Security Token for Mobile Near Field Communication Transactions

• US 20130124346A1
• Filed: 11/14/2011
• Published: 05/16/2013
• Est. Priority Date: 11/14/2011
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Barnes, Bruce, Kenny, Patrick, Mallian, Dolores J., Marathe, Nikhil S., Baldwin, Christopher F., Khoshaba, Shadi I., Stahulak, Charles M.
• Granted Patent: US 8,818,867 B2
• Time in Patent Office: Days
• US Class Current: 705/16
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/346 Cards serving only as information carrier of service
• CPC Class Codes: G06Q 20/353 Payments by cards read by M-devices
• CPC Class Codes: G06Q 20/354 Card activation or deactivation
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/4015 using location information
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05

Abstract

Devices, systems, and methods are disclosed which relate to an NFC-enabled security token that is removably coupled to a mobile device. The security token may be provisioned with the information by the mobile device, then decoupled from the mobile device and used to authenticate the user or perform a transaction at a POS terminal equipped with an NFC reader. The security token includes logic for user-controlled restrictions on allowable purchases, such as payment limits, timeouts, vendor identifiers, allowed purchases, and location-based restrictions. The security token is further equipped with “self destruct” security features, such as deactivating itself or erasing any sensitive information upon being unable to contact the mobile device for a specified duration, or being subject to an unauthorized or restricted transaction, until such time as it is re-coupled to the mobile device.

Claims

1. A security token for near field communication (NFC) transactions, comprising:

an NFC transceiver;

a memory in communication with the NFC transceiver, the memory storing transaction information; and

logic on the memory, the logic including instructions for communicating the transaction information to a point-of-sale (POS) terminal based on a determination that no restriction is present,

wherein the NFC transceiver, the memory, and the logic are enclosed in a housing adapted to be removably coupled to a mobile device.

2. The security token of claim 1, wherein the logic further includes instructions for erasing the transaction information from the memory if the restriction is present.

3. The security token of claim 1, wherein the restriction is programmed on the memory by the mobile device.

4. The security token of claim 3, wherein the restriction includes one or more of a payment amount restriction, a timeout restriction, a POS identifier restriction, a purchase restriction, and a location-based restriction.

5. The security token of claim 4, wherein the logic further includes instructions for matching a received POS identifier to an approved POS identifier.

6. The security token of claim 4, wherein the logic further includes instructions for denying payment to the POS terminal if the POS identifier is not approved.

7. The security token of claim 4, wherein the logic further includes instructions for denying payment to the POS terminal if an item to be purchased matches the purchase restriction.

8. The security token of claim 4, further comprising a global positioning system (GPS) receiver to enable the location-based restriction.

9. A mobile device for near-field communication (NFC) transactions, comprising:

a mobile processor;

a mobile memory in communication with the mobile processor;

a security token in communication with the mobile processor via an interface, the security token including an NFC transceiver, a token memory having transaction information stored therein, and a token logic on the token memory, the token logic for enabling a point-of-sale (POS) terminal to access the transaction information based on a determination that no restriction is present; and

logic on the mobile memory for programming the transaction information and the restriction on the security token,

wherein the security token is removably coupled to a housing of the mobile device.

10. The mobile device in claim 9, further comprising a data port coupled to the interface to receive the security token, wherein the logic on the mobile memory further includes instructions for programming the transaction information and the restriction on the security token via the data port.

11. The mobile device in claim 9, further comprising a transceiver in communication with a network, wherein the logic on the mobile memory further includes instructions for transmitting the restriction to a server on the network.

12. The mobile device in claim 9, wherein the logic on the mobile memory further includes instructions for transmitting a status inquiry, and receiving a response status from the security token.

13. The mobile device in claim 9, wherein the logic on the mobile memory is further for presenting a user interface enabling a user to input the restriction and the transaction information.

14. A method for facilitating a near-field communication (NFC) transaction using a security token removably coupled to a mobile device, the method comprising:

receiving transaction information and a restriction at the security token, the transaction information including personal identification information and payment information; and

transmitting the transaction information to a point-of-sale (POS) terminal upon a determination that the restriction is not triggered.

15. The method of claim 14, further comprising

monitoring for the restriction;

and

deactivating the security token if the restriction is triggered.

16. The method of claim 14, wherein the restriction includes one or more of a payment amount, a timeout, a POS identifier, a purchase restriction, and a location-based restriction.

17. The method in claim 14, further comprising transmitting the restriction to the POS terminal.

18. The method in claim 14, further comprising receiving a broadcast from the mobile device, and transmitting a response to the mobile device.

19. The method in claim 14, further comprising erasing the transaction information upon a determination that the restriction is present.

20. The method in claim 14, further comprising transmitting a transaction report to the mobile device upon re-coupling the security token to the mobile device.