Secure device and mobile terminal which carry out data exchange between card applications

• US 20050173518A1
• Filed: 02/02/2005
• Published: 08/11/2005
• Est. Priority Date: 02/02/2004
• Status: Active Grant

• Current Assignee: Panasonic Corporation (Panasonic Holdings Corporation)
• Original Assignee: Matsushita Electric Industrial Company Limited (Panasonic Holdings Corporation)
• Inventors: Takayama, Hisashi
• Granted Patent: US 7,360,691 B2
• Time in Patent Office: Days
• US Class Current: 235/380
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/3574 Multiple applications on card
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G07F 7/0866 by active credit-cards adapted therefor G07F7/1008 takes precedence
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A secure device comprises a data exchange card application carrying out data exchange between card applications isolated by a fire wall, card application plug-in data defining authentication processing of the data exchange card application, in such a manner that authentication processing between the card application and the data exchange card application is carried out in the same manner as authentication processing between the card application and a dedicated host terminal, and authentication key data used for this authentication processing. Data exchange and tie-up processing between card applications are possible in a secure device, or under the mediation of a mobile terminal, and rapid processing can be done. The card application has only to carry out the same operation as data exchange with a related dedicated host terminal. Also, tie-up processing between card applications can be carried out by only a mobile terminal side in which a secure device is loaded.

Claims

1. A secure device comprising:

a card application isolated by a fire wall;

a data exchange card application carrying out data exchange with the card application;

card application plug-in data which defines authentication processing and data communication processing which the data exchange card application carries out, in such a manner that authentication processing and data communication processing between the card application and the data exchange card application are carried out in the same manner as authentication processing and data communication processing between the card application and a dedicated host terminal; and

authentication key data which is used for this authentication processing.

2. The secure device according to claim 1, further comprising plug-in data for a mediation means to mediate the data exchange and access to the card application.

3. The secure device according to claim 1, wherein the card application has a sharable interface, and the sharable interface provide a similar function to that of a command which is inputted to the card application through a host interface of the secure device, and has such a function that the data exchange card application carries out data exchange with the card application through the sharable interface.

4. The secure device according to claim 1, wherein the secure device comprises a plurality of card applications, and card application plug-in data and authentication key data which correspond to respective card applications.

5. The secure device according to claim 1, comprising:

a first card application;

a second card application; and

card application plug-in data and authentication key data which correspond to respective card applications, wherein

the data exchange card application carries out data exchange with the second card application, in the aftermath of data exchange with the first card application; and

the data exchange card application carries out data exchange between the first card application and the second card application.

11. The secure device according to claim 1, wherein

the data exchange card application has a mileage point function for recording points and an exchange processing history of the points;

an electronic boarding ticket card application for recording electronic boarding ticket information and a ticket check history is provided as the card application; and

the data exchange card application communicates with the electronic boarding ticket card application by use of authentication key data correspond to the electronic boarding ticket card application, on the basis of card application plug-in data correspond to the electronic boarding ticket card application, and obtains data of the ticket check history from the electronic boarding ticket card application, and calculates points which correspond to a boarding distance.

12. The secure device according to claim 1, wherein

the data exchange card application has a mileage point function for recording points and an exchange processing history of the points;

an electronic money card application for recording electronic money balance is provided as the card application; and

the data exchange card application communicates with the electronic money card application by use of authentication key data correspond to the electronic money card application, on the basis of card application plug-in data correspond to the electronic money card application, and converts points into electronic money, and adds the converted electronic money to the electronic money balance of the electronic money card application.

13. The secure device according to claim 4, wherein

the data exchange card application has a mileage point function for recording points and an exchange processing history of the points;

an electronic boarding ticket card application for recording electronic boarding ticket information and a ticket check history, and an electronic money card application for recording electronic money balance are provided as the card application; and

the data exchange card application communicates with the electronic boarding ticket card application by use of authentication key data correspond to the electronic boarding ticket card application, on the basis of card application plug-in data correspond to the electronic boarding ticket card application, and obtains data of the ticket check history from the electronic boarding ticket card application, and calculates points which correspond to a boarding distance, and communicates with the electronic money card application by use of authentication key data correspond to the electronic money card application, on the basis of card application plug-in data correspond to the electronic money card application, and converts the points into electronic money, and adds the converted electronic money to the electronic money balance of the electronic money card application.

