Enhanced near field communications attachment

• US 9,105,025 B2
• Filed: 05/29/2014
• Issued: 08/11/2015
• Est. Priority Date: 10/17/2011
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Financial Corporation
• Inventors: Poole, Thomas S., Moreton, Paul, Douglas, Hutch, Swider, Anthony, Clarke, Christopher
• Primary Examiner(s): Tsvey, Gennadiy
• Application Number:
  US14/290,347
• Publication Number:
  US 20140279546A1
• Time in Patent Office: 439 Days
• Field of Search: 455/41.1, 455/557
• US Class Current: 1/1
• CPC Class Codes: G06F 9/5061 Partitioning or combining of resources
• CPC Class Codes: G06K 19/0727 the arrangement being a circuit facilitating integration of the record carrier with a hand-held device such as a smart phone of PDA
• CPC Class Codes: G06K 19/077 Constructional details, e.g. mounting of circuits in the carrier
• CPC Class Codes: G06K 19/07701 the record carrier comprising an interface suitable for human interaction
• CPC Class Codes: G06K 19/07707 the visual interface being a display, e.g. LCD or electronic ink
• CPC Class Codes: G06K 19/07715 the interface being used to indicate that the record carrier is active, e.g. a blinking light to indicate that the record carrier is busy communicating with a secondary device or busy computing
• CPC Class Codes: G06K 7/10257 arrangements for protecting the interrogation against piracy attacks computer security in general G06F21/00; jamming of communication, countermeasures H04K3/00; secret communication H04K1/00
• CPC Class Codes: G06Q 20/306 using TV related infrastructures external card used for payment with client device H04N21/4185
• CPC Class Codes: G06Q 20/308 using the Internet of Things
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: G06Q 30/0241 : Advertisements
• CPC Class Codes: G06Q 30/06 : Buying, selling or leasing transactions
• CPC Class Codes: H04B 5/72 : for local intradevice communication
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 : Entity profiles
• CPC Class Codes: H04W 12/06 : Authentication
• CPC Class Codes: H04W 4/80 : Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A secure fob that enables a user to pay for an item or items without needing to present a mobile device. A secure fob may include a proximity capability to ensure that a mobile device is within a particular range, thereby eliminating the risk of fraudulent charges on a stolen fob. In such an embodiment, a fob may be disabled if the fob is not paired with the mobile device by virtue of being disconnected and/or physically separated from the mobile device. The secure fob also may include enhanced features to authorize transactions and locate the mobile device and/or the secure fob.

Claims

1. A contactless attachment, comprising:

a controller that controls the operations of the contactless attachment;

a near field communication antenna;

a secure element that securely stores an account number that is used to identify a financial account and is transmitted from the contactless attachment when processing a financial transaction relating to the financial account;

a power source;

a secure wireless communication module that establishes a secure wireless connection with a mobile device and enables encrypted communication between the contactless attachment and the mobile device;

a token generator that generates a respective token for each financial transaction, the token enabling additional security for the financial transaction; and

a button connected to a button interface, the button being used to initiate transmission of the respective token from the contactless attachment to the mobile device to authorize the financial transaction.

2. The contactless attachment of claim 1, wherein the button is further used to initiate a signal to use the contactless attachment to locate the mobile device.

3. The contactless attachment of claim 1, wherein the secure element comprises at least one computer processor and at least one secure storage module.

4. The contactless attachment of claim 1, further comprising an indicator connected to an indicator interface to provide an indication of the status of the contactless attachment.

5. The contactless attachment of claim 4, wherein the indicator is a light emitting diode.

6. The contactless attachment of claim 1, further comprising a display connected to a display interface.

7. The contactless attachment of claim 1, wherein the contactless attachment is a payment attachment.

8. The contactless attachment of claim 1, wherein the financial account is a credit card account.

9. The contactless attachment of claim 8, wherein the financial transaction is a credit card transaction.

10. The contactless attachment of claim 1, wherein the secure element securely stores the account number upon account provisioning, and wherein the secure wireless communication module receives an account provisioning signal that includes the account number.

11. The contactless attachment of claim 1, further comprising:

an audio interface and a speaker connected to the audio interface,

wherein secure wireless communication module receives a signal from the mobile device, the signal representing an attempt by the mobile device to locate the contactless attachment, and

wherein the audio interface activates the speaker in response to the receipt of the signal by the secure wireless communication module.

12. The contactless attachment of claim 1, wherein secure wireless communication module receives a signal from the mobile device, the signal representing an attempt by the mobile device to locate the contactless attachment, and wherein the contactless attachment activates location services in response to the received signal.

13. A method for initializing an attachment, comprising the steps of:

receiving an encrypted secure element provisioning signal from a trusted service manager, the encrypted secure element provisioning signal including an account number that is used to identify an account and is transmitted from the attachment when processing a transaction relating to the account;

establishing a secure wireless communication channel with the attachment;

using one or more computer processors, sending at least one provisioning instruction, formed as encrypted data, through a secure wireless communication channel to the attachment;

decrypting the secure element provisioning instruction;

provisioning the attachment for use with the account by storing the received account number in a secure element;

binding the attachment to at least one device; and

when processing a transaction relating to the account, receiving a signal that a button on the attachment has been depressed, and in response to the signal,

using a token generator, generating a token, for the transaction being processed, the token enabling additional security for the financial transaction, and

transmitting the token from the attachment to a mobile device to authorize the transaction.

14. The method of claim 13, wherein the at least one encrypted provisioning instruction comprises an account number that is used to identify a financial account and is transmitted from the attachment when processing a financial transaction relating to the financial account.

15. The method of claim 13, wherein the provisioning comprises sending to the attachment information related to a plurality of accounts.

16. The method of claim 13, further comprising restricting software functionality on the attachment if the attachment is disconnected from the device.

17. The method of claim 13, wherein the attachment is a contactless attachment.

18. The method of claim 17, wherein the contactless attachment is a payment attachment.

19. The method of claim 13, wherein the account is a financial account and the transaction is a financial transaction.

20. The method of claim 19, wherein the financial account is a credit card account.

21. The method of claim 19, wherein the financial transaction is a credit card transaction.

22. The method of claim 13, further comprising processing a transaction relating to the account.

23. The method of claim 13, further comprising:

receiving, at a secure wireless communication module, a signal from at least one device, the signal representing an attempt by a mobile device to locate the attachment, and

activating location services in response to the received signal.

24. A method of conducting a transaction using a secure attachment, comprising:

establishing using a secure wireless communication module a connection between the secure attachment and a mobile device, wherein the connection is established using a secure, low-energy technology based on the proximity of the secure attachment and the mobile device, and wherein the secure attachment includes a controller that controls the operations of the secure attachment, a near field communication antenna, a secure element that securely stores an account number that is used to identify a financial account and is transmitted from the secure attachment when processing a financial transaction relating to the financial account, a power source, and the secure wireless communication module; and

receiving a signal that a button on the secure attachment has been depressed, and in response to the signal,

using a token generator of the secure attachment, generating a token, for the financial transaction being processed, the token enabling additional security for the financial transaction, and

transmitting the token from the secure attachment to a mobile device to authorize the financial transaction;

receiving a signal from the mobile device that the financial transaction is authorized; and

transmitting, using the near field communication antenna, the account number to a near field communications reader when the secure connection is established between the secure attachment and a mobile device and the signal is received that the financial transaction is authorized.