Secure elements broker (SEB) for application communication channel selector optimization

• US 10,467,626 B2
• Filed: 09/25/2018
• Issued: 11/05/2019
• Est. Priority Date: 09/02/2011
• Status: Active Grant

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Inventors: Taveau, Sebastien, Granbery, John Hastings
• Primary Examiner(s): Sall, El Hadji M
• Application Number:
  US16/141,568
• Publication Number:
  US 20190108523A1
• Time in Patent Office: 406 Days
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/351 Virtual cards
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Systems and methods for managing concurrent secure elements on a mobile device to coordinate with an application or “app” running on the mobile device and an appropriate communications protocol for conducting transactions using the mobile device include: informing, by the processor, the reader device of a preferred app and a communication protocol usable by the preferred app; receiving, by the processor, information about which apps and communication protocols are supported by a reader for processing a transaction; locating, by the processor, a secure element supporting an app and a communication protocol supported by the reader; channeling the communication protocol for the specific configuration of the app and the supporting secure element; activating the secure element that supports the app; and processing, with the activated secure element, using the supported app and communication channel, the transaction with the reader.

Claims

1. A system, comprising:

one or more processors, one or more computer-readable memories, with program instructions stored on the one or more computer-readable memories, the one or more processors configured to execute the program instructions to cause the system to perform the operations comprising;

creating a mapping between one or more applications and one or more secure elements;

detecting an initiation of a launch of a first application;

in response to detecting the initiation of the launch of the first application, determining a first secure element of the one or more secure elements that corresponds to the first application; and

in response to the determining the first secure element corresponds to the first application, activating the first secure element.

2. The system of claim 1, wherein the first secure element includes a first applet.

3. The system of claim 2, the operations further comprising:

in response to the activating the first secure element, validating, by the first applet, the first application.

4. The system of claim 2, wherein a configuration of the first application corresponds to a first protocol.

5. The system of claim 4, wherein the determining the first secure element of the one or more secure elements that corresponds to the first application includes determining that the first applet is associated with the first protocol.

6. The system of claim 2, the operations further comprising:

in response to determining that the first applet has been moved to a second secure element, updating the mapping.

7. The system of claim 1, wherein the detecting the initiation of the launch of the first application includes detecting a user input corresponding to the launching of the first application.

8. A method comprising:

creating a mapping between one or more applications and one or more secure elements;

detecting an initiation of a launch of a first application;

in response to detecting the initiation of the launch of the first application, determining a first secure element of the one or more secure elements that corresponds to the first application; and

in response to the determining the first secure element corresponds to the first application, activating the first secure element.

9. The method of claim 8, wherein the first secure element includes a first applet.

10. The method of claim 9, further comprising:

in response to the activating the first secure element, validating, by the first applet, the first application.

11. The method of claim 9, wherein a configuration of the first application corresponds to a first protocol.

12. The system of claim 11, wherein the determining the first secure element of the one or more secure elements that corresponds to the first application includes determining that the first applet is associated with the first protocol.

13. The system of claim 9, further comprising:

in response to determining that the first applet has been moved to a second secure element, updating the mapping.

14. The method of claim 8, wherein the detecting the initiation of the launch of the first application includes detecting a user input corresponding to the launching of the first application.

15. A computer program product comprising:

one or more computer-readable tangible storage devices, and program instructions stored on at least one of the one or more storage devices, the program instructions when executed cause a machine to perform operations comprising;

creating a mapping between one or more applications and one or more secure elements;

detecting an initiation of a launch of a first application;

in response to detecting the initiation of the launch of the first application, determining a first secure element of the one or more secure elements that corresponds to the first application; and

in response to the determining the first secure element corresponds to the first application, activating the first secure element.

16. The computer program product of claim 15, wherein the first secure element includes a first applet.

17. The computer program product of claim 16, the operations further comprising:

in response to the activating the first secure element, validating, by the first applet, the first application.

18. The computer program product of claim 16, wherein a configuration of the first application corresponds to a first protocol.

19. The computer program product of claim 18, wherein the determining the first secure element of the one or more secure elements that corresponds to the first application includes determining that the first applet is associated with the first protocol.

20. The computer program product of claim 16, the operations further comprising:

in response to determining that the first applet has been moved to a second secure element, updating the mapping.