14. The secure device according to claim 1, wherein

the data exchange card application has an exchange function for carrying out exchange processing of currency and recording an exchange processing history;

a multi-electronic money card application for managing electronic money of plural kinds of currencies is provided as the card application; and

the data exchange card application communicates with the multi-electronic money card application by use of authentication key data correspond to the multi-electronic money card application, on the basis of card application plug-in data correspond to the multi-electronic money card application, and carries out exchange processing between a plurality of currencies, on the basis of currency exchange rates and commission charges which the data exchange card application manages.

15. The secure device according to claim 4, wherein

the data exchange card application has an exchange function for carrying out exchange processing of currency and recording an exchange processing history;

a multi-electronic money card application for managing electronic money of plural kinds of currencies and a multi-electronic traveler'"'"'s check card application for managing electronic traveler'"'"'s checks of plural kinds of currencies are provided as the card application;

the data exchange card application communicates with the multi-electronic money card application by use of authentication key data correspond to the multi-electronic money card application, on the basis of card application plug-in data correspond to the multi-electronic money card application; and

the data exchange card application communicates with the multi-electronic traveler'"'"'s check card application, by use of authentication key data correspond to the multi-electronic traveler'"'"'s check card application, on the basis of card application plug-in data correspond to the multi-electronic traveler'"'"'s check card application, and carries out data exchange with the multi-electronic money card application and the multi-electronic traveler'"'"'s check card application, to carry out exchange of a plurality of currencies and exchange of electronic money and an electronic traveler'"'"'s check, on the basis of currency exchange rates and commission charges which the data exchange card application manages.

16. The secure device according to any one of claims 1, 6, 7 and 10, further comprising a secure flash memory area which a data exchange card application manages, wherein

the card application plug-in data and the authentication key data are stored in the secure flash memory area, and the data exchange card application manages with respect to each corresponding card application.

6. A secure device comprising:

a card application isolated by a fire wall; and

a data exchange card application carrying out data exchange with the card application, wherein

when card application plug-in data which defines authentication processing and data communication processing between the card application and the data exchange card application and authentication key data which is used for the authentication processing are downloaded into the data exchange card application, the data exchange card application carries out processing which is similar to authentication processing and data communication processing, which the card application and a dedicated host terminal carry out, with the card application, and carries out data exchange with the card application.

7. A secure device comprising:

a data exchange card application carrying out data exchange with a card application of another secure device;

card application plug-in data which defines authentication processing and data communication processing which the data exchange card application carries out, in such a manner that authentication processing and data communication processing between the card application of another secure device and the data exchange card application are carried out in the same manner as authentication processing and data communication processing between the card application of another secure device and a dedicated host terminal; and

authentication key data which is used for the authentication processing.

8. The secure device according to claim 7, further comprising plug-in data for a mediation means to mediate the data exchange and access to the card application.

9. The secure device according to claim 7, comprising:

card application plug-in data and authentication key data which correspond to a card application of a first another secure device; and

card application plug-in data and authentication key data which correspond to a card application of a second another secure device, wherein

the data exchange card application carries out data exchange with the card application of the second another secure device, in the aftermath of data exchange with the card application of the first another secure device; and

the data exchange card application carries out data exchange between the card application of the first another secure device and the card application of the second another secure device.

10. A secure device comprising a data exchange card application carrying out data exchange with a card application of another secure device, wherein

when card application plug-in data which defines authentication processing and data communication processing between a card application of another secure device and the data exchange card application and authentication key data which is used for the authentication processing are downloaded in the data exchange card application, the data exchange card application carries out processing which is similar to authentication processing and data communication processing which the card application of another secure device and a dedicated host terminal carry out, with the card application of another secure device, and carries out data exchange with the card application of another secure device.

17. A mobile terminal comprising a secure device, the secure device having

a card application isolated by a fire wall and

a data exchange card application carrying out data exchange with the card application, wherein

the secure device has card application plug-in data which defines authentication processing and data communication processing which the data exchange card application carries out, in such a manner that authentication processing and data communication processing between the card application and the data exchange card application are carried out in the same manner as authentication processing and data communication processing between the card application and a dedicated host terminal;

the secure device has authentication key data which is used for the authentication processing; and

the data exchange card application carries out data exchange with the card application.

18. The mobile terminal according to claim 17, wherein

the mobile terminal has a mediation terminal application;

and

the secure device has plug-in data for the mediation terminal application to mediate the data exchange and access to the card application.

19. The mobile terminal according to claim 17, wherein the card application of the secure device has a sharable interface;

and

the sharable interface provides a similar function to that of a command which is inputted through a host interface of the secure device to the card application, and the data exchange card application carries out data exchange with a card application through the sharable interface.

20. The mobile terminal according to claim 17, wherein the secure device has a plurality of card applications;

and

the secure device has card application plug-in data and authentication key data which correspond to respective card applications.

