Systems, methods, and computer program products for securely managing data on a secure element

• US 9,311,491 B2
• Filed: 09/17/2014
• Issued: 04/12/2016
• Est. Priority Date: 09/30/2013
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Watson, Curtis W.
• Primary Examiner(s): Chai, Longbit
• Application Number:
  US14/488,366
• Publication Number:
  US 20150096045A1
• Time in Patent Office: 573 Days
• Field of Search: 726/26
• US Class Current: 1/1
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3563 Software being resident on card
• CPC Class Codes: G06Q 20/36 using electronic wallets or electronic money safes
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/00 Security arrangements; Authentication; Protecting privacy or anonymity
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications

Abstract

Systems, methods, and computer program products are provided for managing applets. A first request to personalize the first applet is received over a communications network. A second request including a command requesting at least a portion of the second applet data is communicated to the second applet. At least a portion of the second applet data is communicated to the first applet. One or more values of the first applet data are replaced with one or more values of at least the portion of the second applet data.

Claims

1. A system for managing applets of mobile wallet applications comprising:

at least one memory operable to store a first applet including first applet data and a second applet including second applet data; and

a hardware processor coupled to the at least one memory, the processor being operable to;

receive, over a communications network, a first request to personalize the first applet;

communicate, in response to receiving the request to personalize the first applet, a second request to the second applet, the second request including a command requesting at least a portion of the second applet data previously stored for use by the second applet;

communicate at least the portion of the second applet data to the first applet upon the second applet being authenticated to the first applet; and

replace one or more values of the first applet data of the first applet with one or more values of at least the portion of the second applet data of the second applet.

2. The system of claim 1, wherein the first applet data and the second applet data each comprise cryptographic parameters including at least one of:

(1) a passcode, and (2) a mobile wallet client unique code.

3. The system of claim 2, wherein the first applet is a set of instructions stored on the at least one memory, which when executed by the processor, cause the processor to manage the first applet data.

4. The system of claim 2, wherein the second applet is a set of instructions stored on the at least one memory, which when executed by the processor, cause the processor to manage the second applet data.

5. The system of claim 1, wherein the system is included in a secure element associated with a mobile device.

6. The system of claim 1, wherein the processor is further operable to:

communicate a notification to the first applet including information indicating that the second applet data is incomplete;

determine incomplete data of the second applet data;

communicate, from the first applet to the second applet, third applet data corresponding to the incomplete data of the second applet data; and

replace values of the second applet data with values of the third applet data.

7. The system of claim 1, wherein the first applet data and the second applet data are exclusively stored and managed by the first applet and the second applet, respectively.

8. A computer-implemented method for managing applets of mobile wallet applications, the method comprising steps of:

receiving, over a communications network, a first request to personalize a first applet, wherein the first applet including first applet data;

communicating, in response to receiving the request to personalize the first applet, a second request to a second applet, the second request including a command requesting at least a portion of second applet data previously stored for use by the second applet;

communicating at least the portion of the second applet data to the first applet upon the second applet being authenticated to the first applet; and

replacing one or more values of the first applet data of the first applet with one or more values of at least the portion of the second applet data of the second applet.

9. The method of claim 8, wherein the first applet data and the second applet data each comprise cryptographic parameters including at least one of:

(1) a passcode, and (2) a mobile wallet client unique code.

10. The method of claim 9, wherein the first applet is a set of instructions stored on the at least one memory, which when executed by a processor, cause the processor to manage the first applet data.

11. The method of claim 9, wherein the second applet is a set of instructions stored on the at least one memory, which when executed by a processor, cause the processor to manage the second applet data.

12. The method of claim 8, wherein the first applet and the second applet are stored in a secure element associated with a mobile device.

13. The method of claim 8, further comprising steps of:

communicating a notification to the first applet including information indicating that the second applet data is incomplete;

determining incomplete data of the second applet data;

communicating, from the first applet to the second applet, third applet data corresponding to the incomplete data of the second applet data; and

replacing values of the second applet data with values of the third applet data.

14. The method of claim 8, wherein the first applet data and the second applet data are exclusively stored and managed by the first applet and the second applet, respectively.

15. A non-transitory computer-readable medium having stored thereon sequences of instructions for managing applets of mobile wallet applications that, when executed by a computer hardware processor, cause the processor to:

receive, over a communications network, a first request to personalize a first applet, wherein the first applet including first applet data;

communicate, in response to receiving the request to personalize the first applet, a second request to a second applet, the second request including a command requesting at least a portion of second applet data previously stored for use by the second applet;

communicate at least the portion of the second applet data to the first applet upon the second applet being authenticated to the first applet; and

replace one or more values of the first applet data of the first applet with one or more values of the at least a portion of the second applet data of the second applet.

16. The non-transitory computer-readable medium of claim 15, wherein the first applet data and the second applet data each comprise cryptographic parameters including at least one of:

(1) a passcode, and (2) a mobile wallet client unique code.

17. The non-transitory computer-readable medium of claim 16, wherein the first applet is a set of instructions stored on a memory, which when executed by the computer processor, cause the computer processor to manage the first applet data.

18. The non-transitory computer-readable medium of claim 16, wherein the second applet is a set of instructions stored on a memory, which when executed by the computer processor, cause the computer processor to manage the second applet data.

19. The non-transitory computer-readable medium of claim 15, wherein the first applet and the second applet are included in a secure element associated with a mobile device.

20. The non-transitory computer-readable medium of claim 15, wherein the sequences of instructions, when executed by the computer processor, further cause the processor to:

communicate a notification to the first applet including information indicating that the second applet data is incomplete;

determine incomplete data of the second applet data;

communicate, from the first applet to the second applet, third applet data corresponding to the incomplete data of the second applet data; and

replace values of the second applet data with values of the third applet data.

21. The non-transitory computer-readable medium of claim 15, wherein the first applet data and the second applet data are exclusively stored and managed by the first applet and the second applet, respectively.