System and method for managing application data of contactless card applications

• US 10,567,959 B2
• Filed: 12/15/2014
• Issued: 02/18/2020
• Est. Priority Date: 02/17/2014
• Status: Active Grant

• Current Assignee: Kaba AG Group Innovation Management
• Original Assignee: Kaba AG Group Innovation Management
• Inventors: Studerus, Paul, Luscher, Andre
• Primary Examiner(s): Manoharan, Muthuswamy G
• Application Number:
  US15/118,811
• Publication Number:
  US 20170055101A1
• Time in Patent Office: 1,891 Days
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

For managing application data of different contactless card applications for a plurality of mobile communication devices (2), a card emulation module and application data for contactless card applications are transferred (S2, S3) by a computer system (1) to one of the mobile communication devices (2). The card emulation module is configured to control the mobile communication device (2) to emulate a contactless card module and to execute data transactions (S6, S7) via a close range wireless communication interface of the mobile communication device (2) using the application data. The computer system (1) maintains (S20, S30, S40, S50, S60) for the mobile communication devices (2) a card database with representations of the card emulation modules and their application data. The computer system (1) makes it possible to manage centrally and flexibly the application data of different contactless card applications and different application providers for a plurality of mobile communication devices (2).

Claims

1. A system for managing application data of different contactless card applications for a plurality of mobile communication devices, the system comprising one or more processors configured to:

transfer, via a telecommunications network to one of the mobile communication devices, a card emulation module, using an area access key for storing the card emulation module in a secured area of the mobile communication device, the card emulation module comprising computer program code configured to control a processor of the mobile communication device to emulate a first hardware-implemented contactless card such that the card emulation module emulates a processor and memory of the first hardware-implemented contactless card in order to emulate one or more functions of the first hardware-implemented contactless card, the one or more functions include interacting with an external card reader according to at least one of an NFC data transmission protocol or an RFID data transmission protocol and executing data transactions via a close range wireless communication interface of the mobile communication device;

transfer application data for at least one contactless card application via the telecommunications network to the mobile communication device for storing the application data in the card emulation module; and

maintain in the system a card database, storing in the card database for each of the plurality of mobile communication devices a representation of the card emulation module stored in the respective mobile communication device, the representation of the card emulation module comprising (a) the application data content of the card emulation module stored in the respective mobile communication device and (b) information related to the computer program code of the card emulation module stored in the respective mobile communication device.

2. The system of claim 1, wherein the one or more processors of the system are further configured to transfer application-specific access right data for a plurality of contactless card applications via the telecommunications network to the mobile communication device for storing the application-specific access right data in the card emulation module, and to store in the system application-specific access keys for a plurality of contactless card applications;

and the card emulation module comprises computer program code configured to control the processor of the mobile communication device to execute data transactions via the close range wireless communication interface of the mobile communication device, and to verify authorization of a transaction partner to access application data stored in the card emulation module for a particular contactless card application, based on the application-specific access right data, stored in the card emulation module for the particular contactless card application, and an application-specific access key, received from the transaction partner via the close range wireless communication interface.

3. The system of claim 1, wherein the application data stored in the card emulation module of the mobile communication device comprises a pointer to application data stored in the card database;

and the card emulation module comprises computer program code configured to control the processor of the mobile communication device to retrieve the application data from the card database using the pointer, and to execute the data transactions via the close range wireless communication interface of the mobile communication device using application data retrieved from the card database.

4. The system of claim 1, wherein the one or more processors of the system are further configured to read the application data stored in the card emulation module of one of the mobile communication devices, and to execute at least one of:

transferring from the system to the mobile communication device up-to-date application data stored in the card database, in cases where the application data read from the mobile communication device indicates an outdated version of the application data, and updating in the system the representation of the card emulation module of the mobile communication device by storing in the card database application data read from the card emulation module of the mobile communication device, in cases where the application data read from the mobile communication device indicates a more recent version of the application data.

