INTEGRATING MOBILE PAYMENT APPLICATION WITH OTHER MOBILE APPLICATIONS WHILE PREVENTING SECURITY EXPOSURES

• US 20150199674A1
• Filed: 09/15/2014
• Published: 07/16/2015
• Est. Priority Date: 01/14/2014
• Status: Active Grant

• Current Assignee: Edison Vault, LLC
• Original Assignee: International Business Machines Corporation
• Inventors: Kaplinger, Todd E., Shachor, Gal, Truty, Gregory L.
• Granted Patent: US 10,318,949 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3221 Access to banking information through M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3274 using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
• CPC Class Codes: G06Q 20/342 Cards defining paid or billed services or quantities
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography

Abstract

A method, system and computer program product for integrating a mobile payment application with other mobile applications while preventing security exposures. A set of application programming interfaces of mobile applications that may possibly be utilized by a pass created by a mobile payment application is generated in response to receiving an indication that the pass was created. A “pass,” as used herein, refers to a form of mobile payment, such as a gift card. A selection of these application programming interfaces may then be received to interact with the created pass. In this manner, the existing mobile applications are seamlessly integrated with the features of passes. Furthermore, a virtual container is created for the created pass and the selected application programming interfaces to interface with the created pass. By creating such a container, the data to be exposed to the application layer can be controlled.

Claims

1. A method for integrating a mobile payment application with other mobile applications while preventing security exposures, the method comprising:

receiving an indication that a pass was created by said mobile payment application, wherein said pass corresponds to a form of mobile payment;

generating a view of a set of application programming interfaces exposed to leverage said created pass;

receiving a selection of one or more of said set of application programming interfaces to interact with said created pass; and

creating, by a processor, a virtual container for said created pass and said one or more of said set of application programming interfaces selected to interact with said created pass.

2. The method as recited in claim 1 further comprising:

encrypting a file storage system for storing said virtual container in a mobile operating system.

3. The method as recited in claim 1 further comprising:

encrypting communications at a network transport layer.

4. The method as recited in claim 1 further comprising:

encrypting data of said pass when referenced outside of said virtual container.

5. The method as recited in claim 4, wherein said form of mobile payment comprises a gift card.

6. The method as recited in claim 5, wherein a barcode of said gift card is encrypted when referenced outside of said virtual container.

7. The method as recited in claim 1, wherein said set of application programming interfaces comprises application programming interfaces for enterprise applications.

8. The method as recited in claim 1, wherein said set of application programming interfaces comprises device application programming interfaces.