SECURE NEAR FIELD COMMUNICATION TRANSACTIONS WITH AUTHENTICATION

• US 20130012126A1
• Filed: 09/14/2012
• Published: 01/10/2013
• Est. Priority Date: 11/14/2007
• Status: Abandoned Application

• Current Assignee: Blaze Mobile, Inc. (iWin, Inc.)
• Original Assignee: Blaze Mobile, Inc. (iWin, Inc.)
• Inventors: Fisher, Michelle, Guha, Rathin
• Application Number:
  US13/620,666
• Publication Number:
  US 20130012126A1
• Time in Patent Office: Days
• US Class Current: 455/41.1
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 30/0238 at point-of-sale [POS]
• CPC Class Codes: H04B 5/72 for local intradevice communication
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/082 : using revocation of authorisation
• CPC Class Codes: H04W 4/80 : Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 88/06 : adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

A method for transmitting data between a mobile communication device and a server. The method includes running a mobile application on the mobile communication device. The mobile application is hosted on the mobile communication device through the server as a Software as a Service (SaaS). The method further includes transmitting data associated with the mobile application between the mobile communication device and the server, in which transmission of the data between the mobile communication device and the server is monitored through the server.

Claims

1. A method for conducting coupon redemption using a mobile communication device, the method comprising:

determining that a data exchange between a mobile application running on a mobile communication device and a management server has occurred, wherein the management server permits a user associated with the mobile application running on the mobile communication device to conduct a near field communication contactless transaction as a result of the data exchange, wherein the mobile communication device includes a first processor, a first memory, and a first wireless transceiver configured to support a first communication channel;

maintaining a coupon application and coupons in a second memory of a secure element, wherein execution of the coupon application facilitates a transfer of the coupons to a point-of-sale terminal;

executing the coupon application using a second processor in the secure element, wherein the coupon application is executed in response to detection of a near field communication induction-based trigger by the point-of-sale terminal;

transmitting transaction data by using a second wireless transceiver included in the secure element, the second wireless transceiver configured for near field communications, wherein the transaction data is sent through a second communication channel to the point-of-sale terminal, wherein the second communication channel is different from the first communication channel.

2. The method of claim 1, wherein the data exchange includes exchanging an identification code.

3. The method of claim 2, wherein the identification code is a personal identification number (PIN).

4. The method of claim 1, wherein the data exchange includes using a session key that is only valid for a given communication session between the mobile communication device and the management server.

5. The method of claim 4, wherein the session key expires after a predetermined period of time.

6. The method of claim 1, wherein access to data associated with the data exchange is controlled.

7. The method of claim 6, wherein access to the data is controlled by deleting cached data from the first memory of the mobile communication device and from the second memory of the secure element.

8. The method of claim 6, wherein access to the data is controlled by disabling the secure element.

9. The method of claim 1, wherein the user is prompted for biometric data before allowing the user to conduct the transaction.

10. The method of claim 1, wherein the user is prompted for multifactor authentication before allowing the user to conduct the transaction.

11. The method of claim 1, wherein the secure element is permanently embedded within the body of the mobile communication device.

12. The method of claim 1, wherein the secure element is affixed externally to the mobile communication device.

13. The method of claim 1, wherein the secure element is removably embedded in a slot of the mobile communication device.

14. The method of claim 1, wherein the first wireless transceiver in the mobile communication device communicates wirelessly with the second wireless transceiver in the secure element.

15. The method of claim 1, wherein the first processor in the mobile communication device communicates with the second processor in the secure element through a wired connection.

16. A secure element for conducting a near field communication contactless transaction, the secure element comprising:

a secure element processor configured to determine that a data exchange between a mobile application running on a mobile communication device and a management server has occurred, wherein the management server permits a user associated with the mobile application running on the mobile communication device to conduct a near field communication contactless transaction as a result of the data exchange, wherein the mobile communication device includes a mobile communication device processor, a mobile communication device memory, and a mobile communication device wireless transceiver configured to support a first communication channel;

a secure element memory configured to maintain a coupon application and coupons, wherein execution of the coupon application occurs in response to detection of a near field communication induction-based trigger by a point-of-sale terminal and execution of the coupon application facilitates a transfer of the coupons to the point-of-sale terminal;

a secure element wireless transceiver configured to transmit transaction data, the secure element wireless transceiver configured for near field communications, wherein the transaction data is sent through a second communication channel to the point-of-sale terminal, wherein the second communication channel is different from the first communication channel.

17. The secure element of claim 16, wherein the data exchange includes exchanging an identification code.

18. The secure element of claim 17, wherein the identification code is a personal identification number (PIN).

19. The secure element of claim 16, wherein the data exchange includes using a session key that is only valid for a given communication session between the mobile communication device and the management server.

20. The secure element of claim 16, wherein access to data associated with the data exchange is controlled.

21. The secure element of claim 20, wherein access to the data is controlled by deleting cached data from the mobile communication device memory and from the secure element memory.

22. The secure element of claim 20, wherein access to the data is controlled by disabling the secure element.

23. The secure element of claim 16, wherein the user is prompted for biometric data before allowing the user to conduct the transaction.

24. The secure element of claim 16, wherein the user is prompted for multifactor authentication before allowing the user to conduct the transaction.

25. The secure element of claim 16, wherein the secure element is permanently embedded within the body of the mobile communication device.

26. The secure element of claim 16, wherein the secure element is affixed externally to the mobile communication device.

27. The secure element of claim 16, wherein the secure element is removably embedded in a slot of the mobile communication device.