SYSTEMS, METHODS, AND COMPUTER READABLE MEDIA FOR PROVIDING FOR SECURE OFFLINE DATA TRANSFER BETWEEN WIRELESS SMART DEVICES

• US 20100043061A1
• Filed: 08/12/2008
• Published: 02/18/2010
• Est. Priority Date: 08/12/2008
• Status: Active Grant

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Liu, Ming-Li, Martin, Philippe, Kumar, Pradeep, Vijayshankar, Roshan
• Granted Patent: US 8,307,410 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/2295 Parent-child type, e.g. where parent has control on child rights
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3572 Multiple accounts on card
• CPC Class Codes: G06Q 20/3574 Multiple applications on card
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 30/0603 Catalogue ordering
• CPC Class Codes: H04B 5/48 Transceivers
• CPC Class Codes: H04B 5/72 for local intradevice communication
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04W 12/08 Access security

Abstract

According to one aspect of the subject matter described herein, a method for registering wireless smart devices for secure offline data transfer is provided. The method includes, for an application configured to execute on a wireless smart device and that requires access to information regarding an account that does not reside on the wireless smart device, register, at a server having access to the information regarding the account, a first wireless smart device has an account owner device (AOD) for operating in an online mode for obtaining the information regarding the account from the server and for operating in an offline mode for transferring the information regarding the account to at least one additional device via a secure offline data transfer using near field communications (NFC). The method further includes registering, at the server, at least one second wireless smart device as an account sharer device (ASD) for operating in an offline mode for receiving the information regarding the account from the first wireless smart device via the secure offline data transfer using NFC.

Claims

1. A method for registering wireless smart devices for secure offline data transfer, the method comprising:

for an application configured to execute on a wireless smart device and that requires access to information regarding an account that does not reside on the wireless smart device;

registering, with a server having access to the information regarding the account, a first wireless smart device as an account owner device (AOD) for operating in an online mode for obtaining the information regarding the account from the server and for operating in an offline mode for transferring the information regarding the account to at least one additional device via a secure offline data transfer using near field communications (NFC); and

registering, with the server, at least one second wireless smart device as an account sharer device (ASD) for operating in the offline mode for receiving the information regarding the account from the first wireless smart device via the secure offline data transfer using NFC.

2. The method of claim 1 wherein the server comprises an over the air provisioning server for provisioning the first and the at least one second wireless smart device via an air interface.

3. The method of claim 2 wherein registering the first and the at least one second wireless smart devices with the server includes transmitting messages from the wireless smart devices to the server via the air interface.

4. The method of claim 1 comprising, at the server, in response to registering the first wireless smart device as the account owner device, granting the first wireless smart device access to the account information.

5. The method of claim 4 comprising, at the server, in response to registering the at least one second wireless smart device as the account sharer device, preventing the at least one second wireless smart device from accessing the information regarding the account via the online mode.

6. The method of claim 1 comprising, at the server, in response to receiving an unregister message from the first wireless smart device, unregistering the at least one second wireless smart device as account sharer device for the particular application.

7. The method of claim 1 comprising, transmitting, from the server, parameters for providing for the secure offline data transfer between the first and the at least one second wireless smart device.

8. The method of claim 7 wherein transmitting parameters from the server includes transmitting cryptographic parameters to the first and the at least one second wireless smart device.

9. A system for secure offline data transfer between wireless smart devices, the system comprising:

a first wireless smart device for operating as an account owner device in the context of a first application executing on the first wireless smart device, wherein operating as the account owner device includes operating in an online mode to obtain account information and providing the account information to other devices via an offline mode of operation using near field communications (NFC); and

a second wireless smart device for operating as an account sharer device in the context of the first application, a copy of which executes on the second wireless smart device, wherein operating as an account sharer device includes requesting and receiving the account information from the first wireless smart device via a secure offline data transfer from the first wireless smart device using near field communications.

10. The system of claim 9 wherein the first wireless smart device functions as an account sharer device and the second wireless smart device functions as an account owner device in the context of a second application.

11. The system of claim 9 wherein the first application comprises a contactless payment application.

12. The system of claim 9 wherein the first and second wireless smart devices obtain encryption parameters from a server for the secure offline data transfer.

13. The system of claim 9 comprising a server with which the first and second wireless smart devices register, respectively, as account owner device and account sharer device.

14. The system of claim 13 wherein the server allows a plurality of wireless smart devices to register as account sharer devices for sharing data with the first wireless smart device in the offline mode in the context of the first application.

15. The system of claim 13 wherein the first wireless smart device unregisters the second wireless smart device as an account sharer device by sending an unregister message to the server.

16. A computer readable medium having stored thereon computer executable instructions that when executed by the processor of a computer performs steps comprising:

for an application configured to execute on a wireless smart device and that requires access to information regarding an account that does not reside on the wireless smart device;

registering, with a server having access to the information regarding the account, a first wireless smart device as an account owner device (AOD) for operating in an online mode for obtaining the information regarding the account from the server and for operating in an offline mode for transferring the information regarding the account to at least one additional device via a secure offline data transfer using near field communications (NFC); and

registering, with the server, at least one second wireless smart device as an account sharer device (ASD) for operating in the offline mode for receiving the information regarding the account from the first wireless smart device via the secure offline data transfer using NFC.