21. The mobile terminal according to claim 17, wherein

the secure device has a first card application and a second card application;

card application plug-in data and authentication key data correspond to respective card applications; and

the data exchange card application carries out data exchange with the second card application, in the aftermath of data exchange with the first card application; and

the data exchange card application carries out data exchange between the first card application and the second card application.

27. The mobile terminal according to claim 17, wherein

the data exchange card application of the secure device has a mileage point function for recording points and an exchange processing history of the points;

an electronic boarding ticket card application for recording electronic boarding ticket information and a ticket check history is provided as the card application of the secure device; and

the data exchange card application of the secure device communicates with the electronic boarding ticket card application by use of authentication key data correspond to the electronic boarding ticket card application, on the basis of card application plug-in data correspond to the electronic boarding ticket card application, and obtains data of the ticket check history from the electronic boarding ticket card application, and calculates points which correspond to a boarding distance.

28. The mobile terminal according to claim 17, wherein

the data exchange card application of the secure device has a mileage point function for recording points and an exchange processing history of the points;

an electronic money card application for recording electronic money balance is provided as the card application of the secure device; and

the data exchange card application of the secure device communicates with the electronic money card application by use of authentication key data correspond to the electronic money card application, on the basis of card application plug-in data correspond to the electronic money card application, and converts points into electronic money, and adds the converted electronic money to the electronic money balance of the electronic money card application.

29. The mobile terminal according to claim 20, wherein

the data exchange card application of the secure device has a mileage point function for recording points and an exchange processing history of the points;

an electronic boarding ticket card application for recording electronic boarding ticket information and a ticket check history, and an electronic money card application for recording electronic money balance are provided as the card application of the secure device; and

the data exchange card application of the secure device communicates with the electronic boarding ticket card application by use of authentication key data correspond to the electronic boarding ticket card application, on the basis of card application plug-in data correspond to the electronic boarding ticket card application, and obtains data of the ticket check history from the electronic boarding ticket card application, and calculates points which correspond to a boarding distance, and communicates with the electronic money card application by use of authentication key data correspond to the electronic money card application, on the basis of card application plug-in data correspond to the electronic money card application, and converts the points into electronic money, and adds the converted electronic money to the electronic money balance of the electronic money card application.

30. The mobile terminal as set forth in claim 17, wherein

the data exchange card application of the secure device has an exchange function for carrying out exchange processing of currency and recording an exchange processing history;

a multi-electronic money card application for managing electronic money of plural kinds of currencies is provided as the card application of the secure device; and

the data exchange card application of the secure device communicates with the multi-electronic money card application by use of authentication key data correspond to the multi-electronic money card application, on the basis of card application plug-in data correspond to the multi-electronic money card application, and carries out exchange processing between a plurality of currencies, on the basis of currency exchange rates and commission charges which the data exchange card application manages.

31. The mobile terminal as set forth in claim 20, wherein

the data exchange card application of the secure device has an exchange function for carrying out exchange processing of currency and recording an exchange processing history;

a multi-electronic money card application for managing electronic money of plural kinds of currencies and a multi-electronic traveler'"'"'s check card application for managing electronic traveler'"'"'s checks of plural kinds of currencies are provided as the card application of the secure device;

the data exchange card application of the secure device communicates with the multi-electronic money card application by use of authentication key data correspond to the multi-electronic money card application, on the basis of card application plug-in data correspond to the multi-electronic money card application; and

the data exchange card communicates with the multi-electronic traveler'"'"'s check card application, by use of authentication key data correspond to the multi-electronic traveler'"'"'s check card application, on the basis of card application plug-in data correspond to the multi-electronic traveler'"'"'s check card application, and carries out data exchange with the multi-electronic money card application and the multi-electronic traveler'"'"'s check card application, to carry out exchange of a plurality of currencies and exchange of electronic money and an electronic traveler'"'"'s check, on the basis of currency exchange rates and commission charges which the data exchange card application manages.

32. The mobile terminal according to any one of claims 17, 22, 23 and 26, further comprising a secure flash memory area which a data exchange card application manages in the secure device, wherein

the card application plug-in data and the authentication key data are stored in the secure flash memory area, and the data exchange card application manages with respect to each corresponding card application.

22. A mobile terminal comprising a secure device, the secure device having:

a card application isolated by a fire wall; and

a data exchange card application carrying out data exchange with the card application, wherein

when card application plug-in data which defines authentication processing and data communication processing between the card application and the data exchange card application and authentication key data which is used for the authentication processing are downloaded into the data exchange card application, the data exchange card application carries out processing which is similar to authentication processing and data communication processing which the card application and a dedicated host terminal carry out with the card application, and carries out data exchange with the card application.

