Secure element as a digital pocket

• US 9,405,898 B2
• Filed: 05/10/2014
• Issued: 08/02/2016
• Est. Priority Date: 05/10/2013
• Status: Active Grant

• Current Assignee: Proxense, LLC
• Original Assignee: Proxense, LLC
• Inventors: Giobbi, John Joseph
• Primary Examiner(s): Song, Hosuk
• Application Number:
  US14/274,711
• Publication Number:
  US 20140337920A1
• Time in Patent Office: 815 Days
• Field of Search: 713/168, 713/182, 713/185, 713/186, 713/193, 726 2- 5, 726/9, 380/270, 382115-118, 382/124
• US Class Current: 1/1
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

The disclosure includes a system and method in which one or more virtual resources are presented to a secure element; and the one or more virtual resources are mapped to available resources based on a model architecture for the secure element in order to provide hardware abstraction, the available physical resources varying based on the model architecture and an associated host device, the virtual resources allowing consistent interaction with the virtual resources regardless of variation in the physical resources available and their location. The hardware abstraction increases the versatility of the secure element and may contribute to the secure element'"'"'s functionality. The secure element providing functionality to replace most items carried in an individual'"'"'s pockets, e.g., logical and physical keys, a thumb drive, identification, credit and debit cards, etc.

Claims

1. A system comprising:

a secure element configured to wirelessly communicate directly with an associated host device, the secure element including a memory storing data and a wireless storage module executable by a processor of the secure element; and

the associated host device including a link module executable by a processor, the link module of the associated host device cooperating with the wireless storage module of the secure element to wirelessly mount at least a portion of the memory as a storage drive of the associated host device.

2. The system of claim 1, the system comprising:

a biometric sensor configured to obtain physical or behavioral characteristics from a user; and

an identification module executable by the processor of the secure element to authenticate the user as an owner of the secure element based on the obtained physical or behavioral characteristic.

3. The system of claim 2, wherein one or more of the mounting of the portion of the memory and a user accessing the mounted portion of the memory is responsive successful authentication of the user as the owner of the secure element based on the obtained physical or behavioral characteristic.

4. The system of claim 2, wherein the biometric sensor is included in the secure element.

5. The system of claim 2, wherein the biometric sensor is included in the associated host device, but available to the secure element as a virtual biometric sensor via an abstraction layer.

6. The system of claim 1, wherein the wirelessly mounted portion of the memory appears to the host device as a storage drive physically connected to the host device.

7. The system of claim 1, wherein the mounting of the portion of the memory is based on one or more of a user configurable proximity and a user configurable duration of time for the secure element to be in proximity to the associated host device.

8. A method comprising:

presenting, to a secure element, one or more virtual resources; and

mapping the one or more virtual resources to one or more available physical resources based on a model architecture for the secure element and to provide hardware abstraction, the available physical resources varying based on the model architecture and an associated host device, the virtual resources allowing consistent interaction with the virtual resources regardless of variation in the physical resources available and their location.

9. The method of claim 8, wherein the model architecture is a proxy model architecture, the method comprising:

mapping a first virtual resource to a first resource on the associated host device, and

wherein the mapping allows the secure element to interact with the first virtual resource as if the first virtual resource is a local resource of the secure element, wherein the secure element and the associated computing device are physically separate devices.

10. The method of claim 8, wherein the model architecture is a proxy model architecture, the method comprising:

performing, at the secure element, a functionality of the secure element, the associated host device wirelessly controlling the performance of the functionality, the secure element performing the functionality on behalf of the associated host device, wherein the associated host device is physically separate from the secure element.

11. The method of claim 10, wherein the functionality of the secure element performed is one or more of an authentication and the execution of a financial transaction.

12. The method of claim 8, further comprising:

determining whether the security element is in proximity to the associated host device; and

responsive to determining the secure element is in proximity to the associated host device, permitting access to the associated host device.

13. The method of claim 12, wherein the secure element may associated with one or more additional host devices and permit access to the one or more additional host devices when in proximity to the one or more additional host devices.

14. The method of claim 8, further comprising:

determining whether the security element is in proximity to the associated host device; and

responsive to determining the secure element is in proximity to the associated host device, wirelessly mounting at least a portion of a memory of the secure element on the associated host device, the mounted portion of the memory appearing as a physically connected storage device at the associated host device.

15. The method of claim 14, wherein the secure element may associated with one or more additional host devices and mounts the portion of the memory to the one or more additional host devices when in proximity to the one or more additional host devices.

16. The method of claim 8, wherein the model architecture is a stand-alone model architecture, and the one or more virtual resources are mapped to physical resources available on the secure element.

17. The method of claim 8, wherein the model architecture is a virtual model architecture, and the one or more virtual resources are mapped to physical resources available on the host device, wherein the secure element is a virtual secure element operating on the associated host device, but appearing to other devices as a separate device.

18. The method of claim 8, wherein the secure element is platform agnostic and operates the same regardless of a platform the associated host device is operating.

19. The method of claim 8, wherein the secure element is a single device that performs functionality of a thumb drive, a physical key, a logical key, a proximity based lock and performs user authentication.