METHOD FOR FACILITATING TRANSACTIONS, COMPUTER PROGRAM PRODUCT AND MOBILE DEVICE

• US 20150347779A1
• Filed: 05/28/2015
• Published: 12/03/2015
• Est. Priority Date: 05/28/2014
• Status: Active Grant

• Current Assignee: NXP B.V. (NXP Semiconductors NV)
• Original Assignee: NXP B.V. (NXP Semiconductors NV)
• Inventors: Brands, Jan, Jedema, Friso, Polak, Piotr, van Roermund, Timotheus
• Granted Patent: US 11,126,992 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06Q 20/045 using payment protocols involving tickets
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/36 using electronic wallets or electronic money safes
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G09C 1/00 Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system cryptographic typewriters G09C3/00
• CPC Class Codes: H04L 2209/16 Obfuscation or hiding, e.g. involving white box
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

There is disclosed a method for facilitating transactions carried out by a mobile device, wherein: the mobile device executes a smart card application; the smart card application receives a cryptographic algorithm from a transaction server external to the mobile device; the smart card application further receives transaction data from said transaction server; the cryptographic algorithm encrypts said transaction data and stores the encrypted transaction data in a storage unit of the mobile device. Furthermore, a corresponding computer program product and a corresponding mobile device for carrying out transactions are disclosed.

Claims

1. A method for facilitating transactions carried out by a mobile device, wherein:

the mobile device executes a smart card application;

the smart card application receives a cryptographic algorithm from a transaction server external to the mobile device;

the smart card application further receives transaction data from said transaction server;

the cryptographic algorithm encrypts said transaction data and stores the encrypted transaction data in a storage unit of the mobile device.

2. A method as claimed in claim 1, wherein the cryptographic algorithm retrieves the encrypted transaction data from the storage unit and decrypts the encrypted transaction data, and wherein the smart card application provides the decrypted transaction data to a reader device external to the mobile device.

3. A method as claimed in claim 2, wherein the smart card application further receives a password from the reader device, and wherein the cryptographic algorithm takes said password as an input, such that the cryptographic algorithm correctly decrypts the encrypted transaction data only if said password is correct.

4. A method as claimed in claim 2, wherein the cryptographic algorithm further encrypts the decrypted transaction data again after decrypting the encrypted transaction data and before the smart card application provides the transaction data to the reader device.

5. A method as claimed in claim 2, wherein the smart card application provides the decrypted transaction data to the reader device via near field communication.

6. A method as claimed in claim 1, wherein the cryptographic algorithm is implemented as a white-box implementation comprising a series of look-up tables.

7. A method as claimed in claim 6, wherein at least one of the look-up tables has been compiled using a coding function which takes an identifier of the mobile device as an input.

8. A method as claimed in claim 1, wherein the transaction data are ticket data or access control data.

9. A computer program product comprising instructions which, when being executed by a processing unit of a mobile device, carry out or control respective steps of a method as claimed in claim 1.

10. A mobile device for carrying out transactions, the mobile device being arranged to execute a smart card application,

wherein the smart card application, when being executed by the mobile device, receives a cryptographic algorithm from a transaction server external to the mobile device;

wherein the smart card application, when being executed by the mobile device, further receives transaction data from said transaction server;

wherein the mobile device is further arranged to execute the cryptographic algorithm and wherein the cryptographic algorithm, when being executed by the mobile device, encrypts said transaction data and stores the encrypted transaction data in a storage unit of the mobile device.

11. A mobile device as claimed in claim 10, being a mobile phone or a tablet device.

12. A mobile device as claimed in claim 10, wherein the cryptographic algorithm, when being executed by the mobile device, retrieves the encrypted transaction data from the storage unit and decrypts the encrypted transaction data, and wherein the smart card application, when being executed by the mobile device, provides the decrypted transaction data to a reader device external to the mobile device.

13. A mobile device as claimed in claim 12, comprising a near field communication unit for providing the decrypted transaction data to the reader device.