison Vault, LLC
• Original Assignee: International Business Machines Corporation
• Inventors: Kaplinger, Todd E., Shachor, Gal, Truty, Gregory L.
• Primary Examiner(s): Mai, Thien T
• Application Number:
  US14/154,376
• Publication Number:
  US 20150199678A1
• Time in Patent Office: 1,967 Days
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3221 Access to banking information through M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3274 using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
• CPC Class Codes: G06Q 20/342 Cards defining paid or billed services or quantities
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05

Abstract

A method, system and computer program product for integrating a mobile payment application with other mobile applications while preventing security exposures. A set of application programming interfaces of mobile applications that may possibly be utilized by a pass created by a mobile payment application is generated in response to receiving an indication that the pass was created. A “pass,” as used herein, refers to a form of mobile payment, such as a gift card. A selection of these application programming interfaces may then be received to interact with the created pass. In this manner, the existing mobile applications are seamlessly integrated with the features of passes. Furthermore, a virtual container is created for the created pass and the selected application programming interfaces to interface with the created pass. By creating such a container, the data to be exposed to the application layer can be controlled.

Claims

1. A computer program product embodied in a computer readable storage medium for integrating a mobile payment application with other mobile applications while preventing security exposures, the computer program product comprising the programming instructions for:

receiving an indication that a pass was created by said mobile payment application, wherein said pass corresponds to a form of mobile payment;

generating a view of a set of application programming interfaces exposed to leverage said created pass;

receiving a selection of one or more of said set of application programming interfaces to interact with said created pass thereby allowing one or more existing mobile applications to seamlessly be integrated with features of said created pass; and

creating a virtual container for said created pass and said one or more of said set of application programming interfaces selected to interact with said created pass in order to control data to be exposed to an application layer.

2. The computer program product as recited in claim 1 further comprising the programming instructions for:

encrypting a file storage system for storing said virtual container in a mobile operating system.

3. The computer program product as recited in claim 1 further comprising the programming instructions for:

encrypting communications at a network transport layer.

4. The computer program product as recited in claim 1 further comprising the programming instructions for:

encrypting data of said pass when referenced outside of said virtual container.

5. The computer program product as recited in claim 4, wherein said form of mobile payment comprises a gift card.

6. The computer program product as recited in claim 5, wherein a barcode of said gift card is encrypted when referenced outside of said virtual container.

7. The computer program product as recited in claim 1, wherein said set of application programming interfaces comprises application programming interfaces for enterprise applications.

8. The computer program product as recited in claim 1, wherein said set of application programming interfaces comprises device application programming interfaces.

9. A system, comprising:

a memory unit for storing a computer program for integrating a mobile payment application with other mobile applications while preventing security exposures; and

a processor coupled to said memory unit, wherein said processor, responsive to said computer program, comprises;

circuitry for receiving an indication that a pass was created by said mobile payment application, wherein said pass corresponds to a form of mobile payment;

circuitry for generating a view of a set of application programming interfaces exposed to leverage said created pass;

circuitry for receiving a selection of one or more of said set of application programming interfaces to interact with said created pass thereby allowing one or more existing mobile applications to seamlessly be integrated with features of said created pass; and

circuitry for creating a virtual container for said created pass and said one or more of said set of application programming interfaces selected to interact with said created pass in order to control data to be exposed to an application layer.

10. The system as recited in claim 9, wherein said processor further comprises:

circuitry for encrypting a file storage system for storing said virtual container in a mobile operating system.

11. The system as recited in claim 9, wherein said processor further comprises:

circuitry for encrypting communications at a network transport layer.

12. The system as recited in claim 9, wherein said processor further comprises:

circuitry for encrypting data of said pass when referenced outside of said virtual container.

13. The system as recited in claim 12, wherein said form of mobile payment comprises a gift card.

14. The system as recited in claim 13, wherein a barcode of said gift card is encrypted when referenced outside of said virtual container.

15. The system as recited in claim 9, wherein said set of application programming interfaces comprises application programming interfaces for enterprise applications.

16. The system as recited in claim 9, wherein said set of application programming interfaces comprises device application programming interfaces.