5. The system of claim 1, wherein the one or more processors of the computer system are further configured to receive via the telecommunications network a request related to a contactless card application for performing at least one of the following application data operations for the card emulation module of one or more mobile communication devices:

download additional application data into the card emulation module, update application data in the card emulation module, and delete application data in the card emulation module;

to transfer an application data request to the card emulation module of the one or more mobile communication devices according to the respective application data operation; and

to update in the card database the representation of the card emulation module of the one or more mobile communication devices by updating application data in the card database according to the application data request.

6. The system of claim 1, wherein the one or more processors of the computer system are further configured to receive via the telecommunications network from an authorized partner system at least one of:

a write request including application data for the card emulation module of one or more mobile communication devices, and a read request for reading application data from the card emulation module of one or more mobile communication devices;

to transfer the application data via the telecommunications network to the card emulation module of the one or more mobile communication devices, in case of a write request; and

to read the application data stored in the card emulation module of the one or more mobile communication devices, in case of a read request; and

to update in the system the representation of the card emulation module of the one or more mobile communication devices by storing in the card database the application data read or stored in the card emulation module of the one or more mobile communication devices, respectively.

7. The system of claim 1, wherein the one or more processors of the computer system are further configured to receive via the telecommunications network a request related to one of the mobile communication devices, the request demanding an update to the card emulation module;

to transfer program code for the card emulation module to the mobile communication device according to the request; and

to update in the card database the representation of the card emulation modules of the mobile communication devices by storing in the card database at least one of;

a version number indicating the version of the program code transferred to the mobile communication device, and the program code transferred to the mobile communication device.

8. The system of claim 1, wherein the card emulation module comprises computer program code configured to control a processor of the mobile communication device to execute the data transaction via the close range wireless communication interface of the mobile communication device with an external transaction device, the data transaction including at least one of:

a debit payment transaction, a credit payment transaction, an electronic cash payment transaction, a ticketing transaction, an access control transaction, an application update transaction for updating the application data in the card emulation module, and a card update transaction for updating the computer program code of the card emulation module; and

the application data including at least one of;

debit account data, credit account data, electronic cash data, electronic ticket data, access right data, user identification data, user authentication data, and application data structure data.

9. A computer-implemented method of managing application data of different contactless card applications for a plurality of mobile communication devices, the method comprising:

transferring, by a computer system via a telecommunications network to one of the mobile communication devices, a card emulation module, using an area access key for storing the card emulation module in a secured area of the mobile communication device, the card emulation module comprising computer program code configured to control a processor of the mobile communication device to emulate a first hardware-implemented contactless card such that the card emulation module emulates a processor and memory of the first hardware-implemented contactless card in order to emulate one or more functions of the first hardware-implemented contactless card, the one or more functions include interacting with an external card reader according to at least one of an NFC data transmission protocol or an RFID data transmission protocol and executing data transactions via a close range wireless communication interface of the mobile communication device;

transferring by the computer system via the telecommunications network to the mobile communication device application data for at least one contactless card application for storing the application data in the card emulation module; and

maintaining in the computer system a card database, storing in the card database for each of the plurality of mobile communication devices a representation of the card emulation module stored in the respective mobile communication device, the representation of the card emulation module comprising (a) the application data content of the card emulation module stored in the respective mobile communication device and (b) information related to the computer program code of the card emulation module stored in the respective mobile communication device.

10. The method of claim 9, wherein the method further comprises:

the computer system transferring via the telecommunications network to the mobile communication device application-specific access right data for a plurality of contactless card applications;

storing the application-specific access right data in the card emulation module;

storing in the computer system application-specific access keys for a plurality of contactless card applications; and

the computer system transferring via the telecommunications network to the mobile communication device a card emulation module which includes computer program code configured to control the processor of the mobile communication device to execute data transactions via the close range wireless communication interface of the mobile communication device, and to verify authorization of a transaction partner to access application data stored in the card emulation module for a particular contactless card application, based on the application-specific access right data, stored in the card emulation module for the particular contactless card application, and an application-specific access key, received from the transaction partner via the close range wireless communication interface.

11. The method of claim 9, wherein the method further comprises the computer system including in the application data stored in the card emulation module of the mobile communication device a pointer to application data stored in the card database;

and transferring via the telecommunications network to the mobile communication device a card emulation module which includes computer program code configured to control the processor of the mobile communication device to retrieve the application data from the card database using the pointer, and to execute the data transactions via the close range wireless communication interface of the mobile communication device using application data retrieved from the card database.

12. The method of claim 9, wherein the method further comprises the computer system reading the application data stored in the card emulation module of one of the mobile communication devices, and executing at least one of:

transferring from the computer system to the mobile communication device up-to-date application data stored in the card database, in cases where the application data read from the mobile communication device indicates an outdated version of the application data, and updating in the computer system the representation of the card emulation module of the mobile communication device by storing in the card database application data read from the card emulation module of the mobile communication device, in cases where the application data read from the mobile communication device indicates a more recent version of the application data.

13. The method of claim 9, wherein the method further comprises the computer system receiving via the telecommunications network a request related a contactless card application, the request indicating at least one of the following application data operations for the card emulation module of one or more mobile communication devices:

download additional application data into the card emulation module, update application data in the card emulation module, and delete application data in the card emulation module;

transferring an application data request to the card emulation module of the one or more mobile communication devices according to the respective application data operation; and

updating in the card database the representation of the card emulation module of the one or more mobile communication devices by updating application data in the card database according to the application data request.

14. The method of claim 9, wherein the method further comprises the computer system receiving via the telecommunications network from an authorized partner system at least one of:

a write request including application data for the card emulation module of one or more mobile communication devices, and a read request for reading application data from the card emulation module of one or more mobile communication devices;

transferring the application data via the telecommunications network to the card emulation module of the one or more mobile communication devices, in case of a write request; and

reading the application data stored in the card emulation module of the one or more mobile communication devices, in case of a read request; and

updating in the computer system the representation of the card emulation module of the one or more mobile communication devices by storing in the card database the application data read or stored in the card emulation module of the one or more mobile communication devices, respectively.

15. The method of claim 9, wherein the method further comprises the computer system receiving via the telecommunications network a request related to one of the mobile communication devices, the request demanding an update to the card emulation module;

transferring program code for the card emulation module to the mobile communication device according to the request; and

updating in the card database the representation of the card emulation modules of the mobile communication devices by storing in the card database at least one of;

a version number indicating the version of the program code transferred to the mobile communication device, and the program code transferred to the mobile communication device.

16. The method of claim 9, wherein the method further comprises the computer system transferring via the telecommunications network to the mobile communication devices a card emulation module which includes computer program code configured to control a processor of the mobile communication device to execute the data transaction via the close range wireless communication interface of the mobile communication devices with an external transaction device, the data transaction including at least one of:

a debit payment transaction, a credit payment transaction, an electronic cash payment transaction, a ticketing transaction, an access control transaction, an application update transaction for updating the application data in the card emulation module, and a card update transaction for updating the computer program code of the card emulation module; and

the application data including at least one of;

debit account data, credit account data, electronic cash data, electronic ticket data, access right data, user identification data, user authentication data, and application data structure data.

17. A computer program product comprising a non-transient computer readable medium having stored thereon computer program code configured to control a processor of a computer system to perform:

transferring, from the computer system via a telecommunications network to one of the mobile communication devices, a card emulation module, using an area access key for storing the card emulation module in a secured area of the mobile communication device, the card emulation module comprising computer program code configured to control a processor of a mobile communication device to emulate a first hardware-implemented contactless card such that the card emulation module emulates a processor and memory of the first hardware-implemented contactless card in order to emulate one or more functions of the first hardware-implemented contactless card, the one or more functions include interacting with an external card reader according to at least one of an NFC data transmission protocol or an RFID data transmission protocol and executing data transactions via a close range wireless communication interface of the mobile communication device;

transferring from the computer system via the telecommunications network to the mobile communication device application data for at least one contactless card application for storing the application data in the card emulation module; and

maintaining in the computer system a card database, by storing in the card database for each of the plurality of mobile communication devices a representation of the card emulation module stored in the respective mobile communication device, the representation of the card emulation module comprising (a) the application data content of the card emulation module stored in the respective mobile communication device and (b) information related to the computer program code of the card emulation module stored in the respective mobile communication device.