USE OF STATE OBJECTS IN NEAR FIELD COMMUNICATION (NFC) TRANSACTIONS

• US 20140074722A1
• Filed: 09/12/2012
• Published: 03/13/2014
• Est. Priority Date: 09/12/2012
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Abel, Miller
• Granted Patent: US 10,891,599 B2
• Time in Patent Office: Days
• US Class Current: 705/71
• CPC Class Codes: G06Q 20/045 using payment protocols involving tickets
• CPC Class Codes: G06Q 20/223 based on the use of peer-to-peer networks
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G07B 15/00 Arrangements or apparatus for collecting fares, tolls or entrance fees at one or more control points handling coins or valuable papers, e.g. banknotes, G07D; apparatus for vending or hiring articles or services activated by coins, credit cards, paper currency or the like G07F7/00, G07F17/00
• CPC Class Codes: H04B 5/0031 for data transfer
• CPC Class Codes: H04B 5/72 for local intradevice communication

Abstract

A near field communication (NFC)-enabled client device includes one or more computer-readable storage media and an NFC interface component operational in a card emulation mode of an NFC protocol. The client device also includes an application for performing a transaction using the NFC protocol. The application is stored on the one or more computer-readable storage media. Programming logic is configured to receive and store a state object (e.g., a cookie) provided by a security authority using the NFC protocol when performing a transaction using the application. The state object includes an identifier, data payload and a public key associated with the security authority. The programming logic is also configured to transmit the state object to the security authority upon receiving an HTTP operation identifying the state object.

Claims

1. A method of handling client state information during a transaction performed using a short-range wireless communication protocol, comprising:

receiving a state object from a security authority in accordance with a short-range wireless communication protocol, said state object including an identifier, data payload and a public key associated with the security authority;

storing the state object; and

supplying data over the short-range wireless communication protocol in response to a read request delivered over the short-range communication protocol, the data including the state object.

2. The method of claim 1 in which the data payload is inaccessible to the user and accessible to the security authority.

3. The method of claim 1 further comprising digitally signing the identifier, the data payload and the public key using a private key of the security authority.

4. The method of claim 3 in which the read request includes the identifier of the state object, said identifier being digitally signed using the private key of the security authority.

5. The method of claim 4 further comprising validating the read request by verifying the digital signature of the security authority using the public key of the security authority.

6. The method of claim 1 in which the state object is associated with a single service associated with the transaction.

7. The method of claim 1 in which the request is received from a point-of-sale terminal.

8. The method of claim 1 in which the short-range wireless communication protocol is a Near Field Communication (NFC) protocol.

9. The method of claim 8 in which the state object is received and stored by an NFC-enable client device operating in a card emulation mode.

10. The method of claim 8 in which the state object is received and stored by an NFC-enabled device operating in a peer-to-peer mode.

11. An NFC-enabled client device, comprising:

one or more computer-readable storage media;

an NFC interface component operational in a card emulation mode of an NFC protocol;

an application for performing a transaction using the NFC protocol, said application being stored on the one or more computer-readable storage media;

programming logic configured to (i) receive and store a state object provided by a security authority using the NFC protocol when performing a transaction using the application, said state object including an identifier, data payload and a public key associated with the security authority and (ii) transmit the state object to the security authority upon receiving a request identifying the state object.

12. The NFC-enabled client device of claim 11 in which the data payload is inaccessible to the user and accessible to the security authority.

13. The NFC-enabled client device of claim 12 in which the identifier, the data payload and the public key are digitally signed using a private key of the security authority.

14. The NFC-enabled client device of claim 13 in which the request is a read request that includes the identifier of the state object, said identifier being digitally signed using the private key of the security authority.

15. The NFC-enabled client device of claim 14 in which the programming logic is further configured to validate the read request by verifying the digital signature of the security authority using the public key of the security authority.

16. The NFC-enabled client device of claim 11 in which the state object is associated with a single service associated with the transaction.

17. One or more computer-readable storage media containing instructions which, when executed by one or more processors perform a method comprising:

reading with an NFC reader a state object stored in a mobile device;

authorizing the mobile device to perform a transaction using an NFC protocol based on data included with the state object.

18. The one or more computer-readable storage media of claim 17 in which the transaction includes providing access to a resource by the mobile device.

19. The one or more computer-readable storage media of claim 17 in which the transaction includes payment by the mobile device for a product or service.

20. The one or more computer-readable storage media of claim 17 in which the state object is an HTTP cookie.