SECURE DEVICE BASED NFC TRANSACTIONS

• US 20130041769A1
• Filed: 10/12/2012
• Published: 02/14/2013
• Est. Priority Date: 11/14/2007
• Status: Active Grant

• Current Assignee: Blaze Mobile, Inc.
• Original Assignee: Blaze Mobile, Inc.
• Inventors: Fisher, Michelle
• Granted Patent: US 9,836,744 B2
• Time in Patent Office: Days
• US Class Current: 705/18
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 30/0238 at point-of-sale [POS]
• CPC Class Codes: H04B 5/72 for local intradevice communication
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/082 : using revocation of authorisation
• CPC Class Codes: H04W 4/80 : Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 88/06 : adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

A method for transmitting data between a mobile communication device and a server. The method includes running a mobile application on the mobile communication device. The mobile application is hosted on the mobile communication device through the server as a Software as a Service (SaaS). The method further includes transmitting data associated with the mobile application between the mobile communication device and the server, in which transmission of the data between the mobile communication device and the server is monitored through the server.

Claims

1. A method for conducting a near field communication contactless transaction, the method comprising:

conducting a data exchange between a mobile application running on a mobile device and a management server;

receiving authorization for a user associated with the mobile application running on the mobile device to conduct a near field communication (NFC) contactless transaction with an NFC terminal, wherein authorization is received after the data exchange between a mobile application and the management server;

wherein the mobile device is coupled to a secure element, the secure element is operable to maintain a secure element application maintained in secure element memory and execute the secure element application in response to an NFC trigger by the NFC terminal, wherein the secure element sends transaction data to the NFC terminal.

2. The method of claim 1, wherein the data exchange includes exchanging an identification code.

3. The method of claim 2, wherein the identification code is a personal identification number (PIN).

4. The method of claim 1, wherein the data exchange includes using a session key that is a shared key.

5. The method of claim 1, wherein access to data associated with the data exchange is controlled.

6. The method of claim 5, wherein access to the data is controlled by deleting cached data from the mobile device memory of the mobile device and from the secure element memory of the secure element.

7. The method of claim 6, wherein the secure element application is an identity application and the transaction data includes identity credentials.

8. The method of claim 7, wherein the NFC terminal is a point-of-entry terminal.

9. The method of claim 6, wherein the secure element application is a ticket application and the transaction data includes payment credentials.

10. The method of claim 9, wherein the NFC terminal is a point-of-sale terminal.

11. The method of claim 6, wherein the secure element application is a coupon application and the transaction data includes coupon information.

12. The method of claim 11, wherein the NFC terminal is a point-of-sale terminal.

13. The method of claim 12, wherein the secure element is permanently embedded within the body of the mobile device.

14. The method of claim 12, wherein the secure element is affixed externally to the mobile device.

15. The method of claim 12, wherein the secure element is removably embedded in a slot of the mobile device.

16. The method of claim 12, wherein the mobile device wireless transceiver in the mobile device communicates wirelessly with the secure element wireless transceiver in the secure element.

17. The method of claim 12, wherein the mobile device processor in the mobile device communicates through a wired connection to the secure element processor in the secure element.

18. The method of claim 12, wherein the NFC terminal is a mobile device coupled with a secure element and further wherein the secure element is configured for near field communications.

19. The method of claim 12, wherein the NFC terminal is a secure element and further wherein the secure element includes a chip configured for unidirectional near field communication.

20. A mobile device for conducting a near field communication contactless transaction, the mobile device comprising:

a mobile device memory configured to maintain a mobile application;

a mobile device processor configured to execute the mobile application to conduct a data exchange between the mobile application and a management server;

a mobile device transceiver configured to receive authorization from the management server, wherein the management server permits a user associated with the mobile application running on the mobile device to conduct a near field communication (NFC) contactless transaction with an NFC terminal,

wherein the mobile device is coupled to a secure element, the secure element operable to detect that authorization has been received for executing a secure element application maintained in secure element memory, wherein the mobile device is coupled to a secure element, the secure element is operable to maintain a secure element application maintained in secure element memory and execute the secure element application in response to an NFC trigger by the NFC terminal, wherein the secure element sends transaction data to the NFC terminal.

21. The mobile device of claim 20, wherein the data exchange includes exchanging an identification code.

22. The mobile device of claim 21, wherein the identification code is a personal identification number (PIN).

23. The mobile device of claim 20, wherein the data exchange includes using a session key that is a shared key.

24. The mobile device of claim 20, wherein the NFC terminal is a mobile device coupled with a secure element and further wherein the secure element is configured for near field communications.

25. The mobile device of claim 20, wherein the NFC terminal is a secure element and further wherein the secure element includes a chip configured for unidirectional near field communication.