Security token for mobile near field communication transactions

• US 8,818,867 B2
• Filed: 11/14/2011
• Issued: 08/26/2014
• Est. Priority Date: 11/14/2011
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Kenny, Patrick J., Baldwin, Christopher F., Khoshaba, Shadi I., Barnes, Bruce, Mallian, Dolores J., Marathe, Nikhil S., Stahulak, Charles M.
• Primary Examiner(s): ZARE, SCOTT A
• Application Number:
  US13/295,455
• Publication Number:
  US 20130124346A1
• Time in Patent Office: 1,016 Days
• Field of Search: 705/16
• US Class Current: 705/16
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/346 Cards serving only as information carrier of service
• CPC Class Codes: G06Q 20/353 Payments by cards read by M-devices
• CPC Class Codes: G06Q 20/354 Card activation or deactivation
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/4015 using location information
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography

Abstract

Devices, systems, and methods are disclosed which relate to an NFC-enabled security token that is removably coupled to a mobile device. The security token may be provisioned with the information by the mobile device, then decoupled from the mobile device and used to authenticate the user or perform a transaction at a POS terminal equipped with an NFC reader. The security token includes logic for user-controlled restrictions on allowable purchases, such as payment limits, timeouts, vendor identifiers, allowed purchases, and location-based restrictions. The security token is further equipped with “self destruct” security features, such as deactivating itself or erasing any sensitive information upon being unable to contact the mobile device for a specified duration, or being subject to an unauthorized or restricted transaction, until such time as it is re-coupled to the mobile device.

Claims

1. A mobile device comprising:

a mobile processor;

a security token in communication with the mobile processor via an interface, the security token comprising

a near field communications transceiver,

a token memory that stores transaction information and a token logic that, when executed by the security token, enables a point-of-sale terminal to access the transaction information based on a determination that no restriction is present, wherein the security token is removably coupled to a housing of the mobile device; and

a mobile memory that stores instructions that, when executed by the mobile processor, causes the mobile processor to perform operations comprising programming the transaction information and the restriction on the security token, wherein the restriction comprises a point-of-sale identifier restriction that is programmed on the mobile memory by the mobile device.

2. The mobile device of claim 1, further comprising instructions that, when executed by the mobile processor, cause the mobile processor to erase the transaction information from the mobile memory if the restriction is present.

3. The mobile device of claim 1, further comprising instructions that, when executed by the mobile processor, cause the mobile processor to match a received point-of-sale identifier to an approved point-of-sale identifier.

4. The mobile device of claim 1, further comprising instructions that, when executed by the mobile processor, cause the mobile processor to deny payment to the point-of-sale terminal if the point-of-sale identifier is not approved.

5. The mobile device of claim 1, wherein the restriction further comprises a purchase restriction, and wherein the instructions further comprise instructions that, when executed by the mobile processor, cause the mobile processor to deny payment to the point-of-sale terminal if an item to be purchased matches the purchase restriction.

6. The mobile device of claim 1, further comprising a global positioning system receiver that enables a location-based restriction.

7. The mobile device in claim 1, further comprising;

a data port that receives the security token; and

instructions that, when executed by the mobile processor, causes the mobile processor to perform operations comprising programming the transaction information and the restriction on the security token via the data port.

8. The mobile device in claim 1, further comprising;

a transceiver in communication with a network; and

instructions that, when executed by the mobile processor, causes the mobile processor to perform operations comprising transmitting the restriction to a server on the network.

9. The mobile device in claim 1, further comprising instructions that, when executed by the mobile processor, causes the mobile processor to perform operations comprising transmitting a status inquiry, and receiving a response status from the security token.

10. The mobile device in claim 1, further comprising instructions that, when executed by the mobile processor, causes the mobile processor to perform operations comprising presenting a user interface enabling a user to input the restriction and the transaction information.

11. A mobile device comprising:

a housing;

an interface;

a mobile processor;

a security token in communication with the mobile processor via the interface, the security token comprising

a near field communications transceiver,

a token memory that stores transaction information and a token logic that, when executed, causes the security token to enable a point-of-sale terminal to access the transaction information based on a determination that no restriction is present, wherein the security token is removably coupled to a housing of the mobile device; and

a mobile memory that stores instructions that, when executed by the mobile processor, causes the mobile processor to perform operations comprising programming the transaction information and the restriction on the security token, wherein the restriction is programmed on the mobile memory by the mobile device, and wherein the restriction comprises a point-of-sale identifier restriction.

12. The mobile device of claim 11, further comprising:

a data port coupled to the interface to receive the security token; and

instructions that, when executed by the mobile processor, causes the mobile processor to perform operations comprising programming the transaction information and the restriction on the security token via the data port.

13. The mobile device of claim 11, further comprising:

a transceiver in communication with a network; and

instructions that, when executed by the mobile processor, causes the mobile processor to perform operations comprising transmitting the restriction to a server on the network.

14. The mobile device of claim 11, further comprising instructions that, when executed by the mobile processor, cause the mobile processor to perform operations further comprising transmitting a status inquiry, and receiving a response status from the security token.

15. The mobile device in claim 11, further comprising instructions that, when executed by the mobile processor, cause the mobile processor to perform operations further comprising presenting a user interface that enables inputting the restriction and the transaction information.

16. A mobile device comprising:

a mobile processor;

a security token in communication with the mobile processor via an interface, the security token comprising

a near field communications transceiver,

a token memory that stores transaction information and a token logic that, when executed by the security token, enables a point-of-sale terminal to access the transaction information based on a determination that no restriction is present, wherein the security token is removably coupled to a housing of the mobile device; and

a mobile memory that stores instructions that, when executed by the mobile processor, causes the mobile processor to program the transaction information and the restriction on the security token, wherein the restriction is programmed on the mobile memory by the mobile device, and wherein the restriction comprises a point-of-sale identifier restriction.

17. The mobile device of claim 16, further comprising instructions on the mobile memory that, when executed by the mobile processor, cause the mobile processor to perform operations comprising programming the transaction information and the restriction on the security token via the data port.

18. The mobile device of claim 16, further comprising instructions on the mobile memory that, when executed by the mobile processor, cause the mobile processor to perform operations comprising transmitting the restriction to a server on the network.

19. The mobile device of claim 16, further comprising instructions on the mobile memory that, when executed by the mobile processor, cause the mobile processor to perform operations comprising transmitting a status inquiry and receiving a response status from the security token.

20. The mobile device in claim 16, further comprising instructions on the mobile memory that, when executed by the mobile processor, cause the mobile processor to perform operations comprising presenting a user interface that enables inputting the restriction and the transaction information.