Systems and Methods for Encrypting Mobile Device Communications

• US 20120300932A1
• Filed: 05/25/2012
• Published: 11/29/2012
• Est. Priority Date: 05/26/2011
• Status: Active Grant

• Current Assignee: First Data Corporation (Fiserv Incorporated)
• Original Assignee: First Data Corporation (Fiserv Incorporated)
• Inventors: Cambridge, Devin Michael, Kean, Brian, Meyers, Stephen M., Adkisson, Brent Dewayne, Davis, Norman Theodore Jr.
• Granted Patent: US 9,154,477 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key
• CPC Class Codes: H04L 2463/062 applying encryption of the keys
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring

Abstract

Embodiments of the invention can provide systems and methods for encrypting mobile device communications. According to one example embodiment of the invention, a method for encrypting mobile device communications is provided. The method can include generating, by a first application stored on a first memory of a mobile device, a message to be communicated to an intended recipient; providing, by the first application to an authentication application stored on a second memory of the mobile device, the message; encrypting, by the authentication application, the message; providing, by the authentication application to the first application, the encrypted message; and directing, by the first application, communication of the message to the intended recipient.

Claims

1. A computer-implemented method for encrypting mobile device communications, the method comprising:

generating, by a first application stored on a first memory of a mobile device, a message to be communicated to an intended recipient;

providing, by the first application to an authentication application stored on a second memory of the mobile device, the message;

encrypting, by the authentication application, the message;

providing, by the authentication application to the first application, the encrypted message; and

directing, by the first application, communication of the message to the intended recipient.

2. The computer-implemented method of claim 1, wherein providing the message to an authentication application stored on a second memory comprises providing the message to an authentication application stored on a secure element.

3. The computer-implemented method of claim 1, further comprising:

generating, by the authentication application, a message tag; and

associating, by the authentication application, the generated tag with the message.

4. The computer-implemented method of claim 1, further comprising:

receiving, by the authentication application, key information output by a trusted service manager,

wherein encrypting the message comprises encrypting the message utilizing the received key information.

5. The computer-implemented method of claim 4, wherein receiving key information comprises receiving an asymmetric key.

6. The computer-implemented method of claim 4, wherein receiving key information comprises receiving key information encrypted by the trusted service manager utilizing a first symmetric key, and further comprising:

deriving, by the authentication application, a second symmetric key; and

decrypting, by the authentication application, the key information utilizing the derived second symmetric key.

7. The computer-implemented method of claim 6, wherein deriving the second symmetric key comprises deriving the second symmetric key utilizing card production life cycle (CPLC) information associated with the secure element.

8. The computer-implemented method of claim 7, wherein deriving the second symmetric key further comprises deriving the second symmetric key utilizing derivation information received from the trusted service manager.

9. A system for encrypting mobile device communications, the system comprising:

at least one memory configured to store computer-executable instructions; and

at least one processor configured to access the at least one memory and execute the computer-executable instructions to;

generate, by a first application stored on a first memory of a mobile device, a message to be communicated to an intended recipient;

provide, by the first application to an authentication application stored on a second memory of the mobile device, the message;

encrypt by the authentication application, the message;

provide, by the authentication application to the first application, the encrypted message; and

direct, by the first application, communication of the message to the intended recipient.

10. The system of claim 9, wherein the computer-executable instructions to provide the message to an authentication application stored on a second memory comprise instructions to provide the message to an authentication application stored on a secure element.

11. The system of claim 9, wherein the at least one processor is further configured to execute the computer-executable instructions to:

generate, by the authentication application, a message tag; and

associate, by the authentication application, the generated tag with the message.

12. The system of claim 9, wherein the at least one processor is further configured to execute the computer-executable instructions to:

receive, by the authentication application, key information output by a trusted service manager,

wherein encrypting the message comprises encrypting the message utilizing the received key information.

13. The system of claim 12, wherein the computer-executable instructions to receive key information comprise instructions to receive an asymmetric key.

14. The system of claim 12, wherein the computer-executable instructions to receive key information comprise instructions to receive key information encrypted by the trusted service manager utilizing a first symmetric key, and further comprise instructions to:

derive, by the authentication application, a second symmetric key; and

decrypt, by the authentication application, the key information utilizing the derived second symmetric key.

15. The system of claim 14, wherein the computer-executable instructions to derive the second symmetric key comprise instructions to derive the second symmetric key utilizing card production life cycle (CPLC) information associated with the secure element.

16. The system of claim 15, wherein the computer-executable instructions to derive the second symmetric key further comprise instructions to derive the second symmetric key utilizing derivation information received from the trusted service manager.

17. A method comprising:

generating, by at least one application stored in at least one memory of a mobile device, a message to be communicated to an intended recipient;

providing, by the at least one application to an authentication application stored in at least one memory of the mobile device, the message;

encrypting, by the authentication application, the message;

providing, by the authentication application to the first application, the encrypted message; and

directing, by the first application, communication of the message to the intended recipient.

18. The method of claim 17, further comprising:

generating, by the authentication application, a message tag; and

associating, by the authentication application, the generated tag with the message.

19. The method of claim 17, further comprising:

receiving, by the authentication application, key information output by a trusted service manager, wherein encrypting the message comprises encrypting the message utilizing the received key information.

20. The method of claim 19, wherein receiving key information comprises receiving an asymmetric key.