23. A mobile terminal comprising:

a first secure device having a data exchange card application which carries out data exchange with a card application of another secure device; and

a second secure device having one or more card applications, wherein

the first secure device comprises;

card application plug-in data which defines authentication processing and data communication processing which the data exchange card application carries out, in such a manner that authentication processing and data communication processing between the card application of the second secure device and the data exchange card application of the first secure device are carried out in the same manner as authentication processing and data communication processing between the card application of the second secure device and a dedicated host terminal; and

authentication key data which is used for the authentication processing; and

wherein the data exchange card application carries out data exchange with the card application of the second secure device.

24. The mobile terminal according to claim 23, wherein

the mobile terminal having a mediation terminal application;

and

the first secure device having plug-in data for a mediation terminal application to mediate the data exchange and access to the card application.

25. The mobile terminal according to claim 23, comprising a third secure device having one or more card applications, wherein

the first secure device comprises:

card application plug-in data and authentication key data which correspond to a card application of the second secure device; and

card application plug-in data and authentication key data which correspond to a card application of the third secure device, wherein

the data exchange card application carries out data exchange with the card application of the third secure device, in the aftermath of data exchange with the card application of the second secure device; and

the data exchange card application carries out data exchange between the card application of the second secure device and the card application of the third secure device.

26. A mobile terminal comprising:

a first secure device having a data exchange card application carrying out data exchange with a card application of another secure device; and

a second secure device having one or more card applications, wherein

when card application plug-in data which defines authentication processing and data communication processing between a card application of the second secure device and the data exchange card application and authentication key data which is used for the authentication processing are downloaded into the data exchange card application of the first secure device, the data exchange card application carries out processing which is similar to authentication processing and data communication processing which the card application of the second secure device and a dedicated host terminal carry out, with the card application of the second secure device, to carry out data exchange with the card application of the second secure device.

33. A data exchange apparatus comprising:

a mobile terminal and a secure device installed in the mobile terminal, wherein

the secure device has a card application isolated by a fire wall and a data exchange card application carrying out data exchange with the card application;

the secure device has card application plug-in data which defines authentication processing and data communication processing which the data exchange card application carries out, in such a manner that authentication processing and data communication processing between the card application and the data exchange card application are carried out in the same manner as authentication processing and data communication processing between the card application and a dedicated host terminal;

the secure device has authentication key data which is used for the authentication processing; and

the data exchange card application of the secure device carries out data exchange with the card application by use of the card application plug-in data and authentication key data in accordance with an instruction transmitted from the mobile terminal.

34. A secure device comprising:

a plurality of card applications;

a tie-up coupon described a processing content of tie-up processing between the card applications and an execution condition of the tie-up processing therein; and

a tie-up card application carrying out the tie-up processing between the card applications on the basis of the tie-up coupon, wherein

the tie-up card application collects information stored in the other card applications, and judges whether the execution condition is satisfied or not, and when the execution condition is satisfied, the tie-up card application carries out the tie-up processing.

35. The secure device according to claim 34, wherein as the tie-up processing, the tie-up card application re-writes information stored in the other card applications.

36. The secure device according to claim 34, wherein the tie-up coupon has electronic value, and the tie-up card application issues the electronic value to the other card application, as the tie-up processing.

37. The secure device according to claim 34, wherein the tie-up coupon has card application plug-in data which defines authentication processing and data communication processing of the tie-up card application to the other card applications, and authentication key data used for the authentication processing, and the tie-up card application loads the card application plug-in data to carry out information collection from the card application and tie-up processing.

38. The secure device according to claim 37, wherein the tie-up coupon further has terminal application plug-in data which enables mediation processing by a mobile terminal, of the tie-up card application and the other card applications in the above-described information collection and tie-up processing, and the tie-up card application transmits the terminal application plug-in data to a mobile terminal, and carries out information collection from the other card applications and tie-up processing, through the mobile terminal.

45. The secure device according to claim 35 or claim 36, wherein the tie-up coupon is a traveling expense refund coupon, and the tie-up card application collects a credit utilization history from a credit card application, and a ticket check history from an electronic boarding ticket card application, respectively, and judges whether the execution condition is satisfied or not, and adds a money amount which is calculated out from the ticket check history, to prepaid money which the electronic boarding ticket card application manages, as the tie-up processing.

