PERSONAL POINT OF SALE

• US 20130086375A1
• Filed: 09/26/2012
• Published: 04/04/2013
• Est. Priority Date: 09/26/2011
• Status: Active Grant

• Current Assignee: Cubic Corporation
• Original Assignee: Cubic Corporation
• Inventors: Paetzold, Kay, deKozan, David, Lyne, Malcolm
• Granted Patent: US 9,083,486 B2
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/354 Card activation or deactivation
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G07F 7/088 the card reader being part of the point of sale [POS] terminal or electronic cash register [ECR] itself
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: H04B 5/72 for local intradevice communication
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0877 using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]
• CPC Class Codes: H04M 1/675 the user being required to insert a coded card, e.g. a smart card carrying an integrated circuit chip
• CPC Class Codes: H04M 1/72412 using two-way short-range wireless interfaces
• CPC Class Codes: H04M 2250/04 including near field communication means, e.g. RFID
• CPC Class Codes: H04W 12/00 Security arrangements; Authentication; Protecting privacy or anonymity
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 76/12 : Setup of transport tunnels
• CPC Class Codes: H04W 76/14 : Direct-mode setup

Abstract

Embodiments provided herein include techniques for enabling a mobile device to communicate with smart media in a manner that can sidestep the secure element of the mobile device—and the costs associated with it. The mobile device can communicate with the smart media using near-field communication (NFC) by creating an encrypted connection with a remote computer while bypassing a secure element of the mobile device. This allows the mobile device to provide point-of-sale (POS) functionality by reading and/or writing to the smart media, without compromising the security of the smart media.

Claims

1. A method for enabling a mobile device to communicate with a smart media, the method comprising:

providing a user interface with the mobile device, the user interface operable to receive user input;

receiving, with the mobile device, the user input;

reading information from the smart media with the mobile device;

establishing a secure communications link between the mobile device and a remote computer, wherein establishing the secure communications link includes providing at least a portion of the information from the smart media;

receiving encrypted data from the remote computer via the secure communications link; and

communicating the encrypted data to the smart media.

2. The method for enabling the mobile device to communicate with the smart media as recited in claim 1, wherein communicating the encrypted data to the smart media includes writing the encrypted data without using a secure element of the mobile device.

3. The method for enabling the mobile device to communicate with the smart media as recited in claim 1, wherein communicating the encrypted data to the smart media includes communicating with the smart media wirelessly using Near-Field Communications (NFC).

4. The method for enabling the mobile device to communicate with the smart media as recited in claim 1, wherein reading the information from the smart media is based on the user input.

5. The method for enabling the mobile device to communicate with the smart media as recited in claim 1, wherein the smart media comprises at least one of:

a contactless smart card,

a credit card,

a debit card, or

a radio-frequency identification (RFID) tag.

6. The method for enabling the mobile device to communicate with the smart media as recited in claim 1, wherein the smart media is physically attached to the mobile device.

7. The method for enabling the mobile device to communicate with the smart media as recited in claim 6, wherein the smart media is adhesively coupled with the mobile device.

8. The method for enabling the mobile device to communicate with the smart media as recited in claim 1, wherein communicating the encrypted data to the smart media includes changing a value stored in a memory of the smart media.

9. The method for enabling the mobile device to communicate with the smart media as recited in claim 8, wherein the value is used to track usage related to a transit system.

10. The method for enabling the mobile device to communicate with the smart media as recited in claim 1, wherein providing the at least a portion of the information from the smart media includes providing an identifier of the smart media.

11. The method for enabling the mobile device to communicate with the smart media as recited in claim 1, wherein the user input includes at least one of:

login information,

payment source information,

payment amount information, or

an indication of a product or service for purchase.

12. A non-transitory computer-readable medium having instructions embedded thereon enabling a mobile device to communicate with a smart media, the instructions including computer-executable code for:

providing a user interface with the mobile device, the user interface operable to receive user input;

receiving the user input;

reading information from the smart media;

establishing a secure communications link between the mobile device and a remote computer, wherein establishing the secure communications link includes providing at least a portion of the information from the smart media;

receiving encrypted data from the remote computer; and

communicating the encrypted data to the smart media.

13. The non-transitory computer-readable medium as recited in claim 12, wherein communicating the encrypted data to the smart media includes writing the encrypted data without using a secure element of the mobile device.

14. The non-transitory computer-readable medium as recited in claim 12, wherein the smart media comprises at least one of:

a contactless smart card,

a credit card,

a debit card, or

a radio-frequency identification (RFID) tag.

15. The non-transitory computer-readable medium as recited in claim 12, wherein the computer-executable code for providing the user interface includes computer-executable code for displaying a graphical user interface on a display of the mobile device.

16. The non-transitory computer-readable medium as recited in claim 12, wherein providing the at least a portion of the information from the smart media includes providing an identifier of the smart media.

17. The non-transitory computer-readable medium as recited in claim 12, wherein the computer-executable code for receiving the user input includes computer-executable code for receiving at least one of:

login information,

payment source information,

payment amount information, or

a product or service for purchase.

18. A method for enabling a mobile device to communicate with a smart media, the method comprising:

receiving, from a mobile device, identifying information regarding the smart media;

determining, with a computer, an encryption key based on the identifying information;

establishing a secure communications link between the computer and a mobile device, wherein the secure communications link is established, based on at least a portion of information read from the smart media by the mobile device; and

communicating encrypted data to the mobile device, via the secure communications link, to be written on the smart media.

19. The method for enabling the mobile device to communicate with the smart media as recited in claim 18, wherein determining the encryption key further comprises communicating with an external encryption engine.

20. The method for enabling the mobile device to communicate with the smart media as recited in claim 18, wherein the encrypted data includes a value used to track usage related to a transit system.

21. The method for enabling the mobile device to communicate with the smart media as recited in claim 18, wherein the encrypted data includes an indication that a ticket related to the smart media is no longer valid.

22. The method for enabling the mobile device to communicate with the smart media as recited in claim 18, further comprising receiving, from the mobile device at least one of:

login information,

payment source information,

payment amount information, or

an indication of a product or service for purchase.

23. The method for enabling the mobile device to communicate with the smart media as recited in claim 18, further including identifying a user account related to either or both of the smart media or the mobile device.