DATA TRANSFER FROM A NEAR FIELD COMMUNICATION TERMINAL TO A REMOTE SERVER WITH PRIOR AUTHENTICATION

• US 20130035967A1
• Filed: 10/11/2012
• Published: 02/07/2013
• Est. Priority Date: 11/14/2007
• Status: Active Grant

• Current Assignee: Blaze Mobile, Inc.
• Original Assignee: Blaze Mobile, Inc.
• Inventors: Fisher, Michelle
• Granted Patent: US 8,694,436 B2
• Time in Patent Office: Days
• US Class Current: 705/5
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 30/0238 at point-of-sale [POS]
• CPC Class Codes: H04B 5/72 for local intradevice communication
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/082 : using revocation of authorisation
• CPC Class Codes: H04W 4/80 : Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 88/06 : adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

A method for transmitting data between a mobile communication device and a server. The method includes running a mobile application on the mobile communication device. The mobile application is hosted on the mobile communication device through the server as a Software as a Service (SaaS). The method further includes transmitting data associated with the mobile application between the mobile communication device and the server, in which transmission of the data between the mobile communication device and the server is monitored through the server.

Claims

1. A method comprising:

maintaining a near field communication (NFC) application and transaction data in a secure element memory included in a secure element;

determining that a data exchange between a mobile application running on a mobile device and a remote server has occurred, wherein the remote server permits a user associated with the mobile application running on the mobile device to conduct an NFC transaction as a result of the data exchange;

executing the NFC application using a secure element processor in response to an NFC induction based trigger from an NFC terminal;

transmitting transaction data using a secure element NFC transceiver, wherein the transaction data is transmitted upon execution of the NFC application;

receiving response information from the NFC terminal using the secure element NFC transceiver included in the secure element, wherein the secure element is coupled to the mobile device comprising a mobile device memory, a mobile device processor, and a mobile device transceiver; and

transmitting response information to the mobile device transceiver, wherein the mobile device transceiver subsequently transmits response information to the remote server, wherein the secure element uses a radio transceiver included in the secure element to transmit data to the mobile device.

2. The method of claim 1, wherein the data exchange includes exchanging an identification code.

3. The method of claim 2, wherein the identification code is a personal identification number (PIN).

4. The method of claim 1, wherein the data exchange includes using a session key that is a shared key.

5. The method of claim 1, wherein the NFC application is a payment application and the transaction data includes payment credentials.

6. The method of claim 5, wherein the NFC terminal is a point-of-sale terminal.

7. The method of claim 1, wherein the NFC application is an identity application and the transaction data includes identity credentials.

8. The method of claim 7, wherein the NFC terminal is a point-of-entry terminal.

9. The method of claim 1, wherein the NFC application is a ticket application and the transaction data includes payment credentials.

10. The method of claim 1, wherein the NFC application is a coupon application and the transaction data includes coupon information.

11. The method of claim 1, wherein the secure element is physically coupled to the mobile device but electrically decoupled from electrical interior components of the mobile device.

12. The method of claim 1, wherein the secure element is physically coupled to the mobile device and electrically coupled to electrical interior components of the mobile device.

13. The method of claim 1, wherein the secure element is included within the body of a memory card configured for placement in a memory card slot in the mobile device.

14. The method of claim 1, wherein the secure element is embedded within the body of the mobile device.

15. The method of claim 1, wherein the secure element includes a radio frequency (RF) absorbent material in an outer shell housing the secure element to shield the secure element from interference generated by the interior components of the mobile device, wherein the outer shell has a maximum width of 25 mm and a maximum thickness of 5 mm.

16. A system comprising:

a secure element memory configured to maintain a near field communication (NFC) application and transaction data, wherein it is determined that a data exchange between a mobile application running on a mobile device and a remote server has occurred, wherein the remote server permits a user associated with the mobile application running on the mobile device to conduct an NFC transaction as a result of the data exchange;

a secure element processor configured to execute the NFC application in response to an NFC induction based trigger from an NFC terminal;

a secure element first transceiver configured to send transaction data and receive response information from the NFC terminal, wherein the secure element is coupled to the mobile device comprising a mobile device memory, a mobile device processor, and a mobile device transceiver; and

a secure element second transceiver configured to transmit response information to the mobile device transceiver, wherein the mobile device transceiver subsequently transmits response information to the remote server.

17. The system of claim 16, wherein the data exchange includes exchanging an identification code.

18. The system of claim 17, wherein the identification code is a personal identification number (PIN).

19. The system of claim 16, wherein the data exchange includes using a session key that is a shared key.

20. The system of claim 16, wherein the NFC application is a payment application and the transaction data includes payment credentials.