46. The secure device according to claim 36 or claim 42, wherein the tie-up coupon is a traveling expense refund coupon, and the electronic value is an electronic shopping ticket, and the tie-up card application collects a credit utilization history from a credit card application, and a ticket check history from an electronic boarding thicket card application, respectively, and judges whether the execution condition is satisfied or not, and issues the electronic shopping ticket to the electronic shopping ticket card application, as the tie-up processing.

52. The secure device according to claim 34, wherein the tie-up coupon has an electronic value and a card application which is necessary for utilization of the electronic value, and the tie-up card application installs a card application, which is necessary for utilization of the electronic value into the secure device, as the tie-up processing.

53. The secure device according to claim 52, wherein the tie-up coupon further includes a terminal application which is necessary for utilization of the electronic value, and the tie-up card application installs a terminal application, which is necessary for utilization of the electronic value, into a mobile terminal in which the secure device loaded.

39. A secure device comprising:

a first card application utilizing a first interface;

a second card application utilizing a second interface; and

a tie-up card application carrying out tie-up processing of the first card application and the second card application conditional upon a content of information which the first card application holds or information which the second card application holds.

40. A secure device comprising:

card applications;

a tie-up coupon described a processing content of tie-up processing between the card application of another secure device and an execution condition of the tie-up processing therein; and

a tie-up card application carrying out the tie-up processing with the card application of another secure device on the basis of the tie-up coupon, wherein

the tie-up card application collects information stored by the card application of another secure device, and judges whether the execution condition is satisfied or not, and when the execution condition is satisfied, the tie-up card application carries out the tie-up processing.

41. The secure device according to claim 40, wherein, as the tie-up processing, the tie-up card application rewrites information stored in the card application of another secure device.

42. The secure device according to claim 40, wherein the tie-up coupon has an electronic value, and the tie-up card application issues the electronic value to the card application of another secure device, as the tie-up processing.

43. The secure device according to claim 40, wherein the tie-up coupon has card application plug-in data which defines authentication processing and data communication processing of the tie-up card application to the card application of another secure device, and authentication key data which is used for the authentication processing, and the tie-up card application loads the card application plug-in data, to carry out information collection from the card application of another secure device and tie-up processing.

44. The secure device according to claim 43, wherein the tie-up coupon has terminal application plug-in data which enables mediation processing by use of a mobile terminal, between the tie-up card application and the card application of another secure device in the information collection and tie-up processing, and the tie-up card application transmits the terminal application plug-in data to a mobile terminal in which a secure device was loaded, and carries out the information collection from the card application of another secure device and tie-up processing, through the mobile terminal.

54. The secure device according to claim 40, wherein the tie-up coupon includes an electronic value and a card application which is necessary for utilization of the electronic value, and the tie-up card application installs a card application, which is necessary for utilization of the electronic value, into the another secure device, as the tie-up processing.

55. The secure device according to claim 54, wherein the tie-up coupon further includes a terminal application which is necessary for utilization of the electronic value, and the tie-up card application installs a terminal application, which is necessary for utilization of the electronic value, into a mobile terminal in which the another secure device loaded.

47. A mobile terminal comprising a secure device, the secure device having:

a tie-up coupon described a processing content of tie-up processing between the card applications and an execution condition of the tie-up processing therein;

a tie-up card application carrying out the tie-up processing between the card applications on the basis of the tie-up coupon; and

other card applications, wherein

the tie-up card application collects information stored in the other card applications through the mobile terminal, and judges whether the execution condition is satisfied or not, and when the execution condition is satisfied, the tie-up card application carries out the tie-up processing through the mobile terminal.

48. The mobile terminal according to claim 47, wherein the tie-up coupon has card application plug-in data which defines authentication processing and data communication processing to the other card applications of the tie-up card application, authentication key data which is used for the authentication processing, and terminal application plug-in data which enables a mobile terminal to access to a card application, and when the tie-up card application loads the card application plug-in data, and carries out information collection from the other card applications and tie-up processing, the mobile terminal loads the terminal application plug-in data to mediate the information collection and tie-up processing.

49. The mobile terminal according to claim 47, wherein the mobile terminal contains a first secure device having the tie-up card application, and a second secure device which having at least one of card applications for which the tie-up card application carries out tie-up processing.

50. The mobile terminal according to claim 47, wherein the tie-up coupon is received from a tie-up coupon management server through a wireless network, and stores in the secure device, and a history of tie-up processing based on the tie-up coupon is transmitted to the tie-up coupon management server through the wireless network.

51. A tie-up coupon management server comprising:

means for issuing a tie-up coupon described a processing content of tie-up processing between the card applications and an execution condition of the tie-up processing therein to a secure device loaded in a mobile terminal through a